# US 10,484,182 B2 · Encrypted text verification system, method, and recording medium

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,484,182 B2
- Document ID: US10484182B2
- Status: Granted
- Kind: B2
- Application number: 15/524,151
- Filed: 2015-10-26
- Published: 2017-11-09
- Granted: 2019-11-19
- Earliest claimed: 2014-11-05
- Assignees: NEC Corporation; Satoshi Obana
- Applicants: NEC Corporation; Satoshi Obana
- Inventors: Toshiyuki Isshiki; Kengo Mori; Toshinori Araki; Satoshi Obana
- Web page: https://patentgrep.com/patent/US10484182B2

## CPC

- H04L 9/3247: {involving digital signatures}
- G06F 11/1012: {using codes or arrangements adapted for a specific type of error (G06F11/1048 takes precedence)}
- G06F 11/1076: {Parity data used in redundant arrays of independent storages, e.g. in RAID systems}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/45: Structures or tools for the administration of authentication
- G09C 1/00: Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00)
- H03M 13/152: {Bose-Chaudhuri-Hocquenghem [BCH] codes}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- G06F 2221/2107: File encryption
- H04L 2209/12: Details relating to cryptographic hardware or logic circuitry
- H04L 2209/72: Signcrypting, i.e. digital signing and encrypting simultaneously
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G09C: CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY
- H03M: CODING; DECODING; CODE CONVERSION IN GENERAL (using fluidic means F15C4/00; optical analogue/digital converters G02F7/00; coding, decoding or code conversion, specially adapted for particular applications, see the relevant subclasses, e.g. G01D, G01R, G06F, G06T, G09G, G10L, G11B, G11C, H04B, H04L, H04M, H04N; ciphering or deciphering for cryptography or other purposes involving the need for secrecy G09C)

## Abstract

In a data registration phase, encrypted data is calculated by encrypting input data to be concealed by using a secret key, registration data is generated based on the encrypted data and a verification key, and the registration data is stored as a registration template in a storage unit together with an identifier for uniquely identifying the registration data. In an encrypted text verification phase, a data verifying request is generated in which input data to be verified has been encrypted by using a random number, the registration template stored in the storage unit and the data verifying request are verified to produce a determined result, a verified result including a part or all of the registration template corresponding to the determined result is produced, and data is restored based on the verified result to produce a restored result.

## Claims

### Claim 1

An encrypted text verification system, comprising: a registration data generation device; a storage device; a data verifying request device; and a data verifying determination device,
wherein the registration data generation device includes:
a key generation circuitry configured to generate a secret key and a verification key from a security parameter;
an encryption circuitry configured to calculate encrypted data by encrypting input data to be concealed by using the secret key; and
a registration data generation circuitry configured to generate registration data based on the encrypted data and the verification key;
wherein the storage device is configured to store the registration data generated by the registration data generation device as a registration template in a storage circuitry together with an identifier for uniquely identifying the registration data;
wherein the data verifying request device includes a data verifying request generation circuitry configured to generate a data verifying request in which input data to be verified has been encrypted by using a random number;
wherein the data verifying determination device includes:
a registration data reception circuitry configured to receive the registration template stored in the storage device;
a data verifying request reception circuitry configured to receive the data verifying request from the data verifying request device;
a data verifying determination circuitry configured to verify the registration template stored in the storage circuitry and the data verifying request to produce a determined result; and
a verified result generation circuitry configured to produce a verified result including a part or all of the registration template corresponding to the determined result,
wherein the data verifying request device further includes:
a verified result reception circuitry configured to receive the verified result from the data verifying determining device; and
a data restoration circuitry configured to restore data based on the verified result to produce a restored result.

### Claim 2 (depends on 1)

The encrypted text verification system according to claim 1,
wherein the encryption circuitry is configured to calculate the encrypted data by taking an exclusive OR between the input data to be concealed and an error-correcting code generated by performing error-correction coding on the secret key, and
wherein the data verifying request generation circuitry is configured to generate the data verifying request by taking an exclusive OR between the input data to be verified and an error-correcting code obtained by performing error-correction coding on the random number.

