KR102314035B1 - Electronic voting system and method thereof - Google Patents

Abstract

Electronic voting system according to an embodiment of the present invention, a first server having a voter list for voters who exercise the right to vote, receiving the voter list from the first server, a first voter terminal including the voter list The first information including the first voter authentication information and voting record received from A second server that generates and encrypts and stores the n-th information, a third server that receives the encrypted voting record included in the first block to the n-th block from the second server, and the first block received by the third server and a fourth server for deriving a vote counting result by decrypting the encrypted voting record included in the to nth block.

Description

Electronic voting system and electronic voting method

The present invention relates to an electronic voting system and an electronic voting method. More specifically, it relates to an electronic voting system and an electronic voting method that enhances voter privacy protection and enables re-voting.

The traditional voting method consists of visiting a designated polling place on Election Day, checking your identity, placing your vote on a paper ballot paper, and putting it into the ballot box. However, the traditional voting method has problems in that time and space are limited and both the voting and ballot counting procedures are cumbersome. In the case of dimensional voting, there is a problem that the voter turnout is very low because voters have to spend extra time to visit the voting place.

In order to solve the problems of the traditional voting method, the electronic voting method has been proposed. The electronic voting method can solve all the problems caused by the time and space constraints of the traditional voting method because the voter can exercise the right to vote through a terminal connected to the network. have. However, prior to exercising the right to vote, it is necessary to go through a certain identification process. If there is a problem in the identification process, there is a problem of infringement of individual voters' privacy, for example, leakage of personal information and disclosure of voting rights in violation of the principle of secret voting. There is a problem that accidents such as such can occur.

On the other hand, in the electronic voting method, the voter electronically exercises the right to vote through a terminal connected to the network. As a physical ballot paper is not required as in the traditional voting method, the voter goes through a predetermined identity authentication procedure to determine the content of the voting right. It is desirable to freely reflect changes in the will of For example, even if you have already exercised your voting right, if it is within the set voting time, you can withdraw your voting right and re-vote. However, the current electronic voting method does not reflect these matters.

Therefore, there is a need for a new and progressive electronic voting system and electronic voting method that can solve the problems of the electronic voting method proposed to solve the problems of the traditional voting method, more specifically, the infringement of individual voters' privacy and the impossibility of re-voting. do. The present invention relates to this.

Republic of Korea Patent Publication No. 100-20012-0028158 (20012.03.22)

The technical problem to be solved by the present invention is to provide an electronic voting system and an electronic voting method in which there is no room for infringement of individual voters' privacy in the electronic voting method.

Another technical problem to be solved by the present invention is to provide an electronic voting system and an electronic voting method capable of revoting in an electronic voting method.

The technical problems of the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned will be clearly understood by those skilled in the art from the following description.

Electronic voting system according to an embodiment of the present invention for achieving the above technical problem, a first server having a voter list for voters who exercise the right to vote, receiving the voter list from the first server, the voter list Generates, encrypts and stores the first information including the first voter authentication information and voting record received from the first voter terminal including the first block, and one or more n-th blocks connected to the first block by a chain n is a natural number greater than or equal to 2), a second server that encrypts and stores n-th information, a third server that receives the encrypted voting record included in the first block to the n-th block from the second server, and the third and a fourth server for deriving a vote counting result by decrypting the encrypted voting record included in the first to nth blocks received by the server.

According to an embodiment, the voter list may include any one or more of a voter name, voter terminal information, address, resident registration number, and voter biometric information as the first voter authentication information.

According to an embodiment, the second server may encrypt the first information using the voter biometric information and store it in the generated first block.

According to an embodiment, the second server may encrypt the first information through any one of a prime factorization encryption method or an elliptic curve encryption method and store it in the generated first block.

According to an embodiment, the third server records the encrypted voting records included in the first to nth blocks received from the second server together with the decryption key generated by the second server according to the voting time. can be sent to the fourth server.

According to an embodiment, the fourth server uses a permutation matrix (ð) that can adjust the order of the encrypted voting records included in the first to nth blocks received by the third server. Shuffle can be performed.

