/

<jsp:useBean id="Message" class="beans.Message" scope="session"> <jsp:getProperty name="Message" property="message" />

Figure 8-6: The code above displays the tags used to declare and instantiate the message java bean, it is also used to set the value of the java beans properties.

Servlet class: retrieves http requests from the jsp page, gets the name and parameters, it encrypts the parameter by calling the Encryption.encrypt method from the Encryption class located in the datasource package. The servlet ensures that the is of type two, which is the type number for the s by calling the Authenticate method in the databaseconnection class. If the is an the is then permitted access to the Menu jsp page, if the is not an , error message is generated in form of a message java bean and the is directed to the jsp page through the use of the get RequestDispatcher method as shown in figure 8-7.

66

Michael Chinwuba 03058068

if (DatabaseConnection.Type.equalsIgnoreCase("2")) { context.getRequestDispatcher("/Menu.jsp").forward(req, resp); } else { message .setMessage("Invalid name / . Please check and try again"); context.getRequestDispatcher("/.jsp").forward(req, resp);

Figure 8-7: The code above displays the validation used in the class

Menu JSP page: contains all the links to the add, delete and view candidates, voters and jsp pages. It also contains a link to the welcome page. Add Voter JSP page: is used to add voters details into the database dynamically. Contains a tag used to declare and instantiate the java bean class votersFormBean, the bean id is Voters which is the name of the object. The JSP page retrieves data from the and sets each piece of data derived from the textboxes with the votersFormBean. It also contains a message bean which displays errors on the page. VotersFormBean class: is used to get the data of voters from the addvoter jsp page and set the data with the bean. This data is temporarily stored in the bean to be used by the AddVoter Servlet. Addvoter Servlet: This class imports methods from the dataconnection, Encryption, message, voterFormBean classes. It sets the data derived from the VoterFormBean, and also sets the message java bean. The AddVoter class conducts validation processes from the data retrieved from the VoterFormBean, If the retrieved does not match the repeat , it sends a message bean error to the AddVoter jsp page.

67


In order to check if the name chosen by the voter is already taken, the database is queried by importing the checkname method from the databaseconnection class. If the name is already taken, an error message is sent using the message java bean and sends the back to the AddVoter jsp page. If the validation is complete, the AddVoter class calls the encrypt method from the Encryption class and uses it to encrypt the . The class then calls the method AddVoter from the databaseconnection class to add voters details in the voting database as shown in figure 8-8.

//Method to add voters to database public static void addVoter(String name, String surname, String age, String sex, String streetName, String town, String postcode, String number, String course, String email, String name, String word, String ) { try { if (age.equalsIgnoreCase("")) { age = "0"; } //If age not specified, default to 0 // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); st.executeUpdate("insert into s (name, , Type, NumberTries, word) VALUES ('" + name + "', '" + + "', 1, 0, '" + word + "')"); st.executeUpdate("insert into voters (firstName, surName, age, Sex, streetName, Town, Postcode, phoneNumber, course, email, word, name, vote1, vote2, vote3, vote4, vote5, timestamp, voted) VALUES ('" + name + "', '" + surname + "', " + Integer.parseInt(age) + ", '" + sex + "', '" + streetName + "', '" + town + "', '" + postcode + "', '" + number + "', '" + course + "', '" + email + "', '" + word + "', '" + name + "', '0','0','0','0','0','0','0')"); Figure 8-8: The code above displays the database connection engine and the sql statements in the databaseconnection class used to add voters into the Voting database. DeleteVoter JSP page: would be used to display the details of the voters that are to be deleted from the database. Firstly the variables which would be used to encapsulate the data from the Voters table in the Voting database are declared as strings and given null values.

68


The JDBC driver is ed to the JDBC driver manager, a connection is made to the Voting database. The createstatement method is declared and set to the statement object “st”, which would enable SQL statements to be sent to the database. The execute query method is then set to query the Voting database which would use the SELECT SQL statement to select the voters details from the Voters table. The results derived from this query is sent and stored in the Resultset object “rs”. The execute query method returns a single Resultset object and is typically used with SELECT SQL statements. In order to read the results of the query, the next() method of the Resultset object rs would be utilized. A while loop would be used to read through the results, the loop would read the last piece of data returned in each record of the Voter’s table and would then print out the data on screen by the using the out. print function as shown in figure 8-9. A link is directed to the DeletedVoters JSP page, setting the string email as criteria for deletion voter details.

try { Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); ResultSet rs = st.executeQuery("select * from Voters"); while (rs.next()) { fName = rs.getString(1); lName = rs.getString(2); email = rs.getString(10); street = rs.getString(5); town = rs.getString(6); postcode = rs.getString(7); out.print("" + fName + "" + lName + "" + email + "" + street + "" + town + "" + postcode + " "); %> ">Delete <%

Figure 8-9: The code above displays the methods and sqlstatements used to display the voters to be deleted The coding methods used in the deletevoters jsp page where adopted when developing the viewvoters jsp page, which was used to display voters details of the voters table.

69


DeletedVoters JSP page: page is used to delete voters from the database through the use of java code embedded in script tags. Firstly the jsp page requests for the string email from the delete voter page. The JDBC driver is ed to the JDBC driver manager and a connection is made to the voting database. The execute update method is used to execute the DELETE SQL statement which would delete from the Voters table where email field would be the string email as shown in figure 8-10. The execute update method is typically used with the INSERT, UPDATE & DELETE SQL statements

<% try { Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); st.executeUpdate("delete from Voters where email like '" + email + "'"); } catch (Exception e) {} %> Figure 8-10: The code above displays the methods and sql statement used to delete voters from database

Voting Results JSP page: was used to count and display the voting results to the . The variables Vote1=”” and count are declared as strings with null values. The JDBC driver is ed is ed and a connection is made to the database. The executequery method is used to select the vote1 record from the voters table and then count the vote1 record using the SQL COUNT statement, the COUNT statement will only count those records in which the table fields in the brackets is NOT NULL. The result of the query is stored in the Resultset object “rs1”. The next() method is then used to read the results. A while loop is used to read the data returned in each record of the group Vote1 and displays the results using the out.print function as shown in figure 8-11. This format is used to display the results for all the elections candidates.

70


try { Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); ResultSet rs = st.executeQuery("select vote2, count(vote2) from voters group by vote2"); while (rs.next()) { vote1 = rs.getString(1); count = rs.getString(2); out.print("" + vote1 + "" + count + ""); }

Figure 8-11: The code above displays the method used to count votes cast by voter

AllVotingResults JSP page: displays the voter’s firstname and surname with the names of the candidates they voted for. This is a security measure, which would enable the to view the voters’ details and who they voted for. In the case of the system being investigated for voting malpractice, the system would be able to show if a voter voted more than once. The JSP uses the executequery method to select the voter’s firstname, surname and voter’s chosen candidates’ details from the voters table, and prints to screen.

8.6 Voter Implementation The method used for the voter access is similar to the access, Figure 8-12 shows the difference with the authentication used for the voter access. servlet class checks the voter to see if they have voted or not, if the voter has not voted and the voted field in the voters table is equal to “0”, the voter is permitted to enter the voter menu page, if the voter has voted before and the voted field in the voters table has been flagged as “1”, the voter will be blocked from voting and directed to the Not Allowed jsp page.

