ES2283205B2 - TELEMATIC VOTING SYSTEM THROUGH THE INTERNET. - Google Patents

Abstract

Telematic voting system through the Internet, carried out in a communication scenario involving a set of automatic systems that operate under predetermined operating system programs, database managers, web applications and Internet security, constituted in its basic architecture by a Certification Authority, an Anonymity System, a Voting System, a Counting System, a Verifying System, a User-Identity Relationship database, a Universe Database of Voters, and an Urn database electronics, in addition to the interconnections and data flows between these elements. The system creates a totally electronic and remote voting process, applicable independently of the physical location where the voter is, fast and easy to use.

Description

Telematic voting system through Internet.

The present invention relates to a system of  telematic voting via the Internet, that is, a system of vote that uses the Internet as a more universal form of electronic communication to connect voters, previously authenticated, with a register of voting options and with an urn remote electronics

The system creates an electoral process totally electronic and secure based on the Internet, from the place of the voting, a terminal of a personal computer, mobile phone or other electronic device that has access to the Network, up to devices that prove the identity of voters, with security codes and public faith authentication authorities, going through electronic urn systems, counting and vote verification, which allows to provide a service of voting that is independent of the physical place where you are the voter, fast and easy to use, compatible with the system of traditional voting in administrative elections, but at the same time, capable of adapting to any regulation that governs a particular electoral process, among many other advantages.

This invention, which is framed in the field engineering technician and telematic architectures, develops a  telematic voting system that is not based on a type of specific software, but simply specify the capabilities, functionalities and security mechanisms that you must have the system, and in what place and in what way it should be used. By so, maybe for a small business, or even a school or meetings of certain communities you can use software from open source in the implementation, since it is free and, although It does not offer guarantees, it is usually very well finished in most of cases, and for a large company or public body you can make a system with the most expensive and sophisticated programs.

State of the art

"Electronic voting" means all those scenarios that based on the classic methods of vote, replace some of the physical elements and manual procedures by some type of system or procedure electronic.

The processes to automate are those that commonly performed at the polling station, being able to synthesize in three: voter authentication, the process of issuing the vote, and the processing of the content of the ballot box. All the electronic components used in these scenarios try to automate any of these processes, entering this cataloging the systems that use one or more of the following elements: magnetic cards (to authenticate the voter or even to cast the vote), electronic ballot box (for the reception and  vote count), screen or voting board (for select the chosen voting option), electronic booth (for guarantee privacy) and software of different types (for the scrutiny process).

Systems based on electronic voting commented type, that is, conducted in polling stations in the that some physical elements of the voting procedure Traditional is replaced by some kind of electronic process, They are widely developed. In fact, there is a great variety of patents on this issue, in which they are even claimed electronic devices and devices to be put into practice. Thus, for example, patents of this type with effects on Spain are nationals with publication number ES2230994A1 "Electronic voting system", and ES2165289B1 "System of electronic voting and corresponding evaluable ballot opto-electronically ", or the European patent with Publication numbers ES2103730T3 "New voting process and means for its implementation ".

Some of the patents focus exclusively on devices or devices that are part of a electronic voting system, as is the case with patents National ES2174753B1 "Electronic urn" and ES8706988 "Improvements in electronic devices for management automated polling stations ", or the models of utility ES1053026U, "Rolling ballot box for voting systems electronics ", and ES1050757U" Ballot for voting systems electronic".

On a more advanced level of voting system electronic the completion of the voting process is sought through the use of telematic networks, then entering the called the "Telematic Vote" system. In this case, the urn it is not in sight of the voter, what happens with the vote conventional electronic cited above, but it is an agent telematic physically located in a remote place, just like the rest of the agents involved in the supervision and System realization.

Within the telematic voting system, two subgroups can be distinguished. The first is composed of those systems that use telematic networks for the interconnection of the different polling stations, with the voter voting from the same polling station or equivalent center, which allows almost immediate collection, recount and publication of the results, leaving the agency responsible for final supervision the mission of identifying and authenticating voters. The second subgroup is constituted by those systems in which voting takes place remotely, typically through the Internet, being more attractive for voters and allowing a drastic reduction of costs a priori , but with the need to establish mechanisms for security, identification and authentication much greater.

While within the first subset of systems telematic voting, the one carried out in polling stations to through interconnection public computer networks of centers, several works have been published, including highlight the VOTESCRIPT project of the Polytechnic University of Madrid, or some others that have been protected by patent in Spain, case of national patent number P200450051 "Method for secure electronic voting and cryptographic protocols employees ", or European patents with translation number ES2158241T3 "Method and apparatus for the safe transmission of anonymous messages and secure electronic voting "and ES2156594T3 "Method and apparatus for secure electronic voting", I do not know knows of any project published in relation to a system of telematic voting conducted in remote mode, via the Internet, that is, without the need for the physical presence of the voter in the electoral center at the time of voting.

Whereas, in theory, the components for the development of a telematic voting system on the Internet are quite simple: a voter registration, a voting options registry, and an electronic counting system or ballot box, all connected through Internet, the one that does not exist until now a project for its practical implementation is surely due to the demanding security mechanisms that this system must carry
associated.

Keep in mind, that for the implementation of an internet voting system in which voters can cast your vote remotely using, for example, a telephone mobile, security mechanisms, identification and authentication facing the following problems:

Definition of the universe of voters.- One of the first problems is to define who has the right to vote and who no. The system would not be admissible if after the vote there were more votes than voters.

Unique identification of each voter.- Once  established the rank of voters, we must ensure that each system user has a unique representation in it, of so there can be no personality impersonations.

Voter authentication - This problem is already It has been resolved in the world of electronic commerce.

Anonymity of the voter.- The system must not link a vote with the issuer of the vote, that is, that it cannot be  know in any way what vote a given user has cast. This requires secrecy mechanisms in communications, in accounting and partial data information.

System security.- The system must be able to protect against external attacks, falls and failures in the software or on the computer, etc.

It is clear, then, that the main problem of Telematic voting via the Internet is at the security level, more that at the level of its implementation.

Given this strict framework of security that must surround a telematic voting system to through the Internet, with the present project a model is presented innovative that responds in the best possible way to each of the issues raised.

