Abstract: A data providing apparatus acquires a plurality of range proof data, generates a digital signature for each of the range proof data, and transmits a data set, a sanitizable signature, the range proof data, and the digital signature to a data processing apparatus. The data processing apparatus performs a process for performing generalizing processing for processing-target data, performs a process for the sanitizable signature, and selects range proof data corresponding to a range of a generalized attribute value. The data processing apparatus transmits the processed data set, the processed sanitizable signature, the selected range proof data, and the digital signature corresponding to this range proof data to a data receiving apparatus. The data receiving apparatus verifies the sanitizable signature, verifies the digital signature corresponding to the range proof data, and verifies the range proof data.

Abstract: A multi-party computation method includes: using a relay apparatus that relays communication between a user apparatus and MPC operation apparatuses in a multi-party computation system including at least one user apparatus and two or more MPC operation apparatuses; having the relay apparatus receive a first encryption key generated by each MPC operation apparatus and further transmit the first encryption key to the user apparatus; having the relay apparatus receive secret shares generated by the user apparatus and encrypted thereby using the first encryption key and a second encryption key generated by the user apparatus and transmit the encrypted secret shares and the second encryption key to each MPC operation apparatus; and having the relay apparatus further receive shares, encrypted using the user apparatus's second encryption key, of the results of operations performed by the MPC operation apparatuses and transmit the shares to the user apparatus.

Abstract: A (secure) matching system includes a user-side apparatus; and a service-side apparatus. The user-side apparatus includes a user key generation part and a registration part that registers a registration ciphertext in the service-side apparatus. The service-side apparatus includes a service key generation part, a conversion key generation part that generates a conversion key for converting a first ciphertext encrypted with a service public key into a second ciphertext encrypted with a user public key without executing a decryption process, and a matching part. The service-side apparatus generates a second ciphertext with the conversion key after generating a first ciphertext obtained by encrypting features used as a matching source with the service public key and matches the second ciphertext against a registered ciphertext.

Abstract: A data providing apparatus sets a processing rule, sets predetermined random numbers, calculates a signature hash value corresponding to each of a plurality of data, generates a digital signature using the signature hash value, and transmits a data set, the digital signature, and the random numbers to a data processing apparatus. A data processing apparatus performs a process for processing processing-target data, calculates an after-processing hash value corresponding to each of the processing-target data, and transmits the already-processed data set, the after-processing hash value, and the digital signature to a data receiving apparatus. A data receiving apparatus calculates a verification hash value corresponding to each of the plurality of data by using the already-processed data set and the after-processing hash value, and verifies the verification hash value and the digital signature.

Abstract: A matching system includes a key generation apparatus that generates a registration key matrix, generates a matching key matrix, and generates an auxiliary key matrix from a matrix product of registration key matrix and the matching key matrix; a first transformation apparatus that generates a registered feature vector from registered information input, and generates a registered concealed vector by calculating a product of the registered feature vector and registration key matrix received from the key generation apparatus; a second transformation apparatus that generates a matching feature vector from matching information input, and generates a matching concealed vector by calculating a product of the matching feature vector and the matching key matrix received from the key generation apparatus; and a matching apparatus that matches the registered information and the matching information by calculating a vector-matrix product of the registered concealed vector, the matching concealed vector and the auxiliary

Abstract: A matching system that uses a matching apparatus to match registered information input to a first transformation apparatus and matching information input to a second transformation apparatus, wherein the first transformation apparatus generates a registered feature vector from the registered information, generates a registered concealed vector through calculating a product of the registered feature vector and the registration key matrix by using a regular matrix selected at random as a registration key matrix, and transmits the registered concealed vector to the matching apparatus, the second transformation apparatus generates a matching feature vector from the matching information, generates a matching concealed vector through calculating a product of the matching feature vector and an inverse matrix of the registration key matrix, and transmits the matching concealed vector to the matching apparatus, the matching apparatus calculates an inner product of the registered concealed vector and the matching conce

Abstract: A distributed re-encryption apparatus comprises: a distributed re-encryption key storage part that stores shares obtained by secret-sharing a re-encryption key that re-encrypts a ciphertext into one encrypted with a different encryption key without decrypting the ciphertext; and a distributed re-encryption part that re-encrypts using the shares of the re-encryption key the ciphertext into one encrypted with a different encryption key without decrypting the ciphertext.

Abstract: A data management device includes a generation unit, a registration unit, an output unit, an acquisition unit, a determination unit, and a key output unit. The generation unit generates a first secret key that is restorable by a predetermined number of distributed keys. The registration unit registers data encrypted by using the first secret key in a database of a data storage device. The output unit outputs at least one distributed key among the distributed keys used to restore the first secret key to a key management device. The determination unit determines whether to agree to permission of a use request for data in intention expression on agreement or disagreement performed. When it is determined to agree to the permission of the use request for the data, the key output unit outputs, to the key management device, a key necessary for restoring the first secret key.

Abstract: An authentication apparatus includes biometric information acquiring part which acquires first biometric information of user, certification information adding part, authentication part, and biometric information database which includes second biometric information of user stored in advance. The certification information adding part receives first biometric information from biometric information acquiring part, generates certification information concerning communication rule, notifies authentication part of certification information in advance, and transmits authentication information including certification information and first biometric information configured according to the communication rule shown by certification information to authentication part.