71


/

Method to check if the voter has not already voted public static String checkVoted(String Name) { try { // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); ResultSet rs = st.executeQuery("select voted from voters where name like '" + Name + "'"); String Voted = ""; while (rs.next()) { Voted = rs.getString(1); } return Voted;

} catch (Exception e) { e.printStackTrace(); return ""; Figure 8-12: The code above displays the method used to check if the voter has not already voted in the dataconnection class

Voter Menu JSP page: displays the candidate name in a drop down box for the voter to select. An executequery method is used to select the name of the candidate who is under a certain party in the candidate table. The result is stored in the results set object “rs” it is then read by the next() method which prints out the result in a while loop. The voter would then be able to select an option from the drop down box. The option selected is then sent to the vote servlet for processing as shown in figure 8-13. ResultSet rs = s.executeQuery("SELECT Name from Candidates where Party like 'President'"); out.println("

"); out.println("Student Union President: <SELECT NAME=" + "Vote1" + ">"); while (rs.next()) { String val = rs.getString(1); out.println(""); Figure 8-13: The code above displays the method used to select candidates’ names to be voted for in the votermenu jsp page. 72


Voter Servlet: gets the http request information from the votermenu jsp page and stores the data as strings. The data is then stored in the VoterFormBean. Voter is directed to the confirmation jsp page through the use of the request dispatcher method. Confirmation Vote JSP page: would have the VoterFormBean tag declared. The executeUpdate method would be used to set the voter’s voted field record in the voters table to one, once the vote has been cast as shown in figure 8-14. This is a security measure which would prevent voters from voting more than once. Once the voter has confirmed their choice of candidates, the data in the voters table is updated to correspond to the new candidate information. The voter is directed to the thankyou servlet. If the voter wants to change their choice of candidate, the voter can click the back button which would send a http request to the back vote servlet, the servlet in turn would direct the voter back to the votermenu jsp page.

// Once voter has confirmed vote, flag set to 1, so not allowed to vote again try { Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); st.executeUpdate("update voters set vote1 = '" + Vote.getVote1() + "', vote2 = '" + Vote.getVote2() + "', vote3 = '" + Vote.getVote3() + "', vote4 = '" + Vote.getVote4() + "', vote5 = '" + Vote.getVote5()

+ "', vote6 = '" + Vote.getVote6() + "', voted = '1' where name = '" + Vote.getName() + "'"); } catch (Exception e) {out.println(e);} Figure 8-14: The code above displays the method used to update the voter table with candidate’s voted for.

73


8.7 Encryption Class Implementation The encryption class was used to encrypt s that where fed into the database table s and it was also used for decrypting s that where displayed to the in the forgotten JSP page. In order to implement the encryption and decryption processes for the voting system, the JCE API was used. The JCE makes use of specific classes to perform encryption and decryption functions. The main class for encryption is the Cipher class, which takes the role of a cryptographic cipher. A transformation is the process of encrypting and decrypting data. A transformation always includes the name of the cryptographic algorithm as shown in figure 8-15. The DES symmetric key encryption algorithm would be used for the encryption process.

// This class does the actual encryption Cipher cipher = Cipher.getInstance("DES/ECB/PKCS5Padding");

Figure 8-15: Transformation The getInstance method shown in figure 8-15 takes arguments for the transformation process. When the Cipher object is returned by the getInstance method, it must be initialised before it can be used to encrypt or decrypt the string, in order to perform this function the secret key would be needed. Due to the symmetric nature of the DES encryption algorithm one secret key would be used to encrypt and decrypt the . In order to create a DES key, a Key Generator would have to be instantiated for the DES algorithm. The class SecureRandom which provides a cryptographically strong pseudorandom number generator would be used to create a number that would be initialised to the generator object. The generatekey method would be used to generate the secret key. The key would then be stored in a file called OnlineVoting.ser as shown in figure 8-16. This method would now return the key to any method that calls it.

74


KeyGenerator generator = KeyGenerator.getInstance("DES"); generator.init(new SecureRandom()); key = generator.generateKey(); ObjectOutputStream out = new ObjectOutputStream(new FileOutputStream("OnlineVoting.ser"));

Figure 8-16: Secret key generator Upon generating a secret key, the cipher object would be initialised using the key from the get key method and set to either ENCRYPT _MODE for encryption or DECRYPT_MODE for decryption.

// Initialise it using key got from the method below. cipher.init(Cipher.ENCRYPT_MODE,getKey());

Figure 8-17: Cipher object Initialised

8.8 Summary This chapter has covered the implementation and methods used to develop the online voting system. The codes used to perform different function on the system where explained. The configuration process used to configure the tomcat server to perform SSL connections was also explained.

75


9 Testing In order to ensure that the system works perfectly, it has to be rigorously tested. The testing procedure would be used to check all the features developed for the online voting system work efficiently, the test procedure would also be used to identify any hidden errors or deficiencies the system may possess. In order to conduct an efficient testing process on the system, a suitable testing procedure has to be utilised. In choosing an appropriate testing strategy to use, some considerations have to be reviewed in of the size and complexity of the system to be tested.

9.1 Test Strategies There is a number of testing strategies that can be utilised to conduct adequate testing processes, the black box and white box testing methods are the most popular methods used to test software developed systems.

9.1.1 Black Box Testing This testing strategy which is also known as functional testing is used by a tester who has no knowledge of the internal structure of the system. The tester does not test the programming code itself but instead performs the test based on previously understood requirements. This form of testing is usually conducted by the end , who would enter an input into the system and check for an expected output. The advantage of using black box testing is that the test can be done by the s of the system, without them needing to have prior knowledge of the system’s code. [36]

76


9.1.2 White Box Testing This testing strategy which is also known as glass box or structural testing is used to test the internal logic and structure of the programming code used to develop the system. The tester would need to have unequivocal knowledge of the coding used for developing the system, in order to uncover any malfunctioning code. [35] In order to test system adequately both testing strategies have to be utilised.

9.1.3 Test Plan In order to efficiently test the full functional capability of the online voting system, a test plan has to be created. The test plan created would break the testing processes in order to tackle any malfunctioning feature of the online voting system. The testing process would focus on testing the system’s server, database server and web pages on different web browsers. This test has to be carried out to ensure that the system would be able to function on any web browser utilised by the system’s s. The testing process would focus on the system authentication features; this is an integral part of the system, because it ensures security of the system is upheld again unauthorised access. A test would be carried out to check if the being utilised are encrypted and decrypted. The system’s form validation would also have to be tested to ensure the error message to be presented to the if the forms are not filled correctly is functioning appropriately. The system database engines which connect the application to the database system have to be tested to ensure that information being retrieved from the s are populating the database system

77


9.2 Test Data Test Ref No 1

Test Data

Expected Outcome

Final result

Connect to server

The Client should be

able to Connect to server 2

Connect to mysql

The Client should be

database

able connect to data

base 3

Test internet

When enters the

explorer browser

online voting url

compatibility

welcome page should

be displayed 4

Test Netscape

When enters the

browser

online voting url

compatibility

welcome page should

be displayed 5

Test SSL

Using the secure local

connection from

host port number 8443,

web browser

the should be able

to enter the website over a secure connection 6

Web Page

Webpage navigation

Navigation

links to should open

specified web page 7

validation

Error message should

be displayed when inappropriate data is entered

78


8

process to

Voter should not be

distinguish voter

allowed to into

and

page,

should not be allowed to into voter page 9

10

Attempt to guess

System should be

more

blocked from accessing

than three time

the system on third

during

attempt

Voter view and

The voters choice of

select candidate

candidates should be

and submit vote

displayed on

confirmation page 11

Voter casts votes

The voters table in

voting database should be updated with new votes 12

Block for

Voter who has voted

voter

once should be flagged

and blocked from voting again 13

Voting results

The votes counted

page

should be updated

when new vote is cast 14

Add voter,

Error message should

candidate and

be generated if

s

necessary boxes are not

validation

filled in and if

name chosen is already taken

79


15

JDBC connection

Data from registration

to database

form should be entered

into database 16

entered into

encryption

database should be

encrypted 17

Data from database

should be able to

should be printed on

view voters,

screen

candidate & details from database 18

Details of voter,

should be able to

candidate &

delete voter,

should be

candidate and

deleted from database

detail 19

Forgotten

Decryption

request by should

be decrypted before being sent to screen 20

Logoff

should be able to

log off successfully from system

80


9.3 Summary The testing phase of the project was the final stage of the system development process. The system was rigorously tested to find out if the there where any system flaws or bugs within the system. The testing phase is highly essential in order to produce an efficient system and the limitations of the system can also be revealed from the testing process to be improved in the future.

