A secret sharing system comprising a data distribution apparatus and N distributed data transform apparatuses, the data distribution apparatus comprising: a division part adapted to divide information a = (a 1,..., a L) ∈ R L into N shares f a (n) by using an arbitrary homomorphic ramp secret sharing scheme S1; each of the distributed data transform apparatuses comprising: a random number selecting part adapted to generated a random number vector r i = (r i,1,..., r i,L) whose elements are L random numbers r i,1,..., r i,L ∈ R; a first random number division part adapted to divide the random number vector r i into N shares f n (n) by using the ramp secret sharing scheme S1; a second random number division part adapted to divide each of the random numbers r i1,..., r iL into N shares g ri,1 (n),..., g ri,L (n) by using an arbitrary homomorphic secret sharing scheme S2; a disturbance part adopted to generate a share U i by using a share f a (i) included in the shares f a (n) and K shares f rλ (i); a reconstruction part adapted to reconstruct L pieces of disturbance information c 1,...., c L from K shares U λ by using the ramp secret sharing scheme S1; a redivision part adapted to divide each of the pieces of disturbance information c 1,..., c L into N by using the secret sharing scheme S2 to generate shares g c1 (n),..., g cL (n); and a transform part adapted to generate shares g a1 (i),..., g aL (i) of the information a by using L shares g c1 (i), g cL (i) included in the shares g c1 (n),..., g cL (n), and L × K shares g rλ,1 (i),..., g rλ,L (i); where N, K and L are integers greater than or equal to 2, N ≥ K > L, n = 1,..., N, λ represents K different integers, K is greater than or equal to 1 and less than or equal to N, i is an integer, i ∈ λ, f x (n) represents N shares of x, and R is a ring. a division part adapted to divide information a = (a 1,..., a L) ∈ R L into N shares f a (n) by using an arbitrary homomorphic ramp secret sharing scheme S1; each of the distributed data transform apparatuses comprising: a random number selecting part adapted to generated a random number vector r i = (r i,1,..., r i,L) whose elements are L random numbers r i,1,..., r i,L ∈ R; a first random number division part adapted to divide the random number vector r i into N shares f n (n) by using the ramp secret sharing scheme S1; a second random number division part adapted to divide each of the random numbers r i1,..., r iL into N shares g ri,1 (n),..., g ri,L (n) by using an arbitrary homomorphic secret sharing scheme S2; a disturbance part adopted to generate a share U i by using a share f a (i) included in the shares f a (n) and K shares f rλ (i); a reconstruction part adapted to reconstruct L pieces of disturbance information c 1,...., c L from K shares U λ by using the ramp secret sharing scheme S1; a redivision part adapted to divide each of the pieces of disturbance information c 1,..., c L into N by using the secret sharing scheme S2 to generate shares g c1 (n),..., g cL (n); and a transform part adapted to generate shares g a1 (i),..., g aL (i) of the information a by using L shares g c1 (i), g cL (i) included in the shares g c1 (n),..., g cL (n), and L × K shares g rλ,1 (i),..., g rλ,L (i); where N, K and L are integers greater than or equal to 2, N ≥ K > L, n = 1,..., N, λ represents K different integers, K is greater than or equal to 1 and less than or equal to N, i is an integer, i ∈ λ, f x (n) represents N shares of x, and R is a ring. a random number selecting part adapted to generated a random number vector r i = (r i,1,..., r i,L) whose elements are L random numbers r i,1,..., r i,L ∈ R; a first random number division part adapted to divide the random number vector r i into N shares f n (n) by using the ramp secret sharing scheme S1; a second random number division part adapted to divide each of the random numbers r i1,..., r iL into N shares g ri,1 (n),..., g ri,L (n) by using an arbitrary homomorphic secret sharing scheme S2; a disturbance part adopted to generate a share U i by using a share f a (i) included in the shares f a (n) and K shares f rλ (i); a reconstruction part adapted to reconstruct L pieces of disturbance information c 1,...., c L from K shares U λ by using the ramp secret sharing scheme S1; a redivision part adapted to divide each of the pieces of disturbance information c 1,..., c L into N by using the secret sharing scheme S2 to generate shares g c1 (n),..., g cL (n); and a transform part adapted to generate shares g a1 (i),..., g aL (i) of the information a by using L shares g c1 (i), g cL (i) included in the shares g c1 (n),..., g cL (n), and L × K shares g rλ,1 (i),..., g rλ,L (i); where N, K and L are integers greater than or equal to 2, N ≥ K > L, n = 1,..., N, λ represents K different integers, K is greater than or equal to 1 and less than or equal to N, i is an integer, i ∈ λ, f x (n) represents N shares of x, and R is a ring.