| 摘要 |
A sharing apparatus independently shares a value corresponding to each element theta(psi, i, beta)·g2 of basis vectors bi*(theta) among each subset SUB(alpha) consisting of H(alpha) share management apparatuses PA(alpha, 1), . . . , PA(alpha, H(alpha)) to generate share information SH(psi, i, beta, alpha, h(alpha)) corresponding to each element theta(psi, i, beta)·g2. The share management apparatus PA(alpha, h(alpha)) generates a share secret value DSH(psi, alpha, h(alpha)) by performing a common calculation common in the subset SUB(alpha) on common information shared in the subset SUB(alpha) and the share information SH(psi, i, beta, alpha, h(alpha)). An acquisition apparatus generates reconstructed secret values SUBSK(psi, alpha) for each subset SUB(alpha) by performing a reconstruction processing for the subset SUB(alpha) and generates generation information D*(psi) from the reconstructed secret values SUBSK(psi, alpha).
|
