Abstract: A cipher key is generated by first information shared in secrete between a data transmitting unit 10 and a data receiving unit 20, second information derived from duplication control information of transmit data and third information which is time change information shared between the data transmitting unit and the data receiving unit to cipher data by a CPU 12 by using the above-mentioned cipher key to transmit, from the data transmitting unit 10 to the data receiving unit 20, transmit data in which the duplication control information and the time change information are added to the ciphered data.

Abstract: The present invention is a compound having a structure represented by the following formula (1): and an antibody to BSH obtained by using the compound as a hapten and using a complex of the hapten and a high-molecular compound as an antigen. By using the present invention, it becomes possible to provide a hapten compound for preparing an antibody recognizing BSH highly sensitively and highly selectively, an antibody to BSH, as well as a kit for measuring BSH and an immunological measuring method having high sensitivity and excellent in quantitative property using the antibody.

Abstract: A security module is provided in a data recording medium, data to be written to the data recording medium is encrypted with an content key different from one data to another, and the content key is safely stored in the security module. Also, the security module makes a mutual authentication using the public-key encryption technology with a drive unit to check that the counterpart is an authorized (licensed) unit, and then gives the content key to the counterpart, thereby preventing data from being leaked to any illegal (unlicensed) unit. Thus, it is possible to prevent copyrighted data such as movie, music, etc. from being copied illegally (against the wish of the copyrighter of the data).

Abstract: A user sends data for requesting a service provider to provide predetermined service and signature data created based upon the data to the service provider, the service provider calculates a fee based upon this data and requests a bank to collect the fee from the user. The bank informs the user of the fee requested from the service provider. When the user protests against the amount of the fee, the service provider discloses the data and signature data received from the user to the bank and when the bank judges based upon this signature data that this data is valid, it calculates a proper fee based upon this data and collects it from the user. As described above, it is enabled to collect a proper fee for service.

Abstract: A cipher key is generated by first information shared in secrete between a data transmitting unit 10 and a data receiving unit 20, second information derived from duplication control information of transmit data and third information which is time change information shared between the data transmitting unit and the data receiving unit to cipher data by a CPU 12 by using the above-mentioned cipher key to transmit, from the data transmitting unit 10 to the data receiving unit 20, transmit data in which the duplication control information and the time change information are added to the ciphered data.

Abstract: A key generating device according to an embodiment of the present invention includes: a parameter determining unit that randomly determines a plurality of parameters that are needed when generating a secret key and a public key; a bilinear group selecting unit that selects a plurality of bilinear groups and bilinear mapping on the basis of the plurality of parameters; and a key generating unit that generates the secret key and the public key on the basis of the parameters and the plurality of bilinear groups.

Abstract: There is provided an information processing device including an identifier setting unit for setting an identifier to a set of terminal devices corresponding to each node of a tree structure, and a key setting unit for setting a key distributed to the terminal device based on the identifier, wherein the identifier setting unit includes a first identifier indicating the set of terminal devices corresponding to each node, and sets the identifier so as to further include a second identifier showing a correspondence relation between plurality of subsets when the set includes a plurality of subsets.

Abstract: An enabling key block (EKB) used in an encrypted key distributing tree structure is generated by forming a simplified 2-branch or multi-branch type tree with a terminal node or leaf which is capable of decrypting on the basis of a key corresponding to a node or a leaf of the Simplified tree. Further, the EKB includes a tag for indicating a position of an encrypted key in the tree. The tag not only discriminates position but also stores data for judging the presence of encrypted key data within the EKB. As such, a considerable reduction in data quantity is realized, and the decrypting process in a device is also simplified.

Abstract: The present invention provides an information storage medium and a method and apparatus for processing information, which manage information storage media so as to prevent unauthorized copies of contents from being distributed or used. On an information storage medium on which an encrypted content is stored, an information storage medium ID which is an identifier uniquely assigned to an information storage medium, and an information storage medium ID revocation list, which is a list of information storage medium IDs determined as invalid, are further stored. In an information processing apparatus configured to read and play back the content stored on the information storage medium, playback of the content is allowed only when the information storage medium ID stored on the information storage medium is not identical to any of revoked information storage medium IDs described in the information storage medium ID revocation list. This prevents an unauthorized copy of a content from being distributed or used.

Abstract: A 4-byte LBA (logical block address) specified in a read command is supplied to first and second IV (initialization vector) generation units. The initialization-vector generation units each extend the LBA to data with a size of 16 bytes by applying typically a hash function to the LBA. The first initialization-vector generation unit outputs the data with a size of 16 bytes to an encryption unit as an initialization vector IV. On the other hand, the second initialization-vector generation unit outputs the data with a size of 16 bytes to a decryption unit as an initialization vector IV. The encryption unit encrypts input data by using the initialization vector IV and a session key Ks received from a first authentication-processing unit. On the other hand, the decryption unit decrypts input data by using the initialization vector IV and the session key Ks received from a second authentication-processing unit.

