text:
Patent US7826619 - Key-updating method, encryption processing method, key-insulated ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inPatentsIn a key-insulated cryptosystem according to the present invention, a plurality of external devices are associated with a number of updates of a terminal secret key which has already been updated, and a different piece of secret information is stored in each of the external devices. In addition, a key-updating...http://www.google.com/patents/US7826619?utm_source=gb-gplus-sharePatent US7826619 - Key-updating method, encryption processing method, key-insulated cryptosystem and terminal deviceAdvanced Patent SearchTry the new Google Patents, with machine-classified Google Scholar results, and Japanese and South Korean patents.Publication numberUS7826619 B2Publication typeGrantApplication numberUS 11/507,599Publication dateNov 2, 2010Filing dateAug 22, 2006Priority dateAug 23, 2005Fee statusPaidAlso published asEP1760930A2, EP1760930A3, US8270615, US20070230705, US20100241860Publication number11507599, 507599, US 7826619 B2, US 7826619B2, US-B2-7826619, US7826619 B2, US7826619B2InventorsYumiko HanaokaOriginal AssigneeNtt Docomo, Inc.Export CitationBiBTeX, EndNote, RefManPatent Citations (12), Non-Patent Citations (4), Referenced by (7), Classifications (14), Legal Events (2) External Links: USPTO, USPTO Assignment, EspacenetKey-updating method, encryption processing method, key-insulated cryptosystem and terminal device
US 7826619 B2Abstract
In a key-insulated cryptosystem according to the present invention, a plurality of external devices are associated with a number of updates of a terminal secret key which has already been updated, and a different piece of secret information is stored in each of the external devices. In addition, a key-updating method in the key-insulated cryptosystem according to the present invention includes steps of: selecting one of the external devices depending on the number of updates of the terminal secret key; and causing the selected external device to generate key-updating information used for updating the terminal secret key based on the number of updates and the stored secret information.
1. A key-updating method in a key-insulated cryptosystem that includes terminal devices each for carrying out encryption processing, and external devices each for updating a terminal secret key stored in each of the terminal devices and for storing secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key, wherein the plurality of external devices are associated with a number of times the terminal secret key has been updated, and a different piece of secret information is stored in each of the external devices, the key-updating method comprising:
selecting one external device of the external devices based on the number of times the terminal secret key has been updated;
causing the selected one external device to generate key-updating information used for updating the terminal secret key, based on the number of times the terminal secret key has been updated and the stored secret information; and
causing each terminal device to obtain, from the external devices, external device identification information for uniquely identifying the external devices,
wherein, in the step of selecting the one external device, each terminal device determines whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information and the number of times the terminal secret key has been updated.
2. A key-insulated cryptosystem, comprising:
terminal devices each for carrying out encryption processing; and
external devices each for updating a terminal secret key stored in each of the terminal devices and for storing secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key, wherein
the plurality of external devices are associated with a number of times the terminal secret key has been updated,
a different piece of secret information is stored in each of the external devices,
wherein each terminal device includes
an external device identification information obtaining unit configured to obtain external device identification information for uniquely identifying the external devices, from the external devices; and
an external device determination unit configured to select one external device of the external devices by determining whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information and the number of times the terminal secret key has been updated, and
the external device comprises a key-updating information generator configured to generate key-updating information used for updating the terminal secret key based on the number of times the terminal secret key has been updated and the stored secret information.
3. A terminal device, which is connected to external devices each storing secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key, and which is used in a key-insulated cryptosystem, wherein the plurality of external devices are associated with a number of times a terminal secret key has been updated, and a different piece of secret information is stored in each of the external devices, the terminal device comprising:
an external device determination unit configured to select one external device of the external devices by determining whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information and the number of times the terminal secret key has been updated. Description
This application is based upon and claims the benefit of priority from the prior Japanese Patent Applications No. P2005-241094, filed on Aug. 23, 2005 and No. P2006-114712, filed on Apr. 18, 2006; the entire contents of which are incorporated herein by reference.
The present invention relates to a key-updating method in a key-insulated cryptosystem, encryption processing method, a key-insulated cryptosystem, and a terminal device used in the key-insulated cryptosystem.
Along with progress of so-called information technology (IT), a cryptosystem for carrying out encryption processing of information to be transmitted and received has been widely used in these days.
In such a cryptosystem, there is a problem that security of information to be encrypted cannot be secured when a cryptographic algorithm used for the encryption processing is once analyzed.
However, in reality, rather than the case where the cryptographic algorithm is analyzed, there is a problem that a key used for encryption processing is exposed outside due to carelessness of a user who uses the cryptosystem.
Therefore, to cope with such key exposure, so-called “key-insulated cryptosystem” has been known (see, for example, Y. Dodis, J. Katz, S. Xu and M. Yung, “Key-Insulated Public-Key Cryptosystems”, Proc. of Eurocrypt 2002, Lecture Notes in Computer Science Vol. 2332, 2002, Springer-Verlag, P. 65-82 (hereinafter referred to as “Reference Document 1”), and M. Bellare and A. Palacio, “Protecting against Key Exposure: Strongly Key-Insulated Encryption with Optimal Threshold”, Cryptology ePrint Archive 064, the Internet URL:http://eprint.iacr.org/2002 (hereinafter referred to as “Reference Document 2”). In the key-insulated cryptosystem, it is possible to decrypt information which is encrypted by other users in the key-insulated cryptosystem for a predetermined time period, by using a user decryption key stored in a terminal device connected to a communications network.
In addition, in the key-insulated cryptosystem, “key-updating information” is generated by using “secret information” stored in an external device (for example, an IC card) connected to a terminal device. A user of the terminal device can update the user decryption key used in the terminal device by using the key-updating information.
That is, one of great features in the key-insulated cryptosystem is as follows. Even in a case where some of the user decryption keys, which are applied for a certain time period, are exposed outside, as long as the total number of the exposed decryption keys does not exceed a certain number, the decryption keys, which are applied for a time period other than the time period during which the exposed key is applied, are still unknown to persons and systems other than the user. That is, security in the time period other than the time period, during which the exposed decryption key is applied, is not affected at all.
Here, a specific configurational example of a key-insulated cryptosystem will be briefly described. For example, an update interval of a user decryption key is assumed to be one day, and the key is assumed to be updated for (N−1) times, that is, for N days.
A user (a terminal device) in the key-insulated cryptosystem uses general public-key encryption (for example, RSA encryption and ElGamal encryption) to generate N pairs of a public key and a decryption key ((Pki, Ski)1≦i≦N) and to publish pk=(pki)0≦i≦N as a public key.
In addition, the user (the terminal device) stores dk0=sk0 as an initial decryption key. Furthermore, the decryption key sk=(ski)0≦i≦N is set as a master key hk* (secret information), and the master key hk* is enclosed in an external device (for example, a tamper-proof region in an IC card or the like).
For example, at the j-th time key update, the external device generates key-updating information dj=skj based on the master key hk* and the fact that it is the j-th time key update. The generated key-updating information dj is transmitted to the terminal device connected with a secured communications path.
The user (the terminal device) generates a new decryption key dkj=dj by using the key-updating information dj and erases the previous decryption keys dkj-1 and dj.
However, the above-described conventional key-insulated cryptosystem has the following problems. Specifically, there is a problem that a user cannot flexibly update a decryption key, since an external device used by the user in the key-insulated cryptosystem is basically only one.
For example, in a case where the external device is kept at a user's home, the user cannot update a decryption key while the user is not home.
A case where the user carries an external device can be considered, but this raises another problem that the key-insulated cryptosystem is compromised when a decryption key is lost or stolen. In addition, a case where a plurality of external devices are prepared can be considered, and an identical master key hk* (secret information) is enclosed in each of the external devices. However, even in this case, since the key-insulated cryptosystem is compromised when any of the external devices is lost or stolen, security of encrypted information is deteriorated as compared with a case where the only one external device is prepared.
The present invention has been made in view of the forgoing situations. Accordingly, it is an object of the present invention to provide a key-updating method, an encryption processing method, a key-insulated cryptosystem, and a terminal device, which can more flexibly carry out a key update without deteriorating security of encrypted information.
To solve the above-described problems, the present invention has the following aspects. First of all, a first aspect of the present invention has a feature as follows. In a key-updating method in a key-insulated cryptosystem, the key-insulated cryptosystem is provided with: a terminal device (a terminal device 20) for carrying out encryption processing; and an external device which is used for updating a terminal secret key (for example, a decryption key dkj) stored in the terminal device and which stores secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key. In the key-updating method, the plurality of external devices (external devices 40A and 40B) are associated with the number of updates of the terminal secret key which has already been updated (for example, whether the number of updates is odd-numbered or even-numbered), and a different piece of secret information (a master key hk*odd or a master key hk*even) is stored in each of the external devices. The key-updating method includes: a step of selecting the external device depending on the number of updates; and a step of causing the selected external device to generate key-updating information being used for updating the terminal secret key based on the number of updates and the stored secret information.
In this aspect, a plurality of different external devices are associated with the number of updates of the terminal secret key which has already been updated, and a different piece of secret information is stored in each of the external devices. That is, a user of the terminal device can selectively use the external devices which are installed at a plurality of different places by connecting the external devices associated with the number of updates of the terminal secret key. In addition, since a different piece of secret information is stored in each of the external devices, a certain number of decryption keys cannot be obtained even in a case where any of the external devices is lost or stolen. Thus, security of the key-insulated cryptosystem can be maintained.
