White Paper: Separation of Three Powers(Participants) Electronic Voting System (STP.vote)

Chapter 1: Introduction — The Trust Deficit in a Democratic Crisis

In recent years, elections in countries including the United States, Brazil, and across Europe have triggered widespread controversy. The core concerns can be summarized in two questions:

• Are voting systems vulnerable to manipulation or hacking?

• Are the results truly fair, transparent, and verifiable?

Traditional paper-based voting offers a degree of traceability, but it faces significant limitations in efficiency, cost, and logistical feasibility—particularly during pandemics. Meanwhile, current electronic voting systems, despite their convenience, have provoked a deeper crisis of trust. Citizens and experts alike worry about vulnerabilities to hacking, insider manipulation, and the opacity of vote data.

In this context, building an electronic voting system that is both efficient and universally trusted has become an urgent technical and political imperative.

The Separation of Three Powers(Participants) Electronic Voting System (STP.vote), created by inventor Bob Li and filed under Australian patent application 2022201573, was born from this moment in history. It introduces a structural innovation that applies the principles of checks and balances and auditable processes to rebuild transparency and public confidence in modern democratic systems.

We firmly believe: Democracy without trust is an illusion. Only institutionally guaranteed fairness can empower the people to truly govern themselves.

 

Chapter 2: Structural Flaws in Current Electronic Voting Systems

Although electronic voting has been introduced in several countries and regions, most existing systems still follow a centralized architecture and black-box processing logic. These systems exhibit the following structural flaws:

1. Single point of failure creates high risk of hacking.

Most systems combine identity authentication, vote recording, data transmission, and vote counting into a single or a few servers. A hacker who breaches just one entry point can tamper with votes or even manipulate the entire election.

2. Lack of transparency prevents public verification.

In traditional electronic voting systems, ordinary voters have no way to know whether their vote was correctly recorded and counted. With data hidden from the public, verification is nearly impossible except by internal administrators.

3. No mechanism to verify fairness—trust depends on faith.

Election fairness should not rely solely on the administrator’s integrity. A system must be designed so that 'even if you don’t trust me, I cannot cheat.' Current systems fail to meet this requirement.

4. Auditing depends on official institutions and lacks independence.

Electronic vote results are often audited by internal staff or approved third-party agencies. Without mechanisms for public, independent verification, this dependence contradicts the core spirit of democracy.

Thus, the core problem of electronic voting is not technical complexity, but the inability of existing structures to ensure fairness and transparency.

STP.vote was designed precisely to solve all these issues at the structural level.

 

Chapter 3: Core Principles of the Separation of Three Powers(Participants) Electronic Voting System (STP.vote)

The core innovation of STP.vote lies in its structural separation of the voting process into three independent layers — Registration, Transmission, and Computation — each operated by a different institution with no single participant able to see or control the complete data chain. Trust is achieved through architectural separation rather than reliance on any central authority.

 

I. The Three-Layer Architecture

 

1. Registration Layer (VEC / Local Electoral Authority)

The Registration layer is controlled by the Victorian Electoral Commission (VEC) or the relevant local electoral authority. Its sole function is to verify voter eligibility and initiate the anonymisation process. It has no access to votes or voting outcomes.

• Holds real voter identity (name, address, date of birth, email/mobile).

• Converts real identity into an anonymous code (V386) before transmitting to the Independent Anonymisation Server.

• Operates on a "forward only, no storage" principle for voting credentials: it forwards the Voting Link and Token1 to the voter but does not retain them.

• Cannot associate a voter's identity with their vote at any point.

 

2. Transmission Layer (STP.vote)

The Transmission layer is operated by STP.vote, a private commercial entity. It acts as the secure bridge between the registration process and the vote recording process. It never knows a voter's real identity or contact details.

• Receives anonymised voter data (V123) from the Independent Anonymisation Server and generates a further anonymous ID (V898) for each vote.

• Generates a one-time Voting Pass (containing a QR code) for each voter — sent directly to the Parliament Email Server for forwarding to the voter. STP.vote does not know the voter's real email address or mobile number.

• Generates two unique tokens: Token1 (gefehw), returned via the Independent Anonymisation Server to the voter; and Token2 (hjtghf), sent via the Parliament Email Server to the voter.

• Transmits encrypted vote data and both tokens to multiple independent Calculation Servers via a secure one-way broadcast.

