{"id":94097,"date":"2020-09-12T19:42:31","date_gmt":"2020-09-12T17:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya"},"modified":"2020-09-12T19:42:31","modified_gmt":"2020-09-12T17:42:31","slug":"obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","title":{"rendered":"Kaug-elektroonilise h\u00e4\u00e4letamise s\u00fcsteemi anon\u00fc\u00fcmsuse protseduuri \u00fclevaade","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Uues eelmistest postitustest<\/a><\/noindex> me peatusime selle juures, et meie uuritavas kaug-elektroonilise h\u00e4\u00e4letamise s\u00fcsteemis, tagades h\u00e4\u00e4letamise saladuse ja valija anon\u00fc\u00fcmsuse, kasutatakse kr\u00fcptograafilist algoritmi \u201epime elektrooniline allkiri\u201c. Selles artiklis vaatleme seda l\u00e4hemalt.<\/p>\n

Esialgu p\u00f6\u00f6rdume tuntud ja tuttava elektroonilise allkirja algoritmi poole, mida rakendatakse laialdaselt erinevatel eesm\u00e4rkidel info s\u00fcsteemides. Elektroonilise allkirja aluseks on as\u00fcmmeetrilise kr\u00fcptograafia algoritmid. As\u00fcmmeetriline kr\u00fcptograafia on kr\u00fcptograafia, kus kasutatakse kahte v\u00f5tit: \u00fcks neist kasutatakse kr\u00fcpteerimiseks ja teine dekr\u00fcpteerimiseks. Neid nimetatakse avalikuks (public) ja salajaseks (private) veebiks. Avalik v\u00f5ti on tuttav teistele, samas kui salajane hoitakse ainult elektroonilise allkirja omaniku valduses ja on teistele k\u00e4ttesaamatu.<\/p>\n

Allkirjastamisel toimub j\u00e4rgnev: k\u00f5igepealt muudetakse elektrooniline dokument matemaatiliste transformatsioonide abil kindla suurusega s\u00fcmbolite j\u00e4rjestikuseks - seda nimetatakse r\u00e4si funktsiooniks. <\/p>\n

Saadud s\u00fcmbolite j\u00e4rjestikune (dokumendi r\u00e4si) on dokumentide saatja poolt kr\u00fcpteeritud salajase v\u00f5ti abil ning saadetakse koos avaliku v\u00f5tmega saajale. Saaja dekr\u00fcpteerib saadud s\u00fcmbolite j\u00e4rjestiku avaliku v\u00f5tmega, rakendab dokumendile t\u00e4pselt sama r\u00e4si funktsiooni ja v\u00f5rdleb transformatsiooni tulemust dekr\u00fcpteerimise tulemustega. Kui k\u00f5ik sobib, siis dokumendis ei olnud muudatusi p\u00e4rast saatja allkirjastamist.
\n<\/a><\/noindex>
\nK\u00e4esolevad toimingud v\u00f5imaldavad veenduda, et dokumenti ei ole muudetud, kuid ei v\u00f5imalda veenduda, et saatja on t\u00f5eliselt see, kelleks ta end peab. Seet\u00f5ttu vajame kolmandat osapoolt, kelle usaldavad nii saatja kui ka saaja. Selleks p\u00f6\u00f6rdub saatja dokumendi saatmise eel kolmanda poole poole ja palub tal allkirjastada oma avaliku v\u00f5tme elektroonilise allkirjaga. N\u00fc\u00fcd saadab saatja saajale dokumendi, oma avaliku v\u00f5tme ja kolmanda poole allkirja oma v\u00f5tme kohta. Saaja kontrollib kolmanda poole allkirja avalikku v\u00f5tme suhtes ja usaldab saadud dokumendi allkirja.<\/p>\n

N\u00fc\u00fcd liigume edasi sellele, mis on \"pime allkiri\" ja kuidas see v\u00f5ib meid aidata anon\u00fc\u00fcmsuse tagamisel.<\/p>\n

Kujutame ette, et eelnevalt kirjeldatud n\u00e4ites on saatja - valija, dokument - h\u00e4\u00e4letussedel ning saaja - valimiskomisjon, v\u00f5i nagu me \u00fctlesime, \"h\u00e4\u00e4lte arvestamise ja lugemise komponent\". Kolmandaks osapooleks (valida) on meil \"Valijate loend\". Sel juhul v\u00f5ib protsess areneda j\u00e4rgmiselt.<\/p>\n

\"Kaug-elektroonilise
\n
\nValija genereerib oma seadmes v\u00f5tmepaari - privaatse ja avaliku. Kuna need v\u00f5tmed genereeritakse tema isiklikus seadmes brauseris, on need teada ainult temale. <\/p>\n

Nende v\u00f5tmete abil kirjutab ta h\u00e4\u00e4letussedele alla, et kontrollida selle terviklikkust. Allakirjutatud h\u00e4\u00e4letussedel ja avalik v\u00f5ti saadetakse valimiskomisjonile. Et h\u00e4\u00e4letussedel oleks aktsepteeritud \"Jaotatud ladustamise ja h\u00e4\u00e4ltelugemise\" komponendi poolt, peab see kontrollima, et avalik v\u00f5ti on allkirjastatud valideerija poolt.<\/p>\n

