A privacy-protected linkable mobile network voting method

Abstract

This invention discloses a privacy-protecting, linkable mobile network voting method, relating to the field of data communication security technology. The method includes: setting security parameters and publishing public parameters based on these parameters; a management center generating certificates for users and organizations; the organization initiating a network vote, setting ballot information, and users selecting voting options based on the ballot information, randomly forming a user group, constructing a public key set based on the public keys of all users in the user group, and each user generating a valid ballot using their corresponding private key and the public key set after selecting a voting option; after receiving all ballots, the organization verifying the validity and relevance of the ballots. This invention can ensure the confidentiality of voting content, protect the privacy of voting users' identities, and prevent the abuse of voting power in network voting.

Description

Technical Field

[0001] This invention relates to the field of data communication security technology, and in particular to a privacy-protecting linkable mobile network voting method. Background Technology

[0002] Compared to traditional voting methods, mobile network voting is more flexible and convenient, reducing time and space limitations. It mainly involves two technologies: The first is ring signature technology. Ring signatures are currently the best known method for both authenticating the signer and hiding their true identity (anonymity). However, using this technology for online voting has a significant drawback: it cannot ensure message confidentiality, meaning anyone can see the content of the signed message. The second is signcryption technology. Signcryption combines signing and encryption functions, offering better efficiency compared to the traditional method of signing first and then encrypting. However, existing ring signcryption technologies have two drawbacks: 1. Some technologies do not require pairing operations, but these technologies cannot detect the abuse of signcryption power. That is, for the same event, the same signer can generate multiple different ciphertexts, and the verifier cannot identify this behavior. 2. Some technologies can detect the abuse of signcryption power. That is, for the same event, when a signer generates multiple ciphertexts, the verifier can identify this behavior. However, these technologies require pairing operations, greatly increasing computational costs and making them unsuitable for computationally limited devices (such as mobile communication devices). Therefore, there is currently no algorithm that can be applied to mobile networks to achieve both voter anonymity and confidentiality of voting content, while also identifying potential abuse of voting power by voters. Summary of the Invention

[0003] The purpose of this invention is to provide a privacy-protecting, linkable mobile network voting method that can ensure the confidentiality of voting content, protect the privacy of voting users' identities, and prevent the abuse of voting rights in online voting.

[0004] To achieve the above objectives, the present invention provides the following solution:

[0005] A privacy-preserving, linkable mobile network voting method, comprising:

[0006] Set security parameters, and publish public parameters based on the security parameters;

[0007] The management center generates certificates for both users and organizations;

[0008] The organization initiates online voting, sets ballot information, and users select voting options based on the ballot information, randomly forming a user group. A public key set is constructed based on the public keys of all users in the user group. After selecting a voting option, each user generates a valid ballot using the corresponding private key and the public key set.

[0009] Once the organization has received all the ballots, it will verify their validity and relevance.

[0010] Optionally, the step of setting security parameters and publishing public parameters based on the security parameters specifically includes:

[0011] Set the security parameter v;

[0012] Select an elliptic curve addition group and addition group A generator ;

[0013] Three collision-stable hash functions are selected as follows: , , Among them, Z q * Indicates a number less than a prime number. The set of positive integers, ; Indicates the length of the binary code for the option;

[0014] Publish public parameters .

[0015] Optionally, the management center generates certificates for users and organizations respectively, specifically including:

[0016] Set the management center as MC and the user as and organizations ;

[0017] user Randomly select private key Calculate the user's public key , user public key Send to the Management Center (MC), which will then process the request for the user. Generate a certificate;

[0018] Organization Randomly select private key Computing agency public key , will the organization's public key Send to the Management Center (MC), which will act as the organizational unit. Generate a certificate.

[0019] Optionally, the ballot information includes: the event name, the event organizer, the start and end times of voting, and information on the voting options.

[0020] Optionally, the process of constructing the public key set is as follows:

[0021] By organization Initiate an online poll and set the relevant content of the online poll to E;

[0022] From the initial user Select voting option and with the original user Other A group consists of legitimate users. The public key set of the group is .

