Distributed network voting system

• US 6,873,966 B2
• Filed: 06/15/2001
• Issued: 03/29/2005
• Est. Priority Date: 06/15/2000
• Status: Expired due to Term

• Current Assignee: Hart InterCivic Incorporated (H.I.G. Hart, LLC)
• Original Assignee: Hart InterCivic Incorporated (H.I.G. Hart, LLC)
• Inventors: McClure, Neil L., Babbitt, Victor L.
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): Greene, Daniel L.
• Application Number:
  US09/882,758
• Publication Number:
  US 20020019767A1
• Time in Patent Office: 1,383 Days
• Field of Search: 705/12, 705/50, 713/155, 713/180, 235/386, 380/30
• US Class Current: 705/12
• CPC Class Codes: G07C 13/00 Voting apparatus

Abstract

A secure election system provides a downloadable ballot viewer object for the casting of ballots. The ballot viewer object authenticates the user, permits user interaction in the casting of ballots, seals the cast ballot image by encryption, and transmits the cast ballot to election headquarters. The ballot viewer object may be used to perform secure voting on the Internet.

Claims

1. An encrypted computer readable form embodying machine executable instructions for permitting a voter to cast a ballot by interaction with an official ballot image resulting in the creation of a cast vote record that maybe transmitted to a server, comprising:

a computer-readable medium encoded with a computer program instructions operable to convert the computer readable form from an encrypted to a decrypted state such that in the decrypted state the computer readable form includes voter authentication code for comparing official voter authentication data against data to be provided by the voter at the voter'"'"'s personal computer;

display code configured for use in displaying the official ballot image to the voter while permitting the voter to create a cast vote record by interaction with the ballot image until such time as the voter casts the ballot; and

message transmission code for use in transmitting the cast vote record to the server,

wherein the voter authentication code is configured to authenticate a voter for voting on a personal computer without requiring a server to assist in authenticating an individual voter while the display code is present on the personal computer.

2. The encrypted computer readable form of claim 1, wherein the voter authentication data is selected from the group consisting of a password, biometric data, mother'"'"'s maiden name, town of birth, social security number, children'"'"'s birthdays, voter address, and other personal data.

3. The encrypted computer readable form of claim 1, wherein the voter authentication code includes code for comparing an official password against a password that is provided by the voter.

4. The encrypted computer readable form of claim 1, wherein the voter authentication code includes code for accessing a biometric authentication device.

5. The encrypted computer readable form of claim 1, wherein the voter authentication code includes code for accessing a device in the possession of the voter, the device being selected from the group consisting of a smart card, an optical storage device, and a magnetic storage device.

6. The encrypted computer readable for of claim 1, wherein the voter authentication code includes code for comparing hashed authentication data against voter input data.

7. The encrypted computer readable form of claim 1 including data for the official ballot image presenting the voter with all choices as they would appear on an absentee paper ballot that the voter would receive in an election.

8. The encrypted computer readable form of claim 1 including data comprising the official ballot image which is accessible to the display code to present the voter with a ballot consisting of contests in which the voter is authorized to vote.

9. The encrypted computer readable form of claim 1 comprising code for checking video memory for ballot selections that are displayed to the voter against other memory containing ballot choices that the voter has made.

10. The encrypted computer readable form of claim 1, wherein the message transmission code includes code for encrypting the cast vote record prior to transmission.

11. The encrypted computer readable form of claim 10, wherein the message transmission includes code for implementing a secure transmission protocol in transmitting the cast vote record to an election server.

12. The encrypted computer readable form of claim 1, wherein the encrypted computer readable form is stored on a disk.

13. The encrypted computer readable form of claim 1, wherein the encrypted computer readable form is configured for download from a server.

14. The encrypted computer readable form of claim 1, wherein the message transmission code includes code for encrypting the cast vote record prior to transmission through use of an encryption key.

15. The encrypted computer readable form of claim 14, including code for deleting the decrypted computer readable form once the code for encrypting and the message transmission code have completed their tasks.

16. The encrypted computer readable form of claim 1, wherein the encrypted computer readable form is packaged as an object including all data that is required for voter authentication.

17. The encrypted computer readable form of claim 1, wherein the encrypted computer readable form is packaged as an object including all data that is required for the voter to create a cast vote record.

18. The encrypted computer readable form of claim 1 including code for implementing a virus mitigation measure.

19. The encrypted computer readable form of claim 18, wherein the virus mitigation measure is selected from the group consisting of compiled sections of executable code with a plurality of static functions in different order, the insertion of junk functions into executable code, an absence of text tags to system function calls, serialized executable file names, serialized data file headers, virus checking upon execution of the decrypted computer readable form for viruses that are known to interact with the decrypted computer readable form, and means for comparing video memory to the ballot image that is displayed to the voter.

