Nec Corporation

Bar-ilan University

Nec Corporation of America

Nkk Corporation

Sumco Corporation

Sumitomo Mitsubishi Silicon Corporation

Kawasaki Jukogyo Kabushiki Kaisha

Japan Super Quartz Corporation

Burlington Northern Railroad Company

Bar-iian University

Kenichi Hasegawa & Tokimec Inc.

Jun Furukawa

Toshinori Araki

Isamu Teranishi

Kazuma Ohara

Kazue Sako

Satoshi Obana

Kengo Mori

Toshiyuki Isshiki

Kazunari Kurita

Yehuda Lindell

Kozo Fukuda

Hideyuki Yamanaka

Kounosuke Kitamura

Lindell Yehuda

Nof Ariel

Masahiro Ueda

Yuki Tanaka

Masao Saito

Kenichi Hasegawa

Hikaru Tsuchida

Frederik Armknecht

Masaki Morikawa

Joao Girao

Satoshi Sato

Satoshi Kudo

Haruna Higo

Kazutaka Kobayashi

Kazuhiro Harada

Naoki Ono

Yuzuru Kataoka

Yoshiaki Nozawa

Masahisa Fujikake

Shinichi Nagahashi

Hiroatsu Asari

Tomoo Horita

Joseph Keshet

Takuma Amada

Kazuya Kakizaki

Daisuke Wakabayashi

Kiyotaka Morioka

Atsushi Ito

Takao Gino

Yasuhiro Arasawa

Shir Aviv-Reuven

Setsuro Kimura

Kuniyoshi Watanabe

Kenji Akifuji

John A Hovland

Gordon O Besch

Tetsunari Ide

Masayoshi Matsuda

Takashi Nagamine

Misao Makinohara

Masatoshi Fukuda

Ryoichi Yamase

The present invention provides a bit decomposition secure computation system comprising: a share value storage apparatus to store share values obtained by applying (2, 3) type RSS using modulo of power of 2 arithmetic; a decomposed share value storage apparatus to store a sequence of share values obtained by applying (2, 3) type RSS using modulo 2 arithmetic; and a bit decomposition secure computation apparatus that, with respect to sharing of a value w, r1, r2, and r3 satisfying w=r1+r2+r3 mod 2{circumflex over (&#x2003;)}n, where {circumflex over (&#x2003;)} is a power operator and n is a preset positive integer, being used as share information by the (2, 3) type RSS stored in the share value storage apparatus, includes: an addition sharing unit that sums two values out of r1, r2 and r3 by modulo 2{circumflex over (&#x2003;)}n, generates and distributes a share value of the (2, 3) type RSS with respect to the sum; and a full adder secure computation unit that executes addition processing of the value generated by the addition sharing unit and a value not used by the addition sharing unit, for each digit, by using secure computation of a full adder, and stores the result in the decomposed share value storage apparatus.

Bit decomposition secure computation apparatus, bit combining secure computation apparatus, method and program

A bit-decomposition secure computation apparatus uses r1, r2, and r3 satisfying w=r1+r2+r3 mod 2{circumflex over (&#x2003;)}n as share information of (2, 3) threshold type RSS (Replicated Secret Sharing) stored in a share value storage apparatus, and includes an addition sharing part that sums two values out of the share information by modulo 2{circumflex over (&#x2003;)}n arithmetic and distributes the sum using (2, 3) type RSS; and a full adder secure computation part that adds the value generated by the addition sharing part by distributing the sum of the two values to share information of one remaining value other than the two values used by the addition sharing part for each digit by using secure computation of a full adder.

Secure computation apparatus, system, method and program

Provided is a pre-calculation device capable of keeping a secret against malicious behaviors of participants while keeping a processing load small. A Beaver triple generation processor generates a secret-shared Beaver triple formed of two secret-shared random numbers and a secret-shared value of a product of the two random numbers. A Beaver triple random inspection processor randomly selects a secret-shared Beaver triple, restores the Beaver triple through communication to and from other pre-calculation devices, and confirms that a product of first two elements is equal to a third element. The Beaver triple position stirring processor randomly replaces Beaver triples that have not been restored, to generate replaced secret-shared Beaver triples.

Pre-calculation device, method, computer-readable recording medium, vector multiplication device, and method

A method for multiparty computation wherein a plurality of parties each compute a preset function without revealing inputs thereof to others, comprises: each of the parties performing a validation step to validate that computation of the function is carried out correctly, wherein the validation step includes: a first step that prepares a plurality of verified multiplication triples and feeds a multiplication triple to a second step when required; and the second step that consumes a randomly selected multiplication triple generated by the first step, wherein the first step performs shuffling of the generated multiplication triples, in at least one of shuffle in a sequence and shuffle of sequences.

Multiparty computation method, apparatus and program

There is provided a system for computing a secure statistical classifier, comprising: at least one hardware processor executing a code for: accessing code instructions of an untrained statistical classifier, accessing a training dataset, accessing a plurality of cryptographic keys, creating a plurality of instances of the untrained statistical classifier, creating a plurality of trained sub-classifiers by training each of the plurality of instances of the untrained statistical classifier by iteratively adjusting adjustable classification parameters of the respective instance of the untrained statistical classifier according to a portion of the training data serving as input and a corresponding ground truth label, and at least one unique cryptographic key of the plurality of cryptographic keys, wherein the adjustable classification parameters of each trained sub-classifier have unique values computed according to corresponding at least one unique cryptographic key, and providing the statistical classifier, wherein the statistical classifier includes the plurality of trained sub-classifiers.

