专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08225077B2 Obfuscation device for generating a set of obfuscated instructions, processing device, method, program, and integrated circuit thereof 有权
标题翻译：用于产生一组模糊化指令的混淆装置，处理装置，方法，程序及其集成电路
公开(公告)号：US08225077B2
公开(公告)日：2012-07-17
申请号：US12409756
申请日：2009-03-24
申请人： Taichi Sato , Tomoyuki Haga , Kenichi Matsumoto , Akito Monden , Haruaki Tamada
发明人： Taichi Sato , Tomoyuki Haga , Kenichi Matsumoto , Akito Monden , Haruaki Tamada
IPC分类号： G06F9/00
CPC分类号： G06F21/52
摘要： An obfuscation device includes a first instruction generating unit, for each of a first process and a second process, which generates an initialization instruction for securing a management area for managing identification information indicating an instruction block that should be executed next so as to proceed with the process. Further, a second instruction generating unit generates a selection instruction (i) to make a first selection selecting a process that should be proceeded out of the first process and the second process, (ii) to make a second selection selecting an instruction block indicated by the identification information managed in the management area as an instruction block that should be executed for proceeding with the process selected by the first selection, and (iii) to cause the execution device to execute the instruction block selected by the second selection, and stores the selection instruction in a storage unit.
摘要翻译：混淆装置包括第一指令生成单元，用于第一处理和第二处理中的每一个，其生成用于保护管理区域的初始化指令，用于管理指示下一个应执行的指令块的识别信息，以便继续进行处理。此外，第二指令生成单元生成选择指令（i），进行选择应从第一处理和第二处理开始的处理的第一选择，（ii）进行第二选择，选择由在管理区域中管理的识别信息作为用于进行由第一选择选择的处理而执行的指令块，以及（iii）使执行装置执行由第二选择选择的指令块，并且存储存储单元中的选择指令。

2. 发明授权

US08090956B2 Program converting device, secure processing device, computer program, and recording medium 有权
标题翻译：程序转换装置，安全处理装置，计算机程序和记录介质
公开(公告)号：US08090956B2
公开(公告)日：2012-01-03
申请号：US11886576
申请日：2006-03-27
申请人： Rieko Asai , Taichi Sato , Tomoyuki Haga , Kenichi Matsumoto , Akito Monden , Masahide Nakamura
发明人： Rieko Asai , Taichi Sato , Tomoyuki Haga , Kenichi Matsumoto , Akito Monden , Masahide Nakamura
IPC分类号： G06F12/14
CPC分类号： H04L9/085 , G06F21/10 , G06F21/125 , G06F21/14 , G06F21/54 , G06F21/6209
摘要： To provide a program conversion device capable of executing a program that includes a secret operation using secret information without exposure of the secret information in a memory. In an execution program generation device, with respect to an original program that includes the secret operation, a combining function generation unit generates combining function processing for applying a bitwise self-dual function to an input value, a split secret information generation unit generates pieces of split secret information by performing an inverse operation of the self-dual function, a program conversion unit generates pieces of split secret operation processing each for performing the operation between each bit value of the operand information and a corresponding bit value of a different piece of the split secret information, and replaces the secret operation processing with the pieces of the split secret operation processing and the combining function processing.
摘要翻译：提供一种程序转换装置，其能够执行包含使用秘密信息的秘密操作而不在存储器中隐藏秘密信息的秘密操作的程序。在执行程序生成装置中，对于包含秘密操作的原始程序，组合函数生成单元生成用于对输入值应用按位自双重功能的组合功能处理，分割秘密信息生成单元生成通过执行自双重功能的反向操作来分割秘密信息，程序转换单元生成分割秘密操作处理，每个分割秘密操作处理用于执行操作数信息的每个位值和不同片段的对应位值之间的操作分割秘密信息，并且通过分割秘密操作处理和组合功能处理来代替秘密操作处理。

