Secret sharing system, apparatus, and storage medium

1. A secret sharing system comprising:

a secret sharing apparatus configured to execute a (k, n) threshold secret sharing scheme (for 2≦k≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from not less than k pieces of share information (k is an arbitrary threshold) of the plurality of pieces of divided share information;

a plurality of first storage server apparatuses, each of which comprises share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation; and

at least one second storage server apparatus which comprises share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing,

the secret sharing apparatus comprising:

a storing unit configured to temporarily store the secret information;

a unit configured to accept inputs of the threshold k and the number n of shares according to a user operation;

a unit configured to divide the secret information in the storing unit into n pieces of share information based on the accepted threshold k and the accepted number n of shares, and the (k, n) threshold secret sharing scheme;

a unit configured to select not less than n−(k−1) pieces of share information of the n pieces of divided share information;

a unit configured to individually distribute the pieces of selected share information to the first storage server apparatuses;

a unit configured to individually distribute pieces of share information excluding not less than n−(k−1) pieces of selected share information of the n pieces of divided share information to the second storage server apparatus; and

a unit configured to transmit a delete request, which includes name information indicating a name of share information distributed to each of the first storage server apparatuses and requests to delete that share information and copy information as a copy of the share information to the respective first storage server apparatuses according to a user operation, and

each of the first storage server apparatuses comprising:

storage position information storing unit configured to store the name information and storage position information individually indicating storage locations of share information and copy information indicated by the name information in association with each other;

a unit configured to read out storage position information associated with the name information from the storage position information storing unit based on name information in the received delete request, when a delete request transmitted from the secret sharing apparatus is received; and

a unit configured to delete all of share information and copy information indicated by the name information in the received delete request based on the readout storage position information.

2. A secret sharing system comprising:

a secret sharing apparatus configured to execute a (k, n) threshold secret sharing scheme (for 2≦k≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from not less than k pieces of share information (k is an arbitrary threshold) of the plurality of pieces of divided share information;

a plurality of first storage server apparatuses, each of which comprises share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation; and

at least one second storage server apparatus which comprises share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing,

the secret sharing apparatus comprising:

a storing unit configured to temporarily store the secret information;

a storage position information storing unit configured to store name information indicating a name of share information distributed to each of the first storage server apparatuses, and storage position information individually indicating storage locations, where share information indicated by the name information and copy information as a copy of the share information are stored, in association with each other;

a unit configured to accept inputs of the threshold k and the number n of shares according to a user operation;

a unit configured to divide the secret information in the storing unit into n pieces of share information based on the accepted threshold k and the accepted number n of shares, and the (k, n) threshold secret sharing scheme;

a unit configured to select not less than n−(k−1) pieces of share information of the n pieces of divided share information;

a unit configured to individually distribute the pieces of selected share information to the first storage server apparatuses;

a unit configured to individually distribute pieces of share information excluding not less than n−(k−1) pieces of selected share information of the n pieces of divided share information to the second storage server apparatus; and

a unit configured to read out the stored name information and storage position information associated with the name information according to a user operation, and transmit a delete request, which includes the readout name information and storage position information and requests to delete the distributed share information and copy information of the share information to the respective first storage server apparatuses, and

each of the first storage server apparatuses comprising:

a unit configured to delete all of share information and copy information indicated by the name information in the received delete request based on the storage position information in a received delete request, when a delete request transmitted from the secret sharing apparatus is received.

3. A secret sharing apparatus which is configured to communicate with a plurality of first storage server apparatuses, each of which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation, and at least one second storage server apparatus which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing, and which apparatus is configured to execute a (k, n) threshold secret sharing scheme (for 2≦k≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from not less than k pieces of share information (k is an arbitrary threshold) of the plurality of pieces of divided share information,

the secret sharing apparatus comprising:

a storing unit configured to temporarily store the secret information;

a storage position information storing unit configured to store name information indicating a name of share information distributed to each of the first storage server apparatuses, and storage position information individually indicating storage locations, where share information indicated by the name information and copy information as a copy of the share information are stored, in association with each other;

a unit configured to accept inputs of the threshold k and the number n of shares according to a user operation;

a unit configured to divide the secret information in the storing unit into n pieces of share information based on the accepted threshold k and the accepted number n of shares, and the (k, n) threshold secret sharing scheme;

a unit configured to select not less than n−(k−1) pieces of share information of the n pieces of divided share information;

a unit configured to individually distribute the pieces of selected share information to the first storage server apparatuses;

a unit configured to individually distribute pieces of share information excluding not less than n−(k−1) pieces of selected share information of the n pieces of divided share information to the second storage server apparatus; and

a unit configured to read out the stored name information and storage position information associated with the name information according to a user operation, and transmit a delete request, which includes the readout name information and storage position information and requests to delete the distributed share information and copy information of the share information to the respective first storage server apparatuses.

