Voting Credential Management System for Electronic Voting Privacy

Electronic voting requires voting privacy to protect the voter anonymity. We present a novel design framework for credential management called Voting Credential Management System (VCMS) which preserves voting privacy against advanced attackers who do not only monitor the voting transactions and communications but are also capable of compromising an authority involved in the credential management and generation. Such requirement against the advanced threat model based on an authority compromise is inspired by the recent attacks in voting privacy and is adopted in the state of the art credential management systems. VCMS achieves such properties by building on the well-established cryptographic primitives and by separating the voting token (the VCMS output credential used for the voting) and the intermediate key token (which is used within VCMS and bridges the registration/certificate with the voting token). VCMS is specifically applicable to electronic voting and is simpler than other sophisticated credential management systems achieving comparable security properties.