tailieunhanh - Scantegrity II Municipal Election at Takoma Park: The First E2E Binding Governmental Election with Ballot Privacy

With the Scantegrity II voting system, voters mark op- tical scan paper ballots with pens, filling the oval for the candidates of their choice. These ballots are handled as traditional ballots, permitting all the usual automated and manual counting, accounting, and recounting. Ad- ditionally, the voting system provides a layer of integrity protection through its use of invisible-ink confirmation codes. When voters mark ballot ovals using a decoder pen, confirmation codes printed in invisible ink are re- vealed. Interested voters can note down these codes to check them later on the election website. The codes are generated randomly for each race and each ballot, and hence do not reveal the corresponding vote | Scantegrity II Municipal Election at Takoma Park The First E2E Binding Governmental Election with Ballot Privacy Richard Carback UMBC CDL Aleksander Essex University of Waterloo Ronald L. Rivest M1TCSA1L Paul S. Herrnson UMCP CAPC Emily Shen MITCSAIL David Chaum Jeremy Clark University of Waterloo Travis Mayberry UMBC CDL Alan T. Sherman UMBC CDL John Conway UMBC CDL Stefan Popoveniuc Poorvi L. Vora GW Abstract On November 3 2009 voters in Takoma Park Maryland cast ballots for the mayor and city council members using the Scantegrity II voting system the first time any end-to-end E2E voting system with ballot privacy has been used in a binding governmental election. This case study describes the various efforts that went into the election including the improved design and implementation of the voting system streamlined procedures agreements with the city and assessments of the experiences of voters and poll workers. The election with 1728 voters from six wards involved paper ballots with invisible-ink confirmation codes instant-runoff voting with write-ins early and absentee mail-in voting dual-language ballots provisional ballots privacy sleeves any-which-way scanning with parallel conventional desktop scanners end-to-end verifiability based on optional web-based voter verification of votes cast a full hand recount thresholded authorities three independent outside auditors fully-disclosed software and exit surveys for voters and pollworkers. Despite some glitches the use of Scantegrity II was a success demonstrating that E2E cryptographic voting systems can be effectively used and accepted by the general public. 1 Introduction The November 2009 municipal election of the city of Takoma Park Maryland marked the first time that anyone could verify that the votes were counted correctly in a secret ballot election for public office without having to be present for the entire proceedings. This article is a case study of the Takoma Park election describing what was done .