In its development all have been taken into account the requirements that a voting system of these must meet characteristics, related to the universe of voters, the Voting process, system security and final count of the votes, which are listed below.

a) Voter universe.- i) Definition of universe of voters by the authority requesting the process of voting, as a pre-voting phase; ii) data fragmentation, so that voter data does not are included in the same system; iii) once the voting process, the universe of voters cannot be altered, but only consulted; iv) the data defined in the universe of voters may be optionally consulted by the user, being only possible to modify them before Beginning of the voting process, through the authorities competent and according to an external voting process.

b) Voting process.- i) The system must guarantee the freedom of voting, this implies that the user must be able to exercise their right to vote from any terminal, regardless of the operating system and the browser, must be able to know a priori any question about of the elections, the candidates, the voting methodology, and the budgets and implications of each possible option in a given consultation, in addition the user must be free at the time of voting or the omission of the same, it is not acceptable for votes to be taken default; ii) the system must uniquely identify users; iii) the system must guarantee the uniqueness of the vote, the impossibility of coercion of the voters and their anonymity; iv) the voter may not change his or her vote once it has been cast; v) the system must be able to operate in adverse conditions and in case of possible failures; vi) the application for the user must be transparent, accessible, friendly, intuitive and easy to use.

c) Security.- i) The system must have authentication mechanisms, which guarantee authentication and certification of both the machine from which the voter operates as of the server or servers of the voting system, in addition to the verification of the voting system; ii) it is guaranteed that the system works only as expected to work, without rear doors or hidden traps that modify the results; iii) the system must provide security mechanisms specific; iv) the system must provide mechanisms for access control to the system, so that only the authorized users at the established times, v) the system must provide transparency to the competent authorities, it is that is, it should: access the source code and records of operation, obtain certificates of authenticity from from third parties, submit log procedures to resolve doubts and challenges, maintaining the secret character of vote; vi) a security strategy should be defined that covers the following points: the security plan must have a proactive strategy, should be carried out inspections or legal audits for the certification of system, explicit security policies (against external attacks and internal).

d) Count.- The system must have mechanisms of reliable count that guarantee: i) the accuracy, that is, the number of voters is equal to the number of votes; ii) the independence, with respect to the voting process; iii) the Global verification of the data.

Compendium of the invention

The proposed solution for the system to Internet telematic voting conceived to comply with all previous requirements and, therefore, so that in practice you can be carried out, goes through an architecture formed by a set of automatic systems that work under programs operating system defaults, database managers, Web applications and Internet security.

This set of systems is formed by following main elements described below in detail: a) An Internet Certification Authority, in charge to encrypt communications and authenticate both the voter and to the voting system, b) an Anonymity System, in charge of introduce candidates, control access, guarantee anonymity of the voters and their follow-up during the process, c) a Vote System, in charge of receiving, managing and store the votes cast of a specific department, d) a Counting System, responsible for counting the number of votes, e) a Verifier System, responsible for validating the elections electoral, f) a database Relationship User-Identity, responsible for storing data of the user, their identity in the system and the status of the voters, g) a Universo de Votantes database, in charge of establish a range of system voters, and h) a database Electronic ballot box, responsible for storing the votes cast by voters, in addition to interconnections and data flows between previous elements.

I. System elements a) Certification Authority (CA)

The Certification Authority system is the entity  external responsible for authenticating through the Internet both voter, by assigning a password online  personnel for each voter, such as the machines involved in the voting system, through a pre-voting process, In addition to maintaining the confidentiality and integrity of the data thanks to the encryption of communications. With that, you can ensure that the extremes in communications are who they say What are they.

Currently there are different Certification Authorities (VeriSign, Radius, Thawte, etc.) that implement by default the SSL (Secure Socket Layer) encryption, which is the worldwide standard Web security protocol, designed and proposed by Netscape Communications Corporation. It provides its security services by encrypting the data exchanged between the server and the client with a symmetric encryption algorithm and encrypting the session key using a public key encryption algorithm. The session key is the one used to encrypt the data that comes from and goes to the secure server. A different session key is generated for each transaction, which allows even if it is burst by an attacker in a given transaction, it does not serve to decipher future
transactions

In the present case the system has been designed in based on Public Faith Certification Authorities that use the SSL encryption, as companies dedicated to the issuance and verification of certificates with proven ability to prevent impersonation, leaving open the possibility of using certificates issued by the Public Administration, right now in development, as an entity of maximum trust. Should consider provided that this type of Authorities must be outside the system of  vote and provide a service with enough professionalism, depending on the needs of the implementation in each case.

You have to make it clear that these types of systems, despite being relatively modern, they have given very good results when it comes to ensuring something as important as the transactions of money through the network, not only on trading sites electronic, but also in recognized banking entities prestige.

b) Anonymity System

In the telematic projection of the scenario of conventional voting, the anonymity system must ensure that only cast their vote in the "urn" people authorized to do so and that only vote once and only once option.

       \ newpage
    

In the project addressed the Anonymity System uses the following technologies for the presentation of the information:

- XML Base ( eXtensible Markup Language ), with the ability to package data in a format that can be validated, such as XML Schemas.

- XSLT Language ( Extensible Stylesheet Language Transformations ), which allows you to present the information contained in the .XML files in the programming language required by the user (Html, C-Html, Wml), according to your device (PC, mobile i- mode, mobile-Wap).

The modules that make up the Anonymity System They are:

- Session Management , responsible for customizing the presentation for the user and creating a profile (which will be destroyed when the voter closes the session) volatile, once validated in the Universo de Votantes database, at the beginning of the session , containing the personal data of the same, being able to change these for the Identity in the System when this is assigned to the user. It also performs the ranking of users, that is, it gives more weight to some votes than others based on the user's profile, if the entity requesting the vote is desired.

- Check Status , responsible for checking the status of the voter in the system through two verifications: first, if an Identity has been granted in the System, and second if it has voted. Thanks to this module, in the event that there is a failure in communications, in a second connection by the voter, once the session is validated, you will be directed to the point where you stayed.

- Check Universo de Votantes , responsible for verifying that the user who connects to the system belongs to the range of voters defined by the authority requesting the electoral process. If so, the session will be created, otherwise access will be denied.

- Identity Generator , responsible for generating Identities in the system, to preserve the anonymity of Voters. These identities are random numbers, so that it is unfeasible to be able to establish some kind of relationship between the voter and the identity in the system. For this, the generator used will be a standard congruent generator, which duly adjusted for different contrasts (X ^ 2 Pearson, Streaks, Permutations and Gaps) will approximate a Uniform Distribution.

- Identity Insertion , responsible for registering in the system the assignment of an identity to a voter. This is achieved by entering in the User-Identity Relationship database, the unique key that identifies you (the random number). This functionality is essential so that the Check Status module can perform the first verification satisfactorily.

- High Ideas Candidate , in charge of collecting the presentation and personal links of the candidates, once they have been validated in the Universe of Voters, registering them on a Web page accessible by all users.

All data is managed in the system Anonymity with LDAP and DBMS technologies:

- LDAP ( Lighweight Directory Access Protocol ) is the protocol (OpenLdap) used to access the different resources and information of the network created, acts as a middleware between the processing layer and the different Database Management Systems. Therefore it is responsible for providing the possibility of assigning permission, portability to different platforms, authentication between different servers, and encryption of communications at the transport and application level.

- DBMS ( Database Management System ) is responsible for providing access to the database, in a consistent manner and maintaining integrity, with a level of security in the databases, to establish groups and profiles of user, limiting access to sensitive data and its manipulation. It will be this module that interacts with the LDAP Server and provides you with the data you request.

c) Vote System

The different technologies mentioned for the presentation of the information in the anonymity system (XML, XSLT, XML Schemas) do not differ in terms of their functionality refers to those of the Voting System, except that now the interaction with the Voter will be less, since the presentation will be limited to notify to the voter the correct completion of the process, or in case otherwise communicate the error (for example a failure in the communications).

