JP3170852B2 - Electronic voting device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION The present invention is closed on the electronic network
The present invention relates to an electronic voting device which allows a right holder to vote once anonymously, and to make a claim while respecting the privacy of the count result of the election management center.

[0002]

2. Description of the Related Art Ota's method has been conventionally known as an electronic voting method. This is disclosed in
No. 64 and the 1988 IEICE Spring National Convention A-294 "Electronic voting method using a single election manager". In this method, the voter obtains the signature of the center for the voting contents converted by random numbers, and then sends the voting contents from which the random number components have been removed and the famous names of the voting contents to the center, thereby implementing secret balloting. Each voter confirms that his / her votes have been counted in the list of voting contents announced by the center.

[0003]

With this method, the signature of the center can be obtained only for the voting content reflecting the opinion of the user. Therefore, if the center does not count the voting content, the center will delete the voting content. It must be open and appealed. The object of the present invention is that even when an opposition is filed, in order for a voter to file an opposition without disclosing his / her voting contents, he / she must obtain a signature only on the ballot in advance and express his / her opinion on the signed ballot. The reflected voting content is sent to the center. If the center does not count the voting content, only the signed voting paper need be presented.

[0004]

An electronic voting apparatus according to the present invention is an electronic voting apparatus in which an election management subsystem counts voting sentences sent from a plurality of voter subsystems. the electronic ballot that contains all votes corresponding to an option to convert each vote includes ballot converting means for sending to the election management subsystem, the election subsystem to the electronic ballot paper after the conversion A signature process for each vote using secret information possessed by the election management subsystem, and a blind signature means for returning to the voter subsystem, wherein the voter subsystem is returned from the blind signature means. It said as input signature processed electronic ballots after conversion was, now the voting statement from the signature sentence corresponding to the votes of voting choices to vote Create, and a voting unit for sending this anonymously, the election subsystem, characterized in that it comprises a collecting unit the voting statement to aggregate the votes if justified.

[0005]

Next, an embodiment of the present invention will be described with reference to FIGS.

In the electronic voting apparatus of the present invention, m voter subsystems 101 (1) to 101 (m) and one election management center 100 are connected to each other by a secure communication channel (for example, data line) 105. An example in which the present invention is applied to an anonymous electronic voting system (FIG. 2) in which only the election management center 100 is writable and an electronic bulletin board 102 is readable by all voter subsystems will be described. For the sake of simplicity, the election management center will be referred to as the center, and the voter subsystem will be referred to as the voter.

In this embodiment, for simplicity, the content of the vote is set to two values of yes or no.

This voting system includes a preparation phase, a voting paper setting phase, a voting phase, and a result announcement phase. The present invention relates to a voting paper setting phase and a secondary voting phase.

First, the preparation phase will be described with reference to FIG. 1 and FIG .

FIG . 1 is a block diagram showing an embodiment of the electronic voting apparatus of the present invention, and FIG. 3 is a view showing an example of a preparation phase.

As preparation for implementing the anonymous electronic voting system, the center 100 sets a constant for signature,
The verification constant is posted on the electronic bulletin board 102. For example, it is assumed that an RSA encryption method is used as a signature method. Therefore,
Let n ₁ and n ₀ be two prime numbers p ₁ , q ₁ and p ₀ , respectively.
the product of q _0, the e _1, e ₀ and _{d 1, d 0 e i ·} d i =
_{1mod (p i -1) (q} i -1) is an integer that satisfies (i = 1,0). At this time, the centers are e _i , _ni (i =
(1, 0) is set as a verification constant (step 1).
1). These constants are written on the electronic bulletin board 102 (step 12). In the future, the verification constants e _i , n _i (i =
(1, 0) is frequently used, and therefore, own constant holding means 2
01 is easily accessible for writing (step 13). On the other hand, d ₁ and d ₀ are stored in own secret information holding means 202 (step 14).

Next, the center 100 determines rules regarding voting. First, identify the agenda items to be voted on and determine the voting format. For example, a projection of 192 bits
The voting format of the vote can be determined as follows.
Wear. First, the contents of the vote from the upper 1st bit to the 8th bit
Is reflected in the 9th to 128th bits.
The stored 120-bit random number is stored. 9th above
DES encryption of the 64-bit 56-bit data from the
Key, 64 bits from the 65th bit to the 128th bit
Data is regarded as plaintext and the above plaintext is encrypted with the above key.
From the 129th bit, the resulting 64-bit ciphertext
The 192nd bit is stored. It seems like this relationship
192-bit voting sentence as a correct voting sentence (step
15).

Next, the names of subsystems having the right to vote (hereinafter referred to as voters) are listed (step 1).
6). The deadline for voting paper preparation and voting is set and announced (step 17), and the start of the voting paper preparation phase is signaled (step 18).

The above is the preparation phase.

Next, the voting paper preparation phase and the voting phase will be described.
Since 00 performs the same procedure for each voter, the description will be continued with the procedure for a specific voter subsystem 101 (i) as an example.

As shown in FIG. 1, the secret electronic voting system includes a secure communication channel 103 in which a center 100 writes constants and voting rules on an electronic bulletin board 102, and a voter 101.
(I) comprises a secure communication channel 104 (i) for reading out the contents written on the electronic bulletin board 102 and a secure communication channel 105 (i) for communicating between the voter and the center.

First, the voter 101 will be described with reference to FIG.
The first voting phase (i) will be described.

