公开(公告)号：US09311487B2

公开(公告)日：2016-04-12

申请号：US13643671

申请日：2012-03-01

申请人： Yuji Unagami ,  Yuichi Futa ,  Natsume Matsuzaki ,  Hiroki Shizuya ,  Shuji Isobe ,  Atsushi Umeta

发明人： Yuji Unagami ,  Yuichi Futa ,  Natsume Matsuzaki ,  Hiroki Shizuya ,  Shuji Isobe ,  Atsushi Umeta

IPC分类号： H04L9/14 ,  G06F21/57 ,  G06F21/64 ,  H04L9/08

CPC分类号： G06F21/575 ,  G06F21/64 ,  G06F2221/2125 ,  H04L9/085 ,  H04L2209/16

摘要： A management device 200d comprises: a key share generation unit 251d generating a plurality of key shares by decomposing a decryption key, the decryption key being for decrypting an encrypted application program generated as a result of encryption of the application program; and an output unit 252d outputting each of the key shares to a different one of a plurality of detection modules. The detection modules acquire and store therein the key shares. The protection control module 120d comprises: an acquisition unit 381d acquiring the key shares from the detection modules; a reconstruction unit 382d reconstructing the decryption key by composing the key shares; a decryption unit 383d decrypting the encrypted application program with use of the decryption key; and a deletion unit 384d deleting the decryption key, after the decryption by the decryption unit is completed.

摘要翻译： 管理设备200d包括：密钥共享生成单元251d，通过分解解密密钥生成多个密钥共享;解密密钥，用于解密作为应用程序的加密生成的加密应用程序; 以及将每个密钥共享输出到多个检测模块中的不同的检测模块的输出单元252d。 检测模块在其中获取和存储关键股。 保护控制模块120d包括：获取单元381d，从检测模块获取密钥共享; 重构单元382d，通过构成密钥份额来重构解密密钥; 解密单元383d，利用解密密钥对加密的应用程序进行解密; 以及在解密单元的解密完成之后删除解密密钥的删除单元384d。

公开(公告)号：US09165146B2

公开(公告)日：2015-10-20

申请号：US13877833

申请日：2012-08-07

申请人： Kouji Miura ,  Natsume Matsuzaki ,  Yuichi Futa ,  Shunji Harada ,  Hideki Matsushima

发明人： Kouji Miura ,  Natsume Matsuzaki ,  Yuichi Futa ,  Shunji Harada ,  Hideki Matsushima

IPC分类号： G06F21/60 ,  G06F21/10 ,  G06Q10/10

CPC分类号： G06F21/60 ,  G06F21/10 ,  G06Q10/101

摘要： Provided is a content management device for protecting a content of a provider. A content management device 800 deletes one or more contents shared with and held by a user of another device. The content management device 800 comprises: a sharing unit 801 configured to distribute the contents to the user and thereby share the contents with the user; and a switching unit 802 configured to switch a method of the deletion to another method according to a time elapsed from the distribution.

摘要翻译： 提供了一种用于保护提供者的内容的内容管理装置。 内容管理装置800删除由另一装置的用户共享和保持的一个或多个内容。 内容管理装置800包括：共享单元801，被配置为将内容分发给用户，从而与用户共享内容; 以及切换单元802，被配置为根据从分发经过的时间将删除的方法切换到另一种方法。

公开(公告)号：US09152770B2

公开(公告)日：2015-10-06

申请号：US13814773

申请日：2012-08-06

申请人： Hideki Matsushima ,  Teruto Hirota ,  Naoyoshi Otsubo ,  Koichi Morioka ,  Natsume Matsuzaki ,  Norio Sanada

发明人： Hideki Matsushima ,  Teruto Hirota ,  Naoyoshi Otsubo ,  Koichi Morioka ,  Natsume Matsuzaki ,  Norio Sanada

IPC分类号： G06F21/10 ,  G06F21/12 ,  G06F21/14 ,  G06F21/44

CPC分类号： H04L63/0428 ,  G06F21/10 ,  G06F21/121 ,  G06F21/123 ,  G06F21/125 ,  G06F21/14 ,  G06F21/445 ,  G06F21/86 ,  H04W12/04 ,  H04W12/06

摘要： A content reproduction system includes an information processing terminal and a secure device. The information processing terminal receives a copyright protection application program from an application distribution server. The copyright protection application program includes a first program having a first execution format executable in the information processing terminal and a second program having a second execution format different from the first execution format and executable in the secure device. The second program is encrypted with a program key held in the secure device. By extracting and executing the first program, the information processing terminal extracts the second program and transmits the second program to the secure device. The secure device receives the second program from the information processing terminal, decrypts the second program using a program key stored in a key storing unit, and executes the second program.

