Abstract: Examples of a cleaning method includes supplying a cleaning gas into an exhaust duct that provides an exhaust flow passage of a gas supplied to an area above a susceptor, the exhaust duct having a shape surrounding the susceptor in plan view, and activating the cleaning gas to clean an inside of the exhaust duct.

Abstract: A top-blowing lance nozzle is configured to freely switch an adequate expansion condition so as to control an oxygen-blowing amount and a jetting velocity independently of each other without requiring a plurality of lance nozzles or a mechanically movable part. A lance nozzle is configured to blow refining oxygen to molten iron charged in a reaction vessel while a gas is blown from a top-blowing lance to the molten iron. One or more blowing holes for blowing a working gas are on an inner wall side surface of the nozzle, at a site where the lance nozzle has a minimum cross-sectional area in a nozzle axis direction or at a neighboring site of the site.

Abstract: A molten iron refining method having, an auxiliary material, and an oxidizing gas supplied through a top-blowing lance, to a cold iron source and molten pig iron that are contained/fed in a converter-type vessel, and molten iron is subjected to a refining process. A pre-charged cold iron source is charged into the converter-type vessel at an amount not larger than 0.15 times. A furnace-top-added cold iron source that's part or all of the cold iron source and added from a furnace top is fed during the refining process. A burner at a leading end of the top-blowing lance that spray holes through which a fuel and a combustion-supporting gas are ejected. During the refining process, a powdery auxiliary material processed into powder that's part of the auxiliary material is blown in, to pass through a flame formed by the burner.

Abstract: A converter steelmaking method has molten pig iron subjected to dephosphorization process for dephosphorized molten iron, dephosphorized molten iron is subjected to decarburization process for molten steel. For dephosphorization process, a first cold iron source in amount meeting Formula (1) is charged into first converter-type vessel, then undephosphorized molten pig iron is charged and subjected to dephosphorization process. Dephosphorized molten iron is discharged and held in molten metal receiving vessel. After second cold iron source is charged into first converter-type vessel in which dephosphorization process has been performed, the dephosphorized molten iron held in molten metal receiving vessel is charged and subjected to decarburization process. % Ws0?0.1186T?134 (% Ws0?0) . . . (1), where % Ws0: a ratio (%) of first cold iron source to sum of first cold iron source and charge amount of undephosphorized molten pig iron, and T: a temperature (° C.) of undephosphorized molten pig iron.

Abstract: In a voting system including a vote broadcasting server and a plurality of client terminals, the vote broadcasting server generates a plurality of pieces of vote information that is data in which secret information is shared and transmits the vote information to each client terminal, each client terminal generates voting information by encrypting vote information such that the vote information can be decrypted when predetermined conditions are satisfied and transmits the voting information to the vote broadcasting server, the vote broadcasting server transmits a voting information group composed of voting information received from respective client terminals to the respective client terminals, and each client terminal ascertains a vote result according to the number of pieces of vote information decrypted from the voting information group and executes processing based on the vote result.

Abstract: A secure joining system is a secure joining system including a plurality of secure computing apparatuses. The plurality of secure computing apparatuses include a first vector joining unit, a first permutation calculation unit, a first vector generation unit, a second vector joining unit, a first permutation application unit, a second vector generation unit, a first inverse permutation application unit, a first vector extraction unit, a second permutation application unit, a third vector generation unit, a second inverse permutation application unit, a second vector extraction unit, a modified second table generation unit, a third permutation application unit, a fourth vector generation unit, a shifting unit, a third inverse permutation application unit, a bit inversion unit, a third vector extraction unit, a modified first table generation unit, a first table joining unit, and a first table formatting unit.

Abstract: A share generating device obtains N seeds s0, . . . , sN?1, obtains a function value y=g(x, e)?Fm of plaintext x?Fm and a function value e, and obtains information containing a member yi and N?1 seeds sd, where d?{0, . . . , N?1} and d?i, as a share SSi of the plaintext x in secret sharing and outputs the share SSi. It is to be noted that the function value y is expressed by members y0?Fm(0), . . . , yN?1?Fm(N?1) which satisfy m=m(0)+ . . . +m(N?1).

