Terminal device and program

Abstract

A terminal device and a program are provided that can prevent fraudulent activity while suppressing increases in costs in an electronic voting system. [Problem Means] The terminal device is a terminal device that can be used as a voting terminal in an electronic voting system, and is equipped with a control unit that executes a voting application and a wireless communication unit that performs wireless communication under the control of the control unit, and the control unit controls so that wireless communication does not occur while the voting application is running.

Description

[Technical Field]

[0001] The present disclosure relates to a terminal device and a program used in an electronic voting system. [Background technology]

[0002] Patent Document 1 describes an electronic voting system that records data output by an electronic voting machine installed at a polling station on an electromagnetic storage medium to generate original data, and then reads the original data and records it as a duplicate (copy) on a different electromagnetic storage medium. The data recorded on these media is transported to a vote-counting station and tallied. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2003-150996 Summary of the Invention [Problem to be solved by the invention]

[0004] If general-purpose terminal devices such as tablet terminals can be used as voting terminals instead of dedicated electronic voting machines such as those in Patent Document 1, the cost of building an electronic voting system can be reduced.

[0005] However, such terminal devices generally have wireless communication functions such as wireless LAN, etc. Therefore, when the terminal device is able to communicate with a network through the wireless communication function, there is a problem that fraud such as viewing or tampering of voting data from outside via the communication may occur.

[0006] Therefore, an object of the present disclosure is to provide a terminal device and a program that can suppress the occurrence of fraud while suppressing increases in costs in an electronic voting system. [Means for solving the problem]

[0007] A terminal device according to a first aspect of the present disclosure is a terminal device that can be used as a voting terminal in an electronic voting system, and is equipped with a control unit that executes a voting application and a wireless communication unit that performs wireless communication under the control of the control unit, and the control unit controls the wireless communication so that it does not occur while the voting application is being executed.

[0008] A program relating to a second aspect of the present disclosure causes a terminal device that can be used as a voting terminal in an electronic voting system to perform the steps of performing wireless communication, executing a voting application, and controlling the wireless communication so that it does not occur while the voting application is being executed. [Effects of the Invention]

[0009] According to one aspect of the present disclosure, it is possible to provide a terminal device and a program that can suppress the occurrence of fraud while suppressing increases in costs in an electronic voting system. [Brief explanation of the drawings]

[0010] [Figure 1] 1 is a block diagram showing a configuration example of an electronic voting system according to an embodiment. [Figure 2] 10 is a diagram showing an example of a management table for a voting terminal and an external recording medium in the electronic voting system according to the embodiment. FIG. [Figure 3] FIG. 2 is a block diagram showing an example of the configuration of a voting terminal according to the embodiment. [Figure 4] 10 is a diagram for explaining a method in which a voting terminal according to an embodiment assigns a file name to voting data. FIG. [Figure 5] FIG. 2 is a block diagram showing an example of the configuration of a tabulation terminal according to the embodiment; [Figure 6] FIG. 2 is a diagram for explaining the procedure of voting operations in a voting terminal according to an embodiment. [Figure 7] 10 is a flowchart showing the procedure of a voting process in a voting terminal according to an embodiment. [Figure 8] 10 is a flowchart showing the procedure of a tallying process in the tallying terminal according to the embodiment; [Figure 9] FIG. 10 is a block diagram showing an example of the configuration of a voting terminal according to a modified example. [Figure 10] FIG. 10 is a diagram for explaining the procedure for voting operations in a voting terminal according to a modified example. DETAILED DESCRIPTION OF THE INVENTION

[0011] The electronic voting system according to the embodiment will be described with reference to the drawings. In the description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

[0012] (1) Example of an electronic voting system configuration Fig. 1 is a block diagram showing an example of the configuration of an electronic voting system 1 according to an embodiment. As shown in Fig. 1, the electronic voting system 1 comprises a plurality of voting terminals (voting terminals 10_1 to 10_n) installed in each of a plurality of polling stations (polling station_1 to polling station_n), and a tallying terminal 20 installed in a ballot counting station.

[0013] Each of voting terminals 10_1 to 10_n is provided with a set of external recording media (set 30_1 to set 30_n of external recording media). Each set of external recording media, on which voting data is recorded at each polling station, is stored in a respective transport case (transport case 40_1 to transport case 40_n) and transported to the ballot counting station. Hereinafter, when there is no need to distinguish between voting terminals 10_1 to 10_n, they will be referred to as "voting terminals 10." Furthermore, when there is no need to distinguish between external recording media sets 30_1 to 30_n, they will be referred to as "set 30 of external recording media." Furthermore, when there is no need to distinguish between transport cases 40_1 to 40_n, they will be referred to as "transport case 40." Note that while FIG. 1 shows an example in which one voting terminal 10 is installed at each polling station, the present disclosure is not limited to this, and multiple voting terminals 10 may be installed at each polling station.

[0014] Voting terminal 10 is an example of a terminal device, and accepts voting operations from voters and records voting data indicating the voting details on an external recording medium included in set 30 of external recording media. Voting terminal 10 is configured as a terminal device such as a tablet, smartphone, or notebook PC (Personal Computer). The configuration and detailed functions of voting terminal 10 will be explained later with reference to FIG. 3.

[0015] The tallying terminal 20 performs tallying processing using the voting data recorded on the external recording medium contained in the set 30 of external recording media transported from each polling station in a transport case 40. The tallying terminal 20 is an example of an information processing terminal, and is configured, for example, by a notebook PC or desktop PC. The configuration and detailed functions of the tallying terminal 20 will be described later with reference to FIG. 5.

[0016] The set 30 of external recording media includes a first external recording medium 31 and a second external recording medium 32. The first external recording medium 31 is, for example, a dongle-type external recording medium such as a USB (registered trademark, the same applies hereinafter) memory, and can be electrically connected to a first interface 14 (described later) of the voting terminal 10. The second external recording medium 32 is a different type of external recording medium from the first external recording medium 31, for example, a card-type external recording medium such as an SD (Secure Digital) card (registered trademark, the same applies hereinafter), and can be electrically connected to a second interface 15 (described later) of the voting terminal 10.

[0017] The first external recording medium 31 and the second external recording medium 32 respectively record original data and duplicate data of voting data indicating the votes of voters. In the present disclosure, the dongle-type first external recording medium 31 is an external recording medium that records the original data of voting data, and the second external recording medium 32 is an external recording medium that records duplicate data (copy data) of voting data. By recording the duplicate data (copy data) on the second external recording medium 32, it is possible to prevent damage to the voting data due to damage to the first external recording medium 31, etc. Furthermore, by recording the original data of voting data on the dongle-type first external recording medium 31, it is possible to easily insert and remove the external recording medium during tallying.