摘要翻译： 内容再现系统包括信息处理终端和安全装置。 信息处理终端从应用分发服务器接收版权保护应用程序。 版权保护应用程序包括具有在信息处理终端中可执行的第一执行格式的第一程序和具有与第一执行格式不同的第二执行格式并可在安全装置中执行的第二程序。 第二个程序用保存在安全设备中的程序密钥进行加密。 通过提取并执行第一程序，信息处理终端提取第二程序并将第二程序发送到安全装置。 安全装置从信息处理终端接收第二程序，使用存储在密钥存储单元中的程序密钥解密第二程序，并执行第二程序。

公开(公告)号：US08930660B2

公开(公告)日：2015-01-06

申请号：US12526668

申请日：2008-01-31

申请人： Manabu Maeda ,  Masao Nonaka ,  Yuichi Futa ,  Kaoru Yokota ,  Natsume Matsuzaki ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa ,  Masaki Yoshida

发明人： Manabu Maeda ,  Masao Nonaka ,  Yuichi Futa ,  Kaoru Yokota ,  Natsume Matsuzaki ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa ,  Masaki Yoshida

IPC分类号： G06F12/00 ,  H04L9/08

CPC分类号： H04L63/0823 ,  H04L9/085 ,  H04L9/0891

摘要： A distributing device for generating private information correctly even if shared information is destroyed or tampered with. A shared information distributing device for use in a system for managing private information by a secret sharing method, including: segmenting unit that segments private information into a first through an nth pieces of shared information; first distribution unit that distributes the n pieces of shared information to n holding devices on a one-to-one basis; and second distribution unit that distributes the n pieces of shared information to the n holding devices so that each holding device holds an ith piece of shared information distributed by the first distribution unit, as well as a pieces of shared information being different from the ith piece of shared information in ordinal position among n pieces of shared information, “i” being an integer in a range from 1 to n.

公开(公告)号：US08800038B2

公开(公告)日：2014-08-05

申请号：US13375912

申请日：2011-04-15

申请人： Yuichi Futa ,  Yuji Unagami ,  Natsume Matsuzaki ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa

发明人： Yuichi Futa ,  Yuji Unagami ,  Natsume Matsuzaki ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa

IPC分类号： G06F11/00 ,  G06F21/55

CPC分类号： G06F21/55 ,  G06F21/57 ,  G06F2221/2123 ,  G06F2221/2143

摘要： Provided is a tampering monitoring system that can identify a monitoring module that has been tampered with among a plurality of monitoring modules. A management apparatus is provided with an acquisition unit that acquires a new monitoring module that has not been tampered with, a generation unit that generates a decoy monitoring module by modifying the acquired monitoring module, a transmission unit that transmits the decoy monitoring module to the information security device and causes the information security device to install the decoy monitoring module therein, a reception unit that receives from the information security device, after the decoy monitoring module has been installed, monitoring results generated by the monitoring modules monitoring other monitoring modules, and a determination unit that identifies, by referring to the received monitoring results, a monitoring module that determines the decoy monitoring module to be valid and determines the identified monitoring module to be invalid.

摘要翻译： 提供了可以识别在多个监视模块中被篡改的监视模块的篡改监视系统。 一种管理装置，具备获取单元，其获取未被篡改的新的监视模块;生成单元，其通过修改获取的监视模块来生成诱饵监视模块;发送单元，将所述诱饵监视模块发送到所述信息 安全装置，使信息安全装置安装诱饵监视模块，在安装了诱饵监视模块之后从信息安全装置接收监视其他监视模块的监视模块生成的监视结果的接收部，以及 确定单元，其通过参考所接收的监视结果来识别监视模块，其将所述诱饵监视模块确定为有效并且将所识别的监视模块确定为无效。