81


10 Conclusion This chapter will discuss the development of the entire system as a whole. It will give an insight into the general procedures that where taken to accomplish the project. It will also discuss the aims and objectives of the initial proposal that where and the objectives that could not be accomplished. It will cover the drawbacks the project possesses and the necessary work that can be used to enhance the system in the future.

10.1 Project Overview The main project objective was to build a secure online voting system, which would be used by the students of the University of Westminster of the student union elections. The aim of the project was to convert the current use of paper based voting to an electronic form of voting, which would enable voters to vote remotely from any location through the use of the internet. Research was carried out on the different forms of online voting systems that currently exist, noting their features, and how to influence the participation of voters to an election. Various forms of server side technologies where investigated in order to choose the right programming language to use for the development of the online voting system. Security issues that may affect the integrity of the online voting system where addressed and counter measures on how to project the system’s security where researched. A number of software development methodologies where reviewed, upon careful consideration, the waterfall methodology was chosen as the most appropriate development method to use for this particular project. During the design and development of the system, the main effort was focused on deg and developing the system to achieve a solution based on the concepts of the system proposal. This phase provided a clear description of how the system was to be created. The main emphasis was on creating an intuitive interface for retrieving

82


information, querying the database by the use of java classes and scriplets and ensuring security was of top priority. The testing phase of the project was used to rigorously exercise the system to expose any deficiencies and short comings which the system may have possessed. The results of the test showed if they system was ready to be delivered to its end s. The system created met its objectives, by being simple to use and secure, which was important due to the fact that it would be used for the student union electoral process.

10.2 Problems Encountered Problems where encountered mainly in the development process of the online voting system. Setting up the server and configuring the server to perform SSL connections was quite problematic. Gaining access into the database, using the JDBC Bridge yielded a lot of problems, the JDBC engine created for accessing the database lacked two parameters for the name and , once this was discovered in the code, the problem was resolved.

10.3 Future Work A lot of work could be done to enhance the security features of the present system. The system at the moment permits voters to choose their own s when they are being ed by the , it would be more secure to develop a generator facility which would create a unique for each voter at random. The s would then be emailed to each voter through the use of the email address provided. The system could also be enhanced by displaying the voting result through the use of 3D graphs, which would help the and elections analysts in reviewing the voting results. Due to time constraints these ideas where not brought to light in the project.

83


REFERENCES 1. Jayson Falkner, Ben Galbraith, Romin Irani, Casey Kochmer, Sathya Narayana Panduranga, Krishnaraj Perrumal, John Timney, Meeraj Moidoo Kunnumpurath, (2001), Beginning JSP Web Development,Wrox. 2. Peter denHaan, Lance Lavandowska, Sathya Narayana Panduranga, Krishnarag Perrumal, (2004), Beginnign JSP 2 From Novice to Professional, Apress. 3. Aneesha Bakharia, (2001),JavaServerPages,Prima Tech. 4. Bruce W.Perry,(2004), Java Servlet & JSP Cookbook, O’Reilly 5. Simson Garfinkel, Gene Spafford,(1997), Web Security & Commerce, O’Reilly. 6. Time Stamp. URL: http://whatis.techtarget.com/definition/0,,sid9_gci817089,00.html 7. Maydene Fisher, Jon Ellis, Jonathan Bruce (2003), JDBC API Tutorial and Reference . Third Edition, Sun Microsystems. 8. George Reese, (2000), Database Programming with JDBC and Java. O’Reilly. 9. Laura A.Chappell, Ed Tittel (2004), Guide to T/IP. Thomson. 10. Transmission Control Protocol URL: http://en.wikipedia.org/wiki/Transmission_Control_Protocol 11. Andrew S.Tanenbaum, (1996), Computer Networks. Third Edition. Prentice Hall 12. Mark Andrews: Story of a Servlet URL: http://java.sun.com/products/servlet/articles/tutorial/ 13. Cisco Systems Inc.(2002): Introduction to T/IP URL:http://www.cisco.com/univercd/cc/td/doc/product/iaabu/centri4//scf4ap1 .htm#xtocid6 14. URL:http://www.jguru.se/jguru/Channel_Html/generic/images/developers/servlet _lifecycle.gif 15. Introduction What is JDBC URL: http://java.sun.com/docs/books/jdbc/intro.html 16. Bruce Schneier: Analysis of SSL 3.0 Protocol URL: http://www.schneier.com/paper-ssl.pdf 17. URL: http://www.rsasecurity.com/rsalabs/node.asp?id=2293

84


18. SSL Protocol URL: http://www.cryptoheaven.com/Security/Presentation/SSL-protocol.htm 19. Allen (2004): Access vs MySQL URL:http://codewalkers.com/tutorialpdfs/tutorial79.pdf 20. URL:http://www.msaccess.databasecorner.com/ 21. URL:http://searchopensource.techtarget.com/sDefinition/0,290660,sid39_gci5168 19,00.html 22. URL: http://www.credata.com/research/methodology.html 23. Simon Bennett, Steve McRobb, Ray Farmer, (1996), Object-Oriented System Analysis and Design Using UML 24. URL: http://www.geotrust.com/resources/white_papers/pdfs/QuickSSLWP.pdf 25. URL: http://en.wikipedia.org/wiki/Apache_Tomcat 26. URL:http://expertanswercenter.techtarget.com/eac/knowledgebaseAnswer/0,2951 99,sid63_gci984561,00.html 27. URL:http://searchwebservices.techtarget.com/sDefinition/0,290660,sid26_gci868 204,00.html 28. URL: http://www.answers.com/topic/cryptography?method=22 29. William R.Cheswick , Steven M. Bellovin, Aviel D. Rubin, (2003), Firewalls and Internet Security. 2nd Edition, Addison-Wesley. 30. URL: http://java.sun.com/j2se/1.3/docs/guide/jdbc/getstart/intro.html#1004029 31. URL: http://www.answers.com/HCI 32. http://uml.tutorials.trireme.com/ 33. Leszeka A. Maciaszek, Bruc Lee Liong, (2005), Practical Software Engineering. Addison Wesley. 34. URL: http://www.webopedia.com/TERM/W/White_Box_Testing.html 35. URL:http://www.csc.calpoly.edu/~dbutler/tutorials/winter96/coverage/blackbox.h tml 36. Tomcat Security Overview and Analysis URL:http://www.cafesoft.com/products/cams/tomcat-security.html 37. URL: http://www.norman.com/Product/WhitePapers/wp_encryption.pdf/en

85


38. Niels Ferguson, Bruce Schneier, (2003), Practical Cryptography. Wiley Publishing Inc. 39. Michael Bray: (1997) Object Oriented Design. URL: http://www.sei.cmu.edu/str/descriptions/oodesign.html 40. URL: http://www.rsasecurity.com/rsalabs/node.asp?id=2214 41. URL: http://www.answers.com/topic/xml?method=22 42. Jose Annunziato, Stephanie Fesler Kaminaris, (2001), SAMS Teach Yourself JavaServer Pages. SAMS. 43. URL: http://edocs.bea.com/wls/docs61/webapp/web_xml.html#1016445 44. Art Taylor, Brian Buege, Randy Layman, (2002), Hacking J2EE& Java Exposed. McGraw-Hill/Osborne.