In an electronic voting method according to an embodiment of the present invention for achieving the above technical problem, the first server receives the voter list, the second server receives the first voter from the first voter terminal included in the voter list First information including authentication information and voting record is generated as a first block, encrypted and stored, and one or more n-th blocks (n is a natural number greater than or equal to 2) connected in a chain with the first block are generated to generate n-th information Encrypting and storing, receiving, by a third server, an encrypted voting record included in the first block to the n-th block from the second server, and encryption including the first block to the n-th block by the fourth server Including the step of deriving a vote counting result by decrypting the voted record.

According to an embodiment, the method further includes performing authentication through the first voter terminal, wherein performing the authentication includes transmitting a voter identification number through Eva (Vi), but Dva (Eva (Vi) )) = calculating voter identification information via Vi, retrieving the voter identification number (Vi) from the voter list, and performing an authentication process according to one or more authentication means.

According to an embodiment, the method further includes performing a vote through the first voter terminal, wherein the performing of the voting includes encrypting one's vote value using the public key of the ballot counting account, the first 1 The step of electronically signing the vote data encrypted with the private key possessed by the voter terminal, and the first voter terminal may further include the step of storing the encrypted voting data and the voter electronic signature in a second server.

According to an embodiment, the step of deriving the ballot counting result includes receiving a piece of the counting key from the counting committee server and restoring the counting secret key (td = SecAdd(t1, t2, ... tk)), the second server Reading the voting data stored in 200, transmitting the voting data to the Mixnet server, decrypting the encrypted voting data that has passed through the Mixnet server with the ballot counting secret key, to the voting information server and the second server 200 It may include the steps of storing in another block of and aggregating and publishing the decrypted voting data.

According to one embodiment, after the step of announcing, verifying whether the decrypted voting data aggregated result stored in the voting information server is the same as the decrypted voting data aggregated result stored in the second server after counting may be further included. have.

According to the present invention as described above, there is an effect that there is no room for a problem of privacy infringement of individual voters in the electronic voting method.

In addition, there is an effect that re-voting is possible in the electronic voting method.

Effects of the present invention are not limited to the above-mentioned effects, and other effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a diagram showing the overall configuration of an electronic voting system according to an embodiment of the present invention.
2 is a diagram illustrating a common configuration included in the first to fourth servers.
3 is a diagram illustrating a configuration additionally included in the second server in addition to the configuration shown in FIG. 2 .
4 is a diagram illustrating an exemplary elliptic curve of the elliptic curve encryption system applied to the fourth server.
5 is a diagram illustrating a conceptual diagram of an electronic voting system according to an embodiment of the present invention.
6 and 7 are diagrams illustrating a voting and ballot counting process according to the electronic voting system 1000 according to an embodiment of the present invention.
8 is a flowchart illustrating detailed steps included in the authentication step.
9 is a flowchart illustrating detailed steps included in the voting step.
10 is a flowchart illustrating detailed steps included in the counting step.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Advantages and features of the present invention, and a method for achieving them will become apparent with reference to the embodiments described below in detail in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments published below, but may be implemented in various different forms, and only these embodiments make the publication of the present invention complete, and common knowledge in the technical field to which the present invention belongs It is provided to fully inform the possessor of the scope of the invention, and the present invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout.

Unless otherwise defined, all terms (including technical and scientific terms) used herein may be used with the meaning commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in a commonly used dictionary are not to be interpreted ideally or excessively unless clearly defined in particular.

Meanwhile, the terms used in this specification are for the purpose of describing the embodiments and are not intended to limit the present invention. As used herein, the singular also includes the plural unless specifically stated otherwise in the phrase.

As used herein, “comprises” and/or “comprising” refers to the presence of one or more other components, steps, operations and/or elements mentioned. or addition is not excluded.

1 is a view showing the overall configuration included in the electronic voting system 1000 according to an embodiment of the present invention.

However, this is only a preferred embodiment for achieving the object of the present invention, some components may be added or deleted as necessary, and of course, a role performed by one component may be performed by another component.

The electronic voting system 1000 according to an embodiment of the present invention includes a first server 100 , a second server 200 , a third server 300 , and a fourth server 400 . Here, the first server 100 to the fourth server 400 are classified according to the functions performed by each server, and do not necessarily have to be physically independent servers, and are classified as independent functions within one physical server. It may be a specific processor.

