Fecha de publicación: 05/01/2023 Fuente: Wipo Milk or dairy products A secure random number that follows a binomial distribution is generated without performing successive communication. A secure computation apparatus (1i) generates a share [r]i of a random number r that follows a binomial distribution. A parameter storage unit (10) stores a pseudorandom function PRF, at least one set of a key kA and a polynomial fA. A pseudorandom number generating unit (11) obtains a pseudorandom number pA for each of the keys kA by computing the pseudorandom function PRF(kA, a) using the keys kA. A bit counting unit (12) counts the number rA of 1s included in each pseudorandom number pA. A random number share generating unit (13) obtains the sum of products of the number rA of 1s and an output of the polynomial fA(i) corresponding to the number rA of 1s as the share [r]i of the random number r.