Electronic voting

Electronic voting is a termed used to describe any of several means of determining people's collective intent electronically. Electronic voting includes voting by kiosk, internet, telephone, punch card, and optical scan ballot (a.k.a. mark-sense). Voting is done for many reasons and in many situations, ranging from determining the next garden club officers to determining the next leader of a country. Depending on the situation, a voting scheme will be required to meet differing needs depending on the circumstances.

Overview

Electronic voting systems have been in use since the 1960's[1] when punch card systems debuted. The newer mark-sense ballots allow a computer to count a voter's mark with an optical sensor. Internet and telephone voting systems have gained popularity for non-governmental purposes since the 1980's but suffer security problems preventing their application for government elections.

Direct recording electronic (DRE) systems, with interfaces much more like an ATM machine can, depending on design and implementation, provide instant feedback to the voters in case of invalid votes, and they can provide instant counts after polling. With a paper printout of each ballot -- verifiable by each voter -- they can also offer certain verifiability. By contrast, in a paperless system, voters must have faith in the accuracy of the counting software. Vendors of voting equipment tend to prefer proprietary software for business reasons; this alarms some observers. Open source software, based on its established track record related to security design (as opposed to the dubious "security through obscurity" approach by proprietary software), would provide a large degree of transparency for such systems, at the cost of loss of exclusivity to vendors.

In 2002, in the United States, the Help America Vote Act apparently mandated the use of electronic voting in all states. It seems likely that such systems will eventually be mandated across most or all democratic countries.

Direct Recording Electronic

Direct Recording Electronic (DRE) voting systems tally votes directly to computer memory. The voting machines typically take the form of a box or enclosure (rather like an automatic teller machine) or a laptop computer. Indian voting machines use a two-piece system with a balloting unit presenting the voter with a button (momentary switch) for each choice connected by a cable to an electronic ballot box. [2][3]

DRE voting systems are often favored because they can incorporate assistive technologies for handicapped people, allowing them to vote without involving another person in the process. They can also offer immediate feedback on the vailidity of a particular ballot so that the voter can have an opportunity to correct problems if they are noticed.

A fundamental challenge with DRE voting machines is the re-count of votes to verify that the hardware/software involved performed its task correctly. The Mercuri Method of electronic voting, described by Rebecca Mercuri, addresses the problem by having the DRE machine print a paper ballot that is verified by the voter before being dropped into a ballot box. The paper ballots would then be used for recounts if necessary.

David Chaum proposes a solution to the repeatability and verifiability issues that allows the voter to verify that the vote is cast appropriately and that the vote is counted. In (Chaum, 1988), he proposes a two-layer printout from a DRE voting machine. The layers, when combined, show the human-readable vote. The voter selects one layer to destroy at the poll and takes the other layer as a receipt, and the voter can verify that his particular vote was counted with that receipt, but the actual vote cast is thoroughly encrypted. The chief drawback to Chaum's method is that the cryptographic mathematics involved are not understood by most observers, election officials, legislators, and procurement officials.

Another challenge for DRE systems is a requirement in some areas that the entire ballot be presented to the voter simultaneously, so the voter can "vote for President, then vote for dog catcher, then leave," according to Rebecca Mercuri in a November 14, 2003 presentation. DRE systems in those areas need particularly large screens to accommodate all choices.

Mark-sense voting

In mark-sense voting the user marks a paper ballot and feeds it into a ballot box. The votes may be tallied by automatic sensors at a central location or at the precinct. With precinct-tallied votes, the systems usually verify that the ballot is legitimate as they accept the ballot.

Improper marks on the ballot are the primary cause of problems with mark-sense voting. The marks may be inadvertent, accidentally outside the prescribed locations, made with an incompatible writing instrument, or incomplete.

Punch card voting

With punch card ballots, voters create holes in prepared ballot cards to indicate their choices. There are two main vendor systems, Datavote and Votomatic. Datavote systems use a cutting tool and vacuum to clean away material from unperforated cards indicating the voters' choices. Votomatic machines require the voter to punch out a perforated rectangle (ie, a chad) from the card using a stylus.

