Ciphertext processing device, ciphertext processing method, computer-readable recording medium, and information processing device

Patent metadata

Field	Value
Publication number	US-9473302-B2
Application number	US-201514634931-A
Country	US
Kind code	B2
Filing date	Mar 2, 2015
Priority date	Mar 25, 2014
Publication date	Oct 18, 2016
Grant date	Oct 18, 2016

Abstract

A ciphertext processing device acquires a first polynomial into which first text data is converted with a first order and which is encrypted with a first public key and a first square-value polynomial into which square-value vector data of each component of the first text data is converted with the first order and which is encrypted with the first public key. The ciphertext processing device acquires a second polynomial into which second text data is converted with a second order and which is encrypted with the first public key and a second square-value polynomial into which square-value vector data of each component of the second text data is converted with the second order and which is encrypted with the first public key. The ciphertext processing device determines whether the second text data is included in the first text data, using the each polynomial.

First claim

What is claimed is:

1. A ciphertext processing device comprising:
a memory, and
a processor coupled to the memory wherein the processor executes a process comprising:
first acquiring a first polynomial in which a plurality of bits included in a numerically vectorized first text data are set to coefficients in an ascending order and which is encrypted in a homomorphic encryption with a first public key and a first square-value polynomial in which a plurality of bits included in square-value vector data of each component of the numerically vectorized first text data are set to coefficients in the ascending order and which is encrypted in the homomorphic encryption with the first public key;
second acquiring a second polynomial in which a plurality of bits included in a numerically vectorized second text data are set to coefficients in a descending order and which is encrypted in the homomorphic encryption with the first public key and a second square-value polynomial in which a plurality of bits included in square-value vector data of each component of the numerically vectorized second text data are set to coefficients in the descending order and which is encrypted in the homomorphic encryption with the first public key; and
calculating a first auxiliary data item for aggregating the each coefficient of the each term of the first polynomial, calculating a second auxiliary data item for aggregating the each coefficient of the each term of the first square-value polynomial, and calculating an encryption norm distance between the numerically vectorized first text data and the numerically vectorized second text data by executing a pattern matching which determines whether the numerically vectorized second text data is included in the numerically vectorized first text data, while maintaining the encrypting, using the first polynomial, the first square-value polynomial, the second polynomial, the second square-value polynomial, the first auxiliary data item, and the second auxiliary data item.

2. The ciphertext processing device according to claim 1 , wherein the process further comprises:
transmitting the encryption norm distance which is encrypted with the first public key to a terminal device with a first secret key corresponding to the first public key.

3. A ciphertext processing method comprising:
acquiring a first polynomial in which a plurality of bits included in a numerically vectorized first text data are set to coefficients in an ascending order and which is encrypted in a homomorphic encryption with a first public key and a first square-value polynomial in which a plurality of bits included in square-value vector data of each component of the numerically vectorized first text data are set to coefficients in the ascending order and which is encrypted with in the homomorphic encryption the first public key, using a processor;
acquiring a second polynomial in which a plurality of bits included in a numerically vectorized second text data are set to coefficients in a descending order and which is encrypted in the homomorphic encryption with the first public key and a second square-value polynomial in which a plurality of bits included in square-value vector data of each component of the numerically vectorized second text data are set to coefficients in the descending order and which is encrypted in the homomorphic encryption with the first public key, using the processor;
calculating a first auxiliary data item for aggregating the each coefficient of the each term of the first polynomial,
calculating a second auxiliary data item for aggregating the each coefficient of the each term of the first square-value polynomial, and
calculating an encryption norm distance between the numerically vectorized first text data and the numerically vectorized second text data by executing a pattern matching which determines whether the second text data is included in the first text data, using the first polynomial, while maintaining the encrypting, the first square-value polynomial, the second polynomial, the second square-value polynomial, the first auxiliary data item, and the second auxiliary data item, using the processor.

4. The ciphertext processing method according to claim 3 , wherein the method further comprises:
transmitting the encryption norm distance which is encrypted with the first public key to a terminal device with a first secret key corresponding to the first public key.

5. A non-transitory computer-readable recording medium having stored therein a ciphertext processing program that causes a computer to execute a process comprising:
acquiring a first polynomial in which a plurality of bits included in a numerically vectorized first text data are set to coefficients in an ascending order and which is encrypted in a homomorphic encryption with a first public key and a first square-value polynomial in which a plurality of bits included in square-value vector data of each component of the numerically vectorized first text data are set to coefficients in the ascending order and which is encrypted with in the homomorphic encryption the first public key;
acquiring a second polynomial in which a plurality of bits included in a numerically vectorized second text data are set to coefficients in a descending order and which is encrypted in the homomorphic encryption with the first public key and a second square-value polynomial in which a plurality of bits included in square-value vector data of each component of the numerically vectorized second text data are set to coefficients in the descending order and which is encrypted in the homomorphic encryption with the first public key;
calculating a first auxiliary data item for aggregating the each coefficient of the each term of the first polynomial,
calculating a second auxiliary data item for aggregating the each coefficient of the each term of the first square-value polynomial, and
calculating an encryption norm distance between the numerically vectorized first text data and the numerically vectorized second text data by executing a pattern matching which determines whether the second text data is included in the first text data, using the first polynomial, while maintaining the encrypting, the first square-value polynomial, the second polynomial, the second square-value polynomial, the first auxiliary data item, and the second auxiliary data item.

6. The ciphertext processing method according to claim 5 , wherein the process further comprises:
transmitting the encryption norm distance which is encrypted with the first public key to a terminal device with a first secret key corresponding to the first public key.

Assignees

• Fujitsu Ltd

Inventors

• Yasuda Masaya
• Shimoyama Takeshi
• Kogure Jun

Classifications

• H04L2209/24

  Key scheduling, i.e. generating round keys or sub-keys for block encryption · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L9/008 Primary

  involving homomorphic encryption · CPC title

• H04L9/3093 Primary

  involving Lattices or polynomial equations, e.g. NTRU scheme · CPC title