The Access Pattern Leakage Threat

Encrypting data protects its contents from unauthorized parties, but encryption alone does not hide metadata about how data is accessed. Access patterns — which records are read or written, when, and how frequently — can reveal sensitive information even when the data itself is completely encrypted. This gap between content privacy and access privacy is the core motivation for Oblivious RAM.

Access pattern analysis can reveal: which database records a user queries (inferring medical conditions from which records they access), communication patterns (who contacts whom even if message content is encrypted), financial activity (inferring trading strategies from which prices a user requests), and behavioral patterns (daily routines from access times and frequencies). These inferences can be as sensitive as the data content itself.