Abstract: A data processing apparatus includes a processing circuit configured to segment an original bit sequence into a plurality of input blocks each having a first block length, create a random bit sequence, encrypt respective ones of the plurality of input blocks with a block cipher scheme using a key (having a key length larger than the first block length) based on the random bit sequence to derive intermediate blocks, concatenate every predetermined number of intermediate blocks to form one or more output blocks, compute an invertible transformation function on the one or more output blocks and the random bit sequence to derive a further output block, and output an encrypted bit sequence including those output blocks.

Abstract: A log management system includes a first secret splitting module to split the log data generated regularly or intermittently into a plurality of split log fragments including a split log fragment for remote transmission per predetermined unit using secret splitting scheme, the split log fragment for remote transmission having a smaller size than remaining split log fragments; a first communication control module to transmit the split log fragment for remote transmission to a remote apparatus; a second communication control module to receive, in response to occurrence of an event, one or more remaining split log fragments corresponding to the log data to be partially recovered out of the remaining split log fragments accumulated by a local apparatus; and a second secret splitting module to recover the log data from the one or more remaining split log fragments and the split log fragment for remote transmission using the secret splitting scheme.

Abstract: In an access management system for managing access to data handled on a shared server, the data in a registered folder on the shared server is kept in secret through transform using an access key. A database in the system is configured to store identification information of n shares generated by splitting the access key using threshold secret sharing scheme in association with a data path of a folder assigned to a first user. Some of the shares are retained in the system as system shares and at least one remaining share is provided to the first user as a user share. When an access request is received along with a first user share from the first user, target data recovered using the access key recovered based on a number of shares that satisfies the quorum is deployed to the registered folder.

Abstract: There is provided a computer program which, when executed by a processor of an information processing device, causes the processor to function as a secret splitting module and a control module. The secret splitting module is configured to recover secret data from at least two pieces of split data using secret splitting and the control module is configured to control reading out or writing each piece of the split data. Secret data is maintained within a virtual drive. The control module is further configured to read out first split meta-data from a first storage device, read out second split meta-data from a second storage device, cause the secret splitting module to recover virtual drive meta-data at least from the first and second split meta-data, and generate the virtual drive based on the recovered virtual drive meta-data. Corresponding method and system are also provided.

Abstract: There is provided a computer program which, when executed by a processor of an information processing device, causes the processor to function as a secret splitting module and a control module. The secret splitting module is configured to recover secret data from at least two pieces of split data using secret splitting and the control module is configured to control reading out or writing each piece of the split data. Secret data is maintained within a virtual drive. The control module is further configured to read out first split meta-data from a first storage device, read out second split meta-data from a second storage device, cause the secret splitting module to recover virtual drive meta-data at least from the first and second split meta-data, and generate the virtual drive based on the recovered virtual drive meta-data. Corresponding method and system are also provided.

Abstract: There is provided a computer program which, when executed by a processor of an information processing device, causes the processor to function as a secret splitting module and a control module. The secret splitting module is configured to recover secret data from at least two pieces of split data using secret splitting and the control module is configured to control reading out or writing each piece of the split data. Secret data is maintained within a virtual drive. The control module is further configured to read out first split meta-data from a first storage device, read out second split meta-data from a second storage device, cause the secret splitting module to recover virtual drive meta-data at least from the first and second split meta-data, and generate the virtual drive based on the recovered virtual drive meta-data. Corresponding method and system are also provided.

Abstract: There is provided a computer program which, when executed by a processor of an information processing device, causes the processor to function as a secret splitting module and a control module. The secret splitting module is configured to recover secret data from at least two pieces of split data using secret splitting and the control module is configured to control reading out or writing each piece of the split data. Secret data is maintained within a virtual drive. The control module is further configured to read out first split meta-data from a first storage device, read out second split meta-data from a second storage device, cause the secret splitting module to recover virtual drive meta-data at least from the first and second split meta-data, and generate the virtual drive based on the recovered virtual drive meta-data. Corresponding method and system are also provided.

Abstract: There is provided a computer program which, when executed by a processor of an information processing device, causes the processor to function as a secret splitting module and a control module. The secret splitting module is configured to recover secret data from at least two pieces of split data using secret splitting and the control module is configured to control reading out or writing each piece of the split data. Secret data is maintained within a virtual drive. The control module is further configured to read out first split meta-data from a first storage device, read out second split meta-data from a second storage device, cause the secret splitting module to recover virtual drive meta-data at least from the first and second split meta-data, and generate the virtual drive based on the recovered virtual drive meta-data. Corresponding method and system are also provided.

Abstract: There is provided a computer program which, when executed by a processor of an information processing device, causes the processor to function as a secret splitting module and a control module. The secret splitting module is configured to recover secret data from at least two pieces of split data using secret splitting and the control module is configured to control reading out or writing each piece of the split data. Secret data is maintained within a virtual drive. The control module is further configured to read out first split meta-data from a first storage device, read out second split meta-data from a second storage device, cause the secret splitting module to recover virtual drive meta-data at least from the first and second split meta-data, and generate the virtual drive based on the recovered virtual drive meta-data. Corresponding method and system are also provided.

Abstract: There is provided a computer program which, when executed by a processor of an information processing device, causes the processor to function as a secret splitting module and a control module. The secret splitting module is configured to recover secret data from at least two pieces of split data using secret splitting and the control module is configured to control reading out or writing each piece of the split data. Secret data is maintained within a virtual drive. The control module is further configured to read out first split meta-data from a first storage device, read out second split meta-data from a second storage device, cause the secret splitting module to recover virtual drive meta-data at least from the first and second split meta-data, and generate the virtual drive based on the recovered virtual drive meta-data. Corresponding method and system are also provided.