KR102208763B1 - Electronic voting system using election names - Google Patents

Abstract

According to one embodiment of the present invention, an electronic voting system using election names comprises: a voter terminal of a voter who participates in election; an election manager terminal of an election manager who manages the election; and an electronic voting server for providing an electronic voting service for the election, wherein the electronic voting server transmits, to a voter terminal who searches for an election name, election information that matches the election name, receives encrypted voting data from the voter terminal, verifies the voting data to confirm a list of voters, and then derives a result of counting based on the confirmed list of voters. According to the present invention, since there is no need for a list of voters to be prepared before start of election, an election preparation process is simplified. In addition, personal identification information assigned to each voter for electronic voting, such as URL and PIN code, is not used, and thus unfair voting rights are not exercised due to loss or theft of the personal identification information, and fairness of election and trust of voters can be secured.

Description

Electronic voting system using election names {ELECTRONIC VOTING SYSTEM USING ELECTION NAMES}

The present invention relates to an electronic voting system using an election name. More specifically, it relates to an electronic voting system that enables voting with only the name of the election without a list of voters, and securing the confidentiality and efficiency of voting and counting.

Election is a series of processes in which representatives and officers are elected by voting from a certain organization or group. "1) Establishment of the institution's election rules 2) Composition of the election management committee 3) Designation of the election schedule" Election preparation stage, "4) Announcement of election date 5) Candidate registration application 6) Election campaign targeting voters 7) Viewing and confirming the list of voters 8) Self-certification of voters 9) Voting”. Here, it is fundamental to secure a list of voters (members of an organization or group) in order to conduct an election.

This list of voters is fine if the number of members can be manually counted, but if the number of members is above a certain level, it takes a lot of time and money to prepare the electoral agency to manage each voter, and to gather voters' opinions through elections. It takes a lot of time.

In addition, although each voter has information (address information, identification card information, employment/resignation history, etc.) that can indicate that each voter is a legitimate voter participating in the election, it is difficult for the election agency (election manager) to manage and supervise the information of numerous voters There is. In addition, if an incorrect list of voters is produced due to the problem of the supervisor, the missing voter cannot vote, and an unqualified person may vote.

However, in preparation for the occurrence of a problem, the list of voters can be viewed or objections can be raised, but it is difficult to remember and confirm them, and there is room for mistakes in the resolution process following the problem.

In addition, there is an electronic voting method for voting through a terminal connected to a network in addition to the conventional method in which a voter directly visits a voting place to vote. The electronic voting method has no time and space constraints for elections, and allows for quick and accurate counting of votes, but the process of securing a voter list follows the usual method.

Accordingly, the present invention proposes an electronic voting method system capable of improving the efficiency of the election preparation process without relying on the electoral list by improving the process of generating a list of voters participating in an election.

Korean Patent Publication No. 10-1747833 (2017.06.09.)

The technical problem to be solved by the present invention is to provide an electronic voting system capable of increasing the efficiency of the election preparation process by generating a list of voters consisting only of voters who participated in the vote after conducting an election without a list of voters.

Another technical problem to be solved by the present invention is to provide an electronic voting system that does not violate secret voting by encrypting personal information (unique identification information) and voting information of voters participating in voting.

Another technical problem to be solved by the present invention is to provide an electronic voting system capable of increasing the participation rate of elections since it is possible to check candidate information, pledges, etc. only by searching for the election name, and the election name can be reused.

Another technical problem to be solved by the present invention is that the list of voters generated through voting can be verified by the voter as the subject and the list of voters who participated in the voting can be confirmed, and the reliability of the election results can be increased. It is to provide an electronic voting system.

The technical problems of the present invention are not limited to the technical problems mentioned above, and other technical problems that are not mentioned will be clearly understood by those skilled in the art from the following description.

An electronic voting system using an election name according to an embodiment of the present invention includes a voter terminal participating in an election, an election manager terminal in charge of the election, and an electronic voting server providing an electronic voting service for the election, The electronic voting server transmits election information matching the election name to the voter terminal searching for the election name, receives encrypted voting data from the voter terminal, verifies the voting data, and determines a list of voters. Then, based on the confirmed voter roll, the results are derived.

According to an embodiment, the electronic voting server includes a voter's voting signature generation key (sk _v ) and a voting signature verification key (pk _v ) for voting, a vote count decryption key (sk _t ) of an electronic voting server for counting, and A counting encryption key (pk _t ) can be generated.

According to an embodiment, the counting decryption key skt may be divided into a plurality of secret key pieces.

According to an embodiment, the electronic voting server may receive an election name from the election manager terminal and electronically sign the election name using the voting signature generation key (sk _v ).

