A secret sharing system, comprising: a sharing apparatus; Σ α=1 L h(α) share management apparatuses PA(α, h(α)), where α = 1,..., L, L ≥ 2, h(α) = 1,..., H(α), H(α) ≥ 2; and an acquisition apparatus, characterized in that a set of the Σ a=1 L h(α) share management apparatuses PA(α, h(α)) has subsets SUB(α), Ψ denotes an integer equal to or greater than 1, ψ denotes an integer equal to or greater than 0 and equal to or smaller than Ψ, ψ = 0,..., Ψ, n(ψ) denotes an integer equal to or greater than 1, ζ(ψ) denotes an integer equal to or greater than 0, a generator of a cyclic group G 2 is denoted by g 2, basis vectors b i *(ψ) = (θ(ψ, i, 1) · g 2,..., θ(ψ, i, n(ψ)+ζ(ψ)) · g 2) ∈ G 2 n(ψ)+ζ(ψ) are n(ψ)+ζ(ψ)-dimensional basis vectors for θ(ψ, i, β), where i = 1,..., n(ψ)+ζ(ψ), β = 1,..., n(ψ) + ζ(ψ), n(ψ) ≥ 1, and elements of the basis vectors b i *(ψ) are n(ψ)+ζ(ψ) elements of the cyclic group G 2, the sharing apparatus includes: a secret sharing unit adapted to independently share a value corresponding to each element θ(ψ, i, β) · g 2 of the basis vectors b i *(ψ) among each subset SUB(α) consisting of H(α) share management apparatuses PA(α, 1),..., PA(α, H(α)) according to a predetermined secret sharing scheme to generate share information SH(ψ, i, β, α, h(α)) corresponding to each element θ(ψ, i, β) · g 2, each of the share management apparatuses PA(α, h(α)) includes: a share secret value generation unit adapted to generate share secret values DSH(ψ, α, h(α)) by performing a common calculation common in the subset SUB(α) on common information shared in the subset SUB(α) and the share information SH(ψ, i, β, α, h(α)), where h(α) = 1,..., H(α), and the acquisition apparatus includes: a reconstruction unit adapted to generate reconstructed secret values SUBSK(ψ, α) for each subset SUB(α) from a plurality of the share secret values DSH(ψ, α, h(α)) for the subset SUB(α) by performing reconstruction processing for the subset SUB(α) according to the secret sharing scheme; and a synthesis unit adapted to generate generation information D*(ψ) from the reconstructed secret values SUBSK(ψ, α). a sharing apparatus; Σ α=1 L h(α) share management apparatuses PA(α, h(α)), where α = 1,..., L, L ≥ 2, h(α) = 1,..., H(α), H(α) ≥ 2; and an acquisition apparatus, characterized in that a set of the Σ a=1 L h(α) share management apparatuses PA(α, h(α)) has subsets SUB(α), Ψ denotes an integer equal to or greater than 1, ψ denotes an integer equal to or greater than 0 and equal to or smaller than Ψ, ψ = 0,..., Ψ, n(ψ) denotes an integer equal to or greater than 1, ζ(ψ) denotes an integer equal to or greater than 0, a generator of a cyclic group G 2 is denoted by g 2, basis vectors b i *(ψ) = (θ(ψ, i, 1) · g 2,..., θ(ψ, i, n(ψ)+ζ(ψ)) · g 2) ∈ G 2 n(ψ)+ζ(ψ) are n(ψ)+ζ(ψ)-dimensional basis vectors for θ(ψ, i, β), where i = 1,..., n(ψ)+ζ(ψ), β = 1,..., n(ψ) + ζ(ψ), n(ψ) ≥ 1, and elements of the basis vectors b i *(ψ) are n(ψ)+ζ(ψ) elements of the cyclic group G 2, a secret sharing unit adapted to independently share a value corresponding to each element θ(ψ, i, β) · g 2 of the basis vectors b i *(ψ) among each subset SUB(α) consisting of H(α) share management apparatuses PA(α, 1),..., PA(α, H(α)) according to a predetermined secret sharing scheme to generate share information SH(ψ, i, β, α, h(α)) corresponding to each element θ(ψ, i, β) · g 2, each of the share management apparatuses PA(α, h(α)) includes: a share secret value generation unit adapted to generate share secret values DSH(ψ, α, h(α)) by performing a common calculation common in the subset SUB(α) on common information shared in the subset SUB(α) and the share information SH(ψ, i, β, α, h(α)), where h(α) = 1,..., H(α), and a share secret value generation unit adapted to generate share secret values DSH(ψ, α, h(α)) by performing a common calculation common in the subset SUB(α) on common information shared in the subset SUB(α) and the share information SH(ψ, i, β, α, h(α)), where h(α) = 1,..., H(α), and a reconstruction unit adapted to generate reconstructed secret values SUBSK(ψ, α) for each subset SUB(α) from a plurality of the share secret values DSH(ψ, α, h(α)) for the subset SUB(α) by performing reconstruction processing for the subset SUB(α) according to the secret sharing scheme; and a synthesis unit adapted to generate generation information D*(ψ) from the reconstructed secret values SUBSK(ψ, α).