{"id":94097,"date":"2020-09-12T19:42:31","date_gmt":"2020-09-12T17:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya"},"modified":"2020-09-12T19:42:31","modified_gmt":"2020-09-12T17:42:31","slug":"obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","title":{"rendered":"Prezentarea procedurii de anonimizare a sistemului de vot electronic de la distan\u021b\u0103","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen publica\u021biile anterioare<\/a><\/noindex> Am discutat despre utilizarea unui algoritm criptografic numit \u201esemn\u0103tur\u0103 electronic\u0103 oarb\u0103\u201d pentru asigurarea confiden\u021bialit\u0103\u021bii votului \u0219i anonimiz\u0103rii aleg\u0103torului \u00een sistemul nostru de vot electronic la distan\u021b\u0103. \u00cen acest articol, ne vom aprofunda \u00een detaliile acestuia.<\/p>\n

La \u00eenceput, s\u0103 ne adres\u0103m unui algoritm de semn\u0103tur\u0103 electronic\u0103 cunoscut \u0219i familiar, care este utilizat pe scar\u0103 larg\u0103 \u00een sistemele informa\u021bionale. Semn\u0103tura electronic\u0103 se bazeaz\u0103 pe algoritmi criptografici de criptare asimetric\u0103. Criptarea asimetric\u0103 este un tip de criptare care implic\u0103 utilizarea a dou\u0103 chei: una pentru criptare \u0219i alta pentru decriptare. Ele sunt numite cheie public\u0103 \u0219i cheie privat\u0103. Cheia public\u0103 este cunoscut\u0103 de to\u021bi, iar cheia privat\u0103 este cunoscut\u0103 doar de proprietarul semn\u0103turii electronice \u0219i este p\u0103strat\u0103 \u00eentr-un loc inaccesibil altora.<\/p>\n

La semnare, se \u00eent\u00e2mpl\u0103 urm\u0103toarele: mai \u00eent\u00e2i, documentul electronic este transformat printr-o serie de transform\u0103ri matematice \u00eentr-o secven\u021b\u0103 de simboluri de dimensiune fix\u0103 \u2013 aceasta se nume\u0219te func\u021bie hash. <\/p>\n

Secven\u021ba de simboluri ob\u021binut\u0103 (hash-ul documentului) este criptat\u0103 de c\u0103tre expeditorul documentului folosind cheia privat\u0103 \u0219i \u00eempreun\u0103 cu cheia public\u0103 este trimis\u0103 destinatarului. Destinatarul decripteaz\u0103 secven\u021ba de simboluri folosind cheia public\u0103, aplic\u0103 exact aceea\u0219i func\u021bie hash asupra documentului \u0219i compar\u0103 rezultatul transform\u0103rii cu rezultatul decript\u0103rii. Dac\u0103 totul coincide, atunci documentul nu a fost modificat dup\u0103 ce a fost semnat de expeditor.
\n<\/a><\/noindex>
\nAceste ac\u021biuni descrise permit verificarea c\u0103 documentul nu a fost modificat, dar nu permit confirmarea c\u0103 expeditorul este \u00eentr-adev\u0103r cine pretinde a fi. De aceea, avem nevoie de o a treia parte \u00een care at\u00e2t expeditorul, c\u00e2t \u0219i destinatarul au \u00eencredere. \u00cenainte de a trimite documentul, expeditorul se adreseaz\u0103 acestei ter\u021be p\u0103r\u021bi \u0219i \u00eei solicit\u0103 s\u0103 semneze cheia sa public\u0103 cu semn\u0103tura sa electronic\u0103. Acum, expeditorul trimite destinatarului documentul, cheia sa public\u0103 \u0219i semn\u0103tura ter\u021bei p\u0103r\u021bi asupra cheii sale. Destinatarul verific\u0103 semn\u0103tura ter\u021bei p\u0103r\u021bi asupra cheii publice \u0219i are \u00eencredere \u00een semn\u0103tura ob\u021binut\u0103 a documentului.<\/p>\n

S\u0103 trecem acum la ceea ce este \u00absemn\u0103tura oarb\u0103\u00bb \u0219i cum ne poate ajuta \u00een procesul de anonimizare.<\/p>\n

