1. Introduction

The Secure Voting System Using OTP and Email Verification is a Python-based solution for transparent and authenticated online voting. Registered users verify identity via a one-time password sent to their email, preventing impersonation and duplicate votes. Each ballot is encrypted and stored securely, and results are visualized in real time—ideal for colleges, organizations, or internal company polls.

2. Existing System vs Proposed System

3. Working

1. User Registration: Name, email, unique voter ID captured.
2. Login & Verification: System generates a unique 6-digit OTP and emails it to the voter.
3. OTP Validation: Correct OTP grants portal access.
4. Voting: Voter selects a candidate and submits the ballot once.
5. Encryption & Storage: Ballot encrypted with AES and stored in SQLite.
6. Result Declaration: Real-time counts, final results on poll close.

4. Technology Stack

• Language: Python
• Libraries: smtplib, random, sqlite3, hashlib, Flask/Tkinter, re
• Security: OTP-based 2FA, SHA-256 password hashing, AES for vote encryption
• Backend: SQLite3 (voters, OTPs, ballots, results)
• Frontend: Flask web UI or Tkinter desktop UI
• Optional: Email confirmations, advanced admin analytics

5. Modules

6. Advantages

• Strong identity checks via OTP + Email.
• Strict one-vote-per-user enforcement.
• Encrypted ballots and transparent counts.
• Automated flow that cuts manual errors.
• Scales for institutions and corporate polls.

7. Applications

• College & university elections.
• Corporate/NGO decision polls.
• Community/association voting.
• Small-scale organizational ballots.
• Secure participation in online surveys.

Python Integration Sketch (Flask + SMTP + AES)

# OTP send (SMTP)
def send_otp(email):
    otp = f"{random.randint(0, 999999):06d}"
    save_otp(email, otp, ttl=300)                           # store hashed OTP with expiry
    smtp_send(email, "Your Voting OTP", f"OTP: {otp}")

# Login verify
def verify_login(email, otp_input):
    if check_otp(email, otp_input):                         # timing-safe compare + expiry
        session["voter"] = email
        return True
    return False

# Cast vote (single submission)
def cast_vote(voter_email, candidate_id, ballot_key):
    assert not has_voted(voter_email)
    payload = json.dumps({"c": candidate_id, "ts": time.time()}).encode()
    enc = aes_encrypt(payload, key=ballot_key)              # store encrypted ballot
    db.insert("ballots", voter=voter_email, data=enc)
    mark_voted(voter_email)

# Count results (decrypt or tally on write)
def count_results():
    return db.query("SELECT candidate_id, COUNT(*) FROM ballots_view GROUP BY candidate_id")
              

What You Get