# US 10,454,910 B2 · Management apparatus, computer program product, system, device, method, information processing apparatus, and server > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,454,910 B2 - Document ID: US10454910B2 - Status: Granted - Kind: B2 - Application number: 15/448,131 - Filed: 2017-03-02 - Published: 2017-06-22 - Granted: 2019-10-22 - Earliest claimed: 2015-03-24 - Assignees: Kabushiki Kaisha Toshiba - Applicants: Kabushiki Kaisha Toshiba - Inventors: Yoshikazu Hanatani; Yoshihiro Oba - Web page: https://patentgrep.com/patent/US10454910B2 ## CPC - H04L 63/065: {for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833)} - H04L 9/0833: {involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - G06F 21/445: {by mutual authentication, e.g. between devices or programs} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract According to an embodiment, a management apparatus manages pieces of information held by a plurality of devices. The apparatus includes storage, one or more processors, and a transmitter. The storage stores therein the pieces of information held by the devices. The processors generate a list of inspection values indicating the pieces of information stored in the storage. The processors generate determination information for determining, in a state where the list is concealed, whether a provided value is included in the list. The transmitter transmits the determination information to the respective devices. ## Claims ### Claim 1 A management apparatus that manages pieces of information held by a plurality of devices, the management apparatus comprising: a storage configured to store therein the pieces of information held by the devices; one or more processors; and a transmitter, wherein the processors are configured to: generate a list of inspection values indicating the pieces of information stored in the storage; and generate determination information including values of all digits of a bit string included in a first bloom filter based on the list; the transmitter is configured to: transmit the determination information to the respective devices; acquire, from each of the devices, a determination result obtained by determining whether the inspection value indicating the information held by the device is included in the list based on the determination information; and based on determination results acquired from the respective devices, check whether the pieces of information stored in the storage are right information or not right information; wherein the storage stores therein device information including pieces of information individually held by the respective devices and stores therein group information including information held in common by devices belonging to a group, the processors: generate a device list serving as the list of the inspection values indicating the device information stored in the storage; generate a group list serving as the list of the inspection values indicating the group information stored in the storage; generate device determination information including values of all digits of a bit string included in a second bloom filter based on the device list; and generate group determination information including values of all digits of a bit string included in a third bloom filter based on the group list, and the transmitter transmits the device determination information and the group determination information to the respective devices as the determination information. ### Claim 2 (depends on 1) The apparatus according to claim 1, wherein, when the determination results each indicating that the inspection value indicating the information held by the device is included in the list are acquired from a predetermined number or more of devices, the processors determine that the pieces of information stored in the storage are right information or not right information. ### Claim 3 (depends on 1) The apparatus according to claim 1, wherein the determination information has a determination with a possibility of false positive, but without possibility of false negative, the false positive representing an erroneous determination that information not included in the list is determined as being included in the list, and the false negative representing an erroneous determination that information included in the list is determined as being not included in the list. ### Claim 4 (depends on 3) The apparatus according to claim 3, wherein the processors generate the determination information with the possibility of false positive set within a preset range. ### Claim 5 (depends on 1) The apparatus according to claim 1, wherein the device information is information including device keys assigned to the respective devices; and the group information is information including group keys held in common by devices belonging to respective groups. ### Claim 6 (depends on 5) The apparatus according to claim 5, wherein the processors generate the inspection values based on pairs of device identifiers for identifying the devices and the device keys, for each pair of the device and the device key, and generate the device list by listing the generated inspection values, and the processors generate the inspection values based on sets of group identifiers for identifying the groups, the group keys, and the device identifiers, for each pair of the group and the device, and generate the group list by listing the generated inspection values. ### Claim 7 (depends on 1) The apparatus according to claim 1, wherein the determination information is the first bloom filter. ### Claim 8 (depends on 7) The apparatus according to claim 7, wherein the processors generate a plurality of initial values, and input pairs of the initial values and the inspection values included in the list to a predetermined single hash function, to generate the bit string included in the first bloom filter. ### Claim 9 (depends on 1) The apparatus according to claim 1, wherein the transmitter adds a signature to the determination information, and transmits the determination information to the respective devices. ### Claim 10 (depends on 1) A computer program product comprising a computer-readable medium containing a non-transitory computer program that causes an information processing apparatus to function as the management apparatus according to claim 1. ### Claim 11 A system comprising: a first management apparatus; a second management apparatus; and a plurality of devices that are connectable through a network, wherein the first management apparatus comprises: a storage configured to store therein pieces of information held by the devices; and one or more first processors configured to encrypt the pieces of information held by the devices and stored in the storage, and transmit the encrypted information to the second management apparatus, the second management apparatus comprises: one or more second