According to an embodiment, the election name may be a name disclosed to voters meeting voting conditions set by the election manager terminal.

According to an embodiment, the voter terminal may verify the election name by using the voting signature verification key (pk _v ) and proceed with voting.

According to an embodiment, the voter terminal performs voter identification from at least one verification agency, encrypts vote selection information using the vote counting encryption key (pk _t ) to generate voting data, and the voting data You can proceed with an electronic signature.

According to an embodiment, the electronic voting server receives a plurality of voter identification items from a voter terminal that has passed identity authentication, records the corresponding voter in a temporary voter roll along with the plurality of voter identification items, and the temporary voter It is possible to receive the voting data encrypted by the vote counting encryption key (pk _t ) from the voter terminal recorded in the roster.

According to an embodiment, the electronic voting server verifies each of the plurality of voter identification items, and places more voters in the final voter list than the number of voter identification items that have passed the verification. Can be recorded.

According to an embodiment, the electronic voting server transmits a verification request for any one of the plurality of voter identification items to another voter terminal, receives the verification result through the other voter terminal, and performs verification. Passed voters can be recorded on the final voter roll.

According to an embodiment, the electronic voting server may extract a plurality of pieces of the secret key (a ₀ ) fragmented from the final voter list, restore the vote count encryption key (pk _t ), and extract the voting data. .

According to an embodiment, the electronic voting server may randomly arrange and re-encrypt the voting data and the voter terminals, and count the re-encrypted voting data using the vote count decryption key (sk _t ).

According to the present invention, there is no need to prepare a list of voters before the start of the election, so the election preparation process is simplified, and there is no hassle of checking each voter who did not participate in the vote after the election, so manpower can be saved. .

In addition, since personal identification information given to each voter for electronic voting such as URL and PIN code is not used, unfair voting rights are not exercised due to loss or theft of personal identification information, and fairness of elections and voter trust Can be secured.

In addition, voters can check various information related to the corresponding election only by the name of the election, saving time to search for candidate information and pledges, thereby increasing the voters' participation in the election.

In addition, in addition to verification through various authentication methods and personal information of the voter who exercised the right to vote, correct voter selection is possible through a mutual verification process that verifies that the voters or voters including the Election Commission verification member are legitimate voters. It is possible, and it is possible to increase the reliability of the electronic voting system and election results using it, and to realize direct democracy.

In addition, by encrypting the voter's personal information (unique identification information), voting information, and verification information, the security of electronic voting and anonymity and confidentiality can be guaranteed.

In addition, since the list of voters is confirmed after the voting is completed, even if an election manager's mistake or irregular election occurs, it can be corrected, and the reliability of the recounting of the electronic voting method can be increased.

The effects of the present invention are not limited to the above-mentioned effects, and other effects that are not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a diagram showing the configuration of an electronic voting system according to an embodiment of the present invention.
2 is a diagram showing the configuration of an electronic voting server according to an embodiment of the present invention.
3 is a flowchart illustrating a method of providing an electronic voting service using an election name by an electronic voting server according to an embodiment of the present invention.
4 is a flowchart illustrating steps S104 and S105 shown in FIG. 3.
5 is a diagram schematically illustrating a flow of an electronic voting method using an electronic voting system according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments to be posted below, but may be implemented in various different forms, and only these embodiments make the posting of the present invention complete, and common knowledge in the technical field to which the present invention pertains. It is provided to completely inform the scope of the invention to those who have it, and the invention is only defined by the scope of the claims. The same reference numerals refer to the same components throughout the specification.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present specification may be used as meanings that can be commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in a commonly used dictionary are not interpreted ideally or excessively unless explicitly defined specifically. The terms used in the present specification are for describing exemplary embodiments and are not intended to limit the present invention. In this specification, the singular form also includes the plural form unless specifically stated in the phrase.

As used herein, "comprises" and/or "comprising" refers to the presence or addition of one or more other components, steps and/or actions to the referenced components, steps and/or actions. Do not exclude

1 is a diagram showing the configuration of an electronic voting system 1000 according to an embodiment of the present invention.

Referring to FIG. 1, the electronic voting system 1000 may include a plurality of voter terminals 100, an election manager terminal 200, and an electronic voting server 300.

The plurality of voter terminals 100 are terminals possessed by voters capable of participating in an election, and may include various electronic devices such as smartphones, tablet PCs, and PCs. Here, the voter terminal 100 may be installed and executed by installing and executing a web or mobile application through which a voter searches for an election name and can exercise voting rights for any one election according to the search result, and the web or mobile application at this time is It can be provided through the electronic voting server 300.