[0023] Optionally, the process of constructing the ballot is as follows:

[0024] calculate ;in, The first hash function; E The relevant content of the online voting; For initial users The corresponding private key;

[0025] Random selection Among them, Z q * Indicates a number less than a prime number. The set of positive integers; , and All are random integers;

[0026] calculate , ;in, For addition group A generator; For the user's public key;

[0027] calculate , ;in, For the organization's public key;

[0028] calculate ; The second hash function;

[0029] calculate , ;

[0030] calculate ;in, It is the third hash function; It is a binary number of length l;

[0031] Output the set of votes .

[0032] Optionally, the validity verification process is as follows:

[0033] calculate , ;

[0034] calculate , ;

[0035] calculate ;

[0036] Judgment test equation The equation is checked to determine whether the vote is valid. If the equation is valid, the vote is considered valid. If the equation is invalid, the vote is considered invalid.

[0037] Optionally, the verification process for the correlation is as follows:

[0038] For two different valid votes: and Organization Verification equation If the conditions are met, the two votes are considered to have been generated by the same user and will be treated as invalid votes. If the conditions are not met, the two votes are considered to have been generated by different users and will both be valid votes.

[0039] According to specific embodiments provided by the present invention, the present invention discloses the following technical effects:

[0040] This invention discloses a privacy-preserving, linkable mobile network voting method. The method includes setting security parameters and publishing public parameters based on these parameters; a management center generating certificates for users and organizations; the organization initiating a network vote, setting ballot information, with each voter randomly selecting multiple other users to form a group, the public keys of all members in the group forming a public key set; each voter selecting a voting option and generating a valid ballot using their private key and public key set; and the organization verifying the validity and relevance of all ballots received. This invention ensures the confidentiality of voting content, protects the privacy of voting users, and prevents the abuse of voting power in online voting. Attached Figure Description

[0041] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0042] Figure 1 This is a schematic flowchart illustrating the privacy-protecting linkable mobile network voting method of the present invention.

[0043] Figure 2 This is a logical diagram of the voting algorithm in this embodiment. Detailed Implementation

[0044] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0045] The purpose of this invention is to provide a privacy-protecting, linkable mobile network voting method that can ensure the confidentiality of voting content, protect the privacy of voting users' identities, and prevent the abuse of voting rights in online voting.

[0046] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0047] like Figures 1-2 As shown, the present invention provides a privacy-protecting, linkable mobile network voting method, comprising:

[0048] Step 100: Set security parameters and publish public parameters based on the security parameters;

[0049] Step 200: The management center generates certificates for users and organizations respectively;

[0050] Step 300: The organization initiates an online vote, sets the ballot information, and the user selects a voting option based on the ballot information. The user also randomly selects multiple other users to form a user group. A public key set is constructed based on the public keys of all users in the user group. After selecting a voting option, each user generates a valid ballot using their private key and the public key set.

[0051] Step 400: Once the organization has received all the ballots, it verifies their validity and relevance.

[0052] As a specific implementation method, the processing procedure for each of the above steps is provided:

[0053] Settings: Enter a security parameter Management Center Perform the following steps:

[0054] 1) Select an elliptic curve addition group ,in yes One of the generators.

[0055] 2) Select three collision-stable hash functions, namely: , , .

[0056] 3) Publish public parameters .

[0057] Registration: Management Center Generate certificates for users and organizations.

[0058] 1) User Random selection ,calculate ,Will Send to MC, MC is Generate a certificate;

[0059] 2) Institution Random selection ,calculate ,Will Send to MC, MC is Generate a certificate.

[0060] Ballot generation: A certain organization Initiating an online poll for an event: E includes relevant poll information such as the event name, organizer, poll start and end dates, and poll options. Real voters. Select the voting option they support. And select other A group is formed by a legitimate user and themselves. Its public key set is Then perform the following steps.

[0061] 1) Calculation .

[0062] 2) Random selection .

[0063] 3) Calculation , .

[0064] 4) Calculation , .

[0065] 5) Calculation .

[0066] 6) Calculation , .

[0067] 7) Calculation .

[0068] 8) Outputting ballots .

[0069] Vote verification: When the institution Received ballots Then, perform the following steps to verify the validity of the ballot.

