A Privacy Preserving Intrusion Tolerant Voting Architecture

This paper describes an approach to provide intrusion tolerance and privacy to the replies from a state machine replication system. This new voting architecture provides three important functionalities. First, it filters out any incorrect replies from compromised servers. Second, it prevents leakage of replies to an adversary despite server or voter compromise. Third, it provides support for nondeterminism in the replies by matching semantically similar replies even when they are not identical. A prototype of the proposed architecture has been implemented and its performance has been measured using a microbenchmark. The result demonstrates its feasibility and practicality.