(57) A method of effectively providing, with minimum physical limitation, a secure receipt-free
protocol which does not supply a receipt which proves contents of voting action to
a voter. A vote generating center and a converting center generate voting data and
send them to each vote selecting device. Then, each vote selecting device selects
its own vote based on the voting data. When a counting center counts the vote, the
voting data are converted to a new configuration of data or existing voting data and
the correctness of the configuration or the conversion is proved. Further, correspondence
of the configuration or the conversion is sent only to the vote selecting device via
an anti-eavesdropping channel.
|
|
