I worked out a new voting system that,
combining the good points of paper voting with those of computing,
guarantees quick, honest and verifiable results.
Please read details at www.ClearVoting.com

ACCESSIBILITYa

electronic voting and Democracy

traduci in italiano

Details

none previous chapter. Accesskey=1 none next chapter. Accesskey=2
logo of the site

electronic voting and Democracy

Details

 

e-vote results can't be verified

With the aim of overcoming the fact that results of electronic elections are not verifiable, some people suggest a couple of (supposed) solutions:

  1. Voter Verified Balloting
    The concept of Voter Verified Balloting was created by Rebecca Mercuri.
    VVPAT is the acronym of "Voter Verified Paper Audit Trail" and VVBP is the acronym of "voter verified paper ballot". The terms are equivalent and refer to a kind of "vote receipt" printed by an electronic voting machine that shows the elector his/her vote as it is being entered into the electoral system. The voter must be required to perform an action that confirms that their choices have been recorded correctly on the paper, hence making it a verified (rather than just "verifiable") ballot in a legal sense. The VVPAT/VVBP is kept by the election official, as the record of votes cast, for audit and recount purposes. Verification of a small percentage of VVPAT should to be activated when elections are close.

    I see the following points about VVPAT:

    • the winner of the election is decided in the first count (probably the only count) which is based on electronic votes. Infact VVPATs are counted in the second count (recount or audit), but this rarely happens thus VVPATs will most likely not be used or counted. You are able to view the Paper Audit Trail, and make sure it is correct. You have no way of knowing what your electronic ballot says. You can feel relatively certain that if there is a hand recount, your vote will be counted properly. But since hand recounts are very rare, when you look at that piece of paper, you are not actually verifying your vote. There is still nothing to verify that your actual vote was correct.
    • VVPAT recounts shouldn't occur only when elections are very close.
      Infact where deliberate fraud does take place, the magnitude of the fraud may not be small. And also the magnitude of accidental errors may not necessarily be small. Thus fraud and errors can produce very different results. Unfortunately many people, and state laws, only want recounts to be conducted when elections are very close. It seems that people are willing to do recounts in the case of small accidental errors but not to detect fraud or large errors!
    • it is not possible to make a statistical "recount" of VVPATs by manually counting a small percentage of them and seeing if the result is more or less the same as the electronic one. Infact, as candidates of USA-2000 election well remember, elections can be very close and so a precise count of all the VVPATs could be necessary. Some legislations require a little 1% recount to validate electronic results!

    Thus VVPAT can't be used to verify electronic electoral results unless they are all counted. But if we really print and count VVPAT for each casted vote then we simply run a paper election which ballots are printed by machines instead of being hand written by electors!

    • we double the efforts of each election, which is now made of an electronic one and a paper one
    • we greately increase the election cost (try to imagine how it costs to buy and maintain a PC in each voting boot, plus the software, plus the network apparatus and lines, plus the high-tech skill involved, ... and compare it with the cost of ballot papers and pencils!)
    • we know from the beginning that the official result will always be the one coming from the counting of VVPATs. Infact we use them to confirm electronic results, thus in case of discepancies they surely win. Thus, what for do we also run an electronic election?

     
  2. Electors' verification of their recorded vote. If each elector could (and would) verify the vote recorded on his behalf is really the one he cast, then we would verify the correctness of the election's result. I think such a result's verification is impossible to realize since:
    • all the electors should verify their own vote simultaneously at the same time in which a (proven error-and-fraud-free) tally is executed to produce the final result. If the counting would not occur in the same moment while ALL the votes are being verified, we could not have the prove votes being properly tallied up: it's a joke to program any computer to show to an elector his true vote and then not taking it in account during the count.

