DECRYPTION PROCESSING APPARATUS, SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT

• US 20090207999A1
• Filed: 12/30/2008
• Published: 08/20/2009
• Est. Priority Date: 02/18/2008
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Muratani, Hirofumi, Yonemura, Tomoko
• Application Number:
  US12/346,265
• Publication Number:
  US 20090207999A1
• Time in Patent Office: Days
• US Class Current: 380/30
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/3013 involving the discrete logarithm problem, e.g. ElGamal or Diffie-Hellman systems

Abstract

In a decryption processing apparatus, a decompression processing unit performs a map to pieces of compressed data included in a compressed encrypted data, thereby obtaining the pieces of the encrypted data having each of the pieces of the compressed data decompressed, the decompression map being a process of inputting the compressed data and either the final output data or the auxiliary output data and being a process of outputting the encrypted data and the auxiliary output data, a decryption processing unit performs a decryption process to each of the pieces of encrypted data, using a secret key corresponding to the public key, thereby obtaining the plain data, and a control unit controls parallel execution of the decompression process and the decryption process, and controls the decryption process performed by the decryption processing unit to the encrypted data output by the decompression processing unit, based on the decryption procedure.

Claims

1. A decryption processing apparatus comprising:

a receiving unit that receives compressed encrypted data from an encryption processing apparatus via a network, the encryption processing apparatus performing an encryption process to plain data using a public key and output a plurality of pieces of encrypted data, and a compression process to perform a compression map to each of the pieces of the encrypted data to output compressed encrypted data obtained by compressing the encrypted data and auxiliary output data as an intermediate output from the encrypted data and additional input data, thereby outputting the compressed encrypted data including the pieces of the compressed data and final output data finally output as the auxiliary output data;

a storage unit that stores a decryption procedure which determines in advance an order of an decompression process of the pieces of the compressed data and an order of a decryption process of the pieces of the encrypted data, based on an output order of the pieces of the encrypted data in the encryption process and an input order of the pieces of the encrypted data and the additional input data to the compression map;

a decompression processing unit that performs a decompression map to the pieces of the compressed data included in the compressed encrypted data, thereby obtaining the pieces of the encrypted data having each of the pieces of the compressed data decompressed, the decompression map being a process of inputting the compressed data and either the final output data or the auxiliary output data and being a process of outputting the encrypted data and the auxiliary output data;

a decryption processing unit that performs a decryption process to each of the pieces of encrypted data, using a secret key corresponding to the public key, thereby obtaining the plain data; and

a control unit that controls parallel execution of the decompression process and the decryption process, and controls the decryption process performed by the decryption processing unit to the encrypted data output by the decompression processing unit, based on the decryption procedure.

2. The apparatus according to claim 1, wherein the compression process is performed by inputting the auxiliary output data output by the last compression map, as the additional input data, at a time of performing the compression map to the encrypted data at a second time and after,

the decompression processing unit inputs one piece of the compressed data and the final output data, at a time of first performing the compressed data to the decompression map, and inputs compressed data different from the one piece of the compressed data and auxiliary output data output at the last decompression map, to the decompression map, at the time of performing the compressed data to the decompression map at a second time and after, and

the decryption procedure determines in advance an order of a decompression process of the pieces of the compressed data and an order of a decryption process of the pieces of the encrypted data, based on an input order of the auxiliary output data to the compression map.

3. The apparatus according to claim 1, wherein the encryption process is performed by encrypting the plain by performing plural times of exponentiation or multiplication, and

the decryption processing unit performs a decryption process to each of the pieces of the compressed data by performing plural times of exponentiation or multiplication.

4. The apparatus according to claim 1, wherein the encryption process is performed by encrypting the plain data using a hash function, and

the decryption processing unit performs a decryption process to each of the pieces of the compressed data using the hash function.

5. The apparatus according to claim 4, wherein the encryption process is performed by encrypting the plain data using the hash function inputting a part of the encrypted data out of the pieces of the encrypted data, and

the decryption processing unit performs a decryption process to each of the pieces of the compressed data using the hash function inputting a part of the encrypted data out of the pieces of the encrypted data.

6. The apparatus according to claim 4, wherein the encryption process is performed by encrypting the plain data using the hash function inputting the pieces of compressed data output by the compression map, and

the decryption processing unit performs a decryption process to each of the pieces of the compressed data using the hash function inputting the compressed data.

7. The apparatus according to claim 4, wherein the compression process is performed by performing a second compression map not inputting the additional input data and not outputting the auxiliary output data, to a part of the encrypted data out of the pieces of the encrypted data, thereby obtaining the compressed data, and

the decompression processing unit performs a second decompression map not inputting the final output data or the auxiliary output data but outputting only the encrypted data, to a part of the compressed data out of the pieces of the compressed data, thereby obtaining the encrypted data.

8. The apparatus according to claim 1, wherein the compression process is performed by compressing the pieces of the encrypted data using the compression map based on an algebraic torus, and

the decompression processing unit decompresses the pieces of the compressed data using the compression map based on an algebraic torus.

9. The apparatus according to claim 1, wherein the encryption process is performed by encrypting the plain data, based on a discrete logarithm problem on a finite field, and

the decryption processing unit decrypts the pieces of the encrypted data that are decompressed, based on a discrete logarithm problem on a finite field.

