Abstract: A key exchange system according to an aspect of the present disclosure includes: a plurality of quantum key distribution (QKD) apparatuses that executes a quantum key distribution protocol including at least error correction; and a plurality of hub apparatuses that performs encrypted communication with each other, in which each of the hub apparatuses includes a key generation unit configured to generate an encryption key for performing the encrypted communication with another hub apparatus based on information received from a corresponding one of the QKD apparatuses, and each of the QKD apparatuses includes a QKD processing unit configured to execute the quantum key distribution protocol with another QKD apparatus and generate a correction key from a ciphertext of random number information, and a first transmission unit configured to transmit information representing a result of basis reconciliation in the quantum key distribution protocol to a corresponding one of the hub apparatuses.

Abstract: An assembled battery includes: a plurality of batteries, each with a container that contains an electric charger/discharger and an electrolytic solution and a gas discharge unit on its one surface, wherein the plurality of batteries are stacked so that the one surface of each battery is aligned to be flush with the one surface of the other batteries; a metal first flow path member is placed opposite the surface with the gas discharge unit, and configures a first flow path unit for gas discharged from the gas discharge units of the batteries; a second flow path member that forms a second flow path unit with a smaller flow path cross-sectional area; a connector that couples the first and the second flow path unit via an opening in the first flow path member; and a guide member that partitions a space inside the connector. This configuration allows for efficient gas discharge.

Abstract: In a remote authorization control system including a resource access device, a resource management device, and an authentication device, the resource access device downloads an access control list from the authentication device onto a secure region in the resource access device. The resource access device downloads resources from the resource management device onto the secure region. The resource access device determines whether a user is allowed to use the resources based on the access control list when a resource use request is received from the user, and the resources access device allows the user to use the resources when the resources are usable.

Abstract: The secure join system includes the first and second information-processing-apparatuses respectively holding first and second data. The second information-processing-apparatus is configured to: create third and fourth vectors in which a hash-value related to a key-value of the first data in a first vector and a ciphertext of the first data corresponding to the key-value in a second vector are rearranged by permutation; and create a fifth vector having a hash-value related to a key-value of the second data. The first information-processing-apparatus is configured to: search for j in which a hash-value of an i-th element of the fifth vector matches a j-th element value of the third vector for each i and create encrypted data in which a ciphertext of a j-th element value of the fourth vector is set when j is found and a ciphertext of a dummy value is set when j is not found.

Abstract: A battery pack having a plurality of battery cells arranged, in which a spacer is disposed between adjacent battery cells; the spacer has a first side that extends in a second direction, a first U-like portion in the first direction formed in the first side, a first partition wall is formed on the first U-like portion in the second direction, a second spacer has a second side extending in the second direction, a second U-like portion having a U-like cross section and extending in the first direction formed in the second side; a busbar housing is formed between a first partition wall in the first spacer and a different first partition wall adjacent to the first spacer in the first direction, and the first U-like portions and the second U-like portions are continuously formed in the first direction to form wire housing portions that extend in the first direction.

Abstract: Data search by secure computation is efficiently performed and retrieved data is safely provided. A searcher terminal acquires condition data. The searcher terminal extracts a feature from the condition data. The searcher terminal encrypts the feature of the condition data. A secure search apparatus acquires a search result indicating a ciphertext of target data corresponding to a feature of target data similar to the feature of the condition data while keeping the feature of the target data and the feature of the condition data secret. The secure search apparatus transmits the search result to an encryption apparatus and the searcher terminal. The searcher terminal acquires the ciphertext of the target data indicated by the search result. The encryption apparatus transmits a decryption key to the searcher terminal. The searcher terminal decrypts the ciphertext of the target data using the decryption key.

Abstract: According to an embodiment, a key exchange system includes: a key generation device configured to generate a key based on quantum key exchange or post-quantum key exchange; a network device configured to perform encrypted communication with another network device by using the key; and an intermediate server deployed between the key generation device and the network device. The intermediate server includes: a state monitoring unit configured to transmit a state monitoring request to the key generation device at each predetermined time; a notification unit configured to give a push notification of key information included in a response to the state monitoring request, to the network device, when the response is received; and a key exchange unit configured to start key exchange between the network device and the key generation device in response to a request from the network device having received the push notification of the key information.

Abstract: A secure collation system performs secure-data-collation between first and second information processing apparatuses and includes the first and second information processing apparatuses. The second information-processing-apparatus creates, when receiving a first vector having a hash value of a key value of the first information-processing-apparatus as an element, a second vector by adding a dummy hash value to the first vector and rearranging the first vector by random permutation; creates a third vector having, as elements, a hash value of a key value of the second information-processing-apparatus and a hash value of a dummy key value; and transmits the second and third vectors to the first information-processing-apparatus. The first information-processing-apparatus calculates a hash value of an element of the third vector and creates a fourth vector having the hash value as an element; and collates matched values between each element of the third vector and each element of the fourth vector.

Abstract: An optical computing apparatus includes a plurality of stages including one or a plurality of Mach-Zehnder interference-type optical switches, and, in this optical computing apparatus, incident light is received as input in an incident stage, a phase of the incident light changed in advance by a predetermined phase amount in accordance with a position in the incident stage, and the input light propagates in accordance with a control electric signal.

Abstract: An optical computing apparatus includes an address conversion unit configured to convert a plurality of bit values into an address value used as an input port number, and a port conversion unit including a shuffle circuit configured to output light input from an input port with the input port number, from an output port with an output port number corresponding to a result of a computation of the input port number.