The modules that make up the Vote System They are:

- Session Management , very similar to its analogue in the Anonymity System, except that no session will be created, but will receive it from the Anonymity System. This implies again that in case of a remote connection to the voting system, when verifying the validity of the session of said connection, it will be shown that it is a fraudulent access, so it will be redirected to the Anonymity System, that is, it will not be You can alter the flow of the application.

- Insertion of vote , responsible for storing the vote cast by the user and identity in the system that represents him. This vote is introduced in a database different from that of user authentication, thus preserving (along with a good database administration policy), anonymity.

- Fragmentation of the vote , responsible for fragmenting the vote through a high processing algorithm.

- Report generator , responsible for generating reports for the voter confirming the validity of their vote, or if there is any mishap, such as a failure in communications or denial of service, let them know.

- Insertion of vote blocking , responsible for validating the vote, reflecting it in the system by inserting a "1" where there was previously a "0", in the User-Identity System Relationship database. This module is very similar to the "Identity Insertion" of the Anonymity System, and like it is very important for the "Check Status" module to successfully complete the second verification.

The data is managed in the Vote System with the same LDAP and DBMS technologies used for the System Anonymity, which does not differ with respect to this first system in terms of to its functionality.

d) Counting System

The different technologies mentioned for the presentation of the information in the Anonymity System (XML, XSLT, XML Schemas) also do not differ in their functionality from those of the Counting System, except that this presentation is not to interact with the system, but to present the election election results, leaving open the possibility of publishing them on a Web server, in which case GUI ( Graphical User Interface ) technology is recommended, which provides the user with a friendly and intuitive environment to interact with the system.

The modules that make up the Counting System They are:

- Access Control , responsible for filtering access to the system, leaving free transit only to the user who is registered. The set of users that could use it is reduced, so they are specified in a "Ldif" file supplied by Ldap.

- Voting Counter , in charge of reading the report presented by the Verifier System. If everything is correct, the electronic Urn database will be accessed and the votes will be counted, using a vote defragmentation algorithm, in the "Logical System Design" section. In another case, that is, if irregularities are detected in the electoral process, the votes will not be counted, going directly to the Voting-Verification Report Generator module.

- Voting-Verification Report Generator , in charge of presenting a report of the electoral elections (in case the Verification system does not detect any type of fraud), or generating a report with the results of the Verification System.

The data is managed in the Vote System with the same LDAP and DBMS technologies used for the System Anonymity, which also does not differ with respect to this first system in As for its functionality. It should be noted in this case that the Ldap server not only provides secure access to the bases of data, but also provides profiles and groups of users who can. use the Counting System, acting on same as repository of user data.

e) Verification System

In this case, the XML ( eXtensible Markup Language ) technology is used as a configuration file for the different application parameters. Among them, it is worth mentioning the time of the electoral closure, which will be the start of said entity.

Modules that make up the System Check:

- Partial and Total Verification , responsible for double checking that the number of votes is equal to or less than the number of local voters (partial verification) and that the number of voters in the system is equal to or less than the number of global voters ( total check), that is, there are no more voters in the System than registered voters in the voter universe.

- Weight of the Votes , responsible for determining due compliance with the rules established by the entity that requested the electoral process. For this, the department or region of the vote and its weight are consulted, thus verifying its validity.

       \ newpage
    

- Sending Reports , in charge of collecting the results obtained, giving them a certain format and sending them to the Counting System.

The data is managed in the System of Verification with the same LDAP and DBMS technologies used in the previous systems, such as the Anonymity System.

f) Database Relationship User-Identity

It is responsible for storing the data of the user, the identity in the system (fragmented) and the status of voters (case "has been identified, but has not voted", incidents, etc.).

g) Voter Universe Database

It is responsible for establishing a range of voters of the system (census), which will be issued by the authority that Request the electoral process.

h) Electronic Urn Database

It is responsible for storing the votes cast by the voters.

II. Data flows between system elements

Among the elements that constitute the basic system architecture (Anonymous System, Voting System, Count System, Verification System, Urn Database Electronics, Universe Database of Voters and Database User-Identity Relationship) the following twelve interconnections or data flows:

1) Public Key-Certificate.- The Certification Authority system sends the keys to the voter public certifying them.

2) User Identity.- The voter sends the Anonymity System personal data, and the key assigned to your authentication This is done through security keys and a firewall

3) User Data.- The Anonymity System, through the Universe of Voters module, reads from the Universe database of Voters unique data of each user for authentication in the system, in addition to the total number of voters.

4) Identity in the system.- The System of Anonymity redirects to the Vote System the voter identity in the system without fragmenting.

5) Identity in the voting system.- The voter delivers to the voting system your vote, along with the un fragmented identity provided by the Anonymity system.

6) Vote id-system.- The Vote System, through the Vote Insertion module, sends this data to the electronic Urn database and updates it with the vote and identity in the system without fragmenting.

7) Number of total votes-Voting Weight.- The Verifier System, through the Partial and Total Verification module, consults the electronic Urn database, in which the total number of votes counted is given. On the other hand, the quantitative weight of each vote is consulted in the case of shareholders, this is done through the Weight of Votes module.

8) Number of voters. The Verifier System, through the Partial and Total Verification module, consults the User-Identity Relationship database, in which the number of partial voters who have made use of the system, and that of censored totals.

9) ID-user lock code (bidirectional) .- The Anonymity System, through the Check Status module, checks in the User-Identity Relationship database that the voter has authenticated. On the other hand, the Anonymity System, through the Identity Insertion module, updates the local database, where personal data and voter identity are entered into the system (fragmented).

10) Cod.Bloq.voto.- The Voting System, through the Voting Block Insertion module , validates the voter's vote in the User-Identity Relationship database, generating a block to not vote a second time. The Anonymity System, through the Check Status module, queries the User-Identity Relationship database, which the voter has voted.

11) Test.- The Verification System, through the module of Send Reports , sends to the module Counter of votes of the System of Count, the report of verification of the electoral elections, so that it reads it.

       \ newpage
    

12) Number of Votes. The Counting System, through the module, Counter of votes , accesses the Urn database. electronic and counts stored votes, using a vote defragmentation algorithm.

The following chart reflects how they access different systems to each database, which can be in mode reading (LEC) or in writing mode (ESC). The number indicates the flow of data corresponding to each case:

one

Note that the Anonymity System accesses the Voter Universe database in read mode, through the User data flow (3), and to the Relationship database User-Identity in reading mode, through the Flow Cod.Bloq.voto (10), and in write mode, through the flow Cod.Bloq.Id-User (9). The voting system accesses the User-Identity Relationship database in mode writing, through the Cod.Bloq.voto (10) flow, and to the base of electronic urn data also in write mode, through the Voting system id flow (6). The Counting System you only have access to the electronic urn in writing mode, to through the flow Nº of Votes, while the system of Verification has it on the basis of data Relationship User-Identity and the Electronic Urn, both in reading mode, through the respective number of voters flows (8) and Total number of votes-Voting Weight (7).