[0070] 1) Calculation , .

[0071] 2) Calculation , .

[0072] 3) Calculation .

[0073] 4) Verify the equation If the equation is true, the vote is considered valid; otherwise, it is considered invalid.

[0074] In this embodiment, the actual voters need to be involved in the voting event. Generate a hash function value And generate a value using your private key. and then utilize and Generate a value Simultaneously utilize and Generate a value ,(Notice and There is a similar production method.

[0075] Furthermore, actual voters need to select a random number. And calculate two values. , Both values ​​are used in both hash functions. and In the calculation.

[0076] Therefore, this embodiment has the following beneficial effects: the specific content of the ballot is encrypted, ensuring its confidentiality. The real voter selects other legitimate users to form a group, using their private key and the public keys of other users to generate the ballot, thus ensuring the anonymity of their identity. That is, the organization can only determine that the ballot was generated by a member of the group, but cannot determine their specific identity. For two different ballots, the organization can determine whether they were generated by the same member. This embodiment does not use pairwise operations, resulting in lower computational overhead and making it suitable for computationally limited devices (such as mobile communication devices).

[0077] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0078] This document uses specific examples to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the core ideas of the present invention. Furthermore, those skilled in the art will recognize that, based on the ideas of the present invention, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A privacy-preserving, linkable mobile network voting method, characterized in that, include: Set security parameters, and publish public parameters based on the security parameters; The management center generates certificates for both users and organizations; The organization initiates online voting, sets ballot information, and users select voting options based on the ballot information, randomly forming a user group. A public key set is constructed based on the public keys of all users in the user group. After selecting a voting option, each user generates a valid ballot using the corresponding private key and the public key set. Once the organization has received all the ballots, it verifies their validity and relevance. The process of constructing the public key set is as follows: By organization Initiate an online poll and set the relevant content of the online poll to E; From the initial user Select voting option and with the original user Other A group consists of legitimate users. The public key set of the user group is ; l Indicates the length of the binary code for the option; The process of constructing the ballot is as follows: calculate ;in, The first hash function; E The relevant content of the online voting; For initial users The corresponding private key; Random selection Among them, Z q * Indicates a number less than a prime number. The set of positive integers; , and All are random integers; calculate , ;in, For addition group A generator; For the user's public key; calculate , ;in, For the organization's public key; calculate ; The second hash function; calculate , ; calculate ;in, It is the third hash function; It is a binary number of length l; Output the set of votes .

2. The privacy-protecting, linkable mobile network voting method according to claim 1, characterized in that, The setting of security parameters and the publication of public parameters based on the security parameters specifically include: Set the security parameter v; Select an elliptic curve addition group and addition group A generator ; Three collision-stable hash functions are selected as follows: , , Among them, Z q * Indicates a number less than a prime number. The set of positive integers, ; l Indicates the length of the binary code for the option; Publish public parameters .

3. The privacy-protecting, linkable mobile network voting method according to claim 1, characterized in that, The management center generates certificates for users and organizations, specifically including: Set the management center as MC and the user as and organizations ; user Randomly select private key Calculate the user's public key , user public key Send to the Management Center (MC), which will then process the request for the user. Generate a certificate; Organization Randomly select private key Computing agency public key , will the organization's public key Send to the Management Center (MC), which will act as the organizational unit. Generate a certificate.

4. The privacy-protecting, linkable mobile network voting method according to claim 1, characterized in that, The ballot information includes: the event name, the event organizer, the start and end dates of the voting, and information on the voting options.

5. The privacy-protecting, linkable mobile network voting method according to claim 1, characterized in that, The validity verification process is as follows: calculate , ; calculate , ; calculate ; Judgment test equation (mod If the equation is true, the vote is considered valid; otherwise, it is considered invalid.

6. The privacy-protecting, linkable mobile network voting method according to claim 5, characterized in that, The verification process for the correlation is as follows: For two different valid votes: and Organization Verification equation If the conditions are met, the two votes are considered to have been generated by the same user and will be treated as invalid votes. If the conditions are not met, the two votes are considered to have been generated by different users and will both be valid votes.

Images