Abstract: Provided is a technique for performing statistical processing such as processing for obtaining parameters of logistic regression analysis faster than before. A secure statistical processing system includes a cross tabulation table computing device 2 that performs secure computation on a cross tabulation table in which frequencies are in plain texts while keeping each record concealed; and a statistical processing device 3 that performs predetermined statistical processing using the cross tabulation table in which frequencies are in plain texts. The cross tabulation table computing device 2 may include a plurality of secure computation devices 221, . . . , 22N that perform secure computation on a cross tabulation table in which frequencies are fragments subjected to secret sharing while keeping each record concealed, and a management device 21 that restores the fragments to compute the cross tabulation table in which frequencies are in plain texts.

Abstract: A parameter estimation device for executing a parameter estimation of a cox proportional hazard model by secure computation comprises: a data storage unit that stores a database having, with respect to each object to be observed, a record including a point of time at which an event was observed, a feature amount of an object to be observed at the point of time, and a state of the object to be observed at the point of time; a calculation unit that, by reading a vector comprising points of time from the database, and sorting the vector, generates a replacement table and a flag indicating a boundary between the points of time, by using the replacement table and the flag, totalizer the feature amounts at the respective points of time while concealing values at the points of time, and performs the parameter estimation on the basis of a result of the totalization; and an output unit that outputs a parameter estimated by the calculation unit.

Abstract: A share [x]i of plaintext x in accordance with Shamir's secret sharing scheme is expressed by N shares [x0]i, . . . , [xN?1]i, and each share generating device Ai obtains a function value ri=Pm(i(?))(si) of a seed si, obtains a first calculated value ?i=?(i, i(?))[xi(?)]i+ri using a Lagrange coefficient ?(i, i(?)), a share [xi(?)]i, and the function value ri, and outputs the first calculated value ?i to a share generating device Ai(?). Each share generating device Ai accepts a second calculated value ?i(+), obtains a third calculated value zi=?(i, i(+))[xi]i+?i(+) using a Lagrange coefficient ?(i, i(+)), a share [xi]i, and the second calculated value ?i(+), and obtains information containing the seed si and the third calculated value zi as a share SSi of the plaintext x in secret sharing and outputs the share SSi.

Abstract: There are provided a prediction apparatus, a prediction system, and a prediction method, which predict, by an easy method, whether there is a possibility of an animal contracting a disease in a near future.

Abstract: A power is computed at high speed with a small number of communication rounds. A secret computation system that includes three or more secret computation apparatuses computes a share [a?] of the ?-th power of data “a” from a share [a] of data “a” while data “a” is concealed. The share [a] of data “a” and an exponent ? are input to an input unit (step S11). A local operation unit computes the pu-th power of a share [at] of the t-th power of data “a” without communication with the other secret computation apparatuses (step S12). A secret computation unit uses secret computation that requires communication with the other secret computation apparatuses to compute a multiplication in which at least one of the multiplicands is [ a ( t * p ^ u ) ] , the computation result of the local operation unit, to obtain the share [a?] (step S13). An output unit outputs the share [a?] (step S14).

Abstract: The encrypted data analysis device includes a sorting unit that sorts by [Time Information] and then sorts by [User ID] an encrypted data set group including a plurality of encrypted data sets, each of the plurality of encrypted data sets including a [Location ID], the [User ID], and the [Time Information], an encoding unit that generates a [Flow], and encoding the [Location ID] extracted, and an equal sign determination unit that determines whether a [User ID] and another [User ID] adjacent to each other are equal, and when not equal, replaces a corresponding [Flow] with a [predetermined value that represents invalid].

Abstract: A server determines an array [[addr]] indicating a storage destination of each piece of data, generates an array of concealed values, and connects the generated array to the array [[addr]] to determine an array [[addr?]]. The server generates a sort permutation [[?1]] for the array, applies the sort permutation [[?1]] to the array [[addr?]], and converts the array [[addr?]] into an array with a sequence composed of first Z elements set to [[i]] followed by ?i elements set to [[B]]. The server generates a sort permutation [[?2]] for the converted array [[addr?]], generates dummy data, imparts the generated dummy data to the concealed data sequence, applies the sort permutations [[?1]] and [[?2]] to the data array imparted with the dummy data, and generates, as a secret hash table, a data sequence obtained by deleting the last N pieces of data from the sorted data array.