The voter uses the voter terminal 100 to select an election that exactly matches the name of the election for which the "election name" published by the election manager in the web or mobile application provided by the electronic voting server 300 is selected or the "election After searching for an allowed election in which "name" is searchable, and selecting one of the election names, the corresponding candidate list, candidates' pledge, election schedule, voting date, and the like can be checked. After checking the election information, the voter can choose any candidate and cast his or her vote.

Specifically, when a voter searches for an election name through the voter terminal 100, other election information along with the electronically signed election name is provided to the voter using the voting signature generation key (sk _v ) of the electronic voting server 300 Can be. When a voter selects "election name" in order to vote for any one election, the voter terminal 100 uses the voting signature verification key (pk _v ) disclosed by the electronic voting server 300 to name the election. It is verified that it has been produced by the electronic voting server 300, and only the verified election name can be voted.

However, the former voter who has exercised the right to vote can verify that the person participating in the vote is the person by performing identity authentication from various verification agency servers (not shown) through the voter terminal 100. Here, the identity verification procedure may be any one procedure designated by the election manager terminal 200 or the electronic voting server 300 in charge of the election.

Specifically, the identity authentication procedure includes various authentication procedures, and may include authentication through an accredited certificate, smart phone real name authentication, email verification, PGP public key verification, location information authentication, and other identification number verification. Here, the location information authentication may be an authentication procedure for checking whether a corresponding voter exists at a location and time designated by the election manager who announced the “election name”.

For example, when performing the authentication process through a public certificate, the voter uses the voter terminal 100 to generate his or her identification number (SSN, Social Security Number), and the voter terminal 100 together with the public certificate he or she has. One random number (R) and optionally additional information of voters may be transmitted to the verification authority server. The verification authority server extracts the virtual identification number (VID, Virtual ID) in the public certificate, compares it with the identification number (RRS) and random number (R) submitted by the voter, and if the two pieces of information match, the user It can be verified that the voter who requested authentication is the person himself, and this can be expressed as [Equation 1].

[Equation 1]

For another example, when performing the authentication process through the smartphone and the real name of the voter, the voter selects the terminal number, name, date of birth, gender, and domestic/foreign nationals classification using the voter terminal 100 and transmits it to the verification authority server. I can. The verification authority server may verify the voter's subscription information from the mobile communication company server and verify that the voter who requested identity authentication is the person.

For another example, in the case of performing the authentication process through e-mail, the voter can transmit the e-mail address, name, and additional information to the verification agency server using the voter terminal 100, and the verification agency server You can receive a personal identification number or a personal identification URL from. The verification agency server may verify that the voter requesting identity authentication is the person when the voter terminal 100 inputs a correct identification number or accesses using a specified URL.

For another example, when performing an authentication process using a PGP key, the voter may sign the name, PGP public key, and voter additional information with the PGP secret key using the voter terminal 100 and transmit it to the verification authority server. . The verification authority server can use the PGP public key to verify the voter's signature. That is, the verification authority server may verify that the voter who requested the identity authentication is the identity through the voter's signature verification.

In this way, the voter can be verified as his/her identity from the verification authority server using any one of various identification information that he/she has, and the voter terminal 100 includes the voter's name, voter identification item, and additional information. An electronic signature (Sign _sku ) can be generated as shown in [Equation 2]. In addition, the voter terminal 100 may provide the electronic voting server 300 with an electronic signature (Sign _sku ) and a public key for this.

[Equation 2]

In addition, after the voter's electronic signature (Sign _sku ) is generated, the voter can exercise the right to vote for any one candidate, and the voter terminal 100 generates voting data as shown in [Equation 3]. It can be transmitted to the electronic voting server 300. Here, i may be an arbitrary number for identifying the voter, and the voting data may be encrypted using the vote count encryption key (pk _t ).

[Equation 3]

In addition, the voter identification item may include voter terminal information, address, resident registration number, voter biometric information, and the like, and additional information may include the voter's affiliation and position. Here, the voter biometric information is a facial image, a finger print, a friction ridge, a blood vessel, an iris, and a retina that can be recognized through the voter terminal 100. , Electrocardiogram (ECG), electroencephalogram (EEG), pulse, blood pressure, heart sound, chest or abdominal exercise, conductivity of human body, etc. can do. In addition, in order to recognize the above-described biometric information, the voter terminal 100 is provided with a sensor that collects various signals such as electric signals, sound signals, force signals, electromagnetic signals, image/video signals, and optical signals. I can. In this way, since the voters use their own information that cannot be imitated by others to exercise their voting rights, security for the voters can be strengthened.