That is, in this aspect, key updates can be more flexibly carried out without deteriorating the security of the encrypted information.
A second aspect of the present invention, which is related to the first aspect of the present invention, has a feature as follows. The terminal device further includes a step of obtaining external device identification information from the external device for uniquely identifying the external device. In the step of selecting the external device, it is determined whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information and the number of updates.
A third aspect of the present invention has a feature as follows. A key-insulated cryptosystem is provided with: a terminal device (a terminal device 20) for carrying out encryption processing; and an external device which is used for updating a terminal secret key (for example, a decryption key dkj) stored in the terminal device and which stores secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key. In the key-insulated cryptosystem, the plurality of external devices (the external devices 40A and 40B) are associated with the number of updates of the terminal secret key which has already been updated (for example, whether the number of updates is odd-numbered or even-numbered), and a different piece of secret information (a master key hk*odd or a master key hk*even) is stored in each of the external devices. The terminal device is provided with: an external device identification information obtaining unit (an update unit 205) configured to obtain external device identification information from the external device for uniquely identifying the external device; and an external device determination unit (the update unit 205) configured to determine whether or not an external device (for example, the external device 40A) connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information obtained by the external device identification information obtaining unit and the number of updates. The external device is provided with a key-updating information generating unit (a key-updating information generating unit 403) configured to generate key-updating information (for example, dj) used for updating the terminal secret key based on the number of updates and the stored secret key information.
A fourth aspect of the present invention has a feature as follows. A terminal device is connected to an external device storing secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key, and the terminal device is used in a key-insulated cryptosystem. The plurality of external devices are associated with the number of updates of the terminal secret key which has already been updated. A different piece of secret information is stored in each of the external devices. The terminal device includes: an external device identification information obtaining unit configured to obtain external device identification information from the external device for uniquely identifying the external device; and an external device determination unit configured to determine whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information obtained by the external device identification information obtaining unit and the number of updates of the terminal secret key which has already been updated.
In addition, the present invention includes the following aspect. A fifth aspect of the present invention has a feature as follows. In an encryption processing method in a key-insulated cryptosystem, the key-insulated cryptosystem is provided with: a terminal device (for example, a terminal device 10A) for carrying out encryption processing; and external devices (external devices 40A and 40B) each used for updating a terminal secret key (for example, a decryption key dkj) stored in the terminal device and which store secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key. The key-insulated cryptosystem includes at least a first external device (the external device 40A) and a second external device (the external device 40B). The first and second external devices are associated with the number of updates of the terminal secret key which has already been updated (for example, whether the number of updates is odd-numbered or even-numbered). The first and second external devices respectively store different pieces of secret information (a master key hk*odd or master key hk*even). The encryption processing method includes: a step of selecting any of the first and second external devices depending on the number of updates; a step of causing the selected first or second external device to generate key-updating information (for example, dj) used for updating the terminal secret key based on the number of updates and the stored secret information; a step of updating the terminal secret key to a post-first-update terminal secret key (a decryption key dkj-1) by using the key-updating information generated by the first external device; a step of updating the terminal secret key to a post-second-update terminal secret key (a decryption key dkj) by using the key-updating information generated by the second external device at the timing of an update immediately once the post-first-update terminal secret key is generated; a step of causing the terminal device to encrypt information (a plaintext m) by using a first public key (a public key pkj-1) corresponding to the post-first-update terminal secret key and a second public key (a public key pkj) corresponding to the post-second-update terminal secret key; and a step for causing another terminal device (for example, the terminal device 20) different from the terminal device to decrypt the information by using the post-first-update terminal secret key and the post-second-update terminal secret key.
In this aspect, information is encrypted by using both public keys which are a public key (the second public key) corresponding to the number of updates of a terminal secret key and a public key (the first public key) corresponding to a period immediately before the public key. In addition, the encrypted information cannot be decrypted unless using both decryption keys which are the post-second-update terminal secret key and the post-first-update terminal secret key that is immediately before the post-second-update terminal secret key.
Therefore, even in a case where any of the first and second external devices is lost or stolen, an attacker who obtains the external device cannot decrypt the encrypted information at all even by using the external device, thus security of the key-insulated cryptosystem can be further improved.
A sixth aspect of the present invention, which is related to the fifth aspect of the present invention, has a feature as follows. The terminal device further includes a step of obtaining external device identification information for uniquely identifying the first external device and external device identification information for uniquely identifying the second external device, respectively from the first and second external devices. In the step of selecting any one of the first or second external device, it is determined whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information and the number of updates.
A seventh aspect of the present invention, which is related to the fifth aspect of the present invention, has a feature as follows. The first external device is associated with a first cycle for generating key-updating information, the second external device is associated with a second cycle for generating key-updating information, the second cycle being shorter than the first cycle. In the step of selecting any one of the first and second external devices, any one of the first and second external devices is selected depending on an update period of the terminal secret key. In the step of generating the key-updating information, any one of the first and second external devices generates the key-updating information, based on the update period and the stored secret information. In the step of updating the terminal secret key to a post-second-update terminal secret key, the terminal device updates the terminal secret key to a post-second-update terminal secret key by using the key-updating information generated by the second external device.
An eighth aspect of the present invention, which is related to the fifth aspect of the present invention, has a feature as follows. In the encrypting step, the terminal device encrypts the information by using a public key corresponding to the terminal secret key and by using update period information indicating the update period.
A ninth aspect of the present invention, which is related to the fifth aspect of the present invention, has a feature as follows. G1 and G2 are set as a group where an order is q, g is set as a generator of the G1, e:G1×G2→G2 is set as a bilinear mapping satisfying e(ga, gb)=e(g, g)ab. The key-updating information is generated by using a hash function determined based on the bilinear mapping.
A tenth aspect of the present invention has a feature as follows. A key-insulated cryptosystem is provided with: terminal devices (for example, terminal devices 10A and 20) each for carrying out encryption processing; and external devices (for example, external devices 40A and 40B) which are used for updating a terminal secret key (for example, a decryption key dkj) stored in the terminal device and which store secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key. The key-insulated cryptosystem includes at least a first external device (the external device 40A) and a second external device (the external device 40B). The first and second external devices are associated with the number of updates of the terminal secret key which has already been updated (for example, whether the number of updates is odd-numbered or even-numbered). A different piece of secret information (a master key hk*odd or a master key hk*even) is stored in each of the first and second external devices. The first and second external devices are provided with a key-updating information generating (a key-updating information generating unit 403) configured to generate key-updating information (for example, dj) used for updating the terminal secret key based on the number of updates and the stored secret information. The terminal devices are provided with: an external device identification information obtaining unit (an update unit 205) configured to obtain external device identification information for uniquely identifying the first external device and external device identification information for uniquely identifying the second device, respectively from the first and second external devices; an external device determination unit (an update unit 205) configured to determine whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information obtained by the external device identification information obtaining unit and the number of updates; and an encryptor (an encryptor 105) configured to encrypt information (a plaintext m) by using the first public key (the public key pkj-1) and the second public key (the public key pkj), the first public key corresponding to the post-first-update terminal secret key (the decryption key dkj-1) which is the terminal secret key updated by using the key-updating information generated by the first external device, and the second public key corresponding to the post-second-update terminal secret key (the decryption key dkj) which is the terminal secret key updated by using the key-updating information generated by the second external device at the timing of an update immediately once the post-first-update terminal secret key is generated.
An eleventh aspect of the present invention, which is related to the tenth aspect of the present invention, has a feature as follows. The terminal devices further include a decryptor (a decryptor 209) configured to decrypt the information by using the post-first-update terminal secret key and the post-second-update terminal secret key.
A twelfth aspect of the present invention, which is related to the tenth aspect of the present invention, has a feature as follows. The first external device is associated with a first cycle for generating key-updating information, the second external device is associated with a second cycle for generating key-updating information, and the second cycle being shorter than the first cycle. The external device determination unit selects any one of the first and second external devices depending on an update period of the terminal secret key. The key-updating information generator causes any one of the first and second external devices to generate the key-updating information, based on the update period and the stored secret information. The encryptor encrypts the information by using a public key corresponding to the terminal secret key and by using update period information indicating the update period.
A thirteenth aspect of the present invention has a feature as follows. Terminal devices (for example, terminal devices 10A and 20) are connected to external devices (for example, external devices 40A and 40B) storing secret information that is a secret key selected from a predetermined number of pairs of a public key and a secret key, and the terminal devices are used in a key-insulated cryptosystem. The external devices include at least a first external device (the external device 40A) and a second external device (the external device 40B). The first and second external devices are associated with the number of updates of the terminal secret key which has already been updated (for example, whether the number of updates is odd-numbered or even-numbered). A different piece of secret information (a master key hk*odd or a master key hk*even) is stored in each of the first and second external devices. The terminal device includes: an external device identification information obtaining unit (an update unit 205) configured to obtain external device identification information for uniquely identifying the first external device and external device identification information for uniquely identifying the second external device, respectively from the first and second external devices; an external device determination unit (the update unit 205) configured to determine whether or not an external device connected to the terminal device is an external device to which a request for an update of the terminal secret key should be made, based on the external device identification information obtained by the external device identification information obtaining unit and the number of updates of the terminal secret key which has already been updated; and an encryptor (an encryptor 105) configured to encrypt information (a plaintext m) by using a first public key (a public key pkj-1) and a second public key (a public key pkj), the first public key corresponding to a post-first-update terminal secret key (a decryption key dkj-1) which is the terminal secret key updated by using the key-updating information generated by the first external device, and a second public key corresponding to a post-second-update terminal secret key (a decryption key dkj) which is the terminal secret key updated by using the key-updating information generated by the second external device at the timing of an update immediately once the post-first-update terminal secret key is generated.
