Key management apparatus, key management method, and data storing system
AssigneeNEC Corporation
InventorTakao OCHI
Life of this patent
Estimating the term…
Abstract
A key management apparatus includes a determination unit that determines a predetermined number of participants among a plurality of participants for storing divided data obtained by division from predetermined data by secret distribution processing, as participants for encrypting and storing the divided data by using a quantum encryption key, and a key transmission unit that transmits an encryption key used to encrypt the divided data to each of the predetermined number of participants by quantum key distribution. The determination unit determines the predetermined number of participants based on a number of hops of a key relay from the key management apparatus to each participant in the quantum key distribution.
Claims10
A key management apparatus comprising:
- at least one memory storing instructions;
- and
- at least one processor configured to execute the instructions to:
- determine a predetermined number of participants among a plurality of participants for storing divided data obtained by division from predetermined data by secret distribution processing, as participants for encrypting and storing the divided data by using a quantum encryption key;
- transmit an encryption key used to encrypt the divided data to each of the predetermined number of participants by quantum key distribution;
- and
- determine the predetermined number of participants based on a number of hops of a key relay from the key management apparatus to each participant in the quantum key distribution,
- wherein, in a case where the predetermined number is set as p, a number of divisions of the predetermined data is set as N, and a minimum number of pieces of the divided data in a case where the predetermined data is restored from the pieces of the divided data is set as m, the predetermined number p satisfies N-m+1 ≤ p < N.
A data storing system comprising:
- a transaction apparatus configured to divide predetermined data into a plurality of pieces of divided data by secret distribution processing, and transmit the plurality of pieces of divided data to a plurality of participant apparatuses;
- a plurality of participant apparatuses each configured to receive the divided data, encrypt the received divided data by using a quantum encryption key, and store the encrypted divided data;
- and
- a key management apparatus,
- the key management apparatus comprising
- at least one memory storing instructions;
- and
- at least one processor configured to execute the instructions to:
- determine a predetermined number of participant apparatuses among the plurality of participant apparatuses as a participant apparatus that encrypts and stores the divided data;
- transmit an encryption key used to encrypt the divided data to each of the predetermined number of participant apparatuses by quantum key distribution;
- and
- determine the predetermined number of participants based on a number of hops of a key relay from the key management apparatus to each participant in the quantum key distribution,
- wherein, in a case where the predetermined number is set as p, a number of divisions of the predetermined data is set as N, and a minimum number of pieces of the divided data in a case where the predetermined data is restored from the pieces of the divided data is set as m, the predetermined number p satisfies N-m+1 ≤ p < N.
A key management method comprising:
- determining a predetermined number of participants among a plurality of participants for storing divided data obtained by division from predetermined data by secret distribution processing, as participants for encrypting and storing the divided data by using a quantum encryption key;
- and
- transmitting an encryption key used to encrypt the divided data to each of the predetermined number of participants by quantum key distribution, wherein
- the determining of the predetermined number of participants includes determining the predetermined number of participants based on a number of hops of a key relay from a key management apparatus to each participant in the quantum key distribution, and
- in a case where the predetermined number is set as p, a number of divisions of the predetermined data is set as N, and a minimum number of pieces of the divided data in a case where the predetermined data is restored from the pieces of the divided data is set as m, the predetermined number p satisfies N-m+1 ≤ p < N.
Dependencies are inferred from the claim text.