CSE explained

Data is often communicated across networks and stored on remote servers, which may be unsecured and non-private; eventually, it needs to be browsed, searched for, and manipulated regardless of the location where it is held. In the case of sensitive data (for example, in healthcare), it needs to be kept secure and private throughout the process. State-of-the-art technology regarding sensitive data management on remote servers achieves this objective via sub-optimal combinations: sensitive data is usually made secure by local encryption and then communicated and remotely stored.

In the event of requests to browse or search, it is decrypted on the remote server and then accessed. If manipulation is requested, additional encryption may even be necessary. This combination is functional but sub-optimal as it wastes computational power and exposes sensitive data in a clear-to-read form on remote servers (which are often provided by third-party cloud services). This problem...