System for the anonymous counting of information items for statistical purposes, especially in respect of operations in electronic voting or in periodic surveys of consumption

• US 6,021,200 A
• Filed: 08/23/1996
• Issued: 02/01/2000
• Est. Priority Date: 09/15/1995
• Status: Expired due to Fees

• Current Assignee: Thomson Multimedia Incorporated (Vantiva SA)
• Original Assignee: Thomson Multimedia Incorporated (Vantiva SA)
• Inventors: Fischer, Jean-Bernard
• Primary Examiner(s): CAIN, DAVID C
• Application Number:
  US08/703,596
• Time in Patent Office: 1,257 Days
• Field of Search: 380/23, 380/4, 380/25, 380/30
• US Class Current: 705/74
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G07C 13/00 Voting apparatus

Abstract

The system includes a plurality of decision units, at least one verification unit, and at least one counting unit, the units being functionally and structurally separate from each other. Each decision unit includes means for producing a source information item and an identity information item, and means for enciphering this source information item in such a way as to render it essentially indecipherable by the verification unit but decipherable by the counting unit. The verification unit includes a file which includes the identities of the decision units, means for checking the identity of the decision unit from which an incoming message originates, and means for compiling an anonymous derived message which is essentially devoid of any identity information item decipherable by the counting unit. The counting unit includes means for receiving the derived messages from the verification unit, means for processing these messages to compile a statistic of the corresponding source information items, and generating a file of the statistics thus compiled.

Claims

1. A system for the anonymous counting of information items for statistical purposes, especially in respect of operations in electronic voting or in periodic surveys of consumption, comprising:

a plurality of decision units, at least one verification unit and at least one counting unit, these units being functionally and structurally separate

each decision unit including means for producing a source information item to be counted and an identity information item singling out of the decision unit,

means for enciphering the source information item to render the source information item essentially indecipherable by the verification unit and decipherable by the counting unit,

the verification unit including a file of the identity information of the decision units,

means for checking, upon receiving an incoming message, the identity of the decision unit from which this incoming message originates,

means for compiling a derived message on the basis of this incoming message, the derived message being an anonymous message essentially devoid of any identity information item decipherable by the counting unit,

the counting unit including means for receiving the derived messages from the verification unit and for processing these messages to compile a statistic of the corresponding source information items,

a file of the statistics being thus compiled, and

the means for enciphering the source information item of the decision unit are public key enciphering means operating on the basis of the public key of the counting unit.

2. The system of claim 1, wherein the verification unit furthermore includes means for sending back to the decision unit an acknowledgment of receipt message after checking that the identity of this decision unit is consistent.

3. The system of claim 2, wherein the verification unit furthermore includes means for enciphering the acknowledgment of the receipt message and being public key enciphering means operating on the basis of the public key of the decision unit, this key being stored in the file of the identities of the decision units.

4. The system of claim 1, wherein the counting unit furthermore includes means for sending back to the verification unit an acknowledgment of the receipt message after receipt and processing of the corresponding derived message.

5. The system of claim 1, wherein messages exchanged between the decision units, the verification unit and the counting unit include, in at least some of them, a digital signature and the unit receiving such a message includes means for verifying the corresponding signature.

6. The system of claim 1, wherein the decision unit furthermore includes means for enciphering the identity information item, these means being public key enciphering means operating on the basis of the public key of the verification unit.

7. The system of claim 1, wherein the decision unit is a telematic terminal cooperating with a microcircuit card particular to a given user and insertable into a reader of this terminal.

8. The system of claim 1, wherein the verification unit is a computing device and the counting unit is a microcircuit card insertable into a reader of this computing device.