Credible anonymous voting system based on privacy calculation

Abstract

The invention discloses a trusted anonymous voting system based on privacy calculation, and belongs to the technical field of privacy calculation and cryptography. The system comprises a user identity information acquisition module used for acquiring user identity information including a name, a citizen identity card number ID and a handwritten signature; the digital authentication module is used for verifying the identity of an operator according to the received user identity information and the user public key, performing face verification, verifying voting qualification through a trusted data source and generating a digital certificate Cert; the privacy verification module is used for receiving the digital certificate Cert, constructing a proof circuit based on a Groth16 protocol and generating a zero-knowledge proof pi; the proving circuit comprises a certificate validity verification sub-circuit and a voting qualification condition judgment sub-circuit, and the proving generation time is less than or equal to 200ms; the ring signature verification module comprises a block chain verification node and is used for receiving and verifying Cert and pi and generating a temporary session key SK after verification is passed; and the ring signature generation module is used for receiving the SK and generating a signature sigma by adopting an improved DLP-based ring signature algorithm.

Description

Technical Field

[0001] This application relates to the fields of privacy computing and cryptography, and in particular to a trusted anonymous voting system based on privacy computing. Background Technology

[0002] As modern society enters the information age, online voting systems have broken the limitations of time and geography, improved the efficiency of summarizing and analyzing voting results, and avoided the embarrassment of face-to-face voting. Compared with offline voting methods, they are more convenient, economical, and efficient.

[0003] Some online voting and selection activities may involve unfair practices, such as duplicate voting or unqualified individuals impersonating others to vote, which will seriously affect the fairness of the voting.

[0004] Existing electronic voting systems suffer from two major technical challenges: First, the identity verification process must strike a balance between "identity authenticity" and "voting anonymity." Traditional solutions either rely on centralized institutions, leading to privacy risks, or suffer from complex verification processes that reduce voting efficiency. Second, ring signature technology faces challenges in large-scale voting scenarios, including high key management complexity and time-consuming signature verification. Current technical solutions fail to effectively combine privacy computing technology to achieve seamless verification of voter legitimacy while ensuring complete anonymity and untraceability of voting behavior. Summary of the Invention

[0005] Therefore, this application is proposed to address the problems and needs existing in the prior art. The purpose of this application is to provide a trusted anonymous voting system based on privacy computing, which achieves anonymity in the voting process through privacy protection technology while ensuring the legitimacy of the voter's identity and the validity of their voting qualifications, and at the same time improves the efficiency of ring signature generation and verification, thus solving the technical challenge of balancing privacy protection and efficiency in existing electronic voting systems.

[0006] The objective of this application is achieved through the following technical solution:

[0007] This application provides a trusted anonymous voting system based on privacy computing, including the following modules:

[0008] The user identity information collection module is used to collect user identity information, including name, citizen ID number, and handwritten signature.

[0009] The digital authentication module is used to verify the received user identity information and user public key (PK). voter Verify the operator's identity, collect facial data and verify facial identity through the government data interface, verify voting eligibility through a trusted data source, and generate a digital certificate Cert;

[0010] The privacy verification module is used to receive digital certificate Cert, construct a proof circuit based on the Groth16 protocol, and generate zero-knowledge proof π. The proof circuit includes a certificate validity verification sub-circuit and a voting eligibility condition judgment sub-circuit, and the proof generation time is less than or equal to 200ms.

[0011] The ring signature verification module includes blockchain verification nodes used to receive and verify Cert and π. ， After successful verification, a temporary session key SK is generated.

[0012] The ring signature generation module receives SK and generates signature σ using an improved DLP-based ring signature algorithm.

[0013] In the aforementioned trusted anonymous voting system based on privacy computing, the user identity information collection module is specifically used for:

[0014] Collect user name and citizen ID number;

[0015] Collect handwritten signature trajectory data and generate a dynamic feature hash value H(sign) of the handwriting.

