Patent ID: 7389250

Claim:
A method for conducting a coercion-resistant electronic election performed in a computing system, comprising: in the computing system, receiving from the voter a first voter confirmation value; in the computing system, after receiving the first voter confirmation value, receiving from the voter an encrypted ballot associated with the identity of the user and a second voter confirmation value associated with the identity of the user, the second voter confirmation value being formed based upon input from the voter, enabling the voter to determine whether the ballot will be counted by varying the input; in the computing system, without regard for the value of the received second voter confirmation value, adding the received ballot to a publicly-available list of cast ballots, such that members of the public are able to verify the addition of the received ballot to the list without being able to determine whether the ballot will be counted; dissociating the identity of the voter from the encrypted ballot and second voter confirmation value; after the dissociating, determining whether the second voter confirmation value received with the ballot matches the received first voter confirmation value; and in the computing system, counting the ballot if and only if the second voter confirmation value received with the ballot matches the received first voter confirmation value.