Abstract: An information processing apparatus or method that can share secret information by plural holders. The apparatus or method execute a control to: calculate or generate an encryption key and k key symbols from k random numbers; encrypt k information symbols using the encryption key to output k encrypted symbols; output any one of the k encrypted symbols and the k key symbols as k message symbols; output a flag indicating which one of the k encrypted symbols and the k key symbols are the k message symbols; encode the k message symbols with a maximum distance separable code to output n code symbols; and-output n code blocks from the n code symbols and the flag, wherein k is a positive integer of one or more, and n is a positive integer larger than k.

Abstract: According to one embodiment, a controller includes a first interface, a second interface, a virtual register table, a memory management unit and a calculation processing unit. The first interface receives an I/O command from a host. The second interface transmits and receives first host data to and from a storage. The virtual register table has a virtual address specified by a page number assigned to a page in which data to be used to process a calculation instruction is stored and a page offset, and a data size of the data. The memory management unit stores, into a memory, the copy of the first host data, and updates the virtual register table. The calculation processing unit processes the calculation instruction by referring to the virtual register table.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, an encryption device includes a generator configured to generate an N-dimensional random number vector, a calculator configured to calculate a value of a predetermined function for the random number vector, and an encryption circuit configured to encrypt the leading component by a public key of N rows and (n+1) columns having an (n+1)-dimensional regular submatrix and the N-dimensional random number vector and encrypt each of the subsequent components by the public key and an output of the calculator.

Abstract: A method of sanitizing a media comprising a controller and a storage device, the method comprising executing, by the controller, a command to erase a data area and an internal area of the storage device, verifying, by the controller, that at least a portion of the data area and at least a portion of the internal area of the storage device has been erased, generating, by the server, a certificate of media sanitization (CoS) of the media, and registering, by the server, an entry representative of the CoS of the media in a distributed ledger or database. Here the storage device is configured to store data received from a host external to the storage device only in the data area, and the storage device is configured to store operational data in the internal area for the operation of the storage device.

Abstract: According to one embodiment, a distribution unit generates a set of first ciphertext fragments based on a first identifier specifying a storage destination of the first ciphertext and a constitution information specifying a constitution of the first ciphertext, generates a deformation command using a second key used for deforming the first ciphertext for at least one fragment belonging to the set of the first ciphertext fragments, and allocates the deformation command to at least one of storage units. A temporary storage unit deforms the first ciphertext fragment by using the second key based on the deformation command, and stores a second ciphertext fragment as a result of the deformation in a non-volatile storage unit instead of the first ciphertext fragment.

Abstract: A method of processing a memory system that includes a substrate with a connector and a semiconductor memory chip connected to the connector is provided. The method includes detaching the semiconductor memory chip from the connector, performing an annealing process with respect to the semiconductor memory chip detached from the connector, and after the annealing process, attaching the semiconductor memory chip to the connector on the substrate.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, an information processing apparatus comprises a calculator configured to calculate an encryption key and k key symbols, an encryption module configured to encrypt k information symbols to output k encrypted symbols, a selector configured to output the k encrypted symbols or the k key symbols as k message symbols, and to output a flag indicating which one of the k encrypted symbols and the k key symbols are output, an encoder configured to encode the k message symbols with a maximum distance separable code to output n code symbols, and an output module configured to output n code blocks from the n code symbols and the flag. k is a positive integer of one or more, and n is a positive integer larger than k.

Abstract: According to one embodiment, a storage device includes a storage and a controller. The storage stores a first table and a second table. The first table includes a set of a key and a value. The second table includes a set of the key and a member set that is a group of members requesting the value to be stored in the first table in association with the key. When receiving a delete command that requests the value associated with the key to be deleted in the first table, the controller deletes the member issuing the delete command in the member set stored in the second table, and deletes an entry corresponding to the key in the first table and an entry corresponding to the key in the second table when number of members in the member set becomes zero.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, a read controller reads data and metadata from a nonvolatile memory. The read controller includes a reader, a read mode changer and a first data processor. The reader reads first data and first metadata from the nonvolatile memory. The read mode changer determines whether to execute sequential processing for the first data based on the first metadata. When the read mode changer determines that the sequential processing is to be executed, the first data processor stores information necessary for the sequential processing, executes the sequential processing for the first data, and generates second metadata including a result of the sequential processing. The read controller outputs the first data, and the first metadata or the second metadata.