Systems and methods for generating and applying a secure statistical classifier

A method for performing secure computations on records, comprising: receiving a request to apply a computation on a record; assigning a respective partial record of a plurality of partial records of the record to each of a plurality of computational processes; instructing each of the plurality of computational processes to perform a computation scheme comprising: applying a semi honest multiparty computation on the partial record; iteratively repeating a predetermined number of times: using a secure multiparty arithmetic computation to generate random terms; using the secure multiparty arithmetic computation to assign the random terms and an outcome of the application to at least one predetermined equation; verifying an integrity of the semi honest multiparty computation by comparison of the assignments to the at least one predetermined equation to at least one constant; and when the integrity is valid, combining the applications of the semi honest multiparty computations on the partial records.

Secure multiparty computation of shuffle, sort, and set operations

This invention is directed to a secure computation apparatus that protects a security against the malicious behavior while maintaining a processing amount small. The secure computation apparatus comprises a first multiplication triplet column generator that generates first multiplication triplet columns formed from a set of two secure distribution random numbers and a distribution value of a multiplication result obtained by performing secure multiplication of the two secure distribution random numbers, a second multiplication triplet column generator that generates second multiplication triplet columns formed from a set of two secure distribution input numbers and a distribution value of a multiplication result obtained by performing secure multiplication of the two secure distribution input numbers, in each multiplication process of semi-honest safe secure multiplication, and a multiplication validity verifier that generates a set of first multiplication triplets and second multiplication triplets by randomly selecting, from the first multiplication triplet columns, a number of rows of the first multiplication triplets as many as a number of rows of the second multiplication triplets in the second multiplication triplet columns, and verifies validity of secure multiplication based on the set of the first and second multiplication triplets.

Secure computation system, secure computation apparatus, secure computation method, and secure computation program

An authentication system is provided with: a user device; user side assistance device(s) to assist user authentication that authenticates a user of the user device, and apparatus authentication that authenticates the user device; and an apparatus authentication server device to perform apparatus authentication in association with the user device. The user side assistance device(s) use distributed shares of verification information to perform multi-party computation for user authentication in association with the user device, and use distributed shares of a secret key generated by the user device, to perform multi-party computation for apparatus authentication in association with the user device.

Authentication system, authentication method, and program

A system for identifying one or more malicious parties participating in a secure multi-party computation (MPC), comprising one of a plurality of computing nodes communicating with the plurality of computing nodes through a network(s). The computing node is adapted for participating in an MPC with the plurality of computing nodes using secure protocol(s) established over the network(s), the secure protocol(s) support transmittal of private messages to each of the other computing nodes and transmittal of broadcast messages to all of the computing nodes, detecting invalid share value(s) of a plurality of share values computed and committed by the computing nodes during the MPC, verifying each of the share values according to a plurality of agreed share values valid for the MPC which are determined through a plurality of broadcast private messages, identifying identity of malicious computing node(s) which committed the invalid share value(s) failing the verification and outputting the identity.

High throughput secure multi-party computation with identifiable abort

An information processing apparatus that authenticates sets of distributed authentication information without collecting, the sets of distributed authentication information, to be collected at any one of apparatuses included in a system. The apparatus includes: a secure computation unit that determines whether master authentication information, which is stored in advance and is one information to be compared for authentication, matches authentication information, which is received from a first information processing apparatus and is the other information to be compared for authentication, by executing secure computation with a second information processing apparatus based on one set of distributed master authentication information obtained by distributing the master authentication information by using a secret distribution method and based on one set of distributed authentication information obtained by distributing the authentication information by the secret distribution method; and a process execution unit that executes a predetermined process based on the determination result.

Information processing apparatus, authentication method, and recording medium for recording computer program

A secure computation system is provided. The system includes a distribution information generation apparatus that generates data distribution values, sign distribution values and carry distribution values from at least two fixed-point numbers by distributing each of the at least two fixed-point numbers using an additive secret sharing scheme; and a secure computation apparatus group including at least two secure computation apparatuses. The secure computation apparatus group includes: a secure digit extender; and a secure multiplier.

Secure computation system, secure computation method, secure computation apparatus, distribution information generation apparatus, and methods and programs therefor

The secret calculation system comprises three secret calculation apparatuses. An isecret calculation apparatus (i=1, 2, 3) comprises a holder that holds (S[i], T[i]) and (S'[i], T&#x2032;[i]) as distributed values of an n-bit number W and an n-bit W&#x2032; (n is any natural number), respectively; a first multiplicator that derives a logical conjunction of S[i] and S&#x2032;[i]; a second multiplicator that derives a logical conjunction of T[i] and T&#x2032;[i]; and a first subtractor that derives a difference between the logical conjunction derived by the first multiplicator and the logical conjunction derived by the second multiplicator.

Secret calculation system, secret calculation apparatus, and secret calculation method

A method for performing secure computations on records, comprising: receiving a request to apply an arithmetic computation on a record; assigning a respective partial record to each of a plurality of computational processes; instructing each of the computational processes sharing a computation scheme to perform the following: submitting the arithmetic computation to the computation scheme to assemble a processed partial record from the respective partial record components; instructing each of the plurality of computational processes to verify an integrity of at least one of the plurality of processed partial records by: broadcasting combined encryptions of one of the plurality of processed partial record components to all other of the plurality of computational processes and analyzing received combined encryptions to detect integrity in the other of the processed partial record components; and when the detected integrity is valid, calculating a response to the request by combining the received processed partial records.

Secure multiparty computation

An intermediate apparatus that upon reception of a request from an application apparatus, instructs a plurality of secure computation apparatuses to perform a secret computation processing, in accordance with the request, performs a part of operation of the request from the application apparatus, on at least one of a part of data included in the request or data reconstructed from shares received from a plurality of secure computation apparatuses.

Secure computation data utilization system, method, apparatus and non-transitory medium

Growing community of inventors

Tokyo, Japan

Jun Furukawa