公开(公告)号：US07974405B2

公开(公告)日：2011-07-05

申请号：US10587308

申请日：2005-01-26

申请人： Jun Furukawa ,  Isamu Teranishi

发明人： Jun Furukawa ,  Isamu Teranishi

IPC分类号： G06F15/16 ,  H04L9/00 ,  H04L9/28

CPC分类号： H04L9/00 ,  H04L9/3013

摘要： In an input process, a circuit and an input bit to the circuit are inputted to a plurality of computers. Firstly, one computer performs calculation and transmits the calculation result to another computer of the computers. Next, the another computer which has received the calculation result performs the next calculation. Thus, calculation is performed by one computer after another. When all the computers have performed calculation once, the last computer which has performed calculation transmits the calculation result to the first computer which has performed calculation. After this, calculation is performed by one computer after another and the calculation result is transmitted to the next computer, thereby repeating the calculation of each cycle. Thus, it is possible to realize calculation of a value of a given function by using a device including a plurality of computers, with a simpler configuration.

摘要翻译： 在输入处理中，电路和电路的输入位被输入到多个计算机。 首先，一台计算机执行计算，并将计算结果发送到计算机的另一台计算机。 接下来，接收到计算结果的另一计算机进行下一次计算。 因此，计算由一台计算机执行。 当所有计算机执行计算一次时，执行计算的最后一台计算机将计算结果发送到已执行计算的第一台计算机。 之后，一台计算机执行计算，并将计算结果发送到下一台计算机，从而重复每个周期的计算。 因此，可以通过使用具有更简单的结构的包括多个计算机的装置来实现给定功能的值的计算。

公开(公告)号：US09600677B2

公开(公告)日：2017-03-21

申请号：US14357478

申请日：2012-11-09

申请人： Kengo Mori ,  Satoshi Obana ,  Jun Furukawa ,  Isamu Teranishi ,  Toshiyuki Isshiki ,  Toshinori Araki

发明人： Kengo Mori ,  Satoshi Obana ,  Jun Furukawa ,  Isamu Teranishi ,  Toshiyuki Isshiki ,  Toshinori Araki

IPC分类号： G06F21/62 ,  G06F17/30 ,  H04L9/00

CPC分类号： G06F21/62 ,  G06F17/30289 ,  G06F21/6227 ,  G06F2221/2107 ,  H04L9/008

摘要： Provided a database apparatus comprising a control means to execute data access control on a database, wherein the control means, receiving a database operation command from a user apparatus, comprises, regarding data and/or metadata to be handled associated with the database operation command, means for executing database operation or computation on encrypted data and/or encrypted metadata as is in ciphertext and means for executing database operation or computation on plaintext data and/or plaintext metadata, and the control means sends a processing result to the user apparatus.

公开(公告)号：US08812877B2

公开(公告)日：2014-08-19

申请号：US13991101

申请日：2012-11-09

申请人： Kengo Mori ,  Satoshi Obana ,  Jun Furukawa ,  Isamu Teranishi ,  Toshiyuki Isshiki ,  Toshinori Araki

发明人： Kengo Mori ,  Satoshi Obana ,  Jun Furukawa ,  Isamu Teranishi ,  Toshiyuki Isshiki ,  Toshinori Araki

IPC分类号： G06F21/00 ,  G06F21/62 ,  G06F21/60

CPC分类号： G06F21/6227 ,  G06F17/30289 ,  G06F21/602 ,  H04L9/008 ,  H04L9/0894 ,  H04L9/14

摘要： A user apparatus connected to database apparatus via network comprises: unit that manages key information in order to encrypt and decrypt; storage unit that stores security configuration information of data and/or metadata; application response unit that determines whether or not encryption is necessary for database operation command, and if encryption is necessary, selects encryption algorithm corresponding to data and/or metadata, performs encryption, and transmits result to database control unit to cause database control unit to execute database operation, if encryption is not necessary, transmits database operation command to database control unit to cause database control unit to execute database operation, and receives processing result transmitted by database control unit, and if decryption or conversion of data and/or metadata of processing result is necessary, performs necessary decryption or conversion, and returns response to database operation command; and security configuration unit that configures security information of data stored in database.

