Fuji Xerox Co., Ltd.

Fujifilm Business Innovation Corp.

Taro Terao

Rumiko Kakehi

Masaki Kyojima

Meng Shi

Setsu Kunitake

Shigehisa Kawabe

Yoshihiro Ueda

Akira Suzuki

Takashi Nagao

Koji Takeda

Toshiya Yamada

Kil-ho Shin

Hisashi Nakatsuyama

Mitsuhisa Kamei

Kenichi Numata

Tomonari Yamauchi

Kazuya Yamada

Masao Nukaga

A data management method includes: in a case where A denotes a set of symbols, A* denotes a set of all character strings composed of the symbols in A, L denotes a subset of A, and h(L) denotes a mapping performed on L with h that denotes a cryptographical hash function, regarding h: A*&#x2192;A, multiple peers each hold an inverse mapping hof h: L&#x2192;h(L) that denotes a partial mapping of h, and in a case where at least one original data item M and an encrypted data item C encrypted from the original data item M are present, the encrypted data item C being held in h, and correspondence between the original data item M and the encrypted data item C is to be validated, calculating a hash value h(M); decrypting the encrypted data item C with a hash value k; and comparing a result of the decrypting with the original data item M.

Data management method, data management apparatus, and non-transitory computer readable medium

An information processing apparatus includes a first management unit that manages information of an object, of which at least one of a parent or a child is determined, by a memory within the information processing apparatus, a second management unit that manages information of an object, of which at least one of a parent or a child is determined, by a memory accessible from plural information processing apparatuses, a receiving unit that receives a request which is intended for a target object managed by the first management unit or the second management unit, and a processing unit that performs processing corresponding to the request on information of the target object based on a comparison result between an owner object for which the piece of authority information is authorized and an object which is a parent of the authority object.

Information processing apparatus and non-transitory computer readable medium for distributed resource management

An information processing system includes a management unit that manages information of an object that determines at least one of a parent and a child of the object, a receiving unit that receives specification of an authority object that is an object with which authority information is associated and a request of processing that is to be executed by using the authority object, and a determining unit that determines whether to accept the request or not on the basis of results of a comparison between information of an owner object that is an object that approves the authority information and information of an object that is a parent of the authority object.

Information processing system, information processing method, and non-transitory computer readable medium for processing requests using an authority object

A document handling history management system, which includes: a first calculation section that calculates a first value based on a document which is an object of referencing operation; an operation history information generation section that generates operation history information that includes the first value; a second calculation section that calculates a second value based on the operation history information; a referencing information generation section that generates referencing information of the document, the referencing information being used for the referencing operation and including the second value; a reading section that reads first attribute information of the document, the first attribute information being to be rewritten to second attribute information when the referencing operation of the document is performed; a storing section that stores setting information in the first attribute information; and a rewriting section that rewrites the second attribute information to the first attribute information upon termination of the referencing operation.

Document handling history management system and method

A document processing system includes a first acquisition section, a storage section, a second acquisition section and a data processor. The first acquisition section acquires a position specified by a user in an actual document. The storage section stores layout data of the document and content data of the document associated with the layout data. The second acquisition section acquires data in the specified position from the content data of the document stored in the storage section, based on the layout data stored in the storage section and the specified position. The data processor processes the data acquired by the second acquisition section.

Document processing system, document processing method, computer readable medium and data signal

The document management server includes an identification information providing unit that receives a request to obtain identification information required for accessing a document from a client, generates the identification information for the received request, and sends the generated identification information to the client; a relation information management unit that manages relation information of the requested document and the identification information generated for the request; and a history information management unit that manages information on the client who has sent the request, associating with the identification information.

Secure document management using distributed hashing

There is provided a document management server including a receiving unit that receives an access request and a first ID representing a document to be an object of the access request, an ID processing unit that issues, when an operation is performed on the document in response to the access request, a second ID corresponding to the operation, and records a derivation relationship having the second ID as a child of the first ID, an attribute recording unit that records attribute information relating to the operation by association with the first ID or the second ID, and a response data provider unit that provides, when the document is provided to the client in response to the access request, response data including attribute information associated with at least one ID appearing in a path from the received ID accompanying the access request to a root of a derivation relationship.

Document management server, method, storage medium and computer data signal, and system for managing document use

An electronic-document management system includes an acquisition unit, an edit unit, first and second storage units, a generation unit and an output unit. The acquisition unit acquires a target electronic document. The edit unit edits the acquired target electronic document. The first storage unit stores the target electronic document edited by the edit unit and a feature value of the edited target electronic document in association with each other. The generation unit generates meta-information of the edited target electronic document, which comprises a feature value of the edited target electronic document. The second storage unit stores the meta-information of the edited target electronic document and a feature value of the meta-information of the edited target electronic document in association with each other. The output unit outputs the feature value of the meta-information of the edited target electronic document as reference information of the edited target electronic document.

