Packet-based internet voting transactions with biometric authentication

• US 20030136835A1
• Filed: 01/21/2003
• Published: 07/24/2003
• Est. Priority Date: 01/23/2002
• Status: Active Grant

• Current Assignee: Avante International Technology
• Original Assignee: AII Technology Company Limited (Wistron Corporation)
• Inventors: Chung, Kevin Kwong-Tai, Shi, Xiaoming, Minadeo, James Arthur
• Granted Patent: US 6,973,581 B2
• Time in Patent Office: Days
• US Class Current: 235/386
• CPC Class Codes: G06K 7/10346 the antenna being of the far field type, e.g. HF types or dipoles
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G07C 13/00 Voting apparatus
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

Internet voting or other Internet transaction comprises transmitting three information packets via the Internet. At least one information packet includes an identifier that is authenticated, such as a key, a biometric digitized signature or other biometric identifier. Where an information packet may include transaction information in a predetermined form, information packets including information in another form may be processed separately.

Claims

1. A method for conducting a transaction via the Internet comprising:

transmitting via the Internet a first information packet including a biometric digitized signature;

processing the biometric digitized signature for authenticating the first information packet;

if the first information packet is authenticated, transmitting a second information packet via the Internet, the second information packet including machine readable instructions for enabling transaction information to be entered and transmitted in a predetermined format in a third information packet;

transmitting via the Internet the third information packet including transaction information entered therein;

validating the third information packet as relating to the second information packet;

if the third information packet is validated, testing the third information packet for transaction information in the predetermined format; and

if the transaction information is in the predetermined format, processing the transaction information of the third information packet that is in the predetermined format for conducting a transaction.

2. The method of claim 1 further comprising, if the transaction information of the third information packet includes information not in the predetermined format:

testing the information not in the predetermined format for malicious code, and, if not including malicious code,

processing the information not in the predetermined format for conducting the transaction.

3. The method of claim 2 wherein the transaction includes voting and the transaction information includes voting selections, and

wherein the transaction information in the predetermined format represents voting selections selected from among predetermined voting selections of a ballot transmitted in the second information packet, and

wherein the information not in the predetermined format represents write-in voting selections.

4. The method of claim 1 wherein:

the transaction includes registering and the transaction information includes registration information relating to a person registering; and

/or

the transaction includes voting and the transaction information includes voting selections.

5. The method of claim 4 wherein the biometric digitized signature represents the person registering and/or a person voting.

6. The method of claim 1 wherein said processing the biometric digitized signature for authenticating the first information packet includes comparing the biometric digitized signature with a database of registered biometric digitized signatures.

7. The method of claim 1 wherein each second information packet further includes a unique identifier, and wherein said validating the third information packet as relating to the second information packet includes comparing an identifier included in the third information packet with a database of unique identifiers included in second information packets.

8. The method of claim 1 further comprising:

providing in the first, second and/or third information packets a PKI key of a sender thereof, and/or

encrypting one or more of the first, second and third information packets.

9. A method for conducting a voting transaction via the Internet comprising:

transmitting via the Internet a sign-in information packet including a biometric digitized signature of a person voting;

processing the biometric digitized signature of the sign-in information packet for authenticating the person voting;

if the sign-in information packet is authenticated, transmitting a ballot information packet via the Internet, the ballot information packet including machine-readable instructions for enabling voting selection information to be entered and transmitted in a predetermined format in a voted ballot information packet, wherein the voting selection information may include a selection from among predetermined selections and/or a write-in selection;

transmitting via the Internet the voted ballot information packet including voting selection information entered therein;

testing the voted ballot information packet for voting selection information representing a write-in selection; and

for voting selection information selected from among predetermined selections, counting the voting selection information of the third information packet selected from among predetermined selections;

for voting selection information including a write-in selection, testing the write-in selection for malicious code, and, if not including malicious code; and

counting the write-in voting selection.

10. The method of claim 9 wherein each write in selection is limited to a predetermined number of characters and/or is limited to ASCII characters.

11. The method of claim 9 wherein voting selection information including a write-in selection is processed separately from and/or subsequently to voting selection information selected from among predetermined selections.

12. The method of claim 9 wherein the steps of claim 9 are repeated for conducting a plurality of voting transactions, and wherein each voting selection information including a write-in selection is processed separately from each other voting selection information including a write-in selection.

