# US 11,451,518 B2 · Communication device, server device, concealed communication system, methods for the same, and program

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,451,518 B2
- Document ID: US11451518B2
- Status: Granted
- Kind: B2
- Application number: 16/960,129
- Filed: 2019-01-16
- Published: 2021-04-29
- Granted: 2022-09-20
- Earliest claimed: 2018-01-18
- Assignees: Nippon Telegraph and Telephone Corporation
- Applicants: Nippon Telegraph and Telephone Corporation
- Inventors: Tetsutaro Kobayashi; Yuto Kawahara; Hitoshi Fuji; Reo Yoshida; Kazuki Yoneyama
- Web page: https://patentgrep.com/patent/US11451518B2

## CPC

- H04L 63/04: {for providing a confidential data exchange among entities communicating through data packet networks}
- H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/3247: {involving digital signatures}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 2209/42: Anonymization, e.g. involving pseudonyms
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A communication device includes a signature encryption unit that encrypts input information with a secret key and transmits the information to a server device if the communication device belongs to a group, and a signature decryption unit that downloads, from the server device, encrypted n−1 pieces of the input information transmitted from other communication devices and decrypts the encrypted n−1 pieces of input information with the secret key if the communication device belongs to a group. The communication device transmits session key generation information to the server device via the signature encryption unit, generates a session key using n−1 pieces of session key generation information acquired via the signature decryption unit and session key generation information of the communication device, transmits a cipher text encrypted with the session key via the signature encryption unit to the server device, and decrypts n−1 cipher texts acquired via the signature decryption unit with the session key.

## Claims

### Claim 1

A communication device that performs communication with other communication devices while keeping anonymity via a concealed communication network including a server device, the communication device comprising:
processing circuitry configured to implement
a secret key generation unit that generates a secret key using m partial secret keys included in K partial secret keys generated by K key generation devices, respectively;
a signature encryption unit in which given that N communication devices including the communication device itself utilize concealed communication provided by the concealed communication network and that n communication devices out of the N communication devices belong to a group, (1-1) if the communication device itself belongs to the group, the signature encryption unit encrypts input information with the secret key and transmits the information to the server device, and (1-2) if the communication device itself does not belong to the group, the signature encryption unit transmits a dummy message to the server device;
a signature decryption unit in which (2-1) if the communication device itself belongs to the group, the signature decryption unit downloads, from the server device, encrypted n−1 pieces of the input information and N−n number of the dummy messages transmitted from the other communication devices and decrypts the encrypted n−1 pieces of the input information with the secret key, and (2-2) if the communication device itself does not belong to the group, the signature decryption unit downloads encrypted n pieces of the input information and N−n−1 number of the dummy messages transmitted from the other communication devices;
a session key generation unit that transmits session key generation information to the server device via the signature encryption unit, the session key generation information being information for use in generation of a session key, and generates the session key using n−1 pieces of session key generation information acquired via the signature decryption unit and session key generation information of the communication device itself; and
a message sending and receiving unit that transmits a cipher text encrypted with the session key via the signature encryption unit to the server device and decrypts n−1 cipher texts acquired via the signature decryption unit with the session key.

### Claim 2

A server device as a component of a concealed communication network that provides concealed communication to N communication devices, wherein n communication devices out of the N communication devices belong to a group, and each of the communication devices includes processing circuitry configured to implement a secret key generation unit that generates a secret key using m partial secret keys included in K partial secret keys generated by K key generation devices, respectively, a signature encryption unit in which (1-1) if the communication device itself belongs to the group, the signature encryption unit encrypts input information with the secret key and transmits the information to the server device, and (1-2) if the communication device itself does not belong to the group, the signature encryption unit transmits a dummy message to the server device, a signature decryption unit in which (2-1) if the communication device itself belongs to the group, the signature decryption unit downloads, from the server device, encrypted n−1 pieces of the input information and N−n number of the dummy messages transmitted from the other communication devices and decrypts the encrypted n−1 pieces of the input information with the secret key, and (2-2) if the communication device itself does not belong to the group, the signature decryption unit downloads encrypted n pieces of the input information and N−n−1 number of the dummy messages transmitted from the other communication devices, a session key generation unit that transmits session key generation information to the server device via the signature encryption unit, the session key generation information being information for use in generation of a session key, and generates the session key using n−1 pieces of session key generation information acquired via the signature decryption unit and session key generation information of the communication device itself, and a message sending and receiving unit that transmits a cipher text encrypted with the session key via the signature encryption unit to the server device and decrypts n−1 cipher texts acquired via the signature decryption unit with the session key, the server device comprising:
processing circuitry configured to implement
a session key generation information saving unit that receives encrypted n pieces of the session key generation information and N−n number of the dummy messages and stores them in a downloadable manner; and
a message saving unit that receives encrypted n number of the cipher texts and N−n number of the dummy messages and stores them in a downloadable manner.

