Secure student representative council voting system using cryptographic mechanisms.

(1)

SECURE STUDENT REPRESENTATIVE COUNCIL VOTING SYSTEM USING CRYPTOGRAPHIC MECHANISMS

WONG LAM SHEN

FACULTY OF INFORMATION AND COMMUNICATION TECHNOLOGY UNIVERSITI TEKNIKAL MALAYSIA MELAKA

(2)

BORANG PENGESAHAN STATUS TESIS

JUDUL: SECURE STUDENT REPRESENTATIVE COUNCIL VOTING SYSTEM USING CRYPTOGRAPHIC MECHANISMS

SESI PENGAJIAN: SESI 2013/2014

Saya WONG LAM SHEN mengaku membenarkan tesis (PSM/Sarjana/Doktor Falsafah) ini disimpan di Perpustakaan Fakulti Teknologi Maklumat dan Komunikasi dengan syarat-syarat kegunaan seperti berikut:

1. Tesis dan projek adalah hakmilik Universiti Teknikal Malaysia Melaka.

2. Perpustakaan Fakulti Teknologi Maklumat dan Komunikasi dibenarkan membuat salinan untuk tujuan pengajian sahaja.

3. Perpustakaan Fakulti Teknologi Maklumat dan Komunikasi dibenarkan membuat salinan tesis ini sebagai bahan pertukaran antara institusi pengajian tinggi.

4. ** Sila tandakan (/)

_____________ SULIT (Mengandungi maklumat yang berdarjah keselamatan atau kepentingan Malaysia seperti yang termaktub di dalam AKTA RAHSIA RASMI 1972)

_____________ TERHAD (Mengandungi maklumat TERHAD yang telah ditentukan oleh organisasi/badan di mana penyelidikan dijalankan)

_____/_______ TIDAK TERHAD

__________________________ ___________________________ (TANDATANGAN PENULIS) (TANDATANGAN PENYELIA) Alamat tetap :

111B-4-10, Jalan Bukit Penara, 11000 Balik Pulau, Pulau Pinang.

Tarikh : __________________________ Tarikh: _____________________ Dr. Shekh Faisal Abdul Latip

(3)

SECURE STUDENT REPRESENTATIVE COUNCIL VOTING SYSTEM USING CRYPTOGRAPHIC MECHANISMS

WONG LAM SHEN

This report is submitted in partial fulfillment of the requirement for the Bachelor of Computer Science (Computer Networking)

FACULTY OF INFORMATION AND COMMUNICATION TECHNOLOGY UNIVERSITI TEKNIKAL MALAYSIA MELAKA

(4)

DECLARATION

I hereby declare this project report entitled

SECURE STUDENT REPRESENTATIVE COUNCIL VOTING SYSTEM USING CRYPTOGRAPHIC MECHANISMS

is written by me and is my own effort and that no part has been plagiarized without citations.

STUDENT :_____________________________ Date:_____________ (WONG LAM SHEN)

SUPERVISOR:_____________________________ Date:_____________ (DR. SHEKH FAISAL ABDUL LATIP)

(5)

DEDICATION

To my beloved parents, my whole family, my supportive supervisors, Dr. Shekh Faisal Abdul Latip, my evaluator, PM Dr. Rabiah Ahmad and all my understandable friends, thank you for the support and guidance given throughout the completion of my PSM.

(6)

iii

ACKNOWLEDGEMENTS

I would like to show my gratitude and appreciation to my supervisor, Dr. Shekh Faisal Abdul Latip for all the ideas and advices in guiding me throughout the project. I would also like to thank my family members especially my parents because they have given me the greatest support in all sorts of materials throughout my years of studying in this university.

Last but not least, I would like to thanks to all my friends and course mates for their kindness in sharing knowledge and resources.

