Abstract: A data extraction system includes a registration apparatus, a data storage apparatus, and a query apparatus. The registration apparatus generates registration data including first information obtained by encrypting secret information, which is information that a user wishes to keep secret, by using a secret key and second information obtained by encrypting the secret key by using at least biological information of the user. The data storage apparatus holds the registration data. The query apparatus acquires the registration data by generating a query for acquiring the registration data from the data storage apparatus, extracts the secret key from the registration data by using biological information of the user, and extracts the secret information from the registration data by using the extracted secret key.

Abstract: A similarity calculation system calculating a distance between a first vector stored in a similarity calculation apparatus and a second vector entered from an input terminal wherein the similarity calculation apparatus transmits to the input terminal a ciphertext of each element of the first vector and a weighted distance table with respect to combinations of possible values of the elements of the first vector and the second vector, and the input terminal refers to the weighted distance table to calculate a ciphertext of element distances for all combinations of the value of a single element of the second vector and possible values of elements of the first vector, calculates the ciphertexts of the sum of the element distances for each element of the second vector using additive homomorphic encryption, and transmits the ciphertext of the sum to the similarity calculation apparatus.

Abstract: A conventional biometric authentication system has been time-consuming and labor-intensive for users since the users are requested to re-register their biometric information. According to an aspect of the present disclosure, a biometric authentication system includes an update value generation unit configured to generate an update value, a first update processing unit configured to update, using the update value, a template generated based on biometric information, and a second update processing unit configured to update, using the update value, a verification key generated along with the template based on the biometric information using the update value.

Abstract: Provided is an authentication system capable of preventing determination that authentication of a person to be authenticated succeeds even though determination as to whether matching information matches registration information is not performed when authentication using two factors is performed. A determination unit 43 determines whether or not the matching information matches the registration information. A signature generation unit 21 of a client 10 generates a signature based on the message by using a signature key. A signature determination unit 34 determines whether or not the signature is a correct signature by using a first verification key, a message, and the signature. When it is determined that the matching information matches the registration information and it is determined that the signature is the correct signature, the authentication determination unit 37 determines that the authentication succeeds.

Abstract: In IaaS (Infrastructure as a Service), when it is desirable to delegate the authority to a user outside a system, a recipient of an access token is designated, thereby preventing illegal distribution of the access token. There is provided an access token system including a generator and a verifier. The generator generates, using secret information of a recipient, a recipient-designated access token for which the recipient is designated, and provides the recipient-designated access token to a user. The verifier verifies that the user who makes access using the recipient-designated access token is the designated recipient.

Abstract: In a recovery verification system, a template storage unit stores a template acquired by encrypting registration input information being biometric information about a registrant by using a secret key. A random number generation unit generates a random number in response to a request from the client. A protected template generation unit conceals the template by the random number, and transmits a protected template to the client. A determination unit acquires, from the client, information about a concealment index that is acquired by concealing a degree of similarity between registration input information and collation information being biometric information about an authenticated subject and is calculated based on the collation information and the protected template. A determination unit generates an index acquired by decrypting the concealment index by using a public key associated with the secret key and the random number, and performs authentication, based on the index.

Abstract: A matching apparatus generates a random number and transmits second encrypted data obtained by performing an operation of first encrypted data of each of first values related to a first binary vector encrypted and the random number to a matching request apparatus; transmits third encrypted data obtained by performing an operation of the second encrypted data and elements of a matching target second binary vector; based on a second value related to the first binary vector encrypted with the encryption key, the encrypted data and the random number, generates and transmits encrypted data and transmits the generated data to a verification apparatus as a query; and determines whether a count number of mismatched elements between the second binary vector and the first binary vector is less than or equal to a predetermined number based on values obtained by decrypting the encrypted data in the query.

Abstract: An information concealing system includes: an information concealing apparatus configured to generate a pseudo-random number, convert first information into first conversion information by using the pseudo-random number, and cause a concealment information generating unit to generate first concealment information capable to reconfigure the first information, based on the first conversion information; and an information reconfiguring apparatus configured to extract information related to a seed from the first concealment information, generate a reconfiguration-side pseudo-random number, based on the information related to the seed, convert input second information into second conversion information by using the reconfiguration-side pseudo-random number, and reconfigure the first information concealed as the first concealment information, based on the second conversion information and the first concealment information.

Abstract: An encryption system comprises a key generation apparatus that generates an encryption key relating to the authority to generate a ciphertext from a plaintext, a homomorphic operation key relating to the authority to execute a homomorphic operation on a ciphertext that remains encrypted and whose authority is weaker than that of the encryption key, and a decryption key relating to the authority to decrypt ciphertext; an encryption apparatus that generates a ciphertext from a plaintext using the encryption key; a homomorphic operation apparatus that executes a homomorphic operation on the ciphertext using the homomorphic operation key; and a decryption apparatus that decrypts ciphertext using the decryption key.

Abstract: In order to provide an information concealing apparatus, an information reconfiguring apparatus, an information concealing system, an information concealing method, an information reconfiguring method, an information concealing program, and an information reconfiguring program to reduce information leakage risks, an information concealing system includes an information concealing apparatus, and an information reconfiguring apparatus. The information concealing apparatus generates a codeword capable of error-correcting concealment-side input information, generates noise including a predetermined error, and generates concealment information capable to reconfigure the concealment-side input information, by adding the concealment-side input information and the noise to the codeword. The information reconfiguring apparatus reconfigures the codeword from the concealment information, based on reconfiguration-side input information and the concealment information.