A fourteenth aspect of the present invention, which is related to the ninth aspect of the present invention, has a feature as follows. A decryptor (a decryptor 209) configured to decrypt the information by using the post-first-update terminal secret key and the post-second-update terminal secret key is further included.
A fifteenth aspect of the present invention, which is related to the ninth aspect of the present invention, has a feature as follows. The first external device is associated with a first cycle for generating key-updating information, the second external device is associated with a second cycle for generating key-updating information, and the second cycle being shorter than the first cycle. The external device determination unit selects any one of the first and second external devices depending on an update period of the terminal secret key. The encryptor encrypts the information by using a public key corresponding to the terminal secret key and by using update period information indicating the update period.
A sixteenth aspect of the present invention, which is related to the ninth aspect of the present invention, has a feature as follows. G1 and G2 are set as a group where an order is q, g is set as a generator of the G1, e:G1×G2→G2 is set as a bilinear mapping satisfying e(ga, gb)=e(g, g)ab. The key-updating information is generated by using a hash function determined based on the bilinear mapping.
According to the aspects of the present invention, it is possible to provide a key-updating method, an encryption processing method, a key-insulated cryptosystem, and a terminal device, which can more flexibly carry out a key update without deteriorating security of encrypted information.
FIG. 1 is a general schematic configurational diagram of a key-insulated cryptosystem according to a first embodiment of the present invention.
FIG. 2 is a logical block configurational diagram of a terminal device to transmit a ciphertext according to the first embodiment of the present invention.
FIG. 3 is a logical block configurational diagram of a terminal device to receive a ciphertext according to the first embodiment of the present invention.
FIG. 4 is a logical block configurational diagram of a public information server according to the first embodiment of the present invention.
FIG. 5 is a logical block configurational diagram of an external device according to the first embodiment of the present invention.
FIG. 6 is an operational flowchart of the key-insulated cryptosystem according to the first embodiment of the present invention.
FIG. 7 is an operational flowchart of the key-insulated cryptosystem according to the first embodiment of the present invention.
FIG. 8 is an operational flowchart of the key-insulated cryptosystem according to the first embodiment of the present invention.
FIG. 9 is an operational flowchart of a key-insulated cryptosystem according to a second embodiment of the present invention.
FIG. 10 is an operational flowchart of the key-insulated cryptosystem according to the third embodiment of the present invention.
FIG. 11 is an operational flowchart of the key-insulated cryptosystem according to the third embodiment of the present invention.
FIG. 12 is an operational flowchart of the key-insulated cryptosystem according to the third embodiment of the present invention.
Next, the first embodiment of the present invention will be described. It should be noted that, in the description of the following drawings, identical or similar portions are denoted by identical or similar reference numerals. However, it should be noted that the drawings are schematic and that proportions of respective sizes and the like are different from the actual ones.
Therefore, specific sizes and the like should be judged by referring to the following description. In addition, portions different in relation and proportion of respective sizes among the drawings are of course included.
(General Schematic Configuration of Key-Insulated Cryptosystem)
FIG. 1 is a general schematic configurational diagram of a key-insulated cryptosystem according to the present embodiment. As shown in FIG. 1, the key-insulated cryptosystem according to the present embodiment is configured with terminal devices 10A and 10B, a terminal device 20, a public information server 30, and external devices 40A and 40B.
The terminal devices 10A and 10B, the terminal device 20, and the public information server 30 are connected to a communications network 1.
In the key-insulated cryptosystem according to the present embodiment, by use of a user decryption key dk (a terminal secret key) which is stored in the terminal device 20 (the terminal device) connected to the communications network 1, information which is encrypted by a transmission terminal (for example, the terminal device 10A) used by another user in the key-insulated cryptosystem can be decrypted only for a predetermined time period.
It should be noted that, in the key-insulated cryptosystem according to the present embodiment, the encryption processing of information to be transmitted and received is carried out in accordance with the encryption scheme described in the above-described Reference Document 1 or 2.
The terminal devices 10A and 10B encrypt a plaintext m by using a user public key pk of the terminal device 20, and transmit a ciphertext c, which is encrypted from the plaintext m, to the terminal device 20.
The terminal device 20 receives the ciphertext c which is transmitted by the terminal device 10A (or 10B), and decrypts the received ciphertext c to the plaintext m by using the user decryption key dk of the terminal device 20. In the present embodiment, the terminal devices 10A and 10B and the terminal device 20 configure a terminal device for carrying out encryption processing.
What may be needed as the terminal devices 10A and 10B and the terminal device 20 include a personal computer and PDA (personal digital assistant), each of which is provided with a communications interface for accessing the communications network 1.
In addition, as the terminal device like the terminal device 10B, a mobile communications terminal (for example, a cellular telephone terminal) capable of accessing the communications network 1 via a radio base station 1 a may be used.
The public information server 30 publishes the user public key pk of the terminal devices 10A and 10B and the terminal device 20, which configure the key-insulated cryptosystem, via the communications network 1.
Each of the external devices 40A and 40B stores a master key hk* (secret information) used for updating the user decryption key dk of the terminal device 20, the user decryption key dk being stored in the terminal device 20. In the present embodiment, the external device 40A is installed at a user's home RG. In addition, the external device 40B is installed at an office OF.
The master key hk* is a secret key selected from a predetermined number of pairs of a public key and a secret key by using general public key encryption (for example, RSA encryption and ElGamal encryption). The master key hk* is used for generating key-updating information d for updating the user decryption key dk (the terminal secret key) of the terminal device 20.
In the present embodiment, the external devices 40A and 40B, i.e., a plurality of external devices are associated with the number of updates of the decryption key dk which has already been updated.
In addition, in the external devices 40A and 40B, different master keys hk* (specifically, a master key hk*odd and a master key hk*even) are respectively stored. It should be noted that details of the master keys hk* stored in the external devices 40A and 40B will be described later.
Each of the external devices 40A and 40B can be configured with, for example, an IC card having a tamper-proof region and an IC card reader/writer. In addition, in a case where the terminal device is a mobile communications terminal, a charger of the terminal device may be configured to include functions of the external device 40A (40B).
(Logical Block Configuration of Key-Insulated Cryptosystem)
Next, logical block configurations of the terminal device 10A (10B), the terminal device 20, the public information server 30, and the external device 40A (40B), which configure the key-insulated cryptosystem according to the present embodiment, will be described below.
(1) Terminal Device 10A
FIG. 2 is a logical block diagram of the terminal device 10A. The terminal device 10B also has a configuration similar to that of the terminal device 10A. It should be noted that since portions related to the present invention will be mainly described, there is a case where the terminal device 10A is provided with a logical block necessary for implementing functions of the terminal device 10A (such as a voice communications unit), which is not shown or whose description is omitted (this is also the case of the terminal device 20, the public information sever 30, and the external device 40A, which will be described below).
As shown in FIG. 2, the terminal device 10A is provided with a communications unit 101, an input unit 103, an encryptor 105, and a recorder 107.
The communications unit 101 provides a communications interface for connecting to the communications network 1. In addition, the communications unit 101 relays a ciphertext c and the like which are transmitted by the encryptor 105.
The input unit 103 is an interface (for example, a drive device for a keyboard or a data recording medium) for inputting a plaintext m which is to be encrypted in the encryptor 105.
The encryptor 105 encrypts the plaintext m, which is inputted by the input unit 103, to generate a ciphertext c. Specifically, the encryptor 105 obtains a user public key pk of the terminal device 20, the key being published on the public information server 30, and encrypts the plaintext m by using the obtained user public key pk of the terminal device 20.
The recorder 107 records the user public key pk and the like of the terminal device 20, which are obtained from the public information server 30.
(2) Terminal Device 20 FIG. 3 is a logical block diagram of the terminal device 20. As shown in FIG. 3, the terminal device 20 is provided with a communications unit 201, a generator 203, an update unit 205, a storage unit 207, a decryptor 209, and an output unit 211.
The communications unit 201 provides a communications interface for connecting to the communications network 1. In addition, the communications unit 201 is connected to the generator 203, the update unit 205, the decryptor 209, and the output unit 211, in order to relay key-updating information d, a decryption key dk, and the like, which are transmitted and received among the logical blocks.
The generator 203 generates a predetermined number of pairs of a public key and a secret key by using general public-key encryption (for example, RSA encryption and ElGamal encryption).
The update unit 205 updates a user decryption key dk of the terminal device 20. Specifically, the update unit 205 updates the decryption key dk by using the key-updating information d which is generated by the external device 40A or the external device 40B.
In particular, in the present embodiment, the external device 40A is associated with odd-numbered updates of the decryption key dk. On the other hand, the external device 40B is associated with even-numbered updates of the decryption key dk.
In addition, the update unit 205 can obtain external device identification information from the external devices for uniquely identifying the external devices 40A and 40B. In the present embodiment, the update unit 205 configures an external device identification information obtaining unit.
Furthermore, the update unit 205 can determine whether or not an external device connected to the terminal device 20 is an external device to which a request for an update of the decryption key dk should be made, based on the obtained external device identification information and the number of updates for which the user decryption key dk of the terminal device 20 (the terminal secret key) has already been updated. In the present embodiment, the update unit 205 configures an external device determination unit.