(7)

iv ABSTRACT

The project that had been developed is going to be concerning about the voting system of UTeM student representative election. The project will be known as the Electronic Voting System. This report contains the introduction, methodology, analysis, design, implementation, testing, and project conclusion of the project. The project methodology, used is Rapid Application Development model (RAD). The problem statement of this project is difficult to avoid the appearance of the ghost voters during the election time and the information of ballots and voters are easily exposed because the current voting system is not secure. This electronic voting system is going to be online using Internet and can be access by all UTeM students. This system is developed by using HTML and PHP as the programming language and Wamp server as the database. To develop the system, designs had been made that covers the system architecture, user interfaces and database design. This project offers the voters to cast easily through internet. The database also makes the ballots counting become faster, easily and accurately.

(8)

v ABSTRAK

Projek yang telah yang akan dibuatkan berkaitan tentang sistem pilihan raya wakil pelajar UTeM. Projek ini akan dikenali sebagai Sistem Pengundian Elektronik. Laporan ini mengandungi pengenalan, metodologi, analisis, reka bentuk, pelaksanaan, pengujian, dan kesimpulan projek. Metodologi projek, yang digunakan ialah model Rapid Pembangunan Aplikasi (RAD). Pernyataan masalah projek ini adalah sukar untuk mengelakkan kemunculan pengundi hantu semasa pilihan raya dan maklumat undi dan pengundi mudah terdedah kerana sistem pengundian semasa tidak selamat. Sistem pengundian elektronik akan menggunakan kemudahan Internet dan boleh diakses oleh semua pelajar UTeM. Sistem ini dibangunkan dengan menggunakan HTML dan PHP sebagai bahasa pengaturcaraan dan Wamp server sebagai pangkalan data. Reka bentuk telah dibuat untuk membangunkan system yang merangkumi seni bina sistem, antara muka pengguna dan reka bentuk pangkalan data. Projek ini menawarkan pengundi untuk mengundi dengan mudah melalui internet. Pangkalan data ini juga membuat undi menerusi pengiraan menjadi lebih cepat, mudah dan tepat.

(9)

TABLE OF CONTENTS

DECLARATION i

DEDICATION ii

ACKNOWLEDGEMENTS iii

ABSTRACT iv

ABSTRAK v

TABLE OF CONTENTS vi

LIST OF TABLES x

LIST OF FIGURES xi

INTRODUCTION 1

1.1 Project Background 1

1.2 Problem Statement 2

1.3 Objective 3

1.4 Scope 3

1.5 Project Contribution 4

1.6 Report Organization 5

1.7 Summary 6

LITERATURE REVIEW 7

(10)

vii

2.2 Student Representative Council 8

2.2.1 Background of UTeM Student Representative Council 9

2.3 Previous Projek Sarjana Muda 10

2.4 Voting System 11

2.4.1 Current Voting System 11

2.5 Cryptographic Mechanisms 12

2.5.1 Usage of Cryptography 12

2.5.2 RSA Cryptography 13

2.5.3 Digital Signature 15

2.5.4 Digital Signature (Basic Principle) 15

2.5.5 Generating a Digital Signature 15

2.5.6 Verify a Digital Signature 16

2.5.7 Architecture of Digital Signature 16

2.6 Summary 17

METHODOLOGY 18

3.1 Introduction 18

3.2 Project Methodology 18

3.2.1 Phase I: Analysis & Quick Design 19

3.2.2 Phase II: Prototyping Cycles 20

3.2.3 Phase III: Testing 20

3.2.4 Phase IV: Implementation 20

3.3 Project Requirement 21

3.3.1 Security Requirement 21

3.3.1.1 Aunthentication 21

3.3.1.2 Confidentiality 21

3.3.1.3 Integrity 22

3.3.2 Software Requirement 22

3.3.3 Hardware Requirement 23

3.4 Project Schedule and Milestones 24

(11)

