A secure system for biometric voter identification and voting authorization

Abstract

A secure biometric voter authentication and voting authorization system, consisting of: a voter identity validation module configured to receive voter identification data and verify voter eligibility against a voter database; a multi-biometric authentication module configured to capture and authenticate at least two biometric characteristics of a voter; an authentication control module configured to manage authentication attempts and enforce retry limits; a token generation module configured to generate a one-time-use, machine-readable voting authorization token after successful authentication; a voting authorization module configured to validate the token at a voting terminal and allow access to the ballot; and a central processing module configured to coordinate the operation of the modules so that only authenticated and eligible voters are allowed to cast their vote.

Description

AREA OF INVENTION

[0001] The present disclosure relates to a secure electronic voting and voter authentication system, in particular a secure biometric voter authentication and voting authorization system. More precisely, the invention relates to an integrated biometric voter verification system with multimodal biometric authentication. The proposed system combines voter identity verification, biometric recognition, and QR code-based tickets in a voting booth to enable secure, traceable, and single-use access control for voting. BACKGROUND OF THE INVENTION

[0002] Conventional voting systems rely on manual identity verification methods, such as physical identification documents, voter lists, or ink markings, to prevent multiple voting and fraud. Such approaches are vulnerable to identity theft, human error, fraud, and operational inefficiencies, especially in large elections.

[0003] Current electronic voting solutions are typically based either on centralized online authentication or on single-factor verification mechanisms, which can lead to vulnerabilities regarding connection dependency, biometric spoofing, or insufficient control of voting authorization.

[0004] Biometric authentication technologies such as fingerprint and facial recognition are used in various identity management systems. However, their integration into end-to-end voting processes remains limited, and a secure session link between authentication and the actual vote is often lacking. Token-based voting mechanisms are also known in digital systems, but conventional implementations do not guarantee single-use functionality.

[0005] Therefore, there is a need for an integrated voter authentication and election authorization system that securely combines identity verification and biometric authentication in a unified workflow. The present invention overcomes these limitations by introducing a multimodal biometric authentication framework in combination with secure QR-based election tokens and mechanisms for verifying the voting process. This improves election security, reliability, and traceability. SUMMARY OF THE INVENTION

[0006] This disclosure relates to a secure biometric voter authentication and voting authorization system. The proposed integrated biometric voter authentication and QR code-based voting authorization system is configured for secure use in polling stations. The system comprises several functional modules coordinated by a central processing unit to perform voter identity verification, biometric authentication, issuance of authorization tokens, and secure logging. The operational process ensures that only authenticated and eligible voters gain access to a voting terminal via a one-time-use, session-based token.

[0007] This disclosure aims to provide the following: A secure biometric voter authentication and voting authorization system. The system comprises: a voter identity validation module that receives voter identification data and verifies voting eligibility against a voter database; a multi-biometric authentication module that captures and authenticates at least two biometric characteristics of a voter; an authentication control module that manages authentication attempts and enforces retry limits; a token generation module that, upon successful authentication, generates a machine-readable, one-time voting authorization token; a voting authorization module that validates the token at a voting terminal and grants access to the ballot; and a central processing module that coordinates the operation of the modules so that only authenticated and eligible voters are permitted to cast their ballots.

[0008] The purpose of this disclosure is to provide a secure biometric voter authentication and voting authorization system.

[0009] Another objective of the present disclosure is to provide a secure, reliable and scalable voter authentication framework that prevents identity theft, double voting and unauthorized access to ballots in electronic or assisted voting environments.

[0010] Another objective of the invention is the integration of multibiometric authentication, including facial and fingerprint verification, into a one-way voting token mechanism based on QR codes, which ensures the enforcement of the "one person, one vote" principle while maintaining the secrecy of the ballot.

[0011] Another objective of the present invention is to enable controlled repetition management, session-based authorization and secure final verification without requiring a continuous network connection, thereby supporting both online and offline polling booth deployments.

[0012] Another objective of the present invention is to improve the traceability, operational efficiency and trustworthiness of election processes through structured logging and token lifecycle control.

[0013] To further clarify the advantages and features of the present disclosure, the invention is described in more detail with reference to specific embodiments illustrated in the accompanying drawings. It is understood that these drawings merely show typical embodiments of the invention and are therefore not to be understood as limiting its scope of protection. The invention is described and explained in more detail and with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE IMAGES

[0014] These and other features, aspects and advantages of the present disclosure will be better understood when the following detailed description is read with reference to the accompanying drawings, in which identical symbols represent identical parts, wherein: Fig. Figure 1 shows a block diagram of a secure biometric voter authentication and voting authorization system according to an embodiment of the present disclosure; and Fig. Figure 2 shows a block diagram illustrating the system architecture according to one embodiment of the present disclosure.

