WO2006114841A1 - Information processing method and information processing system - Google Patents

Abstract

An information processing method and an information processing system include: a step for generating pseudo-random number data PD having the same data amount as secret data D from random number data R; a step for calculating exclusive OR between the pseudo-random number data PD and the secret data D and generating data XPD; a step for generation function data FD having the same data amount as the random number data R from the data XPD by using a predetermined function; a step for calculating exclusive OR between the random number data R and the function data FD and generating random data XR; and a step for concatenating the data XPD and the random number data XR and generating concatenated data CD.

Description

 Specification

 Information processing method and information processing system

 Technical field

 [0001] The present invention relates to an information processing method and an information processing system.

 Background art

 [0002] When electronic information is transmitted / received using an open network, or when electronic information is stored in a predetermined storage device, the electronic information is subjected to encryption processing and the like (safety of electronic information). It is known how to ensure confidentiality.

[0003] As an example of this encryption process, an encryption process using a Noh and a Shush function is known.

[0004] The following (1), (2), and (3) can be cited as features of this hash function.

 (1) Using electronic information as input, output a fixed-length hash value.

 (2) —Because it is a function of directionality, the original data cannot be restored.

(3) If different data is input, the probability that the hash value will be the same is low, so it can be checked whether it has been altered during communication!

 [0005] Due to these characteristics, the Noh and Shush functions are widely used for encryption, error detection, falsification detection, and the like (for example, JP-A-2005-32130).

 [0006] The following is known as an information processing method using this hash function.

 FIG. 7 is a block diagram showing a conventional information processing method. This information processing method (encryption method) is the AONT (All Or Nothing Transform) method (reference: V. Boyko, "On the security properties of OAEP as an all-or-nothing transform, Advances in

 Cryptology-CRYPTO '99, Lecture Notes in Computer Science, vol. Lb (3, pp.503-518, 1999.)

 [0008] In this encryption method, if electronic information is D, random number data is R, hash functions are G, and H,

 X = GR (+) D (where (+) indicates exclusive OR)

Y = H (X) (+) R = H (GR (+) D) (+) R It is represented by

 [0009] The X and Y are combined by a predetermined method to create encrypted data for transfer.

[0010] This makes it possible to create encrypted data that cannot be easily decrypted by a third party.

 [0011] However, it is not uncommon for electronic information D, which is generally encrypted, to have a data capacity of more than a few bytes. On the other hand, the prepared random number data R is generally less than lk bytes. In other words, the electronic information D is almost many times larger than the random number data R. In this case, the encryption process needs to generate a large output from a small input. However, due to the feature (1) described above, the output value of a single process is a fixed length, so a large number of times (for example, 1M bytes of data, When the hash function is 160 bits, it is necessary to perform hash processing (6500 times or more). Therefore, there may be a problem that the processing speed is slow. Such a problem becomes conspicuous when the electronic information D has a large amount of data such as still image data or moving image data.

 Disclosure of the invention

 [0012] An object of the present invention is to provide an information processing method and an information processing system capable of speeding up processing without reducing safety (data confidentiality).

 [0013] In order to achieve the above object, the information processing method of the present invention includes generating pseudo-random data having the same data amount as the original data from random data;

 Calculating an exclusive OR of the pseudorandom data and the original data to generate first XOR data;

 Generating function data having the same amount of data as the first XOR data force random number data using a predetermined function;

 Calculating an exclusive OR of the random number data and the function data to generate second XOR data;

 And a step of combining the first XOR data and the second XOR data to generate combined data.

[0014] Thereby, it is possible to speed up the processing without reducing the safety. [0015] Furthermore, the information processing method of the present invention preferably includes a step of generating divided data obtained by dividing the combined data into two or more.

[0016] Thereby, safety can be further improved.

 [0017] Further, in the information processing method of the present invention, the step of separating the combined data into first XOR data and second XOR data;

 Generating the first XOR data force function data using a predetermined function;

 Restoring the random number data by calculating an exclusive OR of the second XOR data and the function data;

 Generating the pseudo-random data from the random data;

 Preferably, the method includes a step of calculating an exclusive OR of the random number data and the pseudo random number data to restore the original data.

[0018] Thereby, it is possible to speed up the processing without reducing the safety.

