JP2000269957A - Electronic voting method and medium recording its program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain an electronic voltage method, where a cross-reference between a voter name and voted contents indicating whom the voter votes is concealed from other parties than the voter and canvassers, a function of preventing/tracing duplicate votings and fraudulent voting is provided and a voter can confirm whether or not its voting is valid. SOLUTION: A canvasser generates an encryption key and a decoding key of public key encryption (S1), distributes the encryption key to all voters (S2), each voter issues a voting ID request to an authenticating personnel (S3), the authenticating personnel issues the voting ID to each voter (S4), each voter encrypts the contents of voting by using the encryption key (S6), transmits the encrypted voting and the voting ID to the authenticating personnel (S7), the authenticating personnel authenticates the validity of the vote (S8), transmits a list listing up the encrypted votes and the voting IDs to the canvasser (S11), the canvasser decodes the encrypted votes by using the decoding key, collects the votes, and opens the result of voting into public together with the voting IDs (S13).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic voting system in which, when electronic voting is performed via a network, a voter can conceal the correspondence between the voter name and the voting content to persons other than the voter including the voter. The present invention relates to a method and a program recording medium thereof.

[0002]

2. Description of the Related Art Electronic voting for voting via a network is known. For example, it is used when conducting a popularity vote on the Internet. Here, the requirements required for use in an election or the like that requires strictness in electronic voting are as follows.

[0003] 1. Must be a vote by voters only 2. Double voting is not possible. 3. You cannot know what other people have voted for. 4. You cannot duplicate someone else's vote. Someone is illegal in the voting content (falsification or erasure)
If you do, you must be able to find it. All voters must be able to confirm whether their votes are valid at the end of the vote. Schneier's electronic voting protocol is an electronic voting method that satisfies these. This is performed between a voter and a voter in electronic voting. When a voter votes, the voter authenticates the voter, judges the validity of the vote, counts the vote, and reflects the contents of the vote in the total result. At this time, since the voter directly receives the vote from the voter, the voter can grasp the correspondence between the voter name and the content of the vote. In that case, the voter's voting content will flow on the network, but I do not want the voter who votes on the network to know private information such as the voter's own thoughts and intentions to others The request is mentioned.

FIG. 6 shows a conventional electronic voting method. In FIG. 6, voting, authentication, and counting are performed between the voter and the counting person. First, the voter sends a vote request notice to the voter in order to vote (S1). The voter issues and distributes a voting ID to the voter who has issued the voting request notification (S2, S
3), the voter receiving the voting ID generates a key pair that is a public key / private key (S4). Using this key, the voter creates and encrypts the contents of the vote (S5), and distributes it along with the vote ID to the voter (S6). Upon receiving the vote, the voter authenticates the voting ID (S7), creates an encrypted voting list, and discloses it to the voting person (S8). The voter confirms the list and, if there is any correction, again votes (S9). If the published voting content is satisfactory, the voter delivers a decryption key for counting the voting together with the voting ID (S10). If the content of the vote is determined, after the elapse of the specific period, the voter decrypts and counts the vote (S11), and publishes the result of counting the votes to the voter (S12).

The features of this method are described below. 1. A vote ID is given to the voter, and a right to vote is given using the vote ID as an identifier (processing S1, S2). 2. The number of votes is checked based on the vote ID (processing S
7). 3. The voting contents are encrypted (processing S4, S
5).

[0006] 4. By attaching a digital signature and a certificate, an attack from a third party is prevented (processing S6, S9, S
10). 5. Tracking is possible by holding a list of voting IDs and voter names (process S2). 6. The legitimacy of the voting is disclosed by presenting the voting ID to the counting result (steps S8 and S12).

[0007]

In the prior art, there is a problem in that the voter can obtain both the voter name and the contents of the vote. That is, the voter can know the correspondence between the voter name and the content of the vote, and cannot provide privacy protection to the voter. The present invention hides the correspondence between the voter name and the content of the vote from those other than the voter including the voter, and prevents and tracks double voting and illegal voting. It is an object of the present invention to provide an electronic voting method that has a function and allows a voter to confirm whether his / her vote is valid.