[0015] Furthermore, those skilled in the art will recognize that the elements in the drawings are simplified and not necessarily drawn to scale. For example, the flowcharts illustrate the process by highlighting the main steps to facilitate understanding of this disclosure. With regard to the construction of the device, one or more components may be represented in the drawings by conventional symbols. The drawings may show only those specific details relevant to understanding the embodiments of this disclosure, so as not to clutter the drawings with details that are already apparent to those skilled in the art from the description contained herein. DETAILED DESCRIPTION:

[0016] To facilitate understanding of the principles of the invention, reference is made below to the embodiment illustrated in the drawings, which is described using specific terms. It is understood, however, that this does not limit the scope of protection of the invention. Rather, modifications and further developments of the illustrated system, as well as further applications of the inventive principles depicted therein, are conceivable, insofar as they would typically occur to a person skilled in the art in the field of the invention.

[0017] It will be clear to those skilled in the art that the foregoing general description and the following detailed description are exemplary and explanatory of the invention and are not to be understood as a limitation thereof.

[0018] References to “an aspect”, “another aspect”, or similar phrases in this description mean that a particular feature, structure, or property described in connection with the embodiment is included in at least one embodiment of the present disclosure. Therefore, phrases such as “in one embodiment”, “in another embodiment”, and similar expressions in this description may, but do not necessarily, all refer to the same embodiment.

[0019] The terms "includes," "comprehensive," or similar expressions denote non-exclusive inclusion. Thus, a procedure or method containing a list of steps does not only include those steps but may also include further steps not explicitly listed or inherent in the procedure or method. Likewise, the statement "includes..." for one or more devices, subsystems, elements, structures, or components, without further limitations, does not preclude the existence of other devices, subsystems, elements, structures, or components.

[0020] Unless otherwise defined, all technical and scientific terms used herein have the same meanings generally known to those skilled in the art in the field to which this invention belongs. The systems, methods, and examples described herein serve only for illustration and are not to be understood as limiting.

[0021] Embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0022] The functional units described in this specification are referred to as devices. A device may be implemented in programmable hardware such as processors, digital signal processors, central processing units, FPGAs, PALs, PLDs, cloud processing systems, or similar. Devices may also be implemented in software for execution by various processor types. An identified device may contain executable code and, for example, comprise one or more physical or logical blocks of computer instructions, which may be organized as an object, procedure, function, or other construct. However, the executable files of an identified device need not be physically related; they may consist of different instructions stored in different locations that, when logically combined, constitute the device and fulfill its purpose.

[0023] The executable code of a device or module can consist of a single instruction or multiple instructions and can even extend across different code sections, applications, and storage media. Similarly, operational data within the device can be identified and represented, and can exist in any suitable form and be organized in any data structure. The operational data can be captured as a single data record or distributed across various storage media and may exist, at least partially, as electronic signals within a system or network.

[0024] References to “a selected embodiment”, “an embodiment”, or “an embodiment” in this description mean that a particular feature, structure, or property described in connection with the embodiment is included in at least one embodiment of the disclosed subject matter. Therefore, the phrases “a selected embodiment”, “in an embodiment”, or “in an embodiment” appearing at different points in this description do not necessarily refer to the same embodiment.

[0025] Furthermore, the described features, structures, or properties can be combined in one or more embodiments in any suitable manner. The following description contains numerous specific details to enable a comprehensive understanding of the embodiments of the disclosed subject matter. However, a person skilled in the art will recognize that the disclosed subject matter can also be realized without one or more of the specific details or with other methods, components, materials, etc. In other cases, known structures, materials, or processes are not presented or described in detail so as not to obscure aspects of the disclosed subject matter.

[0026] According to the exemplary embodiments, the disclosed computer programs or modules can be executed in a variety of ways, for example, as an application running in the memory of a device or as a hosted application running on a server and communicating with the device application or browser via various standard protocols such as TCP / IP, HTTP, XML, SOAP, REST, JSON, and other suitable protocols. The disclosed computer programs can be written in programming languages ​​that run either in the device's memory or on a hosted server, such as BASIC, COBOL, C, C++, Java, Pascal, or scripting languages ​​such as JavaScript, Python, Ruby, PHP, Perl, or other suitable programming languages.

