Abstract: A signal forwarding system includes: a plurality of signal forwarding devices forming a plurality of communication routes between a slave station and a master station; and a route control device that determines a communication route, wherein the route control device includes at least: a communication route calculation unit that calculates a communication route in response to a route switching request; and a forward destination setting instruction unit that outputs forward destination setting information based on the communication route, the signal forwarding devices include at least: a forward destination setting instruction acquisition unit that acquires the forward destination setting information; a forward destination set unit that changes a forward destination based on the forward destination setting information; and a forward unit that outputs input traffic based on the forward destination, and any of the route control device and the signal forwarding devices includes: a traffic monitor unit; a non-signa

Abstract: An ontology generation unit (110) generates information that represents an access policy for each attribute of access in a hierarchical structure, as a plurality of ontologies (30). An application rule generation unit (120) generates an application rule (40). A policy candidate extraction unit (140) acquires an access request (51), and extracts an ontology (30) that includes an attribute included in the access request (51) as an access policy candidate from the plurality of ontologies. An access rule determination unit (150) specifies a plurality of access policies that match the attribute included in the access request (51) form the access policy candidate, applies the application rule (40) to the plurality of access policies, and determines an access rule. A propriety decision unit (160) decides propriety of access based on the access rule.

Abstract: A search device (300) transmits a search condition to a management device (400) that manages a numerical value which is a number sequence of one or more digits, based on a digit-by-digit correspondence between a number of each digit of the numerical value and a digit representation which is a symbol representing a digit. A grouping unit performs grouping on a plurality of search-target numerical values to be searched for, each of which is a number sequence of one or more digits, on a basis of commonality of the number of digits and commonality of a number sequence from a most significant digit, so as to generate one or more numerical value groups.

Abstract: A registration destination determination device (50) determines which data management device, among a plurality of data management devices (20A, 20B), is to manage registration data, such that, with a data type constituting the registration data as a target type, an appearance frequency distribution of values set for the target type of the registration data managed by each of the plurality of data management devices (20A, 20B) is different from an appearance frequency distribution of values set for the target type of the registration data managed by the whole of the plurality of data management devices (20A, 20B).

Abstract: A search device (300) transmits a search condition to a management device (400) that manages a numerical value which is a number sequence of one or more digits, based on a digit-by-digit correspondence between a number of each digit of the numerical value and a digit representation which is a symbol representing a digit. A grouping unit performs grouping on a plurality of search-target numerical values to be searched for, each of which is a number sequence of one or more digits, on a basis of commonality of the number of digits and commonality of a number sequence from a most significant digit, so as to generate one or more numerical value groups.

Abstract: In a search device (102), a data search unit (233) acquires an encrypted query including one keyword from a data storage unit (232), the encrypted query being stored in the storage unit (232) since before the encrypted data is received by the data reception unit (231). The data search unit (233) determines whether a value of the encrypted data and the keyword of the encrypted query coincide, with both of the encrypted data and the encrypted query remaining encrypted. A data transmission unit (234) transmits identification data indicating an identifier of the encrypted query when it is determined by the data search unit (233) that the value of the encrypted data and the keyword of the encrypted query coincide.

Abstract: A registration destination determination device (50) determines which data management device, among a plurality of data management devices (20A, 20B), is to manage registration data, such that, with a data type constituting the registration data as a target type, an appearance frequency distribution of values set for the target type of the registration data managed by each of the plurality of data management devices (20A, 20B) is different from an appearance frequency distribution of values set for the target type of the registration data managed by the whole of the plurality of data management devices (20A, 20B).

Abstract: A database (7) stores a first identifier and visiting destination authentication information in association with each other, the first identifier being generated from visitor authentication information which is one of an encrypted face photograph image and key data used for generating the encrypted face photograph image, the visiting destination authentication information being the other of the encrypted face photograph image and the key data. An authentication terminal apparatus (9) receives authentication data from a mobile terminal device (2) used by a visitor (1) who intends to enter a facility and generates a second identifier from the authentication data in the same generation procedure as that of the first identifier.

Abstract: An encryption device that, when voice or image data or the like being encoded is encrypted using a one-time pad (OTP) cipher and then transmitted, reduces a period of time in which a cipher key for the OTP cipher runs out. A first terminal device determines whether to encode transmission data by a first encoding scheme or a second encoding scheme having a lower bit rate than the first encoding scheme, depending on the number of remaining bits of an OTP cipher key, and encodes the transmission data according to the determined encoding scheme, thereby generating encoded data. The first terminal device encrypts the generated encoded data with the OTP cipher using the OTP cipher key, thereby generating encrypted communication data, and transmits the generated encrypted communication data to a second terminal device.

Abstract: A communication terminal that can adjust which section of a one-time pad cipher key is used and achieve cipher communication when there is a possibility that the one-time pad cipher keys are not completely matched between communication terminals. A cipher key transfer device acquires a one-time pad cipher key from a key sharing system, divides the acquired one-time pad cipher key with a predetermined number of bits, and transfers the same to a mobile communication terminal after converting the same into one-time pad cipher key cartridges. Along with the partner's terminal, the mobile communication terminal negotiates which one-time pad cipher key cartridge will be used to perform cipher communication, decides the one-time pad cipher key cartridge to be used, and begins cipher communication.