86


Appendix A 1 Test Results Screen Dumps 1.1 Test 5

87


1.2 TEST 7

1.3 TEST 10

88


1.4 TEST 12

1.5 TEST 14

89


1.6 TEST 15

1.7 TEST 16

90


Appendix B 2 Web Page Design The webpage used for the system had to be defined taking in consideration the HCI demands which would have to be adhered to, in order to produce design a web site appealing to the end .

2.1 HTML Hypertext Mark-up Language is used to represent markup codes which are inserted into a file to be displayed by a web browser page. The markup code tells the web browser where to display the text and images that have to be added to the file in between tags. All web pages are ultimately sent back to the web browser from the web server as HTML. In HTML’s simplest form, the document would consist of a simple block of text, combined with control codes which would be in form of tags. The language is officially managed by the W3Cb Company, who defines the complete list of tags, their usability, and the method in which agents (i.e. web browsers) should deliver their content. HTML was used for the creation of the web pages for the online voting website.

2.1.1 Forms HTML form is a part of a html document consisting of normal HTML content, markup tags, special elements known as controls such as checkboxes, radio buttons, options menu etc, and also labels that are linked to the specified control elements. A on a webpage can use a form by changing its controls such as entering text in the text boxes and changing the options menu. The can then proceed to submit the form to the web server for processing. Forms where extensively used to relay data, from the to the server in the online voting systems. Each control is given a unique name and on submission of data key values of the form are ed to the web server as a HTTP request “POST” method for processing. The post method is shown below.

91


President Profiles

Voting Results Rules & Regulations

Vice-President Profiles

Sabbatical Roles

92

Secretary Profile

Candidates Roles

HomePage

Treasurer Profiles

2.2 ONLINE VOTING SYSTEM WEB TREE

Disability Officer Profile


Education Officer Profile

Election Results

2.2 WEB SITE SCREEN SHOTS 2.2.1 HOME PAGE

2.2.2 PRESIDENT PROFILE PAGE

93


2.2.3 PAGE

2.2.4 MENU PAGE

94


2.2.5 VOTER MENU PAGE

2.2.6 VOTING RESULTS PAGE

95


APPENDIX C 3

Data Base Entity Relationship Design

3.1 Entity Relationship Diagram An entity relationship diagram is used to represent the logical structure of the database created for the online voting system. It shows the relationships between entities utilised in the database. Three relationship types where used in the online voting system’s ERD diagrams. The one-to-many (1: M) relationship is used when entity A has many instances of entity B, and entity B has one instance of A. The many-to-many (M: N) relationship is used when an entity A has many instances of B, and B has many instances of A. The recursive relationship is used when an entity is related to itself.

96


VOTERS

M

Add Voters s

M

1

Vote for candidates

Add s

N CANDIDATES

1

M M Add Candidates

S

Figure 3-1: Entity relationship diagram for the database

Add s

Figure 3-2: Recursive relationship in the entity

97


APPENDIX D

Progress Report 1. Introduction The term voting is understood to be the form of choice. This form of expression can be performed through the ballot, or by any other electoral schemes. The electronic voting is a way in which votes cast by votes of certain electronic can be retrieved, tallied and stored electronically. The project to be produced will be focusing converting the current paper based elections system currently being used by the University of Westminster Student Union into an electronic system. The current voting system being used by the student union is currently suffering from a poor voter turnout due to the fact that the system in place is not convenient for most students. The system to be created will address this issue by providing voter with the capability of casting their votes for their chosen candidates via an internet enabled computer. The project will focus on the current voting method being used by the student union, and identify a way in which the method can be modelled with the internet voting system to be implemented. The system will implement different election mechanisms used for casting votes. The system will be built to have strict security features. These security features will commence from the point of voter into the voting system, to casting their vote for their chosen candidate to the point of their exit from the system. The system will have secure restriction preventing the voter from voting more than once for the election candidates.

98


The system to be implemented needs to address the issues covering security needs of a vote being cast over the internet. Authentication and validation of the s, access rights, information encryption and vote’s security need to be looked into in an in-depth fashion in order to produce a secure means of voting online.

1.1 Aims and Objectives The aims and objection of the system to be produced have been stated below: •

Build an online system which would enable voters to cast their votes on chosen candidates.

•

Create a secure authentication facility to check valid s logging into the voting system

•

Create a database to be used to stored votes, and information on the system

•

Research and implement a security method to be used to ensure that votes being cast in the system will not be compromised and any outside attack

•

Enable the system to tally votes cast according to candidate voted for.

•

Create a backend istration section which will be used to enable the s manage the election system effectively.

•

Create tools for the to add, delete and update details of voters, candidates and sub s on the system.

•

Display voting results in a graphical fashion for the to analyze

•

Create a system which can use different voting methods.

•

To enable voters to cast their votes for their chosen candidates

•

Enable voters to view biographies of the candidates being voted for in the election

•

Timestamp votes cast to the database to know when each vote was cast

•

Enable s to generate reports on the vote results for election organisers

•

Prevent voters from voting more than once for their choose candidates.

99


2. Background Research The background research carried out for the project focused on three sectors of the project, which where the technology to be used to build the system, the current electronic voting system being used in the world and the various security methods that can be used to secure the system.

2.1 Server Side Technologies The secure online voting system to be implemented will be run on the web server which will enable accessibility to clients through a web browser. The system will be built using a server side technology. The client (voter/istration) will be able to access the system from a web page via the web. In order for this process to occur, the system to be implemented would have to send back a Hyper Text Mark-up Language (html) web page back to the client’s browser. A number of server side technologies can be used, but for this project the Java Servlets are to be utilised for server processing of web requests.

2.1.2 Java Servlets A java servlet is a java class that is loaded unto memory by a servlet container. Servlet container can act as a web server by retrieving HTTP requests from the web browser and sending the requests to the servlet for processing.

2.1.3 The Servlet Life Cycle The lifecycle of a servlet is controlled by the servlet container or a web server it is deployed in, when the container sends a HTTP request to the servlet; the container loads the servlet, once the servlet is loaded by the container to processes incoming request from

100


the container. Once the servlet container wants to close the servlet it calls the destroy method and shuts down the servlet.

2.1.4 Java Server Pages (JSP) JavaServerPages (JSP`) provides the means of creating web pages which have dynamic content. JSP is a easier way of creating dynamic web pages, it also works together with Java Servlets. The use of both technologies helps in the generation of dynamic HTML.

HTTP REQUEST

Client

Web Server

HTTP REPONSE

HTML

Servlet Container Java Servlet JSP

Figure 1 Client\Server Communication

101


2.1.5 Java Bean A java bean is a java class or component that can be used to store and retrieve data for later use; it can also be used to display dynamic content unto a web page. Java beans components are useful for dynamic web page creation, especially when creating message prompts.

2.1.6 Java Database Connectivity Building a database is highly essential to the functionality of the system. A database will be used to store the voter’s candidate choice, and a database will also be used to for creating storing details of the voters, candidates and s. Java has provided libraries for connecting java applications to databases. An API called Java Database Connectivity API (JDBC) can be used to execute sql statements. In order to use the JDBC API to gain access into the MySql database, a JDBC driver for the specific database has to be used. The JDBC driver forms the middleware layer between the java application and the database by converting java method calls into database method API calls.

102


Java Application

Database

JDBC Driver

Fig2: Displays JDBC Connection to Database

2.1.7 Security Methods Secure Socket Layer (SSL) is a protocol that is used for sending secure encrypted data over the internet. SSL layer is present between T/IP protocol and the application layer. The SSL protocol is based on the public key cryptography which has a public and private key pair, the public key can be revealed to everyone but the private key is only known to the recipient of the message being sent. The message is encrypted with the public key and decrypted with the private key.