Furthermore, in the information processing method of the present invention, when the divided data capable of restoring the combined data is input among the divided data, the step of restoring the divided data force and the combined data is performed. When,

 Separating the combined data into the first XOR data and the second XOR data;

 Generating the first XOR data force function data using a predetermined function;

 Restoring the random number data by calculating an exclusive OR of the second XOR data and the function data;

 Generating the pseudo-random data from the random data;

 Preferably, the method includes a step of calculating an exclusive OR of the random number data and the pseudo random number data to restore the original data.

[0020] Thereby, safety can be further improved.

[0021] In the information processing method of the present invention, it is preferable that the divided data is distributed data generated using a secret sharing method. [0022] Thereby, safety can be further improved.

 [0023] In the information processing method of the present invention, in the step of generating the combined data, information that can specify a size of one of the first XOR data and the second XOR data that is input is provided. It is preferable to add to the combined data! /.

[0024] Thereby, when separating the combined data into the first XOR data and the second XOR data, the separation can be easily and accurately (reliably) performed.

[0025] In the information processing method of the present invention, in the step of generating the combined data, information that can specify a size of any one of the input first XOR data and the second XOR data is specified. Added to the combined data,

 According to the step of separating the combined data into the first XOR data and the second XOR data, the first XOR data and the second XOR data are separated based on the information! preferable.

 [0026] Thereby, when separating the combined data into the first XOR data and the second XOR data, the separation can be easily and accurately (reliably) performed.

[0027] The information processing method of the present invention includes extracting, from predetermined encrypted data, first XOR data having the same data amount as preset original data and second XOR data other than the first XOR data;

 Generating function data having the same data amount as the second XOR data using a predetermined function;

 Calculating the exclusive OR of the second XOR data and the function data to generate random number data;

 Generating random number data having the same amount of data as the first XOR data;

 And calculating the exclusive OR of the random number data and the pseudo random number data to generate the original data.

[0028] Thereby, it is possible to speed up the processing without reducing the safety.

In the information processing method of the present invention, it is preferable that the pseudo-random number data is generated from the random number data by a single arithmetic process. [0030] Thereby, it is possible to speed up the processing.

 [0031] In the information processing method of the present invention, the pseudo-random number data is AONT (All or Nothing

(Transform) method!

[0032] Thereby, pseudo-random number data with high processing speed and high safety can be generated from the original data.

 [0033] In the information processing method of the present invention, it is preferable that the function is a no-chush function.

[0034] Thereby, a highly secure information processing method can be provided.

[0035] The information processing system of the present invention includes a pseudo random number data generation unit that generates pseudo random number data having the same data amount as the random number data force data,

 A first arithmetic unit that calculates an exclusive OR of the pseudo-random number data and the original data to generate first XOR data;

 A function data generation unit that generates function data having the same data amount as the random number data using the first XOR data force using a predetermined function;

 A second arithmetic unit that calculates an exclusive OR of the random number data and the function data to generate second XOR data;

 And a data combining unit that combines the first XOR data and the second XOR data to generate combined data.

[0036] Thereby, it is possible to speed up the processing without reducing the safety.

[0037] The information processing system of the present invention preferably further includes a data dividing unit that generates divided data obtained by dividing the combined data into two or more.

[0038] Thereby, safety can be further improved.

 [0039] Further, in the information processing system of the present invention, a data separation unit that separates the combined data into the first XOR data and the second XOR data;

 A function data generation unit that generates the function data by using a predetermined function;

 A third arithmetic unit for calculating the exclusive OR of the second XOR data and the function data to restore the random number data;

A pseudo random number data generation unit for generating the pseudo random number data from the random number data; It is preferable to have a fourth arithmetic unit that calculates the exclusive OR of the random number data and the pseudo random number data and restores the original data.

[0040] Thereby, it is possible to speed up the processing without reducing the safety.

Furthermore, in the information processing system of the present invention, when the divided data that can restore the combined data is input among the divided data, data for restoring the combined data from these divided data A restoration unit;

 A data separator that separates the combined data into the first XOR data and the second XOR data;

 A function data generation unit that generates the function data by using a predetermined function;

 A third arithmetic unit for calculating the exclusive OR of the second XOR data and the function data to restore the random number data;

 A pseudo random number data generation unit that generates the pseudo random number data from the random number data; and a fourth arithmetic unit that calculates an exclusive OR of the random number data and the pseudo random number data to restore the original data. Preferred to have.