On the other hand, if the first server 100 to the fourth server 400 are physically independent servers, they may be implemented in the form shown in FIG. 2 , but this is only a preferred embodiment for achieving the object of the present invention, and if necessary Of course, some components may be added or deleted depending on the configuration, and a role performed by one component may also be performed by another component. Hereinafter, description will be made based on the first server 100 .

The first server 100 may include a processor 10 , a network interface 20 , a memory 30 , a storage 40 , and a data bus 50 connecting them.

The processor 10 controls the overall operation of each component. The processor 10 may be any one of a central processing unit (CPU), a micro processor unit (MPU), a micro controller unit (MCU), or a type of processor widely known in the art to which the present invention pertains. In addition, the processor 10 may perform an operation for at least one application or program for achieving the purpose of the electronic voting system 1000 according to an embodiment of the present invention.

The network interface 20 supports wired/wireless Internet communication and may support other known communication methods. Accordingly, the network interface 20 may be configured to include a corresponding communication module.

The memory 30 stores various data, commands and / or information, and one or more computer programs 41 from the storage 40 to achieve the purpose of the electronic voting system 1000 according to an embodiment of the present invention. can be loaded Although RAM is illustrated as one of the memories 30 in FIG. 2 , it goes without saying that various storage media can be used as the memory 30 .

The storage 40 may non-temporarily store one or more computer programs 41 and large-capacity network data 42 . The storage 40 is a non-volatile memory such as a read only memory (ROM), an erasable programmable ROM (EPROM), an electrically erasable programmable ROM (EEPROM), a flash memory, a hard disk, a removable disk, or in the technical field to which the present invention pertains. It may be any one of widely known computer-readable recording media of any type.

The computer program 41 may be loaded into the memory 30 and, by one or more processors 10 , perform functional operations that each server should perform.

Let us return to the description of FIG. 1 again.

The first server 100 holds a list of voters for voters who exercise their right to vote.

The second server 200 receives the voter list from the first server 100 .

Here, the voter roster includes information about voters exercising their right to vote. For example, voter name, voter terminal information, address, social security number, voter biometric information, etc. may include one or more pieces of information that can identify the voter. can

The second server 200 includes a first voter terminal matching the voter terminal information included in the voter list, for example, the first voter authentication information from the first voter terminal installed with an electronic voting application and a first including a voting record information can be received.

In this case, the second server 200 generates the received first information as a first block, encrypts it, and stores it.

Further, the second server 200 receives the n-th information including the n-th voter authentication information and the voting record from the terminal of the n-th voter matching the voter terminal information included in the voter list (n is a natural number greater than or equal to 2). Alternatively, the received n-th information is encrypted and stored by generating one or more n-th blocks connected to the first block in a chain.

That is, the second server 200 can be viewed as a server to which the block chain technology is applied. Here, the blockchain technology is the main technology that makes the cryptocurrency called Bitcoin work, which was proposed by Satoshi Nakamoto in 20009. More specifically, it is a distributed ledger technology. Store them in blocks and connect them like a chain.

On the other hand, since the second server 200 is applied with the block chain technology, even if the first to n-th information stored in the block is encrypted, since the voter's personal authentication information is recorded in the block, there is a possibility that a privacy infringement problem may occur. have. This can be solved by the fourth server 400 to be described later.

On the other hand, since the second server 200 applies block chain technology, as shown in FIG. 3 , the security key generation unit 210 , the security key storage unit 220 , the encryption engine unit 230 , and the decryption engine unit (240).

The security key generator 210 receives a signal for requesting encryption from the processor 10 described above and generates a security key. More specifically, the security key is generated through a random number generator (RNG) and a plurality of security keys are generated. can be

Meanwhile, the security key can be generated in various ways. For example, a security key can be generated by a prime factorization encryption system or an elliptic curve encryption system. According to the elliptic curve encryption system, the security key generator 210 satisfies the elliptic curve equation y2 = x2 + ax + b (here, a and b are real numbers), and (x, y) that further satisfies a specific equation ) to calculate a real group consisting of . Here, the specific equation may be, for example, an addition equation, an identity equation, and an associative equation. For example, in an elliptic curve as shown in Fig. 4, the addition definition of two points A and B is to draw a line connecting A and B to meet another point R on the elliptic curve, and a point symmetrical to the X axis is When C is C, it can be defined as A + B = C. The identity formula may mean that there exists G satisfying D + G = G + D = D for any element D in the real group. The binding equation may mean that A + (B + C) = (A + B) + C is satisfied in the real group. Thereafter, the security key generation unit 210 may generate the security key by an algorithm that satisfies P = f(Q) with respect to P and Q belonging to the real group as described above.