Abstract: A certification device 101 encrypts a feature vector for registration by using a random number and a public key which is set to correspond to a secret key in a decryption device 103. The encrypted feature vector for registration is registered in an authentication device 102. In authentication, the certification device encrypts a feature vector for authentication by using the public key and a random number. With the two encrypted feature vectors being kept encrypted, the authentication device generates encrypted similarity degree information from which the decryption device can derive the similarity degree between the two feature vectors by a decryption process using the secret key. The decryption device 103 decrypts the encrypted similarity degree information to derive the similarity degree of the plaintext. The authentication device 102, if the similarity degree is equal to or larger than a threshold, determines that the user is the correct user.

Abstract: When a first communication part of an application program management part receives, from an application, an access request requesting use of a protected resource, an authentication information acquisition part acquires authentication information employed for verification of a legitimacy of the application program management part, from an authentication information storage part. A second communication part transmits the access request from the application and the authentication information, to an authentication part that determines whether or not the application is permitted to use the protected resource.

Abstract: The object is to enable cipher communication even when a cipher key in a one-time pad cipher (Vernam cipher) is running short. A one-time pad encrypting part encrypts communication data by the one-time pad cipher by sequentially using part of a one-time pad cipher key stored in a one-time pad cipher key storage part, to generate encrypted data. A block-encrypting part encrypts communication data by a block cipher by using a block-cipher key stored in a block-cipher key storage part, to generate encrypted data. An encryption control part controls whether the communication data is to be encrypted by the one-time pad encrypting part, or by the block-encrypting part, depending on a remaining bit count of the one-time pad cipher key stored in the one-time pad cipher key storage part.

Abstract: An encryption device that, when voice or image data or the like being encoded is encrypted using a one-time pad (OTP) cipher and then transmitted, reduces a period of time in which a cipher key for the OTP cipher runs out. A first terminal device determines whether to encode transmission data by a first encoding scheme or a second encoding scheme having a lower bit rate than the first encoding scheme, depending on the number of remaining bits of an OTP cipher key, and encodes the transmission data according to the determined encoding scheme, thereby generating encoded data. The first terminal device encrypts the generated encoded data with the OTP cipher using the OTP cipher key, thereby generating encrypted communication data, and transmits the generated encrypted communication data to a second terminal device.

Abstract: The object is to enable cipher communication even when a cipher key in a one-time pad cipher (Vernam cipher) is running short. A one-time pad encrypting part encrypts communication data by the one-time pad cipher by sequentially using part of a one-time pad cipher key stored in a one-time pad cipher key storage part, to generate encrypted data. A block-encrypting part encrypts communication data by a block cipher by using a block-cipher key stored in a block-cipher key storage part, to generate encrypted data. An encryption control part controls whether the communication data is to be encrypted by the one-time pad encrypting part, or by the block-encrypting part, depending on a remaining bit count of the one-time pad cipher key stored in the one-time pad cipher key storage part.

Abstract: A communication terminal that can adjust which section of a one-time pad cipher key is used and achieve cipher communication when there is a possibility that the one-time pad cipher keys are not completely matched between communication terminals. A cipher key transfer device acquires a one-time pad cipher key from a key sharing system, divides the acquired one-time pad cipher key with a predetermined number of bits, and transfers the same to a mobile communication terminal after converting the same into one-time pad cipher key cartridges. Along with the partner's terminal, the mobile communication terminal negotiates which one-time pad cipher key cartridge will be used to perform cipher communication, decides the one-time pad cipher key cartridge to be used, and begins cipher communication.

Abstract: A certification device 101 encrypts a feature vector for registration by using a random number and a public key which is set to correspond to a secret key in a decryption device 103. The encrypted feature vector for registration is registered in an authentication device 102. In authentication, the certification device encrypts a feature vector for authentication by using the public key and a random number. With the two encrypted feature vectors being kept encrypted, the authentication device generates encrypted similarity degree information from which the decryption device can derive the similarity degree between the two feature vectors by a decryption process using the secret key. The decryption device 103 decrypts the encrypted similarity degree information to derive the similarity degree of the plaintext. The authentication device 102, if the similarity degree is equal to or larger than a threshold, determines that the user is the correct user.

Abstract: An interior lighting display device and a display panel thereof capable of effectively preventing a dark area from being formed in the display panel. A film or sheet that reflects light is disposed on a back surface and a side surface of a display panel of an interior lighting display device. For example, the film or sheet is disposed on a back surface and a side surface of a region that is a colored area having low transmittance of the display panel, and an area in which a light source is not present behind the display panel. In addition, a light reflective body is placed in an area in which the light source is not present within the interior lighting display device.

Abstract: A unique code generating apparatus for generating, according to biometric information representing a physical or behavioral feature of a user, a unique code as a unique value for the biometric information includes a statistic information generating section for conducting statistical analysis for a feature of biometric information for registration and generating statistic information, a statistic information table generating section for summarizing the statistic information for each biometric information, setting a unique code for each statistic information, and generating a statistic information table unique to the biometric information, a unique code extracting section for applying to the statistic information table the statistic information generated by the statistic information generating section according to biometric information for collation and extracting an associated unique code from the table, and an output processing section for outputting the unique code extracted by the unique code extracting sec

Abstract: A unique code generating apparatus for generating, according to biometric information representing a physical or behavioral feature of a user, a unique code as a unique value for the biometric information includes a statistic information generating section for conducting statistical analysis for a feature of biometric information for registration and generating statistic information, a statistic information table generating section for summarizing the statistic information for each biometric information, setting a unique code for each statistic information, and generating a statistic information table unique to the biometric information, a unique code extracting section for applying to the statistic information table the statistic information generated by the statistic information generating section according to biometric information for collation and extracting an associated unique code from the table, and an output processing section for outputting the unique code extracted by the unique code extracting sec