+

Security Requirements
!!The security requirements for this system span all aspects of the voting
process and include voter authenticity, voter anonymity, data confidentiality,
data integrity, system accountability, system integrity, system availability, sy
stem assurance, and system reliability
An individual not registered to vote must not be able to cast a ballot
A voter must not be able to vote more than once
The privacy of the vote has to be guaranteed during the casting, transfe
r, reception, collection, and tabulation of votes
No voter should be able to prove that they voted in a certain way
None of the participants involved in the voting process (organizers, ele
ction officials, trusted third parties, voters, etc) should be able to link a vo
te to an identifiable voter
Each vote is recorded precisely as the voter intended
!!Each voter is ensured a "clean slate" of the system to ensure equality,
confidence, and minimize system tampering
The outcome of the voting process must correspond to the votes cast
It should be infeasible to exclude a valid vote from the tabulation, and
to validate a non-valid one
System and voter operations are logged and audited
The system cannot be re-configured during operation
Access to voted ballots is prohibited until after the close of the polls
Additional ballots cannot be cast once the polling place has closed
The system must be open to independent inspection and auditing
The system is protected against accidental and malicious denial of servi
ce attacks
+ Privacy: the voting system has to protect privacy, concealing the relation bet
ween voter and his/her cast vote, and ensuring that the voter's choice will rema
in anonymous. This requirement must be fulfilled once the voter has cast his/her
vote and must be preserved during the counting processes.
+ Integrity: A voting system has to protect the vote against manipulation once i
t is cast and until it is counted. Therefore the channel must to provide measure
s to prevent and/or detect any attempted to change the voter's intent once the v
ote has been cast.
+ Voter Verifiability - Cast as Intended: Voter must have the possibility to ch
eck that his/her vote has been accurately recorded. In the case of remote voting
, this implies the availability to check if the vote received by the election of
ficials and stored in the remote Ballot Box (in a physical or electronic manner)
is the same as cast by the voter. It is important to note that the requirement
cannot conflict with others once.
+ Voter Verifiability - Counted as Cast: In the counted as cast verification, vo
ters must have the possibility to verify the inclusion of his/her vote in the fi
nal tally. It is considered as security improvement.
+ Prevention of Intermediate results: It is important to prevent the disclosure
of intermediate results before the election is closed. This way, or the voters h
ave the same information during the voting stage. This implies that the secrecy
of the vote must be preserved until the tally process.
+ Ballot Box Accuracy: Protection of the ballot box against the addition of bogu
s -not genuine or true (used in a disapproving manner when deception has been at
tempted).- ballots or the elimination of valid ballots is needed. In the case th
at multiple voting is allowed, this measured must guarantee that one vote per vo
ter will be counted.

+ Ease of Use: the voting channel must be easy to use by average voters. In remo
te voting this requirement is of paramount importance to prevent disenfranchisem
ent -To disenfranchise is defined as to take away someone's right to vote or to
deprive someone of power, rights and privileges. When certain segments of the po
pulation are deprived of their right to vote or of a position of power in societ
y, this is an example of a time when you disenfranchise that segment of society.
- and facilitate the participation of voters.
+ Correctness: All input votes are correctly counted and no other votes are coun
ted
+ Robustness: The counting tolerates the corrupt or faulty behavior of any group
of authorities up to a threshold.