13. The method of claim 9 wherein said processing the biometric digitized signature for authenticating the person voting includes comparing the biometric digitized signature thereof with a database of biometric digitized signatures of registered voters.

14. The method of claim 9 wherein each ballot information packet further includes a voter identifier, the method further comprising validating the voted ballot information packet as relating to the second information packet by comparing a voter identifier included in the voted ballot information packet with a database of voter identifiers included in ballot information packets.

15. A method for conducting a plurality of voting transactions in an election, at least a portion of the voting transactions being conducted via the Internet, comprising:

transmitting via the Internet a request for a ballot, the request for a ballot including voter identifying information and a biometric identifier in an information packet;

authenticating the request for a ballot by authenticating the biometric identifier as corresponding to a voter;

if the request for a ballot is authenticated, transmitting via the Internet a ballot information packet including a ballot and a voter identifier corresponding to the voter, the ballot for selecting among predetermined voting selections and for making write-in voting selections;

transmitting via the Internet a voted ballot information packet including the voter identifier corresponding to the voter and voting selections selected from among the predetermined voting selections and/or write-in voting selections;

validating the voted ballot information packet by comparing the voter identifier therein with voter identifiers included in ballot information packets; and

if validated, opening the voted ballot information packet and counting the voting selections therein.

16. The method of claim 15 further comprising registering voters, wherein registering voters comprises:

transmitting via the Internet a registration application including voter identifying information and a voter biometric identifier;

storing in a registration database the voter identifying information and the voter biometric identifier; and

acknowledging via the Internet the registering of the voter.

17. The method of claim 16 wherein said authenticating the request for a ballot by authenticating the biometric identifier as corresponding to a voter includes comparing the biometric identifier thereof with the voter biometric identifier stored in the registration database.

18. The method of claim 16 wherein said acknowledging includes generating a voter identifier for the voter, and wherein the generated voter identifier is included in the ballot information packet as the voter identifier corresponding to the voter.

19. The method of claim 15 wherein the voted ballot information packets include regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets, and wherein regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets are validated by said validating and thereafter separately undergo said opening and counting.

20. The method of claim 15 wherein said opening and counting step for voted ballot information packets including only voting selections selected from among the predetermined voting selections is performed separately from said opening and counting step for voted ballot information packets including write-in voting selections.

21. A method for conducting a plurality of voting transactions in an election, at least a portion of the voting transactions being conducted via the Internet, comprising:

transmitting via the Internet a request for a ballot, the request for a ballot including voter authenticating information in one information packet;

authenticating the request for a ballot by authenticating the voter authenticating information therein as corresponding to a voter;

if the request for a ballot is authenticated, transmitting via the Internet one ballot information packet including a ballot and an identifier, the ballot for selecting among predetermined voting selections and for making write-in voting selections;

transmitting via the Internet one voted ballot information packet including the identifier and voting selections selected from among the predetermined voting selections and/or write-in voting selections;

validating the voted ballot information packet by comparing the identifier therein with identifiers included in ballot information packets; and

if validated, opening the voted ballot information packet and counting the voting selections therein.

22. The method of claim 21 wherein the voter authenticating information includes one or more of a symmetric key, an asymmetric key, a public key, a private key, a biometric identifier, and/or a biometric digitized signature.

23. The method of claim 21 further comprising registering voters, wherein registering voters comprises:

transmitting via the Internet a registration application including voter identifying information and a voter identifier;

storing in a registration database the voter identifying information and the voter identifier; and

acknowledging via the Internet the registering of the voter.

24. The method of claim 23 wherein the voter identifier includes one or more of a symmetric key, an asymmetric key, a public key, a private key, a biometric identifier, and/or a biometric digitized signature.

25. The method of claim 23 wherein said authenticating the request for a ballot by authenticating the voter authenticating information as corresponding to a voter includes comparing the voter authenticating information thereof with the voter identifier stored in the registration database.

26. The method of claim 23 wherein said acknowledging includes generating a voter identifier for the voter, and wherein the generated voter identifier is included in the ballot information packet.

27. The method of claim 21 wherein the voted ballot information packets include regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets, and wherein regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets are validated by said validating and thereafter separately undergo said opening and counting.

