A conceptual approach to secure electronic elections based on patterns

Electoral processes are complex and need to be secure, reliable, and auditable. It is then important to define ways to evaluate their functional completeness and correction as well as their security and reliability. Many solutions to specific aspects of voting have been proposed but we do not know of any holistic view of this process. We present a unified approach to elections based on a conceptual model built using software patterns. A set of analysis patterns describe the structure and management of an election. The patterns describe voter registration, ballot structure, election day management, voting process, and the complete election. A conceptual model is built from the analysis patterns and defines precisely the functional properties of such a system together with its security requirements. The conceptual model is defined using UML diagrams that can be extended or complemented with formal methods to make the system verifiable. We show how to continue to the design phase for this system. While the model will not apply exactly to all elections it can be used as a reference architecture for voting applications and to show explicitly the security considerations for these kind of events. It can also be used for existing elections to verify that they have the required security provisions. The model can also be used as a reference for researchers to integrate their solutions in the complete process.

► We present a unified approach to elections based on a conceptual model built using software patterns.
► We showed how to analyze systematically its security threats in order to define its security requirements.
► A set of analysis patterns describe the structure and management of an election.
► Our approach to security defines the needed security mechanisms considering threats and policies.