A timestamp is the current time of an event that is recorded by a computer. Through mechanisms such as the Network Time Protocol, a computer maintains accurate current

103


time, calibrated to minute fractions of a second. Such precision makes it possible for networked computers and applications to communicate effectively. The timestamp mechanism is used for a wide variety of synchronization purposes, such as asg a sequence order for a multi-event transaction so that if a failure occurs the transaction can be voided.

3. DESIGN OF SYSTEM FRONT END The front end of the system will represent the client side of the application; this is where the s will be able to send HTTP requests and receive HTTP responses from the server. In order to build the frond end of the system, HTML, Photoshop, and JavaScript could be utilized. BACKEND The back end of the system will represent the server side of the application; this is where the processing of HTTP requests sent from the client will take place. A Tomcat server engine will be used to load the servlet and jsps, which can then send requests from the tomcat server engine, the dynamic content will then be sent back to the client in HTML format to enable the client to view the information on the web page. A database will be utilized to stored data sent from the client of the system, MySql database will be used to store data being used by the system. MySql is a multithreaded database management system which permits multiple s accessing the database at the same time. In order for the database to be able to retrieve information from the server, a middleware layer has to be established in form of the JDBC API driver which will be used to translate java methods calls to database API calls.

104


Voter 1

Voter 2

Webserver Apache Servlet Engine Servlet

Database JDBC DRIVER

Fig 3: System Architecture

4 Justification There are a number of other server side technologies that can be used to implement a web-based voting system. ASP (Active Server Pages) is pure examples of a server scripting language that can be used build a dynamic web based system, developed by Microsoft, it can be used to generate dynamic content for webpages, but ASP is restricted to operating on only windows based platform, while JSP is platform independent, which means that it can be run from an operating system platform making it a more reliable server side scripting like. PHP is another server side scripting language that can be an equivalent technology to use for building dynamic web sites. It is an open source scripting language and it widely accepted by most operating system platforms and many kinds of web servers. JSP would still be a preferred choice for building the online voting system due to the fact that java is proven to be a lot more secure technology.

105


5 Progress Made on Project a. In-depth research into current online voting system, analysing their functionality and performance. b. Researched technology to be sued to implement the online voting system c. Mapped out tables to be used by the database to store information from the system d. Normalised the tables mapped out for the database

106


APPENDIX E

1 SOURCE CODE 1.1 JAVA CLASS CODE / Java class used to authenticate and validate s // Used to add s to database package datasource; import java.sql.*; import beans.Message; public class DatabaseConnection { public static String Type; //Method which takes name and from logon screen, and checks that they //both exist in the database. It also checks that the number of attempts has not exceeded 3. //Depending on a condition, it sets a message bean with the relevant message public static boolean Authenticate(String name, String , Message message) { try { Type = ""; String Tries = ""; boolean Exists = false; // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting", "",""); Statement st = c.createStatement(); if (name.equalsIgnoreCase("")) { message

107


.setMessage("Please enter a name"); return false; } if (.equalsIgnoreCase("")) { message .setMessage("Please enter a "); return false; } java.sql.ResultSet rs = st .executeQuery("select Type, NumberTries from s where name like '" + name + "' and like '" + + "'"); ResultSetMetaData md = rs.getMetaData(); String s = null; while (rs.next()) { Type = rs.getString(1); Tries = rs.getString(2); Exists = true; } rs.close(); if (Exists == true) { if (Integer.parseInt(Tries) > 2) { message .setMessage("You have had more then 3 attempts, and have been locked out. Please your system "); } } else {

108


if (updateTries(name, message)) { message .setMessage("Invalid name / . Please check and try again"); } } } catch (Exception e) { e.printStackTrace(); } return true; } //Returns true if name is correct but with wrong . //Returns false if name is incorrect with wrong //Updates number of attempts public static boolean updateTries(String Name, Message message) { try { boolean Name = false; int MaxTries = -1; // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); ResultSet rs = st .executeQuery("select NumberTries from s where name like '" + Name + "'"); while (rs.next()) { MaxTries = Integer.parseInt(rs.getString(1)); if (MaxTries > 2) { message .setMessage("You have had more then 3 attempts, and have been locked out. Please your system "); Name = false;

109


} else { Name = true; } } st .executeUpdate("Update s set NumberTries = " + (++MaxTries) + " where name like '%" + Name+ "%'"); return Name; } catch (Exception e) { e.printStackTrace(); return false; } } //Method to check if the name is not already taken when adding new s public static boolean checkname(String Name) { try { // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); ResultSet rs = st.executeQuery("select * from s where name like '" + Name + "'"); boolean exists = false; while (rs.next()) { exists = true; } return exists; } catch (Exception e) { e.printStackTrace(); return false; } }

110


//Method to add voters to database public static void addVoter(String name, String surname, String age, String sex, String streetName, String town, String postcode, String number, String course, String email, String name, String word, String ) { try { if (age.equalsIgnoreCase("")) { age = "0"; } //If age not specified, default to 0 // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); st.executeUpdate("insert into s (name, , Type, NumberTries, word) VALUES ('" + name + "', '" + + "', 1, 0, '" + word + "')"); st.executeUpdate("insert into voters (firstName, surName, age, Sex, streetName, Town, Postcode, phoneNumber, course, email, word, name, vote1, vote2, vote3, vote4, vote5, timestamp, voted) VALUES ('" + name + "', '" + surname + "', " + Integer.parseInt(age) + ", '" + sex + "', '" + streetName + "', '" + town + "', '" + postcode + "', '" + number + "', '" + course + "', '" + email + "', '" + word + "', '" + name + "', '0','0','0','0','0','0','0')"); } catch (Exception e) { e.printStackTrace(); } } //

Method to add candidates to database public static void addCandidates(String name, String Party, String age, String sex, String

town, String number, String course, String email) { try { if (age.equalsIgnoreCase("")) { age = "0";

111


} //If age not specified, default to 0 // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); st.executeUpdate("insert into candidates (Name, Party, Age, Sex, Town, PhoneNumber, Course, email) VALUES ('" + name + "', '" + Party + "', " + Integer.parseInt(age) + ", '" + sex + "', '" + town + "', '" + number + "', '" + course + "', '" + email + "')"); } catch (Exception e) { e.printStackTrace(); } } //

Method to add s to database public static void add(String name, String surname, String email, String sex, String

name, String , String word) { try { //If age not specified, default to 0 // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); st.executeUpdate("insert into s (name, , Type, NumberTries, word) VALUES ('" + name + "', '" + + "', 2, 0, '" + word + "')"); st.executeUpdate("insert into (firstname, surname, email, sex, name) VALUES ('" + name + "', '" + surname + "', '" + email + "', '" + sex + "', '" + name + "')"); } catch (Exception e) { e.printStackTrace(); } }

112


//

Method to check what the is once the name and memorable word has been

entered public static String checkMemorableWord(String Name, String word) { try { // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); ResultSet rs = st.executeQuery("select from s where name like '" + Name + "' and word like '" + word + "'"); String memorableWord = ""; while (rs.next()) { memorableWord = rs.getString(1); } return memorableWord; } catch (Exception e) { e.printStackTrace(); return ""; } } //

Method to check if the voter has not already voted public static String checkVoted(String Name) { try { // JDBC/ODBC Driver in jdbc DriverManager Class.forName("com.mysql.jdbc.Driver").newInstance(); Connection c = DriverManager.getConnection("jdbc:mysql:///Voting"); Statement st = c.createStatement(); ResultSet rs = st.executeQuery("select voted from voters where

name like '" + Name + "'"); String Voted = ""; while (rs.next()) { Voted = rs.getString(1);

