Abstract:Voting plays a central role in bringing crowd wisdom to collective decision making, meanwhile data privacy has been a common ethical/legal issue in eliciting preferences from individuals. This work studies the problem of aggregating individual's voting data under the local differential privacy setting, where usefulness and soundness of the aggregated scores are of major concern. One naive approach to the problem is adding Laplace random noises, however, it makes aggregated scores extremely fragile to new types of strategic behaviors tailored to the local privacy setting: data amplification attack and view disguise attack. The data amplification attack means an attacker's manipulation power is amplified by the privacy-preserving procedure when contributing a fraud vote. The view disguise attack happens when an attacker could disguise malicious data as valid private views to manipulate the voting result. In this work, after theoretically quantifying the estimation error bound and the manipulating risk bound of the Laplace mechanism, we propose two mechanisms improving the usefulness and soundness simultaneously: the weighted sampling mechanism and the additive mechanism. The former one interprets the score vector as probabilistic data. Compared to the Laplace mechanism for Borda voting rule with $d$ candidates, it reduces the mean squared error bound by half and lowers the maximum magnitude risk bound from $+\infty$ to $O(\frac{d^3}{n\epsilon})$. The latter one randomly outputs a subset of candidates according to their total scores. Its mean squared error bound is optimized from $O(\frac{d^5}{n\epsilon^2})$ to $O(\frac{d^4}{n\epsilon^2})$, and its maximum magnitude risk bound is reduced to $O(\frac{d^2}{n\epsilon})$. Experimental results validate that our proposed approaches averagely reduce estimation error by $50\%$ and are more robust to adversarial attacks.

Anonymity Analysis of Electronic Voting

A Survey on the Technology of Anonymity

The Analysis and Enhancement of Voting Behaviors in P2P Networks

An Efficient Blockchain-Based Self-Tallying Voting Protocol with Full-Anonymity

WeVoting: Blockchain-based Weighted E-Voting with Voter Anonymity and Usability

AvecVoting: Anonymous and Verifiable E-voting with Untrustworthy Counters on Blockchain

Attacking Algorithms Against Continuous Queries in LBS and Anonymity Measurement

An Enhanced K-Anonymity Model Against Homogeneity Attack.

An electronic voting scheme based on homomorphic encryption and decentralization

Quantum Anonymous Voting Systems Based on Entangled State

Efficient Electronic Voting System Based on Homomorphic Encryption

An improved and efficient coercion-resistant measure for electronic voting system

Formal Privacy Analysis of an Electronic Voting Scheme

A new secure and practical electronic voting scheme

Towards Everlasting Privacy and Efficient Coercion Resistance in Remote Electronic Voting.

Vulnerability analysis of three remote voting methods

A Write-In Electronic Voting Scheme Based on Ring Signature

Aggregating Votes with Local Differential Privacy: Usefulness, Soundness Vs. Indistinguishability

The Electronic Voting in the Presence of Rational Voters

A Homomorphic LWE-Based Verifiable Electronic Voting System

Information-Theoretically Secure Voting Without an Honest Majority