|
Information Security Technologies
Research and Development for Integrated Information Security
—From the Viewpoint of Overcoming Contradictions
TSUJII Shigeo
Information Security Technologies Enhancing Social Contributions of Individuals and
Organizations
ENDO Naoki / KAWAMURA Shinichi / OHKUMA Kenji
With all activities of both individuals and organizations having become heavily dependent on information systems, safeguarding the security of
information systems is now a crucial issue.
Since the early 1980s, Toshiba has been researching and developing information security technologies for application in a broad range of
fields including social infrastructure systems, corporate information systems, and semiconductor products. These fields of application are
supported by core technologies such as cryptography and digital watermarking. We are making continuous efforts to enhance the social
contributions of individuals and organizations by developing these core technologies and solutions.
High-Bit-Rate Unconditionally Secure Quantum Key Distribution
Andrew J. Shields / Zhiliang Yuan
Quantum key distribution (QKD) technology, in which unconditionally secure key distribution is guaranteed based on a physical law, is expected
to be a cryptographic primitive in future secure networks. However, it is essential for the technology to be able to be integrated into real communication
infrastructures for widespread use.
Toshiba has participated in a field trial of a small-scale QKD network as part of the Secure Communication Based on Quantum Cryptography
(SECOQC) Project funded by the European Union, and has successfully demonstrated both secret telephone communications and video distributions
between random nodes on a network. Furthermore, using a newly developed single-photon detection device, we have developed a high-bit-rate
QKD system that allows key distribution exceeding 1 Mbps under unconditionally secure conditions.
High-Speed Anonymous Authentication Technology to Prevent Dissemination of
Personal Data
YOSHIDA Takuya / OKADA Koji
Although about four years have passed since the Personal Information Protection Law was enforced, incidents of personal data leakage from
service providers still occur. Conventional anonymous authentication technologies without the use of personal data and identification have been
insufficient for practical use due to the issues of efficiency and user revocation.
To overcome these problems, Toshiba Solutions Corporation has newly developed a practical anonymous authentication technology that can
achieve high-speed processing of authentication even on restricted platforms such as personal computers, cellular phones, and IC cards, and makes
it possible to be applied to a broad range of business models and use cases.
Secure, Compact, and Efficient Algebraic Torus-Based Cryptography
YONEMURA Tomoko / MURATANI Hirofumi
Algebraic torus-based cryptography are a secure, compact, and efficient means of public-key cryptography based on a discrete logarithm problem.
Cryptography is essential in the implementation of a network security system, enabling strangers to engage in secure communication via the
network without the need for sharing of keys between the sender and receiver.
Toshiba has developed a parameter selection method for algebraic torus-based cryptography from the viewpoints of both security and efficiency.
More specifically, we have obtained parameters that can achieve smaller size of the fundamental arithmetic in the algebraic torus while maintaining
security. As a result, the speed of algebraic torus-based cryptography is comparable to and the key size is close to those of an elliptic curve-based
cryptography.
Automated Security Proofs for Cryptographic Protocols
HANATANI Yoshikazu / MURATANI Hirofumi / OHTA Kazuo
A security proof is a measure that ensures the security of fundamental cryptographic primitives such as public key encryption, digital signatures,
and so on. As it convinces all parties concerned of the security of the primitives, it also provides a criterion for the standard cryptographic scheme.
Advanced expertise is required to provide security proofs. There is consequently an increasing need for automated security proof technology.
Toshiba and the University of Electro-Communications have performed analysis and improvement of the proof capability of CryptoVerif security-proving
software. Experiments with our improved CryptoVerif confirmed that it could successfully prove all examples given by both Bruno Blanchet
and ourselves, whereas the original CryptoVerif might fail in a few examples.
Collusion-Secure Fingerprinting Codes for Fair Content Distribution
ISOGAI Taichi / MURATANI Hirofumi
Digital fingerprinting is one of the techniques employed to prevent illegal distribution of digital contents. In the case of illegal distribution,
pirate users can be traced and identified from each user's ID embedded in the digital contents. In a digital fingerprinting system, collusion-secure
codes are often used instead of common IDs to control infections by pirate users rewriting their IDs. However, conventional collusion-secure codes
require very long code lengths in order to prevent failure to trace pirate users as well as the possibility of false charges.
Toshiba has developed a technique that can reduce the length of collusion-secure fingerprinting codes to about 1/15 to 1/20 compared with the
conventional code length by improvement of the tracing algorithm and other optimizations, and is promoting the practical application of a digital
fingerprinting system incorporating this technique.
Tamper-Resistant Technique for Cryptographic Modules
NOZAKI Hanae / FUJISAKI Koichi / KAWAMURA Shinichi
Cryptographic modules are required to resist illegal reading of internal secret information or tampering with cryptographic functions. A tamper-resistant
technique against implementation attacks, which have recently become a real threat posed by revealing the secret keys in cryptographic
modules, has become increasingly important.
Toshiba has been developing and improving tamper-resistant techniques for both countermeasures and security evaluation in implementation of
cryptographic modules for financial cards, e-passports, and so on. We are also aiming to contribute to the establishment of global security standards.
Trusted Computing for Software System Protection
ISOZAKI Hiroshi
A system that contains privacy-related data or confidential corporate data is required to behave in accordance with the intention of the system
designers. In recent years, the concept of trusted computing has been attracting considerable interest as a solution for this. Trusted computing
provides a computing platform with robust hardware to ensure that software behavior is not compromised.
Toshiba believes that this concept will be introduced to personal computers and consumer electronics devices in the near future. We are aiming
at further enhancing security for digital devices by using security chips or storage devices standardized by the Trusted Computing Group (TCG).
Authentication Context for Biometrics (ACBio) to Secure Biometric Authentication
in Open Networks
YAMADA Asahiko / OKADA Koji / IKEDA Tatsuro
Biometric authentication using body and behavioral features such as fingerprints and vein patterns, which has recently been introduced for
automatic teller machines of banks, is expected to be applied to remote user authentication for online services such as Internet banking services in
the near future. However, there are several problems related to user privacy, security and convenience, and cost of the service.
To solve these problems, Toshiba Solutions Corporation has developed the Authentication Context for Biometrics (ACBio), a technology for
secure remote biometric authentication in open networks such as the Internet, which was standardized as an International Standard. With ACBio,
more secure and convenient biometric authentication is realized.
Total Area Security Solution Using Noncontact-Type IC Cards and RFID Tags
SATO Mitsuhiko / WATANABE Hiromi / SHIMADA Hirokazu
A physical security system appropriately manages a physical space, such as access control by electric locks and gates to manage the movements
of people through entrances and exits. However, it is often difficult to know the location as well as the exact numbers of all people entering
and leaving facilities and buildings.
To strengthen the security and safety of buildings and facilities, Toshiba Solutions Corporation has developed a total area security solution that
not only realizes control according to the security level of each area but also the collection and management of information about all of the people
entering and leaving, using noncontact type IC cards and radio-frequency identification (RFID) tags. This system can contribute to improved safety
in the event of a disaster with its function of collecting and managing information such as the locations and movements of people. In addition, it can
also achieve seamless security in conjunction with logging on to a terminal and the use of surveillance cameras. | 