Valideerija (\"Valijate loend\" komponent) allkirjastab avaliku v\u00f5ti ainult p\u00e4rast seda, kui on veendunud, et valija on olemas valijate loendis.<\/p>\n

H\u00e4\u00e4letamise saladuse s\u00e4ilitamise \u00fclesande lahendamiseks ei tohi valija seadmest genereeritud avalik v\u00f5ti olla kellelegi teada. Seega peab valideerija allkirjastama midagi, mida ta ei tunne. See \u00fclesanne n\u00e4ib olevat v\u00f5imatu, kuid siinkohal tulevad appi kr\u00fcptograafilised algoritmid - sel juhul \"pime allkirjastamise\" algoritm.<\/p>\n

Esmalt peab valija seadmes avalik v\u00f5ti olema maskeeritud. Maskeerimine on eraldi matemaatiliste toimingute tegemine kasutaja seadmes. Kujutage ette, et olete m\u00f5elnud mingile juhuslikule numbrile vahemikus 1 kuni 100, seej\u00e4rel m\u00f5elnud teise juhusliku numbri vahemikus 1 kuni 10 ja kolmanda numbri vahemikus 10 kuni 50, algselt m\u00f5eldud number astendatakse teise numbri astmesse ja jagatakse kolmandaga jagamise \u00fclej\u00e4\u00e4gita. Saadud tulemus \u00f6eldakse \u00fcmbritsevatele. Teie ei leia selle algse numbri taastamine olema keeruline, kuna te teate toimingute j\u00e4rjekorda ja oma m\u00f5eldud numbreid. Kuid \u00fcmbritsejad ei suuda seda teha.<\/p>\n

Ava key concealment (blind signature) is performed according to a special cryptographic algorithm. As a result, the validator signs the masked public key, while the original key remains unknown to it. The unique aspect of the algorithm is that the user (voter), upon receiving the signature for the masked key, can reverse the transformations to obtain a valid signature for the original, unmasked key. <\/p>\n

The described algorithm is widely used in secret voting protocols. In the remote electronic voting system, the RSA algorithm with a key length of 4096 bits is currently used for blind signatures.<\/p>\n

In general, the anonymization procedure is outlined as follows.<\/p>\n

    \n
  1. When creating a vote, a separate key pair for the 'validator' is generated, with the public key recorded in the blockchain. A unique key pair is created for each voting event.<\/li>\n
  2. The user is identified in the identity verification system (in this case, in the ESIA) and grants permission for the transfer of their identification data from the identity system to the electronic voting system (PTK DEG).<\/li>\n
  3. The 'Voter List' component of the PTK DEG checks the user's presence in the voter list.<\/li>\n
  4. On the user's device, personal keys are generated \u2013 a private key and a public key, known only to them.<\/li>\n
  5. On the user's device, the public key is masked.<\/li>\n
  6. Along with the identification data and masked public key, the user approaches the 'Voter List' component. <\/li>\n
  7. The component checks again for the user's presence in the list and whether they have received a signature before.<\/li>\n
  8. If all checks are successful, the key is signed.<\/li>\n
  9. The fact of the key being signed is recorded in the blockchain.<\/li>\n
  10. The user unmasks the public key on their device and retrieves the private key, the public key, and the signature on the public key, with all keys being known only to them.<\/li>\n
  11. After this, the user is transferred to the anonymous zone \u2013 to a separate website edg2020.gov.ru, where they cannot be identified (for example, before the transition, they can change or switch their Internet provider, fully changing their IP address). VPN<\/a> The receipt of the ballot will depend solely on whether the 'validator' signature passes the verification and whether such a key has been used previously.<\/li>\n
  12. The receipt of the ballot will depend solely on whether the 'validator' signature passes the verification and whether such a key has been used previously.<\/li>\n<\/ol>\n

    \nEdasi anname algoritmi kirjelduse kr\u00fcptograafia seisukohalt.
    \nAllkiri parameetrid ja m\u00e4rkused:<\/p>\n

    \"Kaug-elektroonilise
    \n\"Kaug-elektroonilise
    \n
    \nM <\/i>\u2013 allkirja jaoks padding FDN formaadis.
    \n
    Allikas:     habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u044b \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u0430\u0439\u043d\u044b \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u00ab\u0441\u043b\u0435\u043f\u043e\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438\u00bb. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0435\u0433\u043e \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u043c\u0441\u044f \u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u043e\u043c\u0443 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \u0412 \u043e\u0441\u043d\u043e\u0432\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94097","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaug-elektroonilise h\u00e4\u00e4letuss\u00fcsteemi anon\u00fc\u00fcmsuse protseduuri \u00fclevaade | ProHoster","description":"Eelnevas v\u00e4ljaandes peatume sellel, et k\u00e4sitletavas kaug-elektroonilise s\u00fcsteemi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f | ProHoster","og:description":"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u044b \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-12T17:42:31+00:00","article:modified_time":"2020-09-12T17:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94097","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:33:44","updated":"2026-02-04 14:42:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=94097"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94097\/revisions"}],"predecessor-version":[{"id":156759,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94097\/revisions\/156759"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/94098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=94097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=94097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=94097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}