基于零知识证明的智能合约投票系统设计与实现  

Design and implementation of a smart-contract voting system based on zero-knowledge proof

作　　者：殷红建 朱岩[1] 王静 郭光来 陈娥 YIN Hong-jian;ZHU Yan;WANG Jing;GUO Guang-lai;CHEN E(School of Computer and Communication Engineering,University of Science and Technology Beijing,Beijing 100083,China;Hisense Group,Qingdao 266071,China)

机构地区：[1]北京科技大学计算机与通信工程学院,北京100083 [2]海信集团控股股份有限公司,青岛266071

出　　处：《工程科学学报》2023年第4期632-642,共11页Chinese Journal of Engineering

基　　金：国家科技部重点研发计划资助项目(2018YFB1402702);国家自然科学基金资助项目(61972032)。

摘　　要：作为一种具有法律约束力的程序,智能合约为电子投票系统提供了可信执行平台.然而,由于合约部署在公开透明的区块链上,这将为投票内容的有效性与隐私性带来巨大威胁.为了解决上述问题,基于交互式零知识证明技术设计了智能合约投票系统.首先,提出了一个新的交互式零知识集合成员关系证明协议,使得投票者在不泄露投票内容的前提下,完成对投票内容有效性的验证,从而避免无效选票对投票系统的影响.其次,本文通过智能合约规范语言SPESC对投票合约进行描述并对投票各个阶段的触发条件进行限定,通过将合约以JAR包形式上传至区块链,实现智能合约投票系统的部署和自动化执行.最后,对智能合约投票系统的性能进行分析,实验结果表明该系统投票和计票阶段均可高效实施,为密码协议构造技术与智能合约投票系统的有效结合提供参考.As a legally binding computer program, smart contracts are stored on the blockchain and can be automatically executed according to the contract terms. These features of smart contracts provide a trusted execution environment for the electronic voting system. However, since the contract is deployed on an open and transparent blockchain, this causes a considerable threat to the validity and privacy of the voting content. However, due to the openness of the blockchain network, any node linked to the network can obtain information concerning contract transactions on the chain without restriction, which greatly threatens the validity and privacy of the voting content. To address this problem, a smart-contract voting system has been designed. First, we construct a new interactive zeroknowledge set membership proof protocol(ZSMPP) based on the discrete logarithm problem. Using ZSMPP in the design of the smartcontract voting system, the voter can verify the voting content validity to the initiator without disclosing the voting content itself to avoid the impact of invalid votes. Moreover, we prove that the proposed protocol is complete and has zero knowledge. Second, we describe the voting contract by the specification language of smart-contract(SPESC) and limit the trigger conditions of stages of the voting system through contract terms. By deploying the voting contract to the blockchain as a JAR file, the proposed smart-contract voting system can be automatically executed in accordance with the predefined contract terms. Additionally, we further introduce the execution process and related algorithms of the four stages of the proposed voting system and show the related execution results in the form of contract transactions. Furthermore, we analyzed five security features of the proposed voting protocol. Particularly, the validity of the ballot content is ensured by the zero-knowledge of our protocol, which can prevent invalid votes from affecting the system. The privacy of the ballot ensures that the voting content is u

关 键 词：零知识证明 智能合约 投票系统 同态加密 隐私保护 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]