Linkable mobile network voting method capable of protecting privacy

Abstract

The invention discloses a linkable mobile network voting method capable of protecting privacy, and relates to the technical field of data communication security. The method comprises the following steps: setting a safety parameter, and issuing a public parameter based on the safety parameter; the management center generates certificates for the user and the organization; the organizational mechanism initiates network voting and sets voting information, users select voting options according to the voting information and randomly form a user group, a public key set is constructed according to public keys of all the users in the user group, and after the voting options are selected by all the users, the voting options of all the users in the user group are selected by all the users; generating an effective vote by using the corresponding private key and the public key set; and after the organization mechanism receives all the ballots, the validity and relevance of the ballots are checked. According to the invention, in network voting, the confidentiality of voting contents can be ensured, the identity privacy of voting users can be ensured, and abuse of voting power can be prevented.

Description

Technical Field

[0001] The present invention relates to the technical field of data communication security, and in particular to a privacy-protecting linkable mobile network voting method. Background Art

[0002] Compared with traditional voting methods, mobile network voting is more flexible and convenient, and reduces the restrictions on time and space. It mainly involves two technologies: the first is ring signature technology. Ring signature is the best known method that can both authenticate the signer's identity and hide the signer's true identity (anonymity). However, if this technology is used for online voting, it has an obvious disadvantage: it cannot achieve the confidentiality of the message, that is, anyone can see the specific content of the signed message. The second is signcryption technology. Signcryption has the functions of signing and encryption. Compared with the traditional method of signing first and then encrypting, it has better efficiency advantages, but the existing ring signcryption technology has two disadvantages: 1. Some technologies do not require the use of pairing operations, but these technologies cannot identify the abuse of signcryption power, that is, for the same event, the same signer can generate multiple different ciphertexts, and the verifier cannot identify this behavior. 2. Some technologies can identify the abuse of signcryption power, that is, for the same event, when a signer generates multiple ciphertexts, the verifier can identify this behavior, but these technologies need to use pairing operations, which greatly increases the computing cost and is not suitable for computing-constrained devices (such as mobile communication devices). Therefore, there is currently no algorithm that can be applied in mobile networks to achieve voter anonymity and confidentiality of voting content while identifying possible abuse of voting rights by voters. Summary of the invention

[0003] The purpose of the present invention is to provide a privacy-protecting linkable mobile network voting method, which can ensure the confidentiality of voting content and the identity privacy of voting users in network voting, and can also prevent the abuse of voting rights.

[0004] To achieve the above object, the present invention provides the following solutions: A privacy-preserving, linkable mobile network voting method comprising: Setting security parameters and publishing public parameters based on the security parameters; The management center generates certificates for users and organizations respectively; The organization initiates online voting, sets ballot information, and users select voting options based on the ballot information, randomly form a user group, and construct a public key set based on the public keys of all users in the user group. After each user selects a voting option, he or she uses the corresponding private key and the public key set to generate a valid ballot; When the organization receives all the ballots, it checks their validity and relevance.

[0005] Optionally, the setting of security parameters and publishing of public parameters based on the security parameters specifically includes: Set security parameter v; Pick an elliptic curve Additive group , and the additive group A generator of ; Select three collision-stable hash functions, namely: , , ; Among them, Z q * Indicates less than a prime number The set of positive integers, ; Indicates the length of the binary encoding of the option; Publishing public parameters .

[0006] Optionally, the management center generates certificates for users and organizations respectively, specifically including: Set the management center to MC and the user to , and organizations as ; user Randomly select a private key , calculate the user's public key , the user's public key Send it to the management center MC, which will Generate a certificate; Organization Randomly select a private key , computing institution public key , the institution's public key Send it to the management center MC, which will be responsible for organizing the Generate a certificate.

[0007] Optionally, the ballot information includes: activity name, activity organizer, voting start and end time, and voting option information.

[0008] Optionally, the process of constructing the public key set is: By Organization Initiate an online voting, and set the relevant content of the online voting to E; By initial user Select voting option and with the exception of the initial user Other Legitimate users constitute a group , the public key set of the group is .