[0008]

As a method for achieving the above object, according to the present invention, the correspondence between a voter name and a voting content is separated while a voter is authenticated between a voter device and a voter device. Authenticator device to be set as an intermediary device. In addition, when the certifier device is provided, the certifier device receives a vote from the voter device, and therefore, it is necessary to hide the content of the voting from the certifier device. Such encryption is performed. The generation of the encryption / decryption key is performed by the voter device, and the voter is encrypted by the voter device itself, thereby concealing the contents of the vote from persons other than the voter except the voter.

[0009] The voter device receives an encryption key to be applied to voting from the voter device. In order to obtain a required voting ID at the time of voting to the certifier device, the voter device performs the voting I
D, a voting ID issuance request, and as a result, a voting ID issuance process for receiving a voting ID issuance answer and receiving a voting ID, acquiring a voting ID, creating a voting content, performing an encryption process, and transmitting the voting ID to the authenticator apparatus. A voting request is transmitted, a voting response is received from the certifier device, and the encrypted voting content is transmitted to the certifier device together with the voting ID. A voting content confirmation request is received from the certifier device, and if there is no change, authentication is performed. A voting process for transmitting a voting content confirmation response to the party device, a voting result notification process for confirming the validity of the voting result and its own vote, and an inquiry process for inquiring about the voting result. It is characterized by having.

The certifier device receives a voting ID issuance request from the voting device, issues a voting ID, and transmits a voting ID issuance reply to the voting device as a result thereof. Receives a voting request, returns a voting response, receives a voting, sends an authentication process to confirm the validity of the voting, sends a voting content confirmation request to the voting device, and receives a voting content confirmation response from the voting device A voting process that collects voting, creates a voting list, sends a voting list input request to the voter device, receives a voting list input response from the voter device, and distributes a voting list to the voter device. List entry processing, receiving an inquiry request from the voter device,
It has a function of transmitting an inquiry request to the voter device, receiving an inquiry response from the voter device, and transmitting an inquiry response to the voter device.

The voter device distributes the encryption key generated by the encryption / decryption key generation process to the voter device, receives a vote list input request from the authenticator device, and returns a vote list input response. Is returned, the voting list input process to receive the voting list, and the voting list is counted (decrypted)
It has a function of performing a voting result notification process of counting votes and distributing voting results to the voting device, and a query process of receiving an inquiry request from the certifying device and transmitting an inquiry response to the certifying device. And By providing the certifier device that authenticates the action voter as the mediator device, the voter device cannot determine the voter name, and as a result, the voter is protected from the privacy of the voter.

When the authenticator device is provided, the voter device generates an encryption key and a decryption key for voting. However,
It is assumed that a public key encryption method is used as an encryption method.
The voter device distributes the encryption key generated here to the voter device in advance, and keeps the decryption key secret. As a result, the voter device can encrypt the contents of the voting, so that the contents of the voting can be concealed from persons other than the voter except the voter.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 shows an outline of an electronic voting method according to the present invention in which an intermediary (authenticator device) is provided and a device for generating a key for encrypting voting contents is a voter device.
First, the voter device is an encryption key (public key) in public key cryptography.
And a decryption key (secret key) (S1) (process A), and distributes the encryption key Kp to the voter device (S2). The voter device requests the certifier device for a voting ID required for voting (S
3), the certifier device issues a voting ID (S4) and distributes it to the voting device (S5). The correspondence between the voting ID and the voter device is stored in the authenticator device.

