Electronic voting

Electronic voting (also known as e-voting) is a term encompassing several different types of voting, embracing both electronic means of casting a vote and electronic means of counting votes.

Electronic voting technology can include punch cards, optical scan voting systems and specialized voting kiosks (including self-contained Direct-recording electronic (DRE) voting systems). It can also involve transmission of ballots and votes via telephones, private computer networks, or the Internet.

Electronic voting technology can speed the counting of ballots and can provide improved accessibility for disabled voters. However, there has been contention, especially in the United States, that electronic voting, especially DRE voting, can facilitate electoral fraud.

Overview

Electronic voting systems for electorates have been in use since the 1960s when punch card systems debuted. The newer optical scan voting systems allow a computer to count a voter's mark on a ballot. DRE voting machines which collect and tabulate votes in a single machine, are used by all voters in all elections in Brazil, and also on a large scale in India, the Netherlands, Venezuela, and the United States. Internet voting systems have gained popularity and have been used for government elections and referendums in the United Kingdom, Estonia and Switzerland as well as municipal elections in Canada and party primary elections in the United States and France.

There are also hybrid systems that include an electronic ballot marking device (usually a touch screen system similar to a DRE) or other assistive technology to print a voter-verifiable paper ballot, then use a separate machine for electronic tabulation.

Paper-based electronic voting system

Sometimes called a "document ballot voting system," paper-based voting systems originated as a system where votes are cast and counted by hand, using paper ballots. With the advent of electronic tabulation came systems where paper cards or sheets could be marked by hand, but counted electronically. These systems included punch card voting, marksense and later digital pen voting systems.

Most recently, these systems can include an Electronic Ballot Marker (EBM), that allow voters to make their selections using an electronic input device, usually a touch screen system similar to a DRE. Systems including a ballot marking device can incorporate different forms of assistive technology.

Direct-recording electronic (DRE) voting system

Further information: [[:DRE voting machine]]

File:Urna eletrônica.jpeg

Electronic voting machine by Premier Election Solutions (formerly Diebold Election Systems) used in all Brazilian elections and plebiscites. Photo by Agência Brasil

A direct-recording electronic (DRE) voting machine records votes by means of a ballot display provided with mechanical or electro-optical components that can be activated by the voter (typically buttons or a touchscreen); that processes data with computer software; and that records voting data and ballot images in memory components. After the election it produces a tabulation of the voting data stored in a removable memory component and as printed copy. The system may also provide a means for transmitting individual ballots or vote totals to a central location for consolidating and reporting results from precincts at the central location. These systems use a precinct count method that tabulates ballots at the polling place. They typically tabulate ballots as they are cast and print the results after the close of polling.

In 2002, in the United States, the Help America Vote Act mandated that one handicapped accessible voting system be provided per polling place, which most jurisdictions have chosen to satisfy with the use of DRE voting machines, some switching entirely over to DRE. In 2004, 28.9% of the registered voters in the United States used some type of direct recording electronic voting system, up from 7.7% in 1996.

Public network DRE voting system

A public network DRE voting system is an election system that uses electronic ballots and transmits vote data from the polling place to another location over a public network. Vote data may be transmitted as individual ballots as they are cast, periodically as batches of ballots throughout the election day, or as one batch at the close of voting. This includes Internet voting as well as telephone voting.

Public network DRE voting system can utilize either precinct count or central count method. The central count method tabulates ballots from multiple precincts at a central location.

Internet voting can use remote locations (voting from any Internet capable computer) or can use traditional polling locations with voting booths consisting of Internet connected voting systems.

Corporations and organizations routinely use Internet voting to elect officers and Board members and for other proxy elections. Internet voting systems have been used privately in many modern nations and publicly in the United States, the UK, Ireland, Switzerland and Estonia. In Switzerland, where it is already an established part of local referendums, voters get their passwords to access the ballot through the postal service. Most voters in Estonia can cast their vote in local and parliamentary elections, if they want to, via the Internet, as most of those on the electoral roll have access to an e-voting system, the largest run by any European Union country. It has been made possible because most Estonians carry a national identity card equipped with a computer-readable microchip and it is these cards which they use to get access to the online ballot. All a voter needs is a computer, an electronic card reader, their ID card and its PIN, and they can vote from anywhere in the world. Estonian e-votes can only be cast during the days of advance voting. On election day itself people have to go to polling stations and fill in a paper ballot.