3. 发明申请

US20090055657A1 Program Converting Device, Secure Processing Device, Computer Program, and Recording Medium 有权
标题翻译：程序转换装置，安全处理装置，计算机程序和记录介质
公开(公告)号：US20090055657A1
公开(公告)日：2009-02-26
申请号：US11886576
申请日：2006-03-27
申请人： Rieko Asai , Taichi Sato , Tomoyuki Haga , Kenichi Matsumoto , Akito Monden , Masahide Nakamura
发明人： Rieko Asai , Taichi Sato , Tomoyuki Haga , Kenichi Matsumoto , Akito Monden , Masahide Nakamura
IPC分类号： G06F21/22
CPC分类号： H04L9/085 , G06F21/10 , G06F21/125 , G06F21/14 , G06F21/54 , G06F21/6209
摘要： To provide a program conversion device capable of executing a program that includes a secret operation for decrypting encrypted data using secret information without exposure of the secret information in a memory thereby to improve confidentiality in execution of the program. In an execution program generation device 10, with respect to an original program that includes secret operation processing that is an operation performed between each bit value of operand information and a corresponding bit value of secret information that is in the same bit position as the bit value of the operand information, a combining function generation unit 107 generates combining function processing for applying a bitwise self-dual function to an input value, a split secret information generation unit 102 generates pieces of split secret information by performing an inverse operation of the self-dual function on the secret information, a program conversion unit 106 generates pieces of split secret operation processing each for performing the operation between each bit value of the operand information and a corresponding bit value of a different piece of the split secret information that is in the same bit position as the bit value of the operand information, and replaces the secret operation processing included in the original program with the pieces of the split secret operation processing and the combining function processing.
摘要翻译：提供一种程序转换装置，其能够执行包括使用秘密信息解密加密数据的秘密操作的程序，而不会在存储器中暴露秘密信息，从而提高程序执行的机密性。在执行程序生成装置10中，对于包含秘密操作处理的原始程序，该秘密操作处理是在操作数信息的每个位值之间执行的操作和与位值位于相同比特位置的秘密信息的对应位值组合功能生成单元107生成用于对输入值应用按位自双重功能的组合功能处理，分割秘密信息生成单元102通过执行自适应功能的逆运算来生成分割秘密信息，秘密信息的双重功能，程序转换单元106生成分割秘密操作处理，每个分割秘密操作处理用于执行操作数信息的每个比特值与分离的秘密信息的不同片段的相应比特值之间的操作与操作数信息的位值相同的位位置，并替换s 在原始程序中包括分割秘密操作处理和组合功能处理的胡庇操作处理。

4. 发明授权

US08464043B2 Information security device and information security system 有权
标题翻译：信息安全设备和信息安全系统
公开(公告)号：US08464043B2
公开(公告)日：2013-06-11
申请号：US12666375
申请日：2008-06-23
申请人： Hideki Matsushima , Yuichi Futa , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Taichi Sato
发明人： Hideki Matsushima , Yuichi Futa , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Taichi Sato
IPC分类号： H04L29/06
CPC分类号： H04L9/0836 , G06F21/62 , G06F21/6236 , G06F2221/2107 , G06F2221/2113 , G06F2221/2115 , H04L9/088 , H04L9/0897 , H04L9/14 , H04L2209/603 , H04N7/165 , H04N7/1675 , H04N21/2541 , H04N21/26613 , H04N21/4788 , H04N21/835 , H04N21/8355
摘要： Provided is a migration system considering security authentication levels and data protection strength levels of the both security devices between which data is migrated. A first terminal includes a mechanism for protecting data by a private key in the public key method held by TPM, and a second terminal includes a key in the private key method encrypted by the private key in the public key method held by TPM and a mechanism for protecting the data by the key. A Migration Authority holds a security policy table describing a security policy and judges whether data movement from the first terminal to the second terminal is enabled according to the security policy table.
摘要翻译：提供了考虑安全认证级别和迁移数据的两个安全设备的数据保护强度级别的迁移系统。第一终端包括用TPM保存的公钥方法中的私钥保护数据的机制，第二终端包括由TPM持有的公钥方法中的由私钥加密的私钥方法中的密钥，以及机制用于通过密钥保护数据。迁移管理局持有描述安全策略的安全策略表，并根据安全策略表判断是否启用从第一终端到第二终端的数据移动。