### Claim 3

A concealed communication system comprising:
a server device;
K key generation devices; and
N communication devices, wherein
n communication devices out of the N communication devices belong to a group,
each of the communication devices includes processing circuitry configured to implement
a secret key generation unit that generates a secret key using m partial secret keys included in K partial secret keys generated by the K key generation devices, respectively,
a signature encryption unit in which (1-1) if the communication device itself belongs to the group, the signature encryption unit encrypts input information with the secret key and transmits the information to the server device, and (1-2) if the communication device itself does not belong to the group, the signature encryption unit transmits a dummy message to the server device,
a signature decryption unit in which (2-1) if the communication device itself belongs to the group, the signature decryption unit downloads, from the server device, encrypted n−1 pieces of the input information and N−n number of the dummy messages transmitted from the other communication devices and decrypts the encrypted n−1 pieces of the input information with the secret key, and (2-2) if the communication device itself does not belong to the group, the signature decryption unit downloads encrypted n pieces of the input information and N−n−1 number of the dummy messages transmitted from the other communication devices,
a session key generation unit that transmits session key generation information to the server device via the signature encryption unit, the session key generation information being information for use in generation of a session key, and generates the session key using n−1 pieces of session key generation information acquired via the signature decryption unit and session key generation information of the communication device itself, and
a message sending and receiving unit that transmits a cipher text encrypted with the session key via the signature encryption unit to the server device and decrypts n−1 cipher texts acquired via the signature decryption unit with the session key, and the server device includes processing circuitry configured to implement
a session key generation information saving unit that receives encrypted n pieces of the session key generation information and N−n number of the dummy messages and stores them in a downloadable manner, and
a message saving unit that receives encrypted n number of the cipher texts and N−n number of the dummy messages and stores them in a downloadable manner.

### Claim 4 (depends on 3)

The concealed communication system according to claim 3, wherein
the processing circuitry of each of the communication devices further implements the session key generation unit to include
a session key generation first processing unit in which (i-1) if the communication device itself belongs to the group, the session key generation first processing unit generates an ephemeral secret key, generates first information Xp and second information k′p using the ephemeral secret key, and transmits the first information Xp to the server device via the signature encryption unit, and (i-2) if the communication device itself does not belong to the group, the session key generation first processing unit transmits a dummy message to the server device,
a session key generation second processing unit in which (ii-1) if the communication device itself is a communication device other than a representative communication device belonging to the group, the session key generation second processing unit acquires n−1 pieces of first information Xq via the signature decryption unit, generates third information Tp from at least two pieces of the first information out of the n−1 pieces of the first information Xq, and transmits the second information k′p and the third information Tp to the server device via the signature encryption unit, and (ii-2) if the communication device itself is a representative communication device belonging to the group, the session key generation second processing unit acquires n−1 pieces of the first information Xq via the signature decryption unit, generates third information Tp from at least two pieces of the first information out of the n−1 pieces of the first information Xq, generates fourth information T′ from at least one piece of the first information out of the n−1 pieces of the first information Xq and from the second information k′p of the representative communication device, and transmits the third information Tp and the fourth information T′ to the server device via the signature encryption unit, and (ii-3) if the communication device itself does not belong to the group, the session key generation second processing unit acquires n pieces of the first information via the signature encryption unit and transmits a dummy message to the server device, and
a session key generation post-processing unit in which (iii-1) if the communication device itself is a communication device other than a representative communication device belonging to the group, the session key generation post-processing unit acquires n−1 pieces of third information Tq, n−2 pieces of second information k′q, and the fourth information T′ via the signature decryption unit, obtains the second information k′q of the representative communication device from at least one piece of the first information out of n−1 pieces of the first information Xq and from the fourth information T′, and generates a session key from n pieces of the second information k′p, and (iii-2) if the communication device itself is a representative communication device belonging to the group, the session key generation post-processing unit acquires n−1 pieces of the third information Tq and n−1 pieces of the second information k′q via the signature decryption unit and generates a session key from the n pieces of the second information k′p, and
the session key generation information includes the first information, the second information, the third information, and the fourth information.

