SECRET NOISE GENERATION SYSTEM, SECRET NOISE GENERATION METHOD AND PROGRAM
A secret noise generation system according to one aspect of the present disclosure includes: a first terminal; and one or more second terminals, wherein the first terminal includes a transmission unit configured to transmit a first table having secret values as elements to each of the second terminals, and each of the second terminals includes a noise calculation unit configured to calculate a sum of n secret values selected from the first table as a secret noise by using secure computation that allows addition of secret values, where n is an integer not less than 2.
1 . A secret noise generation system comprising:
a first terminal; and
one or more second terminals, wherein
the first terminal includes
a first processor, and
a first memory storing first program instructions that cause the first processor to transmit a first table having secret values as elements to each of the second terminals, and
each of the second terminals includes
a second processor, and
a second memory storing second program instructions that cause the second processor to calculate a sum of n secret values selected from the first table as a secret noise by using secure computation that allows addition of secret values, where n is an integer not less than 2.
2 . The secret noise generation system according to claim 1 , wherein the first program instructions cause the first processor to:
create a second table having values according to a predetermined distribution as elements; and
create the first table by shuffling the elements of the second table and then encrypting the shuffled elements of the second table.
3 . The secret noise generation system according to claim 1 , wherein the second program instructions cause the second processor to use the secure computation to calculate the sum of n secret values selected uniformly at random from the first table as the secret noise.
4 . The secret noise generation system according to claim 1 , wherein the secure computation is additive homomorphic encryption or secure computation based on additive secret sharing.
5 . A secret noise generation method used for a secret noise generation system including a first terminal and one or more second terminals, the method comprising:
transmitting, by the first terminal, a first table having secret values as elements to each of the second terminals; and
calculating, by each of the second terminals, a sum of n secret values selected from the first table as a secret noise by using secure computation that allows addition of secret values, where n is an integer not less than 2 .
6 . A non-transitory computer-readable recording medium storing a program for causing a computer to perform the secret noise generation method of claim 5 .