III. Security a) Security inherent in voting

It is the security of the voting system telematics as a whole, consequence of its components and functionalities already described above.

This security inherent in the system is a guarantee of the following requirements that must be met in any process of vote:

Voter authentication.- Thanks to the intervention of a Certification Authority (which authenticates both the machines involved and the voter, through the assignment of a personal key for each voter, you can ensure that the extremes in communications are who they say What are they.

Anonymity.- To guarantee the anonymity of Voter the system divides the voting process into two: the authentication, where the voter is uprooted from their identity (providing another for the system) and voting. In this way it is known that a user "a" votes, but not what has voted.

The impossibility of coercion.- Not being able to ensure that a voter "V" has voted for a candidate "C", due to the resolution of the previous point, the possibility of coercing a voter since there will be no guarantee that it does.

The unique identification of the Voters.- This is achieved with an off-line specification by part of the entity requesting the elections, in the definition of the universe of voters, together with the intervention of a Certification Authority, and the encryption measures cited in the point referring to "security in communications", thus avoiding any possibility of a voter being impersonated and be deprived of your right to vote.

The uniqueness of Voting.- After the resolution of the previous point and the functionality of the anonymity system ( Session Management and Check status ) it can be controlled that each voter only votes once, when their vote is registered in the system.

Access control.- This is achieved thanks to a personal key transmitted along with the certificates before of the voting and session management module of the different systems. It should be noted that although the voting system does not create no session but it is given, does not support any access that has not previously gone through the Anonymity System, who has verify the existence of the user in the universe of voters.

Flow control.- In an architecture distributed in two systems (in relation to voters) is important to control that one of them without previously going through the previous one. This is managed the session, that is, the anonymity system creates a session when It is verified that you are a valid voter. This session contains some specific attributes, which acquire a certain value, and a Once the identity in the system is obtained, it is redirected to the system vote. If a voter accessed the voting system remotely, this The first thing you will check is your session, verifying that you do not have the same and therefore that has not gone through the system of anonymity, redirecting it, to follow a procedure habitual.

b) Security before the vote

It is a pre-voting process to control that communications will be secure; It relates to the security of the Certification Authority element.

For the authentication and encryption of communications the system uses a Certification Authority, what is known as electronic notary, which will return the CSR signed by email, and more importantly, the Voting System will send personal keys and certificate by email.

The problem is that today there are numerous tools that facilitate capture, network traffic, and by consequently "spy" users emails (it would suffice with a sniffer). Therefore, to protect integrity and Confidentiality of the data goes to cryptography, which offers different tools for sending emails certified electronics. However, the most important thing is that offer powerful SSL encryption and are transparent in the face of System.

c) Communications security

It stands for security in the flows of data.

Communications with the voter.- To ensure the  communication between the voter and the System are used authenticated certificates, through the Authority of Certification, which offer a public key encryption that guarantee confidentiality, integrity and accessibility.

The technologies used for this purpose are: Issuance of Authenticated Certificates (by an CA) based on the X.509 standard, by Server and client, and Protocol SSL (Secure Socket Layer), which is a worldwide standard for Web security used in this case for channel encryption of communications

The minimum requirements for different  Certification Authorities candidates for the implementation of This technological support are two: Offer SSL encryption not less than 128 bits, and implement the SGC protocol (Server Gated Cryptography).

Communications between system elements.- The communication standard between the different resources of the application (servers, databases, printers, etc.) is LDAPv3 ( Lightweight Directory Access Protocol ), which provides the control and security that this system requires Specifically, OpenLDAP is used , due to its absolute transparency (Open Source) since it is compatible with all modules.

Some interesting features for the LDAPv3 system are: i) To have strong authentication support thanks to the use of SASL ( Simple Authentication and Security Layer ), for this we must make use of the Cyrus Sasl software, ii) offer protection mechanisms for confidentiality and integrity thanks to the use of TSL (or SSL), for this we must use OpenSSL software, iii) topological control, that is, offer the possibility of configuring the service (Slapd) to restrict access to the socket layer based on the topological information of the network, iv) mechanisms to control access to system resources, through the creation of groups and user profiles, IP restrictions, names. domain, etc., v) Backend choice for databases, vi) possibility of raising many instances to different (or equal) databases at the same time, vii) use of threads to obtain high performance, viii) highly configurable.

Transmission in the communication channels.- There are Three possibilities: Join the teams involved with cards separate network and a crossover cable; cryptography; certification and Authentication of the machines involved. The choice will depend on degree of security that is intended to be acquired, option 1 is the most basic and three the most secure (since it includes encryption). Too you can choose combinations of them.

d) Administrative Security Security in accessing web servers

Web servers will depend on the budget of the authority requesting the elections, but in any case they must have the following minimum configuration parameters to establish the desired security in the system, the which must be verified by the Administrator:

- ServerType: Tells the Server how to internally handle the requests of navigators. The value that it must have is Inetd, when giving priority to security, than to system performance (resource consumption, standa-
lone)

- ServerRoot: Indicates where the configuration files, errors, and logs. It is very useful in administrative security in combination with DocumentRoot.

- TimeOut: Indicates the number of seconds before  Send a timeout. This parameter is very important to optimize system performance, more with the ServerType configuration with Inetd. Imagine that for any reason the server enters an infinite loop, this would consume many resources (memory, micro, an instance in the system ...), therefore this parameter has You have to be very tight to get a high performance.

- Port: Determine the service port of the application. In principle, port 8080 (the most common) it will be the access port, but the rest of the ports must be controlled by the System Firewall in order to avoid obtaining information that can be used against.

- ServerAdmin: Offers the possibility of including the email address of the Administrator with the aim that if an error happens, inform him of it.

- ServerName: Parameter to modify the IP or the domain name set during the installation of the Server.

- DocumenRoot: This parameter, also called virtual root, tells the server where it can obtain the requested Web pages, that is, it indicates that it must consider the specified directory as the path of the upper level. The choice of this directory is very important , for example if the value of the DocumenRoot were "./" or "c: /", you could access the entire hard disk, (obviously you would not have directory permissions).

If it were necessary to increase security, could, for greater order and security-administrative, separate into two disks Hard operating system files, along with installation from the Server, and on the other disk, the Web pages.

To access the different resources and System web information uses an OpenLdap protocol. The LDAP directory servers (Lighweight Directory Access Protocol) stores your data hierarchically, in a very similar to the way a Unix System structures its directories This hierarchical structure is beneficial by several Reasons: First, because it allows to establish certain privileges to a group of individuals based on the tree of directories, second, because it allows you to search for resources or information in a more efficient way, and, third, because it also allows access control to certain resources by certain users, defining how they work with them (reading,  writing or both).

LDAP provides a complex control of instances or ACIs, which allows you to define how it is stored or retrieved the information, based on user profiles and these They must be administered.

