VOTING SYSTEM FOR A VIRTUAL CONFERENCE

Description

[0001] The invention relates to a method for cryptographically secured voting on a request for a virtual conference. Furthermore, the invention relates to a voting management device, a request management device, a voting system comprising a voting management device and a request management device, and a system comprising a voting system and a plurality of telecommunications terminal devices for carrying out the method for cryptographically secured voting on a request for a virtual conference.

[0002] A vote is an instrument for the collective expression of will by a collegial body or group of people on a motion by casting a vote and serves the purpose of decision-making and resolution. Voting follows established rules, such as those found in a constitution, a law, bylaws, a partnership agreement, rules of procedure, a statutory instrument, a resolution of a meeting, or customary law.

[0003] During a meeting, i.e., a conference, of eligible voters, voting takes place, for example, through declarations of intent by the assembled eligible voters, such as a show of hands, standing, display of a ballot card, or a voice vote. The corresponding declarations of intent are then counted to determine a voting result based on majorities.

[0004] To simplify the counting of votes cast, conference voting systems are used, for example, in which each eligible voter present is provided with a device at their seat to enter their vote or declaration of voting.

[0005] All of the aforementioned voting methods have in common that they require the voting person to be physically present when casting their vote. However, these voting methods are not applicable in the case of a virtual conference where the voting persons are not present at a common meeting location.

[0006] US 2013 / 173356 A1 describes procedures, systems, and computer-readable media for conducting an election. It provides a method for ensuring the integrity of an electronic ballot. The method includes creating electronic ballots for voters based on votes received from voters; digitally signing the electronic ballots; storing the signed electronic ballots; retrieving the signed electronic ballots from storage; verifying the digital signatures on the retrieved electronic ballots; and presenting validation pages to voters derived from the retrieved electronic ballots, the validation pages including a user interface element for voters to confirm that the retrieved electronic ballots accurately reflect their vote.

[0007] The invention is therefore based on the objective of creating a method for voting on applications for virtual conferences.

[0008] The problem underlying the invention is solved by the features of the independent claims. Embodiments of the invention are specified in the dependent claims.

[0009] Embodiments include a method for cryptographically secured voting on a motion using a virtual conference voting system and a plurality of telecommunications terminal devices. The voting system comprises a central motion management device and a central voting management device. Each telecommunications terminal device is assigned to a voting participant in the virtual conference.

[0010] The procedure includes the voting management device: Receiving a plurality of voting requests from the application management device, wherein the plurality of voting requests comprises a voting request for each of the eligible participants, wherein the voting requests of the plurality of voting requests each comprise an identifier of the eligible participant to whom they are assigned, as well as a data record of a current version of the application on which a vote is to be taken.

[0011] Furthermore, the procedure for each of the voting requests received by the voting management device includes: Identifying a user account managed by the voting management device of the eligible participant to whom the voting request is assigned, using the identifier included in the voting request, wherein the user account includes a private cryptographic key assigned to the eligible participant; generating a unique code for the eligible participant to whom the voting request is assigned; sending a voting request including the generated unique code via a first communication channel to the telecommunications terminal device assigned to the eligible participant of the identified user account, using connection information of the telecommunications terminal device that includes the identified user account.Receiving a voting response to the sent voting request from the telecommunications terminal device via a second communication channel, wherein the voting response includes the sent individual code of the voting request, authentication information of the user of the telecommunications terminal device, and a voting declaration of the user of the telecommunications terminal device, wherein the first communication channel is a side channel separate from and / or separately secured from the second communication channel; checking the validity of the received code and the received authentication information, wherein the validity check includes comparing the received code for conformity with the sent individual code and comparing the received authentication information for conformity with authentication information of the eligible participant contained in the user account.Upon successful verification, signing a combination comprising the data set of the current version of the motion to be voted on, the identifier of the eligible voter, and the voting declaration of the user of the telecommunications terminal device, using the eligible voter's private cryptographic key; sending the signed combination to the motion management device to verify the signature of the combination using a public cryptographic key of the eligible voter, to store it together with the current version of the motion, and to count the voting result using the voting declarations included in the signed combination.

[0012] Implementation methods can offer the advantage of providing a procedure that ensures, for virtual conferences, that votes cast in a vote actually originate from the eligible participants of the virtual conference. A virtual conference is a meeting where participants do not meet in a physical location, but rather connect and exchange ideas virtually using communication tools such as conference calls. If a vote is to be taken on a motion during such a virtual conference, the difficulty arises that, due to the lack of physical presence, it is difficult to verify that a vote cast actually comes from the participant on whose behalf it is being cast.Implementation methods allow for the creation of a cryptographically secured link between the motion to be voted on, the voting decision regarding that motion, and the voter's identity using a signature. Two-factor authentication ensures that the voter is indeed the eligible participant to whom the vote is attributed. The first factor of this two-factor authentication is a unique code that verifies possession of a registered telecommunications device. Since the code is sent to the registered telecommunications device, possession of the device is a prerequisite for obtaining the unique code. Conversely, knowledge of the unique code proves possession of the corresponding registered telecommunications device.Furthermore, two-factor authentication includes, as a second factor, the authentication information of the user of the corresponding telecommunications device, which could be, for example, knowledge in the form of a PIN or password. This authentication information could also be biometric information or a characteristic such as a fingerprint or facial scan. The authentication information ensures that the person operating the telecommunications device is indeed the authorized voter. For example, the user accounts of the authorized participants on the voting management device each contain reference data for verifying the individual authentication information of each eligible voter.

[0013] Since the authentication of eligible voters takes place between the telecommunications device and the voting management system, the identifier of the eligible voter can be either a pseudonymized identifier or an identifier that includes the voter's real name. This allows for anonymous voting, where the voting data stored in the application management system does not reveal who voted how. Likewise, named voting is possible, where the stored voting data reveals who voted how.

[0014] The voting management system provides the application management device with all cast votes in the form of signed combinations. These signatures can be verified for validity using the public cryptographic keys of the eligible voters as signature verification keys. The application management system can then store and count the cast votes. For example, eligible voters can vote yes, no, or abstain. A resolution is passed, for instance, by a majority vote if a predetermined minimum number of yes votes has been cast. If several alternative motions on the same topic are submitted, the most far-reaching motion is voted on first. A simple, so-called relative, majority decides on a motion, meaning a majority of the votes cast, with abstentions being counted as votes not cast.Other voting rules and / or requirements are also possible.

[0015] Some implementations offer the advantage of enabling personal voting even in virtual conferences where the voting participants do not meet in person. This applies, for example, to party conventions or general meetings.

[0016] These implementations offer the advantage that general meetings, for example of public limited companies, political parties, and other co-determination organizations, where voting must be by name, can decide on motions directly with "yes," "no," or "abstention" without requiring the presence of individuals or special tools. For example, a registered telecommunications device, such as a smartphone, is sufficient for the voters.

[0017] The central application management device allows, for example, applications to be submitted, revised, and versioned—that is, different versions can be identified and stored in a revision-proof manner. This allows a version of an application to be created and put to a vote. For instance, whenever a document is to be voted on, the editing of the corresponding document is completed, and the application management device submits the current version of the document for voting. To this end, the voting management device generates multiple voting requests and sends them to the voting management device. Eligible participants then each receive a voting request with a unique code on their assigned telecommunications device. Using this unique code, eligible participants can cast their vote with their telecommunications device.For this purpose, the voting declaration is created and sent to the voting management device via the second communication channel, along with the individual code and authentication information. The linking of the voting declaration, individual code, and authentication information can, for example, result from sending them together in encrypted form via the second communication channel. The second communication channel is encrypted, for example, with an ephemeral session key. The voting declaration, individual code, and authentication information are linked, for example, by creating a hash value of the combination and transmitting it with the voting response via the second communication channel. Using another ephemeral session key, a MAC code of the combination is then generated from the hash value.Participants can, for example, decide whether to approve, reject, or abstain from voting on a proposed motion. The voting declaration is signed by the voting management device with the voting participant's private cryptographic key and made available to the motion management device for counting the votes. Two-factor authentication (individual code and authentication information) of the telecommunications device users, along with the signature, ensures in a cryptographically secure manner that only eligible participants of the virtual conference actually vote.