The storage unit 207 stores: a predetermined number of pairs of a public key and a secret key which are generated by the generator 203; the user decryption key dk of the terminal device 20; and the like.
The decryptor 209 decrypts a ciphertext c which is transmitted by the terminal device 10A (10B). Specifically, the decryptor 209 decrypts the ciphertext c by using the user decryption key dk of the terminal device 20, the key being stored in the storage unit 207. The decryptor 209 can store a plain text m which is restored by decrypting the ciphertext c in the storage unit 207, and can output the plaintext m to the output unit 211.
The output unit 211 outputs the plaintext m or the like, which is obtained by decrypting the ciphertext c. For example, the output unit 211 is configured with a liquid crystal display for displaying contents of the plaintext m and the like, and with a drive device for recording data of the plaintext m and the like on a recording medium (for example, a memory card).
It should be noted that, in the present embodiment, the terminal device 10A (10B) and the terminal device 20 have different logical blocks. However, the terminal device 10A (10B) may include the logical block of the terminal device 20 in addition to the logical block of the terminal device 10A. Similarly, the terminal device 20 may include the logical block of the terminal device 10A in addition to the logical block of the terminal device 20.
(3) Public Information Server 30 FIG. 4 is a logical block diagram of the public information server 30. As shown in FIG. 4, the public information server 30 is provided with a communications unit 301, a controller 303, and a public information database 305.
The communications unit 301 provides a communications interface for connecting to the communications network 1. In addition, the communications unit 301 relays a user public key pk of the terminal device 20 or the like, which is transmitted by the controller 303.
The controller 303 stores the user public key pk of the terminal device 20 or the like, which is transmitted by the terminal device 20, in the public information database 305. In addition, the controller 303 transmits the user public key pk of the terminal device 20 or the like, which is stored in the public information database 305, in response to a request from the terminal device 10A or the like.
The public information database 305 stores the user public key pk of the terminal device 20 or the like, and forms a public information database configured with the user public key pk in the key-insulated cryptosystem.
(4) External Device 40A
FIG. 5 is a logical block configurational diagram of the external device 40A. It should be noted that the external device 40B also has a configuration similar to that of the external device 40A. As shown in FIG. 5, the external device 40A is provided with a communications unit 401, a key-updating information generator 403, and a recorder 405.
The communications unit 401 provides a communications interface for connecting to the communications network 1. In addition, the communications unit 401 relays key-updating information d or the like which is transmitted by the key-updating information generator 403.
The key-updating information generator 403 generates key-updating information d used for updating the user decryption key dk of the terminal device 20 by using a master key hk* (specifically, a master key hk*odd), which is recorded in the recorder 405.
In addition, in the present embodiment, as described above, the external device 40A is associated with the odd-numbered updates of the decryption key dk.
That is, the key-updating information generator 403 generates key-updating information d used for updating the decryption key dk based on the number of updates of the decryption key dk and the stored master key hk* (specifically, the master key hk*odd). Specifically, the key-updating information generator 403 generates key-updating information d based on an instruction from the terminal device 20 in a case of the odd-numbered update of the decryption key dk. In the present embodiment, the key-updating information generator 403 configures a key-updating information generator.
In addition, the key-updating information generator 403 can transmit external device identification information for uniquely identifying the external device 40A in response to a request from the terminal device 20 (the update unit 205). It should be noted that, as the external device identification information, for example, device type information and a production serial number of the external device 40A can be used.
The recorder 405 records a master key hk* (specifically, a master key hk*odd). It should be noted that the master key hk* is preferably recorded in a tamper-proof region of the recorder 405.
(Operations of Key-Insulated Cryptosystem)
Next, by referring to FIGS. 6 to 8, operations of the key-insulated cryptosystem according to the present embodiment will be described.
In the key-insulated cryptosystem according to the present embodiment, the once-generated user public key pk of the terminal device 20 is not changed, but only the decryption key dk is updated for every predetermined time period.
In addition, in the present embodiment, the description will be made by assuming that an update interval of the decryption key dk is half a day (a predetermined time period) and that a user of the terminal device 20 uses the key-insulated cryptosystem for N days.
The user of the terminal device 20 alternately uses the external device 40A which is installed at the user's home RG, and the external device 40B which is installed at the office OF, and carries out an update of the decryption key dk every half a day.
(1) Storage of Master Key
FIG. 6 shows an operational flow from the time when the terminal device 20 generates master keys hk* (a master key hk*odd and a master key hk*even) to the time when the generated master keys hk* are stored in the external devices 40A and 40B.
In Step S101, the terminal device 20 generates a predetermined number of pairs of a public key and a secret key by using general public key encryption (for example, RSA encryption and ElGamal encryption).
Specifically, the terminal device 20 generates 2N pairs of a public key and a secret key ((pki, ski)1≦i≦2N) corresponding to utilization for N days.
In Step S102, the terminal device 20 sets the public key (pki)0≦i≦2N as a user public key pk of the terminal device 20 in the key-insulated cryptosystem.
In Step S103, the terminal device 20 transmits the public key pk to the public information server 30.
In Step S104, the public information server 30 stores the public key pk, which is received from the terminal device 20, in the public information database 305.
In Step S105, the terminal device 20 stores dk0=sk0 as an initial decryption key in the storage unit 207.
In Step S106, the terminal device 20 sets a secret key sk=(ski) (i=odd number and 1≦i≦N) as a master key hk*odd of the external device 40A, and transmits the master key hk*odd to the external device 40A.
In Step S107, the external device 40A stores the master key hk*odd in the recorder 405.
In Step S108, the terminal device 20 sets a secret key sk=(ski) (i=even number and 1≦i≦N) as a master key hk*even of the external device 40B, and transmits the master key hk*even to the external device 40B.
In Step S109, the external device 40B stores the master key hk*even in the recorder 405.
(2) Update of Decryption Key dk
FIG. 7 shows an operational flow along which the terminal device 20 updates the decryption key dk. As shown in FIG. 7, in Step S201, the terminal device 20 determines that a predetermined time period (half a day) has passed since the last update of the decryption key dk, and recognizes that the j-th time update of the decryption key dk is needed.
In Step S202, the terminal device 20 determines whether the j-th time update of the decryption key dk is odd-numbered or even-numbered.
In a case where the update of the decryption key dk is odd-numbered (“j=odd number” in Step S202), the terminal device 20 requests the external device 40A to generate key-updating information d needed for updating the decryption key dk (specifically, the decryption key dkj-1) in Step S203.
It should be noted that the user of the terminal device 20 connects the terminal device 20 to the external device 40A prior to the processing in Step S203.
In addition, along with the processing of the terminal device 20 in Step S203, it may be determined whether or not the external device 40A is an external device which should be used for the j-th time (odd-numbered) update of the decryption key dk, by obtaining external device identification information from the external device 40A for uniquely identifying the external device 40A.
In Step S204, the external device 40A generates key-updating information dj=skj by using the master key hk*odd which is stored in the recorder 405, and period information j which is associated with the fact that it is the j-th time update of the decryption key dk. It should be noted that a specific method of generating the key-updating information dj follows the method disclosed in the above-described Reference Document 1 and the like.
In Step S205, the external device 40A transmits the generated key-updating information dj to the terminal device 20.
On the other hand, in a case where the update of the decryption key dk is even-numbered (“j=even number” in Step S202), the terminal device 20 requests the external device 40B to generate key-updating information d needed for updating the decryption key dk (specifically, the decryption key dkj-1) in Step S206.
It should be noted that the user of the terminal device 20 connects the terminal device 20 to the external device 40B prior to the processing in Step S206.
In addition, along with the processing in Step S206, it may be determined whether or not the external device 40B is an external device which should be used for the j-th time (even-numbered) update of the decryption key dk, by obtaining external device identification information from the external device 40B for uniquely identifying the external device 40B.
In Step S207, the external device 40B generates key-updating information dj=skj by using the master key hk*even which is stored in the recorder 405, and period information j which is associated with the fact that it is the j-th time update of the decryption key dk.
In Step S208, the external device 40B transmits the generated key-updating information dj to the terminal device 20.
In Step S209, the terminal device 20 generates a decryption key dkj=dj by using the key-updating information dj and the period information j, which are received from the external device 40A or the external device 40B. A specific method of generating the key-updating information dj follows the method disclosed in the above-described Reference Document 1 and the like.
In Step S210, the terminal device 20 erases the key-updating information dj and the old decryption key dk (specifically, the decryption key dkj-1) from the storage unit 207.
(3) Transmission and Reception of Ciphertext
FIG. 8 shows an operational flow along which the terminal device 10A transmits a ciphertext c to the terminal device 20 and the terminal device 20 decrypts the ciphertext c. As shown in FIG. 8, in Step S301, the terminal device 10A requests the public information server 30 to send the user public key pk of the terminal device 20.
In Step S302, in response to the request from the terminal device 10A, the public information server 30 transmits the user public key pk of the terminal device 20 to the terminal device 10A.
In Step S303, the terminal device 10A selects a public key pki corresponding to a period i, during which the ciphertext c is generated, from the received public keys pk. The terminal device 10A then encrypts a plaintext m, which contains the contents of a message to be transmitted to the user of the terminal device 20, by using the public key pki and a predetermined encryption algorithm (for example, RSA encryption), and generates a ciphertext c.
