信息安全研究 ›› 2022, Vol. 8 ›› Issue (10): 990-.

• 数据安全与隐私计算专题 • 上一篇    下一篇

一种适用于大规模场景的匿名电子投票系统

高小龙1王玉2安鹏3唐波4刘金会1,4
  

  1. 1(西北工业大学网络空间安全学院西安710129)
    2(北京市国防动员委员会办公室北京100053)
    3(北京明朝万达科技股份有限公司北京100142)
    4(西北工业大学深圳研究院广东深圳518057)
  • 出版日期:2022-10-25 发布日期:2022-10-24
  • 通讯作者: 高小龙 主要研究方向为密码学应用. 3325605783@qq.com
  • 作者简介:高小龙 主要研究方向为密码学应用. 3325605783@qq.com 王玉 硕士.主要研究方向为信息安全、安全规划、企业架构与数字化转型、政府投资项目管理. 18810810801@139.com 安鹏 硕士,工程师.主要研究方向为密码学与应用、数据安全治理、联邦学习. anpeng@wondersoft.cn 唐波 博士,副研究员.主要研究方向为大数据应用和智能无人系统. 18810810801@139.com 刘金会 博士,副教授,硕士生导师. 主要研究方向为密码学、数字签名、数据安全. jh.liu6666@nwpu.edu.cn

An Anonymous E-voting System for Large Scale Scenarios

  • Online:2022-10-25 Published:2022-10-24

摘要: 近年来,随着密码学技术和互联网技术的不断发展,电子投票越来越得到社会的广泛关注.但传统电子投票存在隐私问题,严重威胁着投票的公平公正.电子投票系统是基于密码学的综合性系统,所依赖的密码学技术大致有以下4类:混合网络、盲签名、同态加密和秘密共享.其中秘密共享技术的安全性更高,数据处理效率更好.然而这种投票方案组成复杂,多方之间的通信复杂度高是限制其进一步应用和发展的主要问题.除此之外,在不泄露选票信息的前提下,实现选票有效性的验证也是一大挑战.针对上述问题,提出了一种基于秘密共享、可非交互式验证的安全电子投票系统.该系统使用非交互式的零知识验证方法,在满足投票系统基本安全要求的前提下,减少了通信复杂度,只要有1台投票服务器是诚实的就可以保证匿名性.除此之外,针对合谋攻击和分布式拒绝服务攻击具有一定抵抗能力.这些改进使得该系统适用于大型匿名投票场景.

关键词: 电子投票, 秘密共享, 分布式点函数, 椭圆曲线密码, 验证性

Abstract: In recent few decades, with the development of cryptography and Internet, the evoting has caught more and more eyes of society. However, traditional evoting has the problem of privacy leakage, which seriously threatens the fairness of voting. Electronic voting is a comprehensive system based on cryptography, and the cryptographic technologies it relies on are roughly classified into the following four categories: hybrid network, blind signature, homomorphic encryption and secret sharing. Among them, secret sharing technology has higher security and better data processing efficiency. However, the composition of evoting based on secret sharing is complex, and there is the high communication complexity among multiple parties of system, which stops the further development and application of evoting based on secret sharing. In addition, how to verify the validity of the ballots without disclosing the information of the ballots is also a challenge. To solve the above problem, we propose a noninteractively verifiable secure evoting system based on secret sharing. The system uses a noninteractive zeroknowledge verification method, which reduces the communication costs meanwhile meets the basic requirements of secure evoting. And the system can anonymous as long as there is one honest server at least. Moreover, this system is resistant to collusion attacks and distributed denialofservice(DDoS) attacks. These improvements make the system suitable for large anonymous voting scenarios.

Key words: e-voting, secret sharing, distributed point functions, ECC, verification