On the other hand, the elliptic curve encryption system has the advantage that the key generation time can be significantly reduced because the length of the generated key is shorter than that of the prime factorization encryption system. For example, it takes about 10 to 20 seconds to generate a 2048-bit key using RSA 2048, a representative prime factorization encryption system, but less than 1 second when generating a key using an elliptic curve encryption system. This takes In fact, since the 2048-bit cipher generated by RSA 2048 has the same level of security as the 224-bit cipher generated by the elliptic curve cipher system, when generating the key using the elliptic curve cipher system, the prime factorization cryptography system Compared to the case of generating a key using

The security key storage unit 220 stores the security key generated by the security key generation unit 210 , and may assign numbers to a plurality of security keys and store them. That is, the security key storage unit 220 may be referred to as a security key database for allocating a number to the security key and storing it.

When an encryption request signal is input from the processor 10, the encryption engine unit 230 receives any one of a plurality of security keys stored in the security key storage unit 220 and encrypts voter authentication information and voting records according to the security key. , the encryption engine unit 230 may use various encryption engines such as SEED, ARIA, RSA, DES, MD5, DSS, SHA, and the like.

The decryption engine unit 240 generates a decryption key for decrypting the voter authentication information and voting record encrypted by the encryption engine unit 230, and uses the same decryption engine as the encryption engine used to implement the encryption engine unit 230. It is preferable to implement this, and the decryption engine unit 230 may use various decryption engines such as SEED, ARIA, RSA, DES, MD5, DSS, and SHA.

In this way, when the second server 200 includes the decryption engine unit 240 , the fourth server 400 , which will be described later, may not include a separate decryption engine unit 240 . In this case, the second server 200 ) may transmit the decryption key generated according to the voting time to the fourth server 400 through the third server 300 .

On the other hand, when the voter biometric information is included in the voter list described above, the encryption engine unit 230 and the decryption engine unit 240 can generate a key for encryption and decryption through this, and this voter biometric information is specific It is independent information given only to voters, and since it is impossible to imitate others, it has the advantage that security can be strengthened.

Specifically, through the voter's terminal, a facial image, a fingerprint, a friction ridge, a blood vessel, an iris, a retina, an electrocardiogram (ECG), It can recognize one or more biometric information among EEG (electroencephalogram), pulse, blood pressure, heart sound, chest or abdominal movement, and conductivity of human body. , such biometric information may be collected in various types such as electrical signals, sound signals, force signals, electromagnetic signals, image/video signals, and optical signals, and various sensors may be used.

For example, the color image sensor may be used to collect a human face image, a fingerprint image, a palm print image, a retinal image, and the like. As another example, the infrared image sensor may be used to collect images of biometric features sensitive to infrared light sources, such as blood vessel images.

As another example, a vibration sensor may be used to collect a signal having a vibration attribute, such as a chest or abdominal movement signal. In addition to this, for example, the pressure sensor may be used to collect biometric information related to pressure, such as a blood pressure signal and a chest or abdominal movement signal. Various types of biometric information may be simultaneously collected from several different sensors, or may be simultaneously collected through one integrated sensor capable of collecting various types of biosignals. For example, a color image sensor and a photoelectric sensor can collect a human face image and a PPG signal at the same time, respectively, or an integrated sensor having the functions of a color image sensor and a photoelectric sensor can simultaneously collect a human face image and a PPG signal signals can be collected.

On the other hand, the second server 200 is a smart contract (Smart Contract) is implemented because the block chain technology is applied, and the electronic voting system 1000 according to an embodiment of the present invention to vote this smart contract, ballot counting The following smart contracts will be named. Smart contract refers to the conclusion and implementation of various types of contracts such as financial transactions, real estate contracts, and notarizations based on block chain technology. Also called block chain 2.0, the electronic voting system (1000) according to an embodiment of the present invention ), voting, ballot counting, voter authentication, election result inquiry, etc. will be regarded as contracts concluded and executed by smart contracts.

