## Reducing the servers' computation in private information retrieval: Pir with preprocessing (2000)

### Cached

### Download Links

- [www.iacr.org]
- [www.cs.technion.ac.il]
- [www.cs.bgu.ac.il]
- [www.cs.bgu.ac.il]
- DBLP

### Other Repositories/Bibliography

Venue: | In CRYPTO 2000 |

Citations: | 45 - 8 self |

### BibTeX

@INPROCEEDINGS{Beimel00reducingthe,

author = {Amos Beimel and Yuval Ishai and Tal Malkin},

title = {Reducing the servers' computation in private information retrieval: Pir with preprocessing},

booktitle = {In CRYPTO 2000},

year = {2000},

pages = {56--74},

publisher = {Springer}

}

### Years of Citing Articles

### OpenURL

### Abstract

Abstract. Private information retrieval (PIR) enables a user to retrieve a specific data item from a database, replicated among one or more servers, while hiding from each server the identity of the retrieved item. This problem was suggested by Chor et al. [11], and since then efficient protocols with sub-linear communication were suggested. However, in all these protocols the servers ’ computation for each retrieval is at least linear in the size of entire database, even if the user requires just one bit. In this paper, we study the computational complexity of PIR. We show that in the standard PIR model, where the servers hold only the database, linear computation cannot be avoided. To overcome this problem we propose the model of PIR with preprocessing: Before the execution of the protocol each server may compute and store polynomially-many information bits regarding the database; later on, this information should enable the servers to answer each query of the user with more efficient computation. We demonstrate that preprocessing can save work. In particular, we construct, for any constant k ≥ 2, a k-server protocol with O(n 1/(2k−1)) communication and O(n / log 2k−2 n) work, and for any constants k ≥ 2 and ɛ> 0 a k-server protocol with O(n 1/k+ɛ) communication and work. We also prove some lower bounds on the work of the servers when they are only allowed to store a small number of extra bits. Finally, we present some alternative approaches to saving computation, by batching queries or by moving most of the computation to an off-line stage. 1