BP-Vot: Blockchain-Based e-Voting Using Smart Contracts, Differential Privacy, and Self-Sovereign Identities

Election is the key process typically utilized for maintaining democracy in a given society. Recent technological advancements, such as Blockchain (BC), have been already deployed in previous works to realize non-conventional e-Voting systems. The main goal for such proposals is to provide the necessary level of security and reliability, while maintaining transparency, trust, and remote elections. However, the distributed and publicity nature of BC brought new challenges related to privacy and performance trade-off. This paper aims to address these issues by integrating smart contracts for reliability and transparency, Differential Privacy for enhancing vote anonymity, and Self-Sovereign Identities to unlock the potential of the Web3 framework for verifiable credentials and digital identities. Specifically, a novel ( $k,\epsilon $ )-differential privacy mechanism is developed, where a randomly selected candidate is pivoted from which retrievable votes are transferred to other candidates. Final election results are then statistically approximated. We evaluate the proposed methods for different arrival rates (10–80 TX/s), different total numbers of cast votes (10k–50k votes), and different numbers of elected candidates (2–8 candidates). To demonstrate the applicability of our proposal in real-life scenarios, we deploy our SC on a cloud-based permissioned BC network using Hyperledger Besu, with nodes set in Google’s EU and USA data centers. Our experimental results showed that BP-Vot could provide 24% enhancement in latency over state-of-the-art solutions ( $\approx 1$ s/TX compared to 1.24 s/TX). Additionally, using a standardized Min-Max regression mechanism, we show that BP-Vot could provide no less than 98% accuracy in votes approximation during all experiments, with a linearly increasing accuracy trend as a function of the total number of cast votes. Finally, we formally evaluate the proposed differential privacy method and prove that it is robust against reconstruction attacks.