Patent ID: 11080393

Abstract:
This invention is directed to a secure computation apparatus that protects a security against the malicious behavior while maintaining a processing amount small. The secure computation apparatus comprises a first multiplication triplet column generator that generates first multiplication triplet columns formed from a set of two secure distribution random numbers and a distribution value of a multiplication result obtained by performing secure multiplication of the two secure distribution random numbers, a second multiplication triplet column generator that generates second multiplication triplet columns formed from a set of two secure distribution input numbers and a distribution value of a multiplication result obtained by performing secure multiplication of the two secure distribution input numbers, in each multiplication process of semi-honest safe secure multiplication, and a multiplication validity verifier that generates a set of first multiplication triplets and second multiplication triplets by randomly selecting, from the first multiplication triplet columns, a number of rows of the first multiplication triplets as many as a number of rows of the second multiplication triplets in the second multiplication triplet columns, and verifies validity of secure multiplication based on the set of the first and second multiplication triplets.