[0027] Some of the described embodiments involve data transmission over a network, such as the transmission of various inputs or files. The network may include, for example, the internet, wide area networks (WANs), local area networks (LANs), analog or digital wired and wireless telephone networks (e.g., PSTN, ISDN, cellular networks, and xDSL), radio, television, cable, satellite, and / or other transmission or tunneling mechanisms for data. It may include multiple networks or subnetworks, each of which may, for example, have a wired or wireless data path. The network may include a circuit-switched voice network, a packet-switched data network, or another network for transmitting electronic data. For example, it may be based on the Internet Protocol (IP) or Asynchronous Transfer Mode (ATM) and support voice communication using VoIP, Voice over ATM, or similar protocols.In one embodiment, the network comprises a mobile network configured for the exchange of text or SMS messages.

[0028] Examples of networks include Personal Area Networks (PAN), Storage Area Networks (SAN), Home Area Networks (HAN), Campus Area Networks (CAN), Local Area Networks (LAN), Wide Area Networks (WAN), Metropolitan Area Networks (MAN), Virtual Private Networks (VPN), Enterprise Private Networks (EPN), the Internet, Global Area Networks (GAN), and so on.

[0029] Fig. Figure 1 shows a block diagram of a secure biometric voter authentication and voting authorization system according to an embodiment of the present disclosure.

[0030] The system according to Fig. 1 comprises: a voter identity validation module (102) that receives voter identification data and verifies voter eligibility against a voter database; a multibiometric authentication module (104) that captures and authenticates at least two biometric characteristics of a voter; an authentication control module (106) that manages authentication attempts and enforces retry limits; a token generation module (108) that generates a machine-readable, one-time voting authorization token after successful authentication; a voting authorization module (110) that validates the token at a voting terminal and enables access to the ballot paper; and a central processing module (112) that coordinates the operation of the modules so that only authenticated and eligible voters are allowed to cast their vote.

[0031] In one embodiment, the multi-biometric authentication module (104) comprises a fingerprint recognition subsystem (104a) and a facial recognition subsystem (104b) configured to generate biometric similarity values ​​with respect to stored templates, wherein the multi-biometric authentication module (104) in conjunction with the authentication control module (106) is configured to determine authentication success by comparing the similarity values ​​with predefined threshold conditions across at least two biometric modalities.

[0032] In one embodiment, the authentication control module (106) maintains a counter for the authentication attempts and terminates the authentication when a predefined maximum attempt threshold is exceeded.

[0033] In one embodiment, the token generation module (108) generates a session-bound, QR-coded voting authorization token that is uniquely assigned to an authenticated voter and a polling station.

[0034] In one embodiment, the voting authorization module (110) checks the QR-coded voting authorization token for authenticity, unused status and assignment to a voting booth before activating a voting interface.

[0035] In one embodiment, the authorization token is configured for single use in order to maintain the "one person, one vote" rule without revealing the voter's identity during the voting process.

[0036] In one embodiment, the system (100) further comprises a final verification mechanism (114) configured to mark the authorization token as consumed after the vote and to update the voter status to indicate that the vote is complete.

[0037] In one embodiment, the system (100) further comprises a testing and logging module (116) configured to record voter validation results, authentication attempts, token issuance events and election completion states.

[0038] In one embodiment, the central processing module (112) coordinates identity verification, biometric authentication, token generation and voting authorization in a sequential workflow.

[0039] In one embodiment, the system (100) further comprises a hardware interface module (118) that connects the central processing module with biometric sensors, user input devices, display units, communication interfaces and power supply components.

[0040] In one embodiment, the voter identity validation module (102), the multi-biometric authentication module (104), the authentication control module (106), the token generation module (108), the vote authorization module (110), the central processing module (112), the final verification mechanism (114) and the audit and logging module (116) can be implemented in programmable hardware devices such as processors, digital signal processors, central processing units, field-programmable gate arrays, programmable array logic, programmable logic devices, cloud processing systems or the like.

[0041] In the implementation, system operation begins with the receipt of voter identification data. Voter eligibility and election status are then verified against a voter database. This verification is performed by capturing at least two biometric characteristics of the voter and comparing the biometric data with stored templates to determine the success of the authentication. Authentication is considered successful if the biometric similarity scores across at least two biometric characteristics reach predefined thresholds. After successful authentication, a one-time-use voting authorization token is generated. This token is validated at a voting terminal to grant access to the ballot and is invalidated after voting to prevent reuse.The authorization token is scanned again after voting to confirm the session's completion and prevent multiple voting. Biometric authentication and token validation take place in an offline voting environment, followed by synchronization with a central data repository.