[0018] Annual general meetings of corporations, political parties, and other co-determination organizations can, for example, easily be held online in the form of a virtual conference and documents to be put to a vote can be edited live. Once editing is complete, an updated version can be submitted as a motion for a vote. All eligible participants, whether physically present in a meeting room or remotely, can cast their votes.

[0019] The conference in question is, for example, a general meeting. In company law, such a general meeting is one of the three governing bodies of a public limited company, a limited partnership with shares, or a European company. As a meeting of all shareholders, it serves not only to provide information but also, in particular, to pass resolutions on company-related matters. The general meeting can be either an ordinary or an extraordinary general meeting.

[0020] The conference could, for example, be a members' meeting in the case of an association or a shareholders' meeting in the case of a limited liability company or a partnership.

[0021] The conference is, for example, a members' or representatives' meeting in the form of a party congress or general meeting of a political party.

[0022] These embodiments can be advantageous because, on the one hand, the implementation effort for carrying out the voting on the part of the voting participants of the virtual conference is low, because the electronic signatures are not generated by the telecommunications terminal equipment itself, but their generation is merely initiated using the telecommunications terminal equipment, without requiring special hardware requirements or key management of cryptographic keys on the part of the telecommunications terminal equipment, and on the other hand, the method is particularly secure and can be designed in compliance with the law.

[0023] Depending on the specific implementation, generating an electronic signature requires two-factor authentication of the users of the telecommunications terminal equipment. This two-factor authentication comprises proof of "possession," namely possession of the telecommunications terminal equipment by means of the respective individual code, which is exclusively provided to the corresponding telecommunications terminal equipment, and proof of "knowledge," namely knowledge of the authentication information.

[0024] Proof of possession of the telecommunications terminal device is established by transmitting a unique code from the voting management device to the device via a side channel. A user or voting participant in the virtual conference can only receive this unique code if they possess the corresponding telecommunications terminal device. Consequently, the subsequent transmission of the voting response, including the unique code, the user's authentication information, and the voting declaration, via a second communication channel (such as an encrypted internet session), can only occur if the user possesses both the telecommunications terminal device and the authentication information. This implements two-factor authentication.

[0025] In some embodiments, the voting declaration includes an indication of whether the user of the telecommunications terminal device approves the current version of the application to be voted on, rejects the current version, or abstains from voting.

[0026] Some implementations offer the advantage that eligible participants can vote on a proposal with yes, no, or abstention. For example, a graphical user interface is displayed to eligible participants on their respective telecommunications terminals via a display device, comprising three buttons or controls for the three options.

[0027] In some embodiments, the identifier of the voting participant is a pseudonym. These embodiments can have the advantage of enabling non-named voting using pseudonyms. For example, anonymous voting can be facilitated in this way. Voting is anonymous if the pseudonym does not allow any conclusions to be drawn about the name of the voting participant behind it. For example, the pseudonym could be a random value or a pseudo-random value. For instance, the pseudonym could be generated using a one-way function, such as a hash function.

[0028] In some embodiments, the identifier of the eligible participant includes the participant's real name. These embodiments can have the advantage of enabling named voting. They allow content (i.e., proposals) and the actual identities of the voters to be cryptographically linked. For example, each participant can see who voted how.

[0029] In some embodiments, the voting management device specifies an initial time interval for each sent voting request, for receiving the corresponding voting response. If no voting response is received within the specified initial time interval for one of the voting requests, the voting management device further performs the following actions: Creating a voting failure message, which includes the data record of the current version of the motion to be voted on and the identifier of the corresponding eligible voting participant, sending the voting failure message to the motion management device.

[0030] Some implementations offer the advantage of prescribing a fixed timeframe for the voting process, in the form of the initial time interval. Furthermore, the voting failure notifications can be used to verify that all eligible participants were indeed asked to vote and thus had the opportunity to do so.

[0031] In some versions, a voting error message is counted as an abstention during the counting of the voting results.

[0032] In some embodiments, the voting requests include a time indication of the start of the respective first time interval. The telecommunications terminals use this time indication to display the remaining time of the first time interval for responding to the voting request. These embodiments offer the advantage that the expiring first time interval can be displayed to the respective users on their telecommunications terminals, for example, in the form of a countdown. Thus, the respective users know how long they have to cast their vote. The time indication could be, for example, a timestamp indicating the creation of the respective voting request and / or a specification of the first time interval.

[0033] According to embodiments, upon receiving voting requests, the telecommunications terminals display the expiration of a predefined second time interval for responding to the voting request, which is shorter than the first time interval. These embodiments can have the advantage that a time interval for casting their vote can be specified to the respective users on the telecommunications terminals, for example in the form of a countdown, without the need to transmit time information between the voting management device and the majority of the telecommunications terminals.

[0034] Depending on the embodiment, the individual codes are either random or pseudo-random values. For example, the voting management device can have a hardware-implemented Binary Symmetric Source (BSS) that provides random values ​​of maximum entropy. Alternatively, the voting management device can have a software-implemented random number generator that provides pseudo-random values.

[0035] In some embodiments, the second communication channel is encrypted. These embodiments offer the advantage of protecting communication between the telecommunications terminal and the voting management device from unauthorized access by third parties. For example, communication via the second channel is encrypted using a symmetric cryptographic session key. Alternatively, the second communication channel may be encrypted using end-to-end encryption. Finally, the second communication channel may be an encrypted internet session between the respective telecommunications terminal and the voting management device.In one embodiment, the second communication channel is secured at the application layer or the transport layer using symmetric or asymmetric encryption. According to this embodiment, the second communication channel is an HTTPS session.

[0036] In some implementations, users of telecommunications terminal equipment must first authenticate themselves to the respective device in order to generate a voting response. For example, authentication is also a prerequisite for establishing the second communication channel. Authentication is performed, for instance, by entering a Personal Identification Number (PIN) via an input device such as a keypad or touchscreen on the telecommunications terminal. The telecommunications terminal compares the entered PIN with a reference PIN stored, for example, on the SIM card located in a card reader of the telecommunications terminal. If the entered PIN matches the reference PIN stored on the SIM card, the user is considered authenticated and the telecommunications terminal is unlocked, allowing the user to access its functions.This ensures that two-factor authentication verifies not only possession of the telecommunications device, but also possession by the eligible voter as the authorized user to whom the device is assigned and who alone knows the PIN to unlock it. To further enhance security, it may be necessary for the eligible voter to first log in to the voting management device, for example, by entering a username and password.

[0037] In some embodiments, the individual code is not transmitted from the voting management device to the respective telecommunications terminal device via the second communication channel, such as an encrypted internet session, but rather via a separate channel, for example, a side channel of the mobile network, such as in the form of an SMS message. This ensures that the telecommunications terminal device from which the second communication channel with the voting management device is established and from which the voting response is received is the same telecommunications terminal device to which the voting management device sends the individual code. This is because receiving the individual code is only possible if the voting participant in the virtual conference is actually in possession of their assigned telecommunications terminal device.

[0038] In some embodiments, the first communication channel is a side channel of a mobile network through which SMS messages are sent. In other embodiments, the first communication channel is a side channel of a mobile network through which automatically generated voice messages are sent. These embodiments can have the advantage that the individual code can be transmitted to the telecommunications terminal independently of the second communication channel. Thus, the individual code can serve as independent proof of ownership of the telecommunications terminal.

[0039] In some embodiments, the voting management device communicates with the application management device via an encrypted third communication channel. These embodiments offer the advantage of protecting the communication between the voting management device and the application management device from unauthorized access by third parties. For example, the communication via the third communication channel is encrypted using a symmetric cryptographic session key. Alternatively, the third communication channel can be encrypted using end-to-end encryption.

[0040] According to some embodiments, the data set of the current version of the application includes an identifier for the current version of the application. These embodiments can have the advantage that, based on the identifier—for example, an identifier of the application and / or a version identifier—it can be determined which version of which application is being voted on.