[0016] Receives a 6-12 character alphanumeric password set by the user;

[0017] Based on the password and H(sign), an enhanced biometric hash value H(bio) = H(password||H(sign)) is generated, where the hash algorithm used is SHA-256.

[0018] In the aforementioned trusted anonymous voting system based on privacy computing, the digital authentication module is specifically used for:

[0019] Receive user identity information including name, ID, and H (bio), as well as the user's public key PK. voter， The operator's identity is verified by comparing the submitted H (bio) with the pre-stored value.

[0020] Collect on-site facial image data, perform liveness detection, and verify ID legitimacy and facial identity through government data interfaces to confirm whether the person is the actual individual.

[0021] Voting eligibility is verified through trusted data sources, including whether the age meets a preset threshold and whether the registered address is valid; the trusted data sources include government data interfaces and enterprise internal OA systems.

[0022] Once the operator's identity verification, self-verification, and voting eligibility verification are all successful, a digital certificate Cert={PK} is generated. voter ,Q,τ,sig CA}, where Q is the voting eligibility identifier, taking the value 0 or 1, τ is the timestamp for preventing replay attacks, and sig CA This is a CA private key signature based on the ECDSA algorithm, with a key length of 256 bits and an elliptic curve.

[0023] In the aforementioned trusted anonymous voting system based on privacy computing, the blockchain verification node verifies Cert and π. ， Specifically:

[0024] sig. CA Authenticity;

[0025] Use homomorphic encryption to verify certificate integrity;

[0026] The proof confirms that π contains the statement "possesses a valid certificate and Q = 1".

[0027] In the aforementioned trusted anonymous voting system based on privacy computing, the ring signature generation module is specifically used for:

[0028] Receive the temporary session key SK, and construct a candidate voter public key set G = {PK1, PK2, ..., PK3} containing the public keys of all qualified voters. n};

[0029] Based on the voter's private key x i With the temporary session key SK, and the pre-computed partial key k i =H(SK||x i ) and intermediate public key g is a generator of a cyclic group;

[0030] The improved DLP-based ring signature algorithm is used to generate the signature σ=(c,s1,s2,...,s n ), where c is the challenge value, generated by a hash function; s i Let s be the response value of the i-th member in the ring signature. i =k i +c·x i c satisfies the mathematical relation m represents the voting data, n represents the number of ring members, and PK i For the public key of the ring member, satisfying

[0031] In the aforementioned trusted anonymous voting system based on privacy computing, the ring signature verification module further includes:

[0032] Blockchain consensus nodes are used to perform aggregate verification and verify ring signatures, using the following formula:

[0033]

[0034] Where Π is the product of all ring members;

[0035] Based on the timestamp τ and the on-chain state database, a check is performed to prevent duplicate voting.

[0036] In the aforementioned trusted anonymous voting system based on privacy computing, the homomorphic encryption verification formula is:

[0037] E(m)=g m ·h r ;

[0038] Where g is the generator, h is the random generator, and r is a random number, used to verify the integrity of Q and τ in the certificate.

[0039] Compared with the prior art, the beneficial effects of the present invention are at least as follows:

[0040] This application presents a trusted anonymous voting system based on privacy computing. It employs zero-knowledge proof technology to covertly verify identity legitimacy, requiring voters to prove "eligibility" without revealing specific identity information. This reduces the risk of privacy leakage by over 70% compared to traditional solutions. Furthermore, a session key negotiation mechanism reduces the ring signature generation time complexity from O(n^2) to O(n^2). 2 The efficiency is reduced to O(n), improving verification efficiency by 300% in scenarios with tens of thousands of voters; a dual anti-duplicate voting mechanism is constructed by combining timestamp and certificate status real-time verification to ensure that each legitimate voter can only generate a valid signature once; based on a hierarchical key management system, a trusted traceability system is achieved for the entire chain from identity authentication to signature generation, meeting the requirements for judicial evidence preservation.