On the other hand, some voters may receive a request for verification of the voter identification item in the temporary voter list from the electronic voting server 300 after voting is completed, and determine the validity of the voter identification item. For example, when an election is held within a certain organization, some voters who participated in the vote from the electronic voting server 300 through the voter terminal 100 have the information of the voter who participated in the vote (eg department name, organization name, voter's name). A request for verification for a job title) may be received, it is possible to check whether the received belonging information is still valid information, and transmit the result to the electronic voting server 300.

Here, the voter who determines the validity of the voter identification item may be a trusted voter among voters, or may be a voter arbitrarily selected by the electronic voting server 300 after voting is finished. In addition, at least half of the voters recorded on the temporary voter roll can judge the validity of the voter identification item, thereby securing voters' confidence in the election.

That is, the electronic voting system 1000 may determine a list of voters that have not been produced before the start of an election through a reputation system that checks a trust relationship between close people.

The election manager terminal 200 is a terminal of an election manager in charge of an election, and may include various electronic devices such as a smart phone, a tablet PC, and a PC. The election manager can register various information related to the election using the election manager terminal 200, and for this purpose, a web or mobile application provided by the electronic voting server 300 can be installed and executed on the election manager terminal 200. have.

Meanwhile, the election-related information may include an election name, an election schedule (eg, an election campaign start date, end date, and vote date), a list of candidates (eg, candidate information, candidate image, personal PR video), and candidate pledge. In other words, the election manager does not prepare a list of voters who can participate in the electronic voting and the voter's unique URL and PIN code to be provided to each voter in advance, and conducts an election simply by promulgating the "election name" to the voters. can do.

In addition, the election name is not a one-to-one correspondence with one election, but the same name can be used for periodic elections, thereby increasing the participation rate of voters.

On the other hand, the range in which the "election name" is disclosed may be limited according to the characteristics of the election, and the election administrator may designate a proper voter identification procedure. For example, if an election is held for students in a classroom, the election manager may disclose the “election name” to the students in the classroom and specify the location/time information for the voter's identification process.

That is, the election manager terminal 200 may designate a voter identification procedure together with the "election name" and transmit it to the electronic voting server 300. The electronic voting server 300 may treat the voting data provided from the voter terminal 100 that has performed the corresponding procedure as valid voting data.

The electronic voting server 300 may provide electronic voting services for elections to voters and election managers. Specifically, the electronic voting server 300 may register election information provided by an election manager, and provide an electronic voting service through which voters can participate in voting through the election name. Here, the electronic voting server 300 may proceed with voting in a state in which the voter list is not confirmed, and after the voting is completed, the voter list may be determined, and a result of counting the votes may be derived.

2 is a diagram showing the configuration of an electronic voting server 300 according to an embodiment of the present invention.

2, the electronic voting server 300 includes an encryption key generation unit 310, a communication unit 320, a voter list generation unit 330, a voter list verification unit 340, a decryption unit 350, and an anonymous count It may include a flower part 360.

The encryption key generation unit 310 may generate an encryption key to be used in an election. Specifically, the encryption key generation unit 310 generates a pair of voting signature generation keys (sk _v ) and voting signature verification keys (pk _v ) to be applied to the election name and voting data, and voter voting selection information, that is, voting A pair of vote counting decryption key (sk _t ) and bill counting encryption key (pk _t ) to be applied to data counting can be generated. As can be seen from the reference number, the encryption key generation unit 310 may generate a pair of keys using an asymmetric key encryption method in which keys used for encryption and decryption are different. For example, the asymmetric key encryption method is DP. -It can be Hellman key exchange, RSA encryption, Rabin encryption, ELGamml, DSA, elliptic curve encryption.

In addition, the encryption key generation unit 310 may divide the counting decryption key (sk _t ) into a plurality of secret key (a ₀ ) pieces for security and anonymity. Specifically, the encryption key generation unit 310 may fragment the counting decryption key (sk _t ) into n secret keys (a ₀ ) such as [Equation 5] by using a multi-order equation such as [Equation 4]. . Here, the counting decryption key (sk _t ) is divided into n pieces equal to the number of counting members (n persons), and n pieces of secret keys (a ₀ ) may be distributed to the counting members one by one. In addition, the counting decryption key (sk _t ) can be restored when k counting members among n counting members submit a piece of the secret key (a ₀ ) (n≥k).

[Equation 4]

Here, a ₁ , a ₂ , ..., a _n-1 are random values, and k and n are threshold values (0<k≤n<P, a _i <P).