viii

ANALYSIS 27

4.1 Introduction 27

4.2 Problem Analysis 27

4.3 Requirement Analysis 28

4.3.1 Data Requirement 28

4.3.1.1 Admin table 28

4.3.1.2 Ballot table 29

4.3.1.3 Voters table 29

4.3.1.4 Candidates table 30

4.3.2 Functional Requirements 30

4.3.2.1 Login Module 30

4.3.2.2 Voter Management Module 30

4.3.2.3 Admin Management Module 31

4.3.2.4 Flowchart 31

4.3.3 Non-functional Requirements 34

4.3.3.1 Performance 34

4.3.3.2 Security 34

4.4 Summary 34

DESIGN 35

5.1 Introduction 35

5.2 Suggestion Electronic Voting System 35

5.3 High-Level Design 37

5.3.1 System Architecture 37

5.3.2 User Interface Design 38

5.3.2.1 Navigation Design 38

5.3.2.2 Input Design 39

5.3.2.3 Output Design 40

5.3.3 Database Design 60

5.3.3.1 Conceptual and Logical Database Design 60

5.4 Detailed Design 61

5.4.1 Software Design 61

5.4.2 Physical Database Design 65

(12)

5.4.2.2 Create table “Admin” 66

5.4.2.3 Create table “Student” 66

5.4.2.4 Create table “Candidate” 67

5.4.2.5 Create table “Ballot” 67

5.5 Summary 68

IMPLEMENTATION 69

6.1 Introduction 69

6.2 Software Development Environment Setup 69

6.3 Software Configuration Management 70

6.3.1 Configuration Environment Setup 70

6.4 Summary 71

TESTING 72

7.1 Introduction 72

7.2 Test Plan 73

7.2.1 Test Organization 73

7.2.2 Test Environment 73

7.2.3 Test Schedule 74

7.3 Test Strategy 75

7.3.1 Classes of Test 75

7.4 Test Design 76

7.4.1 Test Description 76

7.4.2 Test Data 77

7.5 Test Result and Analysis 77

7.6 Summary 78

PROJECT CONCLUSION 79

8.1 Introduction 79

8.2 Observation on Weakness and Strengths 79

8.3 Propositions for Improvement 80

8.4 Contribution 81

(13)

LIST OF TABLES

TABLE TITLE PAGE

Table 3.1 Software Requirement 22

Table 3.2 Gantt Chart 23

Table 3.3 Milestones 24

Table 4.1 Admin Table 26

Table 4.2 Ballot Table 26

Table 4.3 Voters Table 27

Table 4.4 Candidates Table 27

Table 5.1 Input Design 36

Table 5.2 Conceptual, Logical and Physical Database Design 54

Table 5.3 Student Login Algorithm 55

Table 5.4 Student Digital Signature Algorithm 56

Table 5.5 Administrator Login Algorithm 57

Table 5.6 Administrator Registration Algorithm 57

Table 5.7 Student Registration Algorithm 58

Table 5.8 Candidate Registration Algorithm 59

Table 7.1 Requirement of the Test Environment 73

Table 7.2 Test Schedule 74

Table 7.3 Classes of Test 75

Table 7.4 List of Testers 77

(14)

LIST OF FIGURES

FIGURE TITLE PAGE

Figure 2.1 Literature Review Phase 7

Figure 2.2 The Current Process Flow of the SRC Voting System 11

Figure 2.3 Digital Signing and Verification 16

Figure 3.1 Rapid Application Development Model 19

Figure 3.2 Gantt Chart 23

Figure 4.1 Voter Flowchart 29

Figure 4.2 Admin Flowchart 30

Figure 5.1 System Architecture 34

Figure 5.2 Navigation Design 35

Figure 5.3 Main Menu of the Voting System 37

Figure 5.4 Student Login Form 37

Figure 5.5 Invalid Student ID or Password 38

Figure 5.6 Force to Change Passwword 38

Figure 5.7 Password Changed 38

Figure 5.8 Student Login after Changed Password 39

Figure 5.9 Student Main Interface 39

Figure 5.10 Public Key and Private Key 40

Figure 5.11 Voting Interface 41

Figure 5.12 Insert Private Key 42

Figure 5.13 Inserting Wrong Private Key 42

Figure 5.14 Wrong Private Key 43

(15)

