Collaborative Research: CT-CS: A Center for Correct, Usable, Reliable, Auditable, and Transparent Elections (ACCURATE)

【摘要】投票系统要求端到端的可信，从空白选票和登记名单开始，到标记选票的正确和可审计的计数结束，反映选民的选择。这种往返投票必须抵制资金充足、组织严密的对手，这些对手可能包括那些开发、维护或部署选举机制的人，而且这个过程必须对所有公民开放，无论其残疾或母语如何。该中心的研究调查了软件架构、防篡改硬件、加密协议以及各种验证系统（如纸质、音频、加密）在电子投票系统中可以发挥的作用。该中心还检查了系统的可用性，并研究了公共政策和行政程序如何与技术相结合，更好地保护投票系统。投票系统完整性问题是一个典型的硬网络信任问题，需要可信的系统架构、安全性、完整性、隐私性、匿名性、高保证性和人机界面。投票系统必须保护选民的隐私和匿名性，以减少选民被胁迫和贿赂的风险，但它们必须具有足够的可审计性和透明度，以便发现和协调错误和错误。该中心的研究深入了解了如何组织、开发和评估投票系统，以及具有端到端可信度要求的各种其他系统。

AbstractVoting systems require end-to-end trustworthiness, commencing with blank ballots and registration lists and concluding with the correct and auditable tallies of the marked ballots, reflecting the choices of the voters. This ballot round trip must resist well financed and organized adversaries that may include the very people who develop, maintain, or deploy the election machinery, and the process must be accessible to all citizens regardless of their disabilities or native language. The center's research investigates software architectures, tamper-resistant hardware, cryptographic protocols, and the role that various verification systems (e.g. paper, audio, cryptographic) can play in electronic voting systems. The center also examines system usability and studies how public policy and administrative procedures can, in combination with technology, better safeguard voting systems. The voting system integrity problem is a paradigmatic hard Cyber Trust problem, requiring trustworthy system architectures, security, integrity, privacy, anonymity, high assurance, and human-machine interfaces. Voting systems must preserve a voter's privacy and anonymity, to reduce risks of voter coercion and bribery, yet they must be sufficiently auditable and transparent to allow for mistakes and errors to be identified and reconciled. This center's research develops a deeper understanding of how to organize, develop, and evaluate not only voting systems, but a wide range of other systems with end-to-end trustworthiness requirements.