In Step S304, the terminal device 10A transmits the generated ciphertext C to the terminal device 20.
In Step 305, the terminal device 20 decrypts the received ciphertext c by using the decryption key dk which is stored in the storage unit 207, and the predetermined encryption algorithm (for example, RSA encryption), and restores the plaintext m.
According to the key-insulated cryptosystem in accordance with the present embodiment as described above, the number of updates of the decryption key dk is associated with a plurality of different external devices, i.e., the external devices 40A and 40B. A different piece of master keys (a master key hk*odd and a master key hk*even) is stored in each of the external devices.
That is, the user of the terminal device 20 can selectively use the external devices which are installed at a plurality of different places (the user's home RG and the office OF), by connecting the external device associated with the number of updates of the decryption key dk (for example, connecting the external device 40A in a case of an odd-numbered time update of the decryption key dk).
In addition, since a different master key hk* (the master key hk*odd or the master key hk*even) is stored in each of the external devices, even in a case where any of the external devices is lost or stolen, security of the key-insulated cryptosystem can be maintained because a certain number of decryption keys dk cannot be obtained.
That is, according to the key-insulated cryptosystem in accordance with the present embodiment, an update of the decryption key dk can be more flexibly carried out without deteriorating the security of the encrypted information (for example, the ciphertext c).
Next, the second embodiment of the present invention will be described. Hereinafter, portions different from those of the above-described first embodiment will be mainly described. (Logical block configuration of key-insulated cryptosystem)
Logical block configurations of a terminal device 10A (10B), a terminal device 20, a public information server 30, and an external device 40A (40B), which configure a key-insulated cryptosystem according to the present embodiment, are similar to those of the terminal device 10A (10B), the terminal device 20, the public information server 30, and the external device 40A (40B) according to the first embodiment of the present invention.
In the present embodiment, an encryptor 105 encrypts a plaintext m by using the following public key pk. Firstly, the encryptor 105 uses a public key pkj-1 (a first public key) corresponding to a decryption key dkj-1 (a post-first-update terminal secret key) which is updated by using key-updating information (for example, key-updating information dj-1) generated by the external device 40A (a first external device).
Secondly, the encryptor 105 uses a public key pkj (a second public key) corresponding to a decryption key dkj (a post-second-update terminal secret key) which is updated by using key-updating information (for example, key-updating information dj) generated by the external device 40B (a second external device) at the timing of an update (j) immediately once the decryption key dkj-1 is generated.
The encryptor 105 encrypts a plaintext m (information) by using the both public keys which are the public key pkj-1 and the public key pkj.
(2) Terminal Device 20 In the present embodiment, the decryptor 209 decrypts a ciphertext c by using the both decryption keys which are the decryption key dkj-1 (the post-first-update terminal secret key) and the decryption key dkj (the post-second-update terminal secret key). The decryptor 209 can store the plaintext m, which is restored by decrypting the ciphertext c, in the storage unit 207, and can output the ciphertext c to the output unit 211.
Next, by referring to FIG. 9, operations of the key-insulated cryptosystem according to the present embodiment will be described.
In the key-insulated cryptosystem according to the present embodiment, as in the case of the above-described first embodiment, the once-generated user public key pk of the terminal device 20 is not changed, but only the decryption key dk is updated for every predetermined time period.
In addition, the description will be made by assuming that an update interval of the decryption key dk is half a day (a predetermined time period) and that the user of the terminal device 20 uses the key-insulated cryptosystem for N days.
The user of the terminal device 20 alternately uses the external device 40A (the first external device) which is installed at the user's home RG, and the external device 40B (the second external device) which is installed at the office OF, and carries out an update of the decryption key dk every half a day.
An operational flow of storing a master key according to the present embodiment is similar to that of the above-described first embodiment (see, FIG. 6).
FIG. 9 shows an operational flow along which the terminal device 20 updates the decryption key dk. As shown in FIG. 9, processing from Step S201A to S209A is similar to that of the above-described first embodiment (see, FIG. 7).
In Step S210A, the terminal device 20 erases the key-updating information dj and the old decryption key dk (specifically, the decryption key dkj-2) from the storage unit 207.
An operational flow of transmission and reception of a ciphertext according to the present embodiment is similar to that of the above-described first embodiment (see, FIG. 8).
However, in the present embodiment, in Step S303, the terminal device 10A selects, from the received public keys pk, a public key pkj corresponding to a period j during which the ciphertext c is generated, and a public key pkj-1 corresponding to a period j−1 which is immediately before the period of the public key pkj.
Furthermore, the terminal device 10A applies a combination of the public key pkj-1 and the public key pkj to a predetermined encryption algorithm (for example, RSA encryption). The terminal device 10A encrypts the plaintext m which contains the contents of the message to be transmitted to the user of the terminal device 20, by applying the combination of the public key pkj-1 and the public key pkj to the encryption algorithm, so that the ciphertext c is generated.
In addition, in Step S305, the terminal device 20 applies the decryption key dkj which is stored in the storage unit 207, and the decryption key dkj-1 corresponding to a period j−1 which is immediately before the period of the decryption key dkj, to a predetermined encryption algorithm (for example, RSA encryption). The terminal device 20 decrypts the received ciphertext c by applying the combination of the decryption key dkj and the decryption key dkj-1 to the encryption algorithm, so that the plaintext m is restored.
In the present embodiment, the plaintext m is encrypted by using the both public keys which are the public key pkj corresponding to the period j during which the ciphertext c is generated, and the public key pkj-1 corresponding to the period j−1 which is immediately before the period of the public key pkj. In addition, the ciphertext c which is encrypted from the plaintext m cannot be decrypted, unless using the both decryption keys which are the decryption key dkj and the decryption key dkj-1 corresponding to the period j−1 which is immediately before the period of the decryption key dkj.
For this reason, even in a case where any of the external devices 40A and 40B is lost or stolen, an attacker who obtains the external device cannot decrypt the ciphertext c at all even by using the external device. Therefore, the security of the key-insulated cryptosystem can be further improved.
In addition, even in a case where the attacker uses the key-updating information d stored in the external device and the user decryption key dk of the terminal device 20 exposed at a specific time, it is possible to guarantee the security of decryption keys dk, which are generated in a period including the specific time and in periods before and after the period, throughout those periods.
That is, according to the key-insulated cryptosystem in accordance with the present embodiment, an update and encryption processing can be more flexibly carried out without deteriorating the security of the encrypted information (for example, the ciphertext c).
Next, a third embodiment of the present invention will be described. In the above-described first and second embodiments, the key-updating information d for updating a decryption key dk (a terminal secret key) is generated by invariably alternately using two external devices (the external devices 40A and 40B). However, in the present embodiment, the two external devices do not have to be alternately used. That is, in the present embodiment, consideration is made for improving convenience for users, while a certain level of the security of a key-insulated cryptosystem is guaranteed.
Specifically, in the present embodiment, a decryption key dk is updated every day. A user of a terminal device 20 updates the decryption key dk every day by using an external device 40B, which is installed at an office OF. Furthermore, the user of the terminal device 20 updates the decryption key dk only once in a month by using the external device 40A, which is installed at a user's home RG.
The user of the terminal device 20 does not have to update the decryption key dk by invariably alternately using the external devices 40A and 40B. Therefore, the user can keep the external device 40A, which is used only once in a month, in a physically safe place such as a storage (not shown) at the user's home RG.
Hereinafter, portions different from the first or second embodiment will be mainly described, and the description of portions similar to the first or second embodiment will be properly omitted.
Logical block configurations of a key-insulated cryptosystem according to the present embodiment are similar to the logical block configurations of the key-insulated cryptosystem according to the first and second embodiments (see FIGS. 2 to 5).
In the present embodiment, the external device 40A (a first external device) is used only once in a month to generate key-updating information δi. That is, the external device 40A is associated with a thing that is used every one month (a first cycle).
On the other hand, the external device 40B (a second external device) is used every day to generate the key-updating information δi except for the case where the external device 40A is used. That is, the external device 40B is associated with a one-day cycle (a second cycle). In this manner, the cycle in which the external device 40B is used to generate the key-updating information δi is set shorter than the cycle (one month cycle) in which the external device 40A is used to generate the key-updating information δi.
In the present embodiment, based on a bilinear mapping satisfying a predetermined condition, generation of the key-updating information δi, generation of a ciphertext c, and restoration of a plaintext m are carried out. Specifically, G1 and G2 are set as a group where an order is q, and g is set as a generator of G1. Furthermore, e:G1×G2→G2 is set as the bilinear mapping satisfying an equation 1.
e(ga,gb)−e(g,g)ab (equation 1)
In addition, G and H are set as hush functions shown in an equation 2.
G:G2→{0,1}n, H:{0,1}*→G1 (equation 2)
Furthermore, s1 and s2 are selected at random from a set Zq which is a set of integers 1 to q−1. The selected s1 is stored as a master key 1 in the external device 40B. In addition, the selected s2 is stored as a master key 2 in the external device 40A.
In addition, in the present embodiment, a date i is used for generation (operation) of an initial decryption key dk0 and a ciphertext c. The date i is expressed in a form of “year/month/day”. For example, in a case of Aug. 1, 2006, it is expressed as “2006/08/01”.
