|
More acronyms. (sigh)
The following is snipped from
STATEMENT OF WILLIAM F. WELSH, II FORMER CHAIRMAN, CURRENT MEMBER OF THE BOARD ELECTION SYSTEMS & SOFTWARE
U.S. ELECTION ASSISTANCE COMMISSION PUBLIC HEARING ON THE USE, SECURITY, AND RELIABILITY OF ELECTRONIC VOTING SYSTEMS MAY 5, 2004
The PEB... or rogerfox's laundry card?
The iVotronic is activated by a unique personal electronic ballot (PEB) The PEB is the portable data bank which holds the ballot styles for the election. In most cases, the PEB is inserted by the pollworker, the appropriate ballot for the voter is automatically downloaded into the iVotronic. Both the personal electronic ballot (PEB) and the port are designed by ES&S and incorporate proprietary infrared communication.
Qualification Code: (EQC)
The iVotronic system also employs an election specific election qualification code (EQC) that provides system-wide security. During preventative maintenance, a single supervisor terminal electronically generates an election-specific EQC. This EQC is then transferred via the supervisor terminal to all Election Day and early-voting PEBs. Next, these PEBs download the election-specific EQC into terminal memories when individual voter and supervisor terminals are cleared and tested. Thus, in order to activate for voting, the PEB and terminal must contain the same EQC. This EQC ensures that all equipment used in an election has been through the proper preventative maintenance. Most importantly, this EQC system prevents “pirate” PEBs or terminals from being entered into the system.
The iVotronic system also requires verification for voter-activated PEBs. Before the supervisor terminal loads a ballot into a voter PEB, it checks the voter PEB for the unique ballot identification code from the ballot last loaded into the voter PEB. If no previous ballot identification code exists on the PEB, the supervisor terminal loads the ballot normally. Similarly, if the ballot identification data on the voter PEB matches the ballot identification code that is about to be loaded onto the voter PEB, the supervisor terminal loads the ballot
"Ballot image"?
As an extra precaution, ES&S has incorporated into our iVotronic touchscreen devices a unique internal audit system that provides an extremely reliable verification mechanism. This audit system includes two separate audit trails within our redundant memory functions. One audit trail captures all of the “voting events” – that is, the date and time a vote is cast. The other stores a ballot image of every ballot cast.
What do they mean by ballot image anybody know?
About the platform:
LOVE this ...in his own words snipped from the next two paragraphs.
..."this type of proprietary platform is much MORE tamper-proof ...LESS susceptible to hacking or other security breaches."
and
"Human factors must be taken into consideration, as well. As with automobiles, for example, safety does not rely solely on the way the vehicle is built. Safety also depends on the way the car is driven"
The ES&S iVotronic uses a proprietary operating system that is unique and secure, not one that you can “buy off the shelf.” The advantages of this approach are three-fold: first, this type of proprietary operating system is much more efficient and compact because it is built specifically to operate the iVotronic DRE. Second, this type of proprietary platform is much more tamper-proof because, as independent assessments have shown, it is less susceptible to hacking or other security breaches. And, third, this type of operating system is much more secure because it does not support “plug and play” devices or other peripheral equipment which would be compatible with commercially available systems.
Human factors must be taken into consideration, as well. As with automobiles, for example, safety does not rely solely on the way the vehicle is built. Safety also depends on the way the car is driven, the way other drivers operate their vehicles, and on the laws that govern vehicle design and operation. While the way the car is built is very important, it is not the only factor. So, at ES&S, we work very closely with election administrators to train and educate those who carry-out elections about the voting systems and the processes and procedures we have established to maintain theintegrityy of the voting process. It is the combination of the security features built into our systems and the on-site election support services, training, and documentation that ES&S provides to county and state election administrators that results in a secure, reliable, accurate voting solution.
...More stuff about vote process security and collection
Focused Security: Voter terminals will not allow voting until properly opened by the supervisor PEB, a specified number of which are programmed with ballots. These supervisor PEBs are distributed to precinct officials separately from the voter terminals. This process places election security in the hands of the trained precinct officials, instead of solely on those at the equipment storage facility.
Detect Pre-existing Vote Totals: If a supervisor PEB already contains votes, it cannot open a voter terminal in the normal manner. A supervisor PEB normally stores votes at the end of the election, not when the voter terminals are being opened for voting. Therefore, if a supervisor PEB contains votes, that supervisor PEB already has closed at least one voter terminal and holds a copy of that terminal’s vote totals. If this supervisor PEB continues to be used in the current election, these existing vote totals would be reported on the precinct results. To avoid error, the voter terminal always checks the supervisor PEB for pre-existing vote totals. If a supervisor PEB already contains votes, the voter terminal issues a message on its screen alerting the precinct official. The voter terminal then requires entry of a precinctspecific override password before the terminal will open for voting. This requirement assures that the situation will be called to the precinct official’s attention and would allow a precinct official to not use that PEB, if necessary.
Check the Ballot: Voter terminals check the incoming ballot for the same unique ballot qualification code that was programmed into the supervisor PEB, which opened the terminals for voting. If the ballot is not coded for the specified precinct and election, the terminal will not accept it for voting. Instead, the terminal will issue an audible alarm and display a message explaining that the PEB has not been qualified properly and cannot be used in this election until it has been reprogrammed.
That same supervisor PEB closes all voter terminals and collects all votes. Because the supervisor PEB recorded the serial numbers of all opened voter terminals, it requires that all opened voter terminals also be closed. This feature assists precinct officials in ensuring no terminals were inadvertently missed. If a reason for not closing a terminal develops, the precinct official can enter an override password and proceed normally. However, the precinct report still includes the serial numbers of any unclosed voter terminals and lists them as “not closed.”
Closing Date and Time Recorded: Voter terminals include their closing date and time on the master supervisor PEB when closed. The supervisor PEB then reports the closing date and time for each voter terminal directly beneath its corresponding opening date and time on the precinct report. This inclusion allows election officials to audit when each voter terminal at a precinct was opened and closed on Election Day. This data can also be compared to the zero tape, which was produced during the opening process.
In short ...One complex process
|