DETECTING COMPROMISED BALLOTS

摘要

A facility for transmitting a ballot choice selected by a voter (301) is described. The facility encrypts the ballot choice (302) with a first secret known only to the client to generate a first encrypted ballot component. The facility also encrypts the ballot choice with a second secret known only to the client (303), the second secret chosen independently of the first secret, to generate a second encry pted ballot component. The facility then generates a proof (304) demonstrating that the first and second encrypted ballot components are encrypted from the same ballot choice. The facility sends the first and second encrypted ballot components and the proof (311) to a vote collection computer system.