公开(公告)号：US20250053638A1

公开(公告)日：2025-02-13

申请号：US18722706

申请日：2021-12-27

Applicant: NEC Corporation

Inventor： Haruna FUKUDA ,  Toshiyuki ISSHIKI ,  Kengo MORI ,  Hiroto TAMIYA

IPC: G06F21/46 ,  G06F17/16

Abstract: A matching system that uses a matching apparatus to match registered information input to a first transformation apparatus and matching information input to a second transformation apparatus, wherein the first transformation apparatus generates a registered feature vector from the registered information, generates a registered concealed vector through calculating a product of the registered feature vector and the registration key matrix by using a regular matrix selected at random as a registration key matrix, and transmits the registered concealed vector to the matching apparatus, the second transformation apparatus generates a matching feature vector from the matching information, generates a matching concealed vector through calculating a product of the matching feature vector and an inverse matrix of the registration key matrix, and transmits the matching concealed vector to the matching apparatus, the matching apparatus calculates an inner product of the registered concealed vector and the matching concealed vector.

公开(公告)号：US20240430101A1

公开(公告)日：2024-12-26

申请号：US18748570

申请日：2024-06-20

Applicant: NEC Corporation

Inventor： Haruna FUKUDA ,  Toshiyuki ISSHIKI

IPC: H04L9/32

Abstract: In a digital signature system, a first processing apparatus performs processing comprising: receiving a first parameter generated using a first signing key and first biometric information to store the first parameter in a storage; receiving a second parameter generated using a second signing key and second biometric information to calculate a key difference between the first signing key and the second signing key from the first parameter and the second parameter; and calculating a value corresponding to a difference between the first biometric information and the second biometric information using the first parameter, the second parameter, and the key difference to verify whether or not the value satisfies a predetermined specified condition.

公开(公告)号：US20220321363A1

公开(公告)日：2022-10-06

申请号：US17615921

申请日：2019-06-05

Applicant: NEC Corporation

Inventor： Toshiyuki ISSHIKI ,  Toshihiko OKAMURA ,  Haruna FUKUDA ,  Hiroto TAMIYA ,  Masahiro NARA

IPC: H04L9/32 ,  H04L9/08

Abstract: The client includes a random number generation unit which generates a random number, a concealed information storage unit which stores concealed information generated by concealing registered information and the generated random number using a secret key, and a response computation unit which, on the basis of a challenge transmitted from the server, the collation information input for collation with the registered information, and the concealed information, computes a response corresponding to the challenge and including a concealed index, generated by concealing an index indicating closeness between the registered information and the collation information. The server includes a challenge generation unit which generates the challenge using a public key corresponding to the secret key, and a determination unit which uses the public key and the random number transmitted from the client to determine whether or not the response transmitted from the client corresponds to the challenge.

公开(公告)号：US20190394018A1

公开(公告)日：2019-12-26

申请号：US16465324

申请日：2016-12-02

Applicant: NEC Corporation

Inventor： Toshiyuki ISSHIKI ,  Haruna HIGO

IPC: H04L9/00 ,  H04L9/08 ,  H04L9/32

Abstract: A ciphertext matching system, includes: a registration target data generation apparatus, a matching request apparatus, a data matching apparatus, and a matching support apparatus. The data matching apparatus generates a first-distance-related ciphertext in which a first distance between registered data and matching target data is kept secret by random numbers. The matching support apparatus generates a public key and a secret key and transmits the generated public key to the individual apparatuses. The data matching apparatus transmits the first-distance-related ciphertext to the matching support apparatus. The matching support apparatus determines whether the first distance obtained by decrypting the first-distance-related ciphertext with the secret key is included in a set of second distances in which the registered data and the matching target data are allowable to be matched each other and transmits a result of the determination to the data matching apparatus.

公开(公告)号：US20240430243A1

公开(公告)日：2024-12-26

申请号：US18736799

申请日：2024-06-07

Applicant: NEC Corporation

Inventor： Yoshitomo WARASHINA ,  Toshiyuki ISSHIKI ,  Kengo MORI ,  Haruna FUKUDA ,  Hidenobu OGURI

IPC: H04L9/40

Abstract: A data management device includes a generation unit, a registration unit, an output unit, an acquisition unit, a determination unit, and a key output unit. The generation unit generates a first secret key that is restorable by a predetermined number of distributed keys. The registration unit registers data encrypted by using the first secret key in a database of a data storage device. The output unit outputs at least one distributed key among the distributed keys used to restore the first secret key to a key management device. The determination unit determines whether to agree to permission of a use request for data in intention expression on agreement or disagreement performed. When it is determined to agree to the permission of the use request for the data, the key output unit outputs, to the key management device, a key necessary for restoring the first secret key.