[0018] By using different types of external recording media to record the original data and the duplicate data, it becomes easier to distinguish between the first external recording media 31 and the second external recording media 32, making it possible to distinguish between the original data and the duplicate data and preventing double counting. Furthermore, by using different types of external recording media corresponding to different types of interfaces (the first interface and the second interface described below), it is possible to recover from failures in writing / reading voting data due to malfunctions in either interface. In the following, when there is no need to distinguish between the first external recording media 31 and the second external recording media 32, they will be referred to as "external recording media."

[0019] The electronic voting system 1 manages the voting terminal 10 and the set 30 of external recording media as a pair using a management table T1 shown in Fig. 2, which will be described later. Fig. 2 is a diagram showing an example of a management table for voting terminals and external recording media in the electronic voting system 1 according to the embodiment. As shown in Fig. 2, the management table T1 has an item T11 for the serial number of the voting terminal, an item T12 for the identification tag of the voting terminal, an item T13 for the identification tag of the first external recording media, an item T14 for the identification tag of the second external recording media, and an item T15 for the original.

[0020] The voting terminal serial number item T11 stores the serial number of the voting terminal. Item T12 of the voting terminal identification tag stores an identifier that is linked to the voting terminal's serial number and can uniquely identify the voting terminal. The item T13 of the identification tag of the first external recording medium stores an identifier that can uniquely identify the first external recording medium 31. The second external recording medium identification tag item T14 stores an identifier that can uniquely identify the second external recording medium 32. The first external recording medium identification tag and the second external recording medium identification tag are linked as a set to the voting terminal identification tag. The original item T15 stores the identification tag of the external recording medium that records the original data of the voting data.

[0021] The configuration of management table T1 is not limited to the configuration shown in Figure 2, and may include, for example, items for storing information about the polling station where the voting terminal is installed, and items for the type of election (election name) to be held at the voting terminal.

[0022] By using management table T1, it is possible to distinguish between voting terminals the external recording media that record voting data, and it is also possible to distinguish between external recording media that record original data and external recording media that record duplicate data within a voting terminal.

[0023] (2) Example of voting terminal configuration Next, an example of the configuration of the voting terminal 10 according to the embodiment will be described. Fig. 3 is a block diagram showing an example of the configuration of the voting terminal 10 according to the embodiment. As shown in Fig. 3, the voting terminal 10 comprises a control unit 11, an operation / display unit 12, a wireless communication unit 13, a first interface 14, and a second interface 15. The control unit 11 is connected to each of the operation / display unit 12, the wireless communication unit 13, the first interface 14, and the second interface 15 so as to be able to send and receive signals via a bus. Note that the configuration of the voting terminal 10 is not limited to the components shown in Fig. 3, and may further comprise components other than these components, for example, a power supply unit (battery, etc.), an electronic pen (touch pen), etc., not shown.

[0024] When the control unit 11 detects an operation to start the voting application on the operation display unit 12, it executes the voting application installed on the voting terminal 10 and displays various screens of the voting application (see Figs. 6 and 10 described below) on the operation display unit 12. As shown in Fig. 3, the control unit 11 has a CPU (Central Processing Unit) 111 and a memory 112.

[0025] The CPU 111 executes the voting application by reading the program code of the voting application from the memory 112. Note that a GPU (Graphics Processing Unit) or the like may be used instead of the CPU 111, or the CPU 111 and a GPU may be used together.

[0026] The memory 112 includes, for example, a ROM (Read Only Memory), a RAM (Random Access Memory), a non-volatile storage, etc. The ROM is composed of a recording medium such as a non-volatile memory, and stores the program code of the voting application executed by the CPU 111, etc. The ROM also stores, for example, a management table T1, an election administrator password described below, a polling station administrator password described below, an operational passcode described below, candidate data read from an external recording medium, etc. The RAM is composed of a storage medium such as a volatile memory, and temporarily stores information (data) necessary for each process performed by the CPU 111. The non-volatile storage is composed of a non-transitory recording medium such as an HDD (Hard Disk Drive). The non-volatile storage may store, for example, various information data stored in the ROM, or other information data.

[0027] As shown in FIG. 3, the operation display unit 12 has a display unit 121 and an operation unit 122. The display unit 121 displays various screens of the voting application to the user (voter) of the voting terminal 10. The operation unit 122 accepts input operations from the user. The display unit 121 and the operation unit 122 are integrally configured as, for example, a touch panel display. The display unit 121 may be configured as, for example, a display device such as an LCD (Liquid Crystal Display) or an organic EL (Electro-luminescence) display. The operation unit 122 may be configured as, for example, an operation device including a touch sensor, a mouse, etc.

[0028] The wireless communication unit 13 includes an antenna (not shown), a receiver (not shown) that converts a wireless signal received by the antenna into a baseband signal and outputs the signal to the control unit 11, and a transmitter (not shown) that converts the baseband signal output by the control unit 11 into a wireless signal and transmits the signal from the antenna. The wireless communication unit 13 performs wireless communication under the control of the control unit 11. The wireless communication unit 13 includes at least one of a wireless LAN communication unit (not shown) that performs wireless LAN (Local Area Network) communication as the wireless communication, and a cellular communication unit (not shown) that performs cellular communication as the wireless communication. The wireless LAN communication is, for example, communication that complies with standards such as IEEE 802.11a / b / g / n / ac / ax. The cellular communication is, for example, communication that complies with the 3GPP (registered trademark) standard.

[0029] The first interface 14 is an interface corresponding to a dongle-type external recording medium and can electrically connect a dongle-type first external recording medium 31. In this embodiment, the first interface 14 may be, for example, a USB Type-A interface, a USB Type-C interface, or another type of USB interface. The second interface 15 is an interface corresponding to a card-type external recording medium, different from the type of the first interface 14, and can electrically connect a card-type second external recording medium 32. In this embodiment, the second interface 15 may be, for example, a miniSD card interface or a microSD card interface.

[0030] The control unit 11 writes the voting data obtained by the voting operation using the voting application as original data to the first external recording medium 31 electrically connected to the first interface 14. The control unit 11 also writes the voting data as copy data to the second external recording medium 32 electrically connected to the second interface 15.

[0031] Note that the first interface 14 is not limited to an interface corresponding to a dongle-type external recording medium, and the second interface 15 is not limited to an interface corresponding to a card-type external recording medium. For example, the first interface 14 may be an interface corresponding to a card-type external recording medium, and the second interface 15 may be an interface corresponding to a dongle-type external recording medium. Furthermore, as long as the first interface 14 and the second interface 15 are different types, they may be types other than dongle-type and card-type. In this case, it is necessary to prepare a first external recording medium 31 and a second external recording medium 32 corresponding to the types of the first interface 14 and the second interface 15, respectively.