Analysis of electronic voting

ISG TopVoter, a machine designed specifically to be used by voters with disabilities.

Electronic voting systems may offer advantages compared to other voting techniques. An electronic voting system can be involved in any one of a number of steps in the setup, distributing, voting, collecting, and counting of ballots, and thus may or may not introduce advantages into any of these steps. Potential disadvantages exist as well including the potential for flaws or weakness in any electronic component.

Charles Stewart of the Massachusetts Institute of Technology estimates that 1 million more ballots were counted in 2004 than in 2000 because electronic voting machines detected votes that paper-based machines would have missed.

In May 2004 the U.S. Government Accountability Office released a report titled "Electronic Voting Offers Opportunities and Presents Challenges", analyzing both the benefits and concerns created by electronic voting. A second report was released in September 2005 detailing some of the concerns with electronic voting, and ongoing improvements, titled "Federal Efforts to Improve Security and Reliability of Electronic Voting Systems Are Under Way, but Key Activities Need to Be Completed".

It has been demonstrated that as voting systems become more complex and include software, different methods of election fraud become possible. Others also challenge the use of electronic voting from a theoretical point of view, arguing that humans are not equipped for verifying operations occurring within an electronic machine and that because people cannot verify these operations, the operations cannot be trusted. Furthermore, some computing experts have argued for the broader notion that people cannot trust any programming they did not author.

Under a secret ballot system, there is no known input, nor any expected output with which to compare electoral results. Hence, electronic electoral results and thus the accuracy, honesty and security of the entire electronic system cannot be verified by humans..

Critics of electronic voting, including security analyst Bruce Schneier, note that "computer security experts are unanimous on what to do (some voting experts disagree, but it is the computer security experts who need to be listened to; the problems here are with the computer, not with the fact that the computer is being used in a voting application)...DRE machines must have a voter-verifiable paper audit trails... Software used on DRE machines must be open to public scrutiny" to ensure the accuracy of the voting system. Verifiable ballots are necessary because computers can and do malfunction, and because voting machines can be compromised.

Electronic ballots

Electronic voting systems may use electronic ballots to store votes in computer memory. Systems which use them exclusively are called DRE voting systems. When electronic ballots are used there is no risk of exhausting the supply of ballots. Additionally, these electronic ballots remove the need for printing of paper ballots, a significant cost. When administering elections in which ballots are offered in multiple languages (in some areas of the United States, public elections are required by the National Voting Rights Act of 1965), electronic ballots can be programmed to provide ballots in multiple languages for a single machine. The advantage with respect to ballots in different languages appears to be unique to electronic voting. For example, King County, Washington's demographics require them under U.S. federal election law to provide ballot access in Chinese. With any type of paper ballot, the county has to decide how many Chinese-language ballots to print, how many to make available at each polling place, etc. Any strategy that can assure that Chinese-language ballots will be available at all polling places is certain, at the very least, to result in a significant number of wasted ballots. (The situation with lever machines would be even worse than with paper: the only apparent way to reliably meet the need would be to set up a Chinese-language lever machine at each polling place, few of which would be used at all.)

Critics argue the need for extra ballots in any language can be mitigated by providing a process to print ballots at voting locations. They argue further, the cost of software validation, compiler trust validation, installation validation, delivery validation and validation of other steps related to electronic voting is complex and expensive, thus electronic ballots aren't guaranteed to be less costly than printed ballots.

Accessibility

A Hart eSlate DRE voting machine with jelly buttons for people with manual dexterity disabilities.

Electronic voting machines can be made fully accessible for persons with disabilities. Punchcard and optical scan machines are not fully accessible for the blind or visually impaired, and lever machines can be difficult for voters with limited mobility and strength. Electronic machines can use headphones, sip and puff, foot pedals, joy sticks and other adaptive technology to provide the necessary accessibility.

Organizations such as the Verified Voting Foundation have criticized the accessibility of electronic voting machines and advocate alternatives. Some disabled voters (including the visually impaired) could use a tactile ballot, a ballot system using physical markers to indicate where a mark should be made, to vote a secret paper ballot. These ballots can be designed identically to those used by other voters.. However, other disabled voters (including voters with dexterity disabilities) could be unable to use these ballots.