20. A method of voting using network telecommunications through use of a downloadable encrypted ballot viewer object containing an official ballot image, voter authentication information, and executable code for use in casting a ballot, the method comprising the steps of:

downloading the encrypted ballot viewer object;

decrypting the ballot viewer object to produce a decrypted ballot viewer object

authenticating a voter in association with the decrypted ballot viewer object;

displaying an official ballot image derived from the decrypted ballot viewer object;

creating a cast vote record by voter interaction with the official ballot image; and

transmitting the cast vote record to an election server

the step of authenticating the voter being performed after the step of decrypting the ballot and before the step of transmitting the cast vote record by executing voter authentication code from the ballot viewer object and authenticating the voter without interacting with the server after the step of downloading the ballot viewer object.

21. The method according to claim 20, wherein the step of downloading the encrypted ballot viewer object includes downloading the encrypted ballot viewer object as an email attachment.

22. The method according to claim 20 including a step of storing the encrypted ballot viewer object on a server that is accessible from the Internet.

23. The method according to claim 22 including a step of notifying a voter that the downloadable encrypted ballot viewer object has been stored on the server and is available for download prior to the downloading step.

24. The method according to claim 20 including a step of charging a transactional fee for at least one of the downloading and transmitting steps.

25. The method according to claim 20, wherein the step of downloading the encrypted ballot viewer object includes downloading the encrypted ballot viewer object through use of an official service of the United States Postal Service.

26. The method according to claim 20, wherein the step of downloading the encrypted ballot viewer object includes downloading through the use of a secure transmission protocol.

27. The method according to claim 20, wherein the step of downloading the encrypted ballot viewer object includes a step of confirming a voter by password prior to commencing the downloading step.

28. The method according to claim 20, wherein the step of downloading the encrypted ballot viewer object includes encrypting the ballot viewer object for download.

29. The method according to claim 20, wherein the step of authenticating the voter includes comparing the voter authentication information with interactive input provided by a voter.

30. The method according to claim 29, wherein the voter authentication information contained in the encrypted ballot viewer object is hashed and the step of authenticating the voter includes hashing the interactive input from the voter for comparison purposes.

31. The method according to claim 20, wherein the step of displaying the official ballot image includes displaying an electronic replica of an absentee paper ballot that a voter would receive in an election.

32. The method according to claim 20 including a step of encrypting the cast vote record prior to the transmitting step.

33. The method according to claim 20 including a step of deleting the decrypted ballot viewer object and cast vote record from a voter'"'"'s computer once the transmitting step is complete.

34. The method according to claim 20 including a step of sending an email confirmation message to the voter upon receipt of the cast vote record transmitted by the voter.

35. The method according to claim 34 including a step of replicating the voter'"'"'s cast vote record in the email confirmation message.

36. The method according to claim 20 including a step of creating the encrypted ballot viewer object to have a unique combination of voter authorization information and official ballot image information assigned to a particular voter.

37. The method according to claim 36, wherein the official ballot image information includes selecting contests for presentation in the official ballot image according to contests in which the voter is authorized to vote.

38. The method according to claim 20, wherein the transmitting step is performed using an official server that is authorized by the United States Postal Service.

39. The method according to claim 20, wherein the transmitting step is performed using encryption of the cast vote record.

40. The method according to claim 20, wherein at least one of the downloading and transmitting steps is accomplished through use of the Internet.

41. The method according to claim 40 including a step of resolving problems that arise as a result of transmitting messages through use of the Internet.

42. The method according to claim 41, wherein the step of resolving problems includes parsing the cast vote record to identify corrupted ballot information.

43. The method according to claim 41, wherein the step of resolving problems includes preventing a single voter from casting multiple ballots.

44. The method according to claim 41, wherein the step of resolving problems includes notifying the voter that an encrypted ballot viewer object has been downloaded but the transmitting step has not been completed within a predetermined amount of time since the downloading step occurred.

45. The method according to claim 41, wherein the step of resolving problems includes facilitating a subsequent download in the event of a download failure upon an initial attempt at performing the download step.

46. The method according to claim 20 including a step of protecting against virus attack.

47. The method according to claim 46, wherein the protecting step includes creating the encrypted ballot viewer object by compiling sections of executable code with a plurality of static functions in different order, inserting junk functions into executable code, avoiding use of text tags to system function calls, using serialized executable file names, using serialized data file headers, checking upon execution of the computer readable form for viruses that are known to interact with the computer readable form, and comparing video memory to ballot selections that the voter has made.

