Server device, communication terminal, communication system, and program

A communication terminal used in a communication system that executes transmission and reception of messages via a server device among a plurality of communication terminals forming a group to which a group identifier is assigned, while concealing the messages to the server device, the communication terminal comprising:

• a memory, and
• a processor configured to execute operations comprising:
• generating a message key from a shared key shared among the plurality of communication terminals belonging to the group while excluding the server device and the group identifier, and the message key is to be re-encryptable by using the shared key;
• generating an encrypted text of the message key by encrypting the message key to be re-encryptable, by using the shared key;
• generating a message key identifier as an identifier of the message key;
• generating an encrypted text of a message by encrypting the message with the message key;
• and
• transmitting the encrypted text of the message key, the message key identifier, and the encrypted text of the message to the server device, wherein the encrypted text is to be re-encryptable by overwriting the encrypted text by the server device using a re-encryption key.

A communication system that executes transmission and reception of messages via a server device among a plurality of communication terminals forming a group to which a group identifier is assigned, while concealing the messages to the server device,

• wherein each of the plurality of communication terminals belonging to the group includes
• a memory, and
• a processor configured to execute
• generating a message key from a shared key shared among the plurality of communication terminals belonging to the group, and the group identifier,
• generating an encrypted text of the message key by encrypting the message key to be re-encryptable, by using the shared key,
• generating a message key identifier as an identifier of the message key,
• generating an encrypted text of a message by encrypting the message with the message key, and
• transmitting the encrypted text of the message key, the message key identifier, and the encrypted text of the message to the server device,
• wherein the server device includes
• a memory, and
• a processor configured to execute
• saving, in the memory, the encrypted text of the message by using the message key identifier as a key,
• saving, in the memory, the encrypted text of the message key by using the message key identifier as a key, wherein the encrypted text of the message key is generated by a first communication terminal of the plurality of communication terminals, and the first communication terminal encrypts the message kay to be re-encryptable by using the shared key,
• transmitting the encrypted text of the message key and the encrypted text of the message to a communication terminal belonging to the group, and
• receiving, after the shared key has been updated by a second communication terminal of the plurality of communication terminals, a re-encryption key from a third communication terminal of the plurality of communication terminals, wherein the second communication terminal has generated the re-encryption key by using the shared key and the updated shared key,
• generating a re-encrypted encrypted text of the message key using the re-encryption key to overwrite the encrypted text of the message key with the re-encrypted encrypted text of the message key and to store in the memory.