[0041] In some embodiments, the voting requests each include the identifier of the current version of the proposal for display on a display device of the telecommunications terminal receiving the respective voting request. These embodiments can have the advantage that the respective users can see, based on the display, for example in the form of a graphical user interface, what they are voting on.

[0042] According to embodiments, the data set of the current version of the application comprises a hash value of the current version of the application. According to embodiments, the voting requests each comprise a hash value of the current version of the application for display on a display device of the telecommunications terminal receiving the respective voting request.

[0043] In some embodiments, the data set of the current version of the application comprises a copy of at least part of the current version of the application, for example, the first page of the current version of the application. These embodiments can have the advantage that it is possible to specify in detail exactly what is being voted on. In other embodiments, the data set of the current version of the application comprises a complete copy of the current version of the application.

[0044] For example, the voting management device makes a copy of the current version of the motion available for download to telecommunications terminal equipment via secondary communication channels. For instance, the telecommunications terminal equipment downloads the copy of the current version of the motion upon receiving the respective voting request. This voting request includes, for example, an identifier for the current version of the motion, which is used to identify the copy of the current version of the motion to be downloaded.

[0045] In some implementations, copies of the current version of the proposal are made available to eligible voters in storage areas of the voting management device, accessible only to the respective eligible voter registered with that device. These copies can, for example, be transmitted to the corresponding telecommunications terminal equipment and displayed on a screen. Users can thus review the relevant copies of the current version of the proposal before voting in detail and verify that it is indeed the correct version.

[0046] In some embodiments, the voting requests each include a copy of at least part of the current version of the application, for example, the first page of the current version, for display on a display device of the telecommunications terminal receiving the respective voting request. In other embodiments, the voting requests each include a complete copy of the current version of the application. These embodiments can have the advantage that the respective users can verify in detail, based on the display, for example, in the form of a graphical user interface, exactly what they are voting on.

[0047] According to embodiments, the method for each of the voting requests received by the voting management device includes, in addition to sending the respective voting request via the first communication channel, sending additional voting information via the second communication channel to the telecommunications terminal device assigned to the voting participant of the identified user account, for display on a display device of the receiving telecommunications terminal device. This voting information can be used by the telecommunications terminal device, for example, to generate the respective voting response. For example, the voting request includes, in addition to the respective individual code, an identifier of the current version of the motion. Using this identifier, the voting participant can, for example, determine which motion or...which eligible voter the corresponding code is assigned to. If the voting information also includes the identifier of the current version of the motion, the eligible voter can, for example, use the identifier to assign the voting request and thus the individual code it contains to the voting information. If the voting information includes further content information about the current version of the motion, such as a copy of at least part of the current version, the eligible voter can also assign the voting request and thus the individual code it contains to the content information of the current version of the motion. In other words, a content-based assignment to the subject of the vote is made, meaning the voter can determine what they are voting on.

[0048] In some embodiments, the additional voting information comprises a copy of at least part of the current version of the application, for example, the first page of the current version, for display on a display device of the telecommunications terminal receiving the respective voting request. In other embodiments, the additional voting information comprises a complete copy of the current version of the application. These embodiments can have the advantage that the respective users can verify in detail, based on the display, for example, in the form of a graphical user interface, exactly what they are voting on. Furthermore, transmitting additional voting information via the second communication channel can be advantageous if the amount of data that can be transmitted via the first communication channel, in particular the amount of data that can be transmitted as a single message, is limited.For example, the amount of data that can be transmitted via the first communication channel, in particular the amount of data that can be transmitted as a message, is less than the amount of data that can be transmitted via the second communication channel, in particular the amount of data that can be transmitted as a message.

[0049] In some embodiments, the data set of the current version of the application includes a signature of the current version of the application using a private cryptographic key of the application management device as the signature key. These embodiments can have the advantage that the signature can be used to verify the authenticity of the current version being voted on.

[0050] In some embodiments, processing of voting requests by the voting management device requires successful signature verification of the signature of the current version of the request, contained in the data record of the current version, using a public cryptographic key of the request management device as the signature verification key. These embodiments can offer the advantage that the voting management device can ensure that voting is indeed conducted on an authentic version of the request provided by the device. For example, the public cryptographic key of the request management device is stored within the voting management device.For example, to provide the application management device's cryptographic key, the application management device sends a certificate, such as a PKI-based certificate, containing the application management device's public cryptographic key to the voting management device.

[0051] According to this implementation, each eligible participant undergoes an initial registration with the voting management device using ID tokens of the respective eligible participants in the virtual conference. These ID tokens could, for example, be electronic identification documents of the eligible participants, such as their electronic identity cards. The ID tokens of the eligible participants in the virtual conference each comprise, for example, a protected memory area in which attribute values ​​of the respective eligible participant are stored, such as their first name, last name, address, and date of birth.These attribute values ​​of the voting participants of the virtual conference are to be stored, for example, as part of the respective user account of the corresponding voting participant by the voting management device. This requires secure and trustworthy reading and transmission of these attribute values ​​to the voting management device. The initial registration of the voting participants of the virtual conference takes place, for example, prior to the virtual conference and the voting.

[0052] According to some embodiments, the initial registration of a voting participant in the virtual conference by the voting management device includes: Authentication of the voting participant to an ID token assigned to the voting participant, wherein the ID token has a protected memory area in which attribute values ​​of the voting participant's attributes are stored; authentication of the voting management device to the ID token via a network, for example the Internet; establishment of an end-to-end encrypted connection between the voting management device and the ID token via the network and the telecommunications terminal equipment; transmission of the voting participant's attribute values ​​from the ID token to the voting management device via the end-to-end encrypted connection.Storage of the attribute values ​​of the eligible participant received from the ID token in a user account assigned to the eligible participant on the voting management device for the purpose of initial user registration by the voting management device.

[0053] During the initial registration process, the voting participant of the virtual conference first authenticates themselves against the ID token. This can be done, for example, by entering authentication data or information into the telecommunications device, which is then transmitted to the ID token via a local connection established between the device, such as an RFID or NFC connection. Alternatively, the ID token can directly capture the voting participant's authentication information; for this purpose, it may, for example, have a biometric sensor for biometric authentication.

[0054] Furthermore, the voting management device authenticates itself to the ID token via a network, such as the internet, using a certificate and / or an authorization certificate. The certificate may be issued according to a Public Key Infrastructure (PKI) standard, such as the X.509 standard. After both the eligible voter and the voting management device have successfully authenticated to the ID token, an end-to-end encrypted connection is established between the voting management device and the ID token. This connection runs through the network and the telecommunications terminal equipment, i.e., the local connection established between the telecommunications terminal equipment and the ID token.This end-to-end encrypted connection allows the attribute values ​​of the voting participant to be transferred from the ID token to the voting management device and stored there for creation in a user account of the voting participant of the virtual conference.

[0055] Authenticating a voting participant in the virtual conference against the voting participant's ID token may, for example, include the following steps: Capturing a biometric characteristic of the voting participant by a biometric sensor, comparing the captured biometric characteristic with a biometric characteristic of the voting participant stored on the ID token by the ID token, and authenticating the voting participant if the captured biometric characteristic matches the stored biometric characteristic.

[0056] The biometric sensor could, for example, be a biometric sensor of the ID token or a biometric sensor of the telecommunications terminal device, which forwards the captured biometric characteristic to the ID token.

[0057] For example, in a first step, the telecommunications terminal device captures biometric characteristics and attribute values ​​of the voting participant stored in the ID token of the voting participant of the virtual conference and transmits them to the voting management device via end-to-end encryption.

[0058] Subsequently, the biometric characteristics of the eligible voter corresponding to the stored biometric characteristics are recorded by the telecommunications terminal device and transmitted to the voting management device via end-to-end encryption.

[0059] The voting management device compares the stored biometric characteristics with the recorded biometric characteristics of the eligible voting participant in the virtual conference. If the compared characteristics match, the eligible voting participant is authenticated. Finally, further attribute values ​​of the eligible voting participant can be recorded and saved in the voting participant's user account on the voting management device.