113


} return Voted; } catch (Exception e) { e.printStackTrace(); return ""; } } } //************************************************************// // Encryption class used to encrypt and decrypt system's s// //*************************************************************// package datasource;

import javax.crypto.KeyGenerator; import javax.crypto.Cipher; import java.security.Key; import java.security.SecureRandom; import sun.misc.BASE64Encoder; import sun.misc.BASE64Decoder;

// These objects are used to read and write // to file system. import java.io.FileInputStream; import java.io.FileOutputStream; import java.io.ObjectInputStream; import java.io.ObjectOutputStream;

114


import java.io.FileNotFoundException;

public class Encryption {

//Method to encrypt the public static String encrypt(String ) throws Exception {

// This class does the actual encryption Cipher cipher = Cipher.getInstance("DES/ECB/PKCS5Padding"); // Initialise it using key got from the method below. cipher.init(Cipher.ENCRYPT_MODE,getKey()); // Convert the string to an array of bytes byte[] AsBytes = .getBytes("UTF8"); // Encrypt byte[] encrypted = cipher.doFinal(AsBytes); // Convert the resulting array of bytes to ASCII form BASE64Encoder encoder = new BASE64Encoder(); return encoder.encode(encrypted);

} //Method to decrypt the

115


//Takes the ascii version of the , and matches it to the character public static String decrypt(String encrypted) throws Exception{

// This class does the actual decryption Cipher cipher = Cipher.getInstance("DES/ECB/PKCS5Padding"); // Initialise it using key got from the method below. cipher.init(Cipher.DECRYPT_MODE,getKey()); // Convert ASCII characters to an array of bytes BASE64Decoder decoder = new BASE64Decoder(); byte[]encryptedAsBytes = decoder.decodeBuffer(encrypted); // Decrypt byte[] decrypted = cipher.doFinal(encryptedAsBytes); // Convert the resulting array of bytes to ASCII form return new String(decrypted,"UTF8");

} /* Gets the Key used for encryting/decrypting. * * The key is stored in a file because the same key * used to encrypt a text MUST be used to decrypt * it else you get a different result. The method * is private because it is not used outside this class. * * The method first looks for a file called "OnlineVoting.ser" * if it finds it, it loads the key from there and returns it * to whichever method asks for it. if it does not find the * file, then it generates a new key, writes it to the file

116


* named above, then returns the key. */ private static Key getKey() throws Exception{ Key key = null; try { // Attempt to find the key file. If it is not found, // Control es to the catch block below. ObjectInputStream in = new ObjectInputStream(new FileInputStream("OnlineVoting.ser")); // File found, get the key from the file // You need to cast the object read from the // file as a key object. key = (Key)in.readObject(); //close resource opened in.close(); } catch(FileNotFoundException fnfe) { // key file doesn't exist, create key and store in file. KeyGenerator generator = KeyGenerator.getInstance("DES"); generator.init(new SecureRandom()); key = generator.generateKey(); ObjectOutputStream out = new ObjectOutputStream(new FileOutputStream("OnlineVoting.ser")); out.writeObject(key); out.close(); } return key; } }

117


//This a a bean that stores information about the // package beans; public class FormBean { private String firstName = ""; private String surName = ""; private String sex = ""; private String phonenumber = ""; private String email = ""; private String name = ""; private String = ""; private String rpt = ""; private String word = "";

public String getFirstName() { return firstName; } public void setFirstName(String firstName) { this.firstName = firstName; } public String getEmail() { return email; } public void setEmail(String email) { this.email = email; } public String get() { return ; } public void set(String ) { this. = ;

118


} public String getPhonenumber() { return phonenumber; } public void setPhonenumber(String phonenumber) { this.phonenumber = phonenumber; } public String getRpt() { return rpt; } public void setRpt(String rpt) { this.rpt = rpt; } public String getSex() { return sex; } public void setSex(String sex) { this.sex = sex; } public String getSurName() { return surName; } public void setSurName(String surName) { this.surName = surName; } public String getname() { return name; } public void setname(String name) { name = name; } public String getWord() { return word; }

119


public void setWord(String word) { this.word = word; } } //This a a bean that stores information about the candidates package beans; public class CandidatesFormBean { private String fullName = ""; private String age = ""; private String sex = ""; private String town = ""; private String phonenumber = ""; private String course = ""; private String email = ""; private String party = ""; public String getFullName() { return fullName; } public void setFullName(String fullName) { this.fullName = fullName; } public String getAge() { return age; } public void setAge(String age) { this.age = age; } public String getCourse() { return course; }

120


public void setCourse(String course) { this.course = course; } public String getEmail() { return email; } public void setEmail(String email) { this.email = email; } public String getParty() { return party; } public void setParty(String party) { this.party = party; } public String getPhonenumber() { return phonenumber; } public void setPhonenumber(String phonenumber) { this.phonenumber = phonenumber; } public String getSex() { return sex; } public void setSex(String sex) { this.sex = sex; } public String getTown() { return town; } public void setTown(String town) { this.town = town; } }

121


/This a a bean that stores information about what messages to display to the s package beans;

public class Message { private String message = ""; /** * @return Returns the message. */ public String getMessage() { return message; } /** * @param message The message to set. */ public void setMessage(String message) { this.message = message; } } //This a a bean that stores information about voting results package beans; import java.util.Date; public class VoteFormBean { private String vote1 = ""; private String vote2 = ""; private String vote3 = ""; private String vote4 = "";

122


private String vote5 = ""; private String vote6 = ""; private Date timeStamp = new Date(); private String Name = ""; public String getVote1() { return vote1; } public void setVote1(String vote1) { this.vote1 = vote1; } public String getVote2() { return vote2; } public void setVote2(String vote2) { this.vote2 = vote2; } public String getVote3() { return vote3; } public void setVote3(String vote3) { this.vote3 = vote3; } public String getVote4() { return vote4; } public void setVote4(String vote4) { this.vote4 = vote4; } public String getVote5() { return vote5; } public void setVote5(String vote5) { this.vote5 = vote5;

123


} public String getVote6() { return vote6; } public void setVote6(String vote6) { this.vote6 = vote6; } public String getName() { return Name; } public void setName(String Name) { Name = Name; } public void setTimeStamp(Date timeStamp){ this.timeStamp = timeStamp; } public Date getTimeStamp(){ return timeStamp; } } //This a a bean that stores information about the voters package beans; public class VotersFormBean { private String firstName = ""; private String surName = ""; private String age = ""; private String sex = ""; private String street = "";

124


private String town = ""; private String postcode = ""; private String phonenumber = ""; private String course = ""; private String email = ""; private String name = ""; private String = ""; private String rpt = ""; private String word = "";

public String getFirstName() { return firstName; } public void setFirstName(String firstName) { this.firstName = firstName; } public String getAge() { return age; } public void setAge(String age) { this.age = age; } public String getCourse() { return course; } public void setCourse(String course) { this.course = course; } public String getEmail() { return email; } public void setEmail(String email) {

125


this.email = email; } public String get() { return ; } public void set(String ) { this. = ; } public String getPhonenumber() { return phonenumber; } public void setPhonenumber(String phonenumber) { this.phonenumber = phonenumber; } public String getPostcode() { return postcode; } public void setPostcode(String postcode) { this.postcode = postcode; } public String getRpt() { return rpt; } public void setRpt(String rpt) { this.rpt = rpt; } public String getSex() { return sex; } public void setSex(String sex) { this.sex = sex; } public String getStreet() { return street;

126


} public void setStreet(String street) { this.street = street; } public String getSurName() { return surName; } public void setSurName(String surName) { this.surName = surName; } public String getTown() { return town; } public void setTown(String town) { this.town = town; } public String getname() { return name; } public void setname(String name) { name = name; } public String getWord() { return word; } public void setWord(String word) { this.word = word; } }