Electronic-document management system and method

An information processing system includes a server computer system which holds pieces of data as processing objects and characteristic values calculated on the basis of the pieces of data while associating the pieces of data with the characteristic values respectively, accepts a characteristic value as information requesting a piece of data as a processing object from a requester and selects the piece of data associated with the accepted characteristic value from the held pieces of data so as to provide the piece of data to the requester; and a client-side computer system which is communicatably connected to the server computer system and acquires pieces of data as processing objects from the server computer system.

Information processing system

A burden caused by handling a large number of unique identifying information pieces such as authentication keys is to be lightened from both the user side and the protector side such as application creators. A proof data verification device sends authentication data to a proof data generation device. Signature data generation means and presignature data generation means in the proof data generation device cooperate with each other to generate proof data (a signature based on a discrete logarithm problem) from the received authentication data as well as held user unique identifying information and an access ticket, and send the proof data back to the proof data verification device. Verification means in the proof data verification device verify the signature, and if the verification is successful, the execution of program is allowed.

Device and method for authenticating user's access rights to resources

Without the need to store and manage a private unique value of a hash function for each token, and without the fear of organizational private information of a center being revealed, a hash function is provided to a token. A unique value input unit is supplied with a unique value d, which is a parameter required to generate a hash function X. A message input unit is supplied with a message M from which to find a hash value. A function generation unique value memory unit 3 holds a function generation unique value s, which is a parameter required to generate a value generation unique value. A value generation unique value calculation unit generates a value generation unique value u from the function generation unique value s and the unique value d. A hash value calculation unit generates a hash value X(M) by applying a hash function H to the value generation unique value u and the message M. A hash value output unit outputs the hash value X(M) generated by the hash value calculation unit.

One-way function generation method, one-way function value generation device, proving device, authentication method, and authentication device

An electronic ticket system for virtually preventing forgery, copying and other unauthorized uses of electronic tickets; for proving to a third party the contents of an electronic ticket contested between a user and an issuing party; and for protecting users' anonymity upon ticket use. The system comprises a ticket creating and issuing device, a ticket proving device, and a ticket verification device. A ticket creating unit in the ticket creating and issuing device creates specifications of a ticket representing a predetermined service or product in response to a ticket creating request. A ticket issuing unit of the ticket creating and issuing device, in reply to a ticket issuing request, issues the corresponding ticket using as input a ticket identifier, a proving identifier, a ticket specification identifier, and ticket added information. The ticket proving device gets a ticket issued by the ticket issuing unit and communicates with the ticket verification device to prove the possession of the ticket. The ticket verification device has a ticket verifying procedure and, on getting the ticket identifier created by the ticket creating unit, communicates with the ticket proving device to verify the ticket.

Electronic ticket system

A method and a system for authentication whereby authentication characteristic information is not disclosed to a third party when a verifier uses a verification device of a limited scale to authenticate a user's rights or qualifications. A ticket issuing device interacts with the user's interactive device having a secret function f to calculate document secret information &mgr; based on a document m (data) to be transmitted to the interactive device, whereby the user is issued a ticket t generated from authentication characteristic information x and the document secret information &pgr;. Upon receipt of the document m, the interactive device generates the document secret information using its unique secret function f to perform an interaction based on the generated information. The interaction involves output of a commitment r, input of a challenge c, and an output of a response &sgr;. The user converts the interaction (r, c, &sgr;) into another interaction (r, c, s) using the ticket t to effect Guillou-Quisquater authentication.

Authentication method and system employing secret functions in finite Abelian group

A burden caused by handling a large number of unique identifying information pieces such as authentication keys is to be lightened from both the user side and the protector side such as application creators. A proof data verification device sends authentication data to a proof data generation device. The proof data generation device generates proof data from both received authentication data and user unique identifying information held therein and sends it back to the proof data verification device. The proof data verification device holds an access ticket and authentication data, and verification means in the verification device performs a signature verifying calculation by use of the proof data, authentication data, and the access ticket. If the verification is successful, the execution of program is allowed.

The present invention allows even small-size verification devices to authenticate rights and qualifications without leaking authentication characteristic information to third parties. A ticket issuance device computes document private information &mgr; from a private function f of an interaction device owned by a user and document m to be transferred to the interaction device when generating interaction, and issues ticket t generated from authentication characteristic information x and the document private information &mgr; to the user. The interaction device, when document m is input, generates document private information &mgr; using a private function f specific to the interaction device, and performs interaction based on the document private information. The interaction comprises output of commitment r, input of challenge &khgr;, output of response &sgr;, and message M output. The user converts interaction (r, &khgr;, M, &sgr;) into interaction (r, &khgr;, M, s) using ticket t to perform Guillou-Quisquater authentication.

Growing community of inventors

Kanagawa, Japan

Taro Terao