Encryption device, cipher-text comparison system, cipher-text comparison method, and cipher-text comparison program

Patent metadata

Field	Value
Publication number	US-9602278-B2
Application number	US-201214129871-A
Country	US
Kind code	B2
Filing date	May 29, 2012
Priority date	Jul 5, 2011
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

An encryption device calculates a derived key by taking a document as a numerical value and corresponding identifier as input values and generates a cipher-text-by-identifier acquired by encrypting the document through a calculation taking the documents as input values, and a comparison unit generates relative values used for a greater-than-and-less-than comparison assessment between the plain text and another plain text through a calculation using a second hash function taking the derived key and plain text as input values, generates a relative value cipher-text through a calculation taking the derived key, the identifier, and the relative value as input values, generates a character string constituted with the cipher-text-by- identifier and the relative value cipher-text as a cipher-text, restores the relative values corresponding to the different cipher-texts through calculations using the second hash function, and performs a greater-than-and-less-than assessment on the encrypted different plain texts.

First claim

The invention claimed is:

1. An encryption device, comprising:
a key calculation unit stored in a memory and configured to calculate a derived key by a calculation using a first hash function set in advance by taking a plain text as a numerical value and an identifier corresponding thereto as input values;
a cipher-text-by-identifier generation unit stored in the memory and configured to generate a cipher-text-by-identifier acquired by encrypting the identifier by a calculation using the first hash function by taking the identifier and the derived key as input values;
a relative value generation unit stored in the memory and configured to generate relative values e, e′ that are values used for a greater-than-and-less-than comparison assessment between the plain text and another plain text through performing a calculation using a second hash function set in advance and taking a modulo (mod) operation, by taking the derived key and the plain text as input values;
a relative value cipher-text concealment unit stored in the memory and configured to generate a relative value cipher-text acquired by encrypting the relative value through a calculation using the second hash function and the modulo operation, by taking the derived key, the identifier, and the relative value as input values; and
a cipher-text generating/outputting function unit configured to generate and output a character string constituted with the cipher-text-by-identifier and the relative value cipher-text as a cipher-text of the plain text,
wherein:
the cipher-text-by-identifier generation unit stored in the memory includes a function which, regarding an arbitrary integer k from 1 to n, generates a k-th block value of the cipher-text-by-identifier from the k-th block of the derived key and the identifier for a given integer n, and
the relative value generation unit stored in the memory includes a relative value generating function which generates values of the k-th block corresponding to respective values of n-pieces of each data block sequence of the cipher-text-by-identifier as the relative values.

2. A cipher-text comparison system comprising:
an encryption device, comprising:
a key calculation unit stored in a memory and configured to calculate a derived key by a calculation using a first hash function set in advance by taking a plain text as a numerical value and an identifier corresponding thereto as input values;
a cipher-text-by-identifier generation unit stored in the memory and configured to generate a cipher-text-by-identifier acquired by encrypting the identifier by a calculation using the first hash function by taking the identifier and the derived key as input values;
a relative value generation unit stored in the memory and configured to generate relative values e, e′ that are values used for a greater-than-and-less-than comparison assessment between the plain text and another plain text through performing a calculation using a second hash function set in advance and taking a modulo (mod) operation, by taking the derived key and the plain text as input values;
a relative value cipher-text concealment unit stored in the memory and configured to generate a relative value cipher-text acquired by encrypting the relative value through a calculation using the second hash function and the modulo operation, by taking the derived key, the identifier, and the relative value as input values; and
a cipher-text generating/outputting function unit configured to generate and output a character string constituted with the cipher-text-by-identifier and the relative value cipher-text as a cipher-text of the plain text; and

a comparison processing device which captures a first cipher-text and a second cipher-text generated by the encryption device by corresponding to each of different plain texts, wherein the comparison processing device comprises:
a relative value restoration unit, stored in the memory, which separately restores the relative values e, e′ corresponding to each of the plain texts through performing calculations based on the second hash function and the modulo operation, by taking the identifiers and the derived keys set by corresponding to each of the first and second cipher-texts, respectively as input values; and
a relative value comparison assessment unit, stored in the memory, which includes a greater-than-and-less-than comparison assessment function which performs a greater-than-and-less-than assessment on the different plain texts through performing a greater-than-and-less-than comparison on the relative values which correspond to the different plain texts, respectively,
wherein:
the cipher-text-by-identifier generation unit stored in the memory includes a function which, regarding an arbitrary integer k from 1 to n, generates a k-th block value of the cipher-text-by-identifier from the k-th block of the derived key and the identifier for a given integer n, and
the relative value generation unit stored in the memory includes a relative value generating function which generates values of the k-th block corresponding to respective values of n-pieces of each data block sequence of the cipher-text-by-identifier as the relative values.

3. The cipher-text comparison system as claimed in claim 2 , wherein:
a comparison unit, stored in the memory, of the comparison processing device comprises in advance a maximum inconsistence counter determination unit which specifies a counter value j at which different values of the counter values appear first in the cipher-texts-by-identifiers c, c′ as a maximum inconsistence counter value j; and
the relative value restoration unit of the comparison processing device assesses whether or not functions of the relative value cipher-texts regarding the second hash function containing the maximum inconsistence counter value j and each of the relative values apply when restoring each of the relative values e, e′, generates a pair of each of the relative values e, e′ when assessed that the functions apply, and outputs the pair as restored relative values.

4. The cipher-text comparison system as claimed in claim 3 , wherein
the relative value comparison assessment unit includes:
a relative value difference calculating function which calculates a difference between the relative value e of the identifier ID and the relative value e′ of the identifier ID′ outputted from the relative value restoration unit; and
an assessment result outputting function which outputs “0” as a symbol of an assessment result showing “document M >document N” when assessed that the document M of the identifier ID is greater than the document N of the identifier ID′, and outputs “1” as a symbol of an assessment result showing “document N >document M” when assessed that the document N of the identifier ID′ is greater than the document M of the identifier ID.

5. A cipher-text encryption method used in a cipher-text comparison system which comprises an encryption device which encrypts each of a plurality of plain texts as different numerical values and a comparison processing device which captures a first cipher-text and a second cipher-text generated by the encryption device by corresponding to each of the different plain texts and performs greater-than-and-less-than comparison processing on both documents, the cipher-text encryption method comprising:
calculating a derived key by a calculation using a first hash function set in advance by taking the plain text as the numerical value and an identifier corresponding thereto as input values;
generating a cipher-text-by-identifier acquired by encrypting the identifier by a calculation using the first hash function by taking the identifier and the derived key as input values;
generating relative values that are values used for a greater-than-and-less-than comparison assessment

Assignees

• Furukawa Jun
• Nec Corp

Inventors

• Furukawa Jun

Classifications

• H04L9/008

  involving homomorphic encryption · CPC title

• H04L9/0861 Primary

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title