• Cannot link V898 to a real voter identity without combining data held by both the Independent Anonymisation Server and the Registration Server — two separately controlled institutions.

 

3. Computation Layer (Candidates, VEC Auditor, Independent Organisations, Any Third Party)

The Computation layer consists of multiple independent servers operated by different institutions. Each server independently receives the same dataset from STP.vote and produces its own election result.

• Receives V898 identifiers, voting choices, and both tokens (Token1 and Token2) via secure one-way encrypted broadcast.

• Performs a cross-check against the VEC Voting Server using V898 to verify that each record is genuine and was not injected by STP.vote.

• Every calculation server independently produces the same election result from the same dataset — any discrepancy is immediately detectable.

• Voters can use both tokens to verify on any Calculation Server that their vote was correctly recorded and counted.

 

II. The Four-Hop Identity Chain

A key innovation of STP.vote is its four-hop identity anonymisation chain, which ensures that no single node — and no combination of two nodes — can reconstruct the link between a voter's real identity and their voting choice:

 

Rose Lee (real identity)  →  V386 (Registration Server converts, Independent Server stores mapping)  →  V123 (Independent Server converts, STP.vote stores mapping)  →  V898 (STP.vote converts, Voting Server records)

 

Reconstructing the full chain would require the cooperation of STP.vote AND the Independent Anonymisation Server — two separate institutions with no legal or operational basis to collude.

 

III. The Dual Token Verification Mechanism

Each voter receives two independent verification tokens:

• Token1 (gefehw): delivered via the Independent Anonymisation Server → Registration Server → voter. Allows the voter to locate their record on any Calculation Server and verify that their vote choice was correctly recorded.

• Token2 (hjtghf): delivered via the Parliament Email Server → voter. Provides a second independent confirmation of the voter's choice, delivered through a separate channel.

A voter can only verify their end-to-end result by entering both tokens on a Calculation Server. Neither token alone is sufficient to identify the voter or their vote to any third party.

 

IV. The Voting Pass

The Voting Pass is a single-use cryptographic credential generated by STP.vote and delivered to the voter via the Parliament Email Server. It contains:

• A unique QR code linked to the voter's V898 identifier.

• Token1 and Token2 embedded within the pass for post-vote verification.

Before a voter can access the ballot, they must scan the QR code and enter simple verification information (name initials and date of birth) stored in encrypted format on the Voting Server. This ensures that an intercepted Voting Pass cannot be used by a third party.

Once the Voting Pass has been successfully used, the corresponding cryptographic key components are automatically destroyed. It cannot be reused.

For voters who do not have an email address or mobile phone number, polling station staff can generate a Voting Pass QR code on-site via the STP.vote system after verifying the voter's eligibility. Staff may also enter the voter's contact details to request a Voting Pass through the Registration Server.

 

V. The Four Simultaneously Achieved Goals

The architecture described above is specifically designed to achieve four objectives that are conventionally considered incompatible:

 

• 1. Absolute computational fairness: Multiple independent Calculation Servers each independently produce the same result from the same dataset. Cross-verification against the Voting Server prevents vote injection by any intermediary.

• 2. Absolute voter privacy: No single node, and no combination of two nodes, can reconstruct the link between a voter's real identity and their voting choice. The full chain requires three separately controlled institutions to collude.

• 3. Universal end-to-end verifiability: Every voter who has an email address or mobile number receives two tokens and can independently verify on any Calculation Server that their vote was correctly recorded and counted. Third parties can download the full dataset and independently reproduce the election result.

• 4. Perfect resistance to insider fraud and external cyberattack: No single institution controls more than one segment of the chain. External attackers cannot manipulate results without simultaneously compromising multiple independently operated systems. The worst achievable outcome of a successful attack is a temporary service disruption — not a corrupted election result.

Chapter 4: Technical Implementation and Operational Workflow of STP.vote

STP.vote is not only an institutional innovation but also a practically deployable technical system. This chapter describes the system's nodes, the complete operational workflow for both online and in-person voters, and the public verification mechanism.

