PIR schemes with small download complexity and low storage requirements

Shah, Rashmi and Ramchandran recently considered a model for Private Information\ud Retrieval (PIR) where a user wishes to retrieve one of several R-bit messages\ud from a set of n non-colluding servers. Their security model is information-theoretic.\ud Their paper is the first to consider a model for PIR in which the database is not\ud necessarily replicated, so allowing distributed storage techniques to be used. They\ud concentrate on minimising the total number of bits downloaded from the servers.\ud Shah et al. provide a construction of a scheme that requires just R + 1 bits to be\ud downloaded from servers, but requires an exponential (in R) number of servers.\ud We provide an improved scheme that requires a linear number of servers. Shah et\ud al. construct a scheme with linear total storage (in R) that needs at least 2R bits\ud to be downloaded. For any positive �, we provide a construction with the same\ud storage property, that requires at most (1 + �)R bits to be downloaded; moreover\ud one variant of our scheme only requires each server to store a bounded number of\ud bits (in the sense of being bounded by a function that is independent of R). Finally,\ud we simplify and generalise a lower bound due to Shah et al. on the download\ud complexity of such a PIR scheme. In a natural model, we show that an n-server\ud PIR scheme requires at least nR/(n−1) download bits, and provide a scheme that\ud meets this bound