[Equation 5]

The communication unit 320 may exchange various types of information related to the election with the voter terminal 100 and the election manager terminal 200. Specifically, the communication unit 320 may receive election-related information along with an election name from the election manager terminal 200. Here, the election-related information may include an election name, an election schedule (eg, an election campaign start date, end date, and vote date), a list of candidates (eg, candidate information, candidate image, self PR video), and candidate pledge. Accordingly, if the voter terminal 100 searches for an election name, the communication unit 320 may transmit election information matching the election name to the voter terminal 100.

The voter list generation unit 330 may generate a temporary list of voters based on the voters who have passed their identification to participate in the voting. Specifically, the voter list generator 330 may record the voter terminal 100 that has transmitted the electronically signed (Sign _sku ) voter identification item in the temporary voter list. In addition, the electronically signed (Sign _sku ) voter identification item may include a plurality of items such as the name of the voter, the voter identification item, and additional information. In other words, a single voter and a plurality of corresponding voter identification items may be recorded in the temporary voter roll, which may be used to establish the voter roll.

Meanwhile, at the same time, the communication unit 320 may receive the encrypted voting data from the voter terminal 100 recorded in the temporary voter roll, and the voting data is the vote count encryption key generated by the encryption key generator 310 (pk _t ) Can be used.

The voter list verification unit 340 may determine the voter list by verifying the vote data after the voting is finished. Specifically, the voter roll verification unit 340 may determine whether to record the voters recorded in the temporary voter roll in the final voter roll by verifying a plurality of voter identification items.

The voter list verification unit 340 verifies each of a plurality of electronically signed (Sign _sku ) voter identification items, and the result is "Sign _skvj (RET _i ); verification completed (only when X _i = X _j )" or It can be disclosed as "Sign _skvj (~RET _i ); verification failure (only when X _i = X _j )". Here, i may be an arbitrary number for identifying a voter. In addition, the voter list verification unit 340 may display whether or not the verified voter identification item is additional information such as the voter affiliation information.

Voters list verification section 340 may record the following [formula 6], Sign _skvj number Sign _skvj (RET ~ _i) be the final voters list a number of voters than the (RET _i) as shown in Fig.

[Equation 6]

Meanwhile, the voter roll verification unit 340 may determine a temporary voter roll using the voter. Specifically, the voter list verification unit 340 transmits a verification request for any one of the plurality of voter identification items to the voter terminal 100 different from the voter corresponding to the voter identification item through the communication unit 320 It can be done, and the verification result received from the voter terminal 100 can be checked. Accordingly, the voter roll verification unit 340 may record a voter who has passed the verification by another voter in the final voter roll.

For example, if the voter identification item is the voter's affiliation information (e.g. department name, organization name, voter position), the voter roll verification unit 340 may request validation from other voters matching the voter affiliation information. have. Here, the voter who judges the validity of the voter identification item may be a trusted voter among the voters, and after the vote is over, it may be a voter randomly selected by the voter list verification unit 340, and designated by the Election Commission. You can also be a member of the verification committee. In addition, at least half of the voters recorded on the temporary voter roll can judge the validity of the voter identification item, thereby securing voters' confidence in the election.

The decoding unit 350 may extract voting data for deriving a result of counting votes from the confirmed list of voters. Specifically, the decryption unit 350 collects the vote count encryption key (pk _t ) fragmented into a plurality of secret keys (a ₀ ) from the final voter list, obtains one vote count encryption key (pk _t ), and uses it Thus, the voter's voting data recorded in the final voter roll can be extracted.

In addition, the decryption unit 350 is guaranteed anonymity by the ballot counting anonymization unit 360, which will be described later, and decrypts the encrypted voting data again using the counting decryption key (sk _t ) to obtain final voting data. have.

The counting anonymization unit 360 may make the electronic voting into a secret voting by using a Mix-net technique to ensure the anonymity of the voting data extracted through the decryption unit 350. Specifically, the counting anonymizer 360 performs shuffle using a permutation matrix (ð) that can adjust the order of input values (voting data), and as part of randomization to change the shape of the input data. ElGamal can be re-encrypted (RE, D _sk (RE _pk (c)) = m). Accordingly, the link between the input value and the output value is removed, and the voter cannot be identified from the vote result (voting data) decoded by the decoding unit 350, thereby ensuring the confidentiality of the vote.

In other words, the voting data and the voter's electronic signature (Sign _sku ) may not be matched through the ballot counting anonymization unit 360, and the method of randomly arranging and re-encrypting the voting data and the voter terminals is known in addition to the above examples A variety of techniques can be used.

The counting anonymization unit 360 may aggregate the anonymized voting data and publish the result, which may be checked by both the voter terminal 100 and the election manager terminal 200.