processors; and a second transmitter, wherein the second processors are configured to: receive and decrypt the encrypted pieces of information held by the devices and stored in the storage from the first management apparatus; generate a list of inspection values indicating the pieces of information stored in the storage; and generate determination information including values of all digits of a bit string included in a first bloom filter based on the list; the second transmitter transmits the determination information to the respective devices; and the second processors are further configured to: acquire, from each of the devices, a determination result obtained by determining, based on the determination information, whether the inspection value indicating the information held by the device is included in the list; and based on determination results acquired from the respective devices, check whether the pieces of information stored in the storage are right information or not right information; wherein the storage stores therein device information including pieces of information individually held by the respective devices and stores therein group information including information held in common by devices belonging to a group, the second processors: generate a device list serving as the list of the inspection values indicating the device information stored in the storage; generate a group list serving as the list of the inspection values indicating the group information stored in the storage; generate device determination information including values of all digits of a bit string included in a first second bloom filter based on the device list; and generate group determination information including values of all digits of a bit string included in a second third bloom filter based on the group list, and the transmitter transmits the device determination information and the group determination information to the respective devices as the determination information. ### Claim 12 (depends on 11) The system according to claim 11, wherein the first processors encrypt part of the pieces of information held by the devices and stored in the storage, and transmit the part of the pieces of information to the second management apparatus. ### Claim 13 (depends on 11) The system according to claim 11, wherein the second transmitter multicasts the determination information to the devices connected to the network. ### Claim 14 (depends on 11) The system according to claim 11, wherein the second processors are further configured to cause each device to update the information held by the device, after the second processors check that the information stored in the storage is right information or not right information. ### Claim 15 (depends on 11) The system according to claim 11, wherein the first management apparatus further comprises a first transmitter, the first processors are further configured to: generate a list of inspection values indicating the pieces of information stored in the storage; and generate the determination information including the values of all the digits of the bit string included in the first bloom filter based on the list; and the first transmitter is configured to transmit the determination information to the respective devices. ### Claim 16 (depends on 15) The system according to claim 15, wherein each of the devices comprises: a receiver configured to receive the determination information; one or more third processors configured to provide the inspection values indicating the held information to the determination information, and cause the determination information to determine whether the inspection values are included in the list; and a result transmitter configured to transmit a determined result obtained by the third processors, to the second management apparatus. ### Claim 17 (depends on 16) The system according to claim 16, wherein the third processors are further configured to examine the determination information. ### Claim 18 (depends on 16) The system according to claim 16, wherein the determination information is the first bloom filter, the first management apparatus generates an initial value, and provides the initial value to the first processors and the third processors, the first processors input the initial value acquired from the first management apparatus and the inspection values included in the list to a hash function, to generate a bit string of the first bloom filter, and the third processors input the initial value acquired from the first management apparatus and the inspection values indicating the held information to the hash function, to detect digit positions in the bit string of the first bloom filter. ### Claim 19 A method executed in a management apparatus that manages pieces of information held by a plurality of devices, the management apparatus including storage configured to store therein the pieces of information held by the devices, the method comprising: generating, by the management apparatus, a list of inspection values indicating the pieces of information stored in the storage; generating, by the management apparatus, determination information including values of all digits of a bit string included in a first bloom filter based on the list; transmitting, by the management apparatus, the determination information to the respective devices; acquiring, by the management apparatus, from each of the devices, a determination result obtained by determining whether the inspection value indicating the information held by the device is included in the list based on the determination information; and based on determination results acquired from the respective devices, checking, by the management apparatus, whether the pieces of information stored in the storage are right information or not right information; wherein the storage stores therein device information including pieces of information individually held by the respective devices and stores therein group information including information held in common by devices belonging to a group, generating, by the management apparatus, a device list serving as the list of the inspection values indicating the device information stored in the storage; generating, by the management apparatus, e a group list serving as the list of the inspection values indicating the group information stored in the storage; generating, by the management apparatus, device determination information including values of all digits of a bit string included in a second bloom filter based on the device list; and generating, by the management apparatus, group determination information including values of all digits of a bit string included in a third bloom filter based on the group list, and the transmitter transmits the device determination information and the group determination information to the respective devices as the determination information.