Paper 2013/863

Formal Treatment of Distributed Trust in Electronic Voting

Stephan Neumann and Melanie Volkamer

Abstract

Electronic voting systems are among the most security critical distributed systems. Different trust concepts are implemented to mitigate the risk of conspiracies endangering security properties. These concepts render systems often very complex and end users no longer recognize whom they need to trust. Correspondingly, specific trust considerations are necessary to support users. Recently, resilience terms have been proposed in order to express, which entities can violate the addressed security properties in particular by illegal collaborations. However, previous works derived these resilience terms manually. Thus, successful attacks can be missed. Based on this approach, we propose a framework to formally and automatically derive these terms. Our framework comprises a knowledge calculus, which allows us to model knowledge and reason about knowledge of collaborating election entities. The introduced framework is applied to deduce previously manually derived resilience terms of three remote electronic voting systems, namely Polyas, Helios and the Estonian voting system. Thereby, we were able to discover mistakes in previous derivations.

Note: Copyright details have been checked with the editors of the conference.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Published elsewhere. The Seventh International Conference on Internet Monitoring and Protection (ICIMP 2012)
Contact author(s)
stephan neumann @ cased de
History
2013-12-29: received
Short URL
https://ia.cr/2013/863
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2013/863,
      author = {Stephan Neumann and Melanie Volkamer},
      title = {Formal Treatment of Distributed Trust in Electronic Voting},
      howpublished = {Cryptology ePrint Archive, Paper 2013/863},
      year = {2013},
      note = {\url{https://eprint.iacr.org/2013/863}},
      url = {https://eprint.iacr.org/2013/863}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.