Abstract: The invention provides a vehicle that can deliver drugs specifically to the body and a pharmaceutical preparation using the same. Disclosed is a drug delivery vehicle for cancer therapy, comprising a cationized viral envelope vector, as well as a pharmaceutical preparation comprising a drug enclosed in the vehicle. The viral envelope vector is for example HVJ-E derived from a Sendai virus, and cationization can be conducted by binding hyaluronic acid-introduced cationized gelatin or ethylene glycol-introduced cationized gelatin with the viral envelope vector. The drug to be enclosed is a nucleic acid, a vector containing a nucleic acid sequence, a protein based drug or pharmaceutical with a low-molecular compound.

Abstract: A content key, an authentication key, and a program data etc. are transmitted with an enabling key block (EKB) in an encrypted key constitution of a tree structure. The EKB has a constitution in which a device as a leaf of the tree holds a leaf key and a limited node key, and a specific enabling key block (EKB) is generated and distributed to a group specified by a specific node to limit devices that can be renewed. As the devices that do not belong to the group cannot perform decryption, the security for distributing keys etc. can be secured. Thus, distribution of various kinds of keys or data is executed in an encryption key constitution of a tree structure to realize an information processing system and method enabling to distribute data efficiently and safely.

Abstract: An authentication system includes a mobile device carried by a user and a sensor sensing the user's biometric information. The mobile device includes a template storage unit storing the user's biometric information as a template, a first mutual authentication unit performing mutual authentication with the sensor via the user's body, and a template transmitter transmitting the stored template to the sensor via the user's body when the sensor is verified as valid. The sensor includes a second mutual authentication unit performing mutual authentication with the mobile device via the user's body, a sensing unit sensing the user's biometric information, a degree-of-match determining unit determining whether the biometric information matches the template, and a control-signal output unit outputting a preset control signal when the mobile device is verified as valid and when the biometric information and the template are determined to match each other.

Abstract: Based on the detailed reproduction control information defining the reproduction control state of data to be transmitted, the CPU 12 of the data transmission apparatus creates a simplified reproduction control information roughly defining the reproduction control state of the data, stores the simplified reproduction control information of the data in the packet header of a data packet carrying the data, stores the detailed reproduction control information in the data, and transmits the simplified reproduction control information and the detailed reproduction control information as well as the data to the data receiving apparatus 20 through the transmission channel 30 from the input-output interface 16.

Abstract: A user, in requesting a service provider to provide predetermined service, sends to a service provider data and signature data created based upon the data. The service provider calculates a fee based upon this data and requests a bank to collect the fee from the user. The bank informs the user of the fee requested from the service provider. When the user protests the amount of the fee, the service provider discloses the data and signature data received from the user to the bank and when the bank judges based upon this signature data that this data is valid, it calculates a proper fee based upon this data and collects it from the user. As described above, it is enabled to collect a proper fee for service.

Abstract: A verification apparatus for checking a verification-target data against registrant's identification data, including: a storage section that stores a plurality of first checkup order data each of which defines an order of checking the verification-target data against a plurality of registrant's identification data that are divided in accordance with a predetermined condition into a plurality of first groups; a selection section that selects one of the first checkup order data that is associated with a first group corresponding to the condition; and a checkup section that checks, in accordance with the selected first checkup order data, the verification-target data against a plurality of registrant's identification data in the first group corresponding to the condition.

Abstract: An information processing system and method are disclosed in which information processing is performed in a highly efficient manner using an enabling key block (EKB) on the basis of a tree structure including category subtrees. A key tree is formed so as to include a plurality of subtrees serving as category trees categorized in accordance with categories and managed by category entities. An EKB includes data produced by selecting a path in a tree and encrypting a higher-level key in the selected path using a lower-level key in the selected path. The resultant EKB is provided to a device. Distribution of EKB's is managed on the basis of an EKB type definition list representing the correspondence between an EKB type identifier and one or more identification data identifying one or more category trees that can process an EKB of an EKB type specified by the EKB type identifier.

Abstract: A system and method are realized which enables valid use of content by preventing unauthorized use of content which is caused by rewriting rights data. A structure is employed in which rights data including use-restriction information on content and DRM data including an encrypted content key are recorded in a digital data recording medium (media), and in which an integrity check value (ICV) for the DRM data can be stored in a recordable/playable area (protected area) by using only a dedicated IC. EKB distribution is used to execute the tree-structure key distribution to distribute keys for generating ICV-generation verifying keys. In this structure, unauthorized use of content by rewriting of the rights data is prevented.

Abstract: Methods and apparatus for efficient revocation of receivers. In one implementation, a method of broadcast encryption includes: assigning a respective master key to each of a plurality of receivers, where each master key can be used to derive two or more of a plurality of sub keys; revoking one or more receivers, leaving one or more unrevoked receivers; for each master key of an unrevoked receiver, selecting the sub key that can be derived by that master key and derived by the most other master keys but not derived by a master key of any of the one or more revoked receivers; for each selected sub key, encrypting one ciphertext using that selected sub key; and sending the encrypted ciphertexts to the plurality of receivers.

Abstract: An imaging apparatus includes at least two living-body detecting units, a imaging unit, and a drive unit. The living-body detecting units are provided at a imaging position where a part of a living body is laid, in conformity with the shape of the part of the living body. The imaging unit images the part of the living body, which is laid at the imaging position. The drive unit drives the imaging unit when all of the at least two living-body detecting units detect the living body.