公开(公告)号：US08726374B2

公开(公告)日：2014-05-13

申请号：US13133029

申请日：2010-02-15

申请人： Yuji Unagami ,  Manabu Maeda ,  Yuichi Futa ,  Natsume Matsuzaki ,  Masao Nonaka ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa ,  Makoto Carlos Miyauchi

发明人： Yuji Unagami ,  Manabu Maeda ,  Yuichi Futa ,  Natsume Matsuzaki ,  Masao Nonaka ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa ,  Makoto Carlos Miyauchi

IPC分类号： H04N21/442 ,  H04N1/00 ,  G06F21/55 ,  H04L27/00

CPC分类号： H04N21/44236 ,  G06F21/55 ,  H04L2027/0034 ,  H04N1/0088

摘要： A management device detects whether any normal monitoring module that has not been tampered with exists by referring to monitoring results received from an information security device and selects, when existence is detected, one of the monitoring modules and assumes that the selected monitoring module has been tampered with. The monitoring device then successively applies a procedure to monitoring modules other than the selected monitoring module by referring to the monitoring results, starting from the selected monitoring module, the procedure being to assume that any monitoring module determining that a monitoring module assumed to have been tampered with is normal has also been tampered with. As a result of the procedure, when all of the monitoring modules are assumed to have been tampered with the management device determines the selected monitoring module to be a normal monitoring module that has not been tampered with.

摘要翻译： 管理设备通过参考从信息安全设备接收到的监视结果来检测是否存在尚未被篡改的任何正常监视模块，并且当检测到存在时选择监视模块中的一个并假定所选监控模块已被篡改 与。 然后，监视装置依次从所选择的监视模块开始，参考监视结果，对所选择的监视模块以外的监控模块应用程序，该过程是假设任何监视模块确定监视模块被假定为被篡改 与正常也被篡改。 作为该过程的结果，当假定所有监视模块被篡改时，管理装置将所选择的监视模块确定为未被篡改的正常监视模块。

公开(公告)号：US08544093B2

公开(公告)日：2013-09-24

申请号：US13143594

申请日：2010-02-15

申请人： Yuji Unagami ,  Manabu Maeda ,  Yuichi Futa ,  Natsume Matsuzaki ,  Masao Nonaka ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa ,  Makoto Carlos Miyauchi

发明人： Yuji Unagami ,  Manabu Maeda ,  Yuichi Futa ,  Natsume Matsuzaki ,  Masao Nonaka ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa ,  Makoto Carlos Miyauchi

IPC分类号： H04L29/06

CPC分类号： G06F21/554

摘要： A malicious-module identification device identifies and deactivates a malicious module operating in an information processing device connected thereto via a network. The malicious-module identification device is provided with a reception unit for receiving results of tampering detection from a plurality of modules for detecting tampering, and a determination unit for assuming that a module among the plurality of modules is a normal module, determining, based on the assumption, whether a contradiction occurs in the received results of tampering detection and identifying the module assumed to be a normal module as a malicious module when determining that a contradiction occurs. A deactivation unit outputs an instruction to deactivate the module identified as the malicious module.

摘要翻译： 恶意模块识别装置识别并去激活在经由网络与其连接的信息处理装置中工作的恶意模块。 恶意模块识别装置设置有用于从多个用于检测篡改的模块接收篡改检测结果的接收单元，以及用于假定多个模块中的模块是正常模块的确定单元，基于 假设在接收到的篡改检测结果中是否发生矛盾，并且在确定发生矛盾时，将假定为正常模块的模块识别为恶意模块。 停用单元输出禁用标识为恶意模块的模块的指令。

公开(公告)号：US08516574B2

公开(公告)日：2013-08-20

申请号：US12624739

申请日：2009-11-24

申请人： Yuji Unagami ,  Manabu Maeda ,  Yuichi Futa ,  Natsume Matsuzaki ,  Masao Nonaka ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa

发明人： Yuji Unagami ,  Manabu Maeda ,  Yuichi Futa ,  Natsume Matsuzaki ,  Masao Nonaka ,  Hiroki Shizuya ,  Masao Sakai ,  Shuji Isobe ,  Eisuke Koizumi ,  Shingo Hasegawa

IPC分类号： G06F17/30 ,  G06F11/00

CPC分类号： G06F21/57

摘要： An update server acquires, from an apparatus, a result of verifications relating to tampering of a protection control module and each of install modules included in an install module group. The update server determines a processing procedure of the apparatus depending on the acquired result of the verifications. Specifically, if it is judged that the protection control module and each of the install modules is unauthentic, then the update server transmits, to the apparatus, an instruction to perform updating of the unauthentic protection control module in preference to a revocation of the unauthentic install module.

