| 摘要 |
PROBLEM TO BE SOLVED: To provide a secret computation system reducing the load on a secret computation device. SOLUTION: A third secret computation device generates, from one fragment t of the two fragments obtained by bisecting a first input value mA by a dividing operator *, data Wb corresponding to each bit b of the fragment t and data W(1-b) corresponding to (1-b), transmits the data Wb to a first secret computation device, and transmits data W=(W0, W1) containing the data Wb and the data W(1-b) without specifying the correspondence between b and (1-b) to a second secret computation device. The second secret computation device generates, from the other fragment s of the two fragments obtained by bisecting the first input value mA and a logic circuit function f and the data W, data T concealing the logic circuit function f embedded with the fragment s and capable of obtaining an operation result f(mA) with the data Wb as input, and transmits the data T to the first secret computation device. The first secret computation device calculates the operation result f(mA) with the data T and the data Wb as inputs. COPYRIGHT: (C)2009,JPO&INPIT
|
