Cryptographic voting debuts

Nov 13, 2009 by Larry Hardesty
In last week's municipal election in Takoma Park, Maryland, voters voted by exposing three-digit numerical codes printed on their ballots in invisible ink. By later verifying the codes online, they could help minimize the possibility of election fraud. Photo: Alex Rivest

(PhysOrg.com) -- Last week, in Takoma Park, Md., a new cryptographic voting system that could ensure accurate vote counts was used for the first time in a real election. MIT’s Ron Rivest, the Viterbi Professor of Electrical Engineering and Computer Science, helped develop the system and says he’s quite pleased with how the technology worked. Takoma Park’s city clerk, Jessie Carpenter, agrees that the trial "went very well."

To minimize the disruption of existing voting procedures, the system, called Scantegrity II, was designed to work with ordinary optical-scan voting technology. Optical-scan voting — which has become the dominant technology in the United States since the 2000 presidential election — usually requires the voter to fill in bubbles printed on a ballot next to candidates’ names. With Scantegrity II, the voter instead uses a special pen to expose a code printed inside the bubble in invisible ink. Thereafter, the ballot is fed into an ordinary optical reader, which simply determines which bubbles have been darkened.

Any voter who’d later like to confirm her vote can simply jot down the code that’s in the exposed bubble, along with the ballot’s serial number, and take that information home. (In the Takoma Park election, voters could record their codes on cards stacked in the voting booths, which were printed with the names of the contested offices — mayor and city councilor.) The voter can then look up that serial number on the election commission’s website and confirm that it’s correlated with the code inside the bubble she marked. Although on the website, the code is never associated with the candidate’s name, Scantegrity ensures that if just 2 percent of voters confirm their codes, it’s statistically almost impossible for vote tampering to go undetected.

The key to the system is that before the election, the election commission prepares a set of tables that, taken together, link the ballot codes and the candidates’ names; but that link can’t be deduced from any one table by itself. Then the commission publicly releases a set of digital signatures that cryptographically describe all the entries in the tables without actually revealing them. That way, the tables can’t be tampered with after the ballots are cast, but neither do they reveal any information that ballot stuffers could use before the election.

After the election, the election commission releases some of the information contained in the tables — including the codes exposed on all the recorded ballots — along with encryption keys that verify its authenticity. The partially revealed tables conceal enough information to preserve voter anonymity: There’s no way to figure out which ballot went for which candidate. But they reveal enough information that anyone interested in performing an audit can ferret out fraud.

Going into the Takoma Park trial, the crucial question was whether 2 percent of voters would bother to write down their codes and check them online. According to Poorvi Vora, a member of the Scantegrity team at George Washington University, 1,722 votes were cast and 66 people checked their codes — almost 4 percent.

Carpenter says that she would have liked that number to be higher. But “that’s not the fault of the Scantegrity system,” she says. “We needed to have done more education of the voters.”

Another question was whether the decoder pens would hold up over the course of the day. “The smudging issue was one we were slightly concerned about,” Rivest says. “You know, if you take a highlighter and you run it over newspaper, it will collect the black ink.” Poll workers, he says, were instructed to check the decoder pens occasionally to make sure they were in good working order. But “the ink seemed to be lasting fine,” Rivest says, and “smudging wasn’t much of an issue.”

Carpenter adds that a very small number of voters refused to use the decoder pens, instead pulling out their own ink pens and filling in the bubbles. But since the Scantegrity system requires no modification to the optical scanners, that kind of improvised procedural change didn’t affect the final tally.

“I was a little bit afraid that we’d have a lot of invalid ballots,” Carpenter says. “But we didn’t. We had some, but I don’t think it was high compared to any other ballot-marking system.” Rivest confirms that, according to the Scantegrity team’s research, the fraction of invalid ballots was consistent with that seen in conventional optical-scan voting.

“I don’t think the system slowed us down at all,” Carpenter adds. Slightly after 5 p.m., she says, a large wave of voters hit the polls, and the wait got up to about 15 minutes, she says. But Carpenter believes that the sudden surge was the result of a story on a local National Public Radio affiliate describing the Scantegrity trial. “I think we got a little publicity boost that made people come out who might otherwise not have come out,” she says. “We just had tremendous lines once that story hit, and I can’t believe it was coincidence.”

When Takoma Park decided to use the Scantegrity system, “we certainly took notice of that,” says Matthew Masterson of the U.S. Election Assistance Commission, which oversees voting technologies and procedures in the United States. “The National Institute of Standards and Technology, who’s our partner in developing the standards, just held a conference on end-to-end cryptographic systems [like Scantegrity II], and we’ve started the process of looking at systems like that and how to test them.” Masterson adds that “anytime a jurisdiction takes a look at new technology like that —the cryptographic end-to end system in this case — that’s a great conversation for voters and election officials to be having. And in that sense, it’s very positive for democracy.”