Security in access to databases

The database administrator must Define the user profiles of all customers who can access data stores, specifying the way to access them (read, write or both) and what data They may or may not access. This depends on the implementation of the bases of data, and these in turn may vary according to the entity To request the elections.

The conceptual model that is implemented for the access to data stores is independent of the way (reading / writing) in which the different systems of the architecture access the databases through the corresponding interconnections or data flows (see last table).

Security in the management of the System Logs

Log files and incident logs are essential for a possible individual claim of the vote.

Log files are files, usually of text, which creates the computer itself to store or register All events that occur in the system.

Log files is a system option which provides the execution traces of a given instance. These files are distributed among the different systems so that a person who wanted to rebuild an instance determined (from a voter), you should have the permissions and access in all the systems involved.

Incident records differ from log files, which focus more on the interaction with the system that in the data entering and leaving the different systems. Moreover, these are stored in the different databases, while log files are stored in The different servers.

In the telematic voting system in question the  Log files have the function of recording the events that occur in the System (operational), applications included. For the both are of great importance to monitor the system before, during and after the voting process, to ensure the Absence any manipulation, or, if any, determine where and who has been

Many of the log files are in text flat and therefore its editing and manipulation is relatively simple (once the permits have been acquired), so they have established distributed or remote (secure) log mechanisms and managed by different personnel.

The minimum information to collect in the logs is The next:

-

All Authentication, good or failed.

-

The messages from the kernel.

-

The system boot messages.

-

A logins failed when it exceeds a number of errors determined.

-

A record with information about the executions of the order "its".

-

A log file that stores all the log by default, and so it works to check possible modifications to a log file determined.

To log all this information you have to correctly configure the file /etc/syslog.conf, which will be System Administrator task. However, this creates several questions, derived from which the System Administrator could have a fault or could become tricky. Therefore, it has provided that it is not a single System Administrator in charge to configure the file /etc/syslog.conf, but for each main system of the VT System (of anonymity, of voting, of count and verification), there are three administrators of the system that jointly design the syslog.conf file, and that subsequently each of them monitor the log files in three different machines, that is, that the logs do not register local way on the machine in question but on three computers different and isolated from the outside world (no internet connection, only to your system).

This distributed log system has several Advantages: First, it is difficult to attack, since the attacker should not only question the "father" system but also to each "son", otherwise it would remain at discovered and would jeopardize its integrity in the system. For another side, as it is planned that the information of the three systems "children" be the same, you get more consistency, and less possibility of data manipulation by a Tricky administrator And also being provided that these systems "children", of logeo, are dedicated exclusively to their  function, the number of processes contained in the system is very reduced, and therefore easy to protect.

In this case the Firewall is an entity fundamental, since the transmission of the logs is through port 514 UDP, and therefore ensure that we have controlled the different ports and ips.

e) Data security

It is the security of the data stored in the database elements, regardless of the restrictions of use that they can be made according to the system in question.

Data referring to Voters and the process Voting are stored in databases. From the point of view of the physical storage the data is contained in one or several files, according to the database management system to be used For example, in Mysgl, the data is contained in .txt files, readable by any user who has permission to reading, and editable, by anyone who has read permissions, writing. In Oracle, the information in a table is distributed in different files, which together with the coding of their content (It is not readable, but it is through the DBMS), it gives us greater security.

In any case, to ensure integrity and the confidentiality of the data can always be resorted to a Symmetric key encryption of the content of the information sensitive database (the same DBMS, provide them), so which is logical to think that an alleged attacker will do it through the DBMS (Database Management System), and not directly on the files where the data is physically contained. In response to this hypothesis, the fraudulent user should impersonate a system user, an administrator, or even A super administrator. This could reach happen, either because of the skill of the attacker or because it is the own administrator or super-administrator (more probable).

The logical measures to establish to avoid This possible attack, are the following:

Log of the database management system.- Every database management system that boasts as such has log tools that allow you to register, from whom you open a instance in the system, until possible errors at startup, course and stop. This way you can establish who unlawfully manipulated the content of the database.

Database administration.- Restrict access to certain tables or columns serving the user supplanted (or to which the attacker belongs, in case of fraud internal).

Logical Design of the System.- Design the databases in such a way that the sensitive information contained in each table needs processing to make sense. For this, both users (the identity in the System), as well as the vote, and the vote, will be numbers, and these will be in the fragmented database, thus needing various algorithms contained in the different systems to unify in a single number and so have
sense.

It should be noted that the fragmentation design and defragmentation is open box, that is, we do not force that be a specific algorithm but the door is left open to a free implementation according to the type of expected responses. For the implementation of the system, the choice of a algorithm that is unfeasible manual resolution even knowing the same, for example a system of n equations with n unknowns being n> 50. Or an exponential algorithm such that if it is not program in an appropriate way, there is an overflow of the memory.

Consequently, high algorithms are sought processing cost In addition these algorithms are located in two different parts of the System: the fragmentation of the vote, it found in the various voting systems, while the Defragmentation is in the Counting system.

The Vote System, in terms of load of processing is mild, because it is a distributed system between different departments or regions (small group of users), in charge of receiving voter votes and return the validation of the vote. All the previous interaction with the voters it falls on the Anonymity System.

As for the Counting System, its burden of processing is just that, count the votes, which can become large in response to the defragmentation algorithm, although the characteristic of being a process off-line, that is, it comes into operation When the voters have already cast their votes, they play in their favor.

This division of algorithms (Vote System, fragments the votes, and recount system unifies them again) provides a layer of security (especially against attacks internal), by distributing responsibility among different parties of the System and therefore cooperation and permission of the same.

f) Verification System Security

The security of the verification system is already defined by the functions of this element of the basic architecture, which favors the transparency of elections, as well as the impossibility of electoral fraud by third parties.

Global verification.- Performed by the own Verification System, who is responsible for making three Verifications: 1) That the number of voters is equal to or less than number of votes; 2) that the number of voters is equal or lower to the Universe of Voters; and 3) that the weight of the votes is the correct, for each vote.

Individual Verification.- This possibility It is technically feasible. Your goal is that each voter can check your vote for a period of time, without losing the anonymity. However, in case of a claim, it would rise the instance in question in the opposite direction (previously acquiring all privileges in the different Systems), thus losing the  anonymity, and therefore violating the law, so in This project has not been contemplated.

In short, the system of this invention is not limited to introducing a telematic voting system in current voting systems, but proposes a restructuring of the electoral processes themselves, which It is a real innovation, whether public processes or private.

This restructuring occurs because it creates a Fully electronic voting process, with all phases computerized, being able to apply independently of the place where the voter is located, unlike all systems of electronic voting developed and implemented to date, who need the physical presence of the voter at the time of the vote

But in addition to that fundamental advantage of to vote online, the system introduces other advantages important, some of which direct consequence of the same, which are discussed below.