[0009] Optionally, the ballot is constructed as follows: calculate ;in, is the first hash function; E Voting for said network; For initial users The corresponding private key; Random Selection ; Among them, Z q * Indicates less than a prime number The set of positive integers; , and All are random integers; calculate , ;in, Additive Group A generator of ; is the user's public key; calculate , ;in, is the institution's public key; calculate ; is the second hash function; calculate , ; calculate ;in, is the third hash function; is a binary number of length l; Output ballot set .

[0010] Optionally, the validity verification process is: calculate , ; calculate , ; calculate ; Judgment test equation Is it true? If the equation is true, it is judged as a valid ballot. If the equation is not true, it is judged as an invalid ballot.

[0011] Optionally, the verification process of the association is: For two different valid ballots: and , Organizations Check Equality Is it true? If so, the two votes are deemed to be generated by the same user and both are treated as invalid. If not, the two votes are deemed to be generated by different users and are both valid.

[0012] According to the specific embodiments provided by the present invention, the present invention discloses the following technical effects: The present invention discloses a privacy-protecting linkable mobile network voting method, the method comprising setting security parameters, and publishing public parameters based on the security parameters; a management center generates certificates for users and organizations respectively; the organization initiates network voting, sets ballot information, each voter randomly selects multiple other users, and forms a group with these users, the public keys of all members in the group form a public key set, the voter selects a voting option, and then generates a valid ballot using his own private key and public key set; when the organization receives all ballots, the validity and relevance of the ballots are verified. The present invention can ensure the confidentiality of voting content and the identity privacy of voting users in network voting, and can also prevent the abuse of voting power. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0014] Figure 1 A flowchart of a privacy-protecting linkable mobile network voting method according to the present invention; Figure 2 This is a logical diagram of the voting algorithm in this embodiment. DETAILED DESCRIPTION

[0015] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0016] The purpose of the present invention is to provide a privacy-protecting linkable mobile network voting method, which can ensure the confidentiality of voting content and the identity privacy of voting users in network voting, and can also prevent the abuse of voting rights.

[0017] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0018] like Figure 1-Figure 2 As shown, the present invention provides a privacy-protecting linkable mobile network voting method, comprising: Step 100: Setting security parameters, and publishing public parameters based on the security parameters; Step 200: The management center generates certificates for the user and the organization respectively; Step 300: The organization initiates an online vote, sets ballot information, and the user selects a voting option based on the ballot information, and randomly selects multiple other users to form a user group with the user, and a public key set is constructed based on the public keys of all users in the user group. After selecting a voting option, each user uses his or her private key and the public key set to generate a valid ballot; Step 400: When the organization receives all the ballots, the validity and relevance of the ballots are checked.

[0019] As a specific implementation method, the processing process of the above steps is provided: Setup: Enter a security parameter , Management Center Perform the following steps: 1) Select an elliptic curve Additive group ,in yes A generator of .

[0020] 2) Select three collision-stable hash functions, namely: , , .

[0021] 3) Publishing public parameters .

[0022] Registration: Management Center Generate certificates for users and organizations.

[0023] 1) User Random Selection ,calculate ,Will Sent to MC, MC is Generate a certificate; 2) Institutions Random Selection ,calculate ,Will Sent to MC, MC is Generate a certificate.

[0024] Ballot generation: an organization Initiate an online vote for an event: E contains relevant content for voting: such as the event name, event organizer, voting start and end time, voting options, etc. Real voters Select the voting option they support , and select Other Legitimate users and yourself form a group , whose public key set is , then follow the steps below.

[0025] 1) Calculation .

[0026] 2) Random selection .

[0027] 3) Calculation , .

[0028] 4) Calculation , .

[0029] 5) Calculation .

[0030] 6) Calculation , .

[0031] 7) Calculation .

[0032] 8) Output votes .

[0033] Ballot Inspection: When the Agency Receive ballots Then, perform the following steps to verify that the ballot is valid.

[0034] 1) Calculation , .