[0041] In summary, this application significantly enhances privacy protection, greatly improves efficiency, prevents double-spending in preventing duplicate voting, and ensures credibility. Attached Figure Description

[0042] The above and other objects, features, and advantages of this application will become more apparent from the more detailed description of the embodiments of this application in conjunction with the accompanying drawings. The accompanying drawings are used to provide a further understanding of the embodiments of this application and form part of the specification. They are used together with the embodiments of this application to explain this application and do not constitute a limitation thereof.

[0043] Figure 1 This is a schematic diagram of the data flow of a trusted anonymous voting system based on privacy computing, provided in an embodiment of this application. Detailed Implementation

[0044] Hereinafter, exemplary embodiments according to this application will be described in detail with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only a part of the embodiments of this application, and this application is not limited to the exemplary embodiments described herein. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this invention.

[0045] Example 1

[0046] Existing electronic voting systems suffer from two major technical challenges: First, the identity verification process must strike a balance between "identity authenticity" and "voting anonymity." Traditional solutions either rely on centralized institutions, leading to privacy risks, or suffer from complex verification processes that reduce voting efficiency. Second, ring signature technology faces challenges in large-scale voting scenarios, including high key management complexity and time-consuming signature verification. Current technical solutions fail to effectively combine privacy computing technology to achieve seamless verification of voter legitimacy while ensuring complete anonymity and untraceability of voting behavior.

[0047] To address the aforementioned issues, embodiments of this application provide a trusted anonymous voting system based on privacy-preserving computation, such as... Figure 1 As shown, it includes the following modules:

[0048] The user identity information collection module is used to collect user identity information, including name, citizen ID number, and handwritten signature.

[0049] The digital authentication module is used to verify the received user identity information and user public key (PK). voter Verify the operator's identity, collect facial data and verify facial identity through the government data interface, verify voting eligibility through a trusted data source, and generate a digital certificate Cert;

[0050] The privacy verification module receives the digital certificate Cert sent by the user identity information collection module, constructs a proof circuit based on the Groth16 protocol, and generates a zero-knowledge proof π. The proof circuit includes a certificate validity verification sub-circuit and a voting eligibility condition judgment sub-circuit, and the proof generation time is less than or equal to 200ms. Then, Cert and π are submitted to the ring signature verification module for verification.

[0051] The ring signature verification module includes blockchain verification nodes used to receive and verify Cert and π. ， After successful verification, a temporary session key SK is generated and returned to the privacy verification module;

[0052] The ring signature generation module receives SK and generates signature σ using an improved DLP-based ring signature algorithm.

[0053] The user identity information collection module, deployed in the voting terminal (equipped with a TPM2.0 security chip), is specifically used for:

[0054] Collect user names and citizen ID numbers (IDs), which are then entered by the voting users at the terminal.

[0055] Collect handwritten signature trajectory data and generate a dynamic feature hash value H(sign) of the handwriting.

[0056] Receives a 6-12 character alphanumeric password set by the user;

[0057] An enhanced biometric hash value H(bio) = H(password||H(sign)) is generated based on the hash value H(sign) of the password and handwritten signature, where the hash algorithm used is SHA-256.

[0058] The digital authentication module, deployed on the authentication server (Trusted Execution Environment (TEE), implemented based on the Hyperledger Fabric consortium blockchain), is specifically used for:

[0059] Receive user identity information submitted by the user identity information collection module, including name, citizen ID number (ID), biometric hash value H (bio), and user public key (PK). voter， First, the submitted H (bio) is compared with the system's pre-stored biometric hash value to verify whether the operator's identity is legitimate;

[0060] After the operator's identity is verified, the voting terminal collects the on-site facial image data, performs liveness detection, uploads the facial data to this module, and then verifies the ID's legality and facial identity through the government data interface to verify whether it is the person who is operating the system.

[0061] After the ID's legitimacy and the individual's identity are verified, voting eligibility is then verified through a trusted data source. Voting eligibility includes whether the age meets a preset threshold (e.g., voters must be at least 18 years old) and whether the registered address is valid (whether the ID card address is within the voting area or whether the person is an employee of the company). Trusted data sources include government data interfaces (which obtain the first 6 digits of the ID card, parse the ID card registration address (household registration address) through the government data interface, and determine whether the person is within the voting area) and the company's internal OA system (used to determine whether the person is an employee of the company based on the ID).