Cryptographic verification

Electronic voting systems can offer solutions that allow voters to verify their vote is recorded and tabulated with mathematical calculations. These systems can alleviate concerns of incorrectly recorded votes.

One feature to mitigate such concerns could be to allow a voter to prove how they voted, with some form of electronic receipt, signed by the voting authority using digital signatures. This feature can conclusively prove the accuracy of the tally, but any verification system that cannot guarantee the anonymity of voter's choice, can enable voter intimidation or vote selling.

Some cryptographic solutions aim to allow the voter to verify their vote personally, but not to a third party. One such way would be to provide the voter with a digitally signed receipt of their vote as well as receipts of other randomly selected votes. This would allow only the voter to identify her vote, but not be able to prove her vote to anyone else. Furthermore, each vote could be tagged with a randomly generated voting session id, which would allow the voter to check that the vote was recorded correctly in a public audit trail of the ballot.

Voter intent

Electronic voting machines are able to provide immediate feedback to the voter detecting such possible problems as undervoting and overvoting which may result in a spoiled ballot. This immediate feedback can be helpful in successfully determining voter intent.

Transparency

It has been alleged by groups such as the UK-based Open Rights Group that a lack of testing, inadequate audit procedures, and insufficient attention given to system or process design with electronic voting leaves "elections open to error and fraud".

Audit trails and auditing

Further information: [[:Voter Verified Paper Audit Trail, and End-to-End Auditable Voting Systems]]

A fundamental challenge with any voting machine is assuring the votes were recorded as cast and tabulated as recorded. Non-document ballot voting systems can have a greater burden of proof. This is often solved with an independently auditable system, sometimes called an Independent Verification, that can also be used in recounts or audits. These systems can include the ability for voters to verify how their votes were cast or further to verify how their votes were tabulated.

A discussion draft argued by researchers at the National Institute of Standards and Technology (NIST) states, "Simply put, the DRE architecture’s inability to provide for independent audits of its electronic records makes it a poor choice for an environment in which detecting errors and fraud is important." The report does not represent the official position of NIST, and misinterpretations of the report has led NIST to explain that "Some statements in the report have been misinterpreted. The draft report includes statements from election officials, voting system vendors, computer scientists and other experts in the field about what is potentially possible in terms of attacks on DREs. However, these statements are not report conclusions."

A Diebold Election Systems, Inc. model AccuVote-TSx DRE voting machine with VVPAT attachment.

Various technologies can be used to assure voters that their vote was cast correctly, detect possible fraud or malfunction, and to provide a means to audit the original machine. Some systems include technologies such as cryptography (visual or mathematical), paper (kept by the voter or only verified), audio verification, and dual recording or witness systems (other than with paper).

Dr. Rebecca Mercuri, the creator of the Voter Verified Paper Audit Trail (VVPAT) concept (as described in her Ph.D. dissertation in October 2000 on the basic voter verifiable ballot system), proposes to answer the auditability question by having the voting machine print a paper ballot or other paper facsimile that can be visually verified by the voter before being entered into a secure location. Subsequently, this is sometimes referred to as the "Mercuri method." To be truly voter-verified, the record itself must be verified by the voter and able to be done without assistance, such as visually or audibly. If the voter must use a bar-code scanner or other electronic device to verify, then the record is not truly voter-verifiable, since it is actually the electronic device that is verifying the record for the voter. VVPAT is the form of Independent Verification most commonly found in elections in the United States.

End-to-end auditable voting systems can provide the voter with a receipt she can take home. This receipt does not allow her to prove to others how she voted, but it does allow her to verify that her vote is included in the tally, all votes were cast by valid voters, and the results are tabulated correctly. End-to-end (E2E) systems include Punchscan, ThreeBallot and Prêt à Voter. Scantegrity is an add-on that extends current optical scan voting systems with an E2E layer. These systems have not yet been used in U.S. elections.

Systems that allow the voter to prove how they voted are never used in U.S. public elections, and are outlawed by most state constitutions. The primary concerns with this solution are voter intimidation and vote selling.

