A voting machine and a method of operating a voting machine

Abstract

The present invention relates to a voting machine (1a, 1b) comprising one or more hardware-based security device operatively connected to the voting machine, one or more machine-readable instructions executable by the one or more hardware-based security device, the one or more machine readable instructions configured to operate the voting machine (1a, 1b), the one or more machine-readable instructions comprises authenticating or validating the one or more hardware-based security device before granting access to either operate the voting machine (1a, 1b), or a key or a certificate on the voting machine (1a, 1b), or combination thereof, allowing the voting machine (1a, 1b) to accept one or more documents indicating one or more votes, authorizing the voting machine (1a, 1b) to stop accepting the one or more documents and then tallying or counting a total number of the votes, generating one or more reports comprising the tallied total number of votes, signing either the one or more documents, or the one or more reports or combination thereof, using the one or more hardware-based security device, authorizing the printing the one or more reports, validating the counted and recorded votes, and transmitting either the one or more signed documents or the one or more signed reports, or combination thereof through one or more communication network.

Description

TITILE

[0001] A VOTING MACHINE AND A METHOD OF OPERATING A VOTINGMACHINETECHNICAL FIELD OF THE INVENTION

[0002] The present invention relates to a voting machine and a method of operating a voting machine and in particular to a voting machine having a hardware-based security device.BACKGROUND ART OF THE INVENTION

[0003] The traditional voting system in the Philippines was predominantly manual before the country transitioned to semi-automated elections. In the manual system, voters would go to polling precincts, where they received a ballot containing the names of candidates for different positions. Voters would then write down the names of their chosen candidates, which were later manually counted by election officers. This process was often time-consuming, requiring election officials to work through the night to tally votes from numerous precincts. Additionally, the manual transmission of results from the precincts to municipal, provincial, and national levels was prone to delays, sometimes taking weeks before the official results were announced.

[0004] One major drawback of this conventional system was its vulnerability to electoral fraud. The conventional system was susceptible to common forms of cheating, such as "ballot switching," "dagdag-bawas" (vote padding and shaving), and tampering with results during transmission. These practices compromised the integrity of the elections and led to widespread distrust in the electoral process. Furthermore, the manual system made it easy for discrepancies and human errors to occur during vote counting, which further undermined the accuracy and credibility of election results.

[0005] Another disadvantage was the inefficiency and costliness of the manual voting process. The need for large numbers of election personnel to oversee voting, counting, and transmission meant that the government had to spend significant resources. This inefficiency often led to delayed announcements of winners, creating uncertainties and opportunities for disputes. The prolonged period between voting and the declaration of results also heightened tensions among the electorate and political parties, sometimes leading to post-election violence or unrest.

[0006] The current semi-automated voting system in the Philippines, while addressing many issues of the manual process, still has significant drawbacks. One of the primary concerns is the potential for technical glitches and system failures. During elections, some vote-counting machines (VCMs) have experienced malfunctions, machine breakdowns, or issues in reading ballots. These technical problems can cause delays, long lines at polling stations, and even raise doubts about whether all votes are accurately counted. Additionally, there have been instances where digital transmission of results was delayed due to connectivity problems, which fuels skepticism and concerns about the integrity of the electoral process.

[0007] Another major drawback is the vulnerability of the system to cybersecurity threats. Although the semi-automated system is designed to be more secure, there are fears of hacking or tampering with election data, which could compromise the accuracy of the results. These security and transparency issues contribute to mistrust among the electorate, with some fearing that automated systems could be manipulated, leading to doubts about the credibility of election outcomes.AN OBJECT OF THE INVENTION

[0008] The above-mentioned drawbacks ultimately highlighted the need for a more secure, efficient and transparent voting machine for national, local, private or public electoral exercises.

[0009] It is an object of the present invention to provide a voting machine and method that provide advanced counting and tallying of votes, facilitate an accessible, transparent, and secure voting process, and ensure the long-term sustainability and reliability of the voting machine components.

[0010] It is another object of the present invention to be wheelchair accessible, providing ample space for comfortable maneuvering and unobstructed access to a voting machine for users who rely on wheelchairs. The invention aims to promote independence and equal access to the voting machine for users of all abilities, including those with mobility impairments.

[0011] It is a further object of this invention to provide a voting machine that balances compactness, functionality, and modularity. The present invention is lightweightsuitable for ease of transport, while robust enough to withstand various environmental conditions.

[0012] It is a further object of this invention to provide a voting machine that is modular, which enables the updating and / or upgrading of each module or component, ensuring alignment with rapidly evolving technology.SUMMARY OF THE INVENTION

[0013] According to the invention, there is provided a voting machine comprising: one or more hardware-based security device operatively connected to the voting machine, the one or more hardware-based security device configured access the voting machine or to authenticate a file, a report or a document generated by the voting machine; and one or more machine-readable instructions are stored on a memory device embedded within the voting machine, the one or more machine readable instructions configured to operate the voting machine, the one or more machine-readable instructions comprises: authenticating or validating the one or more hardware-based security device before granting access to either operate the voting machine, or a key or a certificate on the voting machine, or combination thereof; allowing the voting machine to accept one or more documents indicating one or more votes; authorizing the voting machine to stop accepting the one or more documents and then tallying or counting a total number of the votes; generating one or more reports comprising the tallied total number of votes; signing either the one or more documents, or the one or more reports or combination thereof, using the one or more hardware- based security device; authorizing the printing the one or more reports; validating the counted and recorded votes; and transmitting either the one or more signed documents or the one or more signed reports, or combination thereof through one or more communication network.