So far, the electronic voting server 300 and the electronic voting system 1000 including the same according to an embodiment of the present invention have been described. According to the present invention, the electronic voting system 1000 does not create a list of voters in advance for an election, thereby simplifying an election preparation process. In addition, after the voting is over, in addition to the personal information of the voters who exercised the voting rights and verification through various authentication methods, the final voter list can be generated through a mutual verification process to verify that the voters are legitimate voters. By encrypting the voter's personal information (unique identification information), voting information, and verification information, the security of electronic voting can be improved and anonymity and confidentiality can be guaranteed.

In addition, voters can check various information related to the corresponding election only by the name of the election, saving time to search for candidate information and pledges, thereby increasing the voters' participation in the election.

Hereinafter, a method of providing an electronic voting service using the above-described electronic voting server 300 using an election name without a voter list will be described.

3 is a flowchart illustrating a method of providing an electronic voting service using an election name by the electronic voting server 300 according to an embodiment of the present invention.

This is only a preferred embodiment for achieving the object of the present invention, and if necessary, some steps may be deleted or added, or one step may be included in another step and performed.

3, the electronic voting server 300 generates a voting signature generation key (sk _v ) and a voting signature verification key (pk _v ) to be applied to the election name and voting data, and applied to the voter's voting selection information. A pair of the vote count decryption key (sk _t ) and the vote count encryption key (pk _t ) is generated (S101). That is, the electronic voting server 300 may generate a pair of keys using an asymmetric key encryption method with different keys used for encryption and decryption. For example, the asymmetric key encryption method is Diffie-Hellman key exchange, RSA encryption. , Rabin encryption, ELGamml, DSA, and elliptic curve encryption.

In addition, the electronic voting server 300 may enhance the security of voting by dividing the counting decryption key (sk _t ) into a plurality of secret key (a ₀ ) pieces.

After step S101, the electronic voting server 300 receives the name of the election from the election manager terminal 200 in charge of the election, and digitally signs the name of the election using a voting signature generation key (sk _v ) (S102). Specifically, the electronic voting server 300 may electronically sign the name of the election to proceed with the election without a list of voters, and when the voter searches for and selects the name of the election through the voter terminal 100 to exercise the right to vote, The name of the election may be verified by the voter terminal 100 using the voting signature verification key (pk _v ).

In addition, the election name is not a one-to-one correspondence with one election, but the same name can be used for periodic elections, thereby increasing the participation rate of voters.

Meanwhile, the electronic voting server 300 may receive various information related to an election in addition to an election name from the election manager terminal 200. For example, the election-related information may include an election name, election schedule (eg, campaign start date, end date, voting date), candidate list (eg candidate information, candidate image, self PR video), and candidate pledge. In other words, the election manager does not prepare a list of voters who can participate in the electronic voting and the voter's unique URL and PIN code to be provided to each voter in advance, and conducts an election simply by promulgating the "election name" to the voters. can do.

In addition, the electronic voting server 300 may receive a designation of a voter identification procedure method together with an election name from the election manager terminal 200. For example, if an election is held for students in a classroom, the election manager may disclose the “election name” to the students in the classroom and specify the location/time information for the voter's identification process.

That is, depending on the characteristics of the election, a specific election name may be disclosed only to voters who meet the voting conditions set by the election manager terminal 200, and the electronic voting server 300 takes these characteristics into account, and the voters who do not participate. Elections can be held without having to make a list of voters by including them.

After step S102, the electronic voting server 300 transmits the election information matching the election name to the voter terminal 100 that has searched for the election name (S103). Here, the election information is the name of the election received from the election manager terminal 200, the election schedule (eg, campaign start date, end date, voting date), candidate list (eg candidate information, candidate image, self PR video), candidate pledge, etc. I can.

After step S103, the electronic voting server 300 receives encrypted voting data from the voter terminal 100 (S104), verifies the received voting data, and determines a list of voters (S105).

4 is a flowchart illustrating steps S104 and S105 shown in FIG. 3.

4, the electronic voting server 300 receives a plurality of voter identification items from the voter terminal 100, and records the corresponding voter in a temporary voter list together with the received plurality of voter identification items (S104-1 ). Here, the plurality of voter identification item may be a digital signature (Sign _sku) information by the voter terminal 100, may include a plurality, such as the name of the voter, voter identification item, the additional information. In addition, in order to transmit a plurality of voter identification items to the electronic voting server 300, the voter may certify that he/she is himself/herself through the verification authority server.

On the other hand, since the information on the voters participating in the voting is verified only to the voter party, the voter who provided multiple voter identification items can be recorded in the "temporary" voter roll, and through the subsequent verification process, the temporary voter roll You can put the voters listed in the final voter roll.