4. A non-transitory computer-readable storage medium storing a program executed by a processor of a secret sharing apparatus, the secret sharing apparatus which is configured to communicate with a plurality of first storage server apparatuses, each of which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation, and at least one second storage server apparatus which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing, and which apparatus is configured to execute a (k, n) threshold secret sharing scheme (for 2≦k≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from not less than k pieces of share information (k is an arbitrary threshold) of the plurality of pieces of divided share information, and comprises a storing unit and a storage position information storing unit,

the program comprising:

a first program code for controlling the processor to execute processing for temporarily writing the secret information in the storing unit;

a second program code for controlling the processor to execute processing for writing, in the storage position information storing unit, name information indicating a name of share information distributed to each of the first storage server apparatuses, and storage position information individually indicating storage locations, where share information indicated by the name information and copy information as a copy of the share information are stored, in association with each other;

a third program code for controlling the processor to execute processing for accepting inputs of the threshold k and the number n of shares according to a user operation;

a fourth program code for controlling the processor to execute processing for dividing the secret information in the storing unit into n pieces of share information based on the accepted threshold k and the accepted number n of shares, and the (k, n) threshold secret sharing scheme;

a fifth program code for controlling the processor to execute processing for selecting not less than n−(k−1) pieces of share information of the n pieces of divided share information;

a sixth program code for controlling the processor to execute processing for individually distributing the pieces of selected share information to the first storage server apparatuses;

a seventh program code for controlling the processor to execute processing for individually distributing pieces of share information excluding not less than n−(k−1) pieces of selected share information of the n pieces of divided share information to the second storage server apparatus; and

an eighth program code for controlling the processor to execute processing for reading out the stored name information and storage position information associated with the name information according to a user operation, and transmitting a delete request, which includes the readout name information and storage position information and requests to delete the distributed share information and copy information of the share information to the respective first storage server apparatuses.

5. A secret sharing system comprising:

a secret sharing apparatus configured to execute an (n, n) secret sharing scheme (for 3≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from all the pieces of divided share information;

a first storage server apparatus, which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation; and

a plurality of second storage server apparatuses, each of which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing,

the secret sharing apparatus comprising:

a storing unit configured to temporarily store the secret information;

a unit configured to accept an input of the number n of shares according to a user operation;

a unit configured to divide the secret information in the storing unit into n pieces of share information based on the accepted number n of shares and the (n, n) secret sharing scheme;

a unit configured to select one piece of share information of the n pieces of divided share information;

a unit configured to distribute the selected share information to the first storage server apparatus;

a unit configured to individually distribute pieces of share information excluding not less than the selected share information of the n pieces of divided share information to the second storage server apparatuses; and

a unit configured to transmit a delete request, which includes name information indicating a name of share information distributed to the first storage server apparatus and requests to delete that share information and copy information as a copy of the share information to the first storage server apparatus, and

the first storage server apparatus comprising:

a storage position information storing unit configured to store the name information and storage position information individually indicating storage locations of share information and copy information indicated by the name information in association with each other;

a unit configured to read out storage position information associated with the name information from the storage position information storing unit based on name information in a received delete request, when a delete request transmitted from the secret sharing apparatus is received; and

a unit configured to delete all of share information and copy information indicated by the name information in the received delete request based on the readout storage position information.