127


1.2 SERVLET CODE //Servlet which takes details, and checks the form has been filled in correctly //Stores details in FormBean package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import datasource.DatabaseConnection; import datasource.Encryption; import beans.FormBean; import beans.Message; public class Add extends HttpServlet implements Servlet { protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { String name = req.getParameter("Name"); String surname = req.getParameter("SurName"); String Email = req.getParameter("Email"); String name = req.getParameter("name"); String word = req.getParameter("word"); String = req.getParameter(""); String repeat = req.getParameter("rpt"); String sex = req.getParameter("Sex");

128


//Bean used to store general information Message message = new Message(); FormBean = new FormBean(); .setFirstName(name); .setSurName(surname); .setEmail(Email); .setSex(sex); .setname(name); .setWord(word); .set(); .setRpt(repeat); HttpSession session = req.getSession(true); session.setAttribute("Message", message); req.setAttribute("", ); ServletContext context = getServletContext(); if ((name.equalsIgnoreCase("")) || (surname.equalsIgnoreCase("")) || (Email.equalsIgnoreCase("")) || (name.equalsIgnoreCase("")) || (.equalsIgnoreCase("")) || (repeat.equalsIgnoreCase("")) || (word.equalsIgnoreCase(""))) { message .setMessage("You have not completed all the fields. Please complete all mandatory fields."); context.getRequestDispatcher("/Add.jsp").forward(req, resp); } else if (!.equals(repeat)) { message

129


.setMessage("The s you have entered not equal. Please check and try again"); context.getRequestDispatcher("/Add.jsp").forward(req, resp); } else if (DatabaseConnection.checkname(name)) { message .setMessage("The name already exists. Please select another one."); context.getRequestDispatcher("/Add.jsp").forward(req, resp); } else { try { = Encryption.encrypt(); } catch(Exception e) { e.printStackTrace(); } DatabaseConnection.add(name, surname, Email, sex, name, , word); context.getRequestDispatcher("/AddSuccess.jsp") .forward(req, resp); } } protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { } }

130


//Servlet which takes candidates details, and checks the form has been filled in correctly //Stores candidates details in CandidatesFormBean package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession;

import datasource.DatabaseConnection; import datasource.Encryption; import beans.CandidatesFormBean; import beans.Message; import beans.VotersFormBean; public class AddCanditates extends HttpServlet implements Servlet { protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { String name = req.getParameter("Name"); String age = req.getParameter("Age"); String sex = req.getParameter("Sex"); String Town = req.getParameter("Town"); String number = req.getParameter("number"); String Course = req.getParameter("Course"); String Email = req.getParameter("Email");

131


String party = req.getParameter("Party"); Message message = new Message(); CandidatesFormBean candidates = new CandidatesFormBean(); candidates.setFullName(name); candidates.setAge(age); candidates.setSex(sex); candidates.setTown(Town); candidates.setPhonenumber(number); candidates.setCourse(Course); candidates.setEmail(Email); candidates.setParty(party); HttpSession session = req.getSession(true); session.setAttribute("Message", message); req.setAttribute("Candidates", candidates); ServletContext context = getServletContext();

if ((name.equalsIgnoreCase("")) || (Town.equalsIgnoreCase("")) || (Email.equalsIgnoreCase("")) || (party.equalsIgnoreCase(""))) { message .setMessage("You have not completed all the fields. Please complete all mandatory fields."); context.getRequestDispatcher("/AddCandidates.jsp").forward(req, resp); } else { DatabaseConnection.addCandidates(name, party, age, sex, Town, number, Course, Email);

132


context.getRequestDispatcher("/AddCandidatesSuccess.jsp").forward(req, resp); } } protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { } }

//Servlet which takes voters details, and checks the form has been filled in correctly //Stores voters details in VotersFormBean package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import datasource.DatabaseConnection; import datasource.Encryption; import beans.Message; import beans.VotersFormBean;

133


public class AddVoters extends HttpServlet implements Servlet { protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { String name = req.getParameter("Name"); String surname = req.getParameter("SurName"); String age = req.getParameter("Age"); String sex = req.getParameter("Sex"); String streetName = req.getParameter("StreetName"); String Town = req.getParameter("Town"); String Postcode = req.getParameter("Postcode"); String number = req.getParameter("number"); String Course = req.getParameter("Course"); String Email = req.getParameter("Email"); String name = req.getParameter("name"); String word = req.getParameter("word"); String = req.getParameter(""); String repeat = req.getParameter("rpt"); Message message = new Message(); VotersFormBean voters = new VotersFormBean(); voters.setFirstName(name); voters.setSurName(surname); voters.setAge(age); voters.setSex(sex); voters.setStreet(streetName); voters.setTown(Town); voters.setPostcode(Postcode); voters.setPhonenumber(number); voters.setCourse(Course); voters.setEmail(Email); voters.setname(name);

134


voters.setWord(word); voters.set(); voters.setRpt(repeat); HttpSession session = req.getSession(true); session.setAttribute("Message", message); req.setAttribute("Voters", voters); ServletContext context = getServletContext(); if (!.equals(repeat)) { message .setMessage("The s you have entered not equal. Please check and try again"); context.getRequestDispatcher("/AddVoters.jsp").forward(req, resp); } else if ((name.equalsIgnoreCase("")) || (surname.equalsIgnoreCase("")) || (streetName.equalsIgnoreCase("")) || (Town.equalsIgnoreCase("")) || (Postcode.equalsIgnoreCase("")) || (Email.equalsIgnoreCase("")) || (name.equalsIgnoreCase("")) || (.equalsIgnoreCase("")) || (repeat.equalsIgnoreCase("")) || (word.equalsIgnoreCase(""))) { message .setMessage("You have not completed all the fields. Please complete all mandatory fields."); context.getRequestDispatcher("/AddVoters.jsp").forward(req, resp); } else if (DatabaseConnection.checkname(name)) { message

135


.setMessage("The name already exists. Please select another one."); context.getRequestDispatcher("/AddVoters.jsp").forward(req, resp); } else { try { = Encryption.encrypt(); } catch(Exception e) { e.printStackTrace(); } DatabaseConnection.addVoter(name, surname, age, sex, streetName, Town, Postcode, number, Course, Email, name, word, ); context.getRequestDispatcher("/AddVotersSuccess.jsp").forward(req, resp); } } protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { } }

136


/Servlet which takes details, and checks the form has been filled in correctly //It encrypts the , and depending on what the value is returned from the database, //a message bean is set package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import beans.Message; import datasource.DatabaseConnection; import datasource.Encryption; public class extends HttpServlet implements Servlet { public () { super(); } protected void doGet(HttpServletRequest arg0, HttpServletResponse arg1) throws ServletException, IOException { } protected void doPost(HttpServletRequest req, HttpServletResponse resp) { try { String Name = req.getParameter("name");

137


String = req.getParameter(""); Message message = new Message(); System.out.println("name & :" + Name + " " + ); = Encryption.encrypt(); DatabaseConnection.Authenticate(Name, , message); HttpSession session = req.getSession(); session.setAttribute("Message", message); ServletContext context = getServletContext(); if (!message.getMessage().equalsIgnoreCase("")) { context.getRequestDispatcher("/.jsp").forward(req, resp); } else { if (DatabaseConnection.Type.equalsIgnoreCase("2")) { context.getRequestDispatcher("/Menu.jsp").forward(req, resp); } else { message .setMessage("Invalid name / . Please check and try again"); context.getRequestDispatcher("/.jsp").forward(req, resp); } } } catch (IOException e) { e.printStackTrace(); } catch (ServletException e1) { e1.printStackTrace();

