TWC: TTP Option: Medium: Voting Systems Architectures for Security and Usability

选举的安全和完整对促进民主至关重要。然而，加强安全性的代价往往是选民使用投票系统的难度大大增加。根据投票过程中利益相关者（最著名的是德克萨斯州的特拉维斯县）的意见，我们正在构建一个原型投票系统，并研究如何设计这样一个系统，使其比当前的解决方案更安全，而不会使参与选举过程变得更加困难。这项研究缩小了在设计必须满足严格的安全性、可审计性和可用性约束的复杂投票系统时发现的知识差距。我们正在对这个安全但可用的投票系统的各个方面进行研究，包括定义密码用户交互，建立可扩展的公共公告板系统，允许并鼓励选民验证他们的选票，设计投票控制台的软件，确定投票计数系统的正确性，以及了解选民和投票工作人员如何选择和授权特定的投票站。我们采用迭代的可用性评估和快速设计策略，使我们能够收敛到一个最优的投票解决方案，满足可用性和安全性的经常冲突的约束。在这项研究结束时，我们打算拥有一个完全可操作的投票系统原型，该系统已在实验室和现场由真正的选民进行了广泛的测试，并在其操作中可用，同时在可靠性和安全性方面保持稳健。

The security and integrity of elections is paramount in the furtherance of democracy. However, enhanced security often comes at the cost of making voting systems significantly more difficult for voters to use. With input from stakeholders in the voting process (most notably Travis County, Texas), we are constructing a prototype voting system and investigating how to design such a system so that it is significantly more secure than current solutions, without making it harder to participate in the election process. This research is closing knowledge gaps identified when designing a complex voting system that must satisfy stringent security, auditability, and usability constraints. We are conducting research on all aspects of this secure-but-usable voting system by defining the cryptography-user interactions, establishing scalable public bulletin-board systems that allow and encourage voters to verify their votes, engineering the software for the voting console, determining the correctness of the vote tallying system and understanding how voters and poll workers select and authorize specific voting stations. We are employing an iterative usability assessment and rapid design strategy that allows us to converge onto an optimal voting solution that satisfies the often-conflicting constraints of usability and security. At the conclusion of this research, we intend to have a fully operational prototype of this voting system that has been extensively tested by real voters in the laboratory and the field and is usable in its operation while being robust in its reliability and security.