Kabushiki Kaisha Toshiba

Toshiba Solutions Corporation

Toshiba Memory Corporation

Toshiba Digital Solutions Corporation

Kioxia Corporation

Tatsuyuki Matsushita

Taku Kato

Yuji Nagai

Fangming Zhao

Kentaro Umesawa

Noboru Shibata

Toshihiro Suzuki

Hiroshi Watanabe

Hideo Shimizu

Hiroshi Isozaki

Hideyuki Miyake

Kenji Kojima

Yuuki Tomoeda

Toru Kambayashi

Ryotaro Hayashi

Tooru Kamibayashi

Koji Okada

Shinichi Matsukawa

Yoshihiro Fujii

Takeshi Saito

Hiroyoshi Haruki

Yoshikazu Hanatani

Haruhiko Toyama

Takuya Yoshida

Toshinari Takahashi

Fukutomo Nakanishi

Satoshi Aoki

Satoshi Ito

Yutaka Kashihara

Atsushi Ishihara

Hideaki Sato

Yasufumi Tsumagari

Yoshihiro Oba

Hideki Matsumoto

Tatsuro Ikeda

Masahiko Mawatari

Seiichi Nakamura

Toshinori Odaka

Masanobu Koike

Naoki Ogura

Nakaba Kogure

Yoshinobu Fujiwara

Kunio Honsawa

Kosuke Haruki

Ryuiti Koike

Yoshikata Tobita

Kazunobu Konda

Yoshihisa Kizuka

Chikara Ushimaru

Toshiharu Oya

A remote access control system includes a remote access control apparatus and a communication relay apparatus. The remote access control apparatus is configured to establish a predetermined communication session with the communication relay apparatus through predetermined connection target information obtaining processing performed by active connection to the remote access control apparatus from the communication relay apparatus, to transmit a secure communication connection start command to the communication relay apparatus, to receive a secure communication connection request from the communication relay apparatus to perform processing for establishing a first secure communication session, and to receive a secure communication connection request from the user apparatus based on the result of the establishment of the first secure communication session to perform processing for establishing a second secure communication session. The connection between the individually established secure communication sessions is determined based on session connection permission information to relay the secure communication sessions.

Remote access control system

According to an embodiment, an information processing device includes a processor. The processor is configured to: execute a rewriting process to rewrite some of a plurality of factors, included in data for normal operation of a target device, into a value different from a normal value; execute a correction process that is performed in a course of generating test data to be used for a test of the target device; and determine a method of generating the test data based on a rewriting part that indicates a factor serving as a target of the rewriting process and based on a correction part that indicates a factor serving as a target of the correction process.

Information processing device, information processing method and computer program product

According to an embodiment, a management apparatus connectable to a plurality of devices through a network includes storage, one or more processors, and an assignment transmitter. The storage stores therein management tree information in which node keys are respectively assigned to nodes and devices are respectively assigned to leaf nodes. The processors calculate similarity between attribute information representing an attribute of a new device and attribute information of devices already assigned in the management tree information. The processors determine a first leaf node to which the new device is to be assigned in the management tree information, based on the similarity. The assignment transmitter transmits, to the new device, at least one node key of node keys assigned to nodes on a path from a root node to the first leaf node in the management tree information.

Management apparatus, computer program product, system, device, and method

According to one embodiment, an authenticator which authenticates an authenticatee, which stores first key information (NKey) that is hidden, includes a memory configured to store second key information (HKey) which is hidden, a random number generation module configured to generate random number information, and a data generation module configured to generate a session key (SKey) by using the second key information (HKey) and the random number information. The authenticator is configured such that the second key information (HKey) is generated from the first key information (NKey) but the first key information (NKey) is not generated from the second key information (HKey).

Authenticator, authenticatee and authentication method

According to one embodiment, a re-encryption key generator which generates the re-encryption key based on the first private key, the second re-encryption key generation key, and a plurality of random numbers. The second re-encryption key generation key comprises a plurality of system-specific values and the second private key. The re-encryption key includes an exponent having a numerator portion and a denominator portion or a scalar having a numerator portion and a denominator portion. The numerator portion is in form of a linear coupling of the second private key on which at least one of a plurality of private values specifying relations between the system-specific values and the random numbers is allowed to act. The denominator portion is the first private key.

