In traditional access control policies, every access granted and administrative account introduces an additional vulnerability, as a corruption of a high-privilege user can compromise several sensitive files. Privocracy is an access control mechanism that minimizes the need to attribute high privileges by triggering a secure e-voting procedure to run commands that require using sensitive resources. With Privocracy an organization can distribute trust in resource access, minimizing the system vulnerabilities from single points of failure, all while maintaining the high flexibility of discretionary access control policies. The Privocracy voting mechanism achieves everlasting privacy, ensuring votes remain confidential regardless of an adversary's computational power, while addressing the dependability requirements of a practical and secure system. The procedure incorporates useful features such as vote delegation to reduce voter fatigue, rapid voting rounds to enable quick action during emergencies, and selective vote auditing for application-level accountability. Our experimental results demonstrate that Privocracy processes votes efficiently and can be deployed on commodity hardware.

翻译：在传统的访问控制策略中，每次授权访问和管理账户都会引入额外的安全漏洞，因为高权限用户的腐败可能危及多个敏感文件。私有制民主是一种访问控制机制，它通过触发安全的电子投票程序来执行需要使用敏感资源的命令，从而最大限度地减少授予高权限的需求。通过私有制民主，组织可以分散资源访问的信任，最大限度地减少系统因单点故障而产生的漏洞，同时保持自主访问控制策略的高度灵活性。私有制民主的投票机制实现了永久隐私性，确保无论对手的计算能力如何，投票内容都保持机密，同时满足实际安全系统的可靠性要求。该程序整合了多项实用功能，如投票委托以减少选民疲劳、快速投票轮次以在紧急情况下迅速采取行动，以及选择性投票审计以实现应用层面的问责。我们的实验结果表明，私有制民主能够高效处理投票，并且可以部署在商用硬件上。