A method for guaranteeing freshness of results for queries against a non-secure data store extends a read operation to include steps of: receiving a read instruction for application data to be read; determining a location within the data store for the application data to be read; validating a message authentication code contained at the location; parsing data contained at the location into the application data and control information, the control information including: a timestamp, a link to a check entry, and a message authentication code; authenticating the control information for each check item associated with the primary item along a path from the primary item to a root each time a primary item is read from the data store by following links; and transmitting the application data to a calling application.