[0042] Thereby, safety can be further improved.

 [0043] In the information processing system of the present invention, when the data combination unit generates the combination data, the data combination unit specifies a size of one of the first XOR data and the second XOR data to be input. It preferably has a function of adding information to be obtained.

[0044] Thereby, when separating the combined data into the first XOR data and the second XOR data, the separation can be performed easily and accurately (reliably).

[0045] In the information processing system of the present invention, when generating the combined data, the data combining unit specifies a size of one of the first XOR data and the second XOR data that is input. Has the function of adding information

 The data separation unit preferably separates the first XOR data and the second XOR data based on the information.

[0046] Thereby, when separating the combined data into the first XOR data and the second XOR data, the separation can be easily and accurately (reliably) performed. Brief Description of Drawings

 [0047] FIG. 1 is a block diagram showing an embodiment of an information processing system of the present invention.

 FIG. 2 is a block diagram showing a configuration example of a server.

 FIG. 3 is a block diagram showing a configuration example of a client in the embodiment of the present invention.

 FIG. 4 is a diagram showing a configuration example of server hardware in the embodiment of the present invention.

 FIG. 5 is a flowchart showing the operation of the server.

 FIG. 6 is a flowchart showing the operation of the client.

 FIG. 7 is a block diagram showing a conventional information processing method.

 BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, the information processing method and information processing system of the present invention will be described in detail based on preferred embodiments shown in the accompanying drawings.

FIG. 1 is a block diagram showing an embodiment of the information processing system of the present invention.

As shown in FIG. 1, an information processing system 100 according to the present embodiment is used when performing data communication via an open network 30 such as an Internet line, for example, and includes a server 10 and a client 20 and.

FIG. 2 is a block diagram illustrating a configuration example of the server.

 [0052] The server 10 includes a storage unit 11, a pseudo-random number data generation unit 12, a first calculation unit 13, a hash value generation unit 14, a second calculation unit 15, a data combination unit 16, a distributed data A generation unit (data division unit) 17 and an interface unit 18 are included.

[0053] The storage unit 11 includes data to be encrypted (hereinafter referred to as "secret data") D, such as data that needs to be kept secret, and random number data R created by a random number generator (not shown). Store various data.

[0054] Here, "random number" means a number that occurs without any regularity.

[0055] The pseudo random number data generation unit 12 performs pseudo random number processing on the random number data R to generate pseudo randomness, pseudoao-random num. er Noah ~~ Ta PD is generated.

Here, the pseudo-random number processing is a polynomial calculation computer (in this embodiment, a CP described later). U101) is a process that outputs a sequence that cannot be distinguished from a random number, and the number contained in this sequence is called a (cryptographic) pseudorandom number. To explain in more detail, pseudo-random numbers refer to the numbers included in a sequence obtained by deterministic calculations.

 Further, the pseudo random number process is a variable size distributed algorithm, and the number and size of the pseudo random number data to be generated can be arbitrarily set.

[0058] As explained above, pseudo-random numbers are clearly distinguished from simple random numbers.

. In the present invention, the above-described AONT (see FIG. 7) is used, and the hash function in the AONT is used.

G is replaced with the pseudo random number processing.

[0059] When assuming that the mechanism for generating pseudo-random numbers is safe, even if the mechanism is used as an alternative to the hash function G of AONT (see Fig. 7) described above, The safety of AONT is not compromised. This can be proved as follows.

 [0060] By assuming an attacker here and observing the input and output of AONT, the attacker has a means for predicting the expected output from the input or the expected input from the output. If it is assumed that the security of AONT has been compromised by that means, it would be possible to break the process of pseudorandom number generation by having that means. . At this time, a contradiction arises with the assumption that “the mechanism for generating pseudo-random numbers is safe”. Therefore, it is proved that there is no attacker who has the means described above, and that the safety of AONT is not compromised.

 [0061] The first calculation unit 13 and the second calculation unit 15 calculate an exclusive OR (XOR) of input data.