摘要翻译： 经由网络连接到数据库装置的用户装置包括：管理密钥信息以加密和解密的单元; 存储单元，其存储数据和/或元数据的安全配置信息; 确定数据库操作命令是否需要加密的应用程序响应单元，如果需要加密，则选择对应于数据和/或元数据的加密算法，执行加密，并将结果发送到数据库控制单元，以使数据库控制单元执行 数据库操作，如果不需要加密，则将数据库操作命令发送到数据库控制单元，以使数据库控制单元执行数据库操作，并接收数据库控制单元发送的处理结果，以及数据和/或处理元数据的解密或转换 结果是必要的，执行必要的解密或转换，并返回对数据库操作命令的响应; 以及配置存储在数据库中的数据的安全信息的安全配置单元。

公开(公告)号：US20140143549A1

公开(公告)日：2014-05-22

申请号：US14131404

申请日：2012-07-06

申请人： Toshinori Araki ,  Isamu Teranishi ,  Jun Furukawa

发明人： Toshinori Araki ,  Isamu Teranishi ,  Jun Furukawa

IPC分类号： H04L9/32

CPC分类号： H04L9/3242 ,  G06F17/30625 ,  G06F21/62

摘要： An information processing apparatus includes: a storage unit that stores a tree structure formed by nodes, each of which is stores identification information identifying a document; and a registration unit that registers documents in the storage unit. The registration unit receives a document including identification information identifying the document and a word set and a key, registers the identification information in a leaf node in the tree structure, and calculates a secure index corresponding to identification information registered in each node from a root node to the leaf node in the tree structure based on the word set and the key. In addition, the registration unit generates a value calculated by adding the calculated secure index as a search index for the document and stores a value calculated by adding a search index generated for each of a plurality of received documents as a search index for the plurality of documents in the storage unit.

摘要翻译： 一种信息处理设备，包括：存储单元，存储由节点形成的树结构，每个节点存储识别文档的标识信息; 以及注册单元，其将文档注册到存储单元中。 注册单元接收包括识别文档和单词集合和密钥的识别信息的文档，将该识别信息登记在树结构中的叶节点中，并从根节点计算与登记在每个节点中的识别信息相对应的安全索引 在树结构中的叶节点基于字集和密钥。 此外，注册单元生成通过将计算出的安全索引作为文档的搜索索引相加而计算出的值，并且存储通过将针对多个接收文档中的每一个生成的搜索索引相加而计算的值作为多个 文件在存储单元中。

公开(公告)号：US20130246813A1

公开(公告)日：2013-09-19

申请号：US13991101

申请日：2012-11-09

申请人： Kengo Mori ,  Satoshi Obana ,  Jun Furukawa ,  Isamu Teranishi ,  Toshiyuki Isshiki ,  Toshinori Araki

发明人： Kengo Mori ,  Satoshi Obana ,  Jun Furukawa ,  Isamu Teranishi ,  Toshiyuki Isshiki ,  Toshinori Araki

IPC分类号： G06F21/60

CPC分类号： G06F21/6227 ,  G06F17/30289 ,  G06F21/602 ,  H04L9/008 ,  H04L9/0894 ,  H04L9/14

摘要： A user apparatus connected to database apparatus via network comprises: unit that manages key information in order to encrypt and decrypt; storage unit that stores security configuration information of data and/or metadata; application response unit that determines whether or not encryption is necessary for database operation command, and if encryption is necessary, selects encryption algorithm corresponding to data and/or metadata, performs encryption, and transmits result to database control unit to cause database control unit to execute database operation, if encryption is not necessary, transmits database operation command to database control unit to cause database control unit to execute database operation, and receives processing result transmitted by database control unit, and if decryption or conversion of data and/or metadata of processing result is necessary, performs necessary decryption or conversion, and returns response to database operation command; and security configuration unit that configures security information of data stored in database.