Next, a functional block carrying out processing different from that of the first or second embodiment will be described. An updater 205 of the terminal device 20 according to the present embodiment selects one of the external devices 40A and 40B depending on an update period of a decryption key dk (a terminal secret key). Specifically, a decryption key dk on the first day of every month is generated by updating a decryption key dk on the previous day, e.g., the last day of the previous month, by using the master key 2 which is stored in the external device 40A.
On the other hand, a decryption key dk on a day other than the first day of every month is generated by updating a decryption key dk on the previous day by using the master key 1 which is stored in the external device 40B.
The updater 205 generates an initial decryption key dk0 by using, for example, an equation 3 in a case where utilization starts from Aug. 1, 2006 (an update of a decryption key dk starts from the following day).
dk 0 =H(2006/08/01)s1 ·H(2006/08/01)s2 (equation 3)
In addition, the updater 205 generates a decryption key dki of the date i by using an equation 4 including the decryption key dki-1 on the previous day and the key-updating information δi.
dk i =δi·dk i-1 (equation 4)
It should be noted that the updater 205 erases the decryption key dki-1 on the previous day and the key-updating information δi from a storage unit 207 once the decryption key dki is generated.
In addition, on a public information server 30 according to the present embodiment, the following information is published as a user public key pkall of the terminal device 20.
pkall=<q,G1,G2,g,e,n,h1,h2,G,H>
It should be noted that h1 and h2 are obtained by an equation 5. In addition, the public key pkall is commonly used in all periods.
h1=gs1 h2=gs2 (equation 5)
In addition, a key-updating information generator 403 of the external devices 40A and 40B generates key-updating information δi by using the hash function H which is determined based on the above-described bilinear mapping. Specifically, in a case where a date i is the first day of a month (for example, Sep. 1, 2006), the key-updating information generator 403 generates the key-updating information δi by using an equation 6.
δi=H(a date on the first day of the previous month)−s2 ·H(i)s2 (equation 6)
That is, in a case where the date i is the first day of the month, the key-updating information δi is generated by using the master key 2 (s2) which is stored in the external device 40A.
In addition, in a case where the date i is the second day of the month (for example, Sep. 2, 2006), the key-updating information generator 403 generates the key-updating information δi by using an equation 7.
δi=H(a date of two days before)−s1 ·H(i)s1 (equation 7)
That is, in a case where the date i is the second day of the month, the key-updating information δi is generated by using the master key 1 (s1) which is stored in the external device 40B. It should be noted that “a date of two days before” in the equation 7 means Aug. 31, 2006 in a case where the date i is Sep. 2, 2006.
Furthermore, in a case where the date i is a day other than the first or second day, the key-updating information generator 403 generates the key-updating information δi by using an equation 8.
δi=H(a date on the previous day)−s1 ·H(i)s1 (equation 8)
That is, in a case where the date i is a day other than the first or second day, the key-updating information δi is generated by using the master key 1 (s1) which is stored in the external device 40B.
In addition, an encryptor 105 of a terminal device 10A (10B) according to the present embodiment encrypts a plaintext m by using an equation 9 to generate a ciphertext c.
c=<i,c0,c1> (equation 9)
Here, c0 can be obtained by using an equation 10.
c0=gr (equation 10)
Furthermore, the encryptor 105 encrypts a plaintext m by using the public key pkall and update period information corresponding to an update period of the decryption key dk to generate a ciphertext c. Specifically, in a case where the date i is the first day of a month, the encryptor 105 generates a ciphertext c1 by using an equation 11.
c1=m XOR G((e(h1,H(a date on the previous day))·e(h2,H(i)))^r) (equation 11)
In addition, in a case where the date i is a day other than the first day of the month, the encryptor 105 generates a ciphertext c1 by using an equation 12.
c1=m XOR G((e(h1,H(i))·e(h2,H(a date on the first day of this month)))^r) (equation 12)
That is, in a case where the date i is the first day of a month (for example, Sep. 1, 2006), the encryptor 105 uses the date on the previous day (Aug. 31, 2006) as update period information corresponding to an update period of the decryption key dk. In addition, in a case where the date i is a day other than the first day of a month (for example, Sep. 3, 2006), the encryptor 105 uses a date on the first day of the month (Sep. 1, 2006) as update period information corresponding to an update period of the decryption key dk. It should be noted that, in the present embodiment, a plaintext m is assumed to be a bit string of n bits.
In addition, a decryptor 209 of the terminal device 20 according to the present embodiment decrypts the ciphertext c by using an equation 13 to restore the plaintext m, based on the public key pkall, the date i, and the ciphertext c (=<i, c0, c1>).
m=c1 XOR G(e(c0,dk i)) (equation 13)
Next, by referring to FIGS. 10 to 12, operations of the key-insulated cryptosystem according to the present embodiment will be described. FIGS. 10 to 12 respectively correspond to FIGS. 6 to 8 showing operational flows of the key-insulated cryptosystem according to the first embodiment. Specifically, FIGS. 10 to 12 respectively show operations of storing a master key, operations of updating a decryption key dk, and operations of transmitting or receiving a ciphertext.
Hereinafter, portions different from the above-described key-insulated cryptosystem according to the first embodiment will be mainly described.
As shown in FIG. 10, in Step S1101, the terminal device 20 selects s1 and s2 at random from a set Zq.
In Step S1102, the terminal device 20 transmits the selected s1 as a master key 1 to the external device 40A.
In Step S1103, the external device 40A stores the master key 1 in the recorder 405.
In Step S1104, the terminal device 20 transmits the selected s2 as a master key 2 to the external device 40S.
In Step S1105, the external device 40B stores the master key 2 in the recorder 405.
In Step S1106, the terminal device 20 determines a public key dkall (=<q, G1, G2, g, e, n, h1, h2, G, H>).
In Step S1107, the terminal device 20 transmits the public key pkall to the public information sever 30.
In Step S1108, the public information server 30 stores the public key pkall received from the terminal device 20 in public information database 305.
In Step S1109, the terminal device 20 stores an initial decryption key dk0 in the storage unit 207. The initial decryption key dk0 is generated as described above by using the equation 3.
As shown in FIG. 11, in Step S1201, the terminal device 20 determines that a predetermined time period (one day) has passed since the previous update of the decryption key dk, and recognizes that i-th time update of the decryption key dk is needed.
In Step S1202, the terminal device 20 determines a current date i. In a case where the date i is the first day of a month (for example, Sep. 1, 2006), the terminal device 20 requests the external device 40B to generate the key-updating information δi in Step S1203.
In Step S1204, the external device 40B generates the key-updating information δi by using the above-described equation 6. In Step S1205, the external device 40B transmits the generated key-updating information δi to the terminal device 20.
In addition, in a case where the date i is the second day of a month (for example, Sep. 2, 2006), the terminal device 20 requests the external device 40A to generate the key-updating information δi in Step S1206.
In Step S1207, the external device 40A generates the key-updating information δi by using the above-described equation 7. In Step S1208, the external device 40A transmits the generated key-updating information δi to the terminal device 20.
Furthermore, in a case where the date i is a day other than the first or second day of a month, the terminal device 20 requests the external device 40A to generate the key-updating information δi in Step S1209.
In Step S1210, the external device 40A generates the key-updating information δi by using the above-described (equation 8). In Step S1211, the external device 40A transmits the generated key-updating information δi to the terminal device 20.
In Step S1212, the terminal device 20 generates the decryption key dki by using the above-described equation 4, based on the key-updating information δi received from the external device 40A or 40B.
In Step S1213, the terminal device 20 erases the key-updating information δi and the decryption key dki-1 from the storage unit 207.
Processing in Steps S1301 and S1302 shown in FIG. 12 is similar to the processing in Steps S301 and S302 shown in FIG. 8. In Step S1303, the terminal device 10A selects r at random from the set Zq.
In a case where a current date i, e.g., timing of generating the ciphertext c, is the first day of a month, the terminal device 10A generates a ciphertext c by using the above-described equation 11 in Step S1304.
In addition, in a case where the current date i is a day other than the first day of a month, the terminal device 10A generates a ciphertext c by using the above-described equation 12 in Step S1305.
In Step S1306, the terminal device 10A transmits the generated ciphertext c to the terminal device 20.
In Step S1307, the terminal device 10A decrypts the received ciphertext c by using the above-described equation 13 to restore the plaintext m.
According to the key-insulated cryptosystem according to the present embodiment, generation of the key-updating information δi, generation of the ciphertext c, and restoration of the plaintext m are carried out, based on the bilinear mapping satisfying a predetermined condition. In addition, as shown in the equation 11 and the equation 12, the date used for generating the key-updating information δi (a date on the previous day or a date on the first day of the month) varies depending on an update period of the decryption key dk. Therefore, utilization frequencies of the external devices 40A and 40B can be made different.
Specifically, since it suffices that the external device 40A is used only once in a month, the user of the terminal device 20 who updates the decryption key dk by using the external devices 40A and 40B can keep the external device 40A in a physically safe place such as a storage (not shown) at the user's home RG except for the time when it is used.
That is, the user of the terminal device 20 almost does not need to recognize that the external devices 40A and 40B are alternately used to update the decryption key dk. For this reason, the user may concentrate only on managing the external device 40B which is used almost everyday, thereby improving convenience.
In addition, when compared with the key-insulated cryptosystem according to the first embodiment in which the external devices 40A and 40B are invariably alternately used, although the security of encrypted communications is reduced, the convenience for the user can be improved, while guaranteeing the security which is higher than the conventional key-insulated cryptosystem.