xii

Figure 5.16 Ballot Submitted 44

Figure 5.17 Private Key has been used 44

Figure 5.18 Invalid Private Key 45

Figure 5.19 Invalid Ballot from Student 45

Figure 5.20 Admin Login Form 46

Figure 5.21 Admin Main Interface 46

Figure 5.22 Admin Registration Form 47

Figure 5.23 Admin Account Successfully Created 47

Figure 5.24 Student Registration Form 48

Figure 5.25 Student Account Successfully Created 48

Figure 5.26 View and Delete Student 49

Figure 5.27 Student Deleted 49

Figure 5.28 Add Candidate Form 50

Figure 5.29 Candidate Successfully Added 50

Figure 5.30 View and Delete Candidate 51

Figure 5.31 Candidate Deleted 52

Figure 5.32 Ballots Status 52

Figure 5.33 View Vote Information and Result 53

Figure 5.34 View Students’ Votes 54

Figure 5.35 Insert a Valid Master Key 54

Figure 5.36 View All Decrypted Votes 55

(16)

1 CHAPTER I

INTRODUCTION

1.1 Project Background

The word "vote" means to choose from a list, to elect or to determine the ideal candidate based on the voter judgement. The main goal of voting is to come out with leaders of the voter's choice. Some of the problems that involved are needed to queue up for a long time, insecure or inaccessible polling stations, problems of counting ballot and also inexperienced personnel. This electronic voting system is used to overcome these problems. It should be noted that with this system in the place, the users will be given enough time during the voting period and the voters can vote from anywhere and anytime. Electronic voting system can make our modern social life more efficient, simple and convenient.

Electronic voting technology is including punched cards, optical scan voting systems and specialized voting station. It can also involve transmission of ballots and votes via telephones, private computer networks or the internet. A secure electronic voting system must meet the security requirements which are authentication, authorization, accountability, confidentiality and data integrity.

(17)

In this project, a secure student representative council voting system will be designed and created using cryptographic mechanisms to protect and enhance the current manual voting system.

1.2 Problem Statement

The election of UTeM Student Representative Council will be held every year and there are thirty positions in UTeM Student Representative Council in year 2014. UTeM have three campus which are main campus, technology campus and city campus. The student representatives are chosen from seven faculties which located in these three campuses. When the election of Student Representative Council starts, the staff from computer centre needs to set up the voting station in each faculty and this will waste the man power and time due to the geographic location of UTeM. Besides that, the security of the current voting system is not very secure from some security metrics. The problem statement of this project is difficult to avoid the appearance of the ghost voters during the election time and the information of ballots and voters are easily exposed because the current voting system is not secure.

Research Questions:

i) What is the method used to avoid ghost voters?

ii) How to protect the information of the ballots and voters? iii) How to make the system become more secure?

(18)

3 1.3 Objective

The purpose of this project is to develop an electronic voting system to help and enhance the election of the student representative council. This system will give a systematic and comfortable to the user who is involved in the voting or election. The objective of this system is as follow:

i) To avoid ghost voters through the use of digital signature. ii) To enhance voters' privacy through the use of encryption. iii) To enhance the integrity of ballots and voters' information.

1.4 Scope

There are three types of scope in this electronic voting system which is the scope of the end user, the scope of the system and the scope of the system security.

i) End user

 An end user is the person who uses the software or hardware after it has been fully developed, tested and installed. The users of this electronic voting system are students (voters), candidates and admin.

ii) The system

 This electronic voting system will contains some of the important modules which are:

i) Registration of voters.

ii) Add, update and delete of the candidates. iii) View the information of voters and candidates. iv) Report of the voting result.

(19)

4 iii) System security

 In this electronic voting system, we are concerned on few security aspects which are:

i) The authenticity of the voters. ii) The confidentiality of ballots.

iii) The integrity of ballots and voters' information.

1.5 Project Contribution

The advantages or benefits of this system are highly securing, save time and no risk of repeat voting. This voting system will be better than the old system which is local voting systems, a system that required voters to queue up for voting and doing face recognize for voters authentication.