The third server 300 receives the encrypted voting record included in the first block to the nth block from the second server 200 .

The encrypted voting record received here is not leaked to the outside no matter what means is taken until the voting time, and the decryption key is transmitted to the fourth server 400, which will be described later, in accordance with the voting time for decrypting the encrypted voting record.

The fourth server 400 decrypts the encrypted voting record included in the first block to the nth block received by the third server 300 to derive a vote counting result.

In this case, the third server 300 transmits a decryption key according to the voting time for decrypting the encrypted voting record of the fourth server 400, and the decryption key to be transmitted here is generated by the second server 300 It is a decryption key transmitted to the third server 300 .

In this case, since the fourth server 400 receives the decryption key and decrypts the encrypted voting record, it may include a separate decryption engine unit (not shown), but rather than directly generating the decryption key and proceeding with decryption , since only the decryption process is performed by receiving the decryption key, it may be viewed as a different configuration from the decryption engine unit 240 described in the second server 200 above.

On the other hand, the fourth server 400 is a configuration that can solve the privacy infringement problem of individual voters in the description of the second server 200 above, which is called Mixnet applied to the fourth server 400 . can be derived from technology.

Here, Mixnet receives an encrypted input value as an input and outputs an encrypted output value. At this time, the connection between the input value and the output value is removed before outputting. This solves the problem of privacy violations of individual voters as they can be removed from voter authentication information, for example, signatures performed by the voter.

This Mixnet consists of multiple Mixnet nodes, and each Mixnet node uses the ElGamal cipher. Shuffle and randomization are performed to deliver the result to the next Mixnet node, and the same process is performed for the final mix. Proceed to the net node. The ElGamal encryption used at this time is homomorphic encryption, and has a property that an operation on a ciphertext corresponds to an operation on a plaintext.

In addition, Mixnet performs shuffle using a permutation matrix (ð) that can adjust the order of input values, and ElGamal re-encryption (RE, Dsk (REpk) (c))=m) is performed for all MixNet nodes, thereby removing the link between the input value and the output value. Accordingly, it is possible to ensure the confidentiality of the vote by making it impossible to identify the voter from the decrypted voting result.

Furthermore, the voting record list stored in the block of the second server 200 can be read and delivered to Mixnet through the voting smart contract. At this time, the list read from the block includes encrypted voting record, voter public key, and voting record time information. If the next vote record within the block is read and the same voter public key is found in the voting record list, the time information is compared. If the current voting record is the previous time information, it is not included in the list. do. In addition, if none of these apply, it will be added to the voting record list. In this way, only the most recent voting records can be retrieved from re-voting and delivered to Mixnet, enabling easy re-voting.

So far, the entire configuration of the electronic voting system 1000 according to an embodiment of the present invention has been described with reference to FIGS. 1 to 4 , and a conceptual diagram thereof is attached to FIG. 5 . Hereinafter, it will be described in more detail.

6 and 7 are diagrams illustrating a voting and ballot counting process according to the electronic voting system 1000 according to an embodiment of the present invention.

6 and 7, voting and counting are performed through the following process, and more specifically, by the electronic voting system 1000 according to an embodiment of the present invention described with reference to FIG. 1 and the electronic voting system by communication between 1000 and the voter terminal. Hereinafter, this will be referred to as an electronic voting method according to an embodiment of the present invention.