摘要翻译： 更新服务器从设备获取与保护控制模块和包括在安装模块组中的每个更新模块的篡改相关的验证结果。 更新服务器根据获取的验证结果确定设备的处理过程。 具体而言，如果判断出保护控制模块和每个更新模块是不正确的，则更新服务器将优先于非真实安装的撤销，向设备发送执行不正当保护控制模块的更新的指令 模块。

公开(公告)号：US20130145477A1

公开(公告)日：2013-06-06

申请号：US13814773

申请日：2012-08-06

申请人： Hideki Matsushima ,  Teruto Hirota ,  Naoyoshi Otsubo ,  Koichi Morioka ,  Natsume Matsuzaki ,  Norio Sanada

发明人： Hideki Matsushima ,  Teruto Hirota ,  Naoyoshi Otsubo ,  Koichi Morioka ,  Natsume Matsuzaki ,  Norio Sanada

IPC分类号： G06F21/10

CPC分类号： H04L63/0428 ,  G06F21/10 ,  G06F21/121 ,  G06F21/123 ,  G06F21/125 ,  G06F21/14 ,  G06F21/445 ,  G06F21/86 ,  H04W12/04 ,  H04W12/06

摘要： A content reproduction system includes an information processing terminal and a secure device. The information processing terminal receives a copyright protection application program from an application distribution server. The copyright protection application program includes a first program having a first execution format executable in the information processing terminal and a second program having a second execution format different from the first execution format and executable in the secure device. The second program is encrypted with a program key held in the secure device. By extracting and executing the first program, the information processing terminal extracts the second program and transmits the second program to the secure device. The secure device receives the second program from the information processing terminal, decrypts the second program using a program key stored in a key storing unit, and executes the second program.

摘要翻译： 内容再现系统包括信息处理终端和安全装置。 信息处理终端从应用分发服务器接收版权保护应用程序。 版权保护应用程序包括具有在信息处理终端中可执行的第一执行格式的第一程序和具有与第一执行格式不同的第二执行格式并可在安全装置中执行的第二程序。 第二个程序用保存在安全设备中的程序密钥进行加密。 通过提取并执行第一程序，信息处理终端提取第二程序并将第二程序发送到安全装置。 安全装置从信息处理终端接收第二程序，使用存储在密钥存储单元中的程序密钥解密第二程序，并执行第二程序。

公开(公告)号：US08452985B2

公开(公告)日：2013-05-28

申请号：US11886712

申请日：2006-04-07

申请人： Natsume Matsuzaki ,  Toshihisa Nakano ,  Shinichi Marui

发明人： Natsume Matsuzaki ,  Toshihisa Nakano ,  Shinichi Marui

IPC分类号： G06F11/30 ,  G06F12/14

CPC分类号： H04L9/0891 ,  H04L2209/60

摘要： The present invention provides an apparatus for securely acquiring a circuit configuration information set corresponding to a new cryptosystem without increasing the number of reconfigurable circuits. A content playback apparatus includes an FPGA that is reconfigurable. The content playback apparatus stores a decryption circuit program that shows the structure of a decryption circuit that executes decryption in accordance with a prescribed cryptosystem. The FPGA is reconfigured in accordance with the program to configure the decryption circuit. The playback apparatus acquires, from outside, an encrypted file that has been generated by encrypting a file including a decryption circuit program corresponding to the new cryptosystem in accordance with the prescribed cryptosystem, and decrypts the encrypted file by the decryption circuit.

摘要翻译： 本发明提供一种用于安全地获取与新密码系统对应的电路配置信息集的装置，而不增加可重构电路的数量。 内容播放装置包括可重新配置的FPGA。 内容重放装置存储解密电路程序，其显示根据规定的密码系统执行解密的解密电路的结构。 根据程序重新配置FPGA以配置解密电路。 回放装置从外部获取通过根据规定的密码系统加密包含与新密码系统相对应的解密电路程序的文件而生成的加密文件，并且通过解密电路解密加密文件。