 The hash value generation unit 14 calculates the input data using a predetermined hash function, and generates function data (hash value) FD having the same size as the random number data R.

Here, the “no” and “sh” functions are functions for summarizing a sequence of character strings such as documents and numbers into data of a fixed length (fixed length). In other words, the hash function h (x) is a function that is “complicatively difficult” to find the original value X such that the function value y force is also h (x) = y. [0064] The data combining unit 16 combines a plurality of input data using a predetermined method to generate one combined data CD. Data input to the data combining unit 16 is data XPD and data XR, which will be described later. Further, the data combining unit 16 has a function of specifying the size (length) of one of the input data XPD and data XR and adding this information to the combined data CD as a header HD. Have. In the present embodiment, the header HD indicates information for specifying the size of the data XPD.

 The distributed data generation unit (data division unit) 17 has a function of dividing the input combined data CD into a plurality of pieces (generating a plurality of pieces of divided data) by a predetermined method. In the present embodiment, the distributed data generation unit 17 uses the secret sharing method (a kind of encryption method) for the input combined data CD to distribute the data Sl, S2,..., Sn (where n Is an integer greater than or equal to 2.)

 Here, the secret sharing method is a method of managing one secret information (secret) by distributing it to a plurality of pieces of shared information (shear).

 [0067] Specifically, this secret information is distributed and encoded into n pieces (where n is an integer of 2 or more) of distributed information (shear), and when arbitrary pieces of distributed information are collected, the original information is obtained. Secret information can be restored, but the original secret information cannot be restored even if k 1 or less pieces of distributed information are collected. Also, if you look at each piece of shared information (share), you do not know the partial information of confidential information!

 [0068] At this time, the shared information w (1 = 1, 2,..., N) is the secret information S, the prime number p, and the random number data R.

 Using 0 = 1, 2, ···, k–l), the following k−l order polynomials (1) to (2) can be expressed. At this time, X does not include the same value.

[0069] w = f (x) (i = l, 2, · ·, n) (1)

f (x) = S + r x + rx ² H—— hr x ^k_1 (mod p) (2)

 1 2 k- 1

 Here, mod indicates a remainder.

[0070] The principle of the secret sharing method will be described using these equations as follows.

In equation (1), if y = f (x), the secret information S indicates a y-axis intercept. Since equation (1) is a k−l degree polynomial, when k pieces of distributed information w (1 = 1, 2,..., N) are gathered, the polynomial y = f (x) I want it. However, only k-l pieces of distributed information were collected Then, there are only k−l coordinate points, and the polynomial cannot be obtained uniquely, so there is a possibility of passing through all y-axis intercepts. Therefore, secret information is a part of it.

 [0072] By using the above secret sharing method, partial information leakage due to each divided shared information can be effectively prevented.

 In the present invention, the data division method in the distributed data generation unit (data division unit) 17 is not limited to the method using the secret sharing method described above. For example, the total amount of data is 10,000 bytes. When there is power, from the 1st byte to the Xth byte, X + from the 1st byte to the Yth byte, '', from the Ζth byte to the 10000th byte (however, 1 <Χ <Υ <Ζ <10000), In this way, a method that simply divides the data into 2 or 3 or more may be adopted. In this case, there is an advantage that the time required for processing is shorter than that by the secret sharing method and the total size of the individual divided data is reduced.

 The interface unit 18 transmits / receives various data such as distributed data Sl, S 2,..., Sn to / from the client 20 via the open network 30.

 FIG. 3 is a block diagram illustrating a configuration example of the client.

 [0076] The client 20 includes an interface unit 21, a distributed data restoration unit (divided data combining unit) 22, a hash value generation unit 24, a third calculation unit 25, a pseudo random number data generation unit 26, and a fourth calculation. A unit 27 and a storage unit 28.

 [0077] The interface unit 21 transmits and receives various data such as distributed data Sl, S2, ..., Sn to and from the interface unit 18 of the server 10 via the open network 30.

[0078] The distributed data restoration unit 22 receives the number of reconstructable pieces of distributed data Sl, S2, ···, Sn, and inputs the combined data CD (header HD) from them. Restore). Here, there are cases where the combined data CD can be restored even if not all of the distributed data Sl, S2,.

