Nec Corporation

Batnyam Enkhtaivan

Toshiyuki Isshiki

Hiroto Tamiya

Pooja Dhomse

Isamu Teranishi

Takao Takenouchi

Kunihiro Ito

Keisuke Kajigaya

Sanami Nakagawa

Provided is a technique to prevent an attribute inference attack against a federated learning model. An information processing apparatus () includes: a detection section () that detects, as an outlier, an output value which falls outside a normal range in terms of magnitude of a value among output values of a decision tree which is undergoing federated learning; and a determination section () that determines, in a case where the outlier has been detected, that the decision tree has vulnerability to an attack to infer an attribute value included in training data which has been used to train the decision tree.

Information processing apparatus and storage medium

A signature verification system includes: a signature apparatus configured to sign a first chameleon hash value, an unmodifiable part of the data, and a second chameleon hash value of an entirety of the data; a changing apparatus configured to change a public key for the changers of the temporary delegator to a public key for changers of an actual delegator, using a private key for the changers; a delegator changing apparatus configured to change a modifiable part of the data, using a private key for the changers of the actual delegator; and a verifying apparatus configured to verify the signature using the public key for the changers and the public key for the changers of the actual delegator.

Signature verification system, signature apparatus, signature verification method, and program

An apparatus publishes the first verification key generated in a first secure area outside the apparatus, acquires a second verification key that is generated in a second secure area of a data requesting apparatus and published by the data requesting apparatus, signs, in the first secure area, in response to a data delivery request, delivery target data using the first signature key, transmits transmission data obtained through the signing to the data requesting apparatus, receives certification data from the data requesting apparatus, verifies a signature of the certification data using the second verification key, and transmits, when the signature of the certification data is successfully verified using the second verification key, the certification data to the data providing apparatus.

Data delivery apparatus and method, data requesting apparatus and method, data delivery system, and computer readable medium

The invention relates to an information processing apparatus that generates a pair of a first signature key and a first verification key, publishes the first verification key outside the information processing apparatus, acquires a second verification key that is generated and published by an own apparatus, generates a secret value table including a plurality of secret values and indices, transmits signed transmission data obtained by signing transmission data with the first signature key, the transmission data including processing target data comprising at least a part of delivery target data and an index corresponding to a secret value that has been associated with the processing target data based on the secret value table, receives certification data from the own apparatus, verifies a signature of the certification data using the second verification key, and transmits the certification data to a data providing apparatus, when the signature of the certification data is successfully verified using the second verification key.

A management apparatus is operated by one operating entity. The management apparatus includes: a storage unit that stores a policy information, which is associated with data provided by a data provider to another operating entity that is different from the one operating entity, and which defines a provision permission policy of the data provider for the data; an acquisition unit that refers to a log information in which a first hash value of one policy information is recorded and that obtains a policy information corresponding to the one policy information from the storage unit, the one policy information being associated with one data provided to a data user from the another operating entity; and a comparison unit that calculates a second hash value of the obtained policy information and that compares it with the first hash value.

Management apparatus, management method, verification apparatus, computer program and recording medium

Provided is an encryption system that suppresses a communication cost from a key issuing system to a user and controls input to a function in the unit of data. The encryption system includes an encrypting apparatus, a signature apparatus, and a security execution apparatus. The encrypting apparatus generates pseudo-random numbers different for respective pieces of data, and encrypts the generated pseudo-random numbers together with the pieces of data. The signature apparatus regenerates the pseudo-random numbers used by the encrypting apparatus for encrypting the respective pieces of data, and generates control information for certifying validity of the pieces of the data from the regenerated pseudo-random numbers. The security execution apparatus verifies the control information based on the pseudo-random numbers obtained by decrypting ciphertexts of the pieces of the data, and calculates a function value of data obtained by decrypting the ciphertexts when the verification of the control information is successful.

Growing community of inventors

Tokyo, Japan

Batnyam Enkhtaivan