# US 2014/0156990 A1 · Method and system for the supply of data, transactions and electronic voting

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0156990 A1
- Document ID: US20140156990A1
- Status: Published application
- Kind: A1
- Application number: 14/174,282
- Filed: 2014-02-06
- Published: 2014-06-05
- Earliest claimed: 2001-06-11
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Peter Roy DARE; John OWLETT; Imran F. TYABJI
- Web page: https://patentgrep.com/patent/US20140156990A1

## CPC

- H04L 63/045: {wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14)}
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06Q 20/3829: {involving key management}
- G06Q 50/265: {Personal security, identity or safety}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 2209/463: Electronic voting
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L 2209/608: Watermarking
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A system and a computer program product are disclosed. The system is configured to generate a digital empowerment certificate of a voter. The digital empowerment certificate includes an indication of identification data that uniquely identifies the voter to the authentication body, references to sources for the identification data or the identification data itself, and an indication of a voting key. The system is further configured to sign the digital empowerment certificate with an electronic signature of the voter. Moreover, the system is configured to generate a voting message including a vote of the voter. In addition, the system is configured to generate a signature block combining the digital empowerment certificate and the voting message. Furthermore, the system is configured to send the encrypted digital empowerment certificate, the encrypted voting message, and the signature block to the authentication body.

## Claims

### Claim 1

A system for electronic voting including an authentication body, a counting body, and a plurality of voters, the system comprising one or more computing devices configured to:
generate a digital empowerment certificate of a voter, the digital empowerment certificate including:
an indication of identification data that uniquely identifies the voter to the authentication body,
references to one or more sources for the identification data or the identification data itself, and
an indication of a voting key;
sign the digital empowerment certificate with an electronic signature of the voter;
encrypt the digital empowerment certificate using a key of the authentication body only;
generate a voting message including a vote of the voter;
encrypt the voting message using a key of the counting body only;
generate a signature block combining the digital empowerment certificate and the voting message; and
send the encrypted digital empowerment certificate, the encrypted voting message, and the signature block to the authentication body.

### Claim 2 (depends on 1)

The system as claimed in claim 1, wherein the one or more computing devices are further configured to:
receive confirmation of the identification data from an external source; and
the digital empowerment certificate includes:
an indication of the identification data,
confirmation of the voter's right to vote, and
references to one or more sources that can provide the identification data and the confirmation.

### Claim 3 (depends on 1)

The system as claimed in claim 1, wherein the voting message includes an identifier applied by the voter to identify his vote.

### Claim 4 (depends on 1)

The system as claimed in claim 1, wherein the voting message includes a random spoiler.

### Claim 5 (depends on 1)

The system as claimed in claim 1, wherein the one or more computing devices are further configured to combine the digest of the encrypted digital empowerment certificate and the digest of the encrypted voting message to form an integrity block.

### Claim 6 (depends on 5)

The system as claimed in claim 5, wherein the one or more computing devices are further configured to:
generate a digest of the integrity block; and
encrypt the digest of the integrity block.

### Claim 7 (depends on 6)

The system as claimed in claim 6, wherein the encrypting the digest of the integrity block comprises encrypting the digest of the integrity block using a private key of a public/private key pair of the voter, wherein the public/private key pair is also used to encrypt the signature block.

### Claim 8 (depends on 1)

The system as claimed in claim 1, wherein the voting key is a public key of the public/private signature key pair that the voter used for voting.

### Claim 9 (depends on 1)

The system as claimed in claim 1, wherein the one or more computing devices are further configured to:
decrypt the digital empowerment certificate;
obtain the voting key;
decrypt the signature block;
combine the encrypted digital empowerment certificate and the encrypted voting message using the same method as the voter; and
compare a result of combining the encrypted digital empowerment certificate and the encrypted voting message with the decrypted signature block.

### Claim 10 (depends on 1)

The system as claimed in claim 1, wherein a serial number for the voter is issued by the authentication body.

### Claim 11 (depends on 10)

The system as claimed in claim 10, wherein the one or more computing devices are further configured to:
generate a message of the authentication body including:
the voter's serial number,
a digest of the digital empowerment certificate,
the voting key,
encrypt the message of the authentication body using a key of the authentication body.

### Claim 12 (depends on 11)

The system as claimed in claim 11, wherein the one or more computing devices are further configured to send from the authentication body, to the counting body, the message of the authentication body, the encrypted voting message, and the signature block.

### Claim 13 (depends on 12)

The system as claimed in claim 12, wherein the one or more computing devices are further configured to:
decrypt the message of the authentication body;
confirm that the voting message is an unchanged original vote which has been assigned a serial number by the authentication body based on the digest of the encrypted digital empowerment certificate and the voting key.

### Claim 14 (depends on 13)

The system as claimed in claim 13, wherein the one or more computing devices are further configured to decrypt and record the vote of the user.

### Claim 15 (depends on 1)

The system as claimed in claim 1, wherein the digital empowerment certificate includes the identification data itself and the assertion of the identification data by the voter is sufficient.

### Claim 16 (depends on 1)

The system as claimed in claim 1, wherein both the identification data and the indication of the identification data and references are included in the digital empowerment certificate.

### Claim 17 (depends on 1)

The system as claimed in claim 1, wherein the identification data includes one or more of: a name, an address, a date of birth, a nationality; a length of residence, and a non-membership of prohibited classes of the voter.

### Claim 18 (depends on 1)

The system as claimed in claim 1, wherein the digital empowerment certificate is encrypted using a public key of a public/private confidentiality key pair of the authentication body.

### Claim 19 (depends on 1)

The system as claimed in claim 1, wherein the encrypting the voting message comprises encrypting the voting message a public key of a public/private confidentiality key pair of the counting body.

### Claim 20

A computer program product comprised of computer readable program code stored on one or more computer readable storage devices that, when executed by one or more computing devices, cause the one or more computing devices to:
generate a digital empowerment certificate, the digital empowerment certificate including:
an indication of identification data that uniquely identifies the voter to the authentication body,
references to one or more sources for the identification data or the identification data itself, and
an indication of a voting key;
sign the digital empowerment certificate with an electronic signature of the voter;
encrypt the digital empowerment certificate using a key of the authentication body only;
generate a voting message including a vote of the user;
encrypt the voting message using a key of the counting body only;
generate a signature block combining the digital empowerment certificate and the voting message; and
send the encrypted digital empowerment certificate, the encrypted voting message and the signature block to the authentication body.