Abstract: An authentication system transmits a ciphertext of authentication information from an authenticatee apparatus to an authenticator apparatus using homomorphic encryption with a public key encryption scheme, the authenticator apparatus issues a first random number to the authenticatee apparatus, the authenticatee apparatus generates a second random number and transmits to the authenticator apparatus a first element generated with a public key using the first and the second random numbers and a second element generated with a public key using the second random number, and the authenticator apparatus modifies the second element using the first random number to obtain a ciphertext of the authentication information.

Abstract: In order to realize encryption processing capable of suppressing the degradation of collation accuracy and reducing the risk of information leakage, a terminal apparatus for encrypting input information to be input for collation is provided, the terminal apparatus being configured to perform transformation parameter generation processing for generating a transformation parameter based on a first parameter stored in a storage area and a second parameter that is different from the first parameter, and encrypt the input information input for collation using the transformation parameter to generate encrypted input information.

Abstract: A homomorphic cyclic operation system performs a homomorphic cyclic operation on a periodic array of data using homomorphic encryption having a homomorphic operation defined with respect to at least one multiplication and comprises: an encryption apparatus that encrypts the periodic array of data by storing it in the coefficients of an indeterminate polynomial to generate a ciphertext of periodic data; and a homomorphic cyclic operation apparatus that shifts the periodic array of data in the ciphertext of the periodic data by applying the indeterminate raised to the power of a shift amount to the ciphertext of the periodic data.

Abstract: A similarity calculation system calculating the similarity between a first vector and a second vector using homomorphic encryption having homomorphic operations defined with respect to at least one multiplication and a plurality of additions obtains the similarity between the first and the second vectors by using the homomorphic operations to calculate the inner product of the first encrypted vector obtained by using a public key for the homomorphic encryption to encrypt a row corresponding to the value of a component of the first vector extracted from a weighted similarity table of the similarity between each component of the first and the second vectors and the second encrypted vector obtained by transforming the value of a component of the second vector into a component in a unit vector that becomes 1 and encrypting the transformed result with the public key for the homomorphic encryption.

Abstract: A data extraction system includes a registration apparatus, a data storage apparatus, and a query apparatus. The registration apparatus generates registration data including first information obtained by encrypting secret information, which is information that a user wishes to keep secret, by using a secret key and second information obtained by encrypting the secret key by using at least biological information of the user. The data storage apparatus holds the registration data. The query apparatus acquires the registration data by generating a query for acquiring the registration data from the data storage apparatus, extracts the secret key from the registration data by using biological information of the user, and extracts the secret information from the registration data by using the extracted secret key.

Abstract: A conventional biometric authentication system has been time-consuming and labor-intensive for users since the users are requested to re-register their biometric information. According to an aspect of the present disclosure, a biometric authentication system includes an update value generation unit configured to generate an update value, a first update processing unit configured to update, using the update value, a template generated based on biometric information, and a second update processing unit configured to update, using the update value, a verification key generated along with the template based on the biometric information using the update value.

Abstract: In IaaS (Infrastructure as a Service), when it is desirable to delegate the authority to a user outside a system, a recipient of an access token is designated, thereby preventing illegal distribution of the access token. There is provided an access token system including a generator and a verifier. The generator generates, using secret information of a recipient, a recipient-designated access token for which the recipient is designated, and provides the recipient-designated access token to a user. The verifier verifies that the user who makes access using the recipient-designated access token is the designated recipient.

Abstract: A wearable camera worn and used by a user includes an imaging unit configured to capture an image of a subject, an irradiation unit configured to emit light in substantially parallel to an optical axis of the imaging unit, an attachment unit for attaching the wearable camera to the user, and a movable unit that is provided at a part of the attachment unit, wherein the imaging unit and the irradiation unit are arranged at the movable unit.

Abstract: A data extraction system includes a registration apparatus, a data storage apparatus, and a query apparatus. The registration apparatus generates registration data including first information obtained by encrypting secret information, which is information that a user wishes to keep secret, by using a secret key and second information obtained by encrypting the secret key by using at least biological information of the user. The data storage apparatus holds the registration data. The query apparatus acquires the registration data by generating a query for acquiring the registration data from the data storage apparatus, extracts the secret key from the registration data by using biological information of the user, and extracts the secret information from the registration data by using the extracted secret key.

Abstract: A data extraction system includes a registration apparatus, a data storage apparatus, and a query apparatus. The registration apparatus generates registration data including first information obtained by encrypting secret information, which is information that a user wishes to keep secret, by using a secret key and second information obtained by encrypting the secret key by using at least biological information of the user. The data storage apparatus holds the registration data. The query apparatus acquires the registration data by generating a query for acquiring the registration data from the data storage apparatus, extracts the secret key from the registration data by using biological information of the user, and extracts the secret information from the registration data by using the extracted secret key.

Abstract: An encrypted information matching device 20 includes: a storage unit 240 in which representative information representing a group based on similarity in a characteristic and encrypted information to be matched belonging to the group are associated with each other and stored; an identification unit 231 which calculates a first similarity between the encrypted input information and the representative information stored in the unit 240, and which, based on the first similarity, identifies a group to be matched with the first input information; and a determination unit 232 which calculates a second similarity between the encrypted input information and the encrypted information to be matched that belongs to the group identified, in a state in which the input information and the information to be matched are encrypted, wherein the unit 232 determines the presence or absence of information to be matched which makes the calculated second similarity satisfy criteria.