Abstract: A quantum random number generator is provided that can generate more secure random numbers in consideration of at least one of imperfection of quantum bits or imperfection of a projective measurement equipment. In this generator, the functional configuration of a random number extractor differs from a conventional configuration, and the random number extractor acquires a probability distribution of measurement expectation values from information of a random number sequence for measurement basis selection used in the equipment, and at least one of information of imperfection of the equipment measured in advance, or information of imperfection of a quantum bit generator. Then, an estimation probability is calculated by using the probability distribution of the measurement expectation values, and a measurement result in a binary bit string output from the equipment is compressed by the calculated estimation probability to extract a secure random number.