JP2005208830A - Voter list management system and method, and voter confirming device and method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a voter list management system and method for managing the voting of voters corresponding to configurations where network type voting and voting station type voting coexist. <P>SOLUTION: Network type electronic voting equipment 11 or the like performs access to a network type electronic voting executing device 16. The network type electronic voting executing device 16 makes an inquiry for the voting circumstances of voters to a voter identifying device 15. The voter identifying device 15 refers to a voter list database 18, and returns the voting circumstances of the voters to the network type electronic voting executing device 16. The network type electronic voting executing device 16 transmits candidate data to the network type electronic voting equipment 11 or the like when the voters have not voted yet. The network type electronic voting equipment 11 or the like selects the candidates, and transmits the voting result to the network type electronic voting executing device 16. The network type electronic voting executing device 16 stores the voting results in a voting result database 19. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an electoral list management system and method, and an elector confirmation apparatus, method, and program, and more particularly, an electoral list management system and method, and an elector confirmation apparatus and method in a combined form vote of a network type vote and a polling place type vote. And program.

  An example of an election reception apparatus is shown in Patent Document 1. In this election reception device, the corresponding elector is searched from the elector list based on the input personal information, and the elector list information of the retrieved elector including the voting status information is output. With reference to this output information, it is determined whether or not the individual elector has not voted or has already been voted. When the voter has not voted, the voter is updated to voted. In addition, the voting status information that has been mistakenly updated to voted is displayed together with the electoral list information so that it can be recognized. A specific person in charge of managing the electoral list is recognized by comparing the registered person-in-charge code or password with the input person-in-charge code or password. Only this specific person in charge is allowed to rewrite the voting state information into an unvoted state. This change is registered as a change history including at least one of the elector who is to be changed, the person in charge code, and the operation time.

  An example of an elector confirmation system for confirming whether or not a resident who has visited a voting venue is an elector is disclosed in Patent Document 2. In this system, first, the election management center distributes the public key certificate to the voting hall, and acquires the distributed public key certificate at the voting hall. The public key is extracted from the public key certificate and passed to the electoral inquiry terminal. Residents who want to vote insert their resident card into the inquiry terminal. Similarly, a PIN code for accessing information in the resident card is input to a PIN code input device connected to the inquiry terminal. If the entered PIN code is correct, the personal information in the card is read out, encrypted with the public key, and transmitted through the network to the electoral inquiry server in the local government system. Data obtained by encrypting personal information in a card with a public key is called an elector key. The elector inquiry server determines in the electronic electoral list whether the resident designated by the received elector key is an elector or not, and if it is an elector, has already finished voting, Send the query result.

  An example of an electronic voting system in which a voter votes from a voting terminal connected to a network is disclosed in Patent Document 3. In this system, a voter votes from a voting terminal connected to a network, and the voted voting content is authenticated by an authentication device connected to the network. The authenticated voting content is encrypted and transmitted to the aggregation device connected to the authentication device via the network. The contents of the voted vote are obtained by decrypting the contents of the encrypted vote by the counting device, and the votes obtained from the candidates are counted based on the voted contents.

  An example of a voting method for a network-type election is shown in Patent Document 4. In this method, the voter first operates the voter terminal to visit the site of the election management department, and inputs the date of birth, license number, registration number, and the like. The election management server collates with the voter DB. If the result of the verification is that you are not the person, notify the voter to that effect. If you are the person, click the vote start button. When the voter selects the member's profile, the voter can obtain information on the candidates at the voter terminal. If vote is selected, a list of vote candidate names is displayed. Here, when the voter selects a desired voter name, the voter's voted name is displayed, and it is confirmed that no incorrect selection is made on the screen, and the vote is completed.

Japanese Patent No. 3195133 JP 2003-6382 A JP 2002-259621 A JP 2002-183366 A

  However, the background art described above has the following problems.

  In other words, when two forms of polling place-type voting that goes to a polling place and votes via a network and network-type voting that votes via a network are implemented in a mixed manner, voter management of electors cannot be handled. is there. For this reason, a malicious third party may perform double voting in different election forms. In addition, there is a possibility that a legitimate elector will vote while pretending to be a legitimate elector, and that a legitimate elector cannot vote.

  SUMMARY OF THE INVENTION An object of the present invention is to solve the above-mentioned problems and to manage an electoral list management system and an elector confirmation apparatus and method for managing an elector's vote that can cope with a mixed form of network-type voting and polling place-type voting. And to provide a program.

  The electoral list management system of the first invention of the present application is an electoral list management system that manages a list of electors who vote, and the voting status indicating whether the elector information and the elector have not voted or voted. Including an electoral list database, means for requesting confirmation of the elector who voted via the network, means for requesting confirmation of the elector who goes to the polling place and vote, and the vote status of the elected elector Means for confirming in the electoral list database; and means for displaying a voting instruction for the elector requested for confirmation when the voter status of the elected elector is unvoted.

  The electoral list management system of the second invention of the present application is an electoral list management system for managing a list of electors who vote, and the voting status indicating whether the elector information is unvoted or voted. Requests for confirmation of the electoral list database that includes a polling form that indicates whether it is a network-type ballot or a polling place-type vote to vote at a polling place when it has already been voted, and an elector who will vote via the network Means for requesting confirmation of an elector who goes to a polling place to vote, means for confirming the voting status of the elected elector in the electoral list database, and for the elected elector A means for displaying a voting instruction for the requested elector when the voting status is not yet voted, and the vote status of the elected elector is voted in a network type vote And the means for rewriting the voting status and the voting format of the requested voting person to an unvoted state when the confirmed elector is sent to a polling place to vote. Means for displaying a voting instruction for the elector.