[0032] Since voting terminal 10 has wireless communication functions such as wireless LAN, when voting terminal 10 is able to communicate with a network through the wireless communication function, there is a possibility that fraud such as viewing or tampering of voting data from outside may occur via that communication. To prevent such a situation from occurring, control unit 11 of voting terminal 10 controls so that wireless communication is not performed while the voting application is running.

[0033] Specifically, if the wireless communication function is on when the voting application is launched, the control unit 11 turns off the wireless communication function. Also, while the voting application is running, the control unit 11 sets a mode in which the wireless communication function is off, for example, airplane mode, and restricts the setting of that mode from being changed.

[0034] Furthermore, to prevent the user from manually turning on the wireless communication function, the control unit 11 controls the wireless communication function not to be turned on even if the operation unit 122 receives an input operation to turn on the wireless communication function while the voting application is running. Such control is implemented, for example, by using a function provided in the voting terminal 10 that disables changes to the wireless communication function settings to restrict setting changes made by user operations. Note that when the voting application is terminated, the control unit 11 removes this restriction and controls the wireless communication function to become available.

[0035] The control unit 11 can suppress fraudulent acts such as viewing or tampering of voting data from the outside via wireless communication by performing various controls to turn off the wireless communication functions described above.

[0036] Furthermore, when the wireless communication function is set to ON, the control unit 11 controls the voting application not to be started even if the operation unit 122 receives an input operation to start the voting application. In this case, the control unit 11 may cause the display unit 121 to display a message urging the user to turn off the wireless communication function, for example, a message saying "Please turn off Wi-Fi." This type of control can prevent fraudulent launching of the voting application.

[0037] In this embodiment, in order to prevent double counting of voting data, control unit 11 assigns a unique file name to the voting data to be recorded on the external recording medium. This will be specifically described with reference to FIG. 4.

[0038] 4 is a diagram for explaining a method for the voting terminal 10 according to the embodiment to assign a file name to voting data. As a method for assigning a file name to voting data, for example, a file name is assigned to the voting data using one of the voting data file name patterns A to F shown in FIG.

[0039] In pattern A, the control unit 11 assigns a unique file name to the voting data that includes the identifier of the voting terminal 10. Specifically, as shown in FIG. 4, the file name of pattern A is composed of the identifier (identification tag) of the voting terminal 10 and an identifier of a predetermined number of characters (for example, the four-character "XXXX"). Here, the identifier of the predetermined number of characters is, for example, an identifier that can uniquely identify the election type (election name). The following identifier of the predetermined number of characters is the same as the identifier of the predetermined number of characters described here, so duplicate explanations will be omitted. The file name configuration of pattern A makes it possible to prevent duplication of voting data file names between multiple voting terminals.

[0040] In pattern B, control unit 11 assigns a unique file name to the voting data that includes the identifier of voting terminal 10 and a random number generated by voting terminal 10. Control unit 11 also determines a random number that does not overlap with the random numbers included in the file names of voting data already recorded on the external recording medium, and assigns a unique file name that includes the determined random number to the voting data. Specifically, as shown in FIG. 4, the file name in pattern B is composed of the identifier of voting terminal 10, an identifier of a predetermined number of characters, and a unique random number. In pattern B, by including a unique random number in the file name of the voting data, it is possible to prevent duplication of file names of voting data within voting terminal 10.

[0041] In pattern C, control unit 11 assigns to the voting data a unique file name that includes the identifier of voting terminal 10 and information on the date on which voting will take place. Specifically, as shown in Figure 4, the file name in pattern C is composed of the identifier of voting terminal 10, an identifier of a predetermined number of characters, and the date on which voting will take place. In pattern C, by including information on the date on which voting will take place in the file name, it is possible to prevent duplication of file names between voting data on the voting day and voting data for early voting.

[0042] In pattern D, control unit 11 assigns to the voting data a unique file name that includes the identifier of voting terminal 10 and the identifier of the external recording medium on which the voting data is recorded. Specifically, as shown in Figure 4, the file name of pattern D is composed of the identifier of voting terminal 10, the identifier of the external recording medium on which the voting data is recorded, and an identifier of a predetermined number of characters. The file name configuration of pattern D prevents duplication of voting data file names between multiple voting terminals and makes it possible to distinguish between original and duplicate voting data.

[0043] In pattern E, control unit 11 assigns a unique file name to the voting data, including the identifier of voting terminal 10, the identifier of the external recording medium on which the voting data is recorded, and a unique random number. Specifically, as shown in Figure 4, the file name of pattern E is composed of the identifier of voting terminal 10, the identifier of the external recording medium on which the voting data is recorded, an identifier of a predetermined number of characters, and a unique random number. The file name configuration of pattern E prevents duplication of voting data file names within voting terminal 10, and makes it possible to distinguish between original and duplicate voting data.

[0044] In Pattern F, the control unit 11 assigns a unique file name to the voting data, including the identifier of the voting terminal 10, the identifier of the external recording medium on which the voting data is recorded, a unique random number, and information about the date on which the vote will be cast. Specifically, as shown in Figure 4, the file name of Pattern F is composed of the identifier of the voting terminal, the identifier of the external recording medium on which the voting data is recorded, an identifier of a predetermined number of characters, a unique random number, and the date on which the vote will be cast. The file name configuration of Pattern F prevents duplication of voting data on the voting day and voting data from early voting, and also makes it possible to distinguish between original and duplicate voting data.

[0045] The counting terminal 20 prevents double counting in the counting process based on the unique file name given to the voting data by the voting terminal 10.

[0046] The method of assigning a unique file name to the voting data is not limited to the methods described in the above patterns A to F, and other methods may be used that assign a file name that can uniquely identify the voting data file.

[0047] (3) Example of configuration of the tabulation terminal Next, an example of the configuration of the tallying terminal 20 according to the embodiment will be described. Fig. 5 is a block diagram showing an example of the configuration of the tallying terminal 20 according to the embodiment. As shown in Fig. 5, the tallying terminal 20 includes a control unit 21, an operation / display unit 22, a first interface 23, and a second interface 24. The control unit 21 is connected to each of the operation / display unit 22, the first interface 23, and the second interface 24 so as to be able to send and receive signals via a bus. Note that the configuration of the tallying terminal 20 is not limited to the components shown in Fig. 5, and may further include components other than these components, for example, a power supply unit (battery, etc.) not shown.

[0048] When the control unit 21 detects a start operation of the tally application on the operation display unit 22, it executes the tally application installed on the tally terminal 20 and displays various screens (not shown) of the tally application on the operation display unit 12. As shown in FIG. 5, the control unit 21 has a CPU 211 and a memory 212.

[0049] The CPU 211 executes the tallying application by reading the program code of the tallying application from the memory 212. Note that a GPU or the like may be used instead of the CPU 211, or the CPU 211 and a GPU may be used together.