 [0079] The data separation unit 23 obtains a header from the combined data CD obtained by the distributed data restoration unit 22.

Data XPD and data XR are separated based on HD information.

[0080] The hash value generation unit 24 corresponds to the hash function of the hash value generation unit 14. A function is provided, and an operation is performed on input data using this hash function.

 [0081] The third calculation unit 25 and the fourth calculation unit 27 calculate an exclusive OR (XOR) of the input data.

 The pseudo random number data generation unit 26 performs the same process as the pseudo random number data generation unit 12 on the input function data FD to restore the secret data D.

The storage unit 28 stores various types of input data and programs necessary for various types of data processing, such as a program including an algorithm that can restore each distributed data to the combined data CD.

 FIG. 4 is a diagram illustrating an example of a hardware configuration of a server used in the present embodiment.

[0085] The server 10 includes a CPU (Central Processing Unit) 101 and a ROM (Read Only Memory) 10

2, RAM (Random Access Memory) 103, HDD (Hard Disk Drive) 104, l / F (

Interface) 105, graphic device 106, input device 107, bus 108 and monitor (display device) 111!

Here, the CPU 101 executes various arithmetic processes according to the program stored in the HDD 104 and controls each unit of the server 10.

The ROM 102 stores a basic program executed by the CPU 101 and the like.

The RAM 103 temporarily stores at least a part of an OS (Operating System) program application program to be executed by the CPU 101. The RAM 103 stores various data necessary for processing by the CPU 101. The HDD 104 stores an OS and application programs.

[0089] The IZF 105 changes the input format of data input from the input device 107 and inputs it, and transmits and receives data to and from the network 30 according to a predetermined protocol.

A monitor 111 is connected to the graphic device 106. Graphics device 106

An image is displayed on the screen of the monitor 111 according to a command from the CPU 101.

The input device 107 is composed of, for example, a keyboard and a mouse, and generates and inputs data corresponding to a user operation.

The processing functions of the present embodiment can be realized with the hardware configuration as described above. In addition, FIG. 4 shows a hardware configuration example of the server 10 hardware 20 Can be realized with the same hardware configuration.

 Next, the operation (action) of the information processing system 100 will be described.

FIG. 5 is a flowchart showing the operation of the server.

 In the following description, it is assumed that processing is performed on secret data D and random number data R prepared in advance.

 First, random number data R is input to the pseudorandom number data generation unit 12 (step Sl l).

Next, the pseudo random number data generation unit 12 generates and outputs pseudo random number data PD equal to the size of the secret data D based on the input random number data R (step S 12).

[0098] Next, the first arithmetic unit 13 performs an exclusive OR (X

(OR) and the result obtained is output as data XPD (first XOR data) (step S13).

 [0099] Next, the hash value generator 14 executes the hash function with the data XPD as input, and generates and outputs the function data FD (step S14).

[0100] Next, the second computing unit 15 computes an exclusive OR of the function data FD and the random number data R, and outputs the obtained result as data XR (second XOR data) (step S15). .

[0101] Next, the data combining unit 16 combines the data XR and the data XPD to generate a combined data CD, and adds information specifying the size of the data XPD as the header HD.

(Step S16).

 Next, the distributed data creation unit 17 generates n distributed data Sl, S2,..., Sn with the combined data CD force (step S17).

 Then, the server 10 transfers the distributed data Sl, S 2,..., Sn to the transfer destination (client 20 in this embodiment) via the interface unit 18 (I / F 105) (step S 18 ). Note that the order and timing of the transfer of each distributed data can be arbitrarily set or selected, and the transfer route and transfer timing of each distributed data may be the same or different.

 On the other hand, when the client 20 receives some data via the interface unit 21, it performs the following processing.

FIG. 6 is a flowchart showing the operation of the client. [0106] First, the distributed data restoration unit 22 tries to restore the combined data CD from the input data (step S21). If any data is restored (Yes in step S21), the data is regarded as combined data CD and the following processing is performed.

 On the other hand, if the input data force cannot be restored (No in step S21), the process ends.

 [0108] Next, the data separation unit 23 specifies the size of the information power data XPD of the header HD, and separates the combined data CD into data XPD and data XR (step S22).