### Claim 3 (depends on 2)

The encrypted text verification system according to claim 2, wherein the data verifying determination circuitry is configured to produce the determined result by performing error-correction decoding on an exclusive OR between the data verifying request and the encrypted data included in the registration template.

### Claim 4 (depends on 3)

The encrypted text verification system according to claim 3, wherein the verified result generation circuitry is configured to produce, as the verified result, a result obtained by adding to the determined result the verification key included in the registration template corresponding to the determined result.

### Claim 5 (depends on 4)

The encrypted text verification system according to claim 4, wherein the data restoration circuitry is configured to obtain the restored result by calculating an exclusive OR between the random number and the determined result included in the verified result, and to verify the restored result by using the verification key.

### Claim 6 (depends on 3)

The encrypted text verification system according to claim 3, wherein the verified result generation circuitry is configured to produce, as the verified result, the encrypted data included in the registration template corresponding to the determined result.

### Claim 7 (depends on 6)

The encrypted text verification system according to claim 6, wherein the data restoration circuitry is configured to obtain the restored result by performing error-correction decoding on an exclusive OR between the verified result and the input data to be verified.

### Claim 8

An encrypted text verification system, comprising: a registration data generation device; a storage device; a data verifying request device; a first data verifying determination device; and a second data verifying determination device,
wherein the registration data generation device includes:
a key generation circuitry configured to generate a signature key and a verification key from a security parameter;
an encryption circuitry configured to calculate encrypted data by encrypting input data to be concealed by using the signature key; and
a registration data generation circuitry configured to generate registration data based on the encrypted data and the verification key;
wherein the storage device is configured to store the registration data generated by the registration data generation device as a registration template in a storage circuitry together with an identifier for uniquely identifying the registration data;
wherein the data verifying request device includes a first data verifying request generation circuitry configured to generate a first data verifying request in which input data to be verified has been encrypted by using a random number;
wherein the first data verifying determination device includes:
a registration data reception circuitry configured to receive the registration template from the storage device;
a first data verifying request reception circuitry configured to receive the first data verifying request from the data verifying request device;
a first data verifying determination circuitry configured to verify the registration template stored in the storage circuitry and the first data verifying request to produce a determined result;
a first verified result generation circuitry configured to generate, as a first verified result, a combination of a message that has been randomly selected and a part or all of the registration template corresponding to the determined result;
wherein the data verifying request device further includes:
a first verified result reception circuitry configured to receive the first verified result from the first data verifying determination device;
a decryption circuitry configured to decrypt the first verified result to produce a decrypted result; and
a second data verifying request generation circuitry configured to generate a second data verifying request based on the decrypted result and the message included in the first verified result;
wherein the second data verifying determination device includes:
a registration data reception circuitry configured to receive the registration template from the storage device;
a second data verifying request reception circuitry configured to receive the second data verifying request from the data verifying request device;
a second data verifying determination circuitry configured to generate a second data verifying determination based on the second data verifying request and the registration data of the registration template recorded in the storage circuitry; and
a second verified result generation circuitry configured to generate, as a second verified result, an identifier of the registration data corresponding to the second data verifying determination.

### Claim 9 (depends on 8)

The encrypted text verification system according to claim 8,
wherein the encryption circuitry is configured to calculate the encrypted data by taking an exclusive OR between the input data to be concealed and an error-correcting code generated by performing error-correction coding on the signature key, and
wherein the first data verifying request generation circuitry is configured to generate the first data verifying request by taking an exclusive OR between the input data to be verified and an error-correcting code obtained by performing error-correction coding on the random number.

### Claim 10 (depends on 2)

The encrypted text verification system according to claim 2, wherein the first data verifying determination circuitry is configured to perform error-correction decoding on an exclusive OR between the first data verifying request and the encrypted data included in the registration data of the registration template, and to produce, as the determined result, a set of identifiers corresponding to the encrypted data for which a result is that decryption is not impossible.