[0042] Fig. Figure 2 shows a block diagram illustrating the system architecture according to one embodiment of the present disclosure.

[0043] With reference to Fig.2 The system architecture essentially comprises: a module for voter identification, a module for multibiometric authentication, a module for authentication control and re-attempts, a module for creating QR ballot papers, a module for voter eligibility verification, a module for monitoring and logging, a central processing module, and a hardware interface module, with the exact functionality and functions of each module being described in detail below.

[0044] The voter identity verification module is configured to check voter eligibility before biometric authentication. The module receives voter identification data, including the voter registration number (EPIC) or voter ID, entered via keyboard, scanner, or digital interface. The captured identification data is compared against a voter database to confirm registration status and determine if the voter has already voted. Upon successful validation, confirming voter eligibility and the "not yet voted" status, the module signals authorization for biometric authentication. If the voter is not eligible or has already voted, the module generates a rejection status and terminates the authentication process.

[0045] The multibiometric authentication module verifies identity using at least two biometric modalities, preferably facial and fingerprint recognition. The fingerprint subsystem captures a fingerprint image, performs preprocessing such as normalization and papillary ridge highlighting, extracts minutiae, generates a biometric template, and calculates a similarity score against a stored reference template. The facial subsystem captures a facial image, performs facial recognition, alignment, and lighting normalization, extracts facial features, and calculates a similarity score relative to a stored facial template. The module evaluates the biometric values ​​against predefined thresholds and determines authentication success once the required biometric condition is met. The authentication results are then forwarded to the authentication control module.

[0046] The authentication control and retry module manages the status of authentication attempts and enforces retry limits. At the start of authentication, the module initializes a counter and increments it with each biometric failure. If authentication is successful within the allowed number of attempts, the module authorizes token generation. If the counter exceeds a predefined maximum value, the module generates an authentication error and terminates the session. The module also logs the results of the attempts for auditing and system monitoring.

[0047] The QR ballot generation module creates a secure, one-time-use voter authorization token after successful authentication. The module generates a unique token identifier encoded as a machine-readable QR code. The token is cryptographically or logically linked to the authenticated voter session and the corresponding polling station. The QR ballot is issued to the voter via a display or print interface and simultaneously stored in a local authorization register. The token is valid only for the active voting session and is configured for single use.

[0048] The voter eligibility module controls access to the voting terminal using QR code validation. The voter presents or scans the issued QR code at the voting terminal. The module decodes the QR code, verifies its authenticity, confirms its unused status, and checks the connection to the original voting booth. After successful validation, the voting interface is activated for casting the vote. If the code is invalid, reused, or does not match, the voter is prompted for manual verification by a poll worker. If the discrepancy persists, the module denies access and generates a corresponding warning or rejection status.

[0049] The auditing and logging module securely stores all operational events and authentication results. It logs voter identity verification results, biometric authentication attempts, QR code issuance, election authorization events, and session termination status. The logged data supports traceability, anomaly detection, and re-election audits. The module can store records locally and securely and optionally synchronize them with central data repositories, provided a connection is available.

[0050] The central processing module coordinates all system operations and workflow execution. It interacts with biometric sensors, input devices, communication interfaces, and storage subsystems. The module executes identity validation logic, biometric matching algorithms, token generation routines, authorization checks, and state transitions between modules. The central processing module ensures the sequential execution of the authentication, authorization, and reconciliation process and maintains session integrity throughout the entire reconciliation process.

[0051] The hardware interface module establishes the physical connection between the central processing module and external devices such as the fingerprint sensor, camera, keypad, display, communication interface, and power supply. The module controls the acquisition of biometric data, voter input, the display or printing of QR codes, and device signaling. The hardware interface enables the invention to be used as a self-contained voting booth that functions in both networked and offline environments.