[0060] Alternatively, the initial registration of the voting participant can be carried out using a so-called video identification procedure. The initial registration of the voting participant for the virtual conference can alternatively be carried out using an established procedure such as PostIdent or other identification methods.

[0061] The ID token could be, for example, an identification document bearing a photograph of the voting participant in the virtual conference to whom the document is assigned, and / or other biometric characteristics such as fingerprints. These characteristics can be captured, for example, using a camera on the voting participant's telecommunications device. Subsequently, the corresponding biometric characteristics of the voting participant are captured by the camera or another biometric sensor on the telecommunications device, for example, by having the participant hold their face in front of the camera. Depending on the type of characteristics, the comparison of these biometric characteristics can be automated.

[0062] The attribute values ​​can be read out together with the biometric characteristics or only transmitted after successful identification, for example read out from an ID token.

[0063] Further embodiments include a voting management device for a virtual conference for cryptographically secured voting on a motion. The voting management device is configured to: Receiving a plurality of voting requests from the application management device, wherein the plurality of voting requests comprises a voting request for each of the eligible participants, wherein the voting requests of the plurality of voting requests each comprise an identifier of the eligible participant to whom they are assigned, as well as a data record of a current version of the application on which a vote is to be taken.

[0064] Furthermore, the voting management device is configured for each of the received voting requests to: Identifying a user account managed by the voting management device of the eligible participant to whom the voting request is assigned, using the identifier included in the voting request, wherein the user account includes a private cryptographic key assigned to the eligible participant; generating a unique code for the eligible participant to whom the voting request is assigned; sending a voting request including the generated unique code via a first communication channel to the telecommunications terminal device assigned to the eligible participant of the identified user account, using connection information of the telecommunications terminal device that includes the identified user account.Receiving a voting response to the sent voting request from the telecommunications terminal device via a second communication channel, wherein the voting response includes the sent individual code of the voting request, authentication information of the user of the telecommunications terminal device, and a voting declaration of the user of the telecommunications terminal device, wherein the first communication channel is a side channel separate from and / or separately secured from the second communication channel; checking the validity of the received code and the received authentication information, wherein the validity check includes comparing the received code for conformity with the sent individual code and comparing the received authentication information for conformity with authentication information of the eligible participant contained in the user account.Upon successful verification, signing a combination comprising the data set of the current version of the proposal to be voted on, the identifier of the eligible voter, and the voting declaration of the user of the telecommunications terminal device, using the eligible voter's private cryptographic key; sending the signed combination to the proposal management device to verify the signature of the combination using a public cryptographic key of the eligible voter, to store it together with the current version of the proposal, and to count the voting result using the voting declaration included in the signed combination.

[0065] According to embodiments, the voting management device is configured to execute each of the previously described embodiments of the method for cryptographically secured voting on a request for a virtual conference.

[0066] Further embodiments include an application management device for a virtual conference for cryptographically secured voting on an application. The application management device is configured to: Creating a current version of the motion to be voted on; providing a list of all eligible participants of the virtual conference, wherein the list includes an identifier and a public cryptographic key for each eligible participant; creating a plurality of voting requests, wherein the plurality of voting requests includes a voting request for each eligible participant, wherein the voting requests of the plurality of voting requests each include the identifier of the eligible participant to whom they are assigned, as well as a record of the current version of the motion to be voted on; sending the plurality of voting requests to a voting management device; in response to the plurality of voting requests, receiving a plurality of signed combinations, each containing the record of the current version of the motion.which is to be voted on, comprises an identifier of an eligible participant and a voting declaration from a user of a telecommunications terminal device registered in a user account of the eligible participant identified by the identifier, verification of the signatures of the combinations using the public cryptographic keys of the eligible participants, in each case for successful signature verification, storage of the respective combination together with the current version of the motion, counting of the voting result using the voting declarations included in the signed combinations, storage of the voting result together with the current version of the motion.

[0067] According to embodiments, the application management device is configured to execute each of the previously described embodiments of the method for cryptographically secured voting on an application for a virtual conference.

[0068] Embodiments further include a voting system for a virtual conference for cryptographically secured voting on a proposal, wherein the voting system comprises a voting management device according to one of the preceding embodiments of a voting management device and a proposal management device according to one of the preceding embodiments of a proposal management device.

[0069] According to embodiments, the voting system is configured to execute each of the previously described embodiments of the method for cryptographically secured voting on a request for a virtual conference.

[0070] Further embodiments include a system comprising a voting system according to one of the preceding embodiments of a voting system and a plurality of telecommunications terminal devices, each assigned to one of the voting participants of the virtual conference. The telecommunications terminal devices are each configured to: Receiving a voting request from the voting management device, which includes an individual code generated for the eligible participant to whom the telecommunications terminal is assigned, via a first communication channel; displaying at least parts of the received voting request using a display device of the telecommunications terminal; receiving user input using an input device of the telecommunications terminal, wherein the user input includes authentication information and a voting declaration of the user of the telecommunications terminal; creating a voting response to the received voting request, wherein the voting response includes the received individual code of the voting request, the received authentication information, and the received voting declaration.Sending the voting response to the voting management device via a second communication channel, where the first communication channel is a separate and / or separately secured side channel from the second communication channel.

[0071] According to embodiments, the system is configured to execute each of the previously described embodiments of the method for cryptographically secured voting on a request for a virtual conference.

[0072] Asymmetric key pairs are used in a variety of cryptosystems and also play a crucial role in the signing of electronic documents. An asymmetric key pair consists of a public key, which is used to encrypt and / or decrypt data and may be published (i.e., shared with third parties), and a private key, which is also used to encrypt and / or decrypt data and must generally be kept secret. The public key allows anyone to encrypt data for the owner of the private key, which can only be decrypted with the private key. Furthermore, the public key allows anyone to verify digital signatures created with the private key. A corresponding digital signature is, for example, a hash value of the data to be signed, encrypted using the private key as the signing key.Using the public key as a signature verification key, the encrypted hash can be decrypted and the signature's validity verified. A private key allows its owner to decrypt data encrypted with the public key or to create digital signatures on behalf of the private key's owner. A signature created with a private key as the signing key can be verified with the corresponding public key as the signature verification key.

[0073] The terms "signature" or "electronic signature" used here refer to a simple electronic signature, an advanced electronic signature, or a qualified electronic signature. The latter is based on a qualified certificate valid at the time of its creation and must be created with a secure signature creation device to meet the highest security requirements. A signature can, for example, be a hash value of the source data encrypted with a private cryptographic key.

[0074] The authenticity of the transmitted voting response, i.e., the combination of voting declaration, individual code, and authentication information, can be ensured, for example, by using a Message Authentication Code (MAC). A MAC is calculated, for instance, using a MAC algorithm, which is provided with the data to be protected (i.e., the voting response data) and a cryptographic key (e.g., a symmetric cryptographic key such as an ephemeral session key from the second communication channel) as input data. Using this input data, the MAC algorithm calculates a checksum, which serves as the MAC. Block ciphers or hash functions, for example, can be used to calculate MACs.For example, a MAC can be an HMAC (Keyed-Hash Message Authentication Code), for which a cryptographic hash function, such as the Secure Hash Algorithm (SHA), and a secret cryptographic key, such as a symmetric cryptographic key, are used.

[0075] To secure data transmission, such as the transmission of voting results, a cryptographic key, for example a symmetric cryptographic key in the form of an ephemeral session key, is agreed upon between the sender (e.g., a telecommunications terminal device) and the receiver (e.g., the voting administration device). The sender uses this cryptographic key to calculate a MAC (Machine Authentication Key) for the data to be transmitted and sends the calculated MAC along with the data to the receiver. The receiver, in turn, calculates a MAC for the received data using the cryptographic key and compares the result with the received MAC. If the calculated MAC matches the received MAC, the integrity check is successful, and the received data is considered authentic.