Computerization and centralization of the process.- The system saves information about the vote, as well as the information on who has voted, in central databases, although independent of each other. This improves the traditional system in which those in charge of the polling station had information on who voted and who did not, thus violating the premise of the voter's identity in any case, not only in that of vote.

Decrease in the possibility of coercion.- Because physical presence is not necessary in the place of voting, being able to do it from home, any possibility of coercion at the time of the vote, being reduced to the same security and privacy that one can have on their own home.

       \ newpage
    

Adaptability.- A design has been designed system with modular capacity, that is, any of its elements can be modified to adapt to the regulations that Have the voting process in question. It could, for example, allow more than one vote per person, non-anonymous votes, or the use of Percentages of decision by vote.

Ease of handling.- Another advantage to highlight is ease of handling for the voter, for him everything happens in three different screens, one last that informs you that your vote It has been counted correctly.

Elimination of the vote by mail guaranteeing possibility of exercising the right to vote in any case.- With this system users who are outside of Spain or not they can travel to the polling stations they can vote from his own house, like everyone else.

Compatibility with the current electoral process.- The system of the present invention has been designed in such a way That was compatible with the traditional process. For one hybrid implementation of the state voting process closest to the voters would only need to have centralized lists where the members could report that this person has voted for the traditional system

Free advertising to the ideas of all applications.- This system offers the same opportunities to all the participants, regardless of their ideology or affiliation politics. Therefore, during the process of registering candidates including a module with which all candidates have a server space to expose your ideas as well as to Include external links to your own pages.

Automatic and instant generation of Results.- Since this voting process is based on systems Full computer features all the features and facilities they offer: allows the polls to be open and close exactly at a predetermined time, the count of votes, which normally takes a few hours, could be practically instantaneous, the results may be published In Internet.

Application with a robust flow.- Another issue that has been taken into account in the design is that the process of Voting must be taken in a series of concrete steps followed by so that no malicious user can take a path alternative. This is why volatile sessions have been introduced, increasing security since no user can skip No process step. In addition, this allows to take into account certain peculiarities for each user. It should be noted that the  Use of this type of volatile sessions does not allow more than one vote per person, even if you have started twenty volatile sessions since the beginning of the vote may only vote once and may not Start any later.

Automatic verification of the results.- One advantage more than this telematic voting system presents is the automatic verification of the results .. This cannot be done allow, but if it should occur they must exist m This system presents mechanisms that detect and notify the relevant authorities if you have tried to modify the interest results private individuals

System security.- How is a system in the that all processes depend only on machines, error and Human evil are not applicable. As explained, each machine used is an inaccessible closed box with a certain logic internal These machines will be supervised by different actors humans, with different interests in the results, so that guarantees that a large-scale plot will not be created. In addition, the codes with the internal logic of the machines will be made public The process and data security will be guaranteed even if the codes are public so you can offer a robust security system while a logic of transparent performance.

Some advantages of these mechanisms are: i) random identity generation, user data never they are associated with the vote cast by it directly; ii) fragmentation of information, this means that to retrieve it is it is necessary to solve certain different algorithms spread among several systems: iii) access control through personal keys issued safely by the Authority that manages the process electoral; iv) restriction of administrative access for ensure that only each machine can physically access the accredited administrator; v) registration of virtually all actions performed by the system, and only the competent authority may, after the voting process and exceptionally, consult them in case of claims; vi) use of digital certificates, issued by Certification Authorities of public faith, which must be outside the voting system and provide a service with sufficient professionalism, depending on the needs of the implementation in each case; vii) computer security mechanisms, apart from security mechanisms specified above there are many others but that are more related to computer science proper that with the present design. This type of mechanisms range from computer firewalls, which prevent external attacks, even the use of virus-immune software, which prevents Trojan attacks.

For a better understanding of the system vote whose patent is claimed, and especially with a view to the explanation below is made about the way in which the practice is carried out, it is accompanied by this descriptive report Two illustrative drawings: The drawing in Figure 1 is an outline of the global voting process, with the eight main elements of the system and the twelve data flows between them place, while Figure 2 is a recreation of the case study of implementation of the voting process discussed at the end of the description.

Execution mode

Taking as a reference the global scheme of telematic voting process illustrated in Figure 1, we turn to then make a detailed presentation of your way of Real life implantation.

For this it is necessary to establish the profiles of the people involved in the process, by margin of the voters themselves, then describe the different phases of implantation. The exhibition closes with a case practical as an example.

I. People involved in the process

In the implementation of the voting system  telematics through the developed Internet intervene, such as minimum, the following agents:

Entity requesting the elections.- You must provide a list of the voters, as well as the voting weight of each one, and prepare, in case it is agreed, the rooms necessary for the installation and use of the computer equipment. It is also responsible for choosing the Certification Authority, depending on the budget you have and the offers you receive, provided that they meet the minimum requirements: offer SSL encryption not less than 128 bits and implement the SGC ( Server Gated Cryptography ) protocol.

Administrator.- Its functions or tasks will be: i)  verify that the web server meets the minimum requirements; ii) create and manage different users and user groups of the system; iii) configure the Slapd daemon correctly, where you specify the interfaces where you listen, contained in the variable, Slapd Services. The communication protocol that you must specify is the ldaps; iv) set up correctly the .ldap .conf files, where the configuration is defined global customers Ldap; v) correct configuration and management OpenSSL, for certificates, key renewal, etc.; vi) correctly configure the file /etc/syslog.conf.

Computer technicians.- They are part of the active safety of the process, its function is to control that all  System security parameters remain stable.

II. Embodiment

Before the vote, the system already has a database of voters (Universe of Voters), provided by the entity requesting the vote, with some personal information, for example an email, and with the weight of each voter's vote, if there would be differences.

The Certification Authority system sends to voter public keys certifying them, this step is corresponds to the data stream called key Public-Certificate.

The voter goes to the official voting website, where a window that asks for that or that information is opened. The user enters them, this step corresponds to the data flow called User Identity. The voter on the official voting website can see links to the different candidates made by the High Ideas Candidate module of the Anonymity System. The Session Management module of the Anonymity System is responsible for customizing the presentation for the user and creating a profile.

The Anonymity System receives this information, and verifies in the Voter Universe database, through the Check Universe Voters module, that the user who connects to the system belongs to the range of voters. This query corresponds to the data flow called User Data. If so, a CRS (certificate request) is generated, which duly authorized by the Certification Authority will be sent along with a personal password to the voter.

The voter, following the instructions of screen, open your email where your personal key will be and the certificate issued by the Certification Authority. After download them, run the auto-installable of certification

The executable tells the voter the address application web. Once in it the voter can see the Candidate pages (for that you don't need to identify yourself) or Identify in the system with the personal password. So he Voter, to identify yourself, enter your encrypted personal key with the public key of the server.

The Anonymity System checks the validity of the personal password. If so, the session will be created, otherwise access will be denied. From this moment the communications are secure between the voter and the
system.

