Secret information management apparatus and secret information management system

1. A secret information management apparatus based on a (k, n) threshold secret sharing scheme having a threshold value k and a share number n, the apparatus comprising:

a data receiving device which receives data, distributed manager IDs for the share number n, the threshold value k and a user ID;

a public key list storage device which stores a public key list, the public key list including n or more sets of distributed manager IDs, distributed manager public keys and distributed manager address information and also including the user ID and a user public key corresponding to the user ID;

a data key creation unit which creates a data key using random numbers;

an encrypted data outputting unit which encrypts the data using the data key and outputs encrypted data;

an encrypted data key creation unit which searches the public key list storage device for the user public key corresponding to the received user ID, encrypts the data key using the user public key, and outputs an encrypted data key;

a distributed key creation unit which distributes the data key created by the data key creation unit using the (k, n) threshold secret sharing scheme to create n distributed keys;

an encrypted distributed key creation unit which reads, from the public key list storage device, distributed manager public keys corresponding to n distributed manager IDs received by the data receiving device, encrypts the n distributed keys using the respective distributed manager public keys, and outputs n encrypted distributed keys;

an encrypted data storage unit which stores the encrypted data, the encrypted data key and the n encrypted distributed keys;

a decryption method judging unit which judges whether decryption method information is first decryption method information or second decryption method information when a request to decrypt the encrypted data is received together with the decryption method information;

an encrypted data key transmission unit which transmits the encrypted data key to a transmission source of the decryption method information with a request to decrypt the encrypted data key when the decryption method information is the first decryption method information;

a first decryption unit which decrypts the encrypted data using the data key decrypted by a user secret key corresponding to the user public key to obtain the data in response to the request to decrypt the encrypted data key when receiving the data key from the transmission source of the decryption method information;

an encrypted distributed key transmission unit which transmits the n encrypted distributed keys in the encrypted data storage unit to the respective distributed manager address information in the public key list when the decryption method information is the second decryption method information;

a data key restore unit which restores the data key using the (k, n) threshold secret sharing scheme when the encrypted distributed keys are individually decrypted by distributed manager secret keys at transmission destinations of the encrypted distributed keys and the distributed keys are received from k transmission destinations; and

a second decryption unit which decrypts the encrypted data using the data key to obtain the data.

2. A secret information management system, comprising:

a user terminal to input data; and

a secret information management apparatus using a (k, n) threshold secret sharing scheme having a threshold value k and a share number n to store encrypted data obtained by encrypting the data,

the secret information management apparatus comprising:

a data receiving unit which receives the data, distributed manager IDs for the share number n, the threshold value k and a user ID;

a public key list storage unit which stores a public key list, the public key list including n or more sets of distributed manager IDs, distributed manager public keys and distributed manager address information and also including the user ID and a user public key corresponding to the user ID;

a data key creation unit which creates a data key using random numbers;

an encrypted data outputting unit which encrypts the data using the data key and outputs encrypted data;

an encrypted data key creation unit which searches the public key list storage unit for the user public key corresponding to the received user ID, encrypts the data key using the user public key, and outputs an encrypted data key;

a distributed key creation unit which secretly distributes the data key created by the data key creation unit using the (k, n) threshold secret sharing scheme to create n distributed keys;

an encrypted distributed key creation unit which reads, from the public key list storage unit, distributed manager public keys corresponding to n distributed manager IDs received by the data receiving unit, encrypts the n distributed keys using the respective distributed manager public keys, and outputs n encrypted distributed keys;

an encrypted data storage unit which stores the encrypted data, the encrypted data key and the n encrypted distributed keys;

a decryption method judging unit which judges whether decryption method information is first decryption method information or second decryption method information when a request to decrypt the encrypted data is received together with the decryption method information from the user terminal;

an encrypted data key transmission unit which transmits the encrypted data key to the user terminal with a request to decrypt the encrypted data key when the decryption method information is the first decryption method information;

a data key receiving unit which receives data keys decrypted by a user secret key corresponding to the user public key from the user terminal in response to the request to decrypt the encrypted data;

a first decryption unit which decrypts the encrypted data using the data key received by the data key receiving unit to obtain the data;

an encrypted distributed key transmission unit which transmits the n encrypted distributed keys in the encrypted data storage unit to the respective distributed manager address information included in the public key list when the decryption method information is the second decryption method information;