[0076] In the case of a MAC (Mutual Authentication Key), both the sender and receiver must know the cryptographic key used, unlike when using pure hash functions or signatures. Pure hash functions, for example, do not use cryptographic keys. If the hash functions are public, anyone can calculate the hash value, especially for manipulated messages. In the case of a signature, only the signer knows the private cryptographic key used to create the signature, i.e., the signature key, of an asymmetric key pair used for the signature. The signature receiver only has the public key, i.e., the signature verification key, of the asymmetric key pair used for the signature. The signature receiver can therefore verify the signature using the signature verification key, but cannot calculate it themselves.

[0077] A "high-security module" (HSM), also known as a hardware security module, is a peripheral device, specifically an internal or external one, used for storing a cryptographic key and executing cryptographic operations. An HSM ensures the trustworthiness and integrity of data and related information, particularly within IT systems. To guarantee trustworthiness, the cryptographic keys used must be protected against both software-based and physical attacks, including side-channel attacks.

[0078] An HSM ensures the inaccessibility of the private key(s) stored within it. The protection of the private key can be so extensive that, upon attempting to read the private key, the HSM will either destroy itself or at least reset itself in such a way that the private key is irretrievably deleted.

[0079] In this context, a "telecommunications terminal device" is understood to be a portable, battery-powered device with a mobile communication interface, in particular a mobile phone, a smartphone, or a portable computer such as a laptop, notebook, or tablet PC with a mobile communication interface. In addition to the mobile communication interface, the telecommunications terminal device may have one or more other communication interfaces for wireless communication, such as a Bluetooth and / or a WLAN interface.

[0080] In this context, a "mobile network" refers specifically to a digital cellular telecommunications network that operates according to a mobile communication standard, such as GSM, UMTS, CDMA, or LTE. A connection to the internet can be established via such a mobile network.

[0081] An "Internet session," or communication channel over the Internet, refers here to a temporary communication connection over the Internet, i.e., a so-called communication session. According to the OSI model, an Internet session can refer to the transport layer or the application layer. Specifically, an Internet session can be an HTTP session or an HTTPS session, the latter using symmetric encryption to protect the transport layer.

[0082] A "side channel" is understood here to be a communication channel through which communication takes place separately from an internet session. This can be a separately secured, i.e., encrypted, channel embedded within the internet session. However, it is also possible that the side channel is a message channel for the signaling component of communication in a mobile network, through which, for example, signaling information for controlling call connections, roaming information, charge information, device type identification information, Short Messages (SMS) messages, and / or voice messages are transmitted.

[0083] In this context, an "ID token" is understood to mean, in particular, a portable electronic device assigned to a user, which has at least one data storage device for storing at least one attribute value and a communication interface for reading the attribute. Preferably, the ID token has a secure storage area for storing the at least one attribute value in order to prevent the attribute value stored in the storage area from being tampered with or read without the necessary authorization.

[0084] In particular, the ID token can be a USB stick or a document, especially a valuable or security document. According to the invention, a "document" is understood to be a paper-based and / or plastic-based document, such as electronic identification documents, in particular passports, identity cards, visas, as well as driver's licenses, vehicle registration documents, vehicle titles, company ID cards, health insurance cards or other ID documents, as well as chip cards, means of payment, in particular banknotes, bank cards and credit cards, waybills or other proofs of authorization, in which a data storage device for storing at least one attribute is integrated.

[0085] In this context, "memory" refers specifically to non-volatile memory. For example, "non-volatile memory" refers to electronic storage for the permanent storage of data. Non-volatile memory can be configured as non-editable memory, also known as Read-Only Memory (ROM), or as edible memory, also known as Non-Volatile Memory (NVM). In particular, this can be an EEPROM, such as a Flash EEPROM, or simply Flash. A key characteristic of non-volatile memory is that the data stored on it is retained even after the power supply is switched off.

[0086] A "protected memory area" is understood here to be an area of ​​electronic storage that can only be accessed—that is, read or write—via a processor. According to certain embodiments, access from or via the processor connected to the memory is only possible if a necessary condition is met. This condition could be, for example, a cryptographic one, in particular successful authentication and / or successful authorization verification. Such verification could, for instance, be based on an electronic signature with a signature key.

[0087] Embodiments of the invention will now be explained in more detail with reference to the drawings. These show: Figure 1 is a schematic block diagram of an exemplary voting system for a virtual conference, Figure 2 is a schematic flowchart of an exemplary procedure for voting on a motion for a virtual conference, Figure 3 is a schematic flowchart of an exemplary procedure for voting on a motion for a virtual conference, Figure 4 is a schematic flowchart of an exemplary procedure for voting on a motion for a virtual conference, and Figure 5 is a schematic block diagram of an exemplary voting system.

[0088] Elements of the following embodiments that correspond to each other are marked with the same reference numerals.

[0089] Figure 1Figure 101 shows an exemplary voting system for voting on a motion at a virtual conference. Voting system 101 comprises a motion management device 120 and a voting management device 100, which communicate with each other via a communication channel. This communication channel could be, for example, an encrypted network connection via network 180. Network 180 could be, for example, an intranet or the internet. The motion management device 120 includes a memory 122. This memory 122 stores one or more versions of one or more motions 124, which are to be voted on during the virtual conference. The result 126 of the vote is also stored, for example, in the memory 122 of the voting management device 100.The result 124 includes, for example, the votes received by the voting management device 100 from the eligible participants of the virtual conference, as well as the result of a count of the corresponding votes by the application management device 120. Furthermore, the memory 122 contains, for example, a list 128 of all eligible participants of the virtual conference. The list 128 includes, for example, for each eligible participant an identifier for identifying a user account 108 assigned to the corresponding eligible participant, which is managed by the voting management device 100.Furthermore, the list 128 includes a public cryptographic key for each voting participant of the virtual conference, which can be used as a signature verification key to verify signatures created with the respective participant's private cryptographic key 106, managed by the voting management device 100. The proposal management device 120 also includes a processor 130. When the processor 130 executes program instructions 132, it causes the proposal management device 120 to initiate a vote on a current version of the proposal 124. For example, the proposal management device 120 creates voting requests for each of the voting participants listed in list 128 and sends them to the voting management device 100.The voting requests each include, for example, the identifier of the eligible participant according to List 128 to which they are assigned, as well as a data record of the current version of the proposal 124 on which a vote is to be taken. Furthermore, in response to the voting requests, the proposal management device 120 receives the votes of the eligible participants of the virtual conference from the voting management device 100 in the form of signed combinations. These combinations are each signed using the private cryptographic key 108 of the corresponding eligible participant.

[0090] Each combination comprises the data set of the current version of the application to be voted on, an identifier of an eligible voter, and a voting declaration from a user of a telecommunications terminal device 140, 160, which is registered in the user account 108 of the eligible voter identified by the identifier. "Registered" means, for example, that connection information, such as a mobile phone number, of the telecommunications terminal device 140, 160 is stored in the corresponding user account 108 on the voting management device 100. The application management device 120 verifies the signatures of the combinations using the public cryptographic keys of the eligible voters as listed in Schedule 128.Alternatively, the public cryptographic keys can also be provided by means of a certificate, for example, a PKI certificate, which is sent from the voting management device 100 to the application management device 120 along with the corresponding signed combination. Upon successful signature verification, the respective combination is stored, for example, as part of the voting result 126 together with the current version of the application 124 in memory 122 of the application management device 120. The application management device 120 counts the votes using the voting declarations of the eligible participants of the virtual conference, which are contained in the signed combinations, and stores the result of the count as part of the voting result 126 together with the current version of the application 124 in memory 122 of the application management device 120.