 [0109] Next, the hash value generation unit 24 inputs the data XPD separated in step S22, executes the hash function, and generates and outputs function data dFD (step S23).

 Next, the third computing unit 25 computes the exclusive OR of the generated function data dFD and data XR, and outputs the obtained result as random number data R (step S24).

 Next, the pseudo random number data generation unit 26 generates and outputs pseudo random number data dPD based on the random number data R obtained in step S 24 (step S 25).

 Next, the fourth computing unit 27 computes an exclusive OR of the data XPD and the pseudorandom data dPD, and stores the obtained data in the storage unit 28 as secret data D (step S26). .

 [0113] As described above, according to the information processing system 100, the pseudo random number data generation unit 12 performs pseudo random number processing, which is far more than obtaining a hash value using a no-shush function. Pseudorandom number data that cannot be identified by a third party can be generated with a small number of operations. As a result, the processing of the server 10 can be speeded up without deteriorating the safety, so that the processing load on the server 10 can be reduced. As a result, the data processing speed of the information processing system 100 and the speed of data transmission / reception are significantly increased, and it is advantageous to cope with higher speeds. In particular, in the present invention, for example, when there is a large amount of data such as image data of a still image or a moving image, there is an advantage that the merit of powerful high speed is great.

In this embodiment, the distributed data is transferred from Sano to the client. However, the present invention is not limited to this. For example, the client may create the distributed data and transfer it to the server. In this case, the distributed data restoration unit 22 functions as the distributed data creation unit 17, and the data separation unit 23 functions as the data combination unit 16. [0115] In the present embodiment, for example, the restoration operation is performed in real time via the interface. However, the present invention is not limited to this, and for example, each created distributed data is stored in the storage unit 28 of the client 20, The secret data D may be restored arbitrarily.

[0116] In the present invention, the function to be used is not limited to the hash function. The functions include various mathematical expressions.

In the present embodiment, the random number data R obtained using the random number generator is used. However, the present invention is not limited to this. For example, the data obtained using the hash function for the secret data D is converted into the random number data. Can be used as R.

[0118] The authentication system of the present invention has been described based on the illustrated embodiment. However, the present invention is not limited to this, and the configuration of each unit is an arbitrary configuration having the same function. Can be replaced. In addition, any other component may be added to the present invention.

 [0119] In the present invention, a plurality of server devices may be provided, or a plurality of client devices may be provided.

Note that the information processing system of the present invention can also be applied to other uses other than the open network 30 (for example, a closed network (private line)).

[0121] Further, the information processing method of the present invention can be applied, for example, when secret data stored in a storage medium in a computer is stored in another storage medium in the computer, for example.

 The information processing method of the present invention can also be applied when secret data is input via, for example, an external storage medium power PCI bus or USB. Note that a computer-readable recording medium includes a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory. Magnetic recording devices include hard disk drives (HDD), flexible disks (FD), and magnetic tapes. Optical disks include DVD (Digital Versatile Disc), DVD-RAM (Random Access Memory), CD-ROM (Compact Disc Read Only Memory), CD-R (Recordable) ZRW (ReWritable), and the like. Examples of magneto-optical recording media include MO (Magneto-Optical disk).

[0123] In the present embodiment, the secret sharing method is used as the encryption process. However, the present invention is not limited to this. For example, a process of using key encryption after physically dividing may be used.

 Industrial applicability

 [0124] According to the present invention, by performing information processing using pseudo-random number data, it is possible to speed up the processing without reducing the safety.

[0125] Therefore, it has industrial applicability.

