Privacy Preserving and Verifiable Data Access Using Differential Privacy, Authenticated Encryption, and Cryptographic Integrity Verification

Author

Atharva Khandelwal, Bhaskar Birla, Komanduri Kaushik, Neha Vijaykumar Racharla, Allaika Yadav, Mehul Raj Ratra, Karri Chandra Sekhar


Abstract

 Sensitive information systems must protect stored records from unauthorized disclosure and modification while still permitting legitimate statistical analysis. Encryption alone does not control inferential disclosure arising from authorized aggregate queries, and differential privacy alone does not protect raw records at rest. This paper presents an implementation oriented framework that keeps these responsibilities separate while integrating them into one system, using AES 256 GCM authenticated encryption, a SHA 256 Merkle tree with RSA PSS root signing for dataset level integrity, role based access control, a custom Laplace differential privacy mechanism, and a persistent PostgreSQL backed privacy accountant. The prototype is built in Java 21, Spring Boot 3.x, and PostgreSQL 16.4, and is evaluated on synthetic Synthea generated healthcare records so that no real patient information is processed at any stage.

Across seven controlled tampering scenarios and 700 total trials, every attempt was detected, with detection attributed separately to AES GCM authentication, Merkle root verification, and RSA PSS signature verification. Differential privacy evaluation across five query classes at epsilon values from 0.1 to 8 showed mean absolute error and root mean square error decreasing monotonically as epsilon increased, and the persistent privacy accountant correctly enforced sequential composition, rejected over budget requests, and retained its state across an application restart and under concurrent access. On the 10,000 record dataset, the complete framework recorded a mean end to end latency of 46.72 milliseconds compared with 24.91 milliseconds for an unprotected baseline, a statistically significant but practically bounded overhead. The contribution of this work is the integrated architecture, implementation, and empirical evaluation of these mechanisms within one framework, not the invention of the underlying primitives, each of which is adopted from established, cited sources. An earlier Triple DES and RSA implementation is retained only as legacy context, consistent with NIST's withdrawal of the Triple DES recommendation in 2024 [6].



Keywords

Differential Privacy; AES GCM; Merkle Tree; Data Verification; Authenticated Encryption; Privacy Budget; Role Based Access Control; Java; Secure Database.



Full Text:

Download Paper PDF


References


[1] J. Near, D. Darais, N. Lefkovitz, and G. Howarth, "Guidelines for Evaluating Differential Privacy Guarantees," NIST Special Publication 800-226, Mar. 2025, doi: 10.6028/NIST.SP.800-226.

[2] C. Dwork, "Differential Privacy," in Proc. 33rd Int. Colloquium on Automata, Languages and Programming (ICALP), vol. 4052, 2006, pp. 1-12, doi: 10.1007/11787006_1.

[3] C. Dwork and A. Roth, "The Algorithmic Foundations of Differential Privacy," Foundations and Trends in Theoretical Computer Science, vol. 9, nos. 3-4, pp. 211-407, 2014, doi: 10.1561/0400000042.

[4] National Institute of Standards and Technology, M. J. Dworkin, M. Sonmez Turan, and N. Mouha, "Advanced Encryption Standard (AES)," FIPS 197-upd1, May 2023, doi: 10.6028/NIST.FIPS.197-upd1.

[5] M. Dworkin, "Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC," NIST Special Publication 800-38D, Nov. 2007, doi: 10.6028/NIST.SP.800-38D.

[6] E. Barker and N. Mouha, "Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher," NIST Special Publication 800-67 Rev. 2, Nov. 2017, withdrawn Jan. 1, 2024.

[7] R. C. Merkle, "A Digital Signature Based on a Conventional Encryption Function," in Advances in Cryptology, CRYPTO 1987, vol. 293, pp. 369-378, doi: 10.1007/3-540-48184-2_32.

[8] F. D. McSherry, "Privacy Integrated Queries: An Extensible Platform for Privacy Preserving Data Analysis," in Proc. ACM SIGMOD Int. Conf. Management of Data, 2009, pp. 19-30, doi: 10.1145/1559845.1559850.

[9] D. Proserpio, S. Goldberg, and F. McSherry, "Calibrating Data to Sensitivity in Private Data Analysis," Proc. VLDB Endowment, vol. 7, no. 8, pp. 637-648, 2014, doi: 10.14778/2732296.2732300.

[10] N. Johnson, J. P. Near, and D. Song, "Towards Practical Differential Privacy for SQL Queries," Proc. VLDB Endowment, vol. 11, no. 5, pp. 526-539, 2018, doi: 10.1145/3177732.3177733.

[11] R. J. Wilson, C. Y. Zhang, W. Lam, D. Desfontaines, D. Simmons-Marengo, and B. Gipson, "Differentially Private SQL with Bounded User Contribution," Proceedings on Privacy Enhancing Technologies, vol. 2020, no. 2, pp. 230-250, 2020, doi: 10.2478/popets-2020-0025.

[12] F. Alborch Escobar, S. Canard, F. Laguillaumie, and D. H. Phan, "Computational Differential Privacy for Encrypted Databases Supporting Linear Queries," Proceedings on Privacy Enhancing Technologies, vol. 2024, no. 4, pp. 583-604, 2024, doi: 10.56553/popets-2024-0131.

[13] J. Walonoski, M. Kramer, J. Nichols, A. Quina, C. Moesel, D. Hall, C. Duffett, K. Dube, T. Gallagher, and S. McLachlan, "Synthea: An approach, method, and software mechanism for generating synthetic patients and the synthetic electronic health care record," Journal of the American Medical Informatics Association, vol. 25, no. 3, pp. 230-238, 2018, doi: 10.1093/jamia/ocx079.

[14] OWASP Foundation, "SQL Injection Prevention Cheat Sheet," OWASP Cheat Sheet Series. Available: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html (accessed 2026).

[15] OWASP Foundation, "Cross Site Scripting Prevention Cheat Sheet," OWASP Cheat Sheet Series. Available: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html (accessed 2026).

Share your valuable work from Social Media Buttons