Fuji Xerox Co., Ltd.

Masaki Kyojima

Rumiko Kakehi

Kil-ho Shin

Taro Terao

Koji Takeda

Kazuo Saito

Hisashi Nakatsuyama

Toru Aratani

Shunichi Kojima

Noriyuki Kamibayashi

Kenichiro Kigo

Koji Kusumoto

Yo Okumura

Makoto Takeoka

Kazuya Chiba

An information processing apparatus includes a reception unit receiving the number of sheet identifiers to be allocated to a form definition, a comparison unit comparing the number of sheet identifiers received by the reception unit with the number of usable sheet identifiers, an information allocation unit allocating the number of usable sheet identifiers being equal to or greater than the number of sheet identifiers received by the reception unit among the usable sheet identifiers as a definition identifier to the form definition when the comparison result of the comparison unit shows that the number of sheet identifiers received by the reception unit is equal to or less than the number of usable sheet identifiers, a prohibition unit excluding the sheet identifiers included in the definition identifier from the sheet identifiers to be allocated later, and an association unit associating the definition identifier with the form definition.

Information processing apparatus, information processing program, information processing method, and computer-readable medium

An information processing apparatus includes a receiver that receives sheet identification information included in information images printed onto sheets scanned by a scanner, a detector that detects that a scanning operation by the scanner is an operation indicating that a plurality of sheets are a sequential sheet group, and a unifier that, when the detector detects an operation indicating the sequential sheet group, unifies information corresponding to the plurality of sheets that is respectively indicated by the plurality of sheet identification information received by the receiver during the scanning operation.

Information processing apparatus, information processing method, and computer-readable medium

A license management apparatus includes: a license information storage; a reproduced user information storage; an invalidation information storage; a compare unit; an update unit; and a setting unit.

License management apparatus, license management method, and computer readable medium

The invention enables a provider and a retailer of digital contents to issue an electronic license to a consumer without wasting its own resources. A retailer sells digital contents to a consumer via the Internet. The retailer requests a license-issuing center to issue an electronic license corresponding to the digital contents and the user of the contents and receives the generated license. The user receives the license from the retailer via the Internet. The terminal used by the user certifies that he/she is a legitimate user using his/her license when he/she uses the digital contents provided from the provider. When the license is verified, the user can use the digital contents.

License-issuing system and method

Access privileges of a client are authenticated without using user account data. If an RSA modulus and public key have been assigned to the requested web page, the access privilege authentication controllercalls the challenge generatorto generate a challenge and transmits this challenge to the clientvia the I/O controller. Subsequently, the access privilege authenticatorwaits for a response from the clientsent via the I/O controller. When a response is received from the client, the access privilege authentication controllercalls the access privilege verifierto verify whether the response is correct. If the response is correct, data indicating that the access privileges have been successfully authenticated is outputted, thereby alloying the client to access the requested service.

Access privilege authentication of client computer for services provided by server computer

Integrity of data is to be ensured in a simple manner. A data verifier generates a signature generation request from data to be signed and signature request time, and sends the request to a data generator. The data generator extracts the data to be signed from the signature generation request, and its signature generation unit generates a signature for the data. A key generation unit generates a key from a previous key, the signature request time in the signature generation request, and the identifier of the data generator, and an encryptor encrypts the signature. After that, the encrypted signature and the like are returned to the data verifier, which generates a decrypting key with a key generation unit from the previous key, the signature request time, and the identifier of the data generator, then extracts an encrypted signature, and decrypts it with a decryptor. A signature verification unit checks whether or not the result of decrypting is the correct signature.

Data generating apparatus and data verifying apparatus

Booking venders are to be enabled to issue booking certificates without having to consume their own resources. Advance booking is made and sent to a retailer from a consumer terminal via the Internet. The retailer requests a booking certificate issuing center to issue a booking certificate associated with the product or the booking party, and receives the booking certificate issued from the booking certificate issuing center. The consumer terminal receives the booking certificate from the retailer via the Internet, and uses it to have itself verified to be the legitimate booking party by a verifying apparatus associated with a provider. The booking party can receive the supply of the booked product or service if its booking certificate is successfully verified.

Booking certificate issuing apparatus and method

A burden caused by handling a large number of unique identifying information pieces such as authentication keys is to be lightened from both the user side and the protector side such as application creators. A proof data verification device sends authentication data to a proof data generation device. The proof data generation device generates proof data from both received authentication data and user unique identifying information held therein and sends it back to the proof data verification device. The proof data verification device holds an access ticket and authentication data, and verification means in the verification device performs a signature verifying calculation by use of the proof data, authentication data, and the access ticket. If the verification is successful, the execution of program is allowed.

