1 kazue’s proposal 2008.8.19 2:00pm(ca) 8.20 6:00am (japan) kazue sako

8
1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:0 0AM (Japan) Kazue Sako

Upload: karin-carter

Post on 13-Jan-2016

221 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

1

Kazue’s Proposal

2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan)

Kazue Sako

Page 2: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

2

My Standpoint

• I think it is a great idea to carry out remote voting within this CRYPTO community, so that we can learn how cryptography serve the world, and how better can we make it.

• Using one organization’s system maybe one solution, but why not WE build our own, so that WE can try and learn and fix more flexibly.

Page 3: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

3

My Proposal

• Form a project with a group of developers, and within it, build a system that group members are comfortable with.– not a single company, diversity of members– open discussions among group members

during development and improvement of the system

• We have taken a similar approach in SVIS voting held in a Japanese conference, Jan. 2008.

Page 4: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

4

what is SVIS voting

• SVIS is a mix-net based remote voting system where the participants of the symposium vote for SCIS paper award (young researcher award).– SCIS: Symposium on Cryptography and Information Security– SVIS: Secure Voting In Symposiums

• Each voter selects maximum of 5 out of 200 eligible papers (among 350 presentations )

• 18 members from 15 organizations discussed the system design

• Five members served as mixers

Secure Voting in Symposiums

Page 5: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

5

SVIS details• NEC offered a mix-net computation library.• Have newly developed software for user Interface.• Mixer’s applications run on Windows XP only.• Encryption software written in Java 1.6.• 159 votes were collected & tallied. (3/4 of registered voters)• Due to Java version mismatch, 3 votes failed to receive.• Voter verification was based on ID/passwd distributed in a p

aper envelope at the registration.• Similar (but improved) voting system is to be used in Comp

uter Security Symposium this year and hopefully next year SCIS.

• Can try Japanese Interface at https://svis.z.nitech.ac.jp/Digishuff_vote/Digishuff_Top_Action(after installing Sun’s Java 1.6)

Secure Voting in Symposiums

Page 6: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

6

Implications to IACR voting

• User authentication means would be the largest issue to debate among project members.

• Suggestions for typical voting environment in various parts of the world would be necessary.

• Experts on running web sites securely and stably is a must. (May need budgets for the professional service)

• Designing the system comparative to a conventional IACR voting with physical mail would help deciding the security policy. One can claim thus it is different from national election systems where physical mail procedure do not exist.

• NEC is willing to offer the library if necessary.

Page 7: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

7

NEC mix-net library (digishuff)• based on FC02 scheme.

– Furukawa, Miyauchi, Mori, Obana, Sako: An Implementation of a Universally Verifiable Electronic Voting Scheme based on Shuffling. Financial Cryptography 2002

• has 4 yrs experience in bind voting system in private organizations, held 5-6 times a year, with more than 22,000 voters.

• The source code may be dis- closed to limited members under NDA.

• Use of NEC library would help speed up the development since the testing and debugging the computation is the most time-consuming part.

Page 8: 1 Kazue’s Proposal 2008.8.19 2:00PM(CA) 8.20 6:00AM (Japan) Kazue Sako

8

Conclusion

• I propose to carry a project where multiple members from different background cooperate not only in evaluating, but also throughout designing the system.

• I personally would like to take part in the project with my experiences with SVIS project and voting in private organizations.

• Use of NEC library is optional.