Method for performing similar-information search while keeping content confidential by encryption

1. A search method for a similar-information search system including a terminal device and a server device that are connected to each other via a network, the server device including a first memory that stores a plurality of reference feature quantities and a second memory that stores a plurality of pieces of reference data each corresponding to one of the plurality of reference feature quantities, the search method comprising:

the server device receiving from the terminal device, a first encrypted feature quantity obtained by encrypting a first feature quantity using a first encryption scheme;

the server device obtaining a second encrypted feature quantity by encrypting, using the first encryption scheme, a first reference feature quantity that is one of the plurality of reference feature quantities stored in the first memory;

the server device receiving from the terminal device, an encrypted similarity value that is information obtained by encrypting, using the first encryption scheme, a similarity value indicating a degree of similarity;

the server device calculating an encrypted distance indicating a degree of similarity between the first encrypted feature quantity and the second encrypted feature quantity, with the first encrypted feature quantity and the second encrypted feature quantity kept encrypted;

the server device determining whether the calculated encrypted distance matches the received encrypted similarity value;

the server device obtaining from the second memory, first reference data that is data corresponding to the first reference feature quantity used in the calculating of the encrypted distance in a case where it is determined in the determining that the calculated encrypted distance matches the received encrypted similarity value;

the server device generating encrypted reference data by encrypting the obtained first reference data using a second encryption scheme; and

the server device transmitting the generated encrypted reference data to the terminal device.

2. The search method according to claim 1 , wherein, in the receiving of the encrypted similarity value, a plurality of encrypted similarity values that are pieces of information obtained by encrypting a plurality of similarity values indicating a plurality of degrees of similarity are received, and

wherein, in the determining, it is determined, for each of the plurality of received encrypted similarity values, whether the calculated encrypted distance matches the received encrypted similarity value.

3. The search method according to claim 1 , wherein the encrypted distance is a Euclidean distance between the first encrypted feature quantity and the second encrypted feature quantity.

4. The search method according to claim 1 , further comprising:

the server device receiving a converted key value that is information obtained by converting a secret key of the terminal device using a certain function,

wherein, in the receiving of the encrypted similarity value, a converted similarity value that is information obtained by converting the similarity value using the certain function is received as the encrypted similarity value, and

wherein, in the determining, a converted distance is generated by decrypting the encrypted distance by using the converted key value and it is determined whether the generated converted distance matches the converted similarity value.

5. The search method according to claim 4 , wherein the certain function is a one-way function.

6. The search method according to claim 1 , further comprising:

the terminal device obtaining data subjected to a similar-information search;

the terminal device calculating the first feature quantity indicating a feature of the obtained data;

the terminal device generating the first encrypted feature quantity by encrypting the calculated first feature quantity using the first encryption scheme;

the terminal device transmitting the generated first encrypted feature quantity to the server device;

the terminal device setting the similarity value indicating a degree of similarity;

the terminal device generating the encrypted similarity value by encrypting the set similarity value using the first encryption scheme;

the terminal device transmitting the generated encrypted similarity value to the server device;

the terminal device receiving the encrypted reference data from the server device; and

the terminal device decrypting the received encrypted reference data by using the second encryption scheme.

7. The search method according to claim 1 , wherein the first encryption scheme is a homomorphic encryption scheme.

8. A server device comprising:

a first memory that stores a plurality of reference feature quantities;

a second memory that stores a plurality of pieces of reference data each corresponding to one of the plurality of reference feature quantities; and

circuitry which, in operation;

receives, from a terminal device, a first encrypted feature quantity obtained by encrypting a first feature quantity using a first encryption scheme;

obtains a second encrypted feature quantity by encrypting, using the first encryption scheme, a first reference feature quantity that is one of the plurality of reference feature quantities stored in the first memory;

receives, from the terminal device, an encrypted similarity value that is information obtained by encrypting, using the first encryption scheme, a similarity value indicating a degree of similarity;

calculates an encrypted distance indicating a degree of similarity between the first encrypted feature quantity and the second encrypted feature quantity, with the first encrypted feature quantity and the second encrypted feature quantity kept encrypted;

determines whether the calculated encrypted distance matches the received encrypted similarity value;

obtains, from the second memory, first reference data that is data corresponding to the first reference feature quantity used in the calculation of the encrypted distance in a case where it is determined in the determination that the calculated encrypted distance matches the received encrypted similarity value;

generates encrypted reference data by encrypting the obtained first reference data using a second encryption scheme; and

transmits the generated encrypted reference data to the terminal device.

9. A similar-information search system comprising a terminal device and a server device connected to each other via a network, the server device comprising:

a first memory that stores a plurality of reference feature quantities;

a second memory that stores a plurality of pieces of reference data each corresponding to one of the plurality of reference feature quantities; and

circuitry which, in operation;

receives, from the terminal device, a first encrypted feature quantity obtained by encrypting a first feature quantity using a first encryption scheme;

obtains a second encrypted feature quantity by encrypting, using the first encryption scheme, a first reference feature quantity that is one of the plurality of reference feature quantities stored in the first memory;

receives, from the terminal device, an encrypted similarity value that is information obtained by encrypting, using the first encryption scheme, a similarity value indicating a degree of similarity;

calculates an encrypted distance indicating a degree of similarity between the first encrypted feature quantity and the second encrypted feature quantity, with the first encrypted feature quantity and the second encrypted feature quantity kept encrypted;

determines whether the calculated encrypted distance matches the received encrypted similarity value;

obtains, from the second memory, first reference data that is data corresponding to the first reference feature quantity used in the calculation of the encrypted distance in a case where it is determined in the determination that the calculated encrypted distance matches the received encrypted similarity value;

generates encrypted reference data by encrypting the obtained first reference data using a second encryption scheme; and

transmits the generated encrypted reference data to the terminal device.