[0050] The memory 212 includes, for example, a ROM, a RAM, a non-volatile storage, etc. The ROM is composed of a recording medium such as a non-volatile memory, and stores the program code of the tallying application executed by the CPU 211, etc. The ROM also stores, for example, a management table T1, an election administrator password described below, a polling station administrator password described below, an operational passcode described below, candidate data and voting data read from an external recording medium, etc. The RAM is composed of a storage medium such as a volatile memory, and temporarily stores information (data) necessary for each process performed by the CPU 211. The non-volatile storage is composed of a non-transitory recording medium such as a HDD, etc. The non-volatile storage may store, for example, various information data stored in the ROM, or other information data.

[0051] As shown in Fig. 5, the operation display unit 22 has a display unit 221 and an operation unit 222. The display unit 221 displays various screens of the tallying application to the user (election administrator) of the tallying terminal 20. The operation unit 222 accepts input operations from the user. The display unit 221 is configured as a display device such as an LCD or an organic EL display. The operation unit 222 is configured as an operation device such as a touch sensor, a mouse, etc. The display unit 221 and the operation unit 222 may be configured as one unit, for example, as a touch panel display.

[0052] The first interface 23 is an interface corresponding to a dongle-type external recording medium and can electrically connect a dongle-type first external recording medium 31. In this embodiment, the first interface 23 may be, for example, a USB Type-A interface, a US Type-C interface, or another type of USB interface. The second interface 24 is an interface corresponding to a card-type external recording medium, different from the type of the first interface 23, and can electrically connect a card-type second external recording medium 32. In this embodiment, the second interface 24 may be, for example, a miniSD card interface or a microSD card interface.

[0053] Note that the first interface 23 is not limited to an interface corresponding to a dongle-type external recording medium, and the second interface 24 is not limited to an interface corresponding to a card-type external recording medium. For example, the first interface 23 may be an interface corresponding to a card-type external recording medium, and the second interface 24 may be an interface corresponding to a dongle-type external recording medium. Furthermore, the first interface 23 and the second interface 24 may be of a type other than a dongle type or a card type, as long as they are different types. In this case, it is necessary to prepare a first external recording medium 31 and a second external recording medium 32 corresponding to the types of the first interface 23 and the second interface 24, respectively.

[0054] (4) Operation according to the embodiment (4.1) Voting Procedures Next, the procedure for voting operations in the voting terminal 10 will be described. FIG. 6 is a diagram for explaining the procedure for voting operations in the voting terminal 10 according to the embodiment. The various screens shown in FIG. 6 are vote acceptance screens for accepting voter voting operations. Note that the operation / display screens of the voting application are not limited to the various screens shown in FIG. 6. For example, the voting application also has a display screen for responding to errors that occur during operation, and a screen for setting (changing) various passwords, which will be described later. The voting application also has various operation display screens (not shown) for the polling station manager. The operation display screens for the polling station manager include, for example, a screen showing the current voting status, such as voting not yet started, voting acceptance in progress, voting completed, etc., and a screen for checking the number of voters who have voted or the amount of voting data. The voting application may also have any screens related to the implementation, operation, management, etc. of voting.

[0055] The voting start screen U1 shown in Figure 6 is the first screen that accepts voters' voting operations. At the top of the voting start screen U1, a message M11 is displayed to guide voters to start voting, such as a message saying "Please press the [Start Voting] button." At the bottom of the voting start screen U1, a "Start Voting" button B11 is displayed. When the "Start Voting" button B11 is pressed, the candidate selection screen U2 is displayed.

[0056] At the top of the candidate selection screen U2, a message M21 is displayed to guide the user in selecting the candidate to vote for, such as "Please select the candidate you wish to vote for." Below the message M21, a "Do not vote" button B21 and selection buttons B22 for each candidate are displayed. When the "Do not vote" button B21 is pressed, the voting completion screen U4, which will be described later, is displayed. When one of the selection buttons B22 for each candidate is pressed, the voting confirmation screen U3 is displayed.

[0057] At the top of the vote confirmation screen U3, a message M31 is displayed to confirm the candidate to be voted for, for example, a message saying "Would you like to vote for this person?" The name of the selected candidate is displayed below the message M31. Below the name of the selected candidate, a "Select Again" button B31 and a "Vote" button B32 are displayed. When the "Select Again" button B31 is pressed, the display screen returns to the candidate selection screen U2. When the "Vote" button B32 is pressed, the voting completion screen U4 is displayed.

[0058] The voting completion screen U4 displays a message M41 indicating that voting has been completed and instructing the user to exit, such as a message saying, "Voting is complete. Please leave now." The voting completion screen U4 is displayed for a certain period of time (for example, 15 seconds), and then automatically transitions to the operational passcode input screen U5. Note that the transition from the voting completion screen U4 to the operational passcode input screen U5 is not limited to an automatic transition. The voting completion screen U4 may transition to the operational passcode input screen U5, for example, by performing a predetermined operation on the screen.

[0059] The operational passcode entry screen U5 displays a graphic M51 (including the word "Complete") indicating that voting has been completed, and below the graphic M51, a message M52 is displayed instructing the voter to call a poll worker, such as "Please notify the nearest poll worker." Below the message M52, a text box B51 for entering the operational passcode is displayed. When the poll worker enters the correct operational passcode in the text box B51, the display screen transitions to the voting start screen U1, and the next voter's vote is accepted. Note that if an abnormal interruption or other problem occurs during the voting operation described above, the display screen automatically transitions to the operational passcode entry screen U5.

[0060] Here, the operational passcode is a passcode for the voting staff, and is set during the initial setup of the voting terminal 10 to prevent duplicate voting at the voting terminal 10. The control unit 11 of the voting terminal 10 causes the display unit 121 to display a vote reception screen for accepting voting operations, and after the operation unit 122 accepts the voting operation, transitions to a screen for accepting input of the operational passcode for the voting staff (operational passcode input screen U5). When the operation unit 122 accepts input of a correct operational passcode as the operational passcode on the operational passcode input screen U5, the control unit 11 causes the display unit 121 to display the voting start screen U1. Before accepting the voting operations of each voter, the voting staff can prevent duplicate voting by confirming that there are no duplicate voters and then entering the operational passcode.

[0061] (4.2) Voting process procedure Next, we will explain the procedure for voting processing in the voting terminal 10. Figure 7 is a flowchart showing the procedure for voting processing in the voting terminal 10 according to the embodiment. The processing described below starts when a voting application startup operation is performed on the operation display unit 12 of the voting terminal 10.

[0062] First, the control unit 11 starts up the voting application in response to a start-up operation of the voting application on the operation display unit 12 (step S101). In this process, after the voting application has started up, the election administrator performs an operation to permit access to the external recording medium on the start-up screen of the voting application.