Electronic voting system is ready 24 hours for online voting and leave the online vote open for many days, which allowed everyone have a chance to vote online at a convenient time and place. This will save time, money and effort. A high security electronic voting system can avoid all the cost, effort and expenses of printing, posting and counting paper ballots. Information can be collected from server anytime and the result is known immediately after the vote closed. This also will protect our earth by reducing paper consumption.

This electronic voting system focus on few security aspects which are the authenticity of the voters, the confidentiality of ballots and the integrity of ballots and voters' information. The weakness of this electronic voting system is the database security. The database will store the secret information which is the ballots and this secret information should not be seen by administrator. This weakness can be solved by the future researcher.

(20)

5 1.6 Report Organization

The main body of this report organization is containing the list of figures, tables and the flows which are used in the report. This report organization will giving some brief of the scope and objective of the project, methodology, analysis, design, implementation and testing on the electronic voting system.

 In Chapter 1 Introduction, we will discuss about the introduction, project background, problem statement, research question, objective, project scope, project contribution and report organization.

 In Chapter 2 Literature Review, we will study about the related works such as the background of student representative council, comparison of current and new voting systems, cryptographic mechanisms and the tools to develop the web-based voting system.

 In Chapter 3 Methodology, we will explain about the method used to analyse and develop the electronic voting system based on the methodology model and show all the requirements of this project.

 In Chapter 4 Analysis, we will preview to the analysis phase, how would the system be developed and introduce the requirements of software and hardware.

 In Chapter 5 Design, we will describe the experimental design and environment setup, and design of electronic voting system in this project.  In Chapter 6 Implementation, we will briefly describe about the activity that

involved in the implementation phase, method to be implement and show the expected output when finished this phase.

(21)

 In Chapter 7 Testing, we will briefly describe the activity involved in testing phase and what is the testing strategy to be adopted in this project.

 In Chapter 8 Conclusion, the weaknesses and strength of this project will be state.

1.7 Summary

In this chapter, we have discussed about the project background, scope of the project and the problem statement. The main aspect of this project is to bring out a new idea that was sustained within us for a long term times. This project offers the voters to cast easily through internet. The database also makes the ballots counting become faster, easily and accurately. Developing a good system is critical to the success of the system to prevent system failures and to gain wide acceptance as the best method available.

(22)

7 CHAPTER II

LITERATURE REVIEW

2.1 Introduction

In the previous chapter, the problem statement and project objective have been clearly discussed. So in this chapter, the literature review will focus on searching, analyzing, collecting and finding out the conclusion from all the aspects and issues as shown in Figure 2.1.

(23)

There are few main topics of this literature review, which are the background of Student Representative Council, UTeM Student Representative Council, previous Project Sarjana Muda, current voting system and cryptographic mechanisms.

2.2 Student Representative Council

Undergraduate with professional technique and skills nowadays is seen as the prospect of leaders in the future. Student Representative Council (SRC) is one of the highest student organizations in universities and the main purpose of the organization is to produce graduates who are capable of becoming leaders in future. They are more expert or excel in all aspects for the benefit not only among university students but also for the country's future. There are around 20 universities which have Student Representative Council (SRC) in Institution of Higher Learning (IPTA) in Malaysia.

The purpose and function of Student Representative Council (SRC) are (Subsection 48 (10) of the Universities and University Colleges Act 1971 (Amendment 2009)):

i) Cultivate and train the spirit of corporate life among the students of the University.

ii) Work with the instruction of Vice-Chancellor, organizing and overseeing the welfare of students in the University facilities including recreational, spiritual and religious activities and the provision of food and drink.

iii) Appeal to the Vice-Chancellor on all matters relating to the life and work of students.

iv) Represented in anybody with reliable rules made for some purpose and appointed to carry out the welfare of students at the University.

v) To carry out any other activities as may be prescribed by the SRC from time to time.

(24)

The selection process for members of the Student Representative Council (SRC) for each Institution of Higher Learning (IPTA) in Malaysia is one of the university's annual activities. The aim of this activity is to choose a new leader to represent all students at the university in accordance with the requirements and provisions (Universities and University Colleges Act 1971 (Amendment 2009) (Subsection 48 (1), (2), (3), (4), (5) & (6)).).