The voter device encrypts the contents of the vote using the encryption key Kp obtained from the voter device (S6), and delivers the encrypted vote and the vote ID to the authenticator device (S7).
Upon receiving this, the verifier device authenticates the voter (S
8) (Process B), if the validity of the vote can be proved, the vote and its voting ID are transferred to the voter device (S11). At this time, if necessary, the authenticator apparatus discloses the list of encrypted votes to the voter apparatus, requests confirmation of the contents of the vote (S9), and the voter apparatus confirms the contents of the vote. Vote again (S10). The authenticator device that receives the vote cannot illegally count the vote because it does not have the decryption key.
The voter device receiving the vote of the voter device from the authenticator device counts the vote using the decryption key (S12) (process C).
The result of the counting is notified to all the voter devices by broadcasting (S13) (Process D). The voter has correctly voted if his / her voting ID is included in the content of the vote as a result of the vote, and sends an inquiry request to the authenticator apparatus if the voter does not include his / her voting ID (S1).
4), the certifier device sends the inquiry request to the counting device (S15). The voter device sends a response to the inquiry to the authenticator device (S16), and the authenticator device sends the inquiry response to the user device (S17).

FIG. 2 shows processing in the voting process according to the present invention. First, in the encryption key distribution process, the voter device generates an encryption key and a decryption key for encrypting the contents of the vote with respect to the voter device. Only the generated encryption key is distributed to all the voter devices. In the voting ID issuance process, the certifier device issues and provides a voting ID required for voting to the voting device. The voting process is performed when actually voting. The voting list input process is executed when a voting list created from voting collected by the certifier device is provided to the voter device. The inquiry process is executed when the voter device inquires about the voting result.

FIG. 3 shows a flowchart of the voter apparatus according to the present invention. First, it is necessary to input a voter ID and a password for enjoying the service from the existing WWW browser (S1). If it has been acquired, the voting service can be used. If it has not been acquired, a voter ID and password issuance application is made (S2). That is, the voter ID and the password correspond to this system qualification, that is, the right to vote. By inputting the voter ID and password, an encryption key can be obtained (S3). Next, confirm the possession of the certificate of the voter required when voting (S4), apply for issuance of the certificate if not possessed (S5), and select the certificate if possessed (S6). The certificate selected here is transmitted to the certifier device at the time of voting. In other words, the certificate is for certifying the identity of the voter, and the certificate is issued by the certificate authority and the name or identifier (ID) of the person
In the voter device, for example, the random number R is encrypted with a secret key corresponding to the public key, and the encrypted random number R and the certificate are sent to the authenticator device. Then, the authenticator decrypts the encrypted random number with the public key of the certificate, and if the decrypted result is equal to the received R, the one having the public key and the corresponding private key is the same as the name of the certificate. It is determined that they match, and personal identity is authenticated. This certificate may also be issued by a plurality of certificate authorities so that a plurality of credit cards are used, in which case a certificate must be selected.

When actually voting, a required voting ID is required for each voting. A voting ID issuance request is transmitted to the certifier device to acquire a voting ID (S7).
It waits for a vote ID issuance response (S8), and obtains a vote ID (S9). If you already have a voting ID,
Obtain the previously issued voting ID. Next, a voting request for voting (for example, a request for a voting paper) is made (S10).
Thereafter, a voting response (for example, a voting paper) is received (S1).
1). Next, the contents of the vote are created and encrypted (S1).
2). If you have already voted, a confirmation of the content of the previously cast vote is sent. If not yet voted, a vote can be cast (S13). In response to an inquiry from the authenticator apparatus as to whether this content is acceptable, the content of the vote is confirmed (S1).
4) If there is no change (S15), a voting content confirmation answer process indicating that there is no change is performed (S16), and if there is a change, the process returns to step S12 to create a new voting content and re-vote. Thereafter, if the voting period has passed and the voting result has been sent to the voter (S17), the voting result is confirmed (S1).
8), the validity of the self-vote is confirmed (S19, S20).