Device and method for authenticating user's access rights to resources

The present invention allows even small-size verification devices to authenticate rights and qualifications without leaking authentication characteristic information to third parties. A ticket issuance device computes document private information &mgr; from a private function f of an interaction device owned by a user and document m to be transferred to the interaction device when generating interaction, and issues ticket t generated from authentication characteristic information x and the document private information &mgr; to the user. The interaction device, when document m is input, generates document private information &mgr; using a private function f specific to the interaction device, and performs interaction based on the document private information. The interaction comprises output of commitment r, input of challenge &khgr;, output of response &sgr;, and message M output. The user converts interaction (r, &khgr;, M, &sgr;) into interaction (r, &khgr;, M, s) using ticket t to perform Guillou-Quisquater authentication.

Method and device for authentication

An apparatus and method for user authentication for easily realizing the allocation of a complexity of rights when controlling access by a plurality of users to a plurality of objects. A verification apparatus sends to a proving apparatus required security information that shows the authority property required for access to an object, along with a challenge data and a modulo of a public key. A required security information inspection unit within the proving apparatus obtains the required security information stored in a response data memory and a control information representing a user's authority property stored in a control information memory. It then inspects whether an identifier of:the required security information is included in a list included in the control information. If the identifier is included, a response data is generated, upon&excl; condition that all of challenge data, required security information, access ticket, control information and user identifying information are correct. An access ticket is a result of masking a user's capability, a data representing the extent of his access rights.

Apparatus and method for user authentication

A access rights authentication apparatus relieves burdens resulting from handling unique information of a large number of authentication keys and the like of users and protectors such as application authors, wherein a proof data verification module sends authentication data to a proof data generation module; proof data generation means of the proof data generation module generate proof data from the received authentication data and held user unique identifying information, and returns the proof data to the proof data verification module; the verification means of the proof data verification module verifies the proof data using the access ticket; and if the verification succeeds, program execution is permitted.

Access rights authentication apparatus

A decryption method and device, an access right authentication method and apparatus for securely transmitting specific information to the decryption device while retaining blindness of data that is assigned to be decrypted. An input unit of the decryption device receives a cipher text C&prime; generated by providing a blind effect to a cipher text C and second decryption information d,from a user and transmits them to a decryption unit. The decryption unit takes a modulus n and first decryption information d,from a modulus storage unit and a first decryption information storage unit, respectively. The decryption unit then calculates the expression R&equals;C&prime;,mod n and outputs R through an output unit. If a combination of a cipher text C and the second decryption information d,is correct, a correct decryption result is available.

Decryption method and device, and access right authentication method and apparatus

Both of a user side and a protect side such as a programmer of an application programmer need not handle a large number of inherent information such as authentication keys. An access ticket generation device generates an access ticket from user unique identifying information and access rights authentication feature information. As unique security characteristic information, there is used a secret key of an elliptic curve encryption or an ElGamal encryption. A proof data generation device receives the access ticket, converts authentication data received from a proof data verification device into proof data by use of the access ticket and the user unique identifying information, and returns the resultant proof data to the proof data verification device. The proof data generation device or the proof data verification device decrypts the above-mentioned encryption. The proof data verification device verifies the access rights as correct access only when a combination of an access ticket and user unique identifying information used in the proof data generation device is correct.

Device for authenticating user's access rights to resources and method

The present invention relates to a document structure composing apparatus to judge a short part based upon the structure of the whole document, perform processing for complementation and compose document structure according to a desired document class. Complementation specification storage means stores the specification of complementation for document structure. Complementation means applies processing for complementation to pre-complemented document structure. Correlating rule storage means stores a rule for correlating components between different document classes. Document structure converting means converts an original document which meets the structural constraint of a specific document class to structure according to another document class according to the correlating rule. The original document is first converted from structure according to the specific document class to structure nearly according to a desired document class by the document structure converting means. The correlating rule required for conversion is stored in the correlating rule storage means. Afterward, processing for complementation based upon the specification of complementation stored in the complementation specification storage means is executed by the complementation means and document structure according to a desired document class is composed.

Document structure conversion apparatus

A document database management apparatus is disclosed for managing a database composed of a plurality of documents. The document database management apparatus includes a generating regulation management section for holding a regulation to generate a logical structure of a document in the database from a logical structure of the document to be stored in the database, a document generating section for generating a document in the database from the document to be stored in accordance with the regulation stored in the generating regulation management section, and a document management section for storing a document generated by the document generation section in the database.

Growing community of inventors

Nakai-machi, Japan

Masaki Kyojima