The voter 101 (i) reads out the contents written on the bulletin board 102 using the bulletin board reading means 301, and stores constants e _j , n _j (j = 1, 0) in the constant holding means 3
Voting papers v ₁ (i), v of a pair of a favored / negative vote in accordance with the voting format by the voting paper creating means 310 so as to conform to the readout format.
₀ (i) is generated. Note that the output of the random number generator 303 is used as the random number component necessary for the voting format when creating each of the approval votes and the negative votes. Next, the voting paper converter 304
Are the outputs r ₁ and r ₀ of the random number generator 303 and the constants e _j and n
_{Using j} (j = 1,0),

[0019]

(Equation 1)

, And outputs s ₁ (i) and s ₀ (i). Also, the output r ₁ of the random number generator 303 at this time,
r ₀ is stored in the random number holder 309. s ₁ (i), s ₀
(I) indicates that the named communication means 305
It transmits to the center 100 through (i).

The center 100 is a voting paper receiving means 206
Then, the received voting papers s _i (i) and s ₀ (i) are published on the bulletin board by the publishing means 303, and the signature is generated by the signature generator 204 as follows.

The blind signature generator 204 reads d ₁ and d ₁ read from the secret holding unit 201 and the constant holding unit 202.
_{Using 0} and n ₁ , n ₀ ,

[0023]

(Equation 2)

Is calculated and output. The blind signature transmitting means 205 sends D ₁ (i) and D ₀ (i) to the voter 101.
Send to (i).

If the signature is transmitted to all the voters who have made the voting paper, the center declares that it will move to the voting phase. The above is the voting paper setting phase.

Next, the voting phase will be described.

The signature verifying means 306 receives the D received from the center 100 by the blind signature receiving means 311.
_b (i) and e _b , read from the constant holding means 302,
using n _b

[0028]

(Equation 3)

It is verified whether or not holds for each b = 1,0. Also, confirm that your primary voting content s _b (i) has been posted on the bulletin board and counted.

If it is confirmed, the vote generator 307 uses the integer r _B read from the random number storage 309 and n read from the constant storage 302 for its own opinion B (B is 0 or 1). computes _{t B (i) = D B} (i) / r B modn B, bearer transmission unit 308 sends B, and the center 100 without note the sender name t _B a (i).

In the center 100, the voting verification means 207

[0032]

(Equation 4)

Then, it is verified whether or not the output, that is, the content of the voting conforms to a format described in advance on the bulletin board. This value is equal to v _B (i) if the voter does not cheat. If the verification is successful, the content of the vote is counted by the counting means 208.

The above is the voting phase.

As a variation of the voting phase, the anonymous transmitting means may transmit only t _B (i) without transmitting B. At this time, the center 100 checks the voting verification means 2
07,

[0036]

(Equation 5)

It suffices to verify which of B = 1 and 0 results in a valid vote.

When the voting of all the members is completed, as a result publication phase, the center enumerates all the voting sent by anonymity on a bulletin board and publishes the totaling result. Each voter confirms that his / her vote has been correctly entered and that the tallying of the listed votes does indeed result in a published tally.

If the user's own vote is not described, t _b (i) = d _b (i) / r _b using d _b (i) (b is 0 or 1) received from the center. Appeal modn _b by publishing for b = 0 and 1 and indicating that neither is accounted.
The ballot is published instead of your own, so you can file a privacy opposition.

Referring to FIG. 4, this system includes a terminal unit (TMU) 401 such as a personal computer having a communication processing function, and a read-only storage device (ROM).
402, random access storage device (RAM) 403
, Random number generator (RNG) 404, signal processor (SP) 406, TMU 401, ROM 402, R
A common bus 405 interconnects the AM 403, the RNG 404, and the SP 406.

The RNG 404 generates a random number in accordance with an instruction from the SP 406. This is used when the center 100 sets a constant, and is used as a random number generator for each voter 101 (i). In the case of the center 100, the ROM 407 stores constants e ₁ , n ₁ , e ₀ , n ₀ and secret information d ₁ , d ₀ . _dj (j = 1, 0) may be stored in the RAM every time a blind signature is created from the TMU. RO
In M407, in the case of the voter subsystem 101 (i),
The constants e ₁ , n ₁ , e ₀ , and n ₀ are stored. The above operation is realized based on a program stored in the ROM. The RAM 403 is used to temporarily store the results of the calculation during the execution of these steps.

The systems 100 and 101 (i) may be a data processing device such as a general-purpose computer or an IC card.

[0043]

As described in detail above, by using the present invention, it is possible to construct a practical indefinite-name electronic voting system in which an objection can be filed while privacy is maintained.

[Brief description of the drawings]

FIG. 1 is a block diagram showing one embodiment of an electronic voting apparatus of the present invention.

FIG. 2 is a diagram showing a secret electronic voting system.

FIG. 3 is a diagram showing an example of a standard phase.

FIG. 4 shows a center 100 and a voter subsystem 101.
The figure which shows the structure of (i).

[Explanation of symbols]

 100 Election Management Center 101 (i) Voter Subsystem 102 Electronic Bulletin Board

──────────────────────────────────────────────────続 き Continuation of the front page (58) Field surveyed (Int. Cl. ⁷ , DB name) G06F 19/00 G09C 1/00 660 H04L 9/32 JICST file (JOIS)

Claims (1)

(57) [Claims] 1. An electronic voting device in which an election management subsystem counts voting sentences sent from a plurality of voter subsystems, wherein the voter subsystem includes all votes corresponding to voting options. hints ballots conversion means for converting each vote is sent to the election management subsystem, the election subsystem, the secret information which the election management subsystem to an electronic ballot paper after the conversion owned Using the signature processing for each vote using a blind signature means for returning to the voter subsystem, wherein the voter subsystem converts the electronically processed voting paper after the signature processing returned from the blind signature means. as an input, from now to create the voting statement from the signature statement corresponding to the votes of the voting choices to vote, to send this in the secret ballot hand Preparative wherein the election subsystem, an electronic voting apparatus which comprises a collecting unit the voting statement to aggregate the votes if justified.