 

I. System Nodes and Their Information Boundaries

Each node in the STP.vote architecture is designed to hold only the minimum information necessary for its function. The table below summarises what each node knows and what it cannot know:

 

• Registration Server (VEC)

  Knows: Real voter identity; forwards Voting Link and Token1 to voter (no storage)

  Does not know: V123, V898, voting choices, Voting Pass

 

• Independent Anonymisation Server (VEC)

  Knows: V386 ↔ V123 mapping

  Does not know: Real voter identity, voting choices

 

• STP.vote Transmission Server

  Knows: V123 → V898 mapping; both tokens; Voting Pass

  Does not know: Real voter identity, email/mobile

 

• Parliament Email Server

  Knows: Real email/mobile; Voting Pass; Token2 (forward only, no storage)

  Does not know: V898, voting choices

 

• VEC Voting Server

  Knows: V898 + encrypted verification info + voting choices

  Does not know: Real voter identity, email/mobile

 

• Calculation Servers (×4)

  Knows: V898 + voting choices + Token1 + Token2

  Does not know: Real voter identity, email/mobile

 

II. Complete Voting Workflow

 

Stage 1 — Voter Registration and Initiation

1. The voter registers with the electoral authority (VEC). The Registration Server holds the voter's real identity including name, address, date of birth, and email address or mobile phone number.

2. The voter applies for online voting. The Registration Server transmits the anonymised voter data to STP.vote via the Independent Anonymisation Server. The voter's real identity (Rose Lee) is converted to V386 by the Registration Server, and V386 is converted to V123 by the Independent Anonymisation Server before being passed to STP.vote.

3. STP.vote generates a globally unique ID (V898) for this vote and creates the Voting Pass, Token1, and Token2.

4. The Voting Pass and Token2 are sent directly from STP.vote to the Parliament Email Server, which forwards them to the voter's email or mobile. The Parliament Email Server operates on a "forward only, no storage" principle.

5. Token1 and the Voting Link are returned from STP.vote to the Independent Anonymisation Server, then to the Registration Server, which forwards them to the voter. The Registration Server does not store the Voting Pass, Voting Link, or Token1.

 

Stage 2 — Casting a Vote

6. The voter opens the Voting Link on their device and scans the QR code on their Voting Pass.

7. The voter enters simple verification information: the initials of their name and their date of birth. This information is checked against encrypted data stored on the Voting Server. The voter's V898 identifier is marked as an online vote.

8. Once verified, the voter accesses the ballot, selects their candidate, and submits their vote. The voting data is encrypted and transmitted to STP.vote.

9. STP.vote confirms receipt and broadcasts the encrypted vote data along with both tokens to all four Calculation Servers via a secure one-way encrypted channel.

10. The Voting Pass is single-use. Once successfully used, the corresponding cryptographic key components are automatically destroyed.

11. A paper ballot is printed and deposited into a physical ballot box as a physical backup.

 

Stage 3 — Verification

12. The voter receives their Voting Pass (containing Token1 and Token2) via email or SMS. They can visit any Calculation Server and enter both tokens to verify that their vote was correctly recorded and counted.

13. For each voting record received from STP.vote, every Calculation Server performs a cross-check against the VEC Voting Server using V898 to confirm the record is genuine. This mechanism prevents STP.vote from injecting fraudulent votes during transmission.

14. Any voter, observer, candidate, or third party may download the complete dataset from STP.vote and independently run the vote count using open-source tools. Every Calculation Server independently produces the same election result from the same dataset.

 

III. In-Person Voting Workflow

In-person voting follows the same core architecture. Before the election, the voter's record is pre-loaded into the Voting Server. At the polling station:

• The voter presents their identity document.

• Polling station staff verify eligibility and, where the voter does not have an email address or mobile phone number, generate a Voting Pass QR code on-site via the STP.vote system.

• The voter scans the QR code, enters verification information, and casts their ballot on a terminal at the polling station.

• A paper ballot is printed and deposited into the physical ballot box.

• Where the voter does have an email address or mobile number, staff may alternatively enter those details to request a Voting Pass through the Registration Server, allowing the voter to also receive Token1 and Token2 for post-vote verification.

 

IV. Physical Backup

Every vote cast through STP.vote — whether online or in-person — results in a paper ballot being printed and deposited into a physical ballot box. In the event of a complete digital system failure, the physical ballot box provides a fully independent audit trail and fallback counting mechanism. This ensures that even in the worst-case scenario, no votes are permanently lost.