The Anonymity System then, through the Check Status module , checks the voter's status through two verifications: first, if the voter has an identity already assigned in the system, if so, it is sent to step 10 (for greater anonymity the voter has a random name in the system at the time of voting); 2) if you have voted (if yes, you are denied continuity in the system). This step corresponds to the data stream called Cod.Bloq.Voto.

The Identity Generator module of the Anonymity System generates an identity for the voter, checking said operation in the User-Identity Relationship database. This is essential so that the Check Status module can successfully perform the first verification. On the other hand, the local database is updated, where personal data and system identity are introduced in a fragmented way, that is, identity in the system is not related to a specific voter. This step corresponds to the data flow called Cod.Bloq.Id-User.

Then the Session Management module of the Voting System, receives the session of the voter with his identity in the system, verifying the validity of the same, and if so, the voter is shown the request for vote.

The voter sees on their screen that they select the candidate they want and press the "Vote" button. With this gesture, the voter gives the Voting System, their vote together with the identity without fragmentation provided by the system, this step corresponds to the flow of data called Identity in the voting system, which is stored by the Insertion module of voting in a database different from that of user authentication, thus preserving anonymity.

The Vote System receives the vote, which will be registered in the electronic ballot box BD and updates it with the vote and Identity in the system without fragmenting. This step is corresponds to the data stream called Vote system id.

The Vote System updates the BD Relationship User-Identity establishing that voter has voted, generating a blockade before a second voting attempt by the voter. This step corresponds to the flow of data called Cod.Bloq.Voto.

The Voting System, by means of the Report Generator module , confirms to the voter that the voting has been registered, and the voter sees it on the screen.

On the other hand, a user authorized by the entity that calls the elections, locally accesses the Counting System, which verifies that this user is the authorized one through the Access Control module .

Once the count is activated, it will be called remotely to the Verifier System, which will assist you in case of having finished the voting period, otherwise reject the petition.

The Verifier System accesses the bases of Electronic urn data (this step corresponds to the flow of data called No. of voters) and Relationship User-Identity

The Verifier System, through the Partial and Total Verification module , the number of votes is equal to or less than the number of local voters, and that the number of voters in the system is equal to or less than the number of global voters. On the other hand, through the module Weight of Votes , also verify that the weight of the votes is correct. This step corresponds to the data flow called Number of total votes-Weight vote.

In the event that the Verifying System returns a contradictory result, the counting will be terminated reporting the errors. If the Verification System returns a satisfactory result, the Report Submission module collects the results obtained, gives them a certain format and sends them to the Counting System. This step corresponds to the data flow called Test.

The Count System read the report submitted by; the Verifier System and if everything is correct it connects to: the electronic Urn database, and counts the votes., This step corresponds to the data flow called Nº 'of Votes. In another case, that is, the votes will not be counted, going directly to the Voting-Verification Report Generator module.

Finally, the Voting Report-Verification System of the Counting System module generates a report of the electoral elections, which can be published and consulted on the web.

III. Case study

Be a company that has contracted the services of this telematic voting system as it wishes to hold a general meeting to vote on a capital increase. This company is divided into a thousand shares that, to simplify the explanation, will be distributed among one hundred people in equal parts. The voting possibilities will be YES, NO and
ABSTENTION.

How the company wants to make a decision equitable and impartial, it has been decided that the vote will be secret, thus avoiding coercion, that only one vote will be cast for shareholder and that total security is desired that the process be It has performed perfectly. The duration of the vote will be six hours.

As its shareholders, represented in the Figure 2 as an icon with an envelope, they don't live in the city where they Find the headquarters of the company, the premise has also been imposed that voting can be done from any part of the world and with any technology of; internet access available.

       \ newpage
    

The company was given the option that all the process was carried out remotely, however, the company He preferred that the machines be placed in his own building.

For a simple implementation you have four computers as base servers, which would accommodate the systems already specified above: anonymity, voting, count and verification.

In addition, three other computers are necessary where different databases are installed and a team of firewall, to isolate the computers from the rest of the Local Area Network of the company.

For the important supervisory work, they use four computers connected to the different servers thus extending the security with which this task is performed.

Finally, three empty rooms are necessary, where two of them would be low security, and the other high security, partly provided by the company itself.

The implementation of the system would try to be done in the cleanest and least harmful way for activities of the company. Since it has commented that it has a room specialized for server placement, placement of the systems and databases that contain the Universe of Voters and the relationship of Identities and users, would be carried out in it (Room 1 in Figure 2).

The rest of the systems and databases are they would place in one of the other two conditioned rooms (Room 2 in Figure 2). In the last free room the systems of supervision, as well as the computer technicians in charge of its use and the coordinator (Room 3 in Figure 2).

For the configuration chosen by the company, choose an appropriate software, with the minimum configuration for function, avoiding complications of use. Since the installation of the machines must be fast, but clean and transparent, it has made the decision to carry blank computers, and once connected would proceed to the installation of an image through the Insertion of a data CD. These images would contain all functionalities needed for each system, as well as scripts preload of databases if necessary.

The necessary personnel for this type of events It differs greatly depending on the implementation. In this case it is estimated that a team of seven computer technicians would be necessary (represented in Figure 2 as an icon with a spanner) during voting day Five would handle the operation monitoring, where four of them would lead to out the supervision itself and another would perform the task of coordinator (represented in Figure 2 as an icon with a key). The other two computer scientists would be near the halls of the servers in case there is an incident.

For the security of the rooms would be you need to hire a security company to send three security agents, one for each room to watch. In Figure 2 They are represented by an icon with a lock.

As an example of transparency and cleanliness in elections would require the hiring of a notary, who verify and sign the voting results before being published.

Finally, although it does not exactly enter the definition of personnel, the issuance of one hundred emails would be required certified physicists to convey the basis of voting and the keys to access voters.

All teams will be initialized six hours before the start of the vote and your good will be checked operation through a series of commands prepared for it. Immediately after all the staff will leave the rooms of the servers, preventing any type of unauthorized entry by the coordinator, and monitoring will begin from the room remote The function of the Informatics will be to control that All system security parameters remain stable. It should be noted that the monitoring of the parameters of security will only be in reading sense, preventing any type of manipulation

The servers will start and end on Voting process at set times automatically. If there is a change in these parameters, the coordinator would be informed immediately, as it is the only one with decision power on the performance of the rest of the staff, so that the That is deemed more relevant.

Once the voting process is over, will automatically verify and count the votes  issued. The notary will be allowed access to the Counting room, accompanied by a security agent, who check the accuracy of the results and certify it, then publishing them on a page web, as well as to send to all participants by mail electronic.