[0052] The present invention relates to a secure biometric voter authentication and voting authorization system, called BallotX, for electronic or assisted voting environments. The invention integrates voter identity verification, multimodal biometric authentication, and QR-based voting authorization into a unified voting booth workflow to ensure secure, single-use, and traceable voting access. Voter identity is validated against a voter database to confirm voter eligibility and voting status. Subsequently, the voter undergoes biometric authentication using at least two modalities, preferably fingerprint and facial recognition. Authentication is performed by means of template matching with predefined similarity thresholds and controlled retry limits.After successful authentication, the system generates a secure, single-use, QR-coded ballot paper linked to the voting session and voting booth. The QR code is validated at the voting terminal to grant access to the ballot paper and scanned again after voting to document the vote and prevent reuse. This ensures the principle of "one person, one vote." The system also includes a log of audit trails and a central processing module with interfaces to biometric sensors, input devices, and secure storage, enabling operation in both networked and offline environments.By combining identity verification, multibiometric authentication and QR code-based authorization, the BallotX system improves election security, traceability and operational efficiency while preserving voter privacy and the secrecy of the ballot.

[0053] The drawings and the preceding description illustrate embodiments. Those skilled in the art will recognize that one or more of the described elements can be combined to form a single functional element. Alternatively, certain elements can be divided into several functional elements. Elements of one embodiment can be added to another. For example, the process flows described here can be modified and are not limited to the manner described herein. Furthermore, the actions of a flowchart need not be performed in the sequence shown; nor do all actions necessarily need to be carried out. Actions that do not depend on other actions can be performed in parallel with the other actions. The scope of protection of the embodiments is in no way limited by these specific examples. Numerous variations, whether explicitly stated in the description or not, such as...Differences in structure, dimensions, and materials are possible. The scope of protection of the embodiments is at least as comprehensive as described by the following claims.

[0054] The advantages, other benefits, and problem solutions have been described above with reference to specific embodiments. However, the advantages, benefits, problem solutions, and any components that can effect or enhance an advantage, benefit, or solution are not to be construed as critical, necessary, or essential features or components of the claims. REFERENCE 100 A secure system for biometric voter identification and voting authorization. 102 Module for Validating Voter Identity 104 Multi-biometric authentication module 104a Fingerprint Recognition Subsystem 104b Facial Recognition Subsystem 106 Authentication Control Module 108 Token Generation Module 110 Voting Authorization Module 112 Central Processing Module 114 Mechanism for Verifying Completion 116 Audit and Logging Module 118 Hardware interface module 202 WLAN / Mobile network 204 advertisements 206 Cloud 208 Facial authentication 210 Central Processing Unit 212 Power supply 214 Fingerprint sensor 216 Keypad 218 Camera

Claims

A secure biometric voter authentication and voting authorization system, consisting of: a voter identity validation module configured to receive voter identification data and verify voter eligibility against a voter database; a multi-biometric authentication module configured to capture and authenticate at least two biometric characteristics of a voter; an authentication control module configured to manage authentication attempts and enforce retry limits; a token generation module configured to generate a one-time-use, machine-readable voting authorization token upon successful authentication; and a voting authorization module configured to validate the token at a voting terminal and grant access to the ballot.and a central processing module configured to coordinate the operation of the modules so that only authenticated and eligible voters are allowed to cast their vote. System according to claim 1, wherein the multibiometric authentication module comprises a fingerprint recognition subsystem and a facial recognition subsystem configured to generate biometric similarity values ​​relative to stored templates, wherein the multibiometric authentication module in conjunction with the authentication control module is configured to determine authentication success by comparing the similarity values ​​with predefined threshold conditions across at least two biometric modalities. System according to claim 1, wherein the authentication control module maintains a counter for authentication attempts and terminates the authentication when a predefined maximum attempt threshold is exceeded. System according to claim 1, wherein the token generation module generates a session-bound, QR-coded voting authorization token that is uniquely assigned to an authenticated voter and a polling station. System according to claims 1 and 4, wherein the voting authorization module checks the QR-coded voting authorization token for authenticity, non-use status and assignment to a voting booth before activating a voting interface. System according to claim 1, wherein the authorization token is configured for single use in order to maintain the restriction of “one person, one vote” without revealing the identity of the voter during the voting process. System according to claim 1, further comprising a final verification mechanism configured to mark the authorization token as consumed after the vote and to update the voter status to indicate that the vote is complete. System according to claim 1, further comprising a testing and logging module configured to record results of voter validation, authentication attempts, token issuance events and election completion states. System according to claim 1, wherein the central processing module coordinates identity verification, biometric authentication, token generation and voting authorization in a sequential workflow. System according to claim 1, further comprising a hardware interface module that connects the central processing module with biometric sensors, user input devices, display units, communication interfaces and power supply components.

Images