Poorvi L. Vora - Research: E2E-V Voting | |
In voting system design, our focus has been on the new class of voting systems known as end-to-end independently verifiable (E2E) voting systems, where voters and observers can audit an election without being required to trust election officials or voting system software. This property is achieved through the use of a digital audit trail made available by the voting system---on a secure bulletin board such as a website---which can be checked by software written by anyone. Thus, while a certain degree of sophistication is necessary in the software used to perform the checks, access to the information and authorship of the software is not restricted. Note that the assumptions of classical cryptographic voting protocols are not valid in this setting: the voter does not trust the machine she votes from, and the voter is not a probabilistic-polynomial-time Turing machine. Our work is distinguished from much other work on E2E-V systems in that our protocols possess the dispute resolution property, where, if a voter observes a problem, she can prove it. |
|
We developed the first non-commercial prototype of an E2E-V system (Citizen-Verified Voting, WOTE II 2004, of Chaum's "visual cryptography'' scheme), organized the first workshop on the evaluation of voting systems, VSRW 2006, participated in the development and deployment of (a) the first E2E-V system with ballot privacy ever used in a governmental election, Scantegrity, (b) the first accessible prototype of an E2E-V system, Audiotegrity and (c) the first prototype of an E2E-V remote voting system, Remotegrity. Our most recent work proposes a remote E2E-V voting system, Apollo, that addresses the credential stealing attack; note, however, that much work remains before internet voting is secure enough for use in governmental elections. | |
Our work in voting has been both constructive and analytical. | |
Constructive Contributions: Doctoral student Ben Hosp led the development of what might be the first non-commercial prototype of an E2E-V system (Citizen-Verified Voting, WOTE II 2004, of Chaum's "visual cryptography'' scheme). Doctoral student Stefan Popoveniuc (co-guided with David Chaum and Jonathan Stanton; first with NIST, then Amazon and now at Google) was a key member of the Scantegrity team, see [19,13] for descriptions of Scantegrity I and II respectively. The City of Takoma Park used Scantegrity II to hold the world's first governmental secret ballot E2E-V election in November 2009, see [9,10]. Takoma Park used Remotegrity [6] (remote E2E voting, led by then post-doctoral scientist Filip Zagórski, now faculty member at Wroclaw Institute of Technology, Poland) and Audiotegrity [5] (accessible E2E-V voting, led by then undergraduates Tyler Kaczmarek and John Wittrock, see undergraduate presentations) for the municipal election of 2011. Collaborating with Chaum, my research group also proposed the use of an untrusted computational assistant in the voting booth [7]; the protocols were prototyped by (then) undergraduates Alex Florescu and Jan Rubio. More recently, doctoral student Hua Wu, now at Google, led our work on Apollo [1,3], a remote voting system that addresses the credential stealing attack. | |
Analytical Contributions: Ben Hosp proposed information-theoretic measures for voting systems, and demonstrated related impossibility results [17]. Stefan Popoveniuc proposed an overall framework for looking at the many different cryptographic voting systems that used paper ballots [12]. After his doctorate, he proposed a concrete definition of E2E systems [11]. With Lana Lowry at NIST, I proposed high-level definitions for desired properties of voting systems [14]. | |
I have also worked with others in trying to present the properties of E2E-V systems to a non-technical audience [4], and to review the open problems remaining in voting system security [2]. | |
My voting research has been sponsored in part by NSF Awards 1421373 , 1137973, 0937267, 0831149, 0505510 and the Maryland Procurement Office under contract H98230-14-C-0127.
[17, 22] are also listed as part of my applied information theory research. |
|
|