48. A system for use in voting through network telecommunications devices that transmit a downloadable encrypted ballot viewer object containing an official ballot image, voter authentication information, and executable code for use in casting a ballot, the system comprising:

means for downloading the encrypted ballot viewer object;

means for decrypting the encrypted ballot viewer object to provide a decrypted ballot viewer object;

means for authenticating a voter in association with the decrypted ballot viewer object;

means for displaying an official ballot image derived from the decrypted ballot viewer object;

means for creating a cast vote record by voter interaction with the official ballot image; and

means for transmitting the cast vote record to an election server,

the means for authenticating the voter being configured for operation sequentially after execution of the means for downloading the ballot and before execution of the means for transmitting the cast vote record,

the means for authenticating the voter including executable authentication code obtained from the decrypted ballot viewer object,

the executable voter authentication code not requiring interaction with a server after the downloading the encrypted ballot viewer object to complete voter authentication processing.

49. The system of claim 48, wherein the means for downloading the encrypted ballot viewer object includes means for downloading the encrypted ballot viewer object as an email attachment.

50. The system of claim 48 including means for storing the encrypted ballot viewer object on a server that is accessible from the Internet.

51. The system of claim 50 including means for notifying a voter that the downloadable encrypted ballot viewer object has been stored on the server and is available for download prior to use of the downloading means.

52. The system of claim 48 including means for charging a transactional fee for use of at least one of the downloading and transmitting means.

53. The system of claim 48, wherein the means for downloading the encrypted ballot viewer object includes means for downloading the encrypted ballot viewer object through use of an official service of the United States Postal Service.

54. The system of claim 48, wherein the means for downloading the encrypted ballot viewer object includes means for downloading through the use of a secure transmission protocol.

55. The system of claim 48, wherein the means for downloading the encrypted ballot viewer object includes means for confirming a voter by password prior to use of the downloading means.

56. The system of claim 48, wherein the means for downloading the encrypted ballot viewer object includes means for encrypting a nonencrypted ballot viewer object.

57. The system of claim 48, wherein the means for authenticating the voter includes means for comparing the voter authentication information with interactive input provided by a voter.

58. The system of claim 57, wherein the voter authentication information contained in the encrypted ballot viewer object is hashed and the means for authenticating the voter includes means for hashing the interactive input from the voter for comparison purposes.

59. The system of claim 48, wherein the means for displaying the official ballot image includes means for displaying an electronic replica of an absentee paper ballot that a voter would receive in an election.

60. The system of claim 48 including means for encrypting the cast vote record prior to use of the transmitting means.

61. The system of claim 48 including means for deleting the decrypted ballot viewer object and cast vote record from a voter'"'"'s computer once the transmitting means has transmitted the cast vote record.

62. The system of claim 48 including a means for sending an email confirmation message to the voter upon receipt of the cast vote record transmitted by the voter.

63. The system of claim 62 including means for replicating the voter'"'"'s cast vote record in the email confirmation message.

64. The system of claim 48 including means for creating the encrypted ballot viewer object to have a unique combination of voter authorization information and official ballot image information assigned to a particular voter.

65. The method according to claim 64, wherein the official ballot image information includes selected contests for presentation in the official ballot image according to contests in which the voter is authorized to vote.

66. The system of claim 48, wherein the transmitting means includes transmission through an official server that is authorized by the United States Postal Service.

67. The system of claim 48, wherein the transmitting means includes means for encrypting the cast vote record.

68. The system of claim 48, wherein at least one of the downloading and transmitting means includes the Internet.

69. The system of claim 68 including a means for resolving problems that arise as a result of transmitting messages through use of the Internet.

70. The system of claim 69, wherein the means for resolving problems includes means for parsing the cast vote record to identify corrupted ballot information.

71. The system of claim 69, wherein the means for resolving problems includes means for preventing a single voter from casting multiple ballots.

72. The system of claim 69, wherein the means for resolving problems includes means for notifying the voter that an encrypted ballot viewer object has been downloaded but that a transmission from the transmitting means has not been received within a predetermined amount of time since the encrypted ballot viewer object was downloaded.

73. The system of claim 69, wherein the step of resolving problems includes facilitating a subsequent download in the event of a download failure upon an initial attempt at performing the download step.

74. The system of claim 48 including a means for protecting against virus attack.

75. The system of claim 74, wherein the protecting means includes a means selected from the group consisting of means for creating the encrypted ballot viewer object by compiling sections of executable code with a plurality of static functions in different order, means for inserting junk functions into executable code, an absence of text tags to system function calls, means for using serialized executable file names, means for using serialized data file headers, means for checking upon execution of the computer readable form for viruses that are known to interact with the computer readable form, and means for comparing video memory to the ballot image that is displayed to the voter.