System and Method for Controlling Actions Taken on Voting Devices

• US 20110202464A1
• Filed: 02/17/2011
• Published: 08/18/2011
• Est. Priority Date: 02/12/2010
• Status: Active Grant

• Current Assignee: Election Systems & Software Incorporated
• Original Assignee: ES&S Innovations, LLC
• Inventors: Carbullido, Kenneth D.
• Granted Patent: US 8,352,312 B2
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G07C 13/00 Voting apparatus
• CPC Class Codes: H04L 2209/463 Electronic voting
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

The present invention is directed to a system and method that allows a central election office to maintain control over actions taken on voting devices located at various polling locations. In an exemplary embodiment, a poll worker or other user contacts the central election office with a request to perform an action on a voting device. An election management system located at the central election office executes a hashing algorithm to generate a first hash code associated with the action. The central election office communicates the first hash code to the polling location, and the poll worker or other user inputs the first hash code into the voting device. The voting device executes the same hashing algorithm to generate a second hash code associated with the action, and compares the second hash code to the first hash code to verify the validity of the first hash code. If the validity of the first hash code is verified, the voting device permits the poll worker or other user to perform the action on the voting device.

Claims

1. A computer-implemented method for controlling actions taken on voting devices, comprising:

receiving a first hash code associated with a request to perform an action on a voting device located at a polling location, wherein the first hash code is generated by a hashing algorithm at a central election office;

entering the first hash code into the voting device, wherein the voting device verifies the validity of the first hash code by executing the hashing algorithm to generate a second hash code and then comparing the second hash code to the first hash code, and wherein the voting device permits the action if the validity of the first hash code is verified; and

performing the action on the voting device.

2. The computer-implemented method of claim 1, wherein the first hash code is communicated from the central election office to the polling location.

3. The computer-implemented method of claim 1, wherein the first hash code comprises a unique code associated with the action.

4. The computer-implemented method of claim 1, wherein the first hash code comprises a time-based code that permits the action during a time period.

5. The computer-implemented method of claim 1, wherein the first hash code is provided with an index number to indicate the number of times that the first hash code is used in connection with the voting device.

6. The computer-implemented method of claim 1, wherein the first hash code comprises a non-unique code that is used to permit a plurality of other actions on a plurality of other voting devices.

7. The computer-implemented method of claim 1, wherein the first hash code is generated by an election management system at the central election office.

8. The computer-implemented method of claim 7, wherein the first and second hash codes are generated by the hashing algorithm using data stored in both the election management system and the voting device.

9. The computer-implemented method of claim 8, wherein the data comprises one or more of a voter registration number, a voter name, a voter date of birth, a voter address, an election name, an election date, an election identification code, a precinct number, a polling place identification code, a serial number of the voting device, and a serial number of an removable memory device installed in the voting device.

10. The computer-implemented method of claim 7, wherein the first hash code is generated by the hashing algorithm using information entered into the election management system in connection with the request to perform the action on the voting device.

11. The computer-implemented method of claim 10, wherein the information comprises a time period during which the action is permitted to be performed on the voting device, and wherein the time period is represented by a first time period identifier that is used by the hashing algorithm to generate the first hash code.

12. The computer-implemented method of claim 11, wherein an internal clock of the voting device is used to determine a second time period identifier that is used by the hashing algorithm to generate the second hash code.

13. The computer-implemented method of claim 1, wherein the voting device comprises a poll book.

14. The computer-implemented method of claim 13, wherein the action comprises using the poll book to un-issue a voting credit previously issued to a voter.

15. The computer-implemented method of claim 13, wherein the action comprises using the poll book to change a voter address.

16. The computer-implemented method of claim 13, wherein the action comprises using the poll book to change a party of a registered voter.

17. The computer-implemented method of claim 13, wherein the action comprises using the poll book to issue a provisional ballot to a voter.

18. The computer-implemented method of claim 13, wherein the action comprises recovering the poll book from a failure condition.