Abstract: A secure maximum value computation apparatus, assuming that a set X={[[x1]], [[x2]], . . . , [[xn]]}, includes an output unit 1 that outputs [[x1]] and [[1]] as a maximum secret value [[y]] and a flag [[z(x1)]], respectively, when n=1 holds, a comparison unit 2 that computes a comparison result of which is larger with respect to a predetermined order for each pair {[[xi]], [[xj]]}?X of elements of the X, a flag computation unit 3 that computes whether all comparison results related to each of the [[xi]]s are “large” for each of the [[xi]]s to set a computed value as a flag [[z(xi)]], and a maximum value computation unit 4 that uses the [[z(xi)]] to computes a maximum value [[y]].

Abstract: A secure maximum value computation apparatus includes an initialization unit 1 that sets X?=X, a pair creation unit 2 that creates, from among the X?, one or more pairs such that no element is included in two or more pairs, a determination unit 3 that determines, through secure computation, a secret value that is a larger value among [[xi]]and [[xi]] included in each of the one or more pairs for each of the one or more pairs that are created, a set updating unit 4 that sets, as a new X?, when there is a secret value that is not included in the one or more pairs in the X?, a set including the secret value that is not included in the one or more pairs in the X? and the secret value determined by the determination unit, a control unit 5 that performs a control to repeat the above-described processing operations until |X?|=1 holds, and a flag determination unit 6 that determines a flag [[z(xi)]] (i=1, . . .

Abstract: A computation apparatus, a method of the same, and a program which perform a secure computation using fixed-point arithmetic, and overflow is unlikely to occur and the occurrence of division by zero can be detected when an odds ratio is calculated. The computation apparatus includes an odds ratio computation unit for obtaining an odds ratio between a first group (a+b) and a second group (c+d) based on four plaintext values a, b, c, and d, by means of secure computation; a zero-division detection unit for determining, by means of secure computation, whether or not at least one of the plaintext values b and c is not zero, and detecting division by zero; and a selection unit for selecting the odds ratio if division by zero is not detected, by means of secure computation.

Abstract: A secret computation system is a secret computation system for performing computation while keeping data concealed, and comprises a cyphertext generation device that generates cyphertext by encrypting the data, a secret computation device that generates encrypted basic statistics by performing secret computation of predetermined basic statistics using the cyphertext while keeping the cyphertext concealed, and a computation device that generates decrypted basic statistics by decrypting the encrypted basic statistics and performs predetermined computation using the decrypted basic statistics.

Abstract: A secure computation device obtains concealed information {M(i0, . . . , iS?1)} of a table M(i0, . . . , iS?1) having one-variable function values as its members. It is to be noted that M(ib, 0, . . . , ib, S?1) generated by substituting counter values ib, 0, . . . , ib, S?1 into the table M(i0, . . . , iS?1) represents a matrix Mb, ?, ?, which is any one of Mb, 2, 1, . . . , Mb, 3, 2. The secure computation device obtains concealed information {Mb, ?, ?} by secure computation using concealed information {ib, 0}, . . . , {ib, S?1} and the concealed information {M(i0, . . . , iS?1)}, and obtains concealed information {Mb, ?, MU} of a matrix Mb, ?, MU, which is obtained by execution of a remaining process including those processes among a process Pj, 1, a process Pj, 2, a process Pj, 3, and a process Pj, 4, that are performed subsequent to a process P?, ?.

Abstract: The present invention provides techniques to calculate the number of surviving and the number of deaths while still concealing survival time data. The present invention includes: a group data position calculation means configured to calculate a share [[gA]] of a sequence gA and a share [[gB]] of a sequence gB represented by predetermined equations from a share [[g]] of a sequence g of values of group of survival time data included in a survival time data set D; a group data number calculation means configured to calculate a share [[sA]] and a share [[sB]] from a share [[t]] of a sequence t of values of time of survival time data included in the survival time data set D, the share [[gA]], and the share [[gB]], by [[sA]]=GroupSum ([[gA]], [[t]]), [[sB]]=GroupSum ([[gB]], [[t]]); and a survival number calculation means.