System and method for controlling actions taken on voting devices

• US 8,352,312 B2
• Filed: 02/17/2011
• Issued: 01/08/2013
• Est. Priority Date: 02/12/2010
• Status: Active Grant

• Current Assignee: Election Systems & Software Incorporated
• Original Assignee: ES&S Innovations, LLC
• Inventors: Carbullido, Kenneth D.
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US13/029,511
• Publication Number:
  US 20110202464A1
• Time in Patent Office: 691 Days
• Field of Search: 705/12
• US Class Current: 705/12
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G07C 13/00 Voting apparatus
• CPC Class Codes: H04L 2209/463 Electronic voting
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

The present invention is directed to a system and method that allows a central election office to maintain control over actions taken on voting devices located at various polling locations. In an exemplary embodiment, a poll worker or other user contacts the central election office with a request to perform an action on a voting device. An election management system located at the central election office executes a hashing algorithm to generate a first hash code associated with the action. The central election office communicates the first hash code to the polling location, and the poll worker or other user inputs the first hash code into the voting device. The voting device executes the same hashing algorithm to generate a second hash code associated with the action, and compares the second hash code to the first hash code to verify the validity of the first hash code. If the validity of the first hash code is verified, the voting device permits the poll worker or other user to perform the action on the voting device.

Claims

1. A computer-implemented method for controlling actions taken on voting devices, comprising:

generating, by an election management system comprising a computer located at a central election office and via execution of a hashing algorithm, a first hash code associated with a request to perform an action on a voting device located at a polling location;

receiving, by a processor of the voting device, the first hash code;

executing, by the processor of the voting device, the hashing algorithm to generate a second hash code;

determining, by the processor of the voting device, that the second hash code matches the first hash code; and

performing, by the processor of the voting device, the action in response to said determining that the second hash code matches the first hash code.

2. The computer-implemented method of claim 1, wherein the first hash code is communicated from the central election office to the polling location.

3. The computer-implemented method of claim 1, wherein the first hash code comprises a unique code associated with the action.

4. The computer-implemented method of claim 1, wherein the first hash code comprises a time-based code that permits the action during a time period.

5. The computer-implemented method of claim 1, wherein the first hash code is provided with an index number to indicate the number of times that the first hash code is used in connection with the voting device.

6. The computer-implemented method of claim 1, wherein the first hash code comprises a non-unique code that is used to permit a plurality of other actions on a plurality of other voting devices.

7. The computer-implemented method of claim 1, wherein the first and second hash codes are generated using data stored in both the election management system and the voting device.

8. The computer-implemented method of claim 7, wherein the data comprises one or more of a voter registration number, a voter name, a voter date of birth, a voter address, an election name, an election date, an election identification code, a precinct number, a polling place identification code, a serial number of the voting device, and a serial number of an removable memory device installed in the voting device.

9. The computer-implemented method of claim 1, wherein the first hash code is generated using information entered into the election management system in connection with the request to perform the action on the voting device.

10. The computer-implemented method of claim 9, wherein the information comprises a time period during which the action is permitted to be performed on the voting device, and wherein the time period is represented by a first time period identifier that is used to generate the first hash code.

11. The computer-implemented method of claim 10, wherein an internal clock of the voting device is used to determine a second time period identifier that is used to generate the second hash code.

12. The computer-implemented method of claim 1, wherein the voting device comprises a poll book.

13. The computer-implemented method of claim 12, wherein the action comprises using the poll book to un-issue a voting credit previously issued to a voter.

14. The computer-implemented method of claim 12, wherein the action comprises using the poll book to change a voter address.

15. The computer-implemented method of claim 12, wherein the action comprises using the poll book to change a party of a registered voter.

16. The computer-implemented method of claim 12, wherein the action comprises using the poll book to issue a provisional ballot to a voter.

17. The computer-implemented method of claim 12, wherein the action comprises recovering the poll book from a failure condition.

18. The computer-implemented method of claim 12, wherein the action comprises synchronizing a database of the poll book with a central database.

19. The computer-implemented method of claim 12, wherein the action comprises updating firmware on the poll book.

20. The computer-implemented method of claim 12, wherein the action comprises using the poll book to print reports.

21. The computer-implemented method of claim 1, wherein the voting device comprises a ballot tabulation device.

22. The computer-implemented method of claim 21, wherein the action comprises clearing vote totals on the ballot tabulation device.