a data key restore unit which restores the data key using the (k, n) threshold secret sharing scheme when the encrypted distributed keys are individually decrypted by distributed manager secret keys at transmission destinations of the encrypted distributed keys and the distributed keys are received from k transmission destinations; and

a second decryption unit which decrypts the encrypted data using the data key to obtain the data,

the user terminal including:

a data transmission unit which transmits the data, the distributed manager IDs for the share number n, the threshold value k and the user ID to the secret information management apparatus;

a decryption request transmitting unit which transmits the request to decrypt the encrypted data to the secret information management apparatus together with the decryption method information; and

a data key transmitting unit which decrypts the encrypted data key by the user secret key and transmits a data key to the secret information management apparatus when receiving the encrypted data key and the request to decrypt the encrypted data from the secret information management apparatus.

3. A secret information management system, comprising:

a user terminal to input data; and

a secret information management apparatus using a (k, n) threshold secret sharing scheme having a threshold value k and a share number n to store encrypted data obtained by encrypting the data,

the secret information management apparatus comprising:

an encrypted data receiving unit which receives the encrypted data, a data key, distributed manager IDs for the share number n, the threshold value k and a user ID;

a public key list storage unit which stores a public key list, the public key list including n or more sets of distributed manager IDs, distributed manager public keys and distributed manager address information and also including the user ID and a user public key corresponding to the user ID;

an encrypted data key creation unit which searches the public key list storage unit for the user public key corresponding to the received user ID, encrypts the data key using the user public key, and outputs an encrypted data key;

a distributed key creation unit which secretly distributes the data key created by the data key creation unit using the (k, n) threshold secret sharing scheme and creates n distributed keys;

an encrypted distributed key creation unit which reads, from the public key list storage unit, distributed manager public keys associated with n distributed manager IDs received by the encrypted data receiving unit, individually encrypts the n distributed keys using the n distributed manager public keys, and outputs n encrypted distributed keys; and

an encrypted data storage unit which stores the encrypted data, the encrypted data key and the n encrypted distributed keys;

the user terminal including:

a unit to input the data, the distributed manager IDs for the share number n, the threshold value k and the user ID;

a data key creation unit which creates a data key using random numbers;

an encrypted data outputting unit which encrypts the data using the data key and outputs encrypted data; and

an encrypted data transmission unit which transmits the encrypted data, the data key, the distributed manager IDs for the number n and the threshold value k to the secret information management apparatus.

4. The secret information management system according to claim 3 , wherein the secret information management apparatus further comprises:

a key management device having the encrypted data receiving unit, the public key list storage unit, the encrypted data key creation unit, the distributed key creation unit and the encrypted distributed key creation unit; and

an encrypted data management device having the encrypted data storage unit.

5. The secret information management system according to claim 4 , wherein the key management device further comprises:

a unit which transmits the encrypted data key and the n encrypted distributed keys to the user terminal, and

the user terminal further comprises:

a unit which stores the encrypted data, the encrypted data key and the n encrypted distributed keys in association with each other.

6. A secret information management apparatus based on a (k, n) threshold secret sharing scheme having a threshold value k and a share number n, the apparatus comprising:

a data receiving device which receives data and a user ID;

a public key list storage device which stores a public key list in association with the threshold value k, the public key list including n sets of distributed manager IDs, distributed manager public keys and distributed manager address information and also including the user ID and a user public key corresponding to the user ID;

a data key creation unit which creates a data key using random numbers;

an encrypted data outputting unit which encrypts the data using the data key and outputs encrypted data;

a distributed key creation unit which secretly distributes the data key created by the data key creation unit using the (k, n) threshold secret sharing scheme to create n distributed keys;

an encrypted distributed key creation unit which reads n distributed manager public keys in the public key list from the received user ID, encrypts the n distributed keys using the respective distributed manager public keys, and outputs n encrypted distributed keys;

an encrypted data storage unit which stores the encrypted data and the n encrypted distributed keys;

an encrypted distributed key transmission unit which transmits n encrypted distributed keys in the encrypted data storage unit to the respective distributed manager addresses information included in the public key list when a request to decrypt the encrypted data is received;

a data key restore unit which restores the data key using the (k, n) threshold secret sharing scheme when the encrypted distributed keys are individually decrypted by distributed manager secret keys at transmission destinations of the encrypted distributed keys and the distributed keys are received from k transmission destinations; and

a decryption unit which decrypts the encrypted data using the data key to obtain the data.