An audit system can be used in measured random recounts to detect possible malfunction or fraud. With the VVPAT method, the paper ballot is often treated as the official ballot of record. In this scenario, the ballot is primary and the electronic records are used only for an initial count. In any subsequent recounts or challenges, the paper, not the electronic ballot, would be used for tabulation. Whenever a paper record serves as the legal ballot, that system will be subject to the same benefits and concerns as any paper ballot system.

To successfully audit any voting machine, a strict chain of custody is required.

The solution was first demonstrated (New York City, March 2001) and used (Sacramento,CA 2002) by AVANTE International Technology, Inc.. In 2004 Nevada was the first state to successfully implement a DRE voting system that printed an electronic record. The $9.3 million voting system provided by Sequoia Voting Systems included more than 2,600 AVC EDGE touchscreen DREs equipped with the VeriVote VVPAT component. The new systems, implemented under the direction of then Secretary of State Dean Heller replaced largely punch card voting systems and were chosen after feedback was solicited from the community through town hall meetings and input solicited from the Nevada Gaming Control Board.

Hardware

Inadequately secured hardware can be subject to a physical tampering. Some critics, such as the group "Wij vertrouwen stemcomputers niet" ("We do not trust voting machines"), charge that, for instance, foreign hardware could be inserted into the machine, or between the user and the central mechanism of the machine itself, using a man in the middle attack technique, and thus even sealing DRE machines may not be sufficient protection. This claim is countered by the position that review and testing procedures can detect fraudulent code or hardware, if such things are present, and that a thorough, verifiable chain of custody would prevent the insertion of such hardware or software.

Software

Security experts, such as Bruce Schneier, have demanded that voting machine source code should be publicly available for inspection. Others have also suggested publishing voting machine software under a free software license as is done in Australia.

Testing and Certification

See also Certification of voting machines

One method to any error with voting machines is parallel testing, which are conducted on the Election Day with randomly picked machines. The ACM published a study showing that, to change the outcome of the 2000 U.S. Presidential election, only 2 votes in each precinct would have needed to been changed.

Other

Criticisms can be mitigated by review and testing procedures to detect fraudulent code or hardware, if such things are present, and thorough a verifiable chain of custody to prevent the insertion of such hardware or software.

Benefits can include reduced tabulation times and an increase of participation (voter turnout), particularly through the use of Internet voting.

Those in opposition suggest alternate vote counting systems, citing Switzerland (as well as many other countries), which uses paper ballots exclusively, suggesting that electronic voting is not the only means to get a rapid count of votes. A country of a little over 7 million people, Switzerland publishes a definitive ballot count in about six hours. In villages, the ballots are even counted manually.

Critics also note that it becomes difficult or impossible to verify the identity of a voter remotely, and that the introduction of public networks become more vulnerable and complex.

It is not yet clear whether the total cost of ownership with electronic voting is lower than other systems.

Electronic voting examples

Further information: [[:Electronic voting examples]]

Polling place electronic voting or Internet voting examples have taken place in Australia, Belgium, Brazil, Canada, Estonia, the European Union, France, Germany, India, Ireland, Italy, the Netherlands, Norway, Romania, Switzerland and the United Kingdom.

Documented problems

• A number of problems with voting systems in Florida since the 2000 Presidential election.

• Fairfax County, Virginia, November 4, 2003. Machines quit, jammed the modems in voting systems when 953 voting machines called in simultaneously to report results, leading to a denial of service incident on the election. 50% of precincts were unable to report results until the following day. Also, some voters complained that they would cast their vote for a particular candidate and the indicator of that vote would go off shortly after. Had they not noticed, their vote for that candidate would have remained uncounted; an unknown number of voters were affected by this.

• Premier Election Solutions (formerly Diebold Election Systems) TSx voting system disenfranchised many voters in Alameda and San Diego Counties during the March 2, 2004 California presidential primary due to non-functional voter card encoders. On April 30 California's secretary of state Kevin Shelley decertified all touch-screen machines and recommended criminal prosecution of Diebold Election Systems. The California Attorney-General decided against criminal prosecution, but subsequently joined a lawsuit against Diebold for fraudulent claims made to election officials. Diebold settled that lawsuit by paying $2.6 million. On February 17, 2006 the California Secretary of State Bruce McPherson then recertified Diebold Election Systems DRE and Optical Scan Voting System.