[0091] The voting management device 100 includes a memory 102. Private cryptographic keys 106 of the voting participants of the virtual conference are stored in a protected memory area 104. For example, the protected memory area 104 is provided by a high-security module (HSM) of the voting management device 100. Furthermore, the memory 102 contains, for example, a plurality of user accounts 108. The user accounts 108 include, for example, one user account for each of the voting participants of the virtual conference. The user accounts 108 are assigned to the voting participants of the virtual conference, for example, by identifiers of the corresponding voting participants, which are stored in the user accounts 108.Furthermore, the voting management device 100 includes a processor 110, which is configured to execute program instructions 112 for carrying out a procedure for voting on the motion 124 of the virtual conference. The voting management device 100 also includes, for example, an SMS generator 114 for generating voting requests in the form of SMS messages, each containing a unique code generated by the voting management device 100 using the code generator 116. The unique codes generated by the code generator 116 are, for example, random or pseudo-random values. The SMS messages generated by the SMS generator 114 are sent, for example, via a mobile network 182 to telecommunications terminal equipment 140 and 160 using the mobile interface 119.The necessary connection information is stored, for example, in the user accounts 108 of the voting participants of the virtual conference on the voting management device 100. Furthermore, the voting management device 100 includes, for example, a communication interface 118 for communication with the telecommunications terminals 140 and 160 via the network 180. For example, the voting management device 100 provides the telecommunications terminals 140 and 160 with a data set of the current version of the motion for download via the network 180. The data set includes, for example, an identifier of the current version of the motion 124 and / or a copy of the current version of the motion 124. Additionally or alternatively, the voting management device 100 sends the identifier of the current version of the motion 124 as part of the voting request in the form of an SMS via the mobile network 182 to the telecommunications terminals 140 and 160.

[0092] The voting management device 100 receives voting responses to the sent voting requests from the telecommunications terminals 140 and 150 via secondary communication channels. These secondary communication channels include, for example, encrypted network connections between the voting management device 100 and the telecommunications terminals 140 and 150 via network 180. Each voting response comprises the individual code sent with the voting request, authentication information for the user of the respective telecommunications terminal 140 or 150, and a voting declaration from the user of the respective telecommunications terminal 140 or 150. The voting management device 100 verifies the validity of the received codes and authentication information.Validation checks include, for example, comparing the received codes for consistency with the sent individual codes, as well as comparing the received authentication information for consistency with authentication information stored in the user accounts 108 of the voting participants of the virtual conference. Upon successful verification, the voting management device 100 signs a combination for each received voting response using the private cryptographic key 106 of the respective voting participant of the virtual conference. The signed combinations each comprise the data record of the current version of the motion to be voted on, the identifier of the voting participant, and the voting declaration of the user of the telecommunications terminal 140, 150 assigned to the corresponding voting participant.The voting management device 100 sends the signed combinations to the application management device 120, for example via the network 180.

[0093] The telecommunications terminal devices 140, 160 are each assigned to one of the voting participants of the virtual conference and comprise a memory 142, 162, a processor 144, 164, a display device 148, 168, for example in the form of a display and / or touch display, and an input device 150, 170, for example in the form of a keyboard, a touch display, and / or a biometric sensor. Furthermore, the telecommunications terminal devices 140, 160 each comprise a communication interface 158, 178 for communication via the network 180 and a cellular interface 159, 179 for communication via the cellular network 182. The processors 144, 164 of the telecommunications terminal devices 140, 160 are each configured to execute program instructions 146, 166, thereby causing the telecommunications terminal devices 140, 160 to execute a voting procedure.Telecommunication terminal devices 140 and 160 each receive a voting request from the voting management device 100 via the first communication channel. This request includes an individual code generated for the voting participant to whom the telecommunications terminal device 140 or 160 is assigned. At least part of the voting request, in particular the individual code, is displayed on the display device 148 or 168. Furthermore, the telecommunications terminal devices 140 and 160 each receive user input via an input device 150 or 160. The user input includes authentication information and a voting declaration from the user of the telecommunications terminal device. It may also be necessary to enter the individual code, which can be done, for example, by copying and pasting.Telecommunication terminal devices 140 and 160 each generate a voting response to the received voting request, which includes the received individual code of the voting request, the received authentication information, and the received voting declaration. The voting responses are then sent via network 180 to the voting management device 100.

[0094] Figure 2This document describes a method for cryptographically secure voting on a motion using a voting system for a virtual conference and a plurality of telecommunications terminals. The voting system comprises a central motion management device and a central voting management device. Each telecommunications terminal is assigned to a voting participant in the virtual conference. In block 300, the voting management device receives a plurality of voting requests from the motion management device. The plurality of voting requests includes one voting request for each of the voting participants in the virtual conference. Each voting request includes an identifier of the voting participant to whom it is assigned.These identifiers allow for the identification of a user account managed by the voting system for each eligible voter. The identifiers can, for example, include the full name of the respective eligible voter, thus enabling roll-call voting. Alternatively, the identifiers can be pseudonyms of the eligible voters, allowing for anonymous voting. Furthermore, the voting requests each include, for example, a data record of the current version of the motion to be voted on. This data record allows for the identification of the current version of the motion being voted on. For this purpose, the data record includes, for example, an identifier of the current version of the motion and / or a copy of the current version of the motion.

[0095] The voting management device receives voting requests and, for example, outputs blocks 302 to 314 for each received request. Block 302 identifies the voting management device's user account of the eligible voter to whom the voting request is assigned. This is done using the identifier that the respective voting request contains. The voting requests are thus assigned to the user accounts using these identifiers. Each user account contains, for example, a private cryptographic key assigned to the corresponding eligible voter. The private cryptographic keys are stored, for example, in a protected memory area of ​​the voting management device. This protected memory area is, for example, provided by a high-security module (HSM) of the voting management device.In block 304, an individual code is generated for each eligible voter to whom the voting request is assigned. This code is, for example, a random or pseudo-random value. In block 306, a voting request containing this individual code is sent via an initial communication channel to the telecommunications terminal associated with the eligible voter's identified user account. This uses connection information from the corresponding telecommunications terminal stored in the identified user account of the eligible voter. For example, the voting request is sent to the telecommunications terminal via SMS, with the connection information including the mobile phone number of the corresponding telecommunications terminal.

[0096] In block 308, a voting response to the sent voting request is received by the telecommunications terminal device via a second communication channel. For example, the voting management device establishes the second communication channel to the telecommunications terminal device before, in parallel, or after sending the voting request. Alternatively, the telecommunications terminal device may establish the second communication channel upon receiving the voting request. This second communication channel may be an encrypted communication channel, such as an encrypted internet connection or an HTTPS session.The received voting response includes the individual code sent with the voting request, authentication information from the telecommunications terminal user, and the user's voting statement. The authentication information could be, for example, a PIN or password. It could also be a biometric characteristic, such as a fingerprint or facial scan. The user's voting statement indicates, for example, whether they approve the motion, reject it, or abstain. In block 310, the voting management device checks the validity of the received code and authentication information. To do this, the voting management device compares the received code to the individual code previously sent in block 306.Furthermore, the voting management device compares the received authentication information for a match with authentication information of the eligible voter stored in the user account, which serves as a reference. For example, the authentication information is transmitted in hashed form and is stored in hashed form in the user account.

[0097] In block 312, upon successful verification, the voting management device signs a combination using the voting participant's private cryptographic key stored by the voting management device. This combination comprises the data record of the current version of the motion to be voted on, the voting participant's identifier, and the voting declaration of the telecommunications terminal user. The signature thus establishes a cryptographically secure link between the current version of the motion, the voting participant, and the voting declaration of the voting participant, or their decision regarding the motion.In block 314, the voting management device sends the signed combination to the application management device so that the latter can verify the signature of the combination using a public cryptographic key of the eligible voter and store the combination as the vote of the corresponding eligible voter. Furthermore, the application management device can use the voting declaration contained in the signed combination to count the voting result.

[0098] Figure 3This diagram illustrates a procedure executed by a proposal management device during a cryptographically secured vote on a proposal for a virtual conference. In block 400, the proposal management device creates the current version of the proposal. For example, changes to an existing draft proposal result in the revised proposal being submitted for voting as the current version. To this end, in block 402, the proposal management device provides a list of all eligible participants in the virtual conference. This list includes an identifier for each eligible participant, which can be used to identify the corresponding user account on the proposal management device.Furthermore, the document includes, for example, a public cryptographic key for each eligible voter, which can be used to verify the signatures of the respective eligible voters. In block 404, the application management device generates multiple voting requests, each containing one voting request for each eligible voter as specified in the list. Each voting request includes the identifier of the eligible voter to whom it is assigned, as specified in the list. Additionally, each voting request includes a data record of the current version of the application to be voted on. This data record allows, for example, the identification of the current version of the application being voted on. For this purpose, the data record includes, for example, an identifier of the current version of the application and / or a copy of the current version of the application.In block 406, the request management device sends the voting requests created in block 404 to a voting management device. For example, the request management device establishes an encrypted communication channel to the voting management device for this purpose.