S\u0103 presupunem c\u0103, \u00een exemplul descris mai sus, expeditorul este un aleg\u0103tor, documentul este un buletin de vot, iar destinatarul este comisia electoral\u0103, sau cum am spus, \u00abcomponenta de \u00eenregistrare \u0219i num\u0103rare a voturilor\u00bb. Ca a treia parte (validatoare), vom avea componenta \u00abLista aleg\u0103torilor\u00bb. \u00cen acest caz, procesul poate decurge astfel.<\/p>\n

\"Prezentarea
\n
\nAleg\u0103torul \u00ee\u0219i genereaz\u0103 pe dispozitivul s\u0103u o pereche de chei \u2013 una privat\u0103 \u0219i una public\u0103. Deoarece aceste chei sunt create pe dispozitivul s\u0103u personal \u00een browser, ele \u00eei sunt cunoscute doar lui. <\/p>\n

Cu aceste chei va semna buletinul de vot pentru a-i verifica integritatea. Buletinul de vot semnat \u00eempreun\u0103 cu cheia public\u0103 este trimis comisiei electorale. Pentru ca buletinul de vot s\u0103 fie acceptat de componenta \u00abStocare distribuit\u0103 \u0219i num\u0103rare a voturilor\u00bb, trebuie s\u0103 verifice c\u0103 cheia public\u0103 este semnat\u0103 de validator.<\/p>\n

Validatorul (componenta \u00abLista aleg\u0103torilor\u00bb) va semna cheia public\u0103 numai dup\u0103 ce se va asigura c\u0103 aleg\u0103torul este prezent \u00een lista aleg\u0103torilor.<\/p>\n

Pentru a p\u0103stra secretul votului, cheia public\u0103 a aleg\u0103torului, creat\u0103 pe dispozitivul s\u0103u, nu trebuie s\u0103 fie cunoscut\u0103 de nimeni. A\u0219adar, validatorul trebuie s\u0103 semneze ceva ce nu \u00eei este cunoscut. Aceast\u0103 sarcin\u0103 pare imposibil de realizat, dar cryptographic algorithms \u2013 \u00een acest caz, algoritmul \u00absemn\u0103turii oarbe\u00bb vin \u00een ajutor.<\/p>\n

Mai \u00eent\u00e2i, pe dispozitivul aleg\u0103torului, cheia public\u0103 trebuie s\u0103 fie mascat\u0103. Mascararea presupune efectuarea unor calcule matematice pe dispozitivul utilizatorului. Imagineaz\u0103-\u021bi c\u0103 ai g\u00e2ndit un num\u0103r aleatoriu de la 1 la 100, apoi ai g\u00e2ndit un alt num\u0103r aleatoriu de la 1 la 10 \u0219i un al treilea, de la 10 la 50, num\u0103rul ini\u021bial fiind ridicat la puterea num\u0103rului secund \u0219i \u00eemp\u0103r\u021bit f\u0103r\u0103 rest la al treilea. Rezultatul ob\u021binut este comunicat celor din jur. Nu \u00ee\u021bi va fi greu s\u0103 restaurezi num\u0103rul ini\u021bial, deoarece \u0219tii secven\u021ba de ac\u021biuni \u0219i numerele pe care le-ai g\u00e2ndit. Dar cei din jur nu vor putea face acest lucru.<\/p>\n

Mecanismul (orbirea) cheii publice se efectueaz\u0103 conform unui algoritm criptografic special. Ca rezultat, validatorul semneaz\u0103 cheia public\u0103 mascat\u0103, f\u0103r\u0103 a avea cuno\u0219tin\u021b\u0103 de cheia ini\u021bial\u0103. \u00cens\u0103 tr\u0103s\u0103tura algoritmului este c\u0103 utilizatorul (votantul), primind semn\u0103tura pe cheia mascat\u0103, poate efectua transform\u0103ri inverse pentru a ob\u021bine o semn\u0103tur\u0103 valid\u0103 \u0219i pentru cheia ini\u021bial\u0103, nemascat\u0103. <\/p>\n

Algoritmul descris este utilizat pe scar\u0103 larg\u0103 \u00een protocoalele de vot secret. \u00cen sistemul de vot electronic la distan\u021b\u0103, \u00een prezent, se folose\u0219te pentru semn\u0103tura oarb\u0103 algoritmul RSA cu o lungime a cheii de 4096 bi\u021bi.<\/p>\n