The Datavote systems tend to have higher accuracy than Votomatic machines. Votomatic machines suffer from all manner of problems related to handling the perforated cards - problems that featured prominently in the 2000 U.S. Presidential Election.

Internet voting

With internet voting, people cast their ballots online. Corporations routinely use internet voting to elect officers and Board members. Because of security concerns, the U.S. military cancelled plans to allow voters of of eight states to vote online in a trial run of internet voting for overseas personnel in the 2004 presidential election.[4] Identification of voters is a significant challenge, but internet voting makes it easier for people to cast their ballots than do many other methods.

Telephone voting

Telephone voting allows people to call different telephone numbers to indicate preference for different options, or a voter might call one number and indicate a preference by pressing buttons in a menu system. Its main drawback is the difficulty in verifying the identity of the voter and in permitting only one vote per person. Its chief advantage is the ease in getting people to participate.

The Fox TV Network used telephone voting to determine the winner of the American Idol television talent contest. In the case of the 2003 Ruben Studdard/Clay Aiken contest, another drawback of telephone voting appeared. Viewers were asked to call a number indicating their preference, but the telephone systems, presumably two identical systems for counting votes, were operating very near capacity for the duration of the voting period. Perhaps as a result, out of 24 million votes cast, Studdard "won" by only 130,000 votes.

Six commandments of electronic voting

Michael Shamos devised the Six Commandments of Electronic Voting [5]. Although stated humorously, the assertions made are intended to be taken seriously. The commandments are in estimated order of importance, judged by statutes and willingness of election officials to compromise on the various requirements.

1. Thou shalt keep each voter's choices an inviolable secret.
2. Thou shalt allow each eligible voter to vote only once, and only for those offices for which she is authorized to cast a vote .
3. Thou shalt not permit tampering with thy voting system, nor the exchange of gold for votes.
4. Thou shalt report all votes accurately.
5. Thy voting system shall remain operable throughout each election.
6. Thou shalt keep an audit trail to detect sins against Commandments 2-4, but thy audit trail shall not violate Commandment 1.

Problems with electronic voting

• Diebold system discussion
• Diebold machine review
• 2000 U.S. Presidential Election
• Florida Primary 2002: Back to the Future -- A litany of problems with voting systems in Florida since the 2000 Presidential election
• Fairfax County, Virginia, November 4, 2003. Machines quit, jammed the modems in voting systems when 953 voting machines called in simultaneously to report results, leading to a denial of service attack on the election. 50% of precincts were unable to report results until the following day. Also, some voters complained that they would cast their vote for a particular candidate and the indicator of that vote would go off shortly after. Had they not noticed, their vote for that candidate would have remained uncounted; an unknown number of voters were affected by this.
• Napa County, California, March 2, 2004, an improperly calibrated mark-sense scanner overlooked 6692 absentee ballot votes. [6]
• Diebold Election Services, Inc. president admitted security flaws and disenfranchised voters in the March 2, 2004 California presidential primary using Diebold's TSx system for DRE voting. [7] On April 30 California's secretary of state decertified all touch-screen machines and recommended criminal prosecution of Diebold Election Systems.[8]

See also

• E-democracy
• EGovernment

References

• Chaum, David. "Elections with Unconditionally Secret Ballots and Disruption Equivalent to Breaking RSA." Advances in Cryptology EUROCRYPT '88, .G. Gunther (Ed.), Springer-Verlag, pp. 177-182.

External links

• Comment on usability of voting machines
• Electronic Voting -- Rebecca Mercuri's web site, includes articles, published papers, an e-mail list, and other electronic voting information.
• European Association Electronic Libre
• Google Directory: Electronic Voting Systems
• National Committee for Voting Integrity, a group working to promote verifiable electronic voting
• NORC Florida Ballots Project -- Discusses various types of ballots
• Open Voting Consortium -- Developing open source software for electronic voting machines
• Verified Voting -- Campaign to Demand Verifiable Election Results
• Internet Voting vs. Large-Value e-Commerce -- Why securing voting is not the same thing as securing financial transactions via the Internet

Footnote

From Shamos' document: Recall that women now constitute a majority of registered voters in the United States. (back to text)