  The electoral list management system of the third invention of the present application manages an electoral list including a network-type electronic voting terminal, a network-type electronic voting execution apparatus, an elector confirmation terminal, an elector confirmation apparatus, and an elector list database. An electoral list management system, wherein the electoral list database includes electoral information, voting status indicating whether the elector is not voted or voted, and a network-type vote or polling place that votes via the network when voted. The network-type electronic voting terminal inputs elector information (including authentication information) and has a list management data for each elector including a vote format indicating whether it is a polling place type vote to go to and vote Voting by selecting a candidate from the means for transmitting to the electronic voting device and the candidate data received from the network electronic voting device Means for transmitting a result to the network-type electronic voting execution device, wherein the network-type electronic voting execution device receives the voting person information (including authentication information) received from the network-type electronic voting terminal. Means for transmitting to the apparatus, means for receiving the name list management data including the authentication result and the voting state and the management number from the elector confirmation apparatus, and the case where the authentication result is OK and the name list management data indicates unvoted Means for transmitting candidate data to the network-type electronic voting terminal; means for adding the management number to the voting result received from the network-type electronic voting terminal; Means for transmitting to a person confirmation device, wherein the elector confirmation device comprises the network-type electronic voting terminal and the election Means for authenticating an elector by comparing authentication information received from a confirmation terminal and possessed authentication information, and management in the list management data when the list management data received from the network type electronic voting terminal indicates unvoted A means for registering a number; a means for transmitting the authentication result and the list management data to the network type electronic voting terminal and the elector confirmation terminal; and a voting time from the network type electronic voting terminal and the elector confirmation terminal. Means for receiving and registering the voting time and voting format in the roster management data, wherein the elector confirmation terminal inputs elector information (including authentication information) and transmits it to the elector confirmation device Means for receiving name list management data including an authentication result and a voting state from the elector confirmation device, and when the name list management data indicates unvoted And a means for displaying a voting instruction and a means for transmitting the voting time to the elector confirmation device.

  According to a fourth aspect of the present invention, the electoral list management system is configured such that, in the third invention, the electoral confirmation terminal indicates to the electoral confirmation device that the list management data indicates that the vote has been voted by network voting. Means for transmitting a request for initializing the voting status of the roster management data to put it in an unvoted state, means for transmitting a request for deleting a voting result related to the management number to the network type electronic voting execution device, and voting Means for displaying instructions.

  The electoral list management method according to the fifth invention of the present application performs electoral list management including electoral information and roster management data including voting status indicating whether the elector is unvoted or voted. A network-type electronic voting terminal for voting via a network, which is an electoral list management method, accesses the network-type electronic voting execution device, transmits elector information (including authentication information), and the network-type electronic voting The implementation device transmits the received elector information (including authentication information) to the elector confirmation device, and the elector confirmation device authenticates by comparing with the authentication information possessing the received authentication information. The list management data including the result and the voting status is transmitted to the network type electronic voting execution device, and the network type electronic voting execution device receives the authentication result OK. If the voting category of the received roster management data is not voted, the voting instruction is transmitted to the network type electronic voting terminal, and the voting confirmation terminal installed at the polling place Personal information (including authentication information) is input and transmitted to the electoral confirmation device, and the electoral confirmation device authenticates by comparing the received authentication information with the authentication information possessed, and displays the authentication result and the voting status. The electoral confirmation terminal includes the roster management data, and the electoral confirmation terminal votes the elector if the received authentication result is OK and the voting classification of the received roster management data is not voted. An instruction is displayed.

  The electoral list management method of the sixth invention of the present application is to go to the polling place or polling place that voted via the network when the voter classification and the voter category indicating whether the voter has not voted or voted. An electoral list management method for managing a list of electors who have a list management data including a vote format indicating whether it is a polling place type vote to vote, and which performs a vote via a network The terminal accesses the network-type electronic voting execution apparatus and transmits elector information (including authentication information), and the network-type electronic voting execution apparatus transmits the received elector information (including authentication information) to the elector. Sent to the confirmation device, and the elector confirmation device authenticates by comparing the received authentication information with the authentication information possessed, and the voting classification of the list management data is not voted. For example, the management number of the elector is registered in the roster management data, and the authentication result and the roster management data are transmitted to the network type electronic voting execution device. The network type electronic voting execution device receives the authentication result OK. If the voting classification of the received roster management data is not voted, a voting instruction and candidate data are transmitted to the network-type electronic voting terminal, and the network-type electronic voting terminal receives the candidate data from the received candidate data A candidate is selected and the voting result is transmitted to the network-type electronic voting execution device. The network-type electronic voting execution device adds the management number of the elector to the received voting result and stores it in the voting result database. Electoral confirmation terminal installed at polling place, elector information (including authentication information) about elector who went to polling place Is sent to the electoral confirmation device, and the electoral confirmation device verifies the received authentication information against authentication information and authenticates it, and sends the authentication result and the list management data to the elector confirmation terminal. The elector confirmation terminal transmits the vote instruction to the elector if the received authentication result is OK and the vote classification of the received list management data is not voted.

  According to a seventh aspect of the present invention, there is provided an electoral list management method in which the electoral confirmation terminal in the sixth aspect of the present invention is that the received authentication result is OK, the voting classification of the list management data has been voted, and the list management data If the vote format is “network”, an inquiry as to whether the vote is illegal is displayed. If “invalid” is entered, the management number registered in the list management data is attached and Sending a request for clearing the voting result to the network-type electronic voting execution device, the network-type electronic voting execution device deletes the voting result related to the received management number from the voting result database, A polling status initialization request is transmitted to the electoral confirmation device with the name of the elector and a management number attached, and the electoral confirmation device includes the vote classification and voting format of the roster management data Change to the "non-voting", remove the control number of the roster management data, the electoral confirmation terminal displays the voting instructions with respect to the electors, characterized in that.

