Electronic voting systems is a promising new area, however they pose a significant doubts in their integrity and ability to keep voting confidential. Moreover, security and confidentiality is often considered as a trade-off. In this whitepaper a new system design is proposed that allows both ensuring the voting integrity cannot be compromised and the voter's identity is not revealed when processing ballots. The system is subdivided into the authorization and the ballot processing servers and uses the public-key cryptography. The key idea is to cipher the ballot in a way that the ballot server can get access to the vote, but not to the voter's identity, and the authorization server can check the voter's identity but is unable to decipher the ballot. Tips to ensure software integrity while the voting is running are suggested. Two possible extensions are discussed to account for different voting rights and to include audit trails.