[0063] Next, the control unit 11 permits access to the external recording medium based on the operation performed by the election administrator to permit access to the external recording medium (step S102).

[0064] Next, the control unit 11 determines whether or not the voting application is initially started (step S103). Here, the control unit 11 determines whether or not the voting application is initially started, for example, based on the start log of the voting application.

[0065] In the process of step S103, if it is determined that the voting application is not initially activated (NO in step S103), the process of step S106 described below is carried out.

[0066] On the other hand, if it is determined in the processing of step S103 that the voting application is being launched for the first time (YES in step S103), the operation display unit 12 accepts the initial election administrator password entered by the election administrator (step S104). The initial election administrator password is entered when the voting application is initially launched, and if the correct initial election administrator password is entered, the control unit 11 proceeds to the next step of initializing various passwords. Note that if the entered initial election administrator password is incorrect, it will need to be re-entered.

[0067] Next, the control unit 11 performs initial settings in accordance with the setting operations performed by the election administrator on the operation display unit 12 (step S105). In this process, the election administrator uses the operation display unit 12 to set a new election administrator password, polling station administrator password, and operational passcode. The election administrator password is a password for the election administrator, and grants access authority to all operations related to the electronic voting system 1. The polling station administrator password is a password for the polling station administrator, and grants access authority to operations necessary for vote management and operation at each polling station. As mentioned above, the operational passcode is a passcode for voting officials that is provided to prevent double voting at the voting terminal 10, and must be entered before each voter's vote is accepted.

[0068] When the correct polling station administrator password is entered as the polling station administrator password, the control unit 11 enables the first operation required for managing and operating each polling station. Furthermore, when the correct election administrator password is entered as the election administrator password, the control unit 11 enables not only the first operation but also the second operation, including registering and changing the candidate data of each candidate in the vote. By providing the various passwords described above, the access rights of each polling station administrator and election administrator to various voting-related operations are clearly defined, making it possible to simplify vote management. Furthermore, by allowing multiple passwords to be entered by different responsible parties, it is possible to prevent fraudulent activities such as viewing or tampering with voting data.

[0069] If the determination in step S103 is NO, or after the processing of step S105, the operation display unit 12 accepts the election administrator password entered by the election administrator (step S106). This election administrator password is the one set in the initial setting in step S105.

[0070] Next, the control unit 11 electrically connects to the first external recording medium 31 and the second external recording medium 32 inserted into the first interface 14 and the second interface 15, respectively (step S107). In the present disclosure, when recording voting data, the control unit 11 records the voting data on each of the first external recording medium 31 and the second external recording medium 32. The voting data recorded on the first external recording medium 31 is used as original data. The voting data recorded on the second external recording medium 32 is duplicate data that is used as a countermeasure when the original data is damaged, etc. Note that the voting data recorded on the second external recording medium 32 may be the original data, and the voting data recorded on the first external recording medium 31 may be duplicate data.

[0071] Next, the control unit 11 reads the candidate data from the external recording medium on which it is stored and registers (sets) it in the memory 112 of its own device (step S108). If the electronic voting system 1 is equipped with multiple external recording media, the candidate data may be recorded on these multiple external recording media. In this case, the control unit 11 electrically connects one of the multiple external recording media on which the candidate data is recorded to its own device, and then sets the candidate data recorded on this one external recording medium in its own device. The multiple external recording media may include the first external recording medium 31 and the second external recording medium 32, or may be multiple external recording media prepared separately from the first external recording medium 31 and the second external recording medium 32.

[0072] Furthermore, in the initial setting of step S105 described above, the control unit 11 sets various passwords one by one in accordance with the setting operation of the election administrator, and then sets candidate data in the processing of step S108. However, the present disclosure is not limited to this. For example, the correct polling station administrator password, the correct election administrator password, the correct operational passcode, and the candidate data may be stored on a single external recording medium. In this case, the control unit 11 reads the correct polling station administrator password, the correct election administrator password, the correct operational passcode, and the candidate data from the single external recording medium electrically connected to the voting terminal 10 and sets (registers) them in its own device. Through this operation, the initial setting of various passwords and the registration of candidate data are automatically performed by the control unit 11 in one go, eliminating the need for the election administrator to perform setting work and reducing the workload of the election administrator.

[0073] The one external recording medium may not be a separately prepared external recording medium, but may be, for example, either the first external recording medium 31 or the second external recording medium 32. Furthermore, the processing of step S108 is not limited to setting the polling station manager password, the election administrator password, and the operational passcode all at once. For example, depending on the actual operational mode, some of these passwords may be automatically set by the control unit 11, and some may be set by the election administrator's setting operation.

[0074] Next, operation display unit 12 accepts the polling station manager password entered by the polling station manager using operation display unit 12 (step S109). If the entered polling station manager password is incorrect, the password must be re-entered.

[0075] Next, the control unit 11 displays the voting start screen U1 shown in Fig. 6 on the display unit 121 and starts voting (step S110). In this process, in cases other than the first vote acceptance, the control unit 11 displays the operation passcode input screen U5 shown in Fig. 6 on the display unit 121, and when the correct operation passcode is entered, displays the voting start screen U1.

[0076] Next, the operation display unit 12 accepts the voting operation performed by the voter, that is, the various voting operations described in Fig. 6 (step S111). In this process, the operation display unit 12 outputs a signal indicating the accepted voting operation to the control unit 11.

[0077] Next, the control unit 11 records voting data indicating the content of the voting operation on each of the first external recording medium 31 and the second external recording medium 32, based on a signal indicating the voting operation input from the operation display unit 12 (step S112). In this process, the control unit 11 writes the voting data as original data on the first external recording medium 31, and writes the voting data as copy data on the second external recording medium 32. Since the voting data is tallied for each election type (election name), the control unit 11 stores and records all voting data corresponding to one election type in a single file. To prevent double counting of voting data, the control unit 11 assigns a unique file name to the voting data, as described in FIG. 4.

[0078] Next, the control unit 11 determines whether or not voting is complete (step S113). When the polling station manager confirms that all voters who have visited the polling station have completed voting, the polling station manager uses the operation display unit 12 to perform a voting completion operation on a screen (not shown) for the administrator of the voting application. When the operation display unit 12 accepts the operation to complete voting from the polling station manager, the control unit 11 determines that voting is complete, and the judgment in step S113 is YES. On the other hand, when the operation display unit 12 does not accept the operation to complete voting from the polling station manager, the control unit 11 determines that voting is not complete, and the judgment in step S113 is NO.

[0079] In the process of step S113, if the control unit 11 determines that voting is not complete (NO determination in step S113), the process returns to the process of step S110, and the processes of steps S110 to S113 are repeatedly executed.

[0080] On the other hand, in the process of step S113, if it is determined that voting is completed (YES determination in step S113), control unit 11 ends the voting application (step S114). After the process of step S114, the voting process ends.

