Abstract: According to an embodiment, a data generating device includes a first generator, an obtainer, a second generator, a verifier, and an operation selector. The first generator generates device-specific first data. The obtainer obtains second data from outside of the data generating device. The second generator generates third data based on the first data and the second data. The verifier verifies correctness of the third data. When the third data is determined to be incorrect, the operation selector selects at least one of regenerating the first data, re-obtaining the second data, and disabling the data generating device according to a predetermined selection rule.

Abstract: According to an embodiment, an update control apparatus is to control update of software in a terminal connected to a network. The update control apparatus includes a first communication circuit, a second communication circuit, and a processor. The first communication circuit is configured to communicate with a server located outside the network. The second communication circuit is configured to communicate with the terminal through the network. The processor is configured to: receive update data to update the software from the server using the first communication circuit; transmit the update data to the terminal, as well as receive an update result indicating whether update of the software has succeeded, together with verification data, from the terminal using the second communication circuit; and verify, using the verification data, whether the update result is proper data.

Abstract: According to an embodiment, a test apparatus that is connected to an electronic device through a network includes a generator, a transmitter, and a determination unit. The generator generates third data computed from first data shared with the electronic device and predetermined second data. The transmitter transmits the third data to the electronic device. The determination unit determines whether the first data of the electronic device is normal depending on whether the second data is restored correctly from the third data using the first data of the electronic device.

Abstract: According to an embodiment, an update control device includes a first communication circuit, a second communication circuit, and a processor. The first communication circuit is configured to receive patch data for each block of the software and first authentication data for each block for authenticating software in a terminal updated using the patch data on a per-block basis. The second communication circuit is configured to transmit the patch data and the first authentication data to the terminal on a per-block basis and receive an update result for each block from the terminal. The processor is configured to request the terminal to perform rollback processing for restoring a first block to an (M?1)th block using the patch data used to update the first block to the (M?1)th block of the software, upon receipt of an update result indicating a failure in authenticating an Mth block (M>1) from the terminal.

Abstract: According to an embodiment, an update control apparatus is to control update of software in a terminal connected to a network. The update control apparatus includes a first communication circuit, a second communication circuit, and a processor. The first communication circuit is configured to communicate with a server located outside the network. The second communication circuit is configured to communicate with the terminal through the network. The processor is configured to: receive update data to update the software from the server using the first communication circuit; transmit the update data to the terminal, as well as receive an update result indicating whether update of the software has succeeded, together with verification data, from the terminal using the second communication circuit; and verify, using the verification data, whether the update result is proper data.

Abstract: According to an embodiment, an information processing device includes a conversion unit, an encryption unit, and a transmission unit. The conversion unit converts a first encryption key to be used for generation of a master key to be shared with a server device by using a second conversion rule to generate a third encryption key to be a new master key. The second conversion rule is different from a first conversion rule used for generation of a second encryption key that is the master key currently used for encrypted communication with the server device. The encryption unit generates a ciphertext so that the server device derives the third encryption key on a basis of the second encryption key and the third encryption key. The transmission unit transmits the ciphertext to the server device.

Abstract: According to an embodiment, a generating device includes a first key generator, a second key generator, and an output unit. The first key generator is configured to generate a first key according to a first key rule in which the first key is generated from a random number, the first key being a bit sequence. The second key generator is configured to generate a plurality of second keys according to a second key rule in which the second keys are generated from the first key, the second keys being bit sequences partly correlated to one another. The output unit is configured to output the first key and at least one of the second keys.

Abstract: According to an embodiment, a data distribution apparatus is connected with electronic apparatuses through a network. The data distribution apparatus includes a storage, a transmitter, a receiver, and an output unit. The storage is configured to store management information in which predetermined data is associated with number specification information for specifying number of electronic apparatuses belonging to the group. The transmitter is configured to transmit a sharing start instruction including the predetermined data. The receiver is configured to receive one or more distribution requests transmitted from one or more electronic apparatuses in response to the instruction. The output unit is configured to output an error signal indicating that an unauthorized electronic apparatus is connected when the number of received distribution requests exceeds the number specified.

Abstract: According to an embodiment, a concealing apparatus includes a concealing processor, a mapping information generator, a tag generator, and a concealed, information output unit. The concealing processor is configured to generate a concealed text by concealing a plaintext with a concealing key. The mapping information generator is configured to generate mapping information that is mapped to a keyword for retrieving the plaintext. The tag generator is configured to generate a tag based on the keyword and the mapping information. The concealed information output unit is configured to output the concealed text and the tag as a pair.

Abstract: According to an embodiment, a communication apparatus connected to a bus in which a second bit has higher priority than a first bit, the communication apparatus includes one or more processors. The one or more processors are configured to obtain first information. The one or more processors are configured to generate second information in which the first information is set at a predetermined position and a predetermined bit string including the first bit is set at a position other than the predetermined position. And the one or more processors are configured to transmit communication data including the second information.

