An electronic voting system proposed by Chiou et al. [1], based on the use of proxy and oblivious signature claims providing privacy to the voters. Herein, it is shown that it has a privacy flaw, i.e., the proxy creator (local government) getting its authority from the central government and not expected to be an attacker, may get understanding for the choices made by the voters, thus, compromising their privacy. The reason for the privacy flaw is indicated. Fix of the privacy flaw based on the use of blind signatures so that no one can now disclose the voter’s choice is proposed at the expense of increasing the number of modular exponentiations to enhance a more secured result.

electronic voting system, privacy flaw, oblivious and proxy signature.

Received: April 2, 2022; Accepted: May 3, 2022; Published: June 9, 2022

How to cite this article: Olalekan E. Ihinkalu and Alexander G. Chefranov, A privacy flaw and its fix for voting system using oblivious and proxy signature, Advances in Computer Science and Engineering 19 (2022), 1-11. http://dx.doi.org/10.17654/0973699922001

This Open Access Article is Licensed under Creative Commons Attribution 4.0 International License

References:

[1] S.-Y. Chiou, T.-J. Wang and J.-M. Chen, Design and implementation of a mobile voting system using a novel oblivious and proxy signature, Security and Communication Networks 2017 (2017), 16 pp. Article ID 3075210.
https://doi.org/10.1155/2017/3075210.
[2] S.-Y. Chiou, Z. Ying and J. Liu, Improvement of a privacy authentication scheme based on cloud for medical environment, Journal of Medical Systems 40(4) (2016), 1-15. Article no. 101.
[3] S.-Y. Chiou, Common friends discovery for multiple parties with friendship ownership and replay-attack resistance in mobile social networks, Wireless Networks 24 (2018), 1055-1069. https://doi.org/10.1007/s11276-016-1382-0.
[4] https://en.wikipedia.org/wiki/RSA_(cryptosystem), last accessed: 02.03.2021.
[5] https://en.wikipedia.org/wiki/Extended_Euclidean_algorithm, last accessed:
02.03.2021.
[6] M. Kifer, A. Bernstein and P. M. Lewis, Database Systems: An Application-Oriented Approach, 2nd ed., Pearson Education Inc., 2006, 1235 pp.