Abstract: A key exchange system includes a quantum key distribution (QKD) network including a plurality of QKD apparatuses that performs exchange of a key by using a quantum key distribution protocol and a key management apparatus that relays the key; and a plurality of hub apparatuses that performs encrypted communication by using the key received from the key management apparatus. Each of the QKD apparatuses includes a processor configured to encrypt the key by using a public key of one of the hub apparatuses in a case where the key is exchanged with another QKD apparatus by using the quantum key distribution protocol, and transmit the encrypted key to the key management apparatus. Each of the hub apparatuses includes a processor configured to decrypt the encrypted key by using a secret key corresponding to the public key in a case where the encrypted key is received from the key management apparatus.

Abstract: A key exchange system according to an aspect of the present disclosure includes: a plurality of quantum key distribution (QKD) apparatuses that executes a quantum key distribution protocol including at least error correction; and a plurality of hub apparatuses that performs encrypted communication with each other, in which each of the hub apparatuses includes a key generation unit configured to generate an encryption key for performing the encrypted communication with another hub apparatus based on information received from a corresponding one of the QKD apparatuses, and each of the QKD apparatuses includes a QKD processing unit configured to execute the quantum key distribution protocol with another QKD apparatus and generate a correction key from a ciphertext of random number information, and a first transmission unit configured to transmit information representing a result of basis reconciliation in the quantum key distribution protocol to a corresponding one of the hub apparatuses.

Abstract: A program execution system includes a data holding apparatus, a program providing apparatus, and a data processing apparatus that performs computing in a secure region. The data holding apparatus transmits encrypted data, encrypted with a first common key, to the data processing apparatus, and the program providing apparatus transmits an encrypted program, encrypted with a second common key, to the data processing apparatus. In the secure region, the data processing apparatus acquires data by decrypting the encrypted data with the first common key, acquires a program by decrypting the encrypted program with the second common key, executes the program for the data, and encrypts a result of the execution with a public key of the data holding apparatus or the first common key. The data holding apparatus acquires the result of the execution by decrypting the encrypted result of the execution with a secret key or the first common key.

Abstract: An information processing apparatus includes a secure area configured to execute a program in secret, and a security chip. The secure area conceals information related to the program, and requests the security chip to provide a blind signature with respect to the concealed information obtained by the concealing. The security chip calculates the blind signature and returns the blind signature to the secure area. The secure area acquires a signature with respect to the information related to the program from the blind signature.

Abstract: A secondary battery module includes a plurality of battery blocks each obtained by stacking a plurality of battery cells. The secondary battery module includes a holding member adapted to hold the plurality of battery blocks and including a pair of opposed end plates, a pair of opposed side plates, and a section plate arranged between the adjacent battery blocks to partition the battery blocks; and an inter-block bus bar provided across the section plate and adapted to electrically connect the adjacent battery blocks. The inter-block bus bar has a fuse portion.

Abstract: According to one embodiment, a security evaluation index calculation apparatus includes: an input unit configured to input a synthesized data generation algorithm M including a parameter generation algorithm for generating a generation parameter from a data set including a plurality of pieces of data and a generation algorithm for generating synthesized data from the generation parameter, a data set D that is a privacy protection target, a sensitivity range RD indicating a set of generation parameters of an adjacent data set that is a data set in which only one piece of data is different from the data set D, and a tolerance ?; a probability density function calculation unit configured to calculate a probability density function f describing a probability distribution followed by an output M(D) when the data set D is input to the synthesized data generation algorithm M; a region calculation unit configured to calculate, as U(t)=f?1([t, ?)), a region U?=U(t?) corresponding to t? in which a value obtained by int

Abstract: A certificate issuing support system includes: a certificate application device in a first organization making an application for issuing an EV certificate to a certificate authority; and an existence guarantee device included in a second organization that guarantees existence of the first organization. The existence guarantee device assigns a first electronic signature to first information guaranteeing existence of the first organization in response to a request from a terminal used by a member of the first organization, and verifies a second electronic signature assigned to second information that is generated by the certificate application device and guarantees affiliation of the member to the first organization in cooperation with the certificate authority.

Abstract: According to an embodiment, a key exchange system includes: a key generation device configured to generate a key based on quantum key exchange or post-quantum key exchange; a network device configured to perform encrypted communication with another network device by using the key; and an intermediate server deployed between the key generation device and the network device. The intermediate server includes: a state monitoring unit configured to transmit a state monitoring request to the key generation device at each predetermined time; a notification unit configured to give a push notification of key information included in a response to the state monitoring request, to the network device, when the response is received; and a key exchange unit configured to start key exchange between the network device and the key generation device in response to a request from the network device having received the push notification of the key information.

Abstract: A cypher system includes a plurality of hardware computers, each hardware computer including a photoelectric fusion processor that includes at least one of (i) a Y gate circuit configured to combine optical signals, (ii) an optical switching circuit configured to switch optical signal paths based on electrical signals, or (iii) a phase modulator configured to modulate a phase of an optical signal. The photoelectric fusion processor is configured to perform optical operation processing and perform an encryption operation including an exclusive OR operation in which two or more bit values are given as inputs, and a nonlinear operation in which two or more bit values are given as inputs.

Abstract: A registration application support system includes: a registration application device that is included in a first organization and applies for pre-registration for delegation of a right regarding access to a resource to an authorization server; and an existence guarantee device that is included in a second organization and guarantees existence of the first organization, in which: the existence guarantee device includes a giving unit that gives an electronic signature to information that guarantees the existence of the first organization, in response to a request from a terminal used by a member of the first organization; the registration application device includes a transmission unit that transmits a display name of the first organization and the information to which the electronic signature has been given to the authorization server in order to apply for the pre-registration; and the authorization server includes a verification unit that causes the existence guarantee device to verify the electronic signatu