  According to an eighth aspect of the present invention, the network-type electronic voting apparatus according to the sixth aspect of the present invention is such that the voting classification of the list management data has already been voted and the voting format of the list management data is “network”. If so, the network type electronic voting terminal sends an inquiry to the network type electronic voting terminal, and the network type electronic voting terminal inputs “invalid” and second authentication information in the case of the illegal voting. To the network type electronic voting execution device, and the network type electronic voting execution device receives “illegal” and second authentication information from the network type electronic voting terminal, and receives the second authentication information. And the elector name and management number are transmitted to the elector confirmation device, and the elector confirmation device holds the received second authentication information. When the second authentication is performed by comparing with the authentication information and the second authentication result is OK, the voting classification and the voting format of the list management data are changed to “unvoted”, the management number is deleted, and the second Authentication result is transmitted to the network-type electronic voting execution device, and if the received second authentication result is OK, the network-type electronic voting execution device displays the voting result related to the management number of the elector in the voting result database. And the voting instruction and candidate data are transmitted to the network-type electronic voting terminal, and the network-type electronic voting terminal selects a candidate from the candidate data and sends the voting result to the network-type electronic voting The network-type electronic voting execution device registers the received voting result in the voting result database together with the management number. .

  The electoral confirmation apparatus according to the ninth aspect of the present invention is an electoral confirmation apparatus for confirming an elector in a form in which a network type vote for voting via a network and a polling place type vote for visiting a polling place are mixed. , A means for receiving a confirmation request of an elector who went to the polling place from an electoral confirmation terminal installed in the polling place, and a search of a database for managing the voting status of the elector and the election of the elector who went to the polling place A means for confirming the voting status, and when the voting status of the elector who went to the polling place is registered as having been voted by network-type voting, the registered voting status is initialized to an unvoted status. Means.

  The elector confirmation method of the tenth invention of the present application is an elector confirmation method for confirming an elector in a form in which a network type vote for voting via a network and a polling place type vote for visiting a polling place are mixed. Voting status of the elector who went to the polling place after receiving a confirmation request of the elector who went to the polling place from the electoral confirmation terminal installed at the polling place, searching the database managing the vote status of the elector If the vote status of the elector who went to the polling place is registered as having been voted by the network type vote, the registered vote status is initialized to an unvoted state. Features.

  The elector confirmation program of the twelfth invention of the present application is an elector confirmation program for confirming an elector in a form in which network type voting to vote via a network and polling place type voting to vote at a polling place are mixed. , The function to receive the confirmation request of the elector who went to the polling place from the electoral confirmation terminal installed in the polling place on the computer, the database that manages the vote status of the elector and the election sent to the polling place Function for confirming the voting status of a person, when the voting status of an elector who has been sent to the polling place is registered as having been voted by a network-type voting, the registered voting status is initialized and the voting status is not yet To realize the function

  The effect of the present invention is to prevent illegal voting by misusing different voting forms.

  This is because the electoral list database is provided and means for confirming the voting status stored in the electoral list database when voting is provided.

  The present invention is characterized in that in a form in which network type voting and polling place type voting coexist, voting is permitted after confirming the voting status of the electoral list that is centrally managed.

  Further, it is characterized in that it is possible to cancel an illegal vote performed by a network type vote at a polling place type vote. Polling place-type voting is considered to be the most secure because it verifies the identity of the person in person.

Next, the best mode for carrying out the present invention will be described in detail with reference to the drawings.
FIG. 1 is a diagram showing a configuration of a voting management system in the present invention.
FIG. 2 is a diagram showing an example of name list management data in the present invention.
FIG. 3 is a diagram showing an example of a vote result database in the present invention.

  Referring to FIG. 1, the best mode for carrying out the present invention is a network-type electronic voting device 11, a general-purpose electronic voting device 12, an electronic voting machine 13, a voting box 14, and an elector confirmation device 15. The network-type electronic voting execution device 16, the elector confirmation terminal 17, the elector list database 18, and the vote result database 19 are provided. The network-type electronic voting device 11 and the network-type electronic voting execution device 16 are connected to each other via a network A21 and a network D24. The general-purpose electronic voting device 12 and the network-type electronic voting execution device 16 are connected to each other via a network B22 and a network D24. The elector confirmation terminal 17 and the elector confirmation device 15 are connected to each other via a network C23 and a network D24. The network type electronic voting execution device 16 and the elector confirmation device 15 are connected to each other via a network D24. The network-type electronic voting device 11 and the general-purpose electronic voting device 12 are collectively referred to as a network-type electronic voting terminal.

The network-type electronic voting device 11 is a dedicated information device that operates under program control and performs electronic voting via a network. The network-type electronic voting device 11 acquires candidate data from the network-type electronic voting execution device 16, and transmits a result (voting result) selected from the candidate data to the network-type electronic voting execution device 16. . The network type electronic voting device 11 has the following means.
(1) Means for inputting electoral information (including authentication information such as a password) from a keyboard or the like.
(2) A means for transmitting the inputted elector information (including authentication information) to the network type electronic voting execution device 16.
(3) Means for receiving candidate data from the network type electronic voting apparatus 16.
(4) Means for displaying the received candidate data on a display or the like (5) Means for selecting a candidate from the candidate data displayed on the display or the like with a keyboard or a mouse.
(6) Means for transmitting the candidate selection result (voting result) to the network-type electronic voting execution device 16.

