Abstract: An anonymization apparatus (100) includes an anonymization unit (120), a plurality of attack units (131), a degree of safety calculation unit (133), and a parameter adjustment unit (140). The anonymization unit (120) generates anonymized data. Each of the plurality of attack units (131) generates re-identification data that corresponds to the anonymized data using a re-identification attack algorithm that differs from each other. The degree of safety calculation unit (133) calculates a degree of safety of each piece of the re-identification data that each of the plurality of attack units (131) generated. The parameter adjustment unit (140) adjusts an anonymization parameter in a case where at least one of the degrees of safety does not satisfy a degree of safety standard.

Abstract: A random-number generation unit generates a plurality of random numbers from a plurality of seeds. A data scrambling unit conceals concealment target data which is a concealment target by using the plurality of random numbers generated by the random-number generation unit. A transmission unit transmits concealed data which is the concealment target data concealed by the data scrambling unit to a data analysis device, and transmits any seed among the plurality of seeds to the data analysis device, after transmission of the concealed data to the data analysis device.

Abstract: A registration destination determination device (50) determines which data management device, among a plurality of data management devices (20A, 20B), is to manage registration data, such that, with a data type constituting the registration data as a target type, an appearance frequency distribution of values set for the target type of the registration data managed by each of the plurality of data management devices (20A, 20B) is different from an appearance frequency distribution of values set for the target type of the registration data managed by the whole of the plurality of data management devices (20A, 20B).

Abstract: In an information providing apparatus, a rule storage unit stores a processing rule including, as a permitted processing method, a processing method permitted for equipment information transmitted from equipment. Further, a data provision unit acquires a provision request including a processing method of the equipment information as a requested processing method. When the requested processing method matches the permitted processing method included in the processing rule, a data processing unit processes the equipment information by the requested processing method. Further, the data provision unit transmits, as processed information, the processed equipment information to a request source of the provision request.

Abstract: In a search device (102), a data search unit (233) acquires an encrypted query including one keyword from a data storage unit (232), the encrypted query being stored in the storage unit (232) since before the encrypted data is received by the data reception unit (231). The data search unit (233) determines whether a value of the encrypted data and the keyword of the encrypted query coincide, with both of the encrypted data and the encrypted query remaining encrypted. A data transmission unit (234) transmits identification data indicating an identifier of the encrypted query when it is determined by the data search unit (233) that the value of the encrypted data and the keyword of the encrypted query coincide.

Abstract: A random-number generation unit generates a plurality of random numbers from a plurality of seeds. A data scrambling unit conceals concealment target data which is a concealment target by using the plurality of random numbers generated by the random-number generation unit. A transmission unit transmits concealed data which is the concealment target data concealed by the data scrambling unit to a data analysis device, and transmits any seed among the plurality of seeds to the data analysis device, after transmission of the concealed data to the data analysis device.

Abstract: In a server apparatus, a data storage part stores a plurality of pieces of encrypted data. An index storage part stores, as an index I, a data structure which is for performing search with using a function H that outputs a unique numeric value in response to an inputted keyword, the data structure having a plurality of storage areas corresponding, in one-to-one relation, to numeric values outputted from the function H, and storing, for a plurality of keywords corresponding to plaintext data, an identifier of encrypted data being post-encryption data of the plaintext data to which each keyword corresponds, in a storage area corresponding to the numeric value outputted from the function H when each keyword is inputted.

Abstract: This invention is concerning a data disturbance device capable of protecting privacy according to the needs of each individual while maintaining data usability. The data disturbance device has a disturbance object setting unit that calculates a disturbance parameter necessary to disturb information, which is set as information to be disturbed, out of items of information contained in acquired data, and a data disturbance unit that generates disturbed data by irreversibly converting the acquired data using the disturbance parameter.

Abstract: A registration destination determination device (50) determines which data management device, among a plurality of data management devices (20A, 20B), is to manage registration data, such that, with a data type constituting the registration data as a target type, an appearance frequency distribution of values set for the target type of the registration data managed by each of the plurality of data management devices (20A, 20B) is different from an appearance frequency distribution of values set for the target type of the registration data managed by the whole of the plurality of data management devices (20A, 20B).

Abstract: A server device 201 comprises a communication part 231, a search history storage region 213, a data storage part 210, and a checking part 220. The communication part receives a set of a trapdoor and a deterministic encrypted keyword from a search device 401. The search history storage region 213 stores the set of the trapdoor and the deterministic encrypted keyword. The data storage part 210 stores keyword information in which search target data and an encrypted keyword are associated with each other. If the deterministic encrypted keyword is obvious, a deterministic encrypted keyword corresponding to the encrypted keyword is additionally associated with the search target data and the encrypted keyword in the keyword information. The checking part 220 checks whether or not a deterministic encrypted keyword which matches the received deterministic encrypted keyword exists in the search history storage region 213.

Abstract: Methods and systems for transmitting user aggregate data to a third party, such that a privacy of the aggregated data is protected, while analytical usefulness of the aggregated data is preserved. The method including receiving, using a transceiver, aggregated data including time-series data collected over a period of time. Selecting, from a memory, a mapping for transforming a segment of the aggregated data of a predetermined size. Partitioning the aggregated data into a multiple data segments, each data segment is of the predetermined size. Transforming each data segment using the mapping to produce multiple transformed data segments, wherein each data segment is transformed by the mapping independently from other data segments. Finally, transmitting, using the transceiver, the multiple transformed data segments to a third party over a communication channel, wherein steps of the method are performed by a processor operatively connected with the memory and the transceiver.