As described above, the contents of the present invention have been disclosed by one embodiment of the present invention. However, it should not be understood that descriptions and drawings constituting part of this disclosure limit the present invention. From this disclosure, a various alternative embodiments will be apparent to those who are skilled in the art.
For example, in the above-described embodiments of the present invention, two external devices (external devices 40A and 40B) are associated with an odd-numbered time update of the decryption key dk and an even-numbered time update of the decryption key dk. However, the number of the external devices may be three or more instead of two.
In a case where the number of the external devices is three, as in the case of the above-described embodiments, a different master key hk* is stored in each of the external devices (for example, external devices #1 to #3). In addition, each of the external devices is associated with the number of updates of the decryption key dk. For example: the external device #1 is used for the first, fourth, seventh . . . updates of the decryption key dk; the external device #2 is used for the second, fifth, eighth . . . updates of the decryption key dk; and the external device 113 is used for the third, sixth, ninth . . . updates of the decryption key dk.
In addition, in a case where an order of the external devices used for updating the decryption key dk is known in advance, an order of using the external devices may be irregular.
The user (the terminal device 20) requests the external devices to generate key-updating information d in accordance with a predetermined order of the three external devices (the external device #1, the external device #2, and the external device #3).
In addition, functions of respective logical blocks (excepting specific blocks such as a storage unit) of the terminal device 10A (10B), the terminal device 20, the public information server 30, and the external device 40A (40B) as described above can be provided as a program.
In this manner, the present invention apparently includes various embodiments which are not described herein. Thus, a technical scope of the present invention is defined only by invention-specific matters according to the scope of patent claims which are appropriate in light of the foregoing description.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5768389 *Jun 20, 1996Jun 16, 1998Nippon Telegraph And Telephone CorporationMethod and system for generation and management of secret key of public key cryptosystemUS7093128 *Apr 6, 2001Aug 15, 2006Sony CorporationInformation recording/reproducing apparatus and methodUS7103911 *Oct 17, 2003Sep 5, 2006Voltage Security, Inc.Identity-based-encryption system with district policy informationUS7302565 *Jun 24, 2003Nov 27, 2007Arraycomm LlcTerminal identity masking in a wireless networkUS20010023487 *Mar 14, 2001Sep 20, 2001Akiko KawamotoMulticast system, authentication server terminal, multicast receiver terminal controlling method, and storage mediumUS20040025021 *Jun 25, 2003Feb 5, 2004Makoto AikawaSmart card and settlement terminalUS20040123110 *Sep 29, 2003Jun 24, 2004Information And Communications University Educational FoundationApparatus and method for ID-based ring structure by using bilinear pairingsUS20050018853 *Mar 30, 2004Jan 27, 2005Antonio LainCryptographic key update management method and apparatusUS20050135610 *Oct 29, 2004Jun 23, 2005Liqun ChenIdentifier-based signcryptionUS20050240974 *Mar 28, 2005Oct 27, 2005Takuji HiramotoProcessing terminal, receiving terminal and received data processing systemJP2004254027A Title not availableJP2005260650A Title not available* Cited by examinerNon-Patent CitationsReference1 *Author: Moti Yung et al Title: Key-Insulated Public Key Cryptosystem Date: 2002.2Menezes, et al., "Handbook of Applied Cryptography", CRC Press LLC, XP-002491478, 1997, pp. 24-25, 490-491-551-553 and 578-580.3Mihir Bellare, et al., "Protecting against Key Exposure: Strongly Key-Insulated Encryption with Optimal Threshold", Dept. of Computer Science & Engineering, May 25, 2002, pp. 1-22.4Yevgeniy Dodis, et al., "Key-Insulated Public-Key Cryptosystems", Department of Computer Science, vol. 2332, Jun. 17, 2002, pp. 1-18.* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS8688981 *Sep 3, 2009Apr 1, 2014Samsung Electronics Co., Ltd.Method and apparatus for logging in a health information tele-monitoring device by using a personal portable deviceUS8693692 *Mar 18, 2008Apr 8, 2014Cisco Technology, Inc.Direct delivery of content descrambling keys using chip-unique codeUS8954758Sep 9, 2012Feb 10, 2015Nicolas LEOUTSARAKOSPassword-less security and protection of online digital assetsUS9213853Mar 9, 2013Dec 15, 2015Nicolas LEOUTSARAKOSPassword-less loginUS20080104411 *Sep 29, 2006May 1, 2008Agrawal Pankaj OMethods and apparatus for changing passwords in a distributed communication systemUS20090238367 *Mar 18, 2008Sep 24, 2009Howard PinderDirect delivery of content descrambling keys using chip-unique codeUS20100122087 *Sep 3, 2009May 13, 2010Samsung Electronics Co., Ltd.Method and apparatus for logging in a health information tele-monitoring device by using a personal portable device* Cited by examinerClassifications U.S. Classification380/277, 713/189, 380/278International ClassificationH04L9/00, H04L9/08Cooperative ClassificationH04L63/0428, H04L63/065, H04L63/068, H04L9/0891, H04L9/0897European ClassificationH04L63/04B, H04L63/06E, H04L63/06C, H04L9/30Legal EventsDateCodeEventDescriptionOct 30, 2006ASAssignmentOwner name: NTT DOCOMO, INC., JAPANFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:HANAOKA, YUMIKO;REEL/FRAME:018474/0082Effective date: 20050925Apr 2, 2014FPAYFee paymentYear of fee payment: 4RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services


text:
LFT to LOS: Flights from Lafayette to Lagos | Expedia
Cheap Flights from Lafayette to Lagos from
Find minimum fare between origin LFT and destination LOS
Click this button to get previous 30 days data Click this button to get next 30 days data $993
Price is $ 851.96 Cheap Flights from Lafayette to Lagos
$1201.64
$1234.14
$1244.64
$1251.64
$2592.26
Lafayette to Lagos Flights
Sometimes you just need to get out of town or maybe you’re looking for a change of scenery. Regardless of the reason, a flight from Lafayette to Lagos will do just the trick! Go on, plan to see all the famous landmarks and eat your weight in the local cuisine. Your trip is beckoning, so answer the call by packing your suitcase and filling your travel itinerary with exploring Lagos.
Whether you’re flying for business or jet-setting on your personal time, you’ve come to the right place. Here at Expedia.com, we’ll pair you up with LFT to LOS flights that won’t make your bank account wince. Ready to temporarily leave behind Lafayette for new horizons? Browse through our cheap airfare, and filter by flight times and dates until you find just what you had in mind. From flights without layovers to ones that arrive early in the morning, you’ll come across plane tickets that suit your travel preferences. You can even bundle your flight to LOS with hotels and car rentals to score even bigger savings.All set to hit the clouds? Book your travel arrangements with us today and have left-over money to put toward your travel outings and adventures.

type: global

value: This website is an online travel agency owned by Expedia Group, an American online travel shopping company based in Seattle.


text:
Up to 59% Off Chartered Fishing Trip in Peoria
52% Off Sunset Sailboat Cruise from Sailboat Shop
52% Off FlyBoarding Session at Pleasant Harbor Boat Rental
92% of 142 customers recommend

value: This website is an American global e-commerce marketplace connecting subscribers with local merchants by offering activities, travel, goods and services in 15 countries. Based in Chicago, Groupon was launched there in November 2008, launching soon after in Boston, New York City and Toronto.


text:
Talk:Hal Bedsole - Wikipedia
Talk:Hal Bedsole
Retrieved from "https://en.wikipedia.org/w/index.php?title=Talk:Hal_Bedsole&oldid=716644775"
This page was last edited on 22 April 2016, at 22:49.

value: This website is the English-language edition of the free online encyclopedia Wikipedia. It was founded on 15 January 2001 as Wikipedia's first edition and, as of October 2021, has the most articles of any edition, at 6,412,521.