[0099] In block 408, the application management device receives a plurality of signed combinations from the voting management device in response to the plurality of voting requests. For example, the application management device receives the combinations via an encrypted communication channel. For example, the application management device receives the combinations all at once or successively. The received combinations each comprise the data record of the current version of the application to be voted on, an identifier of an eligible voter, and a voting declaration from a user of a telecommunications terminal device registered in a user account of the eligible voter identified by the identifier.In block 410, the application management device verifies the signatures of the combinations using the public cryptographic keys of the eligible voters, which are provided, for example, by the list. In block 412, the application management device stores each successful signature verification combination along with the current version of the application. In block 414, the application management device counts the voting result using the voting declarations included in the signed combinations. In block 416, the application management device stores the result of the count, for example, along with the signed combinations, as the voting result together with the current version of the application on which the vote was held.

[0100] Figure 4Figure 1 shows a procedure executed by multiple telecommunications terminal devices during a cryptographically secured vote on a request for a virtual conference. Each telecommunications terminal device is assigned to one of the voting participants in the virtual conference. For example, connection information, such as a mobile phone number, is stored in the user accounts of the voting participants. These user accounts are managed, for example, by a voting management device. During the voting process, each telecommunications terminal device executes blocks 500 to 508. In block 500, the telecommunications terminal device receives a voting request from the voting management device.The voting request includes an individual code generated for the eligible voter to whom the telecommunications terminal is assigned, transmitted via an initial communication channel. For example, the voting request is received via SMS over a mobile network. For this purpose, connection information, such as the mobile phone number of the corresponding telecommunications terminal, is stored in the voting management device's user account for the eligible voter to whom the telecommunications terminal is assigned. In Block 500, the received voting request is displayed in full or at least in part using a display device on the telecommunications terminal. For example, the individual code is displayed. The voting request also includes, for example, an identifier for the version of the proposal to be voted on.The corresponding identifier is also displayed, for example. The voting request may also include a copy of the current version of the motion to be voted on, or the telecommunications terminal may download the copy of the motion from the voting management device via a second communication channel. The corresponding copy of the current version of the motion is also displayed, for example. In block 504, the telecommunications terminal receives user input using an input device of the telecommunications terminal.

[0101] User input includes, for example, authentication information and a voting statement from the user of the telecommunications terminal. The authentication information can be, for example, a PIN or password. It can also be, for example, a biometric characteristic such as a fingerprint or facial scan of the user of the telecommunications terminal. The user's voting statement indicates, for example, whether they approve the motion, reject the motion, or abstain. The input device can be, for example, a keyboard, a touchscreen, and / or a biometric sensor. In block 506, the telecommunications terminal generates a voting response to the received voting request.This voting response includes the individual voting request code received with the voting request in block 500, the authentication information received, and the voting declaration received. In block 508, the voting response is sent to the voting management device via a second communication channel in response to the voting request received in block 500. The first communication channel is a separate and / or separately secured side channel from the second communication channel.

[0102] Figure 5Figure 101 shows an exemplary voting system with a voting management device 100 and a request management device 120. The voting management device 100 is configured to store registration data of eligible participants in the virtual conference, each of whom is assigned, for example, a telecommunications terminal 140, in user accounts 108 that are managed by the voting management device 100. In addition to mobile phone numbers of the respective telecommunications terminal 140, the registration data also includes attributes with the corresponding attribute values ​​of the respective eligible participant.Initial registration of a voting participant in the virtual conference is carried out, for example, using an ID token 256 of the voting participant, such as an electronic identification document of the voting participant, in particular an electronic identity card of the Federal Republic of Germany.

[0103] The ID token 256 of the voting participant in the virtual conference comprises a processor 252, which is configured to execute program instructions 254. Executing the program instructions 254, for example, causes the processor 252 to provide attribute values ​​268 of the voting participant for their initial registration with the voting management device 100. Furthermore, the ID token 256 comprises a communication interface 258 for establishing a local connection 260 to a corresponding communication interface 262 of the telecommunications terminal device 140. The communication interfaces 258 and 262 can, for example, be configured as RFID or NFC interfaces. The ID token 256 also comprises an electronic memory 264 in which attribute values ​​268 of the voting participant's attributes, such as the name and address of the voting participant in the virtual conference, are stored.For the initial registration of the eligible voter by the voting management device 100, the following procedure is used, for example: The eligible voter brings their assigned ID token 256 into close proximity to the communication interface 262 of the telecommunications terminal 140, so that the local connection 260 between the ID token 256 and the telecommunications terminal 140 can be established. The eligible voter authenticates themselves to the ID token 256 by entering authentication data or information, for example, into the telecommunications terminal 140 using the input device 150, or directly into the ID token 256 if it also has an input device 250, such as a keyboard or a biometric sensor.Furthermore, the voting management device 100 also authenticates itself to the ID token 256, for example, by transmitting a certificate 266, which may be designed as an authorization certificate, to the ID token 256 via the network 280, the telecommunications terminal 140, and the local connection 260. This certificate 266 serves to prove the authenticity of the voting management device 100 and its read authorization to access the attribute values ​​268 of the voting participant stored in memory 264. The certificate 266 may have been created according to a Public Key Infrastructure (PKI) standard, such as the X.509 standard.

[0104] After these two authentications have been successfully completed, an encrypted connection, for example with end-to-end encryption, is established between the voting management device 100 and the ID token 256, via the network 180, the telecommunications terminal device 140 and the local connection 260. This takes place, for example, at an application layer.

[0105] The voting management device 100 then sends a read command, which can be configured, for example, as a chip card command such as an APDU, to read attribute values ​​from memory 264 via the encrypted connection to the ID token 256, which then sends the requested attribute values ​​via the encrypted connection to the voting management device 100. The voting management device 100 stores the read attribute values ​​as part of the registration data for the voting participant of the virtual conference in the user account 108. Reference symbol list

[0106] 100 Voting Management Device 101 Voting System 102 Memory 104 Protected Memory Area 106 Private Cryptographic Key 108 User Account 110 Processor 112 Program 114 SMS Generator 116 Code Generator 118 Communication Interface 119 Communication Interface 120 Application Management Device 122 Memory 124 Application 126 Voting Result 128 List 130 Processor 132 Program 138 Communication Interface 140 Telecommunication Terminal 142 Memory 144 Processor 146 Program 148 Display Device 150 Input Device 158 Communication Interface 159 Communication Interface 160 Telecommunication Terminal 162 Memory 164 Processor 166 Program 168 Display Device 170 Input Device 178 Communication Interface 179 Communication interface 180 Network 182 Mobile network 250 Input device 252 Processor 254 Program instructions 256 ID token 258 Communication interface 260 Connection 262 Communication interface 264 Memory 266 Certificate 268 Attribute values

Claims

1. A method for cryptographically secured voting on a motion (124) using a voting system (101) for a virtual conference and a plurality of telecommunications terminals (140, 160), wherein the voting system (101) comprises a central motion management device (120) and a central voting management device (100), wherein each of the telecommunications terminals (140, 160) is associated with a respective voting participant of the virtual conference, wherein, by way of the voting management device (100), the method comprises: • receiving a plurality of voting questions from the motion management device (120), wherein the plurality of voting questions comprises a voting question for each of the voting participants, wherein the voting questions of the plurality of voting questions each comprises an identifier of the voting participant with whom they are associated and a data record of a current version of the motion (124) to be voted on, wherein the method further comprises, for each of the received voting questions, by way of the voting management device (100): • identifying a user account (108), managed by the voting management device (100), of the voting participant with whom the voting question is associated, using the identifier comprised by the voting question, wherein the user account (108) comprises a private cryptographic key (106) associated with the voting participant, • generating an individual code for the voting participant with whom the voting question is associated, • sending a voting request comprising the generated individual code via a first communication channel to the telecommunications terminal (140, 160) associated with the voting participant of the identified user account (108) using connection information of the telecommunications terminal (140, 160) comprising the identified user account (108), • receiving a voting response to the sent voting request from the telecommunications terminal (140, 160) via a second communication channel, wherein the voting response comprises the sent individual code of the voting request, a piece of authentication information of the user of the telecommunications terminal (140, 160) and a voting declaration of the user of the telecommunications terminal (140, 160), wherein the first communication channel is a separate and / or separately secured side channel to the second communication channel, • verifying the validity of the received code and the received authentication information, wherein the verification of the validity comprises comparing the received code for correspondence with the transmitted individual code and comparing the received authentication information for correspondence with authentication information of the voting participant comprised by the user account (108), • upon successful verification, signing a combination comprising the data record of the current version of the motion (124) to be voted on, the identifier of the voting participant and the voting declaration of the user of the telecommunications terminal (140, 160), using the private cryptographic key (106) of the voting participant, • sending the signed combination to the motion management device (120) for verifying the signature of the combination using a public cryptographic key of the voting participant, for storing it together with the current version of the motion (124) and for counting the voting result using the voting declarations comprised by the signed combination.

