Abstract: According to one embodiment, a distribution unit generates a set of first ciphertext fragments based on a first identifier specifying a storage destination of the first ciphertext and a constitution information specifying a constitution of the first ciphertext, generates a deformation command using a second key used for deforming the first ciphertext for at least one fragment belonging to the set of the first ciphertext fragments, and allocates the deformation command to at least one of storage units. A temporary storage unit deforms the first ciphertext fragment by using the second key based on the deformation command, and stores a second ciphertext fragment as a result of the deformation in a non-volatile storage unit instead of the first ciphertext fragment.

Abstract: According to one embodiment, the polynomial ring vector inner product computation circuit computes an inner product between a first frequency domain polynomial ring vector and a second frequency domain polynomial ring vector, based on the first frequency domain polynomial ring vector obtained by preliminarily executing a process of multiplying each of one or more constant polynomials by 1/N and a process of applying the number theoretic transform to each of the one or more constant polynomials, and outputs a time domain polynomial obtained by applying inverse number theoretic transform to the computed inner product as an inner product between a first polynomial ring vector and a second polynomial ring vector.

Abstract: According to one embodiment, a controller includes a first interface configured to receive an I/O command specifying first host data from a host, a second interface configured to transmit and receive the first host data to and from a storage, and a computation processing circuit. The computation processing circuit includes an input circuit configured to input the first host data and plural computation parameters, a duplication processing circuit configured to obtain plural first host data by duplicating the first host data, plural first processing circuits configured to execute computation processes using the input plural parameters for the obtained plural first host data, and an output circuit configured to output computation results.

Abstract: According to one embodiment, a controller includes a first interface, a second interface, a virtual register table, a memory management unit and a calculation processing unit. The first interface receives an I/O command from a host. The second interface transmits and receives first host data to and from a storage. The virtual register table has a virtual address specified by a page number assigned to a page in which data to be used to process a calculation instruction is stored and a page offset, and a data size of the data. The memory management unit stores, into a memory, the copy of the first host data, and updates the virtual register table. The calculation processing unit processes the calculation instruction by referring to the virtual register table.

Abstract: A method of processing a memory system that includes a substrate with a connector and a semiconductor memory chip connected to the connector is provided. The method includes detaching the semiconductor memory chip from the connector, performing an annealing process with respect to the semiconductor memory chip detached from the connector, and after the annealing process, attaching the semiconductor memory chip to the connector on the substrate.

Abstract: A method of sanitizing a media comprising a controller and a storage device, the method comprising executing, by the controller, a command to erase a data area and an internal area of the storage device, verifying, by the controller, that at least a portion of the data area and at least a portion of the internal area of the storage device has been erased, generating, by the server, a certificate of media sanitization (CoS) of the media, and registering, by the server, an entry representative of the CoS of the media in a distributed ledger or database. Here the storage device is configured to store data received from a host external to the storage device only in the data area, and the storage device is configured to store operational data in the internal area for the operation of the storage device.

Abstract: An information processing apparatus or method that can share secret information by plural holders. The apparatus or method execute a control to: calculate or generate an encryption key and k key symbols from k random numbers; encrypt k information symbols using the encryption key to output k encrypted symbols; output any one of the k encrypted symbols and the k key symbols as k message symbols; output a flag indicating which one of the k encrypted symbols and the k key symbols are the k message symbols; encode the k message symbols with a maximum distance separable code to output n code symbols; and-output n code blocks from the n code symbols and the flag, wherein k is a positive integer of one or more, and n is a positive integer larger than k.