FIG. 4 shows a flowchart of the authenticator apparatus according to the present invention. If the certifier device does not have a certificate required for a series of voting services (S1), it applies for issuance of a certificate (S2), and if so, selects the certificate (S3). Various processes are performed using the certificate selected here. Waiting for a request (S4), if a request for issuing a voting ID is received as a request (S5), it is checked whether or not a voting ID has been issued from a table of voters and voting IDs (S6). Issuance is performed (S7), the voting ID is added to the table of voting and voting ID, and the voting ID is transmitted to the voting apparatus (S8). If it has already been issued, the previously issued voting ID is transmitted. If the request reception is a voting request reception (S9), it is checked whether there is a voting (S1).
0) If it has already voted, it requests the voter device to confirm the contents of the previously cast vote (S11), that is, confirms whether such contents are acceptable. If the voting has not yet been performed, the voting is accepted (S12), and the validity of the voting is verified (S13). In other words, the identity of the voter is confirmed by identity verification using the certificate received at the same time, and the correspondence between the vote ID and the voter sent at the same time that the vote belongs to the voter himself. Confirms with reference to the voting ID and the voter table held in the certifier device, and confirms that the voting is not a double voting depending on whether the voting by the received voting ID has already been performed.

If all these confirmations are passed, the voter device is requested to confirm the contents of the vote (S11). The voting content confirmation response is received from the voter device, and if there is a change in the voting content (S14), the process returns to step S13 to perform the authentication process. If there is no change in the voting content, the confirmed vote is stored. (S15). If the voting deadline has passed (S
16) The collected votes are collected and a vote list is created (S17). In order to provide the voting list to the voter device, a voting list input request (inquiry as to whether a voting list may be sent) is transmitted to the voter device (S18), and an answer is waited (S19). When receiving the response indicating that it is acceptable to send the vote, the voting list is distributed to the voter device (S20). Also,
If the request reception is the inquiry request reception (S21), the inquiry request is sent to the voter device (S22), and the inquiry response to the inquiry request is received from the voter device (S21).
23), and returns the inquiry response to the voter device (S2)
4), the process returns to the standby state for request reception in step S4. When transmitting from the certifier device to the voter device or the voter device as described above, a certificate is added to the content of the transmission, and the device that has received the certificate must receive the certificate from the certifier device. Sex authentication can be performed.

FIG. 5 shows a flowchart of the voter apparatus according to the present invention. If the voter device does not have a certificate required for a series of voting services (S1), it applies for issuance of a certificate (S2), and if so, selects the certificate (S3). Various processes are performed using the certificate selected here. First, an encryption key to be applied to the contents of a vote when voting is generated (S4) and distributed to the voter device (S5). After that, it is in a standby state for request reception (S
6). Here, a request for voting list input from the certifier device as a request reception (inquiry as to whether a voting list may be transmitted)
Is received (S7), the voting list input response (ready to receive) is transmitted to the authenticator device (S8), and the voting list is acquired from the authenticator device (S9). The voting list is counted (decrypted), counted (S10), and the voting result is transmitted to all the voter devices (S11). The voting result is provided with the voting ID of the vote, so that the voter can confirm that the voting has been correctly performed by his / her voting ID. If the request reception is an inquiry request reception (S12), an inquiry response is returned to the authenticator apparatus, and the process returns to the request reception standby state in step S6 (S1).
3).

In the above description, the voting ID may be omitted if it is not necessary to know the validity of the vote. Also, in order to confirm that the content of the vote is correct and has not been falsified, a digital signature is added to the voting content encrypted by the voter device, and this signature is used. May be verified by the certifier device. In addition, the voter device sends personal information such as the voter's name, age, and gender to the certifier device together with the vote, and the voting device decides that the information in the personal information may be disclosed to the voter. By sending the data to the device, it is possible to create analysis data for knowing the distribution of items of the vote, such as age group and gender, when counting the voting results.

[0022]

As described above, according to the present invention, a certifier device is provided as an intermediary device between the voter device and the voter device, and the voting operation of the voter is performed. The voter device generates a key to encrypt the voting, and passes the encryption key before the voter device performs voting, so that the correspondence between the voter name and the voting content is hidden from anyone other than the voter This has the effect of ensuring the privacy protection of voters.

[Brief description of the drawings]

FIG. 1 is a diagram showing an electronic voting procedure of the present invention.

FIG. 2 is a diagram showing each processing in the present invention.

FIG. 3 is a diagram showing a processing procedure of a voter device.

FIG. 4 is a diagram showing a processing procedure of the authenticator apparatus.

FIG. 5 is a diagram showing a processing procedure of the voter device.