The general-purpose electronic voting device 12 is a general-purpose information device that operates under program control and performs electronic voting via a network, such as a mobile phone or a personal computer. The general-purpose electronic voting device 12 acquires candidate data from the network-type electronic voting execution device 16 using the downloaded electronic voting application or browser, and results of selecting a candidate from the candidate data (voting Result) is transmitted to the network-type electronic voting execution apparatus 16. The general-purpose electronic voting device 12 has the following means.
(1) Means for accessing the network type electronic voting execution apparatus 16 and downloading an electronic voting application or browser.
(2) Means for executing the following (3) to (8) using the downloaded electronic voting application or browser.
(3) Means for inputting electoral information (including authentication information) from a keyboard or the like.
(4) A means for transmitting the inputted elector information (including authentication information) to the network type electronic voting execution device 16.
(5) Means for receiving candidate data from the network-type electronic voting execution device 16.
(6) A means for displaying the received candidate data on a display or the like.
(7) Means for selecting a candidate from the candidate data displayed on a display or the like with a keyboard or a mouse.
(8) Means for transmitting the candidate selection result (voting result) to the network-type electronic voting execution device 16.

The electronic voting machine 13 is a dedicated information device that operates under program control and performs electronic voting offline. The electronic voting machine 13 displays the candidate data and stores the result (voting result) of selecting the candidate from the candidate data. The electronic voting machine 13 has the following means.
(1) Means for storing candidate data.
(2) Means for reading out candidate data to be stored and displaying it on a display or the like based on an operation performed by the elector according to a voting instruction displayed on the elector confirmation terminal 17 (3) From candidate data displayed on a display or the like Means for selecting candidates with an input device. The input device is a mouse, a touch panel, a keyboard, a microphone, or the like.
(4) Means for storing candidate selection results (voting results) in a built-in storage device. The storage device may be a portable storage device.

  The ballot box 14 is a box in which an elector puts ballot paper.

The elector confirmation device 15 is an information processing device such as a server that operates under program control. The elector confirmation device 15 receives the elector information (including authentication information) from the network-type electronic voting execution device 16 and the elector confirmation terminal 17, confirms the elector, and returns the vote status and the like. The elector confirmation device 15 has the following means.
(1) Means for holding and managing authentication information for each elector. The authentication information is a password, a fingerprint, a voiceprint, or the like.
(2) Means for receiving elector information (including authentication information) from the network type electronic voting apparatus 16 and the elector confirmation terminal 17.
(3) A means for authenticating the elector by comparing the received authentication information with the held authentication information.
(4) When the elector information is received from the network-type electronic voting execution device 16, a unique management number is registered in the management number column of the elector list database 18 when the vote category of the elector list database 18 is not voted. Means to do.
(5) Means for transmitting, to the network-type electronic voting execution device 16 and the elector confirmation terminal 17, name list management data including the authentication result and voting status
(6) Means for registering “the received voting time” in the voting category of the elector list database 18 when the voting time is received from the network-type electronic voting apparatus 16 or the elector confirmation terminal 17. At this time, if it is the network type electronic voting execution apparatus 16, “network” is registered in the voting format.
(7) Means for receiving a request from the elector confirmation terminal 17 and initializing the elector's voting history (voting format, management number, voting classification, etc.) to put it in an unvoted state.

The network-type electronic voting execution device 16 is an information processing device such as a server that operates under program control. The network-type electronic voting apparatus 16 receives voting results from the network-type electronic voting device 11 and the general-purpose electronic voting device 12 and stores them in the voting result database 19. The network type electronic voting execution device 16 has the following means.
(1) Means for receiving elector information (including authentication information) from the network-type electronic voting device 11 and the general-purpose electronic voting device 12.
(2) The received elector information (including authentication information) is transmitted to the elector confirmation device 15 to request confirmation of the elector, and the list management data including the authentication result, the voting status, and the elector's management number is received. Means to do.
(3) Means for transmitting candidate data to the network-type electronic voting device 11 and the general-purpose electronic voting device 12.
(4) Means for receiving voting results from the network type electronic voting device 11 and the general-purpose electronic voting device 12.
(5) Means for adding the elector's management number to the received voting result and storing it in the voting result database 19.
(6) Means for transmitting the voting time of the elector to the elector confirmation device 15.
(7) Means for receiving a request from the elector confirmation terminal 17 and deleting the vote result related to the management number of the elector from the vote result database 19.
(8) Means for transmitting an electronic voting application or browser to the general-purpose electronic voting device 12.

The elector confirmation terminal 17 is a device that operates under program control. The elector confirmation terminal 17 requests the elector confirmation apparatus 15 to confirm the elector who will vote, and receives and displays the confirmation result. The elector confirmation terminal 17 has the following means.
(1) Means for inputting electoral information (including authentication information) from an input device. The input device is a keyboard, an ID card reader, or the like. The IC card stores elector information (including authentication information).
(2) A means for transmitting the inputted elector information (including authentication information) to the elector confirmation device 15.
(3) Means for receiving an authentication result and name list management data from the elector confirmation device 15.
(4) Means for displaying the received name list management data on a display or the like.
(5) Means for displaying a voting instruction if not voted.
(6) Means for transmitting the voting time of the elector to the elector confirmation device 15.
(7) When the voter's voting status has already been voted for by network-type voting, when "illegal" is entered, the voter's voting history (voting format, management number, voting classification, etc.) is initialized A means for transmitting a request to make an unvoted state to the elector confirmation device 15.
(8) If the voter's voting status has already been voted for by network-type voting, a network-type electronic voting will be conducted to request removal of the voting result related to the management number of the elector when “illegal” is entered Means for transmitting to the device 16;

  The elector list database 18 is a storage device that accumulates personal attribute information of the elector, voting classification (voting history information such as voting status, voting time, etc.) and the like. An example of list management data stored in the electoral list database 18 is shown in FIG. Each item of the name list management data will be described with reference to FIG. The name of the elector is the name of the elector. The current address is the current address of the elector. The date of birth is the date of birth of the elector. Gender indicates the gender of the elector. The voting format indicates in what voting format the elector has voted. In the case of “network”, it indicates that the voting is performed from the network type electronic voting device 11 or the general-purpose electronic voting device 12. In the case of “voting place”, it indicates that the electronic voting machine 13 or the voting box 14 has voted. In the case of “not voted”, this means that the vote has not been done yet. The management number is a unique number assigned to an elector who performs network voting. In the voting category, voting time (indicating voted) or unvoted is registered.