Claims

The scope of the claims  [1] Random number data power generating pseudo random number data having the same amount of data as the original data, calculating exclusive OR of the pseudo random number data and the original data, and generating first XOR data;  Generating function data having the same amount of data as the first XOR data force random number data using a predetermined function;  Calculating an exclusive OR of the random number data and the function data to generate second XOR data;  An information processing method comprising: a step of combining the first XOR data and the second XOR data to generate combined data. [2] The information processing method according to claim 1, further comprising a step of generating divided data obtained by dividing the combined data into two or more. [3] Furthermore, a step of separating the combined data into first XOR data and second XOR data;  Generating the first XOR data force function data using a predetermined function;  Restoring the random number data by calculating an exclusive OR of the second XOR data and the function data;  Generating the pseudo-random data from the random data;  The information processing method according to claim 1, further comprising: calculating an exclusive OR of the random number data and the pseudo random number data to restore the original data. [4] Further, among the divided data, when the divided data capable of restoring the combined data is input, the divided data force also restores the combined data, and the combined data is converted into the first XOR data. And the step of separating the second XOR data,  Generating the first XOR data force function data using a predetermined function; The random number data is calculated by calculating an exclusive OR of the second XOR data and the function data. Restoring the data, and  Generating the pseudo-random data from the random data;  The information processing method according to claim 2, further comprising: calculating an exclusive OR of the random number data and the pseudo random number data to restore the original data. 5. The information processing method according to claim 2 or 4, wherein the divided data is distributed data generated using a secret sharing method. [6] The step of generating the combined data, wherein information capable of specifying the size of either the first XOR data or the second XOR data to be input is added to the combined data. The information processing method according to any one of items 1 to 5 above. [7] In the step of generating the combined data, information that can specify a size of any one of the input first XOR data and the second XOR data is added to the combined data;  The step of separating the combined data into the first XOR data and the second XOR data 1, and separating the first XOR data and the second XOR data based on the information! / The information processing method according to item 3 or 4 of the range. [8] extracting from the predetermined encrypted data the first XOR data having the same data amount as the preset original data and the second XOR data other than the first XOR data; and using the predetermined function, First XOR data force generating function data having the same amount of data as the second XOR data;  Calculating the exclusive OR of the second XOR data and the function data to generate random number data;  Generating random number data having the same amount of data as the first XOR data;  An information processing method comprising: calculating the exclusive OR of the random number data and the pseudo random number data to generate the original data.  [9] The information processing method according to any one of [1] to [8], wherein the pseudo-random number data is generated by one calculation process of the random number data power. [10] The pseudo-random number data is generated by AONT (All or Nothing Transform) method! The information processing method according to any one of claims 1 to 9. [11] The information processing method according to any one of [1] to [10], wherein the function is a hash function.  [12] Random number data power A pseudo random number data generation unit that generates pseudo random number data having the same data amount as the original data,  A first arithmetic unit that calculates an exclusive OR of the pseudo-random number data and the original data to generate first XOR data;  A function data generation unit that generates function data having the same data amount as the random number data using the first XOR data force using a predetermined function;  A second arithmetic unit that calculates an exclusive OR of the random number data and the function data to generate second XOR data;  An information processing system comprising: a data combining unit that generates combined data by combining the first XOR data and the second XOR data. 13. The information processing system according to claim 12, further comprising a data dividing unit that generates divided data obtained by dividing the combined data into two or more. [14] Furthermore, a data separation unit for separating the combined data into the first XOR data and the second XOR data;  A function data generation unit that generates the function data by using a predetermined function;  A third arithmetic unit for calculating the exclusive OR of the second XOR data and the function data to restore the random number data;  A pseudo random number data generation unit that generates the pseudo random number data from the random number data; and a fourth calculation unit that calculates an exclusive OR of the random number data and the pseudo random number data to restore the original data. The information processing system according to item 12 of the scope. [15] Furthermore, when the divided data capable of restoring the combined data is input from among the divided data, the divided data force also restores the combined data to the first XOR. Data separated into data and second XOR data A separation unit;  A function data generation unit that generates the function data by using a predetermined function;  A third arithmetic unit for calculating the exclusive OR of the second XOR data and the function data to restore the random number data;  A pseudo random number data generating unit that generates the pseudo random number data from the random number data, and a fourth arithmetic unit that calculates the exclusive OR of the random number data and the pseudo random number data to restore the original data. The information processing system according to claim 13. [16] The data combining unit has a function of adding information that can specify a size of one of the input first XOR data and the second XOR data when generating the combined data. The information processing system according to any one of claims 12 to 15.  [17] The data combining unit has a function of adding information that can specify a size of one of the input first XOR data and the second XOR data when generating the combined data. And  16. The information processing system according to claim 14, wherein the data separation unit separates the first XOR data and the second XOR data based on the information.