138


}catch (Exception e2) { e2.printStackTrace(); } } }

//Servlet which takes back to voting screen if they wish to change who they voted for package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import beans.VoteFormBean; public class BackVote extends HttpServlet implements Servlet { protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { HttpSession session = req.getSession(true); ServletContext context = getServletContext(); context.getRequestDispatcher("/VotersMenu.jsp") .forward(req, resp); }

139


protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { } } // This servlet is used to validate forgotten page and display forgotten owords package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import datasource.DatabaseConnection; import datasource.Encryption; import beans.Message; import beans.VotersFormBean; public class Forgotten extends HttpServlet implements Servlet { protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { String word = req.getParameter("word"); String Name = req.getParameter("Name"); Message message = new Message();

140


HttpSession session = req.getSession(true); req.setAttribute("Message", message); ServletContext context = getServletContext();

if ((word.equalsIgnoreCase("")) || (Name.equalsIgnoreCase(""))) { message .setMessage("You have not completed all the fields. Please complete all fields."); context.getRequestDispatcher("/Forgotten.jsp").forward(req, resp); } else { String memorableWord = ""; memorableWord = DatabaseConnection.checkMemorableWord(Name, word); try { // decrypt method called from databaseconnection class to decrypt encrypted memorableWord = Encryption.decrypt(memorableWord); } catch(Exception e) { e.printStackTrace(); } //Validation if (memorableWord.equalsIgnoreCase("")) { message .setMessage("name or memorable word is incorrect. Please check and try again"); } else { message .setMessage("Your is : " + memorableWord); }

141


context.getRequestDispatcher("/Forgotten.jsp").forward(req, resp); } } protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { } } //Servlet used to validate page, directs voter to votermenu page if successfully with package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import beans.Message; import beans.VoteFormBean; import datasource.DatabaseConnection; import datasource.Encryption; public class extends HttpServlet implements Servlet { static String Name = "";

142


public () { super(); } protected void doGet(HttpServletRequest arg0, HttpServletResponse arg1) throws ServletException, IOException { } protected void doPost(HttpServletRequest req, HttpServletResponse resp) { try { String Name = req.getParameter("name"); String = req.getParameter(""); Message message = new Message(); try { = Encryption.encrypt(); } catch(Exception e) { e.printStackTrace(); } DatabaseConnection.Authenticate(Name, , message); String voted = DatabaseConnection.checkVoted(Name); HttpSession session = req.getSession(); session.setAttribute("Message", message); ServletContext context = getServletContext(); if (!message.getMessage().equalsIgnoreCase("")) { context.getRequestDispatcher("/.jsp").forward(req, resp); } else { if (DatabaseConnection.Type.equalsIgnoreCase("1")) { if (voted.equalsIgnoreCase("0")) { Name = Name; context.getRequestDispatcher("/VotersMenu.jsp").forward( req, resp);

143


} else { context.getRequestDispatcher("/NotAllowed.jsp").forward( req, resp); } } else { message .setMessage("Invalid name / . Please check and try again"); context.getRequestDispatcher("/.jsp").forward(req, resp); } } } catch (IOException e) { e.printStackTrace(); } catch (ServletException e1) { e1.printStackTrace(); } } } // Servlet directs to thank you page after voting package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession;

144


import beans.VoteFormBean; public class ThankYou extends HttpServlet implements Servlet { protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { HttpSession session = req.getSession(true); ServletContext context = getServletContext(); context.getRequestDispatcher("/ThankYou.jsp") .forward(req, resp); } protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { } } /This servlet contains information about the candidate that was voted for package evote; import java.io.IOException; import javax.servlet.Servlet; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import java.util.Date;

145


import beans.VoteFormBean; public class Vote extends HttpServlet implements Servlet { protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { String vote1 = req.getParameter("Vote1"); String vote2 = req.getParameter("Vote2"); String vote3 = req.getParameter("Vote3"); String vote4 = req.getParameter("Vote4"); String vote5 = req.getParameter("Vote5"); String vote6 = req.getParameter("Vote6"); String name = .Name; System.out.print(name); HttpSession session = req.getSession(true); VoteFormBean vote = new VoteFormBean(); vote.setVote1(vote1); vote.setVote2(vote2); vote.setVote3(vote3); vote.setVote4(vote4); vote.setVote5(vote5); vote.setVote6(vote6); vote.setName(name); vote.setTimeStamp(new Date(System.currentTimeMillis())); req.setAttribute("Vote", vote); ServletContext context = getServletContext(); context.getRequestDispatcher("/ConfirmationVote.jsp") .forward(req, resp); } protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException } }

146


1.3 JAVA SERVER PAGE CODE <jsp:useBean id="" class="beans.FormBean" scope="request"/> <%@ page language="java" contentType="text/html; charset=ISO-8859-1" pageEncoding="ISO-8859-1"%> <META http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> <META http-equiv="Content-Style-Type" content="text/css"> <TITLE>Add voters

Details 5l6432

Please enter Details (* mandatory fields )

147 Michael Chinwuba 03058068 148 Michael Chinwuba 03058068

*First Name:	*Surname:
*Email:	Sex:	<SELECT size="2" name="Sex">
*name:
*:	*Repeat :
*Memorable Word:

<jsp:useBean id="Message" class="beans.Message" scope="session"> <jsp:getProperty name="Message" property="message" />Main Menu

First Name:		<%=.getFirstName()%>
Surname:		<%=.getSurName()%>
Sex:		<%=.getSex()%>
Email:		<%=.getEmail()%>
name:		<%=.getname()%>
Memorable Word:		<%=.getWord()%>

*Full Name:	*Student Union Position:	<SELECT size="6" name="Party"> 153 Michael Chinwuba 03058068
Age:	Sex:	<SELECT size="2" name="Sex">
*Town	PhoneNumber:
Course:	*Email:

First Name	Surname	Email	name
" + fName + "	" + lName + "	" + email + "	" + name + "	&name=<%=name%>">Delete

Name	Voting Count	Percentage
" + vote1 + "	" + count + "	" + (percent * 100) / percentage + "%"); } }catch (Exception e) {}%>

Name	Voting Count	Percentage
" + vote1 + "	" + count + "	" + (percent * 100) / percentage + "%"); } }catch (Exception e) {}%>

Secure Online Voting System 3ue4e

Overview 3e4r5l

More details w3441

Details 5l6432

Details 5l6432

Details 5l6432

Candidates Details 2l4m6a

Details 5l6432

Details 5l6432

Details 5l6432

Welcome to 162 Michael Chinwuba 03058068 e-voting m5251

Please select an option 4o6f4k

Voters Details 6a275c

Deleted Voters t4u5q

s Details 5r5x5z

Candidates Details 2l4m6a

Details 5l6432

Welcome to e-voting 5g1l1r

Please select an option 4q715q

Related Documents 3m3m1z

Secure Online Voting System 3ue4e

6.online Voting System 2l704l

Documentation - Online Voting System 361d41

Online Voting System 1y1jc

Online Voting System 1y1jc

Online Voting System Srs 6f524l

More Documents from "Michael Chinwuba" 6832x

Primark Expansion Into China 6l5p4w

Secure Online Voting System 3ue4e

Una Vez Mas Rezare - Partitura Completa 2x2u4m

Andando Por El Camino - Partitura Completa 6v4g53

6l6m1j

Naruto Shippuuden Summaries Volume 48 4j711g

Student Union President:		<%=Vote.getVote1()%>
Vice President:		<%=Vote.getVote2()%>
Secretary:		<%=Vote.getVote3()%>
Treasury:		<%=Vote.getVote4()%>
Education Officier:		<%=Vote.getVote5()%>
Disability Officier:		<%=Vote.getVote6()%>