VeVote: hardware platform for verifiable electronic voting based on HSM (Hardware Security Module) technology

• Grant number: 15/50614-0
• Support Opportunities: Research Grants - Innovative Research in Small Business - PIPE
• Start date: October 01, 2016
• End date: June 30, 2018
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Agreement: FINEP - PIPE/PAPPE Grant
• Principal Investigator: Conrado Porto Lopes Gouvêa
• Grantee: Conrado Porto Lopes Gouvêa
• Company: Kryptus Segurança da Informação Ltda
• City: Campinas

Abstract

VeVote is a product composed of an electronic voting terminal and a vote accounting server. Both devices will use advanced crypto processors (the CPS) and will count on tamper reaction mechanisms to avoid physical attacks to the system. Currently, this kind of technology is only used in HSMs (Hardware Security Modules), which are used to store and protect highly sensitive cryptographic keys, as in the case of the ASI-HSM (AHX4).As an additional security measure, the voter will be able to verify if his vote was correctly accounted for, following the concept of end-to-end verifiability (E2E-VIV). This method works through the printing of a voting receipt which can be verified online by the voter but does not compromise its secrecy, not allowing coercion. These new features regarding security, verifiability and auditability characterize an innovation and is a voting system that can be used by public and private entities. According to research and interviews conducted by the projects team, there is an immediate demand for this kind of solution in academic institutions (dean election), trade unions (representatives election) and other class related entities. After the product and the voting process reaches a certain level of maturity, it could be used by the Public sector for general elections and large-scale referendums. (AU)