5. 发明申请

US20100162352A1 FALSIFICATION DETECTING SYSTEM, FALSIFICATION DETECTING METHOD, FALSIFICATION DETECTING PROGRAM, RECORDING MEDIUM, INTEGRATED CIRCUIT, AUTHENTICATION INFORMATION GENERATING DEVICE AND FALSIFICATION DETECTING DEVICE 有权
标题翻译：伪造检测系统，伪造检测方法，伪造检测程序，记录介质，集成电路，认证信息生成装置和伪造检测装置
公开(公告)号：US20100162352A1
公开(公告)日：2010-06-24
申请号：US12377040
申请日：2007-11-07
申请人： Tomoyuki Haga , Hideki Matsushima , Takayuki Ito , Manabu Maeda , Taichi Sato
发明人： Tomoyuki Haga , Hideki Matsushima , Takayuki Ito , Manabu Maeda , Taichi Sato
IPC分类号： G06F21/22
CPC分类号： G06F21/64 , G06F21/51
摘要： A tamper detection device detects tampering with a program loaded to memory, at high speed and without compromising the safety. Prior to loading of a program, a dividing-size determining unit 12 determines a block size based on random number information, a dividing unit 13 divides the program by the block size into data blocks, and a first conversion unit 14 converts, by conducting a logical operation, the data blocks into intermediate authentication data no greater than the block size, and a second conversion unit 15 conducts a second conversion on the intermediate authentication data to generate authentication data. The authentication data and the block size are stored. After the program loading, a program resulting from the loading is divided by the block size, followed by the first and second conversions to generate comparative data. The comparative data is compared with the authentication data to detect tampering of the loaded program.
摘要翻译：篡改检测装置可以高速地检测加载到存储器的程序的篡改，而不会影响安全性。在加载程序之前，分割尺寸确定单元12基于随机数信息确定块大小，分割单元13将程序除以块大小分成数据块，第一转换单元14通过执行逻辑运算，将数据块转换成不大于块大小的中间认证数据，第二转换单元15对中间认证数据进行第二转换以生成认证数据。存储认证数据和块大小。在程序加载之后，由加载产生的程序除以块大小，然后进行第一次和第二次转换以生成比较数据。将比较数据与认证数据进行比较，以检测加载的程序的篡改。

6. 发明授权

US08489873B2 Migration apparatus, method and system for transferring data protected within a first terminal device to a second terminal device 有权
标题翻译：用于将在第一终端设备中保护的数据传送到第二终端设备的移动设备，方法和系统
公开(公告)号：US08489873B2
公开(公告)日：2013-07-16
申请号：US12865894
申请日：2009-02-23
申请人： Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Yuichi Futa , Taichi Sato
发明人： Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Yuichi Futa , Taichi Sato
IPC分类号： H04L29/06
CPC分类号： G06F21/10 , G06F9/45558 , G06F21/57 , G06F2009/45587 , G06F2221/0782 , G06F2221/2137 , G06F2221/2145 , H04L9/14 , H04L9/3234 , H04L9/3247 , H04L9/3263 , H04L2209/127 , H04L2209/603
摘要： The present invention provides a migration apparatus that realizes safe migration of secret data between a first terminal device and a second terminal device. Before transmitting the secret data to the second terminal device, the migration apparatus (i) receives, from the first terminal device, a minimum evaluation level required of a destination of the secret data by the first terminal device, (ii) receives, from the second terminal device, an evaluation level of the second terminal device, (iii) judges whether the evaluation level of the second terminal device is lower than the minimum evaluation level, and (iv) sends the secret data to the second terminal device only if the evaluation level of the second terminal device is no lower than the minimum evaluation level.
摘要翻译：本发明提供一种迁移装置，其实现了第一终端装置与第二终端装置之间的秘密数据的安全迁移。在将秘密数据发送到第二终端装置之前，迁移装置（i）从第一终端装置接收第一终端装置对秘密数据的目的地所需的最小评价等级，（ii）从第二终端设备，第二终端设备的评估级别，（iii）判断第二终端设备的评估级别是否低于最小评估级别，以及（iv）仅在第二终端设备第二终端装置的评价等级不低于最低评价等级。