28. The method of claim 21 wherein said opening the voted ballot information packet and counting step for voted ballot information packets including only voting selections selected from among the predetermined voting selections is performed separately from said opening the voted ballot information packet and counting step for voted ballot information packets including write-in voting selections.

29. The method of claim 21 wherein the write-in voting selection is limited as to both number and type of characters that may be entered.

30. A method for conducting a plurality of voting transactions in an election, at least a portion of the voting transactions being conducted via the Internet, comprising:

transmitting via the Internet a request for a ballot, the request for a ballot including voter identifying information in an information packet;

authenticating the request for a ballot as corresponding to a voter;

if the request for a ballot is authenticated, transmitting via the Internet a ballot information packet including a ballot and an identifier, the ballot for selecting among predetermined voting selections and for making write-in voting selections, wherein each write-in selection is limited as to both number and type of characters that may be entered;

transmitting via the Internet a voted ballot information packet including the identifier and voting selections selected from among the predetermined voting selections and/or write-in voting selections;

validating the voted ballot information packet by comparing the identifier therein with identifiers included in ballot information packets; and

if validated, opening the voted ballot information packet and counting the voting selections therein.

31. The method of claim 30 wherein the write-in selections are limited to 32 or fewer ASCII characters.

32. The method of claim 30 wherein the voted ballot information packets include regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets, and wherein regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets are validated by said validating and thereafter separately undergo said opening the voted ballot information packet and counting the voting selections therein.

33. The method of claim 30 wherein said opening the voted ballot information packet and counting step for voted ballot information packets including only voting selections selected from among the predetermined voting selections is performed separately from said opening the voted ballot information packet and counting step for voted ballot information packets including write-in voting selections.

34. The method of claim 33 wherein said opening the voted ballot information packet and counting step for voted ballot information packets including write-in voting selections is performed separately for each write-in voting selection.

35. The method of claim 30 wherein said opening the voted ballot information packet and counting step for voted ballot information packets including write-in voting selections includes testing each write-in selection for malicious code.

36. The method of claim 30 further comprising registering voters, wherein registering voters comprises:

transmitting via the Internet a registration application including voter identifying information;

storing in a registration database the voter identifying information; and

acknowledging via the Internet the registering of the voter.

37. The method of claim 36 wherein said acknowledging includes generating an identifier for the voter, and wherein the generated identifier is included in the ballot information packet as the identifier thereof.

38. A method for conducting a plurality of voting transactions in an election, at least a portion of the voting transactions being conducted via the Internet, comprising:

transmitting via the Internet a request for a ballot, the request for a ballot including voter identifying information in an information packet;

authenticating the request for a ballot by authenticating the voter identifying information as corresponding to a voter;

if the request for a ballot is authenticated, transmitting via the Internet a ballot information packet including a ballot and an identifier, the ballot for selecting among predetermined voting selections and for making write-in voting selections;

transmitting via the Internet a voted ballot information packet including the identifier and voting selections selected from among the predetermined voting selections and/or write-in voting selections;

validating the voted ballot information packet by comparing the identifier therein with identifiers included in ballot information packets;

opening the validated voted ballot packet and separating any write-in voting selections thereof from voting selections thereof selected from among the predetermined voting selections;

counting the voting selections selected from among the predetermined voting selections; and

separately opening and counting any write-in voting selection.

39. The method of claim 38 wherein said opening the validated voted ballot packet and separating any write-in voting selections thereof from voting selections thereof selected from among the predetermined voting selections comprises:

separating any voted ballot packet having a write-in voting selection therein from voted ballot packets having only voting selections thereof selected from among the predetermined voting selections,

opening the voted ballot packets having only voting selections selected from among the predetermined voting selections; and

for any voted ballot packet having a write-in voting selection therein, separating the write-in voting selection from the voting selections thereof selected from among the predetermined voting selections.

40. The method of claim 38 wherein said separately opening and counting any write-in voting selection includes testing each write-in selection for malicious code.

41. The method of claim 38 wherein each write-in voting selection is limited as to both number and type of characters that may be entered.

42. The method of claim 41 wherein each write-in voting selection is limited to 32 ASCII characters.

43. The method of claim 38 wherein the voted ballot information packets include regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets, and wherein regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets are validated by said validating and thereafter separately undergo said opening and separating, said counting, and said separately opening and counting.