Re-encryption key generator, re-encryption apparatus, encryption apparatus, decryption apparatus, and storage medium

According to one embodiment, an encryption device encrypts each of numerical values based on an encryption key, and generates encrypted data. On the basis of each of the encrypted data, a computation device generates a primary computation result corresponding to data in which a computation result of an expression that has added and subtracted each of the numerical values is encrypted. On the basis of the primary computation result, a secondary computation key and random numbers, a computation assist device generates a secondary computation result. The computation device generates a tertiary computation result based on the secondary computation result and a tertiary computation key, and decides the magnitude relation between a minuend and a subtrahend in the expression based on the tertiary computation result.

Encrypted data computation system, device, and program

A condition determination device includes an acquiring unit, a specifying unit, a classifying unit, and a condition determining unit. The acquiring unit acquires a total execution history, which is an execution count for each component included in a program, when a test is performed by supplying a plurality of input data to a target device which executes the program. The specifying unit specifies a shortage component of which the execution count indicated by the total execution history does not satisfy test criteria among components included in the program. The classifying unit classifies each of the input data into first data, which causes the target device to execute the shortage component, and second data, which does not cause the target device to execute the shortage component. The condition determining unit determines a condition of input data having a common characteristic with the first data.

Information processing device, computer program product, and testing system with acquiring total execution history

A re-encryption key generator according to an embodiment generates a re-encryption key to obtain re-encrypted data that can be decrypted by a second private key of a second user device by re-encrypting ciphertext obtained by encrypting plaintext by a first public key of a first user device without decryption. The re-encryption key generator stores a first private key corresponding to the first public key. The re-encryption key generator stores a second re-encryption key generation key of the second user device that is different from a second public key corresponding to the second private key. The re-encryption key generator generates the re-encryption key based on the first private key and the second re-encryption key generation key.

Re-encryption key generator, re-encryption device, encryption device, decryption device, and program

According to one embodiment, an authentication method between an authenticatee which stores key information having a data structure composed of a key transition record, secret information XY of a matrix form, and secret information XYE which is created by encrypting the secret information XY, and an authenticator which authenticates the authenticatee, includes selecting, by the authenticator, a record corresponding to a device index of the authenticator from the key information which is received from the authenticatee, and decrypting the record by a device key, thereby taking out a key transition, and executing, by the authenticator, a decryption process on the secret information XYE, which is received from the authenticatee, by using the corresponding key transition, and sharing the secret information XY.

According to an embodiment, a key management device includes a key exchange processing unit, a transmission unit, and an update unit. The key exchange processing unit is configured to perform a key exchange process for executing an exchange of a shared key together with authentication between the key management device and a communication device. The transmission unit is configured to transmit update information for updating a device key of the communication device authenticated to the communication device, when the communication device has not been authenticated before performing the key exchange process, and not to transmit the update information, otherwise. The update unit is configured to update the device key using the update information, when the communication device has not been authenticated before performing the key exchange process, and not to update the device key, otherwise.

Key management device, communication device, communication system, and computer program product

A server apparatus according to an embodiment generates a random number on receiving from a user apparatus a notification showing that a re-encryption key should be updated, and calculates re-encryption key data on the basis of the re-encryption key stored and the random number generated. The server apparatus transmits the re-encryption key to the user apparatus and receives, from the user apparatus, the user private key not updated yet and re-encryption key updating data calculated from the re-encryption key data on the basis of the user private key updated. The server apparatus calculates the re-encryption key updated, on the basis of the re-encryption key updating data and the random number, and replaces the re-encryption key stored in the storage device with the updated re-encryption key.

Server apparatus and program to re-encrypt ciphertext data

A controller is provided with a controller key and a first controller identification information unique to the controller. The controller generates a controller unique key unique to a respective controller based on the controller key and the first controller identification information, and a second controller identification information based on the first controller identification information. A decryptor decrypts the encrypted medium device key using the controller unique key to obtain a medium device key. An authentication/key exchange process unit performs authentication/key exchange process with the host device through an interface unit using the medium device key and the medium device key certificate to establish the secure channel.

Information recording device

A controller is provided with a controller key and a first controller identification information unique to the controller. The controller generates a controller unique key unique to a respective controller based on the controller key and the first controller identification information, and a second controller identification information based on the first controller identification information. A decryptor decrypts the encrypted medium device key using the controller unique key to obtain a medium device key. An authentication/key exchange process unit performs authentication/key exchange process with the host device through an interface unit using the medium device key, the medium device key certificate and the second controller identification information to establish a secure channel.

Data recording device, and method of processing data recording device

Growing community of inventors

Tokyo, Japan

Tatsuyuki Matsushita