Improving Remote Voting Security with Code Voting

被引:0
作者
Joaquim, Rui [1 ]
Ribeiro, Carlos [1 ]
Ferreira, Paulo [1 ]
机构
[1] Univ Tecn Lisbon, ISEL, INESC ID, Lisbon, Portugal
来源
TOWARDS TRUSTWORTHY ELECTIONS: NEW DIRECTIONS IN ELECTRONIC VOTING | 2010年 / 6000卷
关键词
Remote voting; Internet voting; vote manipulation; uncontrolled voting platform; insecure voting platform; SCHEME;
D O I
暂无
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
One of the major problems that prevents the spread of elections with the possibility of remote voting over electronic networks, also called Internet Voting, is the use of unreliable client platforms, such as the voter's computer and the Internet infrastructure connecting it to the election server. A computer connected to the Internet is exposed to viruses, worms, Trojans, spyware, malware and other threats that can compromise the election's integrity. For instance, it is possible to write a virus that changes the voter's vote to a predetermined vote on election's day. Another possible attack is the creation of a fake election web site where the voter uses a malicious vote program on the web site that manipulates the voter's vote (phishing/pharming attack). Such attacks may not disturb the election protocol, therefore can remain undetected in the eyes of the election auditors. We propose the use of Code Voting to overcome insecurity of the client platform. Code Voting consists in creating a secure communication channel to communicate the voter's vote between the voter and a trusted component attached to the voter's computer. Consequently, no one controlling the voter's computer can change the his/her's vote. The trusted component can then process the vote according to a cryptographic voting protocol to enable cryptographic verification at the server's side.
引用
收藏
页码:310 / 329
页数:20
相关论文
共 40 条
  • [1] [Anonymous], 1993, P WORKSH THEOR APPL
  • [2] [Anonymous], 2007, INT VOT EST
  • [3] [Anonymous], 1992, LNCS
  • [4] [Anonymous], 1997, LNCS
  • [5] [Anonymous], 1987, Ph.D. thesis
  • [6] [Anonymous], 1997, Security Protocols Workshop
  • [7] [Anonymous], 2004, CCS 2004
  • [8] *CAL INT TASK FORC, 2000, REP FEAS INT VOT
  • [9] *CERT, 2007, VULN REM STAT
  • [10] CHAUM D, 2001, Patent No. 0155940