[0081] (4.3) Aggregation process procedure Next, a description will be given of the procedure of the tallying process in the tallying terminal 20. Fig. 8 is a flowchart showing the procedure of the tallying process in the tallying terminal 20 according to the embodiment. The process described below starts when an operation to start a tallying application is performed on the operation display unit 22 of the tallying terminal 20.

[0082] First, the control unit 21 of the tallying terminal 20 starts the tallying application in response to an operation to start the tallying application on the operation display unit 22 (step S201). When the tallying application is started, an election administrator password input screen (not shown) is displayed. When the correct election administrator password is entered, a candidate data registration screen (not shown) is displayed. Note that when logging in to the tallying application for the first time, the election administrator is required to input the initial election administrator password into the election administrator password input screen and set a new election administrator password.

[0083] Next, after the external recording medium storing the candidate data is electrically connected to the counting terminal 20, the control unit 21 reads the candidate data from the external recording medium and registers (sets) it in the memory 212 of the own device (step S202). When the electronic voting system 1 is equipped with multiple external recording media on which the same candidate data is recorded, for example, the voting terminal 10 sets the candidate data recorded on one of the multiple external recording media in the own device after electrically connecting this one external recording medium to the own device. On the other hand, the counting terminal 20 sets the candidate data recorded on another external recording medium in the own device after electrically connecting another external recording medium from the multiple external recording media to the own device.

[0084] Next, after the first external recording medium 31 storing the voting data is electrically connected to the counting terminal 20, the control unit 21 reads the voting data from the first external recording medium 31 and displays it on a counting screen (not shown) (step S203). In this process, the election administrator selects a voting data file to be counted on the counting screen, and the operation display unit 22 accepts the selection operation of the voting data performed by the election administrator on the counting screen and outputs the operation signal to the control unit 21. In the present disclosure, the control unit 21 manages the counted voting data file as a counted file, and automatically ignores the selection operation when the election administrator selects a counted file on the counting screen. This operation makes it possible to avoid double counting of voting data files.

[0085] Next, the control unit 21 extracts the voting data of the selected target to be counted based on the selection operation signal of the target to be counted input from the operation display unit 22 (step S204).

[0086] Next, the control unit 21 performs tallying on the extracted voting data to be counted (step S205).

[0087] Next, the control unit 21 displays the tallying results for the voting data to be counted on the tallying screen, outputs a data file of the tallying results, and records it in the memory 212 (step S206). Here, the destination for saving the data file of the tallying results is the destination selected by the election administrator. After the processing of step S206, the tallying process ends.

[0088] As described above, the electronic voting system 1 according to this embodiment does not require the installation of a dedicated electronic voting machine, and uses general-purpose mobile terminals such as tablets with a voting application installed as voting terminals, thereby suppressing increases in costs. Furthermore, the voting terminal 10 according to this embodiment controls the voting application so that it does not start if the wireless communication function is set to on. Furthermore, the voting terminal 10 turns off the wireless communication function when the voting application is started and while it is running, and controls the wireless communication function so that it does not turn on even if a user operation to turn on the wireless communication function is received. Therefore, the voting terminal 10 according to this embodiment can suppress increases in costs in the electronic voting system 1 while suppressing the occurrence of fraud, such as external viewing or tampering of voting data, etc., via wireless communication.

[0089] Furthermore, the electronic voting system 1 according to this embodiment manages, in association with each other, a voting terminal 10 and a set of external recording media, including a first external recording medium 31 that records the original voting data and a second external recording medium 32 that records a duplicate of the voting data. The voting terminal 10 assigns a unique file name to the voting data, including at least one of the following: a voting terminal identifier linked to its own serial number, a unique random number, information on the date of voting, and an identifier of the external recording medium on which the voting data is recorded. Therefore, the voting terminal 10 according to this embodiment can prevent duplication of voting data file names between voting terminals or within a voting terminal, as well as between external recording media. Furthermore, the voting terminal 10 can distinguish between voting data on the voting day and voting data for early voting. Therefore, the electronic voting system 1 according to this embodiment can prevent double counting of voting data.

[0090] (5) A modified voting terminal In the above embodiment, an example configuration of the voting terminal 10 that uses an operational passcode to prevent double voting has been described, but the present disclosure is not limited to this. Currently, many mobile terminals such as tablets and smartphones have NFC (Near Field Communication) functionality. In this modified example, an example configuration of the voting terminal that uses the NFC function of the voting terminal instead of an operational passcode to prevent double voting will be described.

[0091] Figure 9 is a block diagram showing an example of the configuration of a voting terminal 10a according to a modified example. As can be seen by comparing Figure 9 with Figure 3, voting terminal 10a has each component explained in Figure 3, and further includes an NFC communication unit 16. Here, duplicated explanations of each component that is the same as in Figure 9 and Figure 3 will be omitted.

[0092] The NFC communication unit 16 can perform NFC communication including communication with a non-contact integrated circuit (IC) card and short-range wireless communication between devices. The NFC communication unit 16 performs NFC communication under the control of the control unit 11.

[0093] In the above embodiment, after the voter completes his / her voting operation, the display screen of the display unit 121 transitions to the operational passcode input screen U5 (see FIG. 6). In contrast, in this modified example, after the voter completes his / her voting operation, the display screen of the display unit 121 transitions to the NFC communication acceptance screen U6 shown in FIG. 10 instead of the operational passcode input screen U5.

[0094] Fig. 10 is a diagram for explaining the procedure for voting operations on the voting terminal 10a according to this modification. The configuration and operation procedures of screens U1 to U4 shown in Fig. 10 are the same as those explained in Fig. 6, so repeated explanations will be omitted.

[0095] The NFC communication acceptance screen U6 is a screen for accepting NFC communication for the voter after the voting completion screen U4 is displayed. As shown in FIG. 10, the NFC communication acceptance screen U6 displays a message M61 instructing the voter to bring the NFC tag they use closer to the screen, such as a message saying, "Please bring the NFC tag closer to the screen." Below the message M61, for example, a wireless communication mark B61 is displayed. If the NFC tag brought close to the display unit 121 does not have information written thereon indicating that voting has already been done via NFC communication, the voting start screen U1 is displayed.

[0096] 10, the control unit 11 of the voting terminal 10a controls so that NFC communication is performed while preventing wireless communication during the execution of the voting application. Furthermore, the control unit 11 displays a voting reception screen for receiving the voting operation on the display unit 121, and after the operation unit 122 receives the voting operation, transitions to a screen for receiving NFC communication with the NFC tag used by the voter (NFC communication reception screen U6). Furthermore, when the control unit 11 confirms through NFC communication that information indicating that voting has been completed has not been written to the NFC tag, it displays a voting start screen U1 on the display unit 121 and writes information indicating that voting has been completed to the NFC tag.

