Abstract: Each of ECUs counts the number of messages transmitted for each of CAN IDs. A transmission node that has transmitted a main message produces an MAC from a data field and the CAN ID in the main message and a counter value corresponding to the CAN ID, and transmits the MAC as an MAC message. A reception node that has received the main message produces an MAC from the data field and the CAN ID contained in the main message and the counter value corresponding to the CAN ID, and determines whether the MAC matches the MAC contained in the MAC message. By so doing, verification whether the main message is valid or not can be made. According to this configuration, message authentication by the MAC can be made without changing a CAN protocol.

Abstract: Each of ECUs counts the number of messages transmitted for each of CAN IDs. A transmission node that has transmitted a main message produces an MAC from a data field and the CAN ID in the main message and a counter value corresponding to the CAN ID, and transmits the MAC as an MAC message. A reception node that has received the main message produces an MAC from the data field and the CAN ID contained in the main message and the counter value corresponding to the CAN ID, and determines whether the MAC matches the MAC contained in the MAC message. By so doing, verification whether the main message is valid or not can be made. According to this configuration, message authentication by the MAC can be made without changing a CAN protocol.

Abstract: An image input device which includes a means for inputting image data, a memory for storing secret information and an operator for carrying out an operation by using the image data and the secret information.

Abstract: An initiator shares y_ir with a responder, calculates HASH_I on the basis of y_ir, and sends HASH_I to an IKE proxy server. The initiator receives a digital signature SIG_S generated for HASH_I and the address of the initiator from the IKE proxy server and sends the digital signature SIG_S to the responder.

Abstract: This invention provides a technique of preventing determination of image alteration when digital image data has undergone, e.g., rotation without any substantial change in contents. To do this, an area separation processing unit separates image data into areas. For each of the separated areas, an area feature value calculator calculates an area feature value independent of the coordinate information of the image. An area order sorter sorts the separated areas in accordance with the calculated area feature values. A validation data generation processing unit generates validation data based on the sort result.

Abstract: An image input device which includes a means for inputting image data, a memory for storing secret information and an operator for carrying out an operation by using the image data and the secret information.

Abstract: Encrypted text data c1 generated by encrypting plaintext data using an encryption key, verification data having a size smaller than the encrypted text data c1, and encrypted text data c2 generated by encrypting the verification data using the encryption key are acquired (S601). It is checked if a decryption result of the encrypted text data c2 using a decryption key matches the verification data (S607). If it is determined that the two data match, the encrypted text data c1 is decrypted using the decryption key (S608).

Abstract: An image input device which includes a means for inputting image data, a memory for storing a secret information and an operator for carrying out an operation by using the image data and the secret information.

Abstract: This invention provides a technique of preventing determination of image alteration when digital image data has undergone, e.g., rotation without any substantial change in contents. To do this, an area separation processing unit separates image data into areas. For each of the separated areas, an area feature value calculator calculates an area feature value independent of the coordinate information of the image. An area order sorter sorts the separated areas in accordance with the calculated area feature values. A validation data generation processing unit generates validation data based on the sort result.

Abstract: An image input device which includes a means for inputting image data, a memory for storing a secret information and an operator for carrying out an operation by using the image data and the secret information.

Abstract: An image input device which includes a means for inputting image data, a memory for storing a secret information and an operator for carrying out an operation by using the image data and the secret information.

Abstract: Encrypted text data c1 generated by encrypting plaintext data using an encryption key, verification data having a size smaller than the encrypted text data c1, and encrypted text data c2 generated by encrypting the verification data using the encryption key are acquired (S601). It is checked if a decryption result of the encrypted text data c2 using a decryption key matches the verification data (S607). If it is determined that the two data match, the encrypted text data c1 is decrypted using the decryption key (S608).

Abstract: An apparatus for limiting the use of a network address acquires identification data specific to a device connected to the network and generates a message preventing the device from using a network address generated based on the identification data. An apparatus for limiting data transfer detects that a device connected to a network sends data containing a network address generated based on an identifier specific to the device and prevents such data from being transferred.

Abstract: A host communicates with a gateway, a DHCP server or a PPP peer of ISP to determine an IPv6 address, also receives a public key certificate from the gateway, the DHCP server or the PPP peer of ISP, and sends a public key certificate including an IPv6 address to a communication counterpart. The host receives a new public key certificate from the gateway, the DHCP server or the PPP peer of ISP when necessary.

Abstract: An information processing apparatus includes a determining unit adapted to determine a target instruction to be modified to a camouflaged instruction among instructions contained in a processing target program, a camouflaged instruction generating unit adapted to generate the camouflaged instruction corresponding to the target instruction, a restore command generating unit adapted to generate a restore command for restoring the generated camouflaged instruction to the corresponding target instruction, and a unit adapted to modify the target instruction contained in the processing target program with the generated camouflaged instruction and add the restore command to the program, wherein the restore command performs the restoration by referencing a memory storing an output value of a processing command contained in the processing target program and identifying the position of the target instruction in the program or the target instruction based on the referenced value.

Abstract: A host requests a public key certificate from a gateway, and the gateway requests a public key certificate from a Certification Authority (CA). The CA generates a public key certificate, which is sent to the host through the gateway. The host sets an IPv6 address based on information from the gateway. The host requests and receives a new public key certificate whenever necessary, and sends a public key certificate including the IPv6 address to the communication counterpart.

Abstract: An information processing system capable of appropriate precise access control is provided. The information processing system of this invention includes an access controller capable of data transmission/reception, and a computer system connectable to a network via the access controller. The computer system includes an acquiring unit for acquiring user identification information for identifying a user, and application identification information for identifying an application which accesses the network, and an adding unit for generating an IP address on the basis of the acquired user identification information and application identification information, and adding the IP address to data to be transmitted via the application. The access controller includes an access control unit for controlling access to the network on the basis of the IP address added to the transmitted data.

Abstract: A data sharing apparatus shares first data with a communication partner. The data sharing apparatus obtains second data from third data by using server-aided computation, and generates fourth data to be used by the communication partner for obtaining the first data, from the second data and fifth data. The data sharing apparatus obtains the first data to be shared with the communication partner by using server-aided computation from sixth data generated from the third data and seventh data.

Abstract: An image communication apparatus converts image data received through a communication line into bit image data to be reproduced as a visible image by means of using a data converting unit and a reproducing unit. The apparatus converts data from a data processing apparatus into bit image data to be reproduced as a visible image by means of using the data converting unit and the reproducing unit, so as to accomplish an efficient system as a whole.

Abstract: Disclosed is a remote operating system in which even if a remote-operated apparatus is connected to a network protected by a firewall and a remote-operating apparatus exists outside of the firewall, it is possible for the remote-operating apparatus to remotely operate the remote-operated apparatus by transmitting information containing an operation designation as a response to a command, such as a stream connection request, transmitted from the remote-operated apparatus.