公开(公告)号：US09496897B1

公开(公告)日：2016-11-15

申请号：US14230655

申请日：2014-03-31

申请人： EMC Corporation

发明人： Nikolaos Triandopoulos ,  Ari Juels ,  Roberto Tamassia ,  James Alan Kelley

IPC分类号： H04L9/00 ,  H03M13/37 ,  H03M13/00 ,  H04L29/06

CPC分类号： H03M13/63 ,  H03M13/3761 ,  H04L9/00 ,  H04L9/002 ,  H04L9/0618 ,  H04L9/0869 ,  H04L9/3226 ,  H04L63/04 ,  H04L63/0428 ,  H04L63/0435 ,  H04L63/123 ,  H04L2209/34

摘要： Methods and apparatus are provided for encoding and decoding via authenticated error correcting codes, such as secure LT codes, secure Raptor codes, block codes and/or rateless codes. Encoded symbols are generated via an authenticated error correcting code by applying a Luby Transform (LT) code to a plurality of message symbols to produce one or more intermediate symbols using a pseudo random number generator (PRNG) to select the plurality of message symbols to combine to produce the intermediate symbols; encrypting the intermediate symbols to produce encrypted symbols; computing an authentication value, such as a message authentication code (MAC), over one or more of the one or more encrypted symbols; and appending the authentication value to the corresponding encrypted symbols to form the encoded symbols. Block scalable and random scalable constructions are also provided, as well as decoding techniques for all of the constructions.

摘要翻译： 提供了通过诸如安全LT代码，安全猛禽代码，块代码和/或无效代码之类的经过认证的纠错码进行编码和解码的方法和装置。 通过对多个消息符号应用Luby变换（LT）代码以使用伪随机数生成器（PRNG）来产生一个或多个中间符号来选择所述多个消息符号以组合，通过经认证的纠错码生成编码符号 产生中间符号; 加密中间符号以产生加密符号; 通过所述一个或多个加密符号中的一个或多个来计算诸如消息认证码（MAC）的认证值; 并将认证值附加到相应的加密符号以形成编码符号。 还提供了块可缩放和随机可扩展的构造，以及用于所有构造的解码技术。

公开(公告)号：US09152716B1

公开(公告)日：2015-10-06

申请号：US13731885

申请日：2012-12-31

申请人： EMC Corporation

发明人： Nikolaos Triandopoulos ,  Michael T. Goodrich ,  Duy Nguyen ,  Olga Ohrimenko ,  Charalampos Papamanthou ,  Roberto Tamassia ,  Cristina Videira Lopes

IPC分类号： G06F17/30

CPC分类号： G06F17/30867

摘要： An improved search engine technique allows a user to ensure that an untrusted search engine provides complete and correct search results without requiring large proofs for large data collections. Thus techniques are presented for a trusted crawler to index a distributed collection of documents and create an authenticated search structure that allows an untrusted search server to return reliably complete and correct search results.

摘要翻译： 改进的搜索引擎技术允许用户确保不受信任的搜索引擎提供完整且正确的搜索结果，而不需要大数据集的大量证明。 因此，为可信赖的爬网程序呈现技术以对分布式文档集合进行索引，并创建一个经过身份验证的搜索结构，允许不受信任的搜索服务器返回可靠的完整且正确的搜索结果。

公开(公告)号：US10409845B1

公开(公告)日：2019-09-10

申请号：US13838793

申请日：2013-03-15

申请人： EMC Corporation

发明人： Charalampos Papamanthou ,  Roberto Tamassia ,  Nikolaos Triandopoulos ,  Dimitrios Papadopoulos ,  Edward Joseph Tremel

IPC分类号： G06F17/30 ,  G06F16/33

摘要： Methods and apparatus are provided for authenticated pattern matching and authenticated exact path queries on outsourced data by a third party server. A source of the outsourced data computes verification information for node and suffix accumulators and sends the data, accumulation values and suffix tree or label trie information to the server; and publishes its public key and the verification digests. The verification may comprise an accumulation tree (AT) or any other public key authentication scheme, such as digital signatures, Merkle Trees and publishing the accumulation values. The server receives the query from a client and the server computes an answer α to the query and a verification proof that are provided to the client. The client then verifies the answer.

公开(公告)号：US08997198B1

公开(公告)日：2015-03-31

申请号：US13731858

申请日：2012-12-31

申请人： EMC Corporation

发明人： James Alan Kelley ,  Roberto Tamassia ,  Nikolaos Triandopoulos

IPC分类号： H04L29/06 ,  G06F21/31

CPC分类号： G06F17/30194 ,  G06F21/335 ,  G06F21/6218 ,  H04L63/06 ,  H04L63/0807 ,  H04L2463/062

摘要： A method is performed by a data server of a plurality of data servers connected to a network, the data server including data storage managed by a remote metadata server, the metadata server managing storage of data across the plurality of data servers. The method includes (a) receiving, via the network, an access request from a client, the access request requesting access to a portion of the data storage of the data server, (b) testing whether the access request includes a data server specific token authenticating that the client has been authorized by the metadata server to access the portion of data storage, and (c) in response to testing, providing the client with access to the portion of data storage on condition that the access request includes the token authenticating that the client has been authorized by the metadata server to access the portion of data storage.

摘要翻译： 由连接到网络的多个数据服务器的数据服务器执行方法，所述数据服务器包括由远程元数据服务器管理的数据存储器，所述元数据服务器管理跨多个数据服务器的数据存储。 该方法包括（a）经由网络从客户端接收访问请求，请求访问数据服务器的数据存储的一部分的访问请求，（b）测试访问请求是否包括数据服务器特定令牌 认证客户端已经被元数据服务器授权以访问数据存储部分，以及（c）响应于测试，在客户端访问数据存储部分的条件下，条件是访问请求包括令牌，以验证该信息 客户端已被元数据服务器授权访问部分数据存储。