10. An encryption processing system comprising:

an encryption processing apparatus; and

a decryption processing apparatus connected to the encryption processing apparatus via a network, wherein

the encryption processing apparatus includes

an encryption processing unit that performs an encryption process to plain data using a public key, and outputs a plurality of pieces of encrypted data,

a compression processing unit that performs a compression map to each of the pieces of the encrypted data, and outputs compressed encrypted data including the pieces of the compressed data and final output data finally output as the auxiliary output data, the compression map being a process of outputting compressed data obtained by compressing the encrypted data and auxiliary output data as an intermediate output from the encrypted data and additional input data,

a transmitting unit that transmits the compressed encrypted data to the decryption processing apparatus,

a first storage unit that stores an encryption procedure which determines in advance an order of an encryption process of the plain data and an order of a compression process of the pieces of the encrypted data, based on an output order of the pieces of the encrypted data in the encryption process and an input order of the pieces of the encrypted data and the additional input data to the compression map, and

a first control unit that controls parallel execution of the encryption process and the compression process, and controls the compression process performed by the compression processing unit to the pieces of the encrypted data output by the encryption processing unit, based on the encryption procedure,

the encryption processing unit performs an encryption process to the plain data using the hash function inputting compressed data output by the compression map,

the decryption processing apparatus includes

a receiving unit that receives the compressed encrypted data from the encryption processing apparatus,

a storage unit that stores a decryption procedure which determines in advance an order of a decompression process of the pieces of the compressed data and an order of a decryption process of the pieces of the encrypted data, based on an output order of the pieces of the encrypted data in the encryption process and an input order of the pieces of the encrypted data and the additional input data to the compression map,

a decompression processing unit that performs a decompression map to the pieces of the compressed data included in the compressed encrypted data, thereby obtaining the pieces of the encrypted data having each of the pieces of the compressed data decompressed, the decompression map being a process of inputting the compressed data and either the final output data or the auxiliary output data and being a process of outputting the encrypted data and the auxiliary output data,

a decryption processing unit that performs a decryption process to each of the pieces of the encrypted data, using a secret key corresponding to the public key, thereby obtaining the plain data, and

a second control unit that that controls parallel execution of the decompression process and the decryption process, and controls the decryption process performed by the decryption processing unit to the encrypted data output by the decompression processing unit, based on the decryption procedure, and

the decryption processing unit performs a decryption process to each of the pieces of the encrypted data, using the hash function inputting the compressed data.

11. The system according to claim 10, wherein the compression process is performed by performing a second compression map not inputting the additional input data and not outputting the auxiliary output data, to a part of the encrypted data out of the pieces of the encrypted data, thereby obtaining the compressed data, and

the decompression processing unit performs a second decompression map not inputting the final output data or the auxiliary output data but outputting only the encrypted data, to a part of the compressed data out of the pieces of the compressed data, thereby obtaining the encrypted data.

12. A decryption processing method performed by a decryption processing apparatus, the method comprising:

receiving compressed encrypted data from an encryption processing apparatus via a network, the encryption processing apparatus performing an encryption process to plain data using a public key and output a plurality of pieces of encrypted data, and a compression process to perform a compression map to each of the pieces of the encrypted data to output compressed encrypted data obtained by compressing the encrypted data and auxiliary output data as an intermediate output from the encrypted data and additional input data, thereby outputting the compressed encrypted data including the pieces of the compressed data and final output data finally output as the auxiliary output data;

performing a decompression map to the pieces of the compressed data included in the compressed encrypted data, thereby obtaining the pieces of the encrypted data having each of the pieces of the compressed data decompressed, the decompression map being a process of inputting the compressed data and either the final output data or the auxiliary output data and being a process of outputting the encrypted data and the auxiliary output data;

performing a decryption process to each of the pieces of encrypted data, using a secret key corresponding to the public key, thereby obtaining the plain data; and

controlling parallel execution of the decompression process and the decryption process, and controlling the decryption process by the decryption processing unit to the encrypted data output by the decompression processing unit, based on a decryption procedure of a storage unit that stores the decryption procedure which determines in advance an order of a process of the pieces of the compressed data and an order of a decryption process of the pieces of the encrypted data, based on an output order of the pieces of the encrypted data in the encryption process and an input order of the pieces of the encrypted data and the additional input data to the compression map.

13. A computer program product having a computer readable medium including programmed instructions for performing a decryption process, wherein the instructions, when executed by a computer, cause the computer to perform:

receiving compressed encrypted data from an encryption processing apparatus via a network, the encryption processing apparatus performing an encryption process to plain data using a public key and output a plurality of pieces of encrypted data, and a compression process to perform a compression map to each of the pieces of the encrypted data to output compressed encrypted data obtained by compressing the encrypted data and auxiliary output data as an intermediate output from the encrypted data and additional input data, thereby outputting the compressed encrypted data including the pieces of the compressed data and final output data finally output as the auxiliary output data;

performing a decompression map to the pieces of the compressed data included in the compressed encrypted data, thereby obtaining the pieces of the encrypted data having each of the pieces of the compressed data decompressed, the decompression map being a process of inputting the compressed data and either the final output data or the auxiliary output data and being a process of outputting the encrypted data and the auxiliary output data;

performing a decryption process to each of the pieces of encrypted data, using a secret key corresponding to the public key, thereby obtaining the plain data; and

controlling parallel execution of the decompression process and the decryption process, and controlling the decryption process by the decryption processing unit to the encrypted data output by the decompression processing unit, based on a decryption procedure of a storage unit that stores the decryption procedure which determines in advance an order of a decompression process of the pieces of the compressed data and an order of a decryption process of the pieces of the encrypted data, based on an output order of the pieces of the encrypted data in the encryption process and an input order of the pieces of the encrypted data and the additional input data to the compression map.