摘要:
A key generating device according to an embodiment of the present invention includes: a parameter determining unit that randomly determines a plurality of parameters that are needed when generating a secret key and a public key; a bilinear group selecting unit that selects a plurality of bilinear groups and bilinear mapping on the basis of the plurality of parameters; and a key generating unit that generates the secret key and the public key on the basis of the parameters and the plurality of bilinear groups.
摘要:
A key generation device according to the present invention hierarchically constructs a Y-ary tree structure where n reception devices are assigned to leaves, and forms subgroups where individual intermediate nodes existing between the leaves and a root of the Y-ary tree structure are defined as parent nodes. By providing new parameters to the individual intermediate parameters, the subgroups can be formed flexibly. In a case where no excluded customer exists or the number of excluded customers is small, the size of a header to be delivered and the calculation amount of an operation that a customer needs to perform can be reduced.
摘要:
A terminal device improved with a digraph generation method in a key distribution method of various types of broadcast encryption systems is provided. The terminal device includes an acquiring unit for acquiring information related to a set, which is selected from a plurality of sets representing a combination of a plurality of terminal devices, and which represents some or all of the plurality of terminal devices; an extracting unit for extracting the set contained in the information and to which it belongs; and a digraph generation unit for generating a directional branch for generating a key corresponding to the extracted set in a predetermined digraph formed by a plurality of directional branches.
摘要:
Provided is an authentication device which includes a register in which a first-bit or a second-bit different from the first-bit is stored, m first determination units for determining whether input information and authentication information match, and for storing the first-bit in the register if a result of the determination is TRUE and for storing the second-bit in the register if FALSE, (N−m) second determination units for determining whether input information and authentication information do not match, and for storing the first-bit in the register if a result of the determination is TRUE and for storing the second-bit in the register if FALSE, and an authentication determination unit for determining that an authentication is established, in case the first-bit is stored in the register by a determination process by every first determination unit and the second-bit is stored in the register by a determination process by every second determination unit.
摘要:
Disclosed herein is a device authentication system capable of authenticating devices efficiently using the common key system. When a CE device requests service offerings from a service server, the service server in turn requests the CE device to be authenticated by a device authentication server. Given the request, the CE device causes the device authentication server to perform device authentication on that device and transmits the result of the device authentication to the service server. Upon receipt of the device authentication result from the CE device, the service server causes the device authentication server to check that the authentication has been performed correctly and then starts offering services to the CE device. The CE device and device authentication server share a pass phrase, and each of the two parties checks that the other party indeed retains the pass phrase for mutual authentication.
摘要:
A key providing apparatus for providing a key used for encryption or decryption of data to a predetermined terminal device is provided. The key providing apparatus includes an acquiring unit for acquiring a digraph formed by arranging at least one directional branch connecting the coordinate points on a coordinate axis having a plurality of coordinate points each corresponded with a subset representing a combination of a plurality of terminal devices, an extracting unit for extracting information of all the directional branches contained in the directional path connecting a starting point of the digraph and a predetermined coordinate point, and a key generation unit for generating a key corresponded to a subset to which a predetermined terminal deice belongs based on the digraph, where the information of the directional branch is provided to the predetermined terminal device.
摘要:
A key generation device according to the present invention hierarchically constructs a Y-ary tree structure where n reception devices are assigned to leaves, and forms subgroups where individual intermediate nodes existing between the leaves and a root of the Y-ary tree structure are defined as parent nodes. By providing new parameters to the individual intermediate parameters, the subgroups can be formed flexibly. In a case where no excluded customer exists or the number of excluded customers is small, the size of a header to be delivered and the calculation amount of an operation that a customer needs to perform can be reduced.
摘要:
The present invention is directed to an information processing system composed of plural information processing units adapted for mutually executing data communication, and for executing data processing in which communication data has been applied. The first entity A transmits error notification data on the basis of error detection to execute initial state return processing on the condition that data reception after error notification data has been transmitted is made, and the second entity B transmits error notification data on the basis of error detection to execute initial state return processing on the condition that transmit processing of error notification data is executed. Thus, the both entities A and B can return to the initial state in a manner synchronous with each other. As a result, it becomes possible to perform reliable error recovery and data processing restart.
摘要:
A data processing apparatus capable of testing whether a secure circuit is normal or not while maintaining confidentiality of the secured circuit is provided: wherein the secured circuit conducts a self-diagnostic test thereof in accordance with a self-diagnostic test start instruction signal from a CPU, and the secured circuit outputs a self-diagnostic test result signal indicating whether the secured circuit is normal or not to the CPU.
摘要:
It relates to an information processing unit, a terminal unit, an information processing method, a key generation method and a program that enable reduction of the number of keys to be held by users and aims at providing an information processing unit capable of generating a directed-graph representing an encryption key generation logic to derive a set-key for encrypting a content or a content-key. The technique relates to a scheme that divides a set of user terminals into some subsets, allocates a set-key and an intermediate-key to each subset, and upon input of an intermediate-key correlated with a subset, outputs the set-key corresponding to the subset and the intermediate-key of the subset associated by the directed-edge. Further, it relates to a technique of replacing the directed-edge in the directed-graph with a shorter directed-edge. The effect of reducing the number of intermediate-keys held by each user is expected from the technique.