230 likes | 386 Views
An Architecture For Electronic Voting. Master Thesis Presentation Clifford Allen McCullough Department of Computer Science University of Colorado at Colorado Springs October ??, 2012. Outline. The Need for an E-Voting S ystem US Voluntary Voting System Guidelines Existing Solutions
E N D
An Architecture ForElectronic Voting Master Thesis Presentation Clifford Allen McCullough Department of Computer Science University of Colorado at Colorado Springs October ??, 2012
Outline The Need for an E-Voting System US Voluntary Voting System Guidelines Existing Solutions Proposed Architecture A Demonstration System Performance Comparisons Lessons Learned Future Work Summary An Architecture for Electronic Voting by Clifford Allen McCullough
The Need for an E-Voting System Business Board of Directors Proxy votes US citizens overseas US military overseas An Architecture for Electronic Voting by Clifford Allen McCullough
Related Work Brief Overview of the related literature in conferences/journal. (Pick key 3-4 papers). Just list their references. Mention how are they related to your work. An Architecture for Electronic Voting by Clifford Allen McCullough
US Voluntary Voting System Guidelines (VVSG) Security Accuracy Error Recovery Integrity Vote Tabulation Casting a Ballot Accessibility Independent Verification System An Architecture for Electronic Voting by Clifford Allen McCullough
Existing Solutions Commercial web-based voting systems are available Secure Electronic Registration and Voting Experiment (SERVE) Security Peer Review Group (SPRG) An Architecture for Electronic Voting by Clifford Allen McCullough
Proposed Architecture Design Requirements General Schema The System Architecture Paillier Cryptography An Architecture for Electronic Voting by Clifford Allen McCullough
Design Requirements • VVSG • Information Assurance general rules • Minimize the attach surface • Mitigate the vulnerabilities An Architecture for Electronic Voting by Clifford Allen McCullough
General Schema Should not be centralized Greatest vulnerability are from insider attacks Denial of service Keep control of the ballot Publish the web application An Architecture for Electronic Voting by Clifford Allen McCullough
The System Architecture Voting-Server Voter Authentication Issue Presentation Verify the Ballot Casting the Ballot Mutual Authentication An Architecture for Electronic Voting by Clifford Allen McCullough
Election Key Pair Generation and Reproduced by Election Judges Describe how that work An Architecture for Electronic Voting by Clifford Allen McCullough
How Ballots are Encoded/Encrypted/Decryted With a short example illustrate how ballot are encoded (candidate/write in) May include a snapshort like Figure 4. An Architecture for Electronic Voting by Clifford Allen McCullough
System Diagram An Architecture for Electronic Voting by Clifford Allen McCullough
Paillier Cryptography • Exponential [cite ref] • Show the formula for each method • Homomorphic[ref] • Generalized Paillier[ref] An Architecture for Electronic Voting by Clifford Allen McCullough
A Demonstration System A 32-bit demonstration and development system based on ESXi(Do not use other people’s software product name as yours system name. Pick one that readers can remember and cited) A 64-bit demonstration system on EAS Infrastructure. Give it a name. An Architecture for Electronic Voting by Clifford Allen McCullough
32-bit Development System An Architecture for Electronic Voting by Clifford Allen McCullough
64-bit Demonstration System An Architecture for Electronic Voting by Clifford Allen McCullough
Performance Comparisons Cryptographic Methods Cryptographic Key Generation Block Paillier vs. Generalized Paillier Ballot Casting Include Figures 3-8 Tables 3-7 in separate viewgraphs An Architecture for Electronic Voting by Clifford Allen McCullough
Lessons Learned • Freeware • (add short description for each of these lessons) • Internet Forums • Using Multiple Programing Languages • More detail here. An Architecture for Electronic Voting by Clifford Allen McCullough
Future Work Redundancy Secret Share Encryption and Decryption Error Handling and Logging Ballot Generation Ballot and Multi-lingual Database Quorum Login An Architecture for Electronic Voting by Clifford Allen McCullough
Summary Developing an Election Assistance Commission compliant voting system is a significant undertaking SERVE objective too much too soon Much future work available The demonstration system is a proof of concept An Architecture for Electronic Voting by Clifford Allen McCullough
Demonstration Generate and load a key Initialize services Vote Collect the tally Decrypt the tally An Architecture for Electronic Voting by Clifford Allen McCullough
References MotionVoter. (2011). Retrieved March 6, 2012, from http://www.motionvoter.com/ Cardellini, V., Casalicchio, E., Colajanni, M., & Yu, P. S. (2002). The State of the Art in Locally Distributed Web-Server Systems. ACM Computing Surveys, Vol 34, No 2, 263-311. Damgard, I. B., & Jurik, M. J. (December 2000). A Generalisation, a Simplification and some Applications of Paillier'sProbabilstic Public-Key System. Basic Research in Computer Science, RS-00-45. Defense, D. o. (2007). Expanding the Use of Electronic Voting Technology for UOCAVA Citizens. Department of Defense. EAC. (2010). Election Assistance Commission. Retrieved February 29, 2012, from http://www.eac.gov/ EAC Voting System Testing and Certification Division. (2011). A Survey of Internet Voting. Washington, DC 20005. EAC VVSG Vol I. (2010). Voluntary Voting System Guidelines Volume I. Retrieved August 24, 2012, from United States Election Assistance Commission: http://www.eac.gov/testing_and_certification/voluntary_voting_system_guidelines.aspx EAC VVSG Vol II. (2010). Voluntary System Guidelines Volume II. Retrieved August 24, 2012, from United States Election Assistance Commission: http://www.eac.gov/testing_and_certification/voluntary_voting_system_guidelines.aspx Jefferson, D. D., Rubin, D. A., Simons, D. B., & Wagner, D. D. (2004). A Security Analysis of the Secure Electronic Registration and Voting Experiment (SERVE). Paillier, P. (1999). Public-Key Cryptosystems Based on Composite Degree ResiduosityClases. Advances in Cryptology - Eurocrypt '99, pp. 223-238. Shamir, A. (November, 1979). How to Share a Secret. Communications of the ACM, 612-613. Vote-Now. (n.d.). Retrieved March 6, 2012, from https://secure.vote-now.com/ An Architecture for Electronic Voting by Clifford Allen McCullough