After step S104-1, the electronic voting server 300 receives encrypted voting data from the voter terminal 100 recorded in the temporary voter list (S104-2). Here, the voting data may be encrypted using an encryption key (pk _t ) generated by the electronic voting server 300.

If a voter identification item is received from the voters participating in the voting and a temporary voter is created based on this, the electronic voting server 300 can finally determine the voter list through two methods.

1. Additional verification of voter identification items (electronic signature (Sign _sku ) verification)

After step S104-2, the electronic voting server 300 may verify each of the plurality of voter identification items, and count and compare the verification results. Specifically, one voter and a plurality of voter identification items corresponding thereto are recorded, and the electronic voting server 300 verifies each of the plurality of voter identification items, and identifies the voter passing the verification in the plurality of voter identification items. It can be checked whether the number of items is greater than the number of voter identification items that do not pass the verification (S105-1).

In step S105-1, if the number of voter identification items that passed the verification is greater than the number of voter identification items that do not pass the verification, the electronic voting server 300 determines that the information provided by the corresponding voter is valid, and the corresponding voter Can be recorded in the final voter roll (S105-2, YES).

On the other hand, in step S105-1, if the number of voter identification items that have passed the verification is less than the number of voter identification items that do not pass the verification, the electronic voting server 300 may exclude the corresponding voter from the final voter list (S105 -3, NO).

2. Mutual verification among voters

After step S104-2, the electronic voting server 300 may transmit a verification request for any one of the plurality of voter identification items to the voter terminal 100 different from the voter corresponding to the identification item ( S105-10), it is possible to check whether the voter identification item passes the verification (S105-20). This is a method for securing confidence in elections from voters, and can be used when multiple voters, such as affiliation information, have the same category of additional information.

That is, if the voter identification item is the voter's belonging information (eg, department name, organization name, voter's position), the electronic voting server 300 may request verification from other voters matching the voter's affiliation information. Here, the voter who determines the validity of the voter identification item may be a trusted voter among voters, or may be a voter arbitrarily selected by the electronic voting server 300 after voting is finished. In addition, at least half of the voters recorded on the temporary voter roll can judge the validity of the voter identification item, thereby securing voters' confidence in the election.

In addition, the process of validating a voter by a voter can continue by biting the tail. That is, the voter C can verify the voter B who verifies the voter A, the voter B, D, the E, F, G, H voter verifying the B, D voter?? Likewise, the verification tree between voters can be expanded, and finally, all voters can verify each other. In addition, the B, B/D voter who begins verification may be a verifier designated by the Election Commission.

In this way, if the verification tree of voters is expanded, fairness and reliability of verification can be secured, and the error rate in the final voter list can be significantly reduced.

When the voter identification item passes verification by another voter in step S105-20, the electronic voting server 300 may record the corresponding voter in the final voter roll (S105-30, YES), and conversely, S105-20 If the voter identification item does not pass verification by another voter in the step, the electronic voting server 300 may exclude the corresponding voter from the final voter list (S105-40, NO).

It will be described again with reference to FIG. 3.

After step S105, the electronic voting server 300 derives a result of counting the votes based on the confirmed list of voters (S106). Specifically, the electronic voting server 300 extracts a plurality of secret key (a ₀ ) pieces from the final voter list, and can restore the vote counting encryption key (pk _t ), and by using this, encryption recorded in the final voter list. Voting data can be extracted.

At this time, since the voting data extracted by the electronic voting server 300 exposes voter information, the electronic voting server 300 uses a Mix-net technique to ensure the anonymity of the extracted voting data. This allows electronic voting to be made a secret ballot. For example, the electronic voting server 300 performs shuffle using a permutation matrix (ð) that can adjust the order of input values (voting data), and is a part of randomization to change the shape of the input data. ElGamal can be re-encrypted (RE, D _sk (RE _pk (c)) = m). Accordingly, the link between the input value and the output value is eliminated, and the confidentiality of the vote can be ensured by preventing the voter from being identified from the decoded vote result using the vote count decryption key (sk _t ).

Through the above-described method, the electronic voting server 300 may aggregate voting data for which anonymization has been completed and publish the voting results, and the electronic voting server 300 may guarantee secret voting in the voting and counting process.

5 is a diagram schematically illustrating a flow of an electronic voting method using the electronic voting system 1000 according to an embodiment of the present invention.

Referring to FIG. 5, a voter can authenticate himself through the voter terminal 100, register his/her identification information, and record his/her identification information in the voter list, and use the vote count encryption key (pk _t ). After the voting selection information is encrypted, voting data can be generated. Here, the voting data encrypted using the vote count encryption key (pk _t ) may have one of the pieces with a plurality of secret keys (a ₀ ).