• Napa County, California, March 2, 2004, an improperly calibrated marksense scanner overlooked 6,692 absentee ballot votes. [5]

• After the 2004 U.S. presidential election there were allegations of data irregularities and systematic flaws which may have affected the outcome of both the presidential and local elections.

• On October 30 2006 the Dutch minister of Home affairs withdrew the license of 1187 voting machines from manufacturer Sdu NV, about 10% of the total number to be used, because it was proven by the Dutch National Intelligence Service that one could "listen out" the voting from up to 40 meters using Van Eck phreaking. National elections are to be held 24 days after this decision. The decision was forced by a Dutch grass roots organisation called wijvertrouwenstemcomputersniet which translates to "we don't trust voting computers".

• Problems in the United States general elections, 2006:
  • During early voting in Miami, Hollywood and Fort Lauderdale, Florida in October 2006 three votes intended to be recorded for Democratic candidates were displaying as cast for Republican. Election officials attributed it to calibration errors in the touch screen of the voting system.
  • In Pennsylvania, a computer programming error forced some to cast paper ballots. In Indiana, 175 precincts also resorted to paper. Counties in those states also extended poll hours to make up for delays.
  • A file of about 1000 first and second hand incident reports made to a non-partisan hotline that operated the day of the November 7 midterm elections as well as news reports.
• Instances of faulty technology and security issues surrounding these machines were documented on August 1, 2001 in the Brennan Center at New York University Law School. NY University Law School released a report with more than 60 examples of e-voting machine failures in 26 states in 2004 and 2006. Examples included Spanish language ballots that were cast by voters but not counted in Sacramento in 2004.

• California Secretary of State Top to Bottom Review of voting systems:
  • In May 2007, California Secretary of State Debra Bowen, engaged computer security experts including University of California to perform security evaluations of voting system source code as well as "red teams" running "worst case" Election Day scenarios attempting to identify vulnerabilities to tampering or error. The TTBR also included a comprehensive review of manufacturer documentation as well as a review of accessibility features and alternative language requirements.
  • The end results of the tests was released in the four detailed Secretary of State August 3, 2007 resolutions (for Diebold Election Systems, Hart InterCivic, Sequoia Voting Systems and Elections Systems and Software, Inc.) and updated October 25, 2007 revised resolutions for Diebold and Sequoia voting systems.
  • On August 3, 2007 Bowen decertified machines that were tested in her top to bottom view including the ES&S InkaVote machine, which was not included in the review because the company submitted it past the deadline for testing. The report issued July 27, 2007 was conducted by the expert "red team" attempting to detect the levels of technological vulnerability. Another report on August 2, 2007 was conducted by a source code review team to detect flaws in voting system source code. Both reports found that three of the tested systems fell far short of the minimum requirements specified in the 2005 Voluntary Voting System Guidelines (VVSG). Some of the systems tested were conditionally recertified with new stringed security requirements imposed. The companies in question have until the February 2008 California Presidential Primaries to fix their security issues and insure that election results can be closely audited.
• The Premier Election Solutions (formerly Diebold Election Systems) AccuVote-TSx voting system was studied by a group of Princeton University computer scientists in 2006. Their results showed that the AccuVote-TSx could be "installed with vote-stealing software in under a minute." The scientists also said that machines can transmit computer viruses from one to another "during normal pre- and post-election activity."

Recommendations for improvement

In December 2005 the US Election Assistance Commission unanimously adopted the 2005 Voluntary Voting System Guidelines, which significantly increase security requirements for voting systems and expand access, including opportunities to vote privately and independently, for individuals with disabilities. The guidelines will take effect in December 2007 replacing the 2002 Voting System Standards (VSS) developed by the Federal Election Commission.

Some groups such as the Open Voting Consortium believe that to restore voter confidence and to reduce the potential for fraud, all electronic voting systems must be completely available to public scrutiny.

Legislation

In the summer of 2004, the Legislative Affairs Committee of the Association of Information Technology Professionals issued a nine-point proposal for national standards for electronic voting. In an accompanying article, the committee's chair, Charles Oriez, described some of the problems that had arisen around the country.

Legislation has been introduced in the United State's Congress regarding electronic voting including the Nelson-Whitehouse bill. This bill would appropriate as much as 1 billion dollars to fund states replacement of touch screen systems with optical scan voting system. The legislation also address requiring audits of 3% of precincts in all federal elections. It also mandates some form paper trail audits for all electronic voting machines by the year 2012 on any type of voting technology.

