| 摘要 |
Provided is an information processing apparatus including a message generating unit that generates messages of N times (where N≧2) based on a multi-order multivariate polynomial set F=(f1, . . . , fm) defined on a ring K and a vector s that is an element of a set Kn, and calculates a first hash value based on the messages of N times, a message providing unit that provides a verifier with the first hash value, an interim information generating unit that generates third information of N times using first information randomly selected by the verifier and second information of N times, and generates a second hash value based on the third information of N times, an interim information providing unit that provides the verifier with the second hash value, and a response providing unit that provides the verifier with response information of N times. |
| 主权项 |
1. An information processing apparatus comprising:
a message generating unit that generates messages of N times (where N≧2) based on a multi-order multivariate polynomial set F=(f1, . . . , fm) defined on a ring K and a vector s that is an element of a set Kn, and calculates a first hash value based on the messages of N times; a message providing unit that provides a verifier holding the multi-order multivariate polynomial set F and a vector y=(y1, . . . , ym)=(f1(s), . . . , fm(s)) with the first hash value; an interim information generating unit that generates third information of N times using first information randomly selected by the verifier on the respective messages of N times and second information of N times obtained when the messages are generated, and generates a second hash value based on the third information of N times; an interim information providing unit that provides the verifier with the second hash value; and a response providing unit that provides the verifier with response information of N times corresponding to verification patterns selected by the verifier from among k (where k≧2) verification patterns on the respective messages of N times, a part of messages, and a part of third information, the part of messages and the part of third information not being obtained even when an operation prepared for a verification pattern corresponding to the response information in advance is performed using the multi-order multivariate polynomial set F, the vector y, and the response information, wherein the vector s is a secret key, wherein the multi-order multivariate polynomial set F and the vector y are public keys, and wherein the messages and the third information are information obtained by performing the operation prepared for the verification pattern corresponding to the response information in advance using the public keys, the first information, and the response information, or information obtained based on the response information. |