 

V. Supporting Technologies

STP.vote's architecture is compatible with and strengthened by a range of proven cryptographic and security technologies:

• End-to-end encryption (TLS/SSL): protects all data in transit between nodes.

• Hash-chain broadcast: all vote records are chained with cryptographic hashes, making retrospective tampering detectable.

• Public blockchain anchoring: the hash of the complete voting dataset can be anchored to a public blockchain at the close of voting, providing an immutable timestamp.

• Hardware Security Modules (HSM): physical protection of cryptographic keys at each node.

• Trusted Execution Environments (TEE / Intel SGX): sensitive operations can be performed in a hardware-isolated enclave that even STP.vote's own staff cannot monitor.

• Zero-Knowledge Proofs (ZKP): a planned future upgrade that would allow voters to verify their vote without revealing any information about their identity or choice to any verifying party, upgrading the system's trust model from institutional to mathematical.

 

Chapter 5: Legal Compatibility and Global Application Prospects

Although STP.vote originated as a technological response to the crisis of public trust, its design has strong cross-border applicability and legal compatibility. This chapter examines how STP.vote fits within various legal and political systems and explores its international potential.

I. Compatibility with Existing Electoral Laws

- STP.vote can be integrated as a technical layer without altering existing electoral legal frameworks.

- Identity verification can be performed by government or certified third-party institutions to comply with local voter eligibility rules.

- All registration and voting steps are traceable and auditable by judicial or independent authorities.

- Voter anonymity is preserved through physical and technical separation between registration and voting. This aligns with international laws protecting secret ballots.

- Only encrypted vote data is made public—no personal identity is disclosed. This adheres to global norms of transparency without infringing privacy.

II. Flexibility Across Political and Organizational Systems

- In constitutional democracies: strengthens public trust and participation, reduces electoral disputes.

- In transitional nations: provides trustworthy election tools, limits fraud, and fosters political stability.

- In local governance and communities: improves efficiency and transparency, lowers administrative costs.

- In corporations and NGOs: supports transparent decision-making within unions, companies, universities, etc.

III. Compliance with International Standards

- UN ICCPR Article 25: Upholds the right to secret ballots.

- EU GDPR: The system does not store personal identity data, complying with data minimization.

- ISO/IEC 18045: STP.vote’s architecture aligns with international information security evaluation standards.

- Decentralized verification mechanisms also align with blockchain governance trends and emerging digital constitutionalism.

IV. Global Promotion Strategy

- Collaborate with democratic institutions and civil society organizations to launch pilot programs.

- Engage with election observers like the UNDP or International IDEA for third-party evaluations.

- Promote adoption in digital infrastructure procurement by governments in Australia, the U.S., India, and Africa.

- Develop and certify international versions (e.g., STPv1.0), seeking ISO accreditation.

Summary:

STP.vote complements rather than replaces existing legal systems. It offers a scalable path toward a more transparent, fair, and verifiable global voting future.

 

Chapter 6: Security and Anti-Tampering Mechanisms of STP.vote

Security is the foundation of any credible electronic voting system. STP.vote adopts a structural approach and multiple technical layers to ensure full protection against manipulation, fraud, or interference.

I. Separation of Powers for Structural Security

- Each subsystem (registration, transmission, computation) operates independently and cannot control the others.

- Registration servers are hidden and distributed, making localization and attack extremely difficult.

- Transmission servers handle only encrypted anonymous data and are disconnected from identities.

- The computation process is open-source and independently verifiable by the public, preventing single-point tampering.

II. Full Encryption and Anonymity

- End-to-end encryption protects data throughout the voting process.

- Voter identities are fully detached from votes via anonymous codes.

- Strong cryptographic randomization ensures voting codes cannot be predicted or forged.

III. Open Verification and Public Auditability

- All vote data is published and available for download by any citizen or institution.

- Vote counting algorithms are open-source and reproducible.

- Anyone can perform their own tallying to verify the final results.

IV. Protection Against Internal and External Fraud

- No single actor or institution can manipulate the entire process due to distributed authority.

- Hidden server locations and encryption resist external cyberattacks.

- Automated processes minimize manual intervention and human error.

- Real-time anomaly detection systems flag irregular patterns for review.

V. Adaptability to Future Threats

- Compatible with blockchain for data immutability.

- Can integrate multi-signature and zero-knowledge proofs to enhance privacy and security.