19. The computer-implemented method of claim 13, wherein the action comprises synchronizing a database of the poll book with a central database.

20. The computer-implemented method of claim 13, wherein the action comprises updating firmware on the poll book.

21. The computer-implemented method of claim 13, wherein the action comprises using the poll book to print reports.

22. The computer-implemented method of claim 1, wherein the voting device comprises a ballot tabulation device.

23. The computer-implemented method of claim 22, wherein the action comprises clearing vote totals on the ballot tabulation device.

24. The computer-implemented method of claim 22, wherein the action comprises one of locking or unlocking the ballot tabulation device.

25. The computer-implemented method of claim 22, wherein the action comprises one of opening polls, re-opening polls or closing polls on the ballot tabulation device.

26. The computer-implemented method of claim 22, wherein the action comprises changing a modem telephone number associated with the central election office on the ballot tabulation device.

27. The computer-implemented method of claim 22, wherein the action comprises re-sending a file from the ballot tabulation device to a modem telephone number associated with the central election office.

28. The computer-implemented method of claim 22, wherein the action comprises disabling a function of the ballot tabulation device.

29. The computer-implemented method of claim 22, wherein the action comprises installing a memory device in the ballot tabulation device.

30. The computer-implemented method of claim 22, wherein the action comprises using the ballot tabulation device to print reports.

31. The computer-implemented method of claim 1, wherein the voting device comprises a ballot marking device.

32. The computer-implemented method of claim 1, wherein the voting device comprises a direct recording electronic voting machine.

33. A system for controlling actions taken on voting devices, comprising:

an election management system comprising a processor programmed to execute a hashing algorithm to generate a first hash code associated with a request to perform an action; and

a voting device comprising an input device that provides for manual entry of the first hash code, the voting device further comprising a processor programmed to (i) execute the hashing algorithm to generate a second hash code, (ii) compare the second hash code to the first hash code to verify the validity of the first hash code, and (iii) permit the action if the validity of the first hash code is verified.

34. The system of claim 33, wherein the election management system is located at a central election office, wherein the voting device is located at a polling location, and wherein the first hash code is communicated from the central election office to the polling location.

35. The system of claim 33, wherein the first hash code comprises a unique code associated with the action.

36. The system of claim 33, wherein the first hash code comprises a time-based code that permits the action during a time period.

37. The system of claim 33, wherein the first hash code is provided with an index number to indicate the number of times that the first hash code is used in connection with the voting device.

38. The system of claim 33, wherein the first hash code comprises a non-unique code that is used to permit a plurality of other actions on a plurality of other voting devices.

39. The system of claim 33, wherein the first and second hash codes are generated by the hashing algorithm using data stored in both the election management system and the voting device.

40. The system of claim 39, wherein the data comprises one or more of a voter registration number, a voter name, a voter date of birth, a voter address, an election name, an election date, an election identification code, a precinct number, a polling place identification code, a serial number of the voting device, and a serial number of an removable memory device installed in the voting device.

41. The system of claim 33, wherein the first hash code is generated by the hashing algorithm using information entered into the election management system in connection with the request to perform the action.

42. The system of claim 41, wherein the information comprises a time period during which the action is permitted to be performed on the voting device, and wherein the time period is represented by a first time period identifier that is used by the hashing algorithm to generate the first hash code.

43. The system of claim 42, wherein the processor uses an internal clock of the voting device to determine a second time period identifier that is used by the hashing algorithm to generate the second hash code.

44. The system of claim 33, wherein the voting device comprises a poll book.

45. The system of claim 44, wherein the action comprises one of the following:

using the poll book to un-issue a voting credit previously issued to a voter;

using the poll book to change a voter address;

using the poll book to change a party of a registered voter;

using the poll book to issue a provisional ballot to a voter;

recovering the poll book from a failure condition;

synchronizing a database of the poll book with a central database;

updating firmware on the poll book; and

using the poll book to print reports.