Abstract: A workflow scheduling system includes a first processor configured to schedule a plurality of workflows each including a plurality of tasks; a plurality of second processors configured to form a predetermined number of logical computation units and execute the scheduled workflows in parallel; and a memory that stores information about a plurality of task groups each of which includes one or more tasks from one or more of the workflows. The first processor is configured to, based on the stored information, instruct the second processors to execute the scheduled workflows while limiting a total number of the workflows simultaneously executed by the second processors to the predetermined number for each of the task groups.

Abstract: A workflow scheduling system includes a first processor configured to schedule a plurality of workflows each including a plurality of tasks; a plurality of second processors configured to form a predetermined number of logical computation units and execute the scheduled workflows in parallel; and a memory that stores information about a plurality of task groups each of which includes one or more tasks from one or more of the workflows. The first processor is configured to, based on the stored information, instruct the second processors to execute the scheduled workflows while limiting a total number of the workflows simultaneously executed by the second processors to the predetermined number for each of the task groups.

Abstract: An information processing apparatus including a processor configured to execute a process including receiving a first allocation request to allocate first data to any one of a plurality of disk storage devices, the first allocation request including a designation of an allocation unit for the first data, allocating the first data to a first disk storage device, receiving a second allocation request to allocate second data, the second allocation request including a designation of an allocation unit for the second data, and allocating the second data to the first disk storage device when the designation of the allocation unit for the second data is same as the designation of the allocation unit for the first data and allocating the second data to a second disk storage device when the allocation unit for the second data is different from the allocation unit for the first data.

Abstract: A disclosed surface-emitting laser module includes a surface-emitting laser formed on a substrate to emit light perpendicular to its surface, a package including a recess portion in which the substrate having the surface-emitting laser is arranged, and a transparent substrate arranged to cover the recess portion of the package and the substrate having the surface-emitting laser such that the transparent substrate and the package are connected on a light emitting side of the surface-emitting laser. In the surface-emitting laser module, a high reflectance region and a low reflectance region are formed within a region enclosed by an electrode on an upper part of a mesa of the surface-emitting laser, and the transparent substrate is slanted to the surface of the substrate having the surface-emitting laser in a polarization direction of the light emitted from the surface-emitting laser determined by the high reflectance region and the low reflectance region.

Abstract: In an optical sensor, a light emission system emits an irradiated light of a linear polarization in a first polarization direction toward a surface of a target object having a sheet shape from an incident direction which is inclined with respect to a normal direction of the surface. A first light detection system includes a first light detector arranged on a first light path of a specular reflected light, which is emitted from the light emission system and is specularly reflected from the target object. A second light detection system includes a second light detector arranged on a second light path of a diffuse reflected light which is diffusely reflected from an incident plane on the target object. The second light detector receives second light passed by an optical element which passes a linear polarization component of a second polarization direction perpendicular to the first polarization direction.

Abstract: In an optical sensor, a light emission system emits an irradiated light of a linear polarization in a first polarization direction toward a surface of a target object having a sheet shape from an incident direction which is inclined with respect to a normal direction of the surface. A first light detection system includes a first light detector arranged on a first light path of a specular reflected light, which is emitted from the light emission system and is specularly reflected from the target object. A second light detection system includes a second light detector arranged on a second light path of a diffuse reflected light which is diffusely reflected from an incident plane on the target object. The second light detector receives second light passed by an optical element which passes a linear polarization component of a second polarization direction perpendicular to the first polarization direction.

Abstract: In an optical sensor, a light emission system emits an irradiated light of a linear polarization in a first polarization direction toward a surface of a target object having a sheet shape from an incident direction which is inclined with respect to a normal direction of the surface. A first light detection system includes a first light detector arranged on a first light path of a specular reflected light, which is emitted from the light emission system and is specularly reflected from the target object. A second light detection system includes a second light detector arranged on a second light path of a diffuse reflected light which is diffusely reflected from an incident plane on the target object. The second light detector receives second light passed by an optical element which passes a linear polarization component of a second polarization direction perpendicular to the first polarization direction.