Patent attributes
A control system for conducting an election may include a voter client configured to be used by a voter to cast a vote for a candidate, a registrar server, and a moderator server. The moderator server may be configured to obscure the identity of the voter. The registrar server may be configured to randomly assign a ballot to the obscured voter. The registrar server may be configured to encrypt the ballot. The moderator server may be configured to transmit the encrypted ballot to the voter client. The voter client may be configured to decrypt the encrypted ballot to recover the ballot. The voter client, in response to the voter selecting a desired candidate, may be configured to generate a ballot associated with a vote. The voter client may be configured to encrypt the ballot using a public key of the registrar server and a public key of the moderator server.