46. The system of claim 33, wherein the voting device comprises a ballot tabulation device.

47. The system of claim 46, wherein the action comprises one of the following:

clearing vote totals on the ballot tabulation device;

locking the ballot tabulation device;

unlocking the ballot tabulation device;

opening polls on the ballot tabulation device;

re-opening polls on the ballot tabulation device;

closing polls on the ballot tabulation device;

changing a modem telephone number associated with the election management system on the ballot tabulation device;

re-sending a file from the ballot tabulation device to a modem telephone number associated with the election management system;

disabling a function of the ballot tabulation device;

installing a memory device in the ballot tabulation device; and

using the ballot tabulation device to print reports.

48. The system of claim 33, wherein the voting device comprises a ballot marking device.

49. The system of claim 33, wherein the voting device comprises a direct recording electronic voting machine.

65. The voting device of claim 33, wherein the voting device comprises a ballot marking device.

66. The voting device of claim 33, wherein the voting device comprises a direct recording electronic voting machine.

50. A voting device, comprising:

an input device that provides for manual entry of a first hash code, wherein the first hash code is generated by a hashing algorithm in connection with a request to perform an action; and

a processor in communication with the input device to receive the first hash code, wherein the processor is programmed to (i) execute the hashing algorithm to generate a second hash code, (ii) compare the second hash code to the first hash code to verify the validity of the first hash code, and (iii) permit the action if the validity of the first hash code is verified.

51. The voting device of claim 50, wherein the first hash code is generated by an election management system located at a central election office, wherein the voting device is located at a polling location, and wherein the first hash code is communicated from the central election office to the polling location.

52. The voting device of claim 50, wherein the first hash code comprises a unique code associated with the action.

53. The voting device of claim 50, wherein the first hash code comprises a time-based code that permits the action during a time period.

54. The voting device of claim 50, wherein the first hash code is provided with an index number to indicate the number of times that the first hash code is used in connection with the voting device.

55. The voting device of claim 50, wherein the first hash code comprises a non-unique code that is used to permit a plurality of other actions on a plurality of other voting devices.

56. The voting device of claim 50, wherein the first and second hash codes are generated by the hashing algorithm using data stored in both the election management system and the voting device.

57. The voting device of claim 56, wherein the data comprises one or more of a voter registration number, a voter name, a voter date of birth, a voter address, an election name, an election date, an election identification code, a precinct number, a polling place identification code, a serial number of the voting device, and a serial number of an removable memory device installed in the voting device.

58. The voting device of claim 51, wherein the first hash code is generated by the hashing algorithm using information entered into the election management system in connection with the request to perform the action.

59. The voting device of claim 58, wherein the information comprises a time period during which the action is permitted to be performed, and wherein the time period is represented by a first time period identifier that is used by the hashing algorithm to generate the first hash code.

60. The voting device of claim 59, wherein the processor uses an internal clock of the voting device to determine a second time period identifier that is used by the hashing algorithm to generate the second hash code.

61. The voting device of claim 50, wherein the voting device comprises a poll book.

62. The voting device of claim 61, wherein the action comprises one of the following:

using the poll book to un-issue a voting credit previously issued to a voter;

using the poll book to change a voter address;

using the poll book to change a party of a registered voter;

using the poll book to issue a provisional ballot to a voter;

recovering the poll book from a failure condition;

synchronizing a database of the poll book with a central database;

updating firmware on the poll book; and

using the poll book to print reports.

63. The voting device of claim 50, wherein the voting device comprises a ballot tabulation device.

64. The voting device of claim 61, wherein the action comprises one of the following:

clearing vote totals on the ballot tabulation device;

locking the ballot tabulation device;

unlocking the ballot tabulation device;

opening polls on the ballot tabulation device;

re-opening polls on the ballot tabulation device;

closing polls on the ballot tabulation device;

changing a modem telephone number associated with a central election office on the ballot tabulation device;

re-sending a file from the ballot tabulation device to a modem telephone number associated with the central election office;

disabling a function of the ballot tabulation device;

installing a memory device in the ballot tabulation device; and

using the ballot tabulation device to print reports.