2. The method according to claim 1, wherein the voting declaration comprises an indication whether the user of the telecommunications terminal (140, 160) approves the current version of the motion (124) to be voted on, rejects the current version or abstains from voting.

3. The method according to any one of the preceding claims, wherein the identifier of the voting participant is a pseudonym of the voting participant, or wherein the identifier of the voting participant comprises a real name of the voting participant.

4. The method according to any one of the preceding claims, wherein a first time interval is predetermined by the voting management device (100) for each of the sent voting requests for receiving the associated voting response, wherein, if no voting response is received to one of the voting requests within the predetermined first time interval, the method further comprises by means of the voting management device (100): • creating a voting failure message containing the data record of the current version of the motion (124) to be voted on and the identifier of the corresponding voting participant, • sending the voting failure message to the motion management device (120).

5. The method according to claim 4, wherein a voting failure message is considered as an abstention in the course of the counting of the voting result.

6. The method according to any one of claims 4 to 5, wherein the voting requests each comprise time information about the start of the respective first time interval, wherein the telecommunications terminals (140, 160) each use the time information to indicate an expiry of the first time interval for responding to the voting request, or wherein the telecommunications terminals (140, 160), upon receipt of the voting requests, in each case indicate an expiration of a predefined second time interval for responding to the voting request, which is shorter than the first time interval.

7. The method according to any one of the preceding claims, wherein the individual codes are random values or pseudo-random values.

8. The method according to any one of the preceding claims, wherein the second communication channel is an encrypted communication channel and / or wherein the first communication channel is a side channel of a mobile radio network via which SMS messages are sent, or is a side channel of a mobile radio network via which automatically generated voice messages are sent.

9. The method according to any of the preceding claims, wherein the data record of the current version of the motion (124) comprises an identifier of the current version of the motion (124) and / or wherein the voting requests each comprise the identifier of the current version of the motion (124) for display on a display device (148, 168) of the telecommunications terminal (140, 160) receiving the respective voting request, and / or wherein the data record of the current version of the motion (124) comprises a hash value of the current version of the motion (124), and / or wherein the data record of the current version of the motion (124) comprises a copy of at least a portion of the current version of the motion (124), and / or wherein the voting requests each comprise the copy of at least a part of the current version of the motion (124) for display on a display device (148, 168) of the telecommunications terminal (140, 160) receiving the respective voting request.

10. The method according to any one of the preceding claims, wherein the data record of the current version of the motion (124) comprises a signature of the current version of the motion (124) with a private cryptographic key of the motion management device (120) as a signature key.

11. The method according to claim 10, wherein a processing of the voting questions by the voting management device (100) requires in each case a successful signature verification of the signature of the current version of the motion (124) comprised by the data record of the current version of the motion (124) using a public cryptographic key of the motion management device (120) as signature verification key.

12. A voting management device (100) for a virtual conference for cryptographically secured voting on a motion (124), said voting management device being configured to: • receive a plurality of voting questions from the motion management device (120), wherein the plurality of voting questions comprises a voting question for each of the voting participants, wherein the voting questions of the plurality of voting questions each comprise an identifier of the voting participant with whom they are associated and a data record of a current version of the motion (124) to be voted on, wherein the voting management device (100) is further configured, for each of the received voting questions, to: • identify a user account (108), managed by the voting management device (100), of the voting participant with whom the voting question is associated, using the identifier comprised by the voting question, wherein the user account (108) comprises a private cryptographic key (106) associated with the voting participant, • generate an individual code for the voting participant with whom the voting question is associated, • send a voting request comprising the generated individual code via a first communication channel to the telecommunications terminal (140, 160) associated with the voting participant of the identified user account (108) using connection information of the telecommunications terminal (140, 160) comprising the identified user account (108), • receive a voting response to the sent voting request from the telecommunications terminal (140, 160) via a second communication channel, wherein the voting response comprises the sent individual code of the voting request, a piece of authentication information of the user of the telecommunications terminal (140, 160) and a voting declaration of the user of the telecommunications terminal (140, 160), wherein the first communication channel is a separate and / or separately secured side channel to the second communication channel, • verify the validity of the received code and the received authentication information, wherein the verification of the validity comprises comparing the received code for correspondence with the transmitted individual code and comparing the received authentication information for correspondence with authentication information of the voting participant comprised by the user account (108), • upon successful verification, signing a combination comprising the data record of the current version of the motion (124) to be voted on, the identifier of the voting participant and the voting declaration of the user of the telecommunications terminal (140, 160), using the private cryptographic key (106) of the voting participant, • sending the signed combination to the motion management device (120) for verifying the signature of the combination using a public cryptographic key of the voting participant, for storing it together with the current version of the motion (124) and for counting the voting result using the voting declaration comprised by the signed combination.

13. A voting system (101) for a virtual conference for cryptographically secured voting on a motion (124), wherein the voting system (101) comprises a voting management device (100) according to claim 12 and a motion management device (120) for a virtual conference for cryptographically secured voting on a motion (124), wherein the motion management device (120) is configured to: • create a current version of the motion (124) to be voted on, • provide a list (128) of all voting participants of the virtual conference, wherein the list (128) comprises an identifier and a public cryptographic key for each of the voting participants, • create a plurality of voting questions, wherein the plurality of voting questions comprises a voting question for each of the voting participants, wherein the voting questions of the plurality of voting questions in each case comprise the identifier of the voting participant with whom they are associated and a data record of the current version of the motion (124) to be voted on, • send the plurality of voting questions to a voting management device (100), • in response to the plurality of voting questions, receive a plurality of signed combinations, which in each case comprises the data record of the current version of the motion (124) to be voted on, an identifier of a voting participant and a voting declaration of a user of a telecommunications terminal (140, 160) registered in a user account (108) of the voting participant identified by the identifier, • verify the signatures of the combinations using the public cryptographic keys of the voting participants, • in each case after a successful signature verification, save the respective combination together with the current version of the motion (124), • count the voting result using the voting declarations comprised by the signed combinations, • save the voting result together with the current version of the motion (124).

14. A system (101) comprising a voting system (101) according to claim 13 and a plurality of telecommunications terminals (140, 160), which are each associated with one of the voting participants of the virtual conference, wherein the telecommunications terminals (140, 160) are each configured to: • receive a voting request from the voting management device (100), which comprises an individual code generated for the voting participant with whom the telecommunications terminal (140, 160) is associated, via a first communication channel, • display at least parts of the received voting request using a display device (148, 168) of the telecommunications terminal (140, 160), • receive a user input using an input device (150, 170) of the telecommunications terminal (140, 160), wherein the user input comprises a piece of authentication information and a voting declaration of the user of the telecommunications terminal (140, 160), • create a voting response to the received voting request, wherein the voting response comprises the received individual code of the voting request, the received authentication information and the received voting declaration, • send the voting response via a second communication channel to the voting management device (100), wherein the first communication channel is a separate and / or separately secured side channel to the second communication channel.