text:
Find out if your remodeling dreams fit your budget reality.Try the Real Cost Finder 57,116 black table lamp Home Design Photos
Ideabooks10,581	Questions16	are new, but constructed to look original. The salvaged wood farmhouse table is the perfect gathering spot for their family and a nice contrast to thethe table? That is the perfect size dining room table for us.the room (13'9 x 22) and the dimensions of the table (42 x 108). Do you think that the same sized table can fit in a room of 13 x15'4 withuot being crampedWith the table not being sealed have you had any problems with white heat spots? I've been considering this table fromdepends on how wide your table is. I'd recommend comparing the diameter measurement of the light with the width of the table. I'd say the diameter ofwidth of the table. If it is close and you're still not sure, create a template of the light out of cardboard and hold it above the table! It's a greatDid you seal this table? If...the table that I can think of.Chandelier — lordforgeron Embed
Ideabooks6,168	Questions11	comfortable eat a meal with the round table?I am looking for two chairs and a table for a 6ft square porch. What doThis is the IKEA DOCKSTA table, which is about 41" in diameter.This means I have a few chairs I can switch between the dressing table, the dining table, the screened-in porch and the kitchen. There's no need for themClassic bentwood chairs are matched with an upholstered bench and tulip-style table. The eclectic pairing works because of the room's mostly white backdrop andAt the TableThis small settee works like a built-in bench but is more versatile. The plaidWhat is the size of the table?...Like table for our kitchen dining...Round table with bench and 2 chairs...Using a round table in kitchen withCute — Ted Pilkington Embed
Ideabooks4,058	Questions7	Nice room I don't like coffee tableDark blue accents and lamp shadeson sofa table Pillows
Rug...dark and light .....black shades?...Swivel table?...Table lamps with tassels...Table and concept...standard lamps ....colors, lamps...brown drum lamp shade...black roman shadesCushions — Barbara Skelton Make Up Embed
Ideabooks1,645	Questions4	this solution will hold up better? And, I love it matched with the brown/black granite and the color of the cabinets. Stunning!!Carbon black granite with a honed finishfinish on counters - look like slate
carbon black granite w honed finishcarbon black granite with a honed finish! love it.The one with lamp near door...Honed carbon black granite for countersSame stone — splished Embed
Ideabooks786	Questions4	Where can I get those hanging lamps?Source for tall lamps please!...Side tables. Add zebra wood...Great lamps...bedside tables...Fringed lamps...cream and black Asian inspired...Side tablelamps — Gloria Ortiz Embed
Ideabooks5,937	Questions15	How much space is necessary between the fireplace and table to sit comfortably?I would like to know where I can purchase the small martini table with glass top? Thanks!The dining table is gorgeous. Can you share the source?the fireplace facing the long side of the table, and the end windowWhere can I find this table?...color of table and chairs and rugscolor scheme — Lena Semenova Embed
Ideabooks2,576	Questions2	coffee table...the cool floor lamp!...Table bookshelve...Floor lampExposed ceiling — marvinyeesf Embed
Ideabooks3,192	Questions8	Where can I find this table lamp? Thanks!Where can I find that table lamp? Thanks!I like the wicker chair, the canopy bed, the plant life in the room... would choose a different lampCan you tell me more about the lamp...Table Lamp-...black bed...Our lamp...Black 4post...Love the blackMaster bedroom — lenastathi Embed
Products Related to "Table Lamp With Black Shade" Afton Antique Silver Table Lamp
$248.60 Silver Bird and Tree Table Lamp w/ Black Shade
$297.50 21018Blk Blk 1 Light Ceramic Table Lamp With Black Fabric Shade
$93 Table Lamp Ps/Black Fabric Shade E27 Cfl 23W
$237.60 Schuller Flow Table Lamp - Oval Black Shade
$290 238239240241242243244Next Page Embed photo

value: This website is an American website, online community and software for architecture; interior design and decorating; landscape design and home improvement. It was founded in 2009 and is based in Palo Alto, California.


text:
I will not be staying at this location again and... - Review of Motel 6 Brunswick South - TripAdvisor
“We were very pleased with this stay - room was...”
“Room furnishings were sparse and old”
“Room was clean and mostly quiet”
“We always stay at this motel when we come to...”
I will not be staying at this location again and... - Review of Motel 6 Brunswick South
After traveling all day and checking in, the clerk at the desk was very welcoming. When she began to tell me to immediately turn on the air in the room right upon entering, I was worried. She explained that it may take 1-2 hours to cool down. The temp outside that day reached over 95 and felt over 100 with heat index. She said they didn't keep the air
running.Really???? When expecting a guest, wouldn't you expect to find your room ready in that sense? Needless to say, I was upset to find a smoltering HOT room that I could barely stand to be in. My two kids have asthma and could hardly stand the stuffiness. We sweated through bedtime preparations and remained hot most all night. In the morning at breakfast, the attendant stayed busy cleaning and putting food out. My only complaint was the small area for breakfast. It was hot there too, and a small floor fan was set up on a chair as it ran in the eating area. I have never had any problems at previous Microtels, and thought this one would be a good choice for my family and me. However, the inside environment was cheap looking, but clean, and the rooms didn't match others I have stayed at. I will not be staying at this location again and would advise others to stay elsewhere, even if it means paying a bit more. I felt the hotel was cheap and doing things to cut back and save.....at the expense of guests.
Ask SummerTeacherFamily about Motel 6 Brunswick South
Thank SummerTeacherFamily
Ask Bruno R about Motel 6 Brunswick South
Microtel Burnswick South, GA
Ask James C about Motel 6 Brunswick South
Ask Matt C about Motel 6 Brunswick South
Decent clean basic room
The day shift woman was very helpful; showed us a room before we decided, etc. She also graciously allowed us to check in several hours early to dress for the wedding.
The room was clean, quiet and nicely furnished (no flat screen TV). Plenty of room for the 4 of us. Pull out sofa was already made up with sheets for the kids. Fridge was clean and cold for our perishables.
Evening shift was another story. Our room only had 3 pillows, so I sent my kids down to get another. They were told no pillows available in the whole hotel (place was not full). My daughter ended up sleeping with her head on a stack of linens. We were too exhausted to argue. I'm sure had the day shift woman dealt with it, the result would have been different.
Breakfast was basic but filling and allowed us to get on the road without planning a breakfast stop.
I would stay here again, especially to save $75.
Ask Jennifer T about Motel 6 Brunswick South
jit000, Manager at Motel 6 Brunswick South, responded to this reviewResponded June 1, 2013
worn, overpriced
Ask PC1955 about Motel 6 Brunswick South
Ask Fred C about Motel 6 Brunswick South
TripAdvisor is proud to partner with Priceline, Expedia, Motel-6, Hotels.com, Orbitz, Travelocity, Hotwire, HotelQuickly, Cheap Tickets and Cancelon so you can book your Motel 6 Brunswick South reservations with confidence. We help millions of travelers each month to find the perfect hotel for both vacation and business trips, always with the best discounts and special offers.

value: This website is an American online travel company that operates a website and mobile app with user-generated content and a comparison shopping website.


text:
Jayne Monkhouse - Semantic Scholar
Sign inJayne MonkhouseShareSuggest Changes3Highly Influential Citations427CitationsCitations Per YearDaryl Rees3S. E. Moss3Bruno Reigner2Salvador Moncada2Christopher Poole25Martin D Lehner5Lukáš Kubala5J-M Ferrero5G Milano5Giuseppe ValacchiFilter Results:Full text PDF available (1)Publication Year19982005This year (0)Last five years (0)Co-authorPublication VenueSort by:Highly Influential CitationsCitationsAccelerationVelocityRecencyLearn MoreGW274150 and GW273629 are potent and highly selective inhibitors of inducible nitric oxide synthase in vitro and in vivo.Wendy K Alderton, Anthony D R Angell, +10 authors Richard G KnowlesBritish journal of pharmacology20051 GW274150 ([2-[(1-iminoethyl) amino]ethyl]-L-homocysteine) and GW273629 (3-[[2-[(1-iminoethyl)amino]ethyl]sulphonyl]-L-alanine) are potent, time-dependent, highly selective inhibitors of human inducible nitric oxide synthase (iNOS) vs endothelial NOS (eNOS) (>100-fold) or neuronal NOS (nNOS) (>80-fold). GW274150 and GW273629 are arginine competitive,… (More)2View on PubMedRelated PublicationsMore...Effect of renal impairment on the pharmacokinetics and tolerability of capecitabine (Xeloda) in cancer patients.Christopher Poole, Jill Gardiner, +7 authors Bruno ReignerCancer chemotherapy and pharmacology2002PURPOSE
The primary objective of this study was to investigate the influence of renal impairment on the pharmacokinetics of capecitabine and its metabolites in cancer patients. Capecitabine (Xeloda) is an orally administered precursor of 5'-deoxy-5-fluorouridine (5'-DFUR), which is preferentially activated to 5-fluorouracil (5-FU) in tumors.
A… (More)1View on PubMedRelated PublicationsMore...Nitric oxide and the haemodynamic profile of endotoxin shock in the conscious mouse.D D Rees, J E Monkhouse, D Cambridge, S MoncadaBritish journal of pharmacology19981. The release of cytokines following administration of endotoxin and the contribution of nitric oxide (NO) to the subsequent haemodynamic profile were investigated in the conscious mouse. 2. Administration of endotoxin (E. Coli, 026:B6, 12.5 mg kg(-1), i.v.) elevated the concentration of tumour necrosis factor-alpha (TNF-alpha) in the plasma within 0.5 h,… (More)View on PubMedRelated PublicationsMore...Pharmacokinetics of capecitabine (Xeloda) in Japanese and Caucasian patients with breast cancer.Bruno Reigner, Toru Watanabe, +12 authors Susan GrangeCancer chemotherapy and pharmacology2003BACKGROUND
Capecitabine (Xeloda) is a novel, oral fluoropyrimidine carbamate rationally designed to generate 5-fluorouracil (5-FU) preferentially in tumor tissue via a three-step enzymatic cascade.
The objective of this study was to compare the pharmacokinetics of capecitabine and its metabolites in Japanese and Caucasian cancer patients.
… (More)View on PubMedRelated PublicationsMore...Immunological development and cardiovascular function are normal in annexin VI null mutant mice.T E Hawkins, J Roes, D Rees, J Monkhouse, S E MossMolecular and cellular biology1999Annexins are calcium-binding proteins of unknown function but which are implicated in important cellular processes, including anticoagulation, ion flux regulation, calcium homeostasis, and endocytosis. To gain insight into the function of annexin VI, we performed targeted disruption of its gene in mice. Matings between heterozygous mice produced offspring… (More)View PDFRelated PublicationsMore...‹1›The Allen Institute for Artificial IntelligenceProudly built by AI2 with the help of our Collaborators using these Sources.Terms of Service•Privacy Policy.

value: This website is an artificial-intelligence backed search engine for academic publications developed at the Allen Institute for AI and publicly released in November 2015. It uses advances in natural language processing to provide summaries for scholarly papers.