### Claim 5

A concealed communication method using a communication device that performs communication with other communication devices via a concealed communication network including a server device, comprising:
a secret key generation step of generating a secret key using m partial secret keys included in K partial secret keys generated by K key generation devices, respectively;
a signature encryption step in which given that N communication devices including the communication device itself utilize concealed communication provided by the concealed communication network and that n communication devices out of the N communication devices belong to a group, (1-1) if the communication device itself belongs to the group, the signature encryption step includes encrypting input information with the secret key and transmitting the information to the server device, and (1-2) if the communication device itself does not belong to the group, the signature encryption step includes transmitting a dummy message to the server device;
a signature decryption step in which (2-1) if the communication device itself belongs to the group, the signature decryption step includes downloading, from the server device, encrypted n−1 pieces of the input information and N−n number of the dummy messages transmitted from the other communication devices and decrypting the encrypted n−1 pieces of the input information with the secret key, and (2-2) if the communication device itself does not belong to the group, the signature decryption step includes downloading encrypted n pieces of the input information and N−n−1 number of the dummy messages transmitted from the other communication devices;
a session key generation step of transmitting session key generation information to the server device via the signature encryption step, the session key generation information being information for use in generation of a session key, and generating the session key using n−1 pieces of session key generation information acquired via the signature decryption step and session key generation information of the communication device itself; and
a message sending and receiving step of transmitting a cipher text encrypted with the session key via the signature encryption step to the server device and decrypting n−1 cipher texts acquired via the signature decryption step with the session key.

### Claim 6

A concealed communication method using a server device as a component of a concealed communication network that provides concealed communication to N communication devices, wherein n communication devices out of the N communication devices belong to a group, each of the communication devices includes a secret key generation unit that generates a secret key using m partial secret keys included in K partial secret keys generated by K key generation devices, respectively, a signature encryption unit in which (1-1) if the communication device itself belongs to the group, the signature encryption unit encrypts input information with the secret key and transmits the information to the server device, and (1-2) if the communication device itself does not belong to the group, the signature encryption unit transmits a dummy message to the server device, a signature decryption unit in which (2-1) if the communication device itself belongs to the group, the signature decryption unit downloads, from the server device, encrypted n−1 pieces of the input information and N−n number of the dummy messages transmitted from the other communication devices and decrypts the encrypted n−1 pieces of the input information with the secret key, and (2-2) if the communication device itself does not belong to the group, the signature decryption unit downloads encrypted n pieces of the input information and N−n−1 number of the dummy messages transmitted from the other communication devices, a session key generation unit that transmits session key generation information to the server device via the signature encryption unit, the session key generation information being information for use in generation of a session key, and generates the session key using n−1 pieces of session key generation information acquired via the signature decryption unit and session key generation information of the communication device itself, and a message sending and receiving unit that transmits a cipher text encrypted with the session key via the signature encryption unit to the server device and decrypts n−1 cipher texts acquired via the signature decryption unit with the session key, and concealed communication method comprising:
a session key generation information saving step of receiving encrypted n pieces of the session key generation information and N−n number of the dummy messages and storing them in a downloadable manner, and
a message saving step of receiving encrypted n number of the cipher texts and N−n number of the dummy messages and storing them in a downloadable manner.

### Claim 7

A concealed communication method using a server device, K key generation devices, and N communication devices, wherein n communication devices out of the N communication devices belong to a group, the concealed communication method comprising:
a secret key generation step in which each of the communication devices generates a secret key using m partial secret keys included in K partial secret keys generated by the K key generation devices, respectively;
a signature encryption step in which (1-1) if the communication device itself belongs to the group, the communication device encrypts input information with the secret key and transmits the information to the server device, and (1-2) if the communication device itself does not belong to the group, the communication device transmits a dummy message to the server device;
a signature decryption step in which (2-1) if the communication device itself belongs to the group, the communication device downloads, from the server device, encrypted n−1 pieces of the input information and N−n number of the dummy messages transmitted from the other communication devices and decrypts the encrypted n−1 pieces of the input information with the secret key, and (2-2) if the communication device itself does not belong to the group, the communication device downloads encrypted n pieces of the input information and N−n−1 number of the dummy messages transmitted from the other communication devices;
a step in which the communication device transmits session key generation information to the server device via the signature encryption step, the session key generation information being information for use in generation of a session key;
a session key generation information saving step in which the server device receives encrypted n pieces of the session key generation information and N−n number of the dummy messages and stores them in a downloadable manner;
a session key generation step in which the communication device generates the session key using n−1 pieces of session key generation information acquired via the signature decryption step and session key generation information of the communication device itself;
a step in which the communication device transmits a cipher text encrypted with the session key via the signature encryption step to the server device;
a message saving step in which the server device receives encrypted n number of the cipher texts and N−n number of the dummy messages and stores them in a downloadable manner; and
a message sending and receiving step in which the communication device decrypts n−1 cipher texts acquired via the signature decryption step with the session key.

### Claim 8 (depends on 1)

A non-transitory computer-readable medium that stores a program for causing a computer to function as the communication device according to claim 1.

### Claim 9 (depends on 2)

A non-transitory computer-readable medium that stores a program for causing a computer to function as the server device according to claim 2.