  The voting result database 19 is a storage device that accumulates voting results from the network type electronic voting device 11 or the general-purpose electronic voting device 12. An example of the vote result database 19 is shown in FIG.

  Note that the voting results stored in the voting result database 19, the voting results stored in the electronic voting machine 13, and the voting results posted in the voting box 14 are totaled by a totaling device (not shown).

Next, the operation of the best mode for carrying out the present invention will be described in detail with reference to FIGS.
FIG. 4 is a diagram showing an example of a voting confirmation flow of network voting in the present invention.
FIG. 5 is a diagram showing an example of a voting confirmation flow of polling place type voting in the present invention.

  The elector selects either a network-type voting for voting via a network or a polling place-type voting for going to a polling place and voting.

  First, the operation at the time of network type voting will be described with reference to FIG.

  In step S11, the elector accesses the network-type electronic voting apparatus 16 from the network-type electronic voting device 11 or the general-purpose electronic voting device 12. At this time, the network-type electronic voting device 11 or the general-purpose electronic voting device 12 transmits elector information (including authentication information) to the network-type electronic voting execution device 16.

  In step S <b> 12, the network-type electronic voting execution device 16 transmits the received elector information (including authentication information) to the elector confirmation device 15. The elector confirmation device 15 performs authentication by comparing the received authentication information with the authentication information held. If the authentication result is OK and the voting classification of the list management data is not voted, the elector confirmation device 15 registers the management number in the list management data. The elector confirmation device 15 transmits to the network-type electronic voting execution device 16 the list management data including the authentication result, the voting status, and the management number of the elector.

  In step S13, if the received authentication result is OK and the voting classification of the received name list management data is not voted, the network type electronic voting execution device 16 is a candidate for the network type electronic voting device 11 or the general-purpose electronic voting device 12. Person data is sent. The network-type electronic voting device 11 or the general-purpose electronic voting device 12 selects a candidate from the received candidate data and transmits the voting result to the network-type electronic voting execution device 16. The network type electronic voting apparatus 16 adds the management number of the elector to the received voting result and stores it in the voting result database 19.

  In step S14, if the received authentication result is OK and the voting classification of the received name list management data has already been voted, the network type electronic voting execution device 16 sends a message indicating that the vote has been made to the network type electronic voting device 11. Or it transmits to the general purpose electronic voting device 12 and ends. Further, if the received authentication result is NG, the network type electronic voting execution device 16 transmits a message indicating that the voting is not possible to the network type electronic voting device 11 or the general-purpose electronic voting device 12 and ends.

  Next, with reference to FIG. 5, the operation at the time of polling place type voting will be described.

  In step S21, the elector confirmation terminal 17 inputs elector information (including authentication information). The elector confirmation terminal 17 transmits the input elector information (including authentication information) to the elector confirmation device 15. The elector confirmation device 15 performs authentication by comparing the received authentication information with the authentication information held. The elector confirmation device 15 transmits the list management data including the authentication result and the voting status to the elector confirmation terminal 17. The elector confirmation terminal 17 receives and displays the authentication result and the list management data from the elector confirmation device 15, and confirms whether the elector has not voted.

  In step S22, the voting person confirmation terminal 17 gives a voting instruction to vote from the electronic voting machine 13 or the ballot box 14 if the received authentication result is OK and the voting classification of the received list management data is not voted. indicate. When voting from the electronic voting machine 13, the electronic voting machine 13 displays candidate data, selects a candidate, and stores a selection result (voting result). When voting from the ballot box 14, the elector enters the candidate name on the ballot and places it in the ballot box 14.

  In step S23, the elector confirmation terminal 17 confirms the voting format of the roster management data when the received authentication result is OK and the voting classification of the roster management data is not unvoted (when voted).

  In step S24, if the voting format of the name list management data is “network”, the elector confirmation terminal 17 displays an inquiry as to whether the vote is illegal. In response to the inquiry, the elector inputs “illegal” if the result of the network-type electronic voting is stored without the intention of the principal, and otherwise enters “not illegal”.

  In step S <b> 25, when “else” is input, the elector confirmation terminal 17 attaches a management number to the network type electronic balloting execution device 16 and transmits a request for clearing the vote result. The network-type electronic voting execution device 16 deletes the voting result related to the received management number from the voting result database 19. Also, the elector confirmation terminal 17 attaches the elector's name and management number to the elector confirmation device 15 and sends a request to change the voting classification and voting format of the list management data to “unvoted” and delete the management number. To do. The elector confirmation device 15 changes the voting classification and voting format of the list management data to “unvoted” and deletes the management number.

  In step S <b> 26, the elector confirmation terminal 17 displays a voting instruction to vote from the electronic voting machine 13 or the voting box 14. Electors vote from the electronic voting machine 13 or the ballot box 14.

  In step S27, the elector confirmation terminal 17 finishes without voting (no voting instruction is displayed) when “not illegal” is input (for example, when the elector offers to vote again).

  In step S28, if the vote form of the name list management data is “voting place”, the elector confirmation terminal 17 ends without voting (no voting instruction is displayed).