\u00cen general, procedura de anonimizare arat\u0103 astfel.<\/p>\n

    \n
  1. La crearea votului, se genereaz\u0103 o pereche de chei separat\u0103 pentru \"validator\", iar cheia public\u0103 este \u00eenregistrat\u0103 \u00een blockchain. Pentru fiecare vot se creeaz\u0103 o pereche de chei unic\u0103.<\/li>\n
  2. Utilizatorul este identificat \u00een sistemul de identificare (\u00een acest caz, \u00een ESDI) \u0219i ofer\u0103 permisiunea de a transfera datele sale de identificare din sistemul de identificare \u00een PTC DEG.<\/li>\n
  3. Componenta \u201eLista votan\u021bilor\u201d din PTC DEG verific\u0103 dac\u0103 utilizatorul se afl\u0103 \u00een lista votan\u021bilor.<\/li>\n
  4. Pe dispozitivul utilizatorului sunt generate cheile sale personale \u2013 cheia privat\u0103 \u0219i cheia public\u0103, cunoscute doar de el.<\/li>\n
  5. Pe dispozitivul utilizatorului, cheia public\u0103 este mascat\u0103.<\/li>\n
  6. \u00cempreun\u0103 cu datele de identificare \u0219i cheia public\u0103 mascat\u0103, utilizatorul se adreseaz\u0103 componentului \u201eLista votan\u021bilor\u201d. <\/li>\n
  7. Componenta verific\u0103 din nou dac\u0103 utilizatorul se afl\u0103 \u00een list\u0103 \u0219i dac\u0103 nu a primit semn\u0103tura anterior.<\/li>\n
  8. Dac\u0103 toate verific\u0103rile sunt reu\u0219ite, se efectueaz\u0103 semnarea cheii.<\/li>\n
  9. Faptul semn\u0103rii cheii este \u00eenregistrat \u00een blockchain.<\/li>\n
  10. Utilizatorul, pe dispozitivul s\u0103u, demascheaz\u0103 cheia public\u0103 \u0219i ob\u021bine cheia privat\u0103, cheia public\u0103 \u0219i semn\u0103tura pe cheia public\u0103, av\u00e2nd astfel toate cheile cunoscute doar de el.<\/li>\n
  11. Dup\u0103 aceasta, utilizatorul este transferat \u00eentr-o zon\u0103 anonim\u0103 \u2013 pe un site separat edg2020.gov.ru, unde nu poate fi identificat (de exemplu, \u00eenainte de tranzi\u021bie, el poate schimba VPN<\/a> sau schimba furnizorul de internet, modific\u00e2nd complet adresa IP).<\/li>\n
  12. Acceptarea buletinului va depinde doar de faptul c\u0103 semn\u0103tura \u201evalidatorului\u201d va trece verificarea \u0219i c\u0103 o astfel de cheie nu a fost utilizat\u0103 anterior.<\/li>\n<\/ol>\n

    \nAici este o descriere a algoritmului din perspectiva criptografiei.
    \nParametrii semn\u0103turii \u0219i denumiri:<\/p>\n

    \"Prezentarea
    \n\"Prezentarea
    \n
    \nM <\/i>\u2013 \u00een formatul padding FDN pentru semn\u0103tur\u0103.
    \n
    Sursa:     habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u044b \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u0430\u0439\u043d\u044b \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u00ab\u0441\u043b\u0435\u043f\u043e\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438\u00bb. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0435\u0433\u043e \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u043c\u0441\u044f \u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u043e\u043c\u0443 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f. \u0412 \u043e\u0441\u043d\u043e\u0432\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94097","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Recenzie a procedurii de anonimizare a sistemului de vot electronic la distan\u021b\u0103 | ProHoster","description":"\u00cen publica\u021biile anterioare ne-am oprit asupra a ceea ce am discutat \u00een sistemul nostru de vot electronic la distan\u021b\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f | ProHoster","og:description":"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u044b \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/obzor-proczedury-anonimizaczii-sistemy-distanczionnogo-elektronnogo-golosovaniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-12T17:42:31+00:00","article:modified_time":"2020-09-12T17:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94097","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:33:44","updated":"2026-02-04 14:42:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=94097"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94097\/revisions"}],"predecessor-version":[{"id":156759,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94097\/revisions\/156759"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/94098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=94097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=94097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=94097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}