Abstract: According to an embodiment, an information processing device includes a conversion unit, an encryption unit, and a transmission unit. The conversion unit converts a first encryption key to be used for generation of a master key to be shared with a server device by using a second conversion rule to generate a third encryption key to be a new master key. The second conversion rule is different from a first conversion rule used for generation of a second encryption key that is the master key currently used for encrypted communication with the server device. The encryption unit generates a ciphertext so that the server device derives the third encryption key on a basis of the second encryption key and the third encryption key. The transmission unit transmits the ciphertext to the server device.

Abstract: According to an embodiment, an information processing device is connected to a management apparatus via a network. The device includes a receiver, an acquisition unit, an MKB processor, and an authentication unit. The receiver is configured to receive communication information. The acquisition unit is configured to acquire a media key block from the management apparatus, in response to receipt of the communication information from a first external device not belonging to a group previously classified on a management unit basis by the management apparatus, the first external device and the information processing device being enabled to derive a first group key based on the media key block. The MKB processor is configured to generate the group key from a device key of the information processing device and the media key block. The authentication unit is configured to perform encrypted communication with the external device based on an authentication method using the group key.

Abstract: According to an embodiment, a data distribution apparatus is connected with electronic apparatuses through a network. The data distribution apparatus includes a storage, a transmitter, a receiver, and an output unit. The storage is configured to store management information in which predetermined data is associated with number specification information for specifying number of electronic apparatuses belonging to the group. The transmitter is configured to transmit a sharing start instruction including the predetermined data. The receiver is configured to receive one or more distribution requests transmitted from one or more electronic apparatuses in response to the instruction. The output unit is configured to output an error signal indicating that an unauthorized electronic apparatus is connected when the number of received distribution requests exceeds the number specified.

Abstract: According to an embodiment, a test apparatus that is connected to an electronic device through a network includes a generator, a transmitter, and a determination unit. The generator generates third data computed from first data shared with the electronic device and predetermined second data. The transmitter transmits the third data to the electronic device. The determination unit determines whether the first data of the electronic device is normal depending on whether the second data is restored correctly from the third data using the first data of the electronic device.

Abstract: According to an embodiment, an encryption key generating apparatus includes a converting unit to convert input data using a physically unclonable function and outputs output data; a memory to store a plurality of pattern data, each of which is a partial data in the output data indicated by one of a plurality of index data; a generating unit to generates an encryption key on the basis of the plural of index data; and a comparing unit to compare the output data with the plural of pattern data to detect plural of locations in the output data at which partial data similar to the plural of pattern data is present. The generating unit reproduces, as the plural of index data, the plural of locations detected by the comparing unit and reproduces the encryption key on the basis of the plural of index data that have been reproduced.

Abstract: According to an embodiment, a generating device includes a first key generator, a second key generator, an output unit, and an update unit. The first key generator is configured to generate a first key that is a sequence of bits according to a first key rule on the basis of a random number. The second key generator is configured to generate multiple second keys that are sequences of bits partially having correlation with one another according to a second key rule on the basis of the first key. The output unit is configured to output the first key and at least one of the second keys. The update unit is configured to generate update information for updating a second key by updating a partial sequence of the second key, the partial sequence having no correlation with the other second keys not to be updated.

Abstract: According to an embodiment, a concealing apparatus includes a concealing processor, a mapping information generator, a tag generator, and a concealed, information output unit. The concealing processor is configured to generate a concealed text by concealing a plaintext with a concealing key. The mapping information generator is configured to generate mapping information that is mapped to a keyword for retrieving the plaintext. The tag generator is configured to generate a tag based on the keyword and the mapping information. The concealed information output unit is configured to output the concealed text and the tag as a pair.

Abstract: According to one embodiment, an information processing apparatus, which is connected to an external apparatus, includes a device key storage unit, a creating unit, a calculating unit, a communication unit, and a key calculating unit. The device key storage unit stores therein a device key. The creating unit creates a media key from the device key and a media key block. The calculating unit calculates first output information on the basis of first inherent information inherent to the information processing apparatus and public information. The communication unit transmits the first output information to the external apparatus and receives second output information calculated by the external apparatus from the external apparatus. The key calculating unit calculates a shared key shared between the information processing apparatus and the external apparatus on the basis of the media key, the first inherent information, and the second output information.

Abstract: According to an embodiment, a partial information generating device includes a receiver, a first generator, and a second generator. The receiver is configured to receive power usage amounts each collected for a unitary time by at least one power meter. The first generator is configured to generate a piece of first partial information from a range that is zero or more and less than a predetermined basal value for each of the power usage amounts. The second generator is configured to generate one or more pieces of auxiliary information and a piece of second partial information for the each of the power usage amounts, by using the each of the power usage amounts, the piece of first partial information, and the basal value.

Abstract: In a symmetric encryption apparatus according to an embodiment, a storage unit stores a symmetric key formed from a plurality of elements of a first polynomial ring. A plaintext acceptance unit accepts input of plaintext information. A plaintext polynomial generation unit generates a plaintext polynomial by embedding the plaintext information whose input has been accepted in at least one of terms of a polynomial in a subspace of the first polynomial ring. A mask polynomial generation unit generates a mask polynomial having the symmetric key as a solution based on a second commutative ring defined over the first polynomial ring. An encryption unit generates a ciphertext using the plaintext polynomial and the mask polynomial.