Another bill, HR.811 (The Voter Confidence and Increased Accessibility Act of 2007), proposed by Representative Rush D. Holt, Jr., a Democrat from New Jersey, would act as an amendment to the Help America Vote Act of 2002 and require electronic voting machines to produce a paper audit trail for every vote. The U.S. Senate companion bill version introduced by Senator Bill Nelson from Florida on November 1, 2007, necessitates the Director of the National Institute of Standards and Technology to continue researching and to provide methods of paper ballot voting for those with disabilities, those who do not primarily speak English, and those who do not have a high literacy rating. Also, it requires states to provide the federal office with audit reports from the hand counting of the voter verified paper ballots. Currently, this bill has been turned over to the United States Senate Committee on Rules and Administration and a vote date has not been set.

During 2008 Congressman Holt, because of an increasing concern regarding the insecurities surrounding the use of electronic voting technology, has submitted additional bills to Congress regarding the future of electronic voting. One, called the "Emergency Assistance for Secure Elections Act of 2008" (HR5036), states that the General Services Administration will reimburse states for the extra costs of providing paper ballots to citizens, and the costs needed to hire people to count them. This bill was introduced to the House on January 17, 2008 . This bill estimates that $500 million will be given to cover costs of the reconversion to paper ballots; $100 million given to pay the voting auditors; $30 million given to pay the hand counters. This bill provides the public with the choice to vote manually if they do not trust the electronic voting machines. . A voting date has not yet been determined.

Popular Culture

In the 2006 movie Man of the Year staring Robin Williams, the character played by Williams--a Jon Stewart-like comedic host of political talk show--wins the election for President of the United States when a software error in the electronic voting machines produced by the fictional manufacturer Delacroy causes votes to be tallied inaccurately.

In Runoff, a 2007 novel by Mark Coggins, a surprising showing by the Green Party candidate in a San Francisco Mayoral election forces a runoff between him and the highly favored establishment candidate--a plot line that closely parallels the actual results of the 2003 election. When the private-eye protagonist of the book investigates at the behest of a powerful Chinatown businesswoman, he determines that the outcome was rigged by someone who defeated the security on the city's newly installed e-voting system.

"Hacking Democracy" is a 2006 documentary film shown on HBO. Filmed over three years, it documents American citizens investigating anomalies and irregularities with electronic voting systems that occurred during America's 2000 and 2004 elections, especially in Volusia County, Florida. The film investigates the flawed integrity of electronic voting machines, particularly those made by Diebold Election Systems and culminates in the hacking of a Diebold election system in Leon County, Florida.

The 2008 film Uncounted documents the alleged problems caused by electronic voting machines and their software manufactured by Diebold.

Electronic voting manufacturers

• AccuPoll
• Advanced Voting Solutions, formerly Shoup Voting Machine Co.
• AVANTE International Technology, Inc.
• Bharat Electronics Limited (India)
• Dominion Voting Systems Corporation (Canada)
• Electronic Corporation of India Ltd
• ES&S (USA)
• Hart InterCivic (USA)
• MicroVote
• Nedap (Netherlands)
• Premier Election Solutions (formerly Diebold Election Systems) (USA)
• Sequoia Voting Systems (USA)
• UniLect
• VOTEX / TM Technologies Elections Inc. (Canada)

Academic efforts

• Prêt à Voter
• Punchscan

See also

• Voting machine
• Certification of voting machines
• Electoral fraud
• Vote counting system
• E-democracy

External links

• Election Assistance Commission
• Vote.NIST.gov - The National Institute of Standards and Technology Help America Vote Act page.
• Practical Security Analysis of E-voting Systems by Triinu Mägi, a master thesis studying the security of the Estonian e-voting system and SERVE (Secure Electronic Registration and Voting Experiment)
• The Election Technology Library research list - A comprehensive list of research relating to technology use in elections.
• E-Voting information from ACE Project
• The Machinery of Democracy: Voting System Security, Accessibility, Usability, and Cost from Brennan Center for Justice at the New York University Law School
• Electronic Voting Systems at Curlie
• NPR summary of current technology status in the states of the U.S., as of May 2008.