44. A storage medium encoded with machine-readable computer instructions for conducting a transaction via the Internet comprising:

means for causing a computer to receive via the Internet a first information packet including an authenticating identifier;

means for causing a computer to process the authenticating identifier for authenticating the first information packet;

means for causing a computer to transmit a second information packet via the Internet if the first information packet is authenticated, the second information packet including machine readable instructions for enabling transaction information to be entered and transmitted in a predetermined format in a third information packet;

means for causing a computer to receive via the Internet the third information packet including transaction information entered therein;

means for causing a computer to validate the third information packet as relating to the second information packet;

means for causing a computer to test the third information packet for transaction information in the predetermined format if the third information packet is validated; and

means for causing a computer to process the transaction information of the third information packet that is in the predetermined format for conducting a transaction if the transaction information is in the predetermined format.

45. The storage medium of claim 44 wherein said means for causing the computer to process the authenticating identifier for authenticating the first information packet includes means for causing the computer to compare the authenticating identifier with a database of registered authenticating identifiers.

46. The storage medium of claim 44 wherein each second information packet further includes a unique identifier, and wherein said means for causing the computer to validate the third information packet as relating to the second information packet includes means for causing the computer to compare an identifier included in the third information packet with a database of unique identifiers included in second information packets.

47. The storage medium of claim 44 wherein the authenticating identifier includes one or more of a symmetric key, an asymmetric key, a public key, a private key, a biometric identifier, and/or a biometric digitized signature.

48. A storage medium encoded with machine-readable computer instructions for conducting a plurality of voting transactions in an election, at least a portion of the voting transactions being conducted via the Internet comprising:

means for causing the computer to receive via the Internet a request for a ballot, the request for a ballot including voter identifying information and an authenticating identifier in an information packet;

means for causing the computer to authenticate the request for a ballot by authenticating the authenticating identifier as corresponding to a voter;

means for causing the computer to transmit via the Internet a ballot information packet including a ballot and a voter identifier corresponding to the voter if the request for a ballot is authenticated, the ballot for selecting among predetermined voting selections and for making write-in voting selections;

means for causing the computer to transmit via the Internet a voted ballot information packet including the voter identifier corresponding to the voter and voting selections selected from among the predetermined voting selections and/or write-in voting selections;

means for causing the computer to validate the voted ballot information packet by comparing the voter identifier therein with voter identifiers included in ballot information packets; and

means for causing the computer to open the validated voted ballot information packet and count the voting selections therein.

49. The storage medium of claim 48 further comprising means for causing the computer to register voters, wherein registering voters comprises:

means for causing the computer to receive via the Internet a registration application including voter identifying information and a voter authenticating identifier;

means for causing the computer to store in a registration database the voter identifying information and the voter authenticating identifier; and

means for causing the computer to acknowledge via the Internet the registering of the voter.

50. The storage medium of claim 49 wherein said means for causing the computer to authenticate the request for a ballot by authenticating the authenticating identifier as corresponding to a voter includes means for causing the computer to compare the authenticating identifier thereof with the voter authenticating identifier stored in the registration database.

51. The storage medium of claim 49 wherein said means for causing the computer to acknowledge includes generating a voter identifier for the voter, and wherein the generated voter identifier is included in the ballot information packet as the voter identifier corresponding to the voter.

52. The storage medium of claim 49 wherein the voter authenticating identifier includes one or more of a symmetric key, an asymmetric key, a public key, a private key, a biometric identifier, and/or a biometric digitized signature.

53. The storage medium of claim 48 wherein the authenticating identifier includes one or more of a symmetric key, an asymmetric key, a public key, a private key, a biometric identifier, and/or a biometric digitized signature.

54. The storage medium of claim 48 wherein the voted ballot information packets include regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets, and wherein regular voted ballot information packets, provisionally voted ballot information packets and/or absentee voted ballot information packets are validated by said means for causing the computer to validate and thereafter separately undergo said means for causing the computer to open and count.

55. The storage medium of claim 48 wherein said means for causing the computer to open and count for voted ballot information packets including only voting selections selected from among the predetermined voting selections is performed separately from said means for causing the computer to open and count for voted ballot information packets including write-in voting selections.