1. An Architecture For Electronic Voting Master Thesis Presentation Clifford Allen McCullough Department of Computer Science University of Colorado at Colorado Springs October ??, 2012

2. Outline The Need for an E-Voting System US Voluntary Voting System Guidelines Existing Solutions Proposed Architecture A Demonstration System Performance Comparisons Lessons Learned Future Work Summary 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough2

3. I. The Need for an E-Voting System Business Board of Directors Proxy votes US citizens overseas US military overseas 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough3

4. II. US Voluntary Voting System Guidelines (VVSG) Security Accuracy Error Recovery Integrity Vote Tabulation Casting a Ballot Accessibility Independent Verification System 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough4

5. III. Existing Solutions Commercial web-based voting systems are available Secure Electronic Registration and Voting Experiment (SERVE) Security Peer Review Group (SPRG) 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough5

6. IV. Proposed Architecture Design Requirements General Schema The System Architecture Paillier Cryptography 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough6

7. Design Requirements VVSG Information Assurance general rules ◦ Minimize the attach surface ◦ Mitigate the vulnerabilities 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough7

8. General Schema Should not be centralized Greatest vulnerability are from insider attacks Denial of service Keep control of the ballot Publish the web application 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough8

9. The System Architecture Voting-Server Voter Authentication Issue Presentation Verify the Ballot Casting the Ballot Mutual Authentication 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough9

10. System Diagram 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough10

11. Paillier Cryptography Exponential Homomorphic Generalized Paillier 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough11

12. V. A Demonstration System A 32-bit demonstration and development system a.k.a ESXi A 64-bit demonstration system a.k.a UCCS 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough12

13. 32-bit Development System 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough13

14. 64-bit Demonstration System 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough14

15. VI. Performance Comparisons Cryptographic Methods Cryptographic Key Generation Block Paillier vs. Generalized Paillier Ballot Casting 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough15

16. VII. Lessons Learned Freeware Internet Forums Using Multiple Programing Languages 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough16

17. VIII. Future Work Redundancy Secret Share Encryption and Decryption Error Handling and Logging Ballot Generation Ballot and Multi-lingual Database Quorum Login 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough17

18. IX. Summary Developing an Election Assistance Commission compliant voting system is a significant undertaking SERVE objective too much too soon Much future work available The demonstration system is a proof of concept 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough18

19. Demonstration Generate and load a key Initialize services Vote Collect the tally Decrypt the tally 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough19

20. References MotionVoter. (2011). Retrieved March 6, 2012, from http://www.motionvoter.com/ Cardellini, V., Casalicchio, E., Colajanni, M., & Yu, P. S. (2002). The State of the Art in Locally Distributed Web-Server Systems. ACM Computing Surveys, Vol 34, No 2, 263-311. Damgard, I. B., & Jurik, M. J. (December 2000). A Generalisation, a Simplification and some Applications of Paillier's Probabilstic Public-Key System. Basic Research in Computer Science, RS-00-45. Defense, D. o. (2007). Expanding the Use of Electronic Voting Technology for UOCAVA Citizens. Department of Defense. EAC. (2010). Election Assistance Commission. Retrieved February 29, 2012, from http://www.eac.gov/ EAC Voting System Testing and Certification Division. (2011). A Survey of Internet Voting. Washington, DC 20005. EAC VVSG Vol I. (2010). Voluntary Voting System Guidelines Volume I. Retrieved August 24, 2012, from United States Election Assistance Commission: http://www.eac.gov/testing_and_certification/voluntary_voting_system_guidelines.aspx EAC VVSG Vol II. (2010). Voluntary System Guidelines Volume II. Retrieved August 24, 2012, from United States Election Assistance Commission: http://www.eac.gov/testing_and_certification/voluntary_voting_system_guidelines.aspx Jefferson, D. D., Rubin, D. A., Simons, D. B., & Wagner, D. D. (2004). A Security Analysis of the Secure Electronic Registration and Voting Experiment (SERVE). Paillier, P. (1999). Public-Key Cryptosystems Based on Composite Degree Residuosity Clases. Advances in Cryptology - Eurocrypt '99, pp. 223-238. Shamir, A. (November, 1979). How to Share a Secret. Communications of the ACM, 612-613. Vote-Now. (n.d.). Retrieved March 6, 2012, from https://secure.vote-now.com/ 10/12/2012An Architecture for Electronic Voting by Clifford Allen McCullough20