In this manner, the electoral list is managed in a form in which the network type voting by the network type electronic voting device 11 or the general-purpose electronic voting device 12 and the polling place type voting by the electronic voting machine 13 or the ballot box 14 are mixed. . In this method, a safe and accurate vote can be realized in the same manner as the conventional vote, and the following effects are obtained.
(1) Since the collation with the electoral list database 18 is performed at the time of voting, it is possible to detect illegal voting such as spoofing voting.
(2) Since the voting situation stored in the electoral list database 18 is confirmed, it is possible to prevent illegal voting such as double voting using different voting forms when voting is performed at a polling place type vote. .
(3) Since the management number for associating the name list management data in the elector list database 18 with the vote results in the vote result database 19 is provided, it is possible to erase illegal votes. As a result of the application, it is guaranteed that legitimate electors can vote.

  Next, another embodiment of the present invention will be described.

  Another embodiment of the present invention is a form in which an illegal vote performed by a network type vote can be canceled at the time of a network type vote.

  The configuration of another embodiment of the present invention is different from the configuration diagram of FIG. 1 described above in that a network type electronic voting device, a general-purpose electronic voting device, an elector confirmation device, and a network type electronic voting execution device include: Different. Here, a network-type electronic voting device, a general-purpose electronic voting device, an elector confirmation device, and a network-type electronic voting execution device different from the configuration of FIG. 1 will be described.

The network type electronic voting device has the following means in addition to the means of the network type electronic voting device 11 described above.
A means for receiving an inquiry about the “voted by network voting” state from the network type electronic voting apparatus, and inputting and transmitting the second authentication information (second password or the like).
A means for receiving a voting instruction and candidate data from the network type electronic voting apparatus and transmitting the selected candidate (voting result).

The general-purpose electronic voting device has the following means in addition to the means of the general-purpose electronic voting device 12 described above.
A means for receiving an inquiry about the “voted by network voting” state from the network type electronic voting apparatus, and inputting and transmitting the second authentication information (second password or the like).
A means for receiving a voting instruction and candidate data from the network type electronic voting apparatus and transmitting the selected candidate (voting result).

The elector confirmation device has the following means in addition to the means of the elector confirmation device 15 described above.
-Means for holding and managing the second authentication information (second password, etc.) for each elector.
Means for receiving the second authentication information of the elector from the network-type electronic voting execution apparatus and comparing it with the second authentication information held and performing the second authentication;
-If the second authentication result is OK, means for initializing the voter's voting history (voting format, management number, voting classification, etc.) to put it in an unvoted state.
Means for transmitting the second authentication result to the network type electronic voting apparatus.

The network type electronic voting execution apparatus has the following means in addition to the means of the network type electronic voting execution apparatus 16 described above.
Means for sending an inquiry about the “voted by network type voting” state to the network type electronic voting device or the general-purpose electronic voting device, and receiving the second authentication information (second password, etc.).
A means for transmitting the second authentication information (second password or the like) to the elector confirmation device and receiving the second authentication result.
A means for deleting, from the voting result database 19, the voting result related to the management number of the elector if the second authentication result is OK.
A means for transmitting a voting instruction to a network type electronic voting device or a general-purpose electronic voting device if the second authentication result is OK.

  Next, the operation of another embodiment of the present invention will be described. Here, the operation at the time of network type voting will be described.

  First, the elector accesses the network-type electronic voting apparatus from the network-type electronic voting device or the general-purpose electronic voting device. At this time, the network-type electronic voting device or the general-purpose electronic voting device transmits elector information (including first authentication information such as a first password) to the network-type electronic voting apparatus.

  Next, the network-type electronic voting device transmits the received elector information (including the first authentication information) to the elector confirmation device and requests confirmation of the elector. The network-type electronic voting device receives the first authentication result, the list management data including the vote status and the management number of the elector from the elector confirmation device.

  Next, if the first authentication result is OK and the voting classification of the list management data is not voted, the network type electronic voting apparatus transmits candidate data to the network type electronic voting device or the general-purpose electronic voting device. . The network-type electronic voting device or the general-purpose electronic voting device transmits the voting result to the network-type electronic voting apparatus. The network-type electronic voting apparatus adds the management number of the elector to the received voting result and stores it in the voting result database 19.

  Next, when the first authentication result is OK and the voting classification of the list management data is not unvoted (when voted), the network type electronic voting execution apparatus checks the voting format of the list management data.

  Next, if the voting format of the name list management data is “voting place”, the network type electronic voting apparatus ends without transmitting a voting instruction to the network type electronic voting device or the general-purpose electronic voting device. If the voting format of the name list management data is “network”, the network type electronic voting apparatus transmits an inquiry to the network type electronic voting device or the general-purpose electronic voting device as to whether the vote is illegal.

  Next, in the case of illegal voting, the network-type electronic voting device or the general-purpose electronic voting device inputs “Illegal” and second authentication information (second password, etc.) and transmits it to the network-type electronic voting device. To do.

  Next, the network-type electronic voting apparatus receives “illegal” and second authentication information from the network-type electronic voting device or the general-purpose electronic voting device. Since the network type electronic voting apparatus is “illegal”, the second authentication information, the name of the elector and the management number are transmitted to the elector confirming apparatus.

  Next, the elector confirmation device performs the second authentication by comparing with the second authentication information having the received second authentication information. If the second authentication result is OK, the voting classification and voting format of the name list management data are changed to “unvoted” and the management number is deleted. The elector confirmation device transmits the second authentication result to the network-type electronic voting device.

  Next, the network type electronic voting execution apparatus receives the second authentication result. If the second authentication result is NG, the network type electronic voting apparatus transmits a message indicating that voting is not possible to the network type electronic voting device or the general-purpose electronic voting device, and ends. If the second authentication result is OK, the network type electronic voting execution apparatus deletes the voting result related to the election number management number from the voting result database 19. If the second authentication result is OK, the network-type electronic voting apparatus transmits a voting instruction and candidate data to the network-type electronic voting device or the general-purpose electronic voting device.