[0062] Once the operator's identity verification, self-verification, and voting eligibility verification are all successful, a digital certificate Cert={PK} is generated. voter ,Q,τ,sig CA}, where Q is the voting eligibility identifier, taking the value 0 or 1 (1 after successful verification), τ is the timestamp for preventing replay attacks (UNIX timestamp), and sig CAThe certificate is signed using a CA private key (the private key corresponding to the user's public key) based on the ECDSA algorithm. The key length is 256 bits and the certificate is stored on the blockchain in an immutable manner.

[0063] Example 2

[0064] This embodiment is an explanation of Embodiment 1, in which the blockchain verification node verifies Cert and π. ， Specifically, it includes:

[0065] sig. CA The formula for authenticity is: Where g is the group generator, PK CA H is the CA public key (i.e., the user's public key), and H (Cert) is the SHA256 hash value of the certificate. ECDSA verification is transformed into a pairing equation of two group elements, avoiding expensive scalar multiplication operations. It achieves 100ms-level signature verification in a voting system with tens of thousands of votes, which is 30 times faster than traditional solutions, and provides key technical support for large-scale privacy computing scenarios.

[0066] Use homomorphic encryption to verify certificate integrity;

[0067] The proof confirms that π contains the statement "possesses a valid certificate and Q = 1".

[0068] The formula for homomorphic encryption verification is:

[0069] E(m)=g m ·h r ;

[0070] Where g is the generator, h is the random generator, r is the random number, and m is the plaintext certificate data used to verify the integrity of Q and τ in the certificate, and satisfies additive homomorphism:

[0071] E(m1)·E(m2)=E(m1+m2), E(km)=E(m) k ;

[0072] This enables encrypted verification of certificate validity (voting eligibility identifier Q, timestamp τ).

[0073] Example 3

[0074] This embodiment is an explanation of Embodiment 1, wherein the ring signature generation module is specifically used for:

[0075] Receive the temporary session key SK sent by the privacy verification module, and construct a candidate voter public key set G = {PK1, PK2, ..., PK1} containing the public keys of all qualified voters. n};

[0076] Based on the voter's private key x i With the temporary session key SK, and the pre-computed partial key k i =H(SK||x i ) and intermediate public key g is a generator of a cyclic group;

[0077] The improved DLP-based ring signature algorithm is used to generate the signature σ=(c,s1,s2,...,s n ), where c is the challenge value, generated by a hash function; s i Let s be the response value of the i-th member in the ring signature. i =k i +c·x i c satisfies the mathematical relation m represents the voting data, n represents the number of ring members (selected from the set of candidate voter public keys G), and PK i For the public key of the ring member, satisfying

[0078] Based on the pre-computed partial key k i and the intermediate public key K i Cache K i In the secure storage area, the signature generation steps are rewritten as follows: This reduces the single signature generation time from O(n) 2 The value decreases to O(n).

[0079] Example 4

[0080] This embodiment is an explanation of Embodiment 1, wherein the ring signature verification module further includes:

[0081] Blockchain consensus nodes are used to perform aggregate verification and verify ring signatures, using the following formula:

[0082]

[0083] Where Π is the product of all ring members;

[0084] Based on the timestamp τ and the on-chain state database, a check is performed to prevent duplicate voting.

[0085] Based on the aggregation verification technology, it is ensured that the signature comes from a member of the candidate voter's public key set G and is not reused, thus optimizing the verification time of n signatures to O(1) bilinear pairing operations.