7. 发明授权

US08656175B2 Secure processing device, secure processing method, encrypted confidential information embedding method, program, storage medium, and integrated circuit 有权
标题翻译：安全处理设备，安全处理方法，加密机密信息嵌入方法，程序，存储介质和集成电路
公开(公告)号：US08656175B2
公开(公告)日：2014-02-18
申请号：US12091250
申请日：2006-10-24
申请人： Tomoyuki Haga , Taichi Sato , Rieko Asai
发明人： Tomoyuki Haga , Taichi Sato , Rieko Asai
IPC分类号： H04L9/16
CPC分类号： H04L9/085 , H04L9/3249
摘要： When performing secure processing using confidential information that needs to be confidential, the secure processing device according to the present invention prevents the confidential information from being exposed by an unauthorized analysis such as a memory dump. A signature generation device that provides a message M with a signature by using a signature key comprises: a split key storage unit that stores split secret keys obtained by splitting the signature key d into at least two, a signature key generation equation F for calculating the split secret keys to obtain the signature key d, and a signature generation equation; a signature key generation identical equation generation unit that generates a signature key generation identical equation G for obtaining the same result as the signature generation equation F, with use of an associative law, a distributive law, and a commutative law; a combined split key generation unit that generates a plurality of combined split keys that are each a result of calculating the split secret keys, and that are to be arguments for the signature key generation identical equation G; and a signature generation unit that provides the message with the signature, based on the signature key generation identical equation G and the split secret keys.
摘要翻译：当使用需要保密的机密信息进行安全处理时，根据本发明的安全处理装置防止机密信息被诸如存储器转储之类的未经授权的分析所暴露。通过使用签名密钥向消息M提供签名的签名生成装置包括：分割密钥存储单元，其将通过将签名密钥d分割为至少两个而获得的分离密钥，将签名密钥生成等式F计算为分离密钥以获得签名密钥d和签名生成方程; 签名密钥生成相同方程生成单元，其使用关联定律，分配规则和交换规则生成用于获得与签名生成方程F相同的结果的签名密钥生成相同等式G; 组合分割密钥生成单元，其生成分别是计算分离的秘密密钥的结果的多个组合分割关键字，并且作为签名密钥生成相同方程式G的参数; 以及签名生成单元，其基于签名密钥生成相同的等式G和分割的秘密密钥向消息提供签名。

8. 发明授权

US08307354B2 Program creation device, program test device, program execution device, information processing system 有权
标题翻译：程序创建装置，程序测试装置，程序执行装置，信息处理系统
公开(公告)号：US08307354B2
公开(公告)日：2012-11-06
申请号：US11629907
申请日：2005-06-24
申请人： Tomoyuki Haga , Yukie Shoda , Taichi Sato , Teruto Hirota
发明人： Tomoyuki Haga , Yukie Shoda , Taichi Sato , Teruto Hirota
IPC分类号： G06F9/44 , G06F9/45 , G06F21/00 , G06F11/00
CPC分类号： G06F21/14
摘要： A program generation apparatus generates an obfuscated program difficult to analyze from outside and a program execution apparatus executes the program. The program generation apparatus includes an acquisition unit that acquires a 1st program including one or more instructions, the 1st program causing a process by executing the instructions in a predetermined order to obtain a result; a generation unit that generates a 2nd program based on the 1st program; and an output unit that outputs the 2nd program. The 2nd program causes a process that is different from the process caused by the 1st program and varies according to current information determined at execution of the 2nd program in order to obtain a result identical to the result of the 1st program.
摘要翻译：程序生成装置从外部生成难以分析的混淆程序，程序执行装置执行程序。该程序生成装置包括获取单元，该获取单元获取包括一个或多个指令的第一程序，所述第一程序通过以预定顺序执行指令来导致处理以获得结果; 生成单元，其基于第一程序生成第二程序; 以及输出第二程序的输出单元。第二程序导致与第一程序引起的处理不同的处理，并且根据在执行第二程序确定的当前信息而变化，以获得与第一程序的结果相同的结果。

