TWC: TTP Option: Medium: Voting Systems Architectures for Security and Usability

选举的安全和廉正是促进民主的首要条件。然而，增强安全性的代价往往是使投票系统对选民来说更难使用。借助投票过程中利益相关者(最著名的是德克萨斯州特拉维斯县)的意见，我们正在构建一个原型投票系统，并研究如何设计这样一个系统，使其明显比当前的解决方案更安全，而不会使参与选举过程变得更加困难。这项研究正在填补在设计复杂的投票系统时发现的知识差距，该系统必须满足严格的安全性、可审核性和可用性限制。我们正在对这个安全但可用的投票系统的所有方面进行研究，方法是定义加密-用户交互，建立允许和鼓励选民核实其选票的可扩展公共公告板系统，设计投票控制台的软件，确定计票系统的正确性，以及了解选民和投票工作人员如何选择和授权特定的投票站。我们正在采用迭代的可用性评估和快速设计策略，使我们能够收敛到满足可用性和安全性的经常相互冲突的约束的最佳投票解决方案。在这项研究的结论中，我们打算有一个全面运作的这个投票系统的原型，它已经在实验室和实地经过真实选民的广泛测试，在其运作中可以使用，同时其可靠性和安全性也很强大。

The security and integrity of elections is paramount in the furtherance of democracy. However, enhanced security often comes at the cost of making voting systems significantly more difficult for voters to use. With input from stakeholders in the voting process (most notably Travis County, Texas), we are constructing a prototype voting system and investigating how to design such a system so that it is significantly more secure than current solutions, without making it harder to participate in the election process. This research is closing knowledge gaps identified when designing a complex voting system that must satisfy stringent security, auditability, and usability constraints. We are conducting research on all aspects of this secure-but-usable voting system by defining the cryptography-user interactions, establishing scalable public bulletin-board systems that allow and encourage voters to verify their votes, engineering the software for the voting console, determining the correctness of the vote tallying system and understanding how voters and poll workers select and authorize specific voting stations. We are employing an iterative usability assessment and rapid design strategy that allows us to converge onto an optimal voting solution that satisfies the often-conflicting constraints of usability and security. At the conclusion of this research, we intend to have a fully operational prototype of this voting system that has been extensively tested by real voters in the laboratory and the field and is usable in its operation while being robust in its reliability and security.