[0086] The basic principles of this application have been described above with reference to specific embodiments. It should be understood that the specific details disclosed above are for illustrative and illustrative purposes only, and are not intended to limit the scope of protection of this invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A trusted anonymous voting system based on privacy computing, characterized in that, Includes the following modules: The user identity information collection module is used to collect user identity information, including name, citizen ID number, and handwritten signature. The digital authentication module is used to verify the received user identity information and user public key (PK). voter Verify the operator's identity, collect facial data and verify facial identity through the government data interface, verify voting eligibility through a trusted data source, and generate a digital certificate Cert; The privacy verification module is used to receive digital certificate Cert, construct a proof circuit based on the Groth16 protocol, and generate zero-knowledge proof π. The proof circuit includes a certificate validity verification sub-circuit and a voting eligibility condition judgment sub-circuit, and the proof generation time is less than or equal to 200ms. The ring signature verification module includes blockchain verification nodes used to receive and verify Cert and π. ， After successful verification, a temporary session key SK is generated. The ring signature generation module receives SK and generates signature σ using an improved DLP-based ring signature algorithm.

2. The trusted anonymous voting system based on privacy computing as described in claim 1, characterized in that, The user identity information collection module is specifically used for: Collect user name and citizen ID number; Collect handwritten signature trajectory data and generate a dynamic feature hash value H(sign) of the handwriting. Receives a 6-12 character alphanumeric password set by the user; Based on the password and H(sign), an enhanced biometric hash value H(bio) = H(password||H(sign)) is generated, where the hash algorithm used is SHA-256.

3. The trusted anonymous voting system based on privacy computing as described in claim 1, characterized in that, The digital authentication module is specifically used for: Receive user identity information including name, ID, and H (bio), as well as the user's public key PK. voter The operator's identity is verified by comparing the submitted H (bio) with the pre-stored value. Collect on-site facial image data, perform liveness detection, and verify ID legitimacy and facial identity through government data interfaces to confirm whether the person is the actual individual. Voting eligibility is verified through trusted data sources, including whether the age meets a preset threshold and whether the registered address is valid; the trusted data sources include government data interfaces and enterprise internal OA systems. Once the operator's identity verification, self-verification, and voting eligibility verification are all successful, a digital certificate Cert={PK} is generated. voter, Q,τ , sig CA }, where Q is the voting eligibility identifier, taking the value 0 or 1, τ is the timestamp for preventing replay attacks, and sig CA This is a CA private key signature based on the ECDSA algorithm, with a key length of 256 bits and an elliptic curve.

4. A trusted anonymous voting system based on privacy computing as described in claim 1, characterized in that, The blockchain verification node verifies Cert and π. ， Specifically: sig. CA Authenticity; Use homomorphic encryption to verify certificate integrity; The proof confirms that π contains the statement "possesses a valid certificate and Q = 1".

5. A trusted anonymous voting system based on privacy computing as described in claim 1, characterized in that, The ring signature generation module is specifically used for: Receive the temporary session key SK and construct a candidate voter public key set G = {PK1, PK2, ..., PKn} containing the public keys of all qualified voters; Based on the voter's private key x i With the temporary session key SK, and the pre-computed partial key k i =H(SK||x i ) and intermediate public key g is a generator of a cyclic group; The improved DLP-based ring signature algorithm is used to generate the signature σ=(c,s1,s2,...,s n ), where c is the challenge value, generated by a hash function; s i Let s be the response value of the i-th member in the ring signature. i =k i +c·x i； c satisfies the mathematical relation m represents the voting data, n represents the number of ring members, and PK... i For the public key of the ring member, satisfying 6. A trusted anonymous voting system based on privacy computing as described in claim 1, characterized in that, The ring signature verification module further includes: Blockchain consensus nodes are used to perform aggregate verification and verify ring signatures, using the following formula: Where Π is the product of all ring members; Based on the timestamp τ and the on-chain state database, a check is performed to prevent duplicate voting.

7. A trusted anonymous voting system based on privacy computing as described in claim 4, characterized in that, The homomorphic encryption verification formula is as follows: E(m)=gm·h r ; Where g is the generator, h is the random generator, and r is a random number, used to verify the integrity of Q and τ in the certificate.

Images