The electronic voting method according to an embodiment of the present invention comprises the steps of (a-1) generating electoral list data in a computer-readable form, (a-2) creating a voting account and a ballot counting account in a block chain node, and creating a counting account splitting the private key of (a-3) sending the access URL to the voter's mobile phone or e-mail when voting starts, (a-4) accessing the voting information screen through the URL received on the voter terminal Step, (a-5) performing voting through the voter terminal, (a-6) When the voter completes mobile phone real-name authentication, public authentication, authentication number, identification information, and biometric information authentication, the voter account is stored in the voter terminal Creating an (electronic wallet) and moving to the voting screen, (a-7) loading the voting screen on the voter terminal, (a-8) receiving the public key of the ballot counting account when loading the voting screen on the voter terminal , (a-9) selecting the desired candidate on the voting screen printed on the voter terminal and selecting the completion of voting, (a-10) When the voter completes the vote, the voter marks the electronic ballot paper and encrypts it with the public key of the ballot counting account. Signing using the private key of the account (e-wallet), (a-11) storing the encrypted voting data through the second server 200 by calling the voting smart contract, (a-12) voting Upon completion, the plurality of Mixnet nodes included in the Mixnet server generate the ElGamal private key (sk) and public key and disclose the public key (pk) to proceed with the counting, (a-13) Voting ends Step of selecting to count the votes, (a-14) reading the voting data stored in the second server 200 through the voting smart contract, (a-15) removing the voter signature from the encrypted voting data Input to the first Mixnet node of the Mixnet server, (a-16) The first Mixnet node shuffles the encrypted voting data (uij, vij) using the Permutation Matrix (ð); (a-17) Applying shuffled voting data to random values ElGamal re-encryption (RE, Dsk(REpk(c)) = m), (a-18) shuffled and re-encrypted voting data delivered to the next Mixnet node, (a-19) Last Mixnet The step of outputting from the node and storing it in the second server 200, (a-20) step of merging the ballot counting key, (a-21) the voting data after decoding the shuffled voting data and the second server 200 The steps of storing the decrypted voting data and storing the stored decrypted voting data in the voting information server and (a-22) may be sequentially performed.

In addition, while performing steps (a-15) to (a-20), the secret key of the electronic voting counting account is divided (F(x) = a0 + a1x + a2x2 + a3x3 + .. + ak-1xk-1 st (i,f(i)) where i=1,…,n Here, step (a-15') of performing the secret key fragment t1,t2,…tn = SecSplit(td)) may be further performed.

On the other hand, as shown in FIG. 8 , the authentication step is (b-1) the voter terminal transmitting the voter identification number (Vi) through Eva (Vi), (b-2) Dva(Eva(Vi)) = Calculating voter identification information through Vi, (b-3) retrieving the voter identification number (Vi) from the voter list, (b-4) finding the voter identification number (Vi) and then the authentication process according to the authentication method It may be performed including the step of starting the authentication process, any one or more of mobile phone real name authentication, authentication number authentication, and identity verification authentication may be selected.

On the other hand, as shown in FIG. 9, the voting step includes (c-1) the voter terminal encrypting its vote value using the public key of the ballot counting account, (c-2) encryption with the private key possessed by the voter terminal It may further include the step of performing an electronic signature on the voted data, (c-3) the voter terminal storing the encrypted voting data and the voter electronic signature in the second server 200 .

Accordingly, the voter terminal receives the voting information that the voter will participate in through the voting smart contract in order to have the voting information verified, and uses the voter authentication information to participate in voting. can be created, the voter electronically signs the voting record using the private key in the voter electronic wallet 200 or the third server 300 .

In addition, the voter additionally records the vote using the voting information verified before the end of the voting, and connects the voter public key with the voter public key in the state that the electronic signature is performed with the voter's private key and encrypted using the public key of the ballot counting account. Since it can be transmitted back to the server 200 or the third server 300, easy re-voting can be performed through this. In this case, among the encrypted voting records recorded in the block of the second server 200, the voting record with the same voter public key should allow only one vote record with the latest time information (time stamp) to be used for counting. This is to prevent duplicate voting.

On the other hand, as shown in FIG. 10, in the ballot counting step (d-1), the smart contract for counting receives a piece of the counting key from the counting committee server and restores the counting secret key (td = SecAdd(t1, t2, ... tk)) (d-2) the smart contract for counting votes reads the voting data stored in the second server 200, (d-3) the step for the smart contract for counting the votes to transmit the voting data to the MixNet server; (d-4) Decrypting the encrypted voting data passed through the Mixnet server with the voting secret key and storing it in different blocks of the voting information server and the second server 200, (d-5) Aggregating the decrypted voting data It may further include the step of announcing it.

On the other hand, the ballot count verification step (e-1) may further include the step of verifying whether the decrypted voting data aggregate result stored in the voting information server is the same as the decrypted voting data aggregate result stored in the second server 200 after the ballot counting. have.

