Method and system for secure computer moderated voting

An improved method of electronic voting, comprising:

• (a) providing a data processing system under the control of a voter;
• (b) providing an authentication server data processing system;
• (c) providing a results server data processing system;
• (d) electronically communicating at least the following among said data processing system under control of said voter, said authentication server, and said results server:
• (1) a request for a ballot;
• (2) an electronic ballot;
• (3) a completed ballot;
• (e) utilizing a plurality of cryptographic functions in order to allow access by said authentication server to information which identifies said voter;
• (f) utilizing a plurality of cryptographic functions in order to prevent access by said authentication server to information contained in said completed ballot;
• (g) utilizing a plurality of cryptographic functions to prevent access by said results server to information which identifies said voter;
• (h) utilizing a plurality of cryptographic functions to allow access by said results server to the content of said completed ballot;
• and
• (i) removing the content of said completed ballot, if it is determined that said voter is ineligible to vote, without allowing access to the content to said completed vote by said authentication server, and without allowing access to information identifying said voter by said results server.

An apparatus for allowing electronic voting, comprising:

• (a) a distributed data processing system;
• (b) a plurality of sets of data processing instructions within said distributed data processing system including at least the following routines:
• (1) a ballot request routine for allowing a voter to request an electronic ballot;
• (2) a ballot dispensation routine for issuing an electronic ballot to said voter after said voter's identity has been authenticated;
• (3) a ballot receiving routine for allowing receipt of a completed electronic ballot from said voter and recordation of the completed vote to prevent the issuance of additional ballots to said voter, in a manner which maintains the content of said completed ballot confidential;
• (4) a ballot tabulation routine which allows tabulation of the content of said completed ballot in a manner which preserves the confidentiality of the voter's identity;
• and
• (5) a challenge routine which allows the content of a completed ballot for an ineligible voter to be removed from the vote tabulation without revealing the identity of the voter or the content of said completed ballot;
• and
• (6) a correction routine which allows an eligible voter to delete the content of an erroneous completed ballot and substitute it with the content of a correct completed ballot, without jeopardizing the privacy of the identity of said voter, or the content of said erroneous completed ballot, and the content of said corrected completed ballot.