Creating a Secret Voting Project
A secret voting project includes CAs and TAs and is based on AES and RSA encryption. Based on the Kunpeng TEE secure computing, a secret voting can be performed with data privacy ensured. That is, you can see in the REE whether one vote has been made, but not the specific option. The voting result and statistics are displayed on the web page.
Prerequisites
- You have logged in to the Kunpeng DevKit.
- The Development Assistant has been installed. You are advised to install the Compiler and Debugger and add a target server before creating a project for future compilation and debugging.
Procedure
- Click
in the shortcut menu bar on the left pane or click
next to Development Assistant. The Kunpeng Application Projects page is displayed. See Figure 1. - Click Secure Computing Application. The Secure Computing Application page is displayed. See Figure 2.
- Click GlobalPlatform-Compliant TEE Application. On the left pane of the displayed page, select Secret Vote for Project Type and set other parameters as required.Figure 3 Creating a secret voting project
Table 1 Parameter settings (1) Parameter
Description
Project Type
The options are:
- Template project
- CA Project
- TA Project
- RSA Project
- Data Sealing
- Secret Vote
- Cert Assign
- Empty project
NOTE:- A CA project runs in the REE, and a TA project runs in the TEE. An RSA project implements secure communication based on the CA and TA projects.
- A data sealing project includes CA and TA projects. The TEE secure storage interface is used to store confidential data.
- A secret voting project includes CA and TA projects and is based on Advanced Encryption Standard (AES) and RSA encryption.
- A certificate assignment project includes CA and TA projects. Certificates are issued based on the RSA and SM2 algorithms.
Dependencies:
- Ensure that kunpeng-sc has been installed. (For data sealing and secret voting projects, ensure that kunpeng-sc-devel has been installed. For certificate assignment projects, ensure that the confidential computing SDK and kunpeng-sc-devel have been installed.)
- Run the lsmod | grep tzdriver command to check that the tzdriver is properly loaded.
- Run the ps -ef| grep teecd command to check that the daemon is properly started.
Project Name
Name of the project to be created. The default project name is xxx_ProjectN, which can be modified as required.
NOTE:- N is an integer starting from 1 in ascending order.
- The project name can contain 1 to 64 characters, including only letters, digits, periods (.), hyphens (-), plus signs (+), parentheses (), and underscores (_). It cannot start with a period (.).
Project Location
Storage path of the project to be created. The default project location is C:\Users\username\KunpengProject, which can be modified as required.
(Optional) Signature Private Key
Import the signature private key file.
(Optional) Config Binary
Import the binary configuration file.
- Template project
- Click Next to configure the target node. You can use an existing server or add a new server. To add a server, enter the IP address, SSH port, user name, password, and storage directory. If you select Configure later, no SDKs will be deployed by default. See Figure 4.
Table 2 Parameter settings (2) Parameter
Description
Deploy Server
- Existing
- New
- Configure later
NOTE:The new server will be added to the target server management.
IP Address
IP address of the target node for subsequent operations.
SSH Port
SSH port number of the target node.
User Name
Account of the target node for subsequent operations.
Password
Password of the target node user.
Remember password
If you select this option, the password of the current server user will be remembered.
Storage Directory
Storage directory on the target node.
NOTE:The tool reads and writes the content in the storage directory. To avoid data loss, you are advised to use an empty directory.
Deploy SDK When Creating Project
Yes: deploys the SDK.
No: does not deploy the SDK.
Deploy SDK
Select an SDK deployment method.
- Online deployment
- kunpeng-sc
- kunpeng-sc-devel
- Offline deployment
- kunpeng-sc
- kunpeng-sc-devel
NOTE:- If you select Online deployment, the server must be connected to the Internet. In an isolated network environment, you need to use a proxy to access the Internet. For details, see Configuring a Proxy.
- If you select Offline deployment, the SDK is imported from the local host. Download the SDK to the local host and upload it.
When configuring the new target node, ensure that the node is running on a physical machine and runs the openEuler 20.03 LTS SP1, UOS 20 SP1, CentOS 7.6, or Kylin V10 in the Arm architecture, and that you have administrator permissions for the node.
- Determine whether to deploy the SDK when creating the project. If you select Yes, specify a deployment method. See Figure 5. Click Create.
If the secure computing SDK fails to be deployed, rectify the fault by following instructions in Failed to Deploy the Secure Computing Application SDK.
- After the secret voting project is created, click Open Project to open it in the current window.Figure 6 Opening the secret voting project
Figure 7 Viewing the secret voting project
- You can use the Compiler and Debugger tool to compile, run, and debug the new project. For details, see the README file in the src folder of the project. After the compilation is complete, copy the generated files to the specified directory by following instructions in Instructions on Running Secure Computing Applications.
If a project folder or file is added, deleted, modified, or renamed, you can synchronize the change to the remote server. For details, see Synchronizing Code to a Remote Server.
- Enter the IP address and port of the target server in the address box of your web browser to open the page for secret voting. On the displayed page, enter the user name and password to log in.
- After the login is successful, on the voting page displayed, select an option, and click the voting button.
- After the voting is complete, the voting result and statistics are displayed on the page. You can view the number and proportion of votes for each option.
- Only single-choice voting is supported.
- Voters can view the voting result the next time they log in to the secret voting application.



