Protocols, Strands, and Logic - Essays Dedicated to Joshua Guttman on the Occasion of his 66.66th Birthday
Protocols, Strands, and Logic - Essays Dedicated to Joshua Guttman on the Occasion of his 66.66th Birthday
复制标题
协议、链和逻辑——在 Joshua Guttman 66.66 岁生日之际献给他的散文
DOI：
10.1007/978-3-030-91631-2_11
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Jamroga W
中科院分区：
文献类型：
--
作者：
Jamroga W
投票系统不应该仅仅报告结果：它还应该提供足够的证据，让理性的观察者相信报告的结果是正确的。许多已部署的系统，特别是仍在美国选举中使用的无纸化DRE机器，肯定不能满足第二个要求，也很可能是第一个要求。Rivest和Wack提出了软件独立性（SI）原则作为投票系统的指导原则和要求。实质上，如果一个投票系统对软件的依赖是“明显篡改”的，也就是说，如果有一种方法可以在不检查软件的情况下检测到对软件的重大更改，那么该投票系统就是SI。这个重要的概念到目前为止还只是非正式的表述，在这里，我们提供SI的更正式的数学定义。这暴露了原始定义中的一些微妙之处和差距，其中包括：一个系统的哪些元素必须被信任以使选举或系统成为SI，如何形式化“检测”选举结果的变化，SI是关于一组检测机制的事实（这必须是法律的和实际的），需要限制假警报，以及如何SI适用时，社会选择功能是不确定的。
A voting system should not merely report the outcome: it should also provide sufficient evidence to convince reasonable observers that the reported outcome is correct. Many deployed systems, notably paperless DRE machines still in use in US elections, fail certainly the second, and quite possibly the first of these requirements. Rivest and Wack proposed the principle ofsoftware independence(SI) as a guiding principle and requirement for voting systems. In essence, a voting system is SI if its reliance on software is “tamper-evident”, that is, if there is a way to detect that material changes were made to the software without inspecting that software. This important notion has so far been formulated only informally.Here, we provide more formal mathematical definitions of SI. This exposes some subtleties and gaps in the original definition, among them: what elements of a system must be trusted for an election or system to be SI, how to formalize “detection” of a change to an election outcome, the fact that SI is with respect to a set of detection mechanisms (which must be legal and practical), the need to limit false alarms, and how SI applies when the social choice function is not deterministic.