9. 发明授权

US08312297B2 Program illegiblizing device and method 有权
标题翻译：程序非法化装置和方法
公开(公告)号：US08312297B2
公开(公告)日：2012-11-13
申请号：US11918904
申请日：2006-04-21
申请人： Taichi Sato , Motoji Ohmori , Rieko Asai , Yuichi Futa , Tomoyuki Haga , Masahiro Mambo
发明人： Taichi Sato , Motoji Ohmori , Rieko Asai , Yuichi Futa , Tomoyuki Haga , Masahiro Mambo
IPC分类号： G06F21/00
CPC分类号： G06F21/14
摘要： A program obfuscating device for generating obfuscated program from which unauthorized analyzer cannot obtain confidential information easily. The program obfuscating device stores original program that contains authorized program instructions and confidential process instruction group containing confidential information that needs to be kept confidential, generates process instructions which, when executed in predetermined order, provide same result, with execution of last process instruction thereof, as the confidential process instruction group, inserts the process instructions into the original program at position between start of the original program and the confidential process instruction group so as to be executed in the predetermined order, in place of the confidential process instruction group, generates dummy block as dummy of the process instructions, and inserts the dummy block and control instruction, which causes the dummy block to be bypassed, into the original program, and inserts branch instruction into the dummy block.
摘要翻译：一种用于产生混淆程序的程序混淆装置，从而使未经授权的分析仪不能容易地获得机密信息。程序模糊处理装置存储包含授权程序指令的原始程序和包含需要保密的机密信息的机密处理指令组，生成处理指令，当以预定顺序执行时，执行其最后处理指令，作为机密处理指令组，代替机密处理指令组，将处理指令插入到原始程序开始之间的位置和机密处理指令组之间以便以预定顺序执行的处理指令，生成伪代码块作为处理指令的虚拟，并将使块旁路的虚拟块的伪块和控制指令插入到原始程序中，并将分支指令插入到虚拟块中。

10. 发明申请

US20100332820A1 INFORMATION SECURITY DEVICE AND INFORMATION SECURITY SYSTEM 有权
标题翻译：信息安全设备和信息安全系统
公开(公告)号：US20100332820A1
公开(公告)日：2010-12-30
申请号：US12865894
申请日：2009-02-23
申请人： Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Yuichi Futa , Taichi Sato
发明人： Hideki Matsushima , Hisashi Takayama , Takayuki Ito , Tomoyuki Haga , Yuichi Futa , Taichi Sato
IPC分类号： H04L9/00
CPC分类号： G06F21/10 , G06F9/45558 , G06F21/57 , G06F2009/45587 , G06F2221/0782 , G06F2221/2137 , G06F2221/2145 , H04L9/14 , H04L9/3234 , H04L9/3247 , H04L9/3263 , H04L2209/127 , H04L2209/603
摘要： The present invention provides a migration apparatus that realizes safe migration of data between devise that use different encryption algorithms and different security authentication levels. The fourth electronic terminal device 2502 sends, to the migration authority 2501, a request for migration of a virtual machine to the fifth electronic terminal device 2503. If the fifth electronic terminal device 2503 is not an illegitimate device, the migration authority 2501 sends a migration request to the fifth electronic terminal device 2503. The fifth electronic terminal device 2503 sends, to the migration authority 2501, a digital signature and so on, together with the request. The migration authority 2501 makes a judgment. If the result is “OK”, the migration authority 2501 sends the result “OK” to the fifth electronic terminal device 2503. The fourth electronic terminal device 2502 encrypts a migration package and sends the encrypted migration package to the migration authority 2501, and sends the virtual machine to the fifth electronic terminal device 2503.
摘要翻译：本发明提供了一种迁移装置，其实现了使用不同加密算法和不同安全认证级别的设备之间的数据的安全迁移。第四电子终端装置2502向迁移机构2501发送虚拟机迁移到第五电子终端装置2503的请求。如果第五电子终端装置2503不是非法装置，则迁移机构2501发送迁移请求到第五电子终端装置2503.第五电子终端装置2503与请求一起发送到移动局2501的数字签名等。迁移管理机构2501进行判断。如果结果为“OK”，则迁移机构2501将结果“OK”发送到第五电子终端装置2503.第四电子终端装置2502对迁移包进行加密，并将加密的迁移包发送到迁移机构2501，并发送虚拟机到第五电子终端设备2503。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式