Abstract: A database (7) stores a first identifier and visiting destination authentication information in association with each other, the first identifier being generated from visitor authentication information which is one of an encrypted face photograph image and key data used for generating the encrypted face photograph image, the visiting destination authentication information being the other of the encrypted face photograph image and the key data. An authentication terminal apparatus (9) receives authentication data from a mobile terminal device (2) used by a visitor (1) who intends to enter a facility and generates a second identifier from the authentication data in the same generation procedure as that of the first identifier.

Abstract: Methods and systems for transmitting user aggregate data to a third party, such that a privacy of the aggregated data is protected, while analytical usefulness of the aggregated data is preserved. The method including receiving, using a transceiver, aggregated data including time-series data collected over a period of time. Selecting, from a memory, a mapping for transforming a segment of the aggregated data of a predetermined size. Partitioning the aggregated data into a multiple data segments, each data segment is of the predetermined size. Transforming each data segment using the mapping to produce multiple transformed data segments, wherein each data segment is transformed by the mapping independently from other data segments. Finally, transmitting, using the transceiver, the multiple transformed data segments to a third party over a communication channel, wherein steps of the method are performed by a processor operatively connected with the memory and the transceiver.

Abstract: In a server apparatus (301), a data storage part (303) stores a plurality of pieces of encrypted data. An index storage part (304) stores, as an index I, a data structure which is for performing search with using a function H that outputs a unique numeric value in response to an inputted keyword, the data structure having a plurality of storage areas corresponding, in one-to-one relation, to numeric values outputted from the function H, and storing, for a plurality of keywords corresponding to plaintext data, an identifier of encrypted data being post-encryption data of the plaintext data to which each keyword corresponds, in a storage area corresponding to the numeric value outputted from the function H when each keyword is inputted.

Abstract: A user terminal includes a common key storage part which stores a common key to a terminal-side storage unit. A PKG takes as input the common key, encrypts information using the common key inputted, and transmits the information encrypted, as encrypted information to a server. The server includes an encrypted information storage part which stores the encrypted information received from the PKG, to a server-side storage unit. The server includes an information transmitting part which transmits, upon reception of an information delivery request from the user terminal, the encrypted information stored in the server-side storage unit, to the user terminal. The user terminal includes a decrypting part which decrypts the encrypted information received, using the common key stored in the terminal-side storage unit, thereby acquiring information.

Abstract: A searchable encryption resistant to frequency analysis. A conversion rule management device generates a conversion rule table associating a search keyword with a conversion keyword group. Based on the conversion rule table, a data registration device generates registration data associating encrypted data with an encrypted keyword, and registers the registration data in a server device. An information processing device obtains from the conversion rule table a conversion keyword group associated with a specified search keyword, generates an encrypted keyword group, and requests a data search by specifying the encrypted keyword group. Using as a search key an encrypted keyword included in the encrypted keyword group, the server device searches for encrypted data associated with the search key, and returns searched encrypted data. The information processing device decrypts the searched encrypted data, and outputs as a search result search data obtained by decryption.

Abstract: A data search server stores a system ciphertext including a data ciphertext and a keyword ciphertext in each category-specific DB unit for each data category, and stores each category-determination secret key being associated with each category-specific DB unit. A search request receiving unit receives from a data search terminal a search request including a search trapdoor and an index tag. A data searching unit searches for a category-determination secret key with which the index tag is decrypted to the same value as a key-determination value. Using the search trapdoor, the data searching unit performs a search of a Public-key Encryption with Keyword Search scheme on system ciphertexts in a category-specific DB unit associated with this category-determination secret key. A search result transmitting unit transmits to the data search terminal a data ciphertext included in a system ciphertext which has been found as a hit in the search.

Abstract: In a wildcard-applicable anonymous hierarchical identity-based encryption system, it is aimed to make the number of pairing operations a fixed number. A user identifier ID and a pattern P are used. The user identifier ID includes k number of hierarchy identifiers. The pattern P includes either of a hierarchy identifier, a wildcard value and a blank value for each hierarchy. An encryption device 400 extracts a key value H corresponding to a hierarchy of the wildcard value and a key value H corresponding to a hierarchy of a pattern value from a public key PK, calculates a cipher value C1 and a cipher value C3, and outputs ciphertext data CT including plaintext cipher value C0, the cipher value C1, and the cipher value C3.

Abstract: A public parameter PK is key information used in a secret search system having: a transmission device generating and sending an encryption tag which is an encrypted keyword; a server receiving and storing the encryption tag and conducting a secret search in response to a request for the secret search; and a reception device generating a trapdoor which corresponds to a digital signature of the keyword and as well data requesting the secret search, sending the trapdoor to the server, and receiving a search result. The public parameter PK includes a true public parameter PP and a protection key PK?. The transmission device and the reception device require both the true public parameter PP and the protection key PK?; however, the server does not require the protection key PK?. The key generation device generates separately the true public parameter PP and the protection key PK? included in the public parameter PK.

Abstract: A data search server stores a system ciphertext including a data ciphertext and a keyword ciphertext in each category-specific DB unit for each data category, and stores each category-determination secret key being associated with each category-specific DB unit. A search request receiving unit receives from a data search terminal a search request including a search trapdoor and an index tag. A data searching unit searches for a category-determination secret key with which the index tag is decrypted to the same value as a key-determination value. Using the search trapdoor, the data searching unit performs a search of a Public-key Encryption with Keyword Search scheme on system ciphertexts in a category-specific DB unit associated with this category-determination secret key. A search result transmitting unit transmits to the data search terminal a data ciphertext included in a system ciphertext which has been found as a hit in the search.