6. A secret sharing system comprising:

a secret sharing apparatus configured to execute an (n, n) secret sharing scheme (for 3≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from all the pieces of divided share information;

a first storage server apparatus, which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation; and

a plurality of second storage server apparatuses, each of which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing,

the secret sharing apparatus comprising:

a storing unit configured to temporarily store the secret information;

a storage position information storing unit configured to store name information indicating a name of share information distributed to the first storage server apparatus, and storage position information individually indicating storage locations, where share information indicated by the name information and copy information as a copy of the share information are stored, in association with each other;

a unit configured to accept an input of the number n of shares according to a user operation;

a unit configured to divide the secret information in the storing unit into n pieces of share information based on the accepted number n of shares and the (n, n) secret sharing scheme;

a unit which selects one piece of share information of the n pieces of divided share information;

a unit configured to distribute the selected share information to the first storage server apparatus;

a unit configured to individually distribute pieces of share information excluding the selected share information of the n pieces of divided share information to the second storage server apparatuses; and

a unit configured to read out the stored name information and storage position information associated with the name information according to a user operation, and transmit a delete request, which includes the readout name information and storage position information and requests to delete the distributed share information and copy information of the share information to the first storage server apparatus, and

the first storage server apparatus comprising:

a unit configured to delete all of share information and copy information indicated by the name information in a received delete request based on the storage position information in the received delete request, when a delete request transmitted from the secret sharing apparatus is received.

7. A secret sharing apparatus, which is configured to communicate with a first storage server apparatus, which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation, and a plurality of second storage server apparatuses, each of which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing, and which apparatus is configured to execute an (n, n) secret sharing scheme (for 3≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from all the pieces of divided share information,

the secret sharing apparatus comprising:

a storing unit configured to temporarily store the secret information;

a storage position information storing unit configured to store name information indicating a name of share information distributed to the first storage server apparatus, and storage position information individually indicating storage locations, where share information indicated by the name information and copy information as a copy of the share information are stored, in association with each other;

a unit configured to accept an input of the number n of shares according to a user operation;

a unit configured to divide the secret information in the storing unit into n pieces of share information based on the accepted number n of shares and the (n, n) secret sharing scheme;

a unit configured to select one piece of share information of the n pieces of divided share information;

a unit configured to distribute the selected share information to the first storage server apparatus;

a unit configured to individually distribute pieces of share information excluding the selected share information of the n pieces of divided share information to the second storage server apparatuses; and

a unit configured to read out the stored name information and storage position information associated with the name information according to a user operation, and transmit a delete request, which includes the readout name information and storage position information and requests to delete the distributed share information and copy information of the share information to the first storage server apparatus.

8. A non-transitory computer-readable storage medium storing a program executed by a processor of a secret sharing apparatus, which is configured to communicate with a first storage server apparatus, which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to control copy processing of the stored share information according to a user operation, and a plurality of second storage server apparatuses, each of which comprises a share information storing unit configured to individually store share information distributed from the secret sharing apparatus, and is configured to execute copy processing of the stored share information at a predetermined timing, and which apparatus is configured to execute an (n, n) secret sharing scheme (for 3≦n) which divides secret information into pieces of share information as many as the number n of shares, and is configured to reconstruct the secret information from all the pieces of divided share information, and comprises a storing unit and a position information storing unit,

the program comprising:

a ninth program code for controlling the processor to execute processing for temporarily writing the secret information in the storing unit;

a tenth program code for controlling the processor to execute processing for writing, in the storage position information storing unit, name information indicating a name of share information distributed to the first storage server apparatus, and storage position information individually indicating storage locations, where share information indicated by the name information and copy information as a copy of the share information are stored, in association with each other;

an eleventh program code for controlling the processor to execute processing for accepting an input of the number n of shares according to a user operation;

a twelfth program code for controlling the processor to execute processing for dividing the secret information in the storing unit into n pieces of share information based on the accepted number n of shares and the (n, n) secret sharing scheme;

a thirteenth program code for controlling the processor to execute processing for selecting one piece of share information of the n pieces of divided share information;

a fourteenth program code for controlling the processor to execute processing for distributing the selected share information to the first storage server apparatus;

a fifteenth program code for controlling the processor to execute processing for individually distributing pieces of share information excluding the selected share information of the n pieces of divided share information to the second storage server apparatuses; and

a sixteenth program code for controlling the processor to execute processing for reading out the stored name information and storage position information associated with the name information according to a user operation, and transmitting a delete request, which includes the readout name information and storage position information and requests to delete the distributed share information and copy information of the share information to the first storage server apparatus.