Abstract: A search device (60) determines whether or not an auxiliary tag AT corresponding to an auxiliary query AQ obtained by conversion of a keyword exists, among auxiliary tags AT stored in an auxiliary tag storage unit (632) and obtained by conversion of a search word. When it is determined that the auxiliary tag AT corresponding to the auxiliary query AQ exists, the search device (60) specifies an encryption tag ET corresponding to a search query SQ being set with attribute information x indicating an attribute of a user, and the keyword, among encryption tags ET stored in an encryption tag storage unit (633) and being set with an access condition v indicating an accessible attribute, and the search word.

Abstract: A key generation device generates a decryption key dkx having a tag-added decryption key and a decryption key adkx. The tag-added decryption key includes a decryption key tdkx in which a key attribute x is set and a tag tg? required to decrypt a ciphertext with the decryption key tdkx. In the decryption key adkx, the key attribute x is set. An encryption device generates an original ciphertext octy in which a ciphertext attribute y corresponding to the key attribute x is set and which can be decrypted with the tag-added decryption key. A re-encryption key generation device encrypts the decryption key tdkx by an attribute-based encryption scheme using a ciphertext attribute y?, so as to generate a re-encryption key rkx,y? which is a key for generating a re-encrypted ciphertext rcty? which can be decrypted with a decryption key adkx? in which a key attribute x? corresponding to the ciphertext attribute y? is set.

Abstract: A method for balancing load across multiple file servers is disclosed. In one embodiment, such a method includes monitoring load experienced by multiple file servers arranged in an active-active configuration. The method receives, from a client node, a request for an address associated with one of the file servers. The method determines a particular file server of the file servers that, if assigned to the client node, would reduce load imbalance between the file servers. In certain embodiments the particular file server is the file server experiencing the least load. The method returns, to the client node in response to the request, an address associated with the particular file server, thereby enabling the client node to mount the particular file server to access files thereon. A corresponding system and computer program product are also disclosed.

Abstract: An encryption device (50) generates a ciphertext. A master re-encryption key generation device (40) generates a master re-encryption key that cannot decrypt a ciphertext generated by the encryption device (50), but can generate a re-encryption key for changing an access range for a ciphertext generated by the encryption device (50). A re-encryption device (60) generates a re-encryption key for re-encrypting a target ciphertext generated by the encryption device (50), using the master re-encryption key, and re-encrypts the target ciphertext to generate a re-encrypted ciphertext, using the generated re-encryption key.

Abstract: A registration apparatus generates a data random number tuple R that is a tuple of random numbers whose quantity is the same as a level quantity L of a hierarchy that a user attribute forms, and that is also a tuple of uniformly random numbers. Also, the registration apparatus accepts a plaintext M and attribute information B.

Abstract: A registration terminal registers a set of a key and a ciphertext in which an access range is set and in which the key K is encrypted in a key server, and registers a tag for searching generated from the key and a keyword for searching in a search server. A search terminal acquires a ciphertext in which an access range whose range for permitting access includes an attribute is set, and decrypts the ciphertext with a decryption key in which the attribute is set, so as to generate a key. The search terminal generates a trapdoor for searching from the key and a keyword for searching, and transmits the trapdoor to the search server to acquire data corresponding to the keyword.

Abstract: Differentiating video call attendees by receiving an identifier, voice data, and facial image data, for a video call attendee, associating a first machine learning model output, a second machine learning model output and the identifier with the video call attendee, receiving video call data, the video call data comprising voice data and facial image data, identifying the video call attendee from the video call data using the first machine learning model, identifying a display location of the video call attendees face from the video call data using the second machine learning model, augmenting the video call data with a mark at a mark location, and displaying the augmented video call data.

Abstract: An encryption device generates a ciphertext ct including an encryption element C in which a plaintext ? is set, an encryption element Cx in which an attribute x is set, and an encryption element F that is not to be decrypted with a decryption key skf corresponding to a policy f satisfied by the attribute x and in which the plaintext ? is set. A homomorphic computation device converts the ciphertext ct into a ciphertext ct˜ by converting, with the encryption element F, the encryption element C included in the ciphertext ct into an encryption element C˜ that can be decrypted with the decryption key skF corresponding to a policy set F acquired by a policy acquisition unit. The homomorphic computation device performs homomorphic computation g on the ciphertext ct˜ to generate a ciphertext ct*.

Abstract: One or more processors performing an obfuscation action on a display of a first computing device subsequent to activating a transaction application of the first computing device. The method includes one or more processors measuring a distance between the first computing device and a second computing device, wherein the display of the first computing device is directed towards the second computing device. The method further includes the one or more processors determining whether the distance between the first computing device and the second computing device meets a pre-determined threshold distance. In response to determining the distance between the first computing device and the second computing device does meet the pre-determined threshold distance, the method further includes the one or more processors deactivating the obfuscation action on the display of the first computing device and displaying an authorization image directed to the second computing device.

Abstract: A secret search system is configured to generate a search key TDv in which a position of each character of a search character string is specified and set, and to search for, from among a plurality of encrypted tags ETx in which a position of each character of a character-string-to-be-searched is specified and set, an encrypted tag ETx corresponding to the generated se arch key TDv. In particular, the secret search system is configured to search for an encrypted tag ETx including the search key TDv as a partial character string by setting a position t of each character in one of the search key TDv and the encrypted tags ETx, setting a position ?t of each character having a sign obtained by inverting a sign of the position tin the other thereof, and cancelling out, during the search, the position t and the position ?t.