This selection process is very important to maintain the Student Representative Council (SRC) leadership in university and produce more young leaders who will lead the country's leadership in the future. The selection process will also provide a very useful exposure among university students through the process of elections run and then select student leaders who will mediate the students at the university and the university management, the Ministry of Education (MOE) and the community around him.

2.2.1 Background of UTeM Student Representative Council

The Student Representative Council UTeM is chosen from 7 faculties in UTeM which are Faculty of Electronics and Computer Engineering, Faculty of Electrical Engineering, Faculty of Mechanical Engineering, Faculty of Manufacturing Engineering, Faculty of Information and Communication Technology, Faculty of Technology Management & Technopreneurship and Faculty of Engineering Technology. The Student Representative Council UTeM contains three main states which are executive council, supreme council and cabinet exco. Executive council contains 4 persons, supreme council contains 3 persons and cabinet exco contains 23 persons. The amounts of the Student Representative Council UTeM increased from 27 persons to 30 persons in year 2013/2014. The increasing of 3 senators are Chinese, Indian and International student representatives (MPP UTeM, 2013/2014).

(1)

iii) System security

 In this electronic voting system, we are concerned on few security aspects which are:

i) The authenticity of the voters. ii) The confidentiality of ballots.

iii) The integrity of ballots and voters' information.

1.5 Project Contribution

(2)

1.6 Report Organization

 In Chapter 3 Methodology, we will explain about the method used to analyse and develop the electronic voting system based on the methodology model and show all the requirements of this project.

 In Chapter 4 Analysis, we will preview to the analysis phase, how would the system be developed and introduce the requirements of software and hardware.

involved in the implementation phase, method to be implement and show the expected output when finished this phase.

(3)

 In Chapter 7 Testing, we will briefly describe the activity involved in testing phase and what is the testing strategy to be adopted in this project.

 In Chapter 8 Conclusion, the weaknesses and strength of this project will be state.

1.7 Summary

(4)

CHAPTER II

LITERATURE REVIEW

2.1 Introduction

(5)

2.2 Student Representative Council

The purpose and function of Student Representative Council (SRC) are (Subsection 48 (10) of the Universities and University Colleges Act 1971 (Amendment 2009)):

i) Cultivate and train the spirit of corporate life among the students of the University.

iii) Appeal to the Vice-Chancellor on all matters relating to the life and work of students.

iv) Represented in anybody with reliable rules made for some purpose and appointed to carry out the welfare of students at the University.

v) To carry out any other activities as may be prescribed by the SRC from time to time.

(6)

2.2.1 Background of UTeM Student Representative Council

Secure student representative council voting system using cryptographic mechanisms.

Dokumen yang terkait

Vulnerability Analysis of E-Voting System Pilkada Kota Bogor using Attack Trees.

Fingerprint as Voter Authentication for Development of E-Voting System Using Two Central Facilities Protocol.

Secure And Wireless Student Attendance System.

UTeM MPP Voting System Using SMS.

Secure Entry Monitoring System.

Web Based Secure Printing System.

Secure Data Transfer Using Wireless Infrared Communication.

Implementation of Identity Based Encryption in e-Voting System.

Memahami E voting Berkaca dari Pengalama

Pengembangan Web E-Voting Menggunakan Secure Election

Dukungan

Links

Secure student representative council voting system using cryptographic mechanisms.

Dokumen yang terkait

Vulnerability Analysis of E-Voting System Pilkada Kota Bogor using Attack Trees.

Fingerprint as Voter Authentication for Development of E-Voting System Using Two Central Facilities Protocol.

Secure And Wireless Student Attendance System.

UTeM MPP Voting System Using SMS.

Secure Entry Monitoring System.

Web Based Secure Printing System.

Secure Data Transfer Using Wireless Infrared Communication.

Implementation of Identity Based Encryption in e-Voting System.

Memahami E voting Berkaca dari Pengalama

Pengembangan Web E-Voting Menggunakan Secure Election

Dokumen yang Anda mencari sudah siap untuk unduhkan