[0097] The operation using the above-mentioned NFC communication prevents double voting and eliminates the need to set and input an operational passcode, reducing the workload of voting staff.

[0098] In the above embodiment and modified example, the electronic voting system 1 has been described as a configuration example having one counting terminal 20, but the present disclosure is not limited to this. The electronic voting system 1 may have multiple counting terminals 20. By using multiple counting terminals 20, counting processes can be performed in parallel, thereby improving the speed of the counting process.

[0099] Furthermore, in the above embodiment and modified examples, it has been explained on the assumption that voting terminal 10 and tallying terminal 20 themselves have a second interface (slot) into which card-type second external recording medium 32 can be inserted, but the present disclosure is not limited to this. Voting terminal 10 itself and / or tallying terminal 20 itself may not have a slot into which a card-type external recording medium can be inserted. In this case, an external interface (slot) is required in voting terminal 10 and / or tallying terminal 20, and the card-type external recording medium may be connected to the external interface (slot).

[0100] Furthermore, in the above embodiment and modified examples, various processes for preventing double voting and double counting of voting data in the electronic voting system 1 have been described, but the present disclosure is not limited to these. For example, the voting terminal 10 may encrypt the voting data when recording it on the first external recording medium 31 and the second external recording medium 32. Encrypting the voting data can reduce the risk of information leakage in the event that the external recording medium is lost or stolen.

[0101] (6) Other embodiments The above-described operational flows are not limited to being implemented independently, but can be implemented by combining two or more operational flows. For example, some steps of one operational flow may be added to another operational flow, or some steps of one operational flow may be replaced with some steps of another operational flow. In each flow, it is not necessary to execute all steps, and only some steps may be executed. Furthermore, the order of steps in each flow may be changed as appropriate.

[0102] A program may be provided that causes a computer to execute each process performed by each of the above-mentioned devices. The program may be recorded on a computer-readable medium. The computer-readable medium can be used to install the program on a computer. Here, the computer-readable medium on which the program is recorded may be a non-transitory recording medium. The non-transitory recording medium is not particularly limited, and may be, for example, a recording medium such as a CD-ROM or a DVD-ROM. Furthermore, circuits that execute each process performed by each of the above-mentioned devices may be integrated, and at least a part of each of the above-mentioned devices may be configured as a semiconductor integrated circuit (chip set, SoC).

[0103] The functions performed by each of the above-described devices may be implemented in circuitry or processing circuitry, including general-purpose processors, special-purpose processors, integrated circuits, ASICs (Application Specific Integrated Circuits), a CPU (Central Processing Unit), conventional circuits, and / or combinations thereof, programmed to perform the described functions. Processors include transistors and other circuits and are considered circuitry or processing circuitry. A processor may also be a programmed processor that executes a program stored in memory. In this specification, a circuit, unit, or means is hardware that is programmed to perform or executes the described functions. The hardware may be any hardware disclosed in this specification or any hardware known to be programmed to perform or execute the described functions. When the hardware is a processor, which is considered a type of circuitry, the circuit, means, or unit is a combination of hardware and software used to configure the hardware and / or processor.

[0104] As used in this disclosure, the terms "based on" and "depending on / in response to" do not mean "based only on" or "depending only on," unless expressly stated otherwise. The term "based on" means both "based only on" and "based at least in part on." Similarly, the term "depending on" means both "depending only on" and "depending at least in part on." The terms "include," "comprise," and variations thereof do not mean including only the listed items, but may mean including only the listed items or may include additional items in addition to the listed items. Additionally, the term "or," as used in this disclosure, is not intended to mean an exclusive or. Furthermore, any reference to elements using designations such as "first," "second," etc., as used in this disclosure does not generally limit the quantity or order of those elements. These designations may be used herein as a convenient method of distinguishing between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed therein or that the first element must precede the second element in some way. In this disclosure, where articles are added by translation, such as a, an, and the in English, these articles shall include the plural unless the context clearly indicates otherwise.

[0105] The above describes the embodiments in detail with reference to the drawings, but the specific configuration is not limited to that described above, and various design changes can be made within the scope that does not deviate from the gist of the invention.

[0106] (7) Supplementary Notes The following additional notes are about the features of the above-described embodiment.

[0107] Appendix 1 A terminal device that can be used as a voting terminal in an electronic voting system, a control unit that executes a voting application; a wireless communication unit that performs wireless communication under the control of the control unit, The control unit controls the wireless communication so that the wireless communication is not performed while the voting application is being executed. Terminal device.

[0108] Appendix 2 The wireless communication unit includes at least one of a wireless LAN communication unit that performs wireless LAN communication as the wireless communication and a cellular communication unit that performs cellular communication as the wireless communication. 10. The terminal device according to claim 1.

[0109] Appendix 3 When the voting application is started, if the wireless communication function is on, the control unit turns off the wireless communication function. 3. A terminal device according to claim 1 or 2.

[0110] Appendix 4 The control unit sets a mode in which the wireless communication function is turned off while the voting application is being executed. A terminal device according to any one of Supplementary notes 1 to 3.

[0111] Appendix 5 further comprising an operation unit that accepts an input operation by a user; The control unit controls the wireless communication function not to be turned on even when the input operation to turn on the wireless communication function is received during execution of the voting application. A terminal device according to any one of Supplementary notes 1 to 4.

[0112] Appendix 6 The control unit controls the voting application not to be started when the wireless communication function is set to on. 6. A terminal device according to any one of Supplementary notes 1 to 5.

[0113] Appendix 7 further comprising an operation unit that accepts an input operation by a user; When the wireless communication function is set to ON, the control unit controls so as not to start the voting application even if the input operation for starting the voting application is received. 7. A terminal device as described in Supplementary Note 6.

[0114] Appendix 8 a first interface to which a first external recording medium is electrically connected; a second interface to which a second external recording medium different from the first external recording medium is electrically connected; The control unit writes voting data obtained by a voting operation using the voting application to the first external recording medium as original data, and writes the voting data to the second external recording medium as copy data. 10. The terminal device according to claim 1.

[0115] Appendix 9 A display unit; an operation unit that accepts an input operation by a user, The control unit a voting reception screen for receiving a voting operation is displayed on the display unit, and after the operation unit receives the voting operation, the screen is transitioned to a screen for receiving input of an operational passcode for a voting staff member; When the operation unit receives an input of a correct operational passcode as the operational passcode, the vote acceptance screen is displayed on the display unit. 10. The terminal device according to claim 1.