  Next, the network type electronic voting device or the general-purpose electronic voting device selects a candidate and transmits the voting result to the network type electronic voting apparatus.

  Next, the network type electronic voting apparatus registers the received voting result together with the management number in the voting result database 19.

  If the vote is not fraudulent, the network-type electronic voting device or the general-purpose electronic voting device inputs “not fraud” and transmits it to the network-type electronic voting apparatus. When the network-type electronic voting apparatus receives “not fraudulent” (for example, when an elector offers to vote again), the network-type electronic voting apparatus ends without sending a voting instruction to the network-type electronic voting device or general-purpose electronic voting device. .

  As a result, the illegal vote performed in the network-type voting can be canceled at the time of the network-type voting, and the right of the legitimate elector can be guaranteed.

  In the above-described embodiment according to the present invention, a program for executing the processing operation of the electoral list management system is recorded as data on a recording medium (not shown) such as a magnetic disk or an optical disk of a computer, The recorded data is read out and used to operate the electoral list management system. In this manner, the data for operating the electoral list management system according to the present invention is recorded on the recording medium, and the function of the electoral list management system can be realized by installing this recording medium in each apparatus.

The figure which shows the structure of the voting management system in this invention The figure which shows the example of the name list management data in this invention The figure which shows the example of the vote result database in this invention in this invention The figure which shows the example of a voting confirmation flow of the network type vote in this invention The figure which shows the example of a voting confirmation flow of the polling place type vote in this invention

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 Network type electronic voting equipment 12 General-purpose electronic voting equipment 13 Electronic voting machine 14 Ballot box 15 Electoral confirmation device 16 Network type electronic voting execution device 17 Electoral confirmation terminal 18 Electoral list database 19 Voting result database 21 Network A
22 Network B
23 Network C
24 Network D

Claims (11)