Provided by Massachusetts Institute of Technology (news : web)

Explore further: Ant colonies help evacuees in disaster zones

add to favorites email to friend print save as pdf

Related Stories

Protect your vote -- avoid election machine errors

Nov 03, 2008

Of all the conceivable problems that could lead to a miscount Election Day, there's one possibility that voters can do something about – avoid making election machine-related errors, says a University of ...

The Web: Internet voting still a long way off?

Sep 28, 2005

Some of the recommendations to improve electronic voting technology made by the election reform commission headed by former President Jimmy Carter and former Secretary of State James Baker provide only "marginal" improvements ...

Voters confused by e-voting technologies

Jan 28, 2008

A study led by the University of Maryland suggested that electronic U.S. voting technologies are efficient but too many voters ask for help too often.

Recommended for you

Fired Yahoo exec gets $58M for 15 months of work

8 minutes ago

Yahoo's recently fired chief operating officer, Henrique de Castro, left the Internet company with a severance package of $58 million even though he lasted just 15 months on the job.

Simplicity is key to co-operative robots

8 hours ago

A way of making hundreds—or even thousands—of tiny robots cluster to carry out tasks without using any memory or processing power has been developed by engineers at the University of Sheffield, UK.

Freight train industry to miss safety deadline

8 hours ago

The U.S. freight railroad industry says only one-fifth of its track will be equipped with mandatory safety technology to prevent most collisions and derailments by the deadline set by Congress.

IBM posts lower 1Q earnings amid hardware slump (Update)

9 hours ago

IBM's first-quarter earnings fell and revenue came in below Wall Street's expectations amid an ongoing decline in its hardware business, one that was exacerbated by weaker demand in China and emerging markets.

User comments : 5

Adjust slider to filter visible comments by rank

Display comments: newest first

freethinking
not rated yet Nov 13, 2009
Three questions, does this stop those not eligible to vote from voting and does this actually increase security of the election? If the first two questions are yes then the third is will ACORN and other such organization then say that this technology disenfranchises minority voters?
MGraser
not rated yet Nov 13, 2009
People being who they are, the manufacturer will want to come up with a way that doesn't require people to write down the code. Besides, might some people have trouble reading the code or write it down incorrectly - then thinking that there's a problem when there isn't? Probably a paper printout afterward would help (of course, then you have potential paper jamming issues).

Nevertheless, I think this is a solid step forward.
Sean_W
not rated yet Nov 13, 2009
A paper printout does not let you check to see if what you voted was later changed before the polls closed. I think that more people would check their vote on major elections and where the race was close or when there has been a history of irregularities.

The issue of eligibility would not be addressed by this particular system but at least it would be harder to change the results with ineligible votes or ballot stuffing without making the totals unrealistic.

While it is still possible to spoil your ballot it would either require your own pen (write spoil over all boxes) or expose all numbers which is indistinguishable from simple confusion. A "none of the above" protest box needs to be manditory for it to be really fair. Otherwise you disenfranchise the disillusioned.
jamesrm
not rated yet Nov 14, 2009
"Otherwise you disenfranchise the disillusioned"

Do we need to re-illusion the disenfranchised?

Regards
James
Doug_Huffman
not rated yet Nov 14, 2009
In a cryptic election the vote counters determine the winner what ever the voters may wish to the contrary.

More news stories

Simplicity is key to co-operative robots

A way of making hundreds—or even thousands—of tiny robots cluster to carry out tasks without using any memory or processing power has been developed by engineers at the University of Sheffield, UK.

Microsoft CEO is driving data-culture mindset

(Phys.org) —Microsoft's future strategy: is all about leveraging data, from different sources, coming together using one cohesive Microsoft architecture. Microsoft CEO Satya Nadella on Tuesday, both in ...

Floating nuclear plants could ride out tsunamis

When an earthquake and tsunami struck the Fukushima Daiichi nuclear plant complex in 2011, neither the quake nor the inundation caused the ensuing contamination. Rather, it was the aftereffects—specifically, ...

Patent talk: Google sharpens contact lens vision

(Phys.org) —A report from Patent Bolt brings us one step closer to what Google may have in mind in developing smart contact lenses. According to the discussion Google is interested in the concept of contact ...

Quantenna promises 10-gigabit Wi-Fi by next year

(Phys.org) —Quantenna Communications has announced that it has plans for releasing a chipset that will be capable of delivering 10Gbps WiFi to/from routers, bridges and computers by sometime next year. ...