Abstract: According to one embodiment, a controller includes a first interface, a second interface, a virtual register table, a memory management unit and a calculation processing unit. The first interface receives an I/O command from a host. The second interface transmits and receives first host data to and from a storage. The virtual register table has a virtual address specified by a page number assigned to a page in which data to be used to process a calculation instruction is stored and a page offset, and a data size of the data. The memory management unit stores, into a memory, the copy of the first host data, and updates the virtual register table. The calculation processing unit processes the calculation instruction by referring to the virtual register table.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, an encryption device includes a generator configured to generate an N-dimensional random number vector, a calculator configured to calculate a value of a predetermined function for the random number vector, and an encryption circuit configured to encrypt the leading component by a public key of N rows and (n+1) columns having an (n+1)-dimensional regular submatrix and the N-dimensional random number vector and encrypt each of the subsequent components by the public key and an output of the calculator.

Abstract: A method of sanitizing a media comprising a controller and a storage device, the method comprising executing, by the controller, a command to erase a data area and an internal area of the storage device, verifying, by the controller, that at least a portion of the data area and at least a portion of the internal area of the storage device has been erased, generating, by the server, a certificate of media sanitization (CoS) of the media, and registering, by the server, an entry representative of the CoS of the media in a distributed ledger or database. Here the storage device is configured to store data received from a host external to the storage device only in the data area, and the storage device is configured to store operational data in the internal area for the operation of the storage device.

Abstract: According to one embodiment, a distribution unit generates a set of first ciphertext fragments based on a first identifier specifying a storage destination of the first ciphertext and a constitution information specifying a constitution of the first ciphertext, generates a deformation command using a second key used for deforming the first ciphertext for at least one fragment belonging to the set of the first ciphertext fragments, and allocates the deformation command to at least one of storage units. A temporary storage unit deforms the first ciphertext fragment by using the second key based on the deformation command, and stores a second ciphertext fragment as a result of the deformation in a non-volatile storage unit instead of the first ciphertext fragment.

Abstract: A method of processing a memory system that includes a substrate with a connector and a semiconductor memory chip connected to the connector is provided. The method includes detaching the semiconductor memory chip from the connector, performing an annealing process with respect to the semiconductor memory chip detached from the connector, and after the annealing process, attaching the semiconductor memory chip to the connector on the substrate.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, an information processing apparatus comprises a calculator configured to calculate an encryption key and k key symbols, an encryption module configured to encrypt k information symbols to output k encrypted symbols, a selector configured to output the k encrypted symbols or the k key symbols as k message symbols, and to output a flag indicating which one of the k encrypted symbols and the k key symbols are output, an encoder configured to encode the k message symbols with a maximum distance separable code to output n code symbols, and an output module configured to output n code blocks from the n code symbols and the flag. k is a positive integer of one or more, and n is a positive integer larger than k.

Abstract: According to one embodiment, a storage device includes a storage and a controller. The storage stores a first table and a second table. The first table includes a set of a key and a value. The second table includes a set of the key and a member set that is a group of members requesting the value to be stored in the first table in association with the key. When receiving a delete command that requests the value associated with the key to be deleted in the first table, the controller deletes the member issuing the delete command in the member set stored in the second table, and deletes an entry corresponding to the key in the first table and an entry corresponding to the key in the second table when number of members in the member set becomes zero.

Abstract: According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.

Abstract: According to one embodiment, a read controller reads data and metadata from a nonvolatile memory. The read controller includes a reader, a read mode changer and a first data processor. The reader reads first data and first metadata from the nonvolatile memory. The read mode changer determines whether to execute sequential processing for the first data based on the first metadata. When the read mode changer determines that the sequential processing is to be executed, the first data processor stores information necessary for the sequential processing, executes the sequential processing for the first data, and generates second metadata including a result of the sequential processing. The read controller outputs the first data, and the first metadata or the second metadata.

Abstract: A workflow scheduling system includes a first processor configured to schedule a plurality of workflows each including a plurality of tasks; a plurality of second processors configured to form a predetermined number of logical computation units and execute the scheduled workflows in parallel; and a memory that stores information about a plurality of task groups each of which includes one or more tasks from one or more of the workflows. The first processor is configured to, based on the stored information, instruct the second processors to execute the scheduled workflows while limiting a total number of the workflows simultaneously executed by the second processors to the predetermined number for each of the task groups.