    Furthermore, we can't build any system allowing people to verify how their votes have been recorded because:

    • votes would be no more anonymous since voters could be tracked (otherwise we couldn't know who can verify them).
      We would miss the anonymity requirement due to the possibility to link a vote with its voter. It is not enough to say that the "key" to make such link might be only available to the elector himself. In paper ballots such key doesn't exist at all! Anyway, even if we could find a safe way to allow voters to verify the vote stored in their behalf ...
    • there is no way to know if a claim of error would be honest
      We know electors can't be given (for their own sake!) any "receipt" stating how they voted, and thus there is no way for them to prove, if it is the case, the vote stored in their behalf is not the one they really cast.
      Even if it would exist an algorithm allowing the verification of the recorded votes without breaking their anonymity, it should be used with great care. In fact it would in any case show the electors how their vote has been recorded and thus it would be much like as they were given a receipt of the cast vote. But vote "receipt" can't be used!
    • we must have options in case such verification fails
      Any verification process must have at least two options to be taken upon its result: if the prototype of the new car is properly working we start producing it on large scale, but if such verification is negative we don't.
      But what could we do if somebody claims his vote to be erroneously recorded? There would be no prove pro or against such claim; should we change the result of elections because of it? Electors might even change their mind, what should we do if half a million people request to change their vote? Should we allow it? Will the pro tempore winner agree?
      Electronic voting's verification is quite a strange process: regardless how it goes, the election's results are in any case confirmed! We didn't notice it but we entered a logical loop:
      1. due to the large interests moved by elections (we talk about ruling people and nations), we want electoral results to be verifiable.
      2. we want to use electronic vote and find out the only way to verify the final result is to verify each electors' vote.
      3. discrepancies between recorded votes and what electors claim they cast cannot be proved, thus we can't modify the result nor cancel an election simply because (few?) people claim vote have been falsely accounted for.
      4. not permitting any changes we act like if results were error-free and fraud-free and thus we could blindly accept them. This is an obvious contrast to the starting point 1)
      If anybody can honestly say elections results' don't need any verification, please go to e-vote otherwise go back to point 1)

Electronic elections results' cannot be verified
As the vote must obviously be secret, then the method to scrutinize it, to count the votes cast must be completely out in the open, otherwise the public will lose the possibility of verifying the results.
The only way is to use anonymous ballot papers publicly scrutinized.

These are in fact the procedures adopted to date by all the liberal democracies; a written vote in secret on an anonymous ballot-paper that is first mixed with hundreds of others and then counted in public together with the others. In this way the ballot-papers are tangible, legible to the naked eye, anonymous and durable in time. They are also verifiable later. The counting procedures, if public control is effectively carried out, guarantee that all the ballot-papers of a polling station are correctly interpreted. In this way, the electors are certain that their own vote has been correctly counted even though the anonymity of the ballot-papers does not allow the identification of individual votes. The results of the count at every polling station are numbers visible to the naked eye and, being public, also the counting procedures are verifiable by everyone; even the sums at the various levels (local authority, province, region/state and nation) can be verified.
The public and repeatable procedures and votes that are tangible objects, like the ballot-papers, constitute the only system that can guarantee anonymity and assure the correct counting of the votes.


 
The site is made of several chapters. You can change chapter clicking on the arrows or pressing the access keys 1 and 2. Some chapters are made of several documents. You can change document clicking on the arrows or pressing the access keys 3 and 4. Access keys are described in the Accessibility page. Site Map is in this Site Map page.

This work is licensed under a Creative Commons Licence. You are free to copy, distribute, display and perform the work and to make derivative works under the following conditions: 1) You must give credit to the original author (Emanuele Lombardi) and cite the url http://www.electronic-voting.org ; 2) you may not use this work for commercial purposes; 3) If you alter, transform, or build upon this work, you may distribute the resulting work only under a licence identical to this one.


This site uses valid XHTML 1.0!__ This site uses valid CSS__ Dublin Core Metadata Initiative__ Creative Commons License
This page complies with W3C WCAG P3 but accessibility is a very difficult matter: if you find the site not easily accessible, please let me know