- Supports AI-based anomaly detection and voting behavior analysis.

Summary:

STP.vote combines structural checks and technical safeguards to build a secure and resilient voting foundation.

 

Chapter 7: Application Scenarios and Promotion Strategy

STP.vote has wide applicability. With the right promotion strategy, it can modernize governance and expand democratic participation across many sectors.

I. Core Use Cases

- National Elections: Presidential and parliamentary elections requiring maximum fairness and transparency.

- Local Governance: Voting for local councils, neighborhood associations, or housing communities.

- Corporate Governance: Shareholder meetings, board elections, or internal organizational ballots.

- NGOs and Associations: Fair leadership elections for nonprofits, unions, and professional organizations.

- Emerging Fields: Blockchain-based DAOs and online collaborative communities.

II. Promotion Strategy

- Pilot Programs: Start with small municipalities or organizations willing to adopt new voting technologies.

- Institutional Partnerships: Work with electoral commissions, academic researchers, and civic tech groups.

- Branding and Outreach: Publish white papers, showcase use cases, and engage on social media and conferences.

- Legal Certification: Align with national laws and international standards (e.g., ISO certification).

- Localization: Offer multilingual versions and regional adaptations for different jurisdictions.

III. Long-Term Vision

STP.vote aims to be more than just a tool—it is a platform to advance democratic governance through transparency and technical rigor.

 

Chapter 8: Patent Status and Intellectual Property Protection

To protect STP.vote’s innovation and commercial potential, patent registration and intellectual property strategy are critical.

I. Patent Overview

- Patent Name: Separation of Three Powers(Participants) Electronic Voting System

- Jurisdiction: Australia

- Status: Patent application under review (No. 2022201573)

- Inventor: Bob Li

- Scope: Covers system architecture, technical workflows, and anti-tampering security mechanisms.

II. Importance of IP Protection

- Safeguards technological leadership and market advantage.

- Increases appeal to institutional partners and investors.

- Enables licensing, technical partnerships, and commercialization.

III. Strategic IP Plan

- Expand patent filings to the U.S., Europe, China, and other key markets.

- Regularly update with new innovations and refinements.

- Maintain confidentiality on proprietary algorithms not covered by public tools.

- Prepare legal mechanisms to defend against potential infringement.

IV. Balancing IP with Transparency

STP.vote supports open verification while protecting its core innovations. The system architecture, vote data, and counting tools are open to public audit, while key algorithms remain protected.

Summary:

Strong intellectual property safeguards ensure STP.vote can scale securely and responsibly.

 

Chapter 9: Future Roadmap and Call for Collaboration

STP.vote is more than an invention—it is a mission to restore democratic integrity. To realize its full potential, we actively seek global partners.

I. Future Development Plan

- Integrate emerging technologies like blockchain and AI;

- Expand adoption across elections, organizations, and grassroots initiatives;

- Localize for new regions with legal and language adaptation;

- Help shape the standards for next-generation democratic systems.

II. Call for Collaboration

- Governments: Work together on system trials and policy integration;

- Academia: Analyze performance and social impact;

- Developers: Join open-source efforts and product iterations;

- NGOs: Pilot STP.vote in local decision-making processes;

- Investors: Fund R&D and support international deployment.

 

Chapter 10: Conclusion — The Final Line of Defense for Democracy

In today’s digital era, democracy faces both unprecedented challenges and opportunities. The fairness and credibility of electronic voting systems directly impact national stability and public trust.

STP.vote was born from this challenge. By separating registration, transmission, and computation, it creates a secure and auditable foundation that can resist both hacking and insider tampering.

But STP.vote is more than just a system—it is a declaration of belief:

True democracy must be built on transparency and public oversight.

Only when every vote can be seen and verified can the people truly govern.

As the inventor of this system, I believe this is the path forward. Let us work together to bring this democratic technology to life—so that every vote counts, and every citizen has a voice.

Thank you for reading this white paper. We welcome your contact and your collaboration in building the future of digital democracy.

 

 

This research was independently conducted by inventor Bob Li

Patent Application: 2022201573

 

Contact Information:

Email: bobli@stp.vote

WhatsApp: +61 420 355 918

X: https://x.com/STPvoteOfficial

Official Website(under construction):

STP.vote

STPvote.org

STPvote.com

 

Monday, November 9th, 2020