23. The computer-implemented method of claim 21, wherein the action comprises one of locking or unlocking the ballot tabulation device.

24. The computer-implemented method of claim 21, wherein the action comprises one of opening polls, re-opening polls or closing polls on the ballot tabulation device.

25. The computer-implemented method of claim 21, wherein the action comprises changing a modem telephone number associated with the central election office on the ballot tabulation device.

26. The computer-implemented method of claim 21, wherein the action comprises re-sending a file from the ballot tabulation device to a modem telephone number associated with the central election office.

27. The computer-implemented method of claim 21, wherein the action comprises disabling a function of the ballot tabulation device.

28. The computer-implemented method of claim 21, wherein the action comprises installing a memory device in the ballot tabulation device.

29. The computer-implemented method of claim 21, wherein the action comprises using the ballot tabulation device to print reports.

30. The computer-implemented method of claim 1, wherein the voting device comprises a ballot marking device.

31. The computer-implemented method of claim 1, wherein the voting device comprises a direct recording electronic voting machine.

32. A system for controlling actions taken on voting devices, comprising:

an election management system comprising a processor programmed to execute a hashing algorithm and generate, using the hashing algorithm, a first hash code associated with a request to perform an action; and

a voting device comprising an input device that provides for manual entry of the first hash code, the voting device further comprising a processor programmed to (i) receive the first hash code from the input device;

(ii) execute the hashing algorithm and generate a second hash code, (iii) compare the second hash code to the first hash code to determine whether the second hash code matches the first hash code, and (iv) perform the action when the second hash code matches the first hash code.

33. The system of claim 32, wherein the election management system is located at a central election office, wherein the voting device is located at a polling location, and wherein the first hash code is communicated from the central election office to the polling location.

34. The system of claim 32, wherein the first hash code comprises a unique code associated with the action.

35. The system of claim 32, wherein the first hash code comprises a time-based code that permits the action during a time period.

36. The system of claim 32, wherein the first hash code is provided with an index number to indicate the number of times that the first hash code is used in connection with the voting device.

37. The system of claim 32, wherein the first hash code comprises a non-unique code that is used to permit a plurality of other actions on a plurality of other voting devices.

38. The system of claim 32, wherein the first and second hash codes are generated by the hashing algorithm using data stored in both the election management system and the voting device.

39. The system of claim 38, wherein the data comprises one or more of a voter registration number, a voter name, a voter date of birth, a voter address, an election name, an election date, an election identification code, a precinct number, a polling place identification code, a serial number of the voting device, and a serial number of an removable memory device installed in the voting device.

40. The system of claim 32, wherein the first hash code is generated using information entered into the election management system in connection with the request to perform the action.

41. The system of claim 40, wherein the information comprises a time period during which the action is permitted to be performed on the voting device, and wherein the time period is represented by a first time period identifier that is used to generate the first hash code.

42. The system of claim 41, wherein the processor uses an internal clock of the voting device to determine a second time period identifier that is used to generate the second hash code.

43. The system of claim 32, wherein the voting device comprises a poll book.

44. The system of claim 43, wherein the action comprises one of the following:

using the poll book to un-issue a voting credit previously issued to a voter;

using the poll book to change a voter address;

using the poll book to change a party of a registered voter;

using the poll book to issue a provisional ballot to a voter;

recovering the poll book from a failure condition;

synchronizing a database of the poll book with a central database;

updating firmware on the poll book; and

using the poll book to print reports.

45. The system of claim 32, wherein the voting device comprises a ballot tabulation device.

46. The system of claim 45, wherein the action comprises one of the following:

clearing vote totals on the ballot tabulation device;

locking the ballot tabulation device;

unlocking the ballot tabulation device;

opening polls on the ballot tabulation device;

re-opening polls on the ballot tabulation device;

closing polls on the ballot tabulation device;

changing a modem telephone number associated with the election management system on the ballot tabulation device;

re-sending a file from the ballot tabulation device to a modem telephone number associated with the election management system;

disabling a function of the ballot tabulation device;

installing a memory device in the ballot tabulation device; and

using the ballot tabulation device to print reports.

47. The system of claim 32, wherein the voting device comprises a ballot marking device.

48. The system of claim 32, wherein the voting device comprises a direct recording electronic voting machine.

49. The voting device of claim 32, wherein the voting device comprises a ballot marking device.

50. The voting device of claim 32, wherein the voting device comprises a direct recording electronic voting machine.