[0116] Appendix 10 A display unit; an NFC communication unit that performs NFC communication under the control of the control unit, The control unit A voting acceptance screen for accepting a voting operation is displayed on the display unit, and after the operation unit accepts the voting operation, the screen is transitioned to a screen for accepting the NFC communication with the NFC tag used by the voter, When it is confirmed through the NFC communication that information indicating that voting has been completed has not been written to the NFC tag, the voting acceptance screen is displayed on the display unit, and information indicating that voting has been completed is written to the NFC tag. 10. The terminal device according to claim 1.

[0117] Appendix 11 The control unit controls the NFC communication to be performed while controlling the wireless communication not to be performed during execution of the voting application. 11. The terminal device of claim 10.

[0118] Appendix 12 further comprising an operation unit that accepts an input operation by a user; The control unit When the correct polling station administrator password is entered as the polling station administrator password for the polling station administrator, the first operation required for the management and operation of each polling station is enabled, When the correct election administrator password is entered as the election administrator password for the election administrator, not only the first operation but also the second operation including the registration and modification of candidate data for each candidate in the vote is possible. 10. The terminal device according to claim 1.

[0119] Appendix 13 The polling station administrator password, the election administrator password, and the candidate data are stored in an external recording medium, and the polling station administrator password and the candidate data are stored in an external recording medium. The control unit reads the correct polling station manager password, the correct election administrator password, and the candidate data from the external recording medium and sets them in the control unit. 13. The terminal device of claim 12.

[0120] Appendix 14 A terminal device that can be used as a voting terminal in an electronic voting system, performing wireless communication; running a voting application; and controlling the wireless communication so that the wireless communication is not performed while the voting application is being executed. program. [Explanation of symbols]

[0121] 1: Electronic Voting System 10: Voting terminal 10a: Voting terminal 11: Control section 12: Operation display section 121: Display section 122:Operation unit 13: Wireless communication unit 14: First interface 15: Second interface 16: NFC communication unit 20: Counting terminal 21: Control unit 22: Operation display section 221:Display section 222:Operation unit 23: First interface 24: Second interface 31: First external recording medium 32: Second external recording medium

Claims

1. A terminal device that can be used as a voting terminal in an electronic voting system, a control unit that executes a voting application; a wireless communication unit that performs wireless communication including at least one of wireless LAN communication and cellular communication under the control of the control unit; an NFC communication unit that performs NFC communication under the control of the control unit, The control unit controls the wireless communication not to be performed while the voting application is being executed, and controls the NFC communication to be performed. Terminal device.

2. The wireless communication unit includes at least one of a wireless LAN communication unit that performs the wireless LAN communication as the wireless communication and a cellular communication unit that performs the cellular communication as the wireless communication. The terminal device according to claim 1 .

3. When the voting application is started, if the wireless communication function is on, the control unit turns off the wireless communication function. The terminal device according to claim 1 .

4. The control unit sets a mode in which the wireless communication function is turned off while the voting application is being executed. The terminal device according to claim 1 .

5. further comprising an operation unit that accepts an input operation by a user; The control unit controls the wireless communication function not to be turned on even when the input operation to turn on the wireless communication function is received during execution of the voting application. The terminal device according to claim 1 .

6. The control unit controls the voting application not to be started when the wireless communication function is set to on. The terminal device according to claim 1 .

7. further comprising an operation unit that accepts an input operation by a user; When the wireless communication function is set to ON, the control unit controls so as not to start the voting application even if the input operation for starting the voting application is received. The terminal device according to claim 6.

8. a first interface to which a first external recording medium is electrically connected; a second interface to which a second external recording medium different in type from the first external recording medium is electrically connected; The control unit writes voting data obtained by a voting operation using the voting application to the first external recording medium as original data, and writes the voting data to the second external recording medium as copy data. The terminal device according to claim 1 .

9. A display unit; an operation unit that accepts an input operation by a user, The control unit A voting reception screen for receiving a voting operation is displayed on the display unit, and after the operation unit receives the voting operation, the screen is transitioned to a screen for receiving the NFC communication with the NFC tag used by the voter; When it is confirmed through the NFC communication that information indicating that voting has been completed has not been written to the NFC tag, the voting reception screen is displayed on the display unit, and information indicating that voting has been completed is written to the NFC tag. The terminal device according to claim 1 .

10. further comprising an operation unit that accepts an input operation by a user; The control unit When the correct polling station administrator password is entered as the polling station administrator password for the polling station administrator, the first operation required for the management and operation of each polling station is enabled, When a correct election administrator password is entered as the election administrator password for the election administrator, not only the first operation but also the second operation including the registration and change of candidate data for each candidate in the vote is possible. The terminal device according to claim 1 .

11. A terminal device that can be used as a voting terminal in an electronic voting system, performing wireless communication including at least one of wireless LAN communication and cellular communication; performing NFC communication; running a voting application; and controlling the NFC communication to be performed while controlling the wireless communication not to be performed during execution of the voting application. program.

12. A terminal device that can be used as a voting terminal in an electronic voting system, a control unit that executes a voting application; a wireless communication unit that performs wireless communication under the control of the control unit; A display unit; an operation unit that accepts an input operation by a user, the control unit controls the wireless communication so that the wireless communication is not performed while the voting application is being executed; The control unit a voting reception screen for receiving a voting operation is displayed on the display unit, and after the operation unit receives the voting operation, the screen is transitioned to a screen for receiving input of an operational passcode for a voting staff member; When the operation unit receives an input of a correct operational passcode as the operational passcode, the vote acceptance screen is displayed on the display unit. Terminal device.

13. A terminal device that can be used as a voting terminal in an electronic voting system, performing wireless communication; running a voting application; accepting an input operation from a user; a step of controlling the wireless communication so that it is not performed while the voting application is being executed; a step of displaying a voting reception screen for receiving a voting operation, and after receiving the voting operation, transitioning to a screen for receiving input of an operational passcode for a voting staff member; When a correct operational passcode is input, the step of displaying the voting acceptance screen is executed. program.

14. A terminal device that can be used as a voting terminal in an electronic voting system, a control unit that executes a voting application; a wireless communication unit that performs wireless communication under the control of the control unit; an interface to which an external recording medium is electrically connected, which stores a correct polling station manager password for a polling station manager, a correct election manager password for an election manager, and candidate data for each candidate in a vote; the control unit controls the wireless communication so that the wireless communication is not performed while the voting application is being executed; The control unit reads the correct polling station manager password, the correct election administrator password, and the candidate data from the external recording medium and sets them in the control unit. Terminal device.

15. A terminal device that can be used as a voting terminal in an electronic voting system, performing wireless communication; running a voting application; a step of controlling the wireless communication so that it is not performed while the voting application is being executed; a step of reading out the correct polling station manager password, the correct election manager password, and the candidate data of each candidate in a vote from an external recording medium electrically connected to the terminal device, and setting the correct polling station manager password, the correct election manager password, and the candidate data in the terminal device. program.

Images