Type of cryptosystem which requires several parties (more than some threshold number) to cooperate in the decryption protocol