An electoral list management system for managing a list of electoral voters
An electoral roster database that contains electoral information and voting status indicating whether the elector is unvoted or voted,
A means of requesting confirmation of electors who vote via the network;
A means of requesting confirmation of the elector who goes to the polling place and votes;
Means for confirming the vote status of the elected elector in the electoral list database;
Means for displaying a voting instruction for the confirmed elector when the confirmed voter's voting status is unvoted;
An electoral list management system with An electoral list management system for managing a list of electoral voters
Includes election information and voting status indicating whether the elector is unvoted or voted, and a voting form that indicates whether the vote is a network-type vote that voted via the network or a polling place voted at a polling place. An electoral directory database;
A means of requesting confirmation of electors who vote via the network;
A means of requesting confirmation of the elector who goes to the polling place and votes;
Means for confirming the vote status of the elected elector in the electoral list database;
Means for displaying a voting instruction for the confirmed elector when the confirmed voter's voting status is unvoted;
The voting status of the elected elector who has been voted in the case where the vote status of the elected elector is already voted in a network-type voting and the elected elector goes to a polling place to vote. A means to write the voting form back to an unvoted state,
Means for displaying a voting instruction for the elected elector;
An electoral list management system with An electoral list management method for managing an electoral list, including a network-type electronic voting terminal, a network-type electronic voting implementation device, an electoral confirmation terminal, an electoral confirmation device, and an electoral list database,
The electoral list database is:
Includes election information and voting status indicating whether the elector is unvoted or voted, and a voting form that indicates whether the vote is a network-type vote that voted via the network or a polling place voted at a polling place. Has list management data for each elector,
The network-type electronic voting terminal is
Means for inputting elector information (including authentication information) and transmitting it to the network-type electronic voting device;
Means for selecting a candidate from candidate data received from the network-type electronic voting execution device and transmitting a voting result to the network-type electronic voting execution device,
The network-type electronic voting device is
Means for transmitting elector information (including authentication information) received from the network-type electronic voting terminal to the elector confirmation device;
Means for receiving the roster management data including an authentication result and a voting state and a management number from the elector confirmation device;
Means for transmitting candidate data to the network type electronic voting terminal when the authentication result is OK and the roster management data indicates unvoted;
Means for adding the management number to the voting result received from the network type electronic voting terminal and storing it in the voting result database;
Means for transmitting the voting time to the electoral confirmation device,
The elector confirmation device
Means for authenticating the elector by comparing the authentication information received from the network type electronic voting terminal or the elector confirmation terminal with the possessed authentication information;
Means for registering a management number in the list management data when the list management data received from the network-type electronic voting terminal indicates unvoted;
Means for transmitting the authentication result and the list management data to the network-type electronic voting terminal and the elector confirmation terminal;
Means for receiving a voting time from the network-type electronic voting terminal and the elector confirmation terminal and registering the voting time and the voting format in the roster management data,
The electoral confirmation terminal
Means for inputting the elector information (including authentication information) and transmitting it to the elector confirmation device;
Means for receiving roster management data including an authentication result and a voting state from the elector confirmation device;
Means for displaying a voting instruction when the roster management data indicates unvoted;
Means for transmitting the voting time to the electoral confirmation device,
An electoral list management system characterized by that. The electoral confirmation terminal
When the list management data indicates that it has already been voted by network voting,
Means for transmitting a request for initializing the voting status of the roster management data to the voting person confirmation device to put it in an unvoted state;
Means for sending a request to delete a voting result related to the management number to the network-type electronic voting device;
Means for displaying a voting instruction,
The electoral list management system according to claim 3, wherein: An electoral list management method for managing an electoral list of electors who have electoral information as well as polling information indicating whether the elector has not voted or voted, and who vote in the election,
Network-type electronic voting terminals that vote via the network
Access the network-type electronic voting device and send electoral information (including authentication information)
The network-type electronic voting device is
The received elector information (including authentication information) is sent to the elector confirmation device,
The elector confirmation device
Authenticates against the authentication information held by the received authentication information,
Transmitting the list management data including the authentication result and the voting status to the network-type electronic voting execution device;
The network-type electronic voting device is
If the received authentication result is OK and the received voting classification of the roster management data is not voted, send a voting instruction to the network type electronic voting terminal,
Electoral confirmation terminal installed in polling place,
Enter the elector information (including authentication information) about the elector who went to the polling place and send it to the elector confirmation device,
The elector confirmation device
Authenticate against the authentication information that you have received.
Send the roster management data including authentication results and voting status to the electoral confirmation terminal,
The electoral confirmation terminal
If the received authentication result is OK and the received voting classification of the list management data is not voted, a voting instruction for the elector is displayed.
An electoral list management method characterized by that. Includes electoral information and voting categories that indicate whether the elector is unvoted or voted, and a voting format that indicates whether the voter is a networked voter who voted via the network or voted at a polling place An electoral list management method for managing a list of electors who have list management data and vote in an election,
Network-type electronic voting terminals that vote via the network
Access the network-type electronic voting device and send electoral information (including authentication information)
The network-type electronic voting device is
The received elector information (including authentication information) is sent to the elector confirmation device,
The elector confirmation device
Authenticates against the authentication information held by the received authentication information,
If the voting division of the list management data is not voted, register the management number of the elector in the list management data,
Send the authentication result and the list management data to the network-type electronic voting device,
The network-type electronic voting apparatus is
If the received authentication result is OK and the voting classification of the received roster management data is not voted, send a voting instruction and candidate data to the network type electronic voting terminal,
The network-type electronic voting terminal is
Select a candidate from the received candidate data and send the voting result to the network-type electronic voting device,
The network-type electronic voting device is
Add the voter's management number to the received voting result and store it in the voting result database;
Electoral confirmation terminal installed in polling place,
Enter the elector information (including authentication information) about the elector who went to the polling place and send it to the elector confirmation device,
The elector confirmation device
Authenticate against the authentication information that you have received.
Send the authentication result and the list management data to the electoral confirmation terminal,
The electoral confirmation terminal
If the received authentication result is OK and the received voting classification of the list management data is not voted, a voting instruction for the elector is displayed.
An electoral list management method characterized by that. The electoral confirmation terminal
If the received authentication result is OK, the voting classification of the list management data is already voted, and the voting format of the list management data is “network”,
Display an inquiry about fraud,
If you enter "illegal"
Attaching the management number registered in the roster management data, sending a request for clearing the voting result to the network type electronic voting device,
The network-type electronic voting device is
Delete the voting result related to the received management number from the voting result database,
The electoral confirmation terminal
Send the vote request initialization request to the above-mentioned elector confirmation device with the elector name and management number attached,
The electoral confirmation device changes the voting classification and voting format of the roster management data to “not voted”,
Delete the management number of the list management data,
The electoral confirmation terminal
Display voting instructions for the elector;
The method for managing an electoral list according to claim 6. The network-type electronic voting device is
If the voting classification of the roster management data is already voted and the voting format of the roster management data is “network”,
Send an inquiry to the network-type electronic voting terminal as to whether the vote is fraudulent,
The network-type electronic voting terminal is
If it is a fraud vote,
"Illegal" and second authentication information is input and transmitted to the network type electronic voting execution device,
The network-type electronic voting device is
Receiving “illegal” and second authentication information from the network-type electronic voting terminal;
Sending the second authentication information and the name and management number of the elector to the elector confirmation device;
The elector confirmation device
The second authentication is performed by comparing the received second authentication information with the second authentication information,
If the second authentication result is OK,
Change the voting category and voting format of the roster management data to “unvoted”
Delete the control number,
Transmitting a second authentication result to the network-type electronic voting execution apparatus;
The network-type electronic voting device is
If the received second authentication result is OK, delete the voting result related to the management number of the elector from the voting result database,
Sending voting instructions and candidate data to the network-type electronic voting terminal,
The network-type electronic voting terminal is
Selecting a candidate from the candidate data and sending a vote result to the network-type electronic voting device,
The network-type electronic voting device is
Register the received voting result together with the management number in the voting result database;
The method for managing an electoral list according to claim 6. An electoral confirmation device for confirming an elector in a form in which a network type vote to vote via a network and a polling place type vote to vote at a polling place are mixed,
Means for receiving a confirmation request for an elector who has been sent to a polling place from an electoral confirmation terminal installed at the polling place;
Means for searching a database for managing the voting status of the elector and confirming the voting status of the elector who went to the polling place;
Means for initializing the registered voting status to an unvoted state when the voting status of the elector who has been sent to the polling place is registered as having been voted by network voting;
Electoral confirmation device with A method for confirming an elector who confirms an elector in a form in which a network type vote to vote via a network and a polling place type vote to vote at a polling place are mixed,
Receive a request for confirmation of an elector who has been sent to a polling place from an electoral confirmation terminal installed at the polling place,
Search the database that manages the voting status of the elector and confirm the voting status of the elector who went to the polling place,
When the vote status of the elector who has been sent to the polling place is registered as having been voted by network-type voting, the registered vote status is initialized to an unvoted state,
Electoral confirmation method characterized by that. An electoral confirmation program for confirming an elector in a form of a mixture of a network-type voting to vote via a network and a polling place-type voting to vote at a polling place,
On the computer,
A function for receiving a confirmation request of an elector who went to the polling place from an electoral confirmation terminal installed at the polling place,
A function for searching a database for managing the voting status of the elector and confirming the voting status of the elector who went to the polling place;
A function that initializes the registered voting status to an unvoted state when the voting status of the elector who has been sent to the polling place is registered as having been voted by network-type voting,
Electoral confirmation program to realize

Images