Mr. Furxheir, R.M.W.
Group: admins
(1791 posts total)
(last post: November 24, 2007 - 15:07)
Citizen #20:
Martí- Paìr Furxhéir | > We'll need some sort of solid system for confirming people have voted. Will this system have some sort of voting receipt automatically generated? With maybe a key of some sort that corresponds to some sort of secret algorithm?
Yeah...
Here are my thoughts :
There will be 2 tables for receiving the votes. One will have the Election number, number of the citizen who has voted and a random number.
It will NOT contain date of vote, it will NOT contain the actual vote.
The second table, will contain the actual vote, the election number and a MD5 encrypted string.
The string will be the MD5 sum of the citizen number, election number, vote, the random number in the citizen vote table, and the user password at the time of the vote ( not the MD5 value, the original unencrypted password ).
When a user votes, he will receive via e-mail his random number "vote confirmation".
The Vote report form will list in one table the actual votes, and in another the vote confirmations, without the citizen number.
As such, at anytime during the election, a user will be able to query the system to see if the DB lists their vote. They will be able to get a recall of the confirmation number, and if logged in to the system, his name will show up next to the confirmation number.
At the end of the election, the Name of all voters will show up, instead of their confirmation number.
At any time, the user will be able to confirm their vote is in the DB by going to the vote confirm page, and entering :
- Their user number
- Their confirmation number
- The election number ( it will be a pick list )
- Their vote
- Their password
It will generate a TRUE/FALSE verification, which the user will be able to e-mail to someone we pick ( such as the senior Cort justice ) should there be an audit.
With that system, without the confirmation number ( which the user/DB admin can retrieve at any time ), vote and password ( which only the USER should know ) it is IMPOSSIBLE to retrieve the vote.
Does that answer your questions ? Is it a good system ? Am I missing something ?
Do you like my stupid hair?
Would you guess that I didn't know what to wear?
I'm just scared of what you think
You make me nervous so I really can't eat.
When you smile, I melt inside
I'm not worthy for a minute of your time
|