### Claim 11 (depends on 10)

The encrypted text verification system according to claim 10, wherein the first verified result generation circuitry is configured to produce, as the first verified result, a combination of the message that has been randomly selected and the encrypted data included in the registration data of the registration template corresponding to the determined result.

### Claim 12 (depends on 11)

The encrypted text verification system according to claim 11, wherein the decryption circuitry is configured to obtain the decrypted result by performing error-correction decoding on an exclusive OR between the input data to be verified and the encrypted data included in the first verified result.

### Claim 13

An encrypted text verification system, comprising: a registration data generation device; a storage device; a data verifying request device; a first data verifying determination device; and a second data verifying determination device,
wherein the registration data generation device includes:
a key generation circuitry configured to generate a secret key and a public key from a security parameter;
an encryption circuitry configured to calculate encrypted data by encrypting input data to be concealed by using the secret key; and
a registration data generation circuitry configured to generate registration data based on the encrypted data and the public key;
wherein the storage device is configured to store the registration data generated by the registration data generation device as a registration template in a storage circuitry together with an identifier for uniquely identifying the registration data;
wherein the data verifying request device includes a first data verifying request generation circuitry configured to generate a first data verifying request in which input data to be verified has been encrypted by using a random number;
wherein the first data verifying determination device includes:
a registration data reception circuitry configured to receive the registration template from the storage device;
a first data verifying request reception circuitry configured to receive the first data verifying request from the data verifying request device;
a first data verifying determination circuitry configured to verify the registration template stored in the storage circuitry and the first data verifying request to produce a determined result;
a first verified result generation circuitry configured to generate, as a first verified result, a combination of a message that has been randomly selected and a part or all of the registration template corresponding to the determined result;
wherein the data verifying request device further includes:
a first verified result reception circuitry configured to receive the first verified result from the first data verifying request determination device;
a decryption circuitry configured to decrypt the first verified result to produce a decrypted result; and
a second data verifying request generation circuitry configured to generate a second data verifying request based on the decrypted result and the message included in the first verified result;
wherein second data verifying determination device comprises:
a registration data reception circuitry configured to receive the registration template from the storage device;
a second data verifying request reception circuitry configured to receive the second data verifying request from the data verifying request device;
a second data verifying determination circuitry configured to generate a second data verifying determination based on the second data verifying request and the registration data of the registration template recorded in the storage circuitry; and
a second verified result generation circuitry configured to generate, as a second verified result, an identifier of the registration data corresponding to the second data verifying determination.

### Claim 14 (depends on 13)

The encrypted text verification system according to claim 13,
wherein the encryption circuitry is configured to calculate the encrypted data by taking an exclusive OR between the input data to be concealed and an error-correcting code generated by performing error-correction coding on the secret key, and
wherein the first data verifying request generation circuitry is configured to generate the first data verifying request by taking an exclusive OR between the input data to be verified and an error-correcting code obtained by performing error-correction coding on the random number.

### Claim 15 (depends on 14)

The encrypted text verification system according to claim 14, wherein the first data verifying determination circuitry is configured to perform error-correction decoding on an exclusive OR between the first data verifying request and the encrypted data included in the registration data of the registration template, and to produce, as the determined result, a set of identifiers corresponding to the encrypted data for which a result is that decryption is not impossible.

### Claim 16 (depends on 15)

The encrypted text verification system according to claim 15, wherein the first verified result generation circuitry is configured to produce, as the first verified result, a combination of the message that has been randomly selected and the public key included in the registration data of the registration template corresponding to the determined result.

### Claim 17 (depends on 16)

The encrypted text verification system according to claim 16, wherein the decryption circuitry is configured to obtain the decrypted result by performing error-correction decoding on an exclusive OR between the input data to be verified and the public key included in the first verified result.