The electronic voting system and electronic voting method according to an embodiment of the present invention described above can also be implemented as a computer program stored in a medium including the same technical features, in this case, although not described in detail to prevent duplicate description, the computer program Of course, all technical features applied to the electronic voting system and electronic voting method according to an embodiment of the present invention can be applied to derive the same effect.

Although embodiments of the present invention have been described with reference to the accompanying drawings, those of ordinary skill in the art to which the present invention pertains can realize that the present invention can be implemented in other specific forms without changing the technical spirit or essential features. you will be able to understand Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive.

1000: electronic voting system
10: Processor
20: network interface
30: memory
40: storage
41: computer program
50: data bus
100: first server
200: second server
300: third server
400: fourth server

Claims (7)

a first server holding a list of voters for voters who cast their votes;
Receive the voter list from the first server, and encrypt and store the first information including the first voter authentication information and voting record received from the first voter terminal included in the voter list as a first block, and , At least one n-th (n is a natural number of 2 or more) included in the voter list, n-th information including n-th voter authentication information and voting record received from a voter terminal, connected to the first block in a chain, one or more a second server generating an n-th block and encrypting and storing the n-th information;
a third server for receiving the encrypted voting record included in the first to nth blocks from the second server; and
a fourth server that decrypts the encrypted voting records included in the first to nth blocks received by the third server and derives a vote counting result;
includes,
The voter authentication information includes biometric information of each voter,
The second server,
It includes a security key generation unit, a security key storage unit, an encryption engine unit and a decryption engine unit,
The security key generation unit and the decryption engine unit of the second server generate a security key and a decryption key, respectively, using the biometric information of each voter,
The encryption engine unit encrypts each vote record of the first to nth voters by a security key generated using the biometric information of each voter,
The fourth server decrypts the voting record with a decryption key generated using the biometric information of each voter,
The fourth server,
Shuffle is performed using a permutation matrix (ð) that can adjust the order of the encrypted voting records included in the first to nth blocks received by the third server, and ElGamal re-encryption (RE, Dsk(REpk(c))=m) to remove the link between the encrypted voting record and the counting result to ensure the confidentiality of voting,
The second server generates the decryption key according to the opening time and transmits it to the third server,
The third server transmits the encrypted voting records included in the first to nth blocks to the fourth server along with the decryption key received from the second server according to the counting time,
The fourth server is an electronic voting system, characterized in that it decrypts the encrypted voting record by the decryption key received from the third server.
delete delete the first server receiving the voter roster;
The second server generates, encrypts and stores the first information including the first voter authentication information and the voting record received from the first voter terminal included in the voter list as a first block, and one or more included in the voter list n-th (n is a natural number greater than or equal to 2) n-th information including n-th voter authentication information and voting records received from the voter terminal is generated as one or more n-th blocks connected to the first block in a chain, and the n-th encrypting and storing information;
receiving, by a third server, an encrypted voting record included in the first block to the n-th block from the second server; and
deriving a vote counting result by decrypting, by the fourth server, the encrypted voting record included in the first block to the n-th block;
including,
The voter authentication information includes biometric information of each voter,
The second server,
It includes a security key generation unit, a security key storage unit, an encryption engine unit and a decryption engine unit,
The security key generation unit and the decryption engine unit of the second server generate a security key and a decryption key, respectively, using the biometric information of each voter,
The encryption engine unit encrypts each vote record of the first to nth voters by a security key generated using the biometric information of each voter,
The fourth server decrypts the voting record with a decryption key generated using the biometric information of each voter,
The fourth server,
Shuffle is performed using a permutation matrix (ð) that can adjust the order of the encrypted voting records included in the first to nth blocks received by the third server, and ElGamal re-encryption (RE, Dsk(REpk(c))=m) to remove the link between the encrypted voting record and the counting result to ensure the confidentiality of voting,
The second server generates the decryption key according to the opening time and transmits it to the third server,
The third server transmits the encrypted voting records included in the first to nth blocks to the fourth server along with the decryption key received from the second server according to the counting time,
The fourth server is an electronic voting method, characterized in that it decrypts the encrypted voting record by the decryption key received from the third server.
delete delete delete

Images