公开(公告)号：US07995762B2

公开(公告)日：2011-08-09

申请号：US11995999

申请日：2006-07-18

申请人： Isamu Teranishi ,  Jun Furukawa

发明人： Isamu Teranishi ,  Jun Furukawa

IPC分类号： H04L9/08

CPC分类号： H04L9/3073 ,  H04L9/0833 ,  H04L9/3013 ,  H04L9/3255

摘要： There is provided in accordance with the present invention a key issuing method for being performed by a user apparatus in a group signature system including the user apparatus and an issuer apparatus connected to the user apparatus through a network.

摘要翻译： 根据本发明，提供了一种密钥发布方法，用于由包括用户装置的组签名系统中的用户装置和通过网络连接到用户装置的发行方装置执行。

公开(公告)号：US20090034739A1

公开(公告)日：2009-02-05

申请号：US11995999

申请日：2006-07-18

申请人： Isamu Teranishi ,  Jun Furukawa

发明人： Isamu Teranishi ,  Jun Furukawa

IPC分类号： H04L9/08 ,  H04L9/06

CPC分类号： H04L9/3073 ,  H04L9/0833 ,  H04L9/3013 ,  H04L9/3255

摘要： There is provided in accordance with the present invention a key issuing method for being performed by a user apparatus in a group signature system including the user apparatus and an issuer apparatus connected to the user apparatus through a network. The method comprises: reading an issuer public key from the issuer apparatus into a user storage through the network; receiving, from the issuer apparatus through the network, first confidential data including one or plural confidential texts which are produced by confidentializing the issuer public key using element data containing information of an element of a group in the issuer apparatus; performing a second confidential data generating process for generating second confidential data of a confidential text represented by the product of modulo-exponentiated element data corresponding to the confidential texts included in the first confidential data or a confidential text represented by the sum of the element data multiplied by a constant, using the issuer public key and the first confidential data; sending the second confidential data to the issuer apparatus through the network; receiving, from the issuer apparatus through the network, information generated in the issuer apparatus and based on the element data corresponding to the second confidential data; and generating a member public key which is a public key corresponding to the user apparatus and a member secret key which is a secret key corresponding to the user apparatus, using the information based on the element data corresponding to the second confidential data, and writing the member public key and the member secret key into the user storage.

摘要翻译： 根据本发明，提供了一种密钥发布方法，用于由包括用户装置的组签名系统中的用户装置和通过网络连接到用户装置的发行方装置执行。 该方法包括：通过网络从发行方读取发行者公开密钥到用户存储; 从所述发行方装置通过所述网络接收包括一个或多个机密文本的第一机密数据，所述机密数据是通过使用包含所述发行方装置中的组元素的信息的元素数据来保密所述发行者公开密钥而产生的; 执行第二机密数据生成处理，用于生成由与第一机密数据中包含的机密文本相对应的模幂指数元素数据的乘积表示的机密文本的第二机密数据或由乘以元素数据的总和表示的机密文本 通过一个常数，使用发行者公钥和第一个机密数据; 通过网络向发行者设备发送第二机密数据; 从所述发行方装置通过所述网络接收在所述发行者装置中生成的信息，并且基于与所述第二机密数据对应的元数据; 以及使用基于与第二机密数据相对应的元素数据的信息，生成作为与用户装置对应的公开密钥的成员公钥和作为与用户装置对应的秘密密钥的成员密钥，并且写入 会员公钥和会员密钥进入用户存储。

公开(公告)号：US09300471B2

公开(公告)日：2016-03-29

申请号：US14131404

申请日：2012-07-06

申请人： Toshinori Araki ,  Isamu Teranishi ,  Jun Furukawa

发明人： Toshinori Araki ,  Isamu Teranishi ,  Jun Furukawa

IPC分类号： G06F21/62 ,  H04L9/32 ,  G06F17/30

CPC分类号： H04L9/3242 ,  G06F17/30625 ,  G06F21/62

摘要： An information processing apparatus includes: a storage unit that stores a tree structure formed by nodes, each of which is stores identification information identifying a document; and a registration unit that registers documents in the storage unit. The registration unit receives a document including identification information identifying the document and a word set and a key, registers the identification information in a leaf node in the tree structure, and calculates a secure index corresponding to identification information registered in each node from a root node to the leaf node in the tree structure based on the word set and the key. In addition, the registration unit generates a value calculated by adding the calculated secure index as a search index for the document and stores a value calculated by adding a search index generated for each of a plurality of received documents as a search index for the plurality of documents in the storage unit.