In addition, it is possible to verify the voter identification information (personal identification information) at the request of the electronic voting server 300 that manages the voter list, which can be understood as confirming the reputation between voters.

The electronic voting server 300 extracts a plurality of secret key (a ₀ ) pieces from the confirmed voter list counted, restores the counting encryption key (pk _t ), and extracts encrypted voting data using this. , It can be anonymized using the Mix-net technique.

That is, the electronic voting server 300 can improve the security of electronic voting by anonymizing the voter's voting selection information before counting, and by using the last restored voting decryption key (sk _t ) to aggregate voting data. Counting results can be derived.

So far, a series of processes for electronic voting using the electronic voting system 1000 according to an embodiment of the present invention have been described. According to the present invention, the anonymity and confidentiality of electronic voting can be guaranteed and reliable electronic voting service can be provided by using only the election name and without a pre-made voter list.

In addition, since the list of voters is confirmed after the voting is completed, even if an election manager's mistake or irregular election occurs, it can be corrected, and the reliability of the recounting of the electronic voting method can be increased.

Meanwhile, the present invention can also be implemented as a computer-readable code on a computer-readable recording medium. Computer-readable recording media include all storage media such as magnetic storage media and optical reading media. It is also possible to record the data format of the message used in the present invention on a recording medium.

Embodiments of the present invention have been described above with reference to the accompanying drawings, but those of ordinary skill in the art to which the present invention pertains can be implemented in other specific forms without changing the technical spirit or essential features. You can understand. Therefore, it should be understood that the embodiments described above are illustrative and non-limiting in all respects.

1000: electronic voting system
100: voter terminal
200: election manager terminal
300: electronic voting server
310: encryption key generation unit
320: communication department
330: voter roll generator
340: voter roll verification
350: decryption unit
360: Counting Anonymization Department

Claims (12)

Voter terminals participating in elections;
An election manager terminal that manages the election; And
An electronic voting server that provides an electronic voting service for the election;
Including,
The electronic voting server,
After transmitting the election information corresponding to the election name to the voter terminal searching for the election name, receiving encrypted voting data from the voter terminal, verifying the voting data, and determining the final voter list, the final voter Derive the counting results based on the list,
The determining of the final voter list comprises determining the final voter list for only the voters of the voter terminal from which the voting data has been received, and the electronic voting system using the election name. The method of claim 1,
The electronic voting server,
Election to generate the voter's voting signature generation key (sk _v ) and voting signature verification key (pk _v ) for voting, the vote count decryption key (sk _t ) and the vote count encryption key (pk _t ) of the electronic voting server for counting Electronic voting system using names. The method of claim 2,
The counting decryption key (skt),
Electronic voting system using election names, divided into a plurality of secret key pieces. The method of claim 2,
The electronic voting server,
Receiving an election name from the election manager terminal and electronically signing the election name using the voting signature generation key (sk _v ),
Electronic voting system using election names. The method of claim 4,
The election name above is:
The name disclosed to voters meeting the voting conditions set by the election manager terminal,
Electronic voting system using election names. The method of claim 4,
The voter terminal,
Using the voting signature verification key (pk _v ) to verify the election name and to proceed with voting,
Electronic voting system using election names. The method of claim 6,
The voter terminal,
Performing voter identification from at least one verification authority, encrypting voting selection information using the vote count encryption key (pk _t ) to generate voting data, and electronically signing the voting data,
Electronic voting system using election names. The method of claim 4,
The electronic voting server,
Receiving voting data encrypted by the vote counting encryption key (pk _t ) from the voter terminal,
Electronic voting system using election names. The method of claim 8,
The electronic voting server,
Verifying each of the plurality of voter identification items, and recording more voters in the final voter roll than the number of voter identification items that have passed validation,
Electronic voting system using election names. The method of claim 8,
The electronic voting server,
Sending a verification request for any one of the plurality of voter identification items to another voter terminal, receiving the verification result through the other voter terminal, and recording the voters who passed the verification in the final voter roll,
Electronic voting system using election names. The method of claim 9 or 10,
The electronic voting server,
Extracting a plurality of pieces of the secret key (a ₀ ) fragmented from the final voter list, restoring the counting encryption key (pk _t ), and extracting the voting data,
Electronic voting system using election names. The method of claim 11,
The electronic voting server,
Arranging and re-encrypting the voting data and the voter terminal randomly, and counting the re-encrypted voting data using the vote counting decryption key (sk _t ),
Electronic voting system using election names.

Images