公开(公告)号：US20240394352A1

公开(公告)日：2024-11-28

申请号：US18667073

申请日：2024-05-17

Applicant: NEC Corporation

Inventor： Yuta SHIMIZU ,  Toshiyuki ISSHIKI ,  Kengo MORI ,  Kazuki INAGAKI ,  Koyo SHIBATA ,  Kohei HIJIKATA

IPC: G06F21/32

Abstract: An authentication apparatus includes biometric information acquiring part which acquires first biometric information of user, certification information adding part, authentication part, and biometric information database which includes second biometric information of user stored in advance. The certification information adding part receives first biometric information from biometric information acquiring part, generates certification information concerning communication rule, notifies authentication part of certification information in advance, and transmits authentication information including certification information and first biometric information configured according to the communication rule shown by certification information to authentication part. The authentication part receives authentication information, verifies legitimacy of certification information in authentication information received using certification information notified in advance, and performs authentication of user using first biometric information in authentication information according to the communication rule shown by certification information with reference to second biometric information in a case where certification information is determined to be legitimate.

公开(公告)号：US20220029829A1

公开(公告)日：2022-01-27

申请号：US17311475

申请日：2018-12-12

Applicant: NEC Corporation

Inventor： Haruna FUKUDA ,  Toshiyuki ISSHIKI

IPC: H04L9/32

Abstract: Provided is an authentication system capable of preventing determination that authentication of a person to be authenticated succeeds even though determination as to whether matching information matches registration information is not performed when authentication using two factors is performed. A determination unit 43 determines whether or not the matching information matches the registration information. A signature generation unit 21 of a client 10 generates a signature based on the message by using a signature key. A signature determination unit 34 determines whether or not the signature is a correct signature by using a first verification key, a message, and the signature. When it is determined that the matching information matches the registration information and it is determined that the signature is the correct signature, the authentication determination unit 37 determines that the authentication succeeds.

公开(公告)号：US20220029812A1

公开(公告)日：2022-01-27

申请号：US17311745

申请日：2018-12-12

Applicant: NEC Corporation

Inventor： Hiroto TAMIYA ,  Toshiyuki ISSHIKI ,  Masahiro NARA ,  Haruna FUKUDA

IPC: H04L9/32 ,  H04L9/08 ,  H04L9/00

Abstract: A client 30 includes a concealed information storage unit 31 which stores concealed information obtained by concealing registered information by use of a public key, an information generation unit 32 which, on the basis of the concealed information and a random number, generates, by use of the public key, generation source information that is information for generating a challenge, and a response computation unit 33 which, by use of the challenge sent from a server 40, collation information to be collated against the registered information, and a random number, computes a response corresponding to the challenge. The server 40 includes a key storage unit 41 which stores a secret key corresponding to the public key, and a challenge generation unit 42 which generates the challenge on the basis of the generation source information sent from the client 30.

公开(公告)号：US20170324563A1

公开(公告)日：2017-11-09

申请号：US15524151

申请日：2015-10-26

Applicant: Satoshi OBANA ,  NEC CORPORATION

Inventor： Toshiyuki ISSHIKI ,  Kengo MORI ,  Toshinori ARAKI ,  Satoshi OBANA

IPC: H04L9/32 ,  H03M13/15 ,  G06F11/10 ,  H04L9/14 ,  H04L9/30

Abstract: In a data registration phase, encrypted data is calculated by encrypting input data to be concealed by using a secret key, registration data is generated based on the encrypted data and a verification key, and the registration data is stored as a registration template in a storage unit together with an identifier for uniquely identifying the registration data. In an encrypted text verification phase, a data verifying request is generated in which input data to be verified has been encrypted by using a random number, the registration template stored in the storage unit and the data verifying request are verified to produce a determined result, a verified result including a part or all of the registration template corresponding to the determined result is produced, and data is restored based on the verified result to produce a restored result.

公开(公告)号：US20250070985A1

公开(公告)日：2025-02-27

申请号：US18808247

申请日：2024-08-19

Applicant: NEC Corporation

Inventor： Haruna FUKUDA ,  Toshiyuki ISSHIKI ,  Saki OTSUKI

IPC: H04L9/32

Abstract: A first processing apparatus in a digital signature system receives a first parameter generated using a first signing key and first biometric information; a second parameter generated using a second signing key and second biometric information; and a second signature generated with the second signing key for a message. Using at least the first parameter, the second parameter, and the second signature received, the first processing apparatus computes a first signature for the message that is able to be verified using a first verification key corresponding to the first signing key.