摘要翻译： 一种信息处理设备，包括：存储单元，存储由节点形成的树结构，每个节点存储识别文档的标识信息; 以及注册单元，其将文档注册到存储单元中。 注册单元接收包括识别文档和单词集合和密钥的识别信息的文档，将该识别信息登记在树结构中的叶节点中，并从根节点计算与登记在每个节点中的识别信息相对应的安全索引 在树结构中的叶节点基于字集和密钥。 此外，注册单元生成通过将计算出的安全索引作为文档的搜索索引相加而计算出的值，并且存储通过将针对多个接收文档中的每一个生成的搜索索引相加而计算的值作为多个 存储单元中的文档。

公开(公告)号：US20070156796A1

公开(公告)日：2007-07-05

申请号：US10587308

申请日：2005-01-26

申请人： Jun Furukawa ,  Isamu Teranishi

发明人： Jun Furukawa ,  Isamu Teranishi

IPC分类号： G06F15/00

CPC分类号： H04L9/00 ,  H04L9/3013

摘要： In an input process, a circuit and an input bit to the circuit are inputted to a plurality of computers. Firstly, one computer performs calculation and transmits the calculation result to another computer of the computers. Next, the another computer which has received the calculation result performs the next calculation. Thus, calculation is performed by one computer after another. When all the computers have performed calculation once, the last computer which has performed calculation transmits the calculation result to the first computer which has performed calculation. After this, calculation is performed by one computer after another and the calculation result is transmitted to the next computer, thereby repeating the calculation of each cycle. Thus, it is possible to realize calculation of a value of a given function by using a device including a plurality of computers, with a simpler configuration.

摘要翻译： 在输入处理中，电路和电路的输入位被输入到多个计算机。 首先，一台计算机执行计算，并将计算结果发送到计算机的另一台计算机。 接下来，接收到计算结果的另一计算机进行下一次计算。 因此，计算由一台计算机执行。 当所有计算机执行计算一次时，执行计算的最后一台计算机将计算结果发送到已执行计算的第一台计算机。 之后，一台计算机执行计算，并将计算结果发送到下一台计算机，从而重复每个周期的计算。 因此，可以通过使用包括多个计算机的装置，以更简单的结构来实现给定功能的值的计算。

公开(公告)号：US20130073845A1

公开(公告)日：2013-03-21

申请号：US13700348

申请日：2011-05-23

申请人： Isamu Teranishi ,  Jun Furukawa

发明人： Isamu Teranishi ,  Jun Furukawa

IPC分类号： H04L9/32

CPC分类号： H04L9/3255 ,  H04L9/3221 ,  H04L9/3268 ,  H04L2209/42

摘要： A signature unit, in which a user device generates/transmits digital signature data to an authentication device, includes: a first function, which receives as input a plurality of subsets in which a plurality of characteristics of the users are classified; a second function, which generates a first encrypted text acquired by encrypting a user device public key with an identification device public key; a third function, which generates a second encrypted text, acquired by encrypting characteristic values belonging to a specific subset among the subsets with a characteristic value disclosure device public key; and a fourth function, which employs portions of a group public key and a member certificate to generates a signature of knowledge that denotes that data, of multiplication of a portion of the user device public key and all of the numerical values of a characteristic value certificate corresponding to each of the characteristics, satisfies the specific conditions.

摘要翻译： 用户设备向认证设备生成/发送数字签名数据的签名单元包括：第一功能，其接收用户的多个特征被分类的多个子集作为输入; 第二功能，其生成通过用识别设备公钥加密用户设备公钥而获取的第一加密文本; 第三功能，其生成通过使用特征值公开设备公钥加密属于所述子集中的特定子集的特征值而获取的第二加密文本; 以及第四功能，其使用组公钥和成员证书的部分来生成表示用户设备公钥的一部分与特征值证书的所有数值的乘法的数据的知识签名 对应于每个特性，满足具体条件。