FIG. 6 is a diagram showing a procedure of a conventional electronic voting method.

 ──────────────────────────────────────────────────続 き Continued on the front page F-term (reference)

Claims (11)

[Claims] 1. An electronic voting method using a network, wherein a voter device sends a vote to a certifier device, and the certifier device is that the voter is himself and that the vote is by the voter himself. An electronic voting method comprising: confirming that no duplicate votes have been cast; sending all the votes to the voter device when all the checks have passed; and the voter device counting the received votes. 2. The electronic voting method according to claim 1, wherein the voter device generates an encryption key and a decryption key of the public key cryptosystem, distributes the encryption key to the voter device, An electronic voting method, wherein a vote is encrypted and sent to an authenticator device, and the voter device decrypts the encrypted vote with a decryption key and counts the votes. 3. The electronic voting method according to claim 1, wherein the voter device requests the certifier device to issue a voting ID, and the certifier device issues a voting ID in response to the issuance request. Distributed to the user device, the voter device adds the voting ID to the vote sent to the certifier device, the certifier device adds the voting ID to the vote sent to the voter device, and the voter device adds the vote An electronic voting method characterized in that a relationship with a corresponding voting ID is disclosed to a voter device as a voting result. 4. The electronic voting method according to claim 1, wherein the voter device transmits personal information such as name, age, and gender to the vote, and the authenticator device transmits the personal information. An electronic voting method characterized in that a publicly-available item is attached to a vote and sent to a voter device. 5. A process in which a computer of a voter device in an electronic voting method using a network in which a voter device performs voting to a voter device via an authenticator device performs a request for issuing a voting ID to the authenticator device; A process of acquiring a voting ID from the certifier device, a process of creating a voting content, encrypting the voting content to create a vote, a process of sending the vote to the certifier device, and confirming the voting content from the certifier device A program for executing a process of receiving a request, a process of creating a vote again when there is a change in voting content, and a process of sending a voting content confirmation reply to the authenticator apparatus when there is no change in the voting content is recorded. recoding media. 6. A process of receiving a voting ID issuance request from a voter device to a computer of an authenticator device in an electronic voting method using a network in which a voter device performs voting to a voter device via an authenticator device; A process of issuing a voting ID, a process of transmitting the issued voting ID to the voter device, a process of receiving a vote, a voting ID and a certificate from the voter device, and a process of authenticating the validity of the received vote , The process of authenticating the identity of the voter using the received certificate, the process of authenticating whether the received vote was performed by a true voter, and the process of authenticating that the received vote is not a double vote And a recording medium storing a program for executing a process of collecting a vote received within a voting period and creating a list, and a process of transmitting the voting list to a voter device. 7. The recording medium according to claim 6, wherein the process of authenticating the validity is performed by authenticating the identity of the voter using the received certificate, and the received vote is performed by a true voter. A recording medium characterized by comprising a process of authenticating a received vote and a process of authenticating that a received vote is not a double vote. 8. The recording medium according to claim 6, wherein: a process of receiving an inquiry request from the voter device; a process of transmitting the received inquiry request to the voter device; A recording medium characterized in that the program includes a program that causes the computer to execute: a receiving process; and a process of transmitting the received inquiry response to the voter device. 9. The recording medium according to claim 6, wherein, after the validity authentication process, a request for confirming the voting content is made to the voter device, and the voting device confirms the voting content from the voter device. A program for causing the computer to execute the process of receiving the answer of the above. 10. A process for generating a pair of an encryption key and a decryption key in a computer of a voter device in an electronic voting method using a network in which a voter device performs a vote to a voter device via an authenticator device; The process of distributing the encryption key to the voter device, the process of obtaining the vote list from the authenticator device, the process of decrypting the encrypted vote in the vote list with the decryption key and totalizing the votes, A recording medium on which a program for executing a process of publishing a voting result is recorded. 11. The recording medium according to claim 10, wherein the program causing the computer to execute a process of receiving an inquiry request from the authenticator device and a process of transmitting an inquiry response to the received inquiry request to the authenticator device. A recording medium characterized by being included in the program.