Abstract: In an encrypted tag generation device (40), a core tag generation unit (412) encrypts a range condition x{right arrow over (?)} indicating a range to permit searching, with a tag generation key tk, to generate a core tag c{tilde over (?)}x, which is a vector over a basis B. An encrypted tag generation unit (413) generates an encrypted tag cx, w in which a keyword w1 is set, by converting the core tag c{tilde over (?)}x generated by the core tag generation unit (412), by encode information EW1 in which the keyword w1 for searching is encoded.

Abstract: A data partition unit partitions character string data D into N pieces of element data w1, w2, . . . , wN from a front to an end of the character string data D. A partial character string generation unit generates a set A={A1, A2, . . . , AN} and an element Ai={(wi), (wiwi+1), . . . , (wiwi+1 . . . wN)} of the set A where i=1, . . . , N, from the element data w1, w2, . . . , wN. A position information assignment unit generates a set B={B1, B2, . . . , BN} and an element Bi={(i, wi, (i, wiwi+1), . . . , (i, wiwi+1 . . . wN)} of the set B by associating each of (wi), (wiwi+1), . . . , (wiwi+1 . . . wN) which are components of the element Ai with position information i. An encryption unit encrypts each of (i, wi), (i, wiwi+1), . . . , (i, wiwi+1 . . . wN) which are components included in the element Bi.

Abstract: A key generation device generates a decryption key dkx having a tag-added decryption key and a decryption key adkx. The tag-added decryption key includes a decryption key tdkx in which a key attribute x is set and a tag tg? required to decrypt a ciphertext with the decryption key tdkx. In the decryption key adkx, the key attribute x is set. An encryption device generates an original ciphertext octy in which a ciphertext attribute y corresponding to the key attribute x is set and which can be decrypted with the tag-added decryption key. A re-encryption key generation device encrypts the decryption key tdkx by an attribute-based encryption scheme using a ciphertext attribute y?, so as to generate a re-encryption key rkx,y? which is a key for generating a re-encrypted ciphertext rcty? which can be decrypted with a decryption key adkx? in which a key attribute x? corresponding to the ciphertext attribute y? is set.

Abstract: An encrypted index bit sequence generation unit generates a bit sequence to be used as an index in searching for encrypted data to be stored in a data center apparatus as an index bit sequence, associating the index bit sequence with the encrypted data. The encrypted index bit sequence generation unit encrypts a plurality of bit values in the index bit sequence, using an index key of a common key scheme. A terminal-side data transmission/reception unit transmits to the data center apparatus, an encrypted index bit sequence and the encrypted data, the encrypted index bit sequence being the index bit sequence after the plurality of bit values is encrypted by the encrypted index bit sequence generation unit.

Abstract: A trapdoor acquisition unit (314) acquires a trapdoor t(s) resulting from converting a search word s by a map sk_U? assigned to an identifier U? among maps sk that differ for each identifier. A search ciphertext generation unit (315) converts the trapdoor t(s) acquired by the trapdoor acquisition unit (314) by a map f_U? assigned to the identifier U? among maps f that differ for each identifier, so as to generate a search ciphertext c(s). A composite map of a map sk and a map f assigned to the same identifier is a map mk common to every identifier.

Abstract: A security cable can include a restraining cable and a lock unit attached to the restraining cable. The lock unit can be configured to removably fasten to a computing device. The lock unit can be further configured to switch the security cable between a first configuration and a second configuration. In the first configuration, the lock unit can be fastened to the computing device and can place the computing device in an inactive state. In the second configuration, the lock unit can be removable from the computing device and may not place the computing device in the inactive state.

Abstract: A green sheet producing binder composition of the present invention is a binder composition for producing a green sheet. The binder composition contains a polyvinyl alcohol resin. The polyvinyl alcohol resin contains at least two kinds of components having degrees of hydrophilicity different from each other.

Abstract: A baking slurry composition of the present invention contains an amino alcohol compound represented by formula, inorganic powder , a polyvinyl alcohol resin, and water. In the formula, R is a hydrogen atom or an alkyl group having a carbon number larger than or equal to 1 and smaller than or equal to 20, and m and n being values satisfying conditions m?0, n?0, and m+n?1.

Abstract: An encryption device (50) generates a ciphertext ct encrypted from information x with using an encryption token etk. A decryption key generation device (60) generates a decryption key dk from a user secret key sk in which a vector y is set, with using a decryption token dtk corresponding to the encryption token etk. A privacy-preserving analysis device (70) decrypts the ciphertext ct generated by the encryption device (50), by means of the decryption key dk generated by the decryption key generation device (60), so as to generate a result of computation over the vector x and the vector y.

Abstract: A baking slurry composition for producing a green sheet of the present invention contains inorganic powder, a polyvinyl alcohol resin, acrylic polymer, and water. The acrylic polymer has a glass transition temperature higher than or equal to ?50° C. and lower than or equal to 30° C. and an acid value greater than or equal to 50 mg KOH/g and less than or equal to 200 mg KOH/g. The acrylic polymer has a weight percentage of more than or equal to 0.1 and less than or equal to 5.0 relative to a total solid content of the baking slurry composition.