Abstract: A comparison system includes a key generation means for generating a common key being common to each of a plurality of pieces of registration information, and also generating a plurality of unique keys being unique for each of the plurality of pieces of registration information by using a plurality of pieces of identification information, a concealment means (126) for generating a plurality of pieces of concealment information. The client includes a concealment index calculation means for calculating a plurality of concealment indexes representing a similarity degree between comparison information and each of the plurality of pieces of concealment information. The verification server includes a determination means for generating a plurality of indexes acquired by decrypting each of the plurality of concealment indexes, and also performing authentication of the comparison information, based on whether any of the plurality of indexes indicates a value within a predetermined range.

Abstract: A collation system 10 includes divide registered information to first information and second information, and to provide the second information to a server apparatus 200, perform a first step for similarity calculation between the registered information and collation information inputted for collation with the registered information, based on the collation information and the first information, send a calculation result of the first step to the server apparatus 200, perform a second step for the similarity calculation based on the calculation result of the first step received from a client terminal 100, and the second information, send a calculation result of the second step to the client terminal 100, and perform a third step for the similarity calculation based on the calculation result of the second step received from the server apparatus 200, and the first information to calculate similarity between the registered information and the collation information.

Abstract: A signature verification system 100 includes a signature apparatus 210 configured to sign data including a predetermined data block replaced with a chameleon hash value, using one or more public keys for changers authorized to change data, a changing apparatus 310 configured to receive the signed data, and to change a content of the predetermined data block of the signed data using a private key associated with any of the one or more public keys, and a verifying apparatus 410 configured to receive the signed data with the changed content of the predetermined data block, and to verify the signature using the one or more public keys for the changers.

Abstract: A signature verification system includes: a signature apparatus configured to sign a first chameleon hash value, an unmodifiable part of the data, and a second chameleon hash value of an entirety of the data; a changing apparatus configured to change a public key for the changers of the temporary delegator to a public key for changers of an actual delegator, using a private key for the changers; a delegator changing apparatus configured to change a modifiable part of the data, using a private key for the changers of the actual delegator; and a verifying apparatus configured to verify the signature using the public key for the changers and the public key for the changers of the actual delegator.

Abstract: In order to provide an information matching system achieving an information matching scheme that takes a lower cost and uses secure biometric information, the information matching system includes a concealment apparatus, a decryption apparatus, and a similarity calculating apparatus. The concealment apparatus transmits, to the similarity calculating apparatus, concealed information including information concealing obtained matching information by linear conversion using random numbers. The similarity calculating apparatus calculates, from obtained one or more pieces of registration information and the concealed information received from the concealment apparatus, a concealed similarity which is a value concealing a similarity between the matching information and the registration information, and to transmit the calculated concealed similarity to the decryption apparatus.

Abstract: A data extraction system includes a registration apparatus, a data storage apparatus, and a query apparatus. The registration apparatus generates registration data including first information obtained by encrypting secret information, which is information that a user wishes to keep secret, by using a secret key and second information obtained by encrypting the secret key by using at least biological information of the user. The data storage apparatus holds the registration data. The query apparatus acquires the registration data by generating a query for acquiring the registration data from the data storage apparatus, extracts the secret key from the registration data by using biological information of the user, and extracts the secret information from the registration data by using the extracted secret key.

Abstract: A storing information generation apparatus obtains registration information and an identifier capable of identifying the registration information, to generate a first individual key from the common key and the identifier, and to generate storing information obtained by linearly converting the registration information using the common key and the first individual key. A matching information concealment apparatus obtains matching information to generate concealed matching information concealing the matching information using an encryption key. A concealed similarity calculation apparatus calculates a concealed similarity from the storing information and the concealed matching information. A decryption apparatus generates a second individual key from the common key and the identifier, and calculates a similarity between the registration information and the matching information from the concealed similarity, a decryption key corresponding to the encryption key, the common key, and the second individual key.

Abstract: In order to provide a system and the like which is secure in information collation against an attack in which a data space of one piece of data for registration and authentication is different from a data space of the other piece of the data, the system includes a registration data generation apparatus (100) generating a first commitment of first input data for registration, and first proof data indicating that the first input data is included in a predetermined input data space, a registration data verification apparatus (200) verifying the first commitment and the first proof data, an authentication data generation apparatus (500) generating a second commitment of second input data to be authenticated, and second proof data indicating that the second input data is included in the predetermined input data space and that a similarity between the second input data and registration data in a registration data storage apparatus (300) is included in a predetermined acceptance range, and an authentication data ver

Abstract: The client includes a random number generation unit which generates a random number, a concealed information storage unit which stores concealed information generated by concealing registered information and the generated random number using a secret key, and a response computation unit which, on the basis of a challenge transmitted from the server, the collation information input for collation with the registered information, and the concealed information, computes a response corresponding to the challenge and including a concealed index, generated by concealing an index indicating closeness between the registered information and the collation information. The server includes a challenge generation unit which generates the challenge using a public key corresponding to the secret key, and a determination unit which uses the public key and the random number transmitted from the client to determine whether or not the response transmitted from the client corresponds to the challenge.

Abstract: An encrypted information matching device 20 includes: a storage unit 240 in which representative information representing a group based on similarity in a characteristic and encrypted information to be matched belonging to the group are associated with each other and stored; an identification unit 231 which calculates a first similarity between the encrypted input information and the representative information stored in the unit 240, and which, based on the first similarity, identifies a group to be matched with the first input information; and a determination unit 232 which calculates a second similarity between the encrypted input information and the encrypted information to be matched that belongs to the group identified, in a state in which the input information and the information to be matched are encrypted, wherein the unit 232 determines the presence or absence of information to be matched which makes the calculated second similarity satisfy criteria.