[0035] 2) Calculation , .

[0036] 3) Calculation .

[0037] 4) Check the equation If the equation is true, it is considered a valid ballot; otherwise, it is considered an invalid ballot.

[0038] In this embodiment, the real voter needs to be the voting event Generate a Hash function value , and use your own private key to generate a value , and then use and , generates a value . At the same time, use and Generate a value ,(Notice and There is a similar production method).

[0039] Also, the real voter needs to choose a random number And calculate two values ​​to calculate , , and both values ​​are used in both hash functions and of calculation.

[0040] Therefore, this embodiment has the following beneficial effects: the specific content of the ballot is encrypted to ensure its confidentiality. The real voter selects other legitimate users to form a group with himself, and uses his private key and the public key of other users to generate a ballot, thereby ensuring the anonymity of his identity, that is, the organization can only determine that the ballot is generated by a member of the group, and cannot determine its specific identity. For two different ballots, the organization can determine whether they are generated by the same member. This embodiment does not use pairing operations, has lower computing overhead, and is suitable for computing-constrained devices (such as mobile communication devices).

[0041] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0042] This article uses specific examples to illustrate the principles and implementation methods of the present invention. The above examples are only used to help understand the core idea of ​​the present invention. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A privacy-protecting, linkable mobile network voting method, characterized in that: include: Setting security parameters and publishing public parameters based on the security parameters; The management center generates certificates for users and organizations respectively; The organization initiates online voting, sets ballot information, and users select voting options based on the ballot information, randomly form a user group, and construct a public key set based on the public keys of all users in the user group. After each user selects a voting option, he or she uses the corresponding private key and the public key set to generate a valid ballot; When the organization receives all the ballots, it will check the validity and relevance of the ballots; The construction process of the public key set is: By Organization Initiate an online voting, and set the relevant content of the online voting to E; By initial user Select voting option and with the exception of the initial user Other Legitimate users constitute a group , the public key set of the group is ; The ballot construction process is as follows: calculate ;in, is the first hash function; E Voting for said network; For initial users The corresponding private key; Random Selection ; Among them, Z q * Indicates less than a prime number The set of positive integers; , and All are random integers; calculate , ;in, Additive Group A generator of ; is the user's public key; calculate , ;in, is the institution's public key; calculate ; is the second hash function; calculate , ; calculate ;in, is the third hash function; is a binary number of length l; Output ballot set .

2. The privacy-protecting linkable mobile network voting method according to claim 1, characterized in that: The setting of security parameters and issuing of public parameters based on the security parameters specifically includes: Set security parameter v; Pick an elliptic curve Additive group , and the additive group A generator of ; Select three collision-stable hash functions, namely: , , ; Among them, Z q * Indicates less than a prime number The set of positive integers, ; Indicates the length of the binary encoding of the option; Publishing public parameters .

3. The privacy-protecting linkable mobile network voting method according to claim 1, characterized in that: The management center generates certificates for users and organizations respectively, including: Set the management center to MC and the user to , and organizations as ; user Randomly select a private key , calculate the user's public key , the user's public key Send it to the management center MC, which will Generate a certificate; Organization Randomly select a private key , computing institution public key , the institution's public key Send it to the management center MC, which will be responsible for organizing the Generate a certificate.

4. The privacy-protecting linkable mobile network voting method according to claim 1, characterized in that: The ballot information includes: activity name, activity organizer, voting start and end time, and voting option information.

5. The privacy-protecting linkable mobile network voting method according to claim 1, characterized in that: The validity verification process is as follows: calculate , ; calculate , ; calculate ; Judgment test equation Is it true? If the equation is true, it is judged as a valid ballot. If the equation is not true, it is judged as an invalid ballot.

6. The privacy-protecting linkable mobile network voting method according to claim 5, characterized in that: The verification process of the association is: For two different valid ballots: and , Organizations Check Equality Is it true? If so, the two votes are deemed to be generated by the same user and both are treated as invalid. If not, the two votes are deemed to be generated by different users and are both valid.

Images