Claims (16)

1. Telematic voting system via the Internet, carried out in a communication scenario involving a set of automatic systems that operate under predetermined operating system programs, database managers, web applications and Internet security, characterized because said set of systems is constituted in its basic architecture by an Internet Certification Authority, responsible for encrypting communications and authenticating both the voter and the voting system, an Anonymity System, responsible for presenting candidates, controlling access , to guarantee the anonymity of the voters and their follow-up during the process, a Voting System, in charge of receiving, managing and storing the votes cast of a specific department, a Recount System, in charge of counting the number of votes, a Verifier System, responsible for validating the electoral elections, a Rela database User-Identity, responsible for storing user data, their identity in the system and the state of the voters, a Universe Database of Voters, responsible for establishing a range of voters for the system, and an electronic Urn database , responsible for storing the votes cast by the voters. 2. Telematic voting system through Internet, according to claim 1, wherein the Authority of Internet Certification is a public faith entity that uses SSL (Secure Socket Layer) Web security encryption, as you can Be the Public Administration itself. 3. Telematic voting system over the Internet, according to claim 1, wherein the Anonymity System is composed of the following modules: Session Management , responsible for customizing the presentation for the user and creating a volatile profile thereof, as well as its ranking, Check Status , responsible for checking the status of the voter in the system, first verifying if it has been granted an Identity, and second, if it has voted, Check Universe of Voters, responsible for verifying that the user who connects to the system belongs to the rank of voters, Identity Generator, responsible for generating Identities in the system based on random numbers (algorithms) to preserve the anonymity of Voters, Identity Insertion , responsible for registering in the system the assignment of an identity to each voter, and Alta Ideas Candidate , responsible for collecting the presentation and personal links of the candidates 4. Telematic voting system via the Internet, according to claim 1, wherein the Voting System is composed of the following modules: Session Management , in charge of receiving the session of the Anonymity System, Voting Insertion , in charge of storing the vote cast by the user and the identity in the system that represents him, Fragmentation of the vote , responsible for fragmenting the vote, Report generator , responsible for generating confirmation reports for the voter, and Insertion of vote blocking , responsible for validating the vote, reflecting it in the system by inserting a "1" where there was previously a "0", in the User-Identity System Relationship database. 5. Telematic voting system through Internet according to claim 4, wherein the module Inserting Vote System vote stores the votes cast by users in a different database than the authentication of the users. 6. The telematic voting system via the Internet, according to claim 4, wherein the Voting Insertion module of the Voting System validates the votes cast by users through the User-Identity Relationship database, inserting a "1" in the place of a "0". 7. Telematic voting system over the Internet, according to claim 1, wherein the Counting System is composed of the following modules: Access Control , responsible for filtering access to the system, leaving free transit only to the user who is registered , Voting Counter , in charge of reading the report submitted by the Verifier System to give access to the electronic ballot box and counting the vote, or, if there are irregularities, go directly to the next module, Votes-Verification Report Generator, in charge to present a report of the electoral elections. 8. Telematic voting system via the Internet, according to claim 1, wherein the Verification System is composed of the following modules: Partial and Total Verification , responsible for verifying that there are no more voters in the System than voters registered in the universe of voters, Weight of Votes , responsible for determining due compliance with the pre-established rules, Sending Reports , responsible for collecting the results obtained, giving them a specific format and sending them to the Counting System. 9. Telematic voting system over the Internet, according to claim 1, wherein the Anonymity System, Voting System, Counting System and Verification System use XML ( eXtensible Markup Language ) and XSLT ( Extensible Stylesheet Language Transformations ) technologies to The presentation of the information. 10. Telematic voting system over the Internet, according to claim 1, wherein the Anonymity System, Voting System, Counting System and Verification System use LDAP ( Lighweight Directory Access Protocol ) and SGBD ( Base Management System) technologies Data ) for access and data management. 11. Telematic voting system through Internet according to claim 1, wherein the management system of  databases (DBMS) includes as logical measures before a possible attack by impersonation of one system user by another fraudulent, a log of the DBMS, the restriction of access to certain tables or columns serving the impersonated user, and a design logical of the system in which the users, the vote and the voted are  fragmented numbers in the database that require algorithms contained in the different systems for des fragmentation. 12. Telematic voting system through the Internet, according to previous claims, characterized in that among the elements that constitute the basic architecture of the system there are the following twelve interconnections or data flows: (1) Public-Certified Key, in which the Certification Authority system sends the public keys for certification to the voter, (2) User Identity, in which the voter sends the Personal Data and the key assigned for authentication to the Anonymity System, (3) User Data, in which the Anonymity System, through the Check Universe of Voters module, reads from the Universe Voters database the total number of voters and the unique data of each voter for authentication, (4) Identity in the system, in which the Anonymity System redirects the voter's identity to the Voting System in the system without fragmenting, (5) Identity in the voting system, in which the voter gives the Voting System, your vote along with the un fragmented identity provided by the Anonymity System, (6) Voting system id, in which the Voting System, through the Voting Insertion module, sends this data to the base of data Electronic urn, (7) Number of total votes-Voting Weight, in which the Verifier System consults the electronic Urn database, either through the Partial and Total Verification module, to account for the total votes, or or through the Weight of Votes module, to know, where appropriate, the quantitative weight of each vote, (8) Number of voters, in which the Verifier System, through the Partial and Total Verification module, consult the base of data User-Identity Relationship, where the number of partial voters who have made use of the system and the number of censored total voters appears, (9) ID-user (bi-directional) block code, in which the Anonymity System, by on the one hand, through the Check Status module, check the Database User-Identity Relationship that the voter has authenticated, and on the other hand, through the Identity Insertion module, updates the local database, where personal data and voter identity are entered into the system ( fragmented), (10) Cod.Bloq.voto, in which the Voting System, through the Voting Block Insertion module, validates the voter's vote in the User-Identity Relationship database, generating a block to not vote a second time, and in which the Anonymity System, through the Check Status module, consults in this database that the voter has voted, (11) Test, in which the Verifier System, through the module Sending of Reports , it sends to the module Counter of votes of the System of Count, the report of verification of the electoral elections, and (12) Nº of Votes, in which the System of Count, through the module Counter of votes , will access the base Electronic urn and accounting data The votes stored by means of a vote defragmentation algorithm. 13. Telematic voting system over the Internet, according to claim 12, characterized in that to ensure communication between the voter and the System in terms of confidentiality, integrity and accessibility, authenticated certificates are used, through the Certification Authority, based in the X.509 standard, by the Server and the client, and SSL Protocol ( Secure Socket Layer ). 14. Telematic voting system over the Internet, according to claim 12, characterized in that to ensure communication between the different elements of the system and access to different web information resources, Ldap ( Lightweight Directory Access Protocol ) protocols are used, which for the first purpose is LDAPv3 and, for the second, OpenLdap. 15. Telematic voting system over the Internet, according to claim 12, characterized in that to ensure access to the web servers of the System, these will have the following minimum configuration parameters: ServerType, in Inetd value, ServerRoot, TimeOut, Port, ServerAdmin, ServerName and DocumenRoot. 16. Telematic voting system over the Internet, according to claim 12, characterized in that to ensure the management of the System Logs a modality of distributed Logs is introduced in which the configuration of the file /etc/syslog.conf is carried out jointly by three Administrators associated to each main system of the VT System: anonymity, voting, counting and verification system, who monitor the log files on three different computers isolated from the environment (without Internet connection or other type of communication network) for each of those four main elements.