Patent ID: 11515998

Abstract:
A secure computation device obtains concealed information {M(i0, . . . , iS−1)} of a table M(i0, . . . , iS−1) having one-variable function values as its members. It is to be noted that M(ib, 0, . . . , ib, S−1) generated by substituting counter values ib, 0, . . . , ib, S−1 into the table M(i0, . . . , iS−1) represents a matrix Mb, γ, μ, which is any one of Mb, 2, 1, . . . , Mb, 3, 2. The secure computation device obtains concealed information {Mb, γ, μ} by secure computation using concealed information {ib, 0}, . . . , {ib, S−1} and the concealed information {M(i0, . . . , iS−1)}, and obtains concealed information {Mb, Γ, MU} of a matrix Mb, Γ, MU, which is obtained by execution of a remaining process including those processes among a process Pj, 1, a process Pj, 2, a process Pj, 3, and a process Pj, 4, that are performed subsequent to a process Pγ, μ.