[0014] The one or more hardware-based security device is at least PKCS#11 standard-compatible devices in the form of either one or more smartcard, one or more hardware token, or combination thereof.

[0015] The one or more hardware-based security device stores the key or the certificate including a unique non-extractable private key, a unique public key, a unique digital certificate, or combination thereof.

[0016] The one or more hardware-based security device can be validated preferably using a unique identification number or biometrics or combination thereof.

[0017] The document is preferably one or more ballot.

[0018] The voting machine is processor-based.

[0019] The report is preferably one or more election reports including initialization report, voting receipts, election return, variance report, statistical report, immutable audit log, or combination thereof.

[0020] The voting machine is portable, modular, reconfigurable, customizable, or combination thereof.

[0021] The voting machine has a container with caster wheels for easy mobility, the container having one or more translucent panel.

[0022] The voting machine has box compartments for valid, invalid, and rejected ballots, as well as other election supplies and paraphernalia. This setup not only helps prevent the mix-up between official (used) and unofficial (unused) ballots but also reduces the risk of official ballots being affected by items like ink for marking voters. Additionally, having designated compartments for election supplies helps avoid misplacement or loss of important election materials.

[0023] The voting machine includes one or more processor-based imaging device (e.g., a scanner).

[0024] The voting machine includes one or more sensors operatively connected with the one or more processor-based imaging device (e.g., a scanner).

[0025] The voting machine further includes either an electronic or mechanical cast or return mechanism, or combination thereof.

[0026] The electronic cast or return mechanism includes one or more stepper motor operatively connected with the one or more processor-based imaging device (e.g., a scanner) and the one or more sensors.

[0027] The selection of cast or return button on the screen triggers the one or more stepper motor.

[0028] The one or more stepper motor is configured to move one or more roller forward directing the ballot towards the container when casting the votes, or to move backward rejecting the votes and then returning the ballot to a tray externally connected on the voting machine.

[0029] The mechanical cast or return mechanism incorporates a lever connected to a simple mechanical linkage system consisting of rods or pivoting arms. These components translate the movement of the lever into motion that shifts a panel.

[0030] The movement of the lever causes the linkage system to shift the panel to one side. When the lever is pulled in either direction (upward or downward), the moving panel directs the document (e.g., ballot) into the corresponding cast container or return tray. This action either directs the document towards the container when casting the vote or moves it backward, rejecting the vote and returning the ballot to the tray on the voting machine.

[0031] The present invention also provides a method of operating a voting machine, the method comprising: inserting a hardware-based security device to a voting machine, the voting machine validates the hardware-based security device; providing a key or a certificate on an interface of the voting machine by a user; removing the hardware-based security device from the voting machine; selecting a task from a list on the interface; accessing and signing a document on the voting machine by the user; counting and recording of the votes by means of the one or more machine readable instructions; and transmitting a vote count by the voting machine to one or more communication network.

[0032] The one or more hardware-based security device is at least PKCS#11 standard-compatible devices in the form of either one or more smartcard, one or more hardware token, or combination thereof.

[0033] The hardware-based security device stores a unique non-extractable private key, a unique public key, a unique digital certificate, or combination thereof.

[0034] The one or more hardware-based security device can be validated preferably using a unique identification number or biometrics or combination thereof.

[0035] The document is preferably one or more ballot.

[0036] The report is preferably one or more election reports including initialization report, voting receipts, election return, variance report, statistical report, immutable audit log, or combination thereof.

[0037] The task is either “open voting”, “close voting”, “rezero”, “resume voting”, “transmit results”, “print results”, “diagnostics” (i.e., a module that check whether the hardware peripherals of the voting machine are working / functioning properly), or “transparent machine count” (i.e., a transparency module).

[0038] The method includes generating and printing an initialization report, equivalent to election returns with all candidates showing zero votes, when the open voting task is selected.

[0039] The method includes casting votes on the ballot and then inserting the ballot into an imaging device (e.g., a scanner) of the voting machine by the user and collecting the ballot by the voting machine.

[0040] The method includes scanning the document (e.g., ballot) and flashing the votes on the interface of the voting machine or viewing an image of either the ballot or the electronic copy of the voter receipt, or combination thereof is selected on the interface. The machine features the ability to scan ballots in multiple orientations and supports repeated scanning of returned ballots, with configurable options to set scan limits if needed.

[0041] The method further includes the casting or returning of the document (e.g., ballot), where the document is either directed towards the container if the user chooses to cast the vote, or returned to a tray externally connected to the voting machine if the user chooses to reject the vote.

[0042] The method further includes indicating an error status when the voting machine cannot process a ballot, with specific categories of errors. These include an "error reading the ballot," where the machine is unable to read the ballot; an "invalid ballot," where the ballot fails to meet security feature validation; a "misread ballot," where the ballot passes security checks and is processed, but the interpretation does not match the physical markings; and a "rejected ballot," where the ballot is validated for security features but is not processed due to other issues.

[0043] The method further includes indicating the detection of an "invalid ballot" if the security marks in the ballot cannot be read by the voting machine.

[0044] The method further includes indicating the detection of a "misread ballot" if the ballot is read by the voting machine but the voter or the operator selects to return the ballot due to the voting machine incorrectly interpreted the ballot.

[0045] The method further includes indicating the detection of a "rejected ballot" if the security marks in the ballot can be read by the voting machine but cannot process the ballot further due to other reasons.

[0046] The method further includes printing a vote receipt, digitally signing the election documents such as but not limited to electronic ballot images, voters’ receipt, election results, diagnostic report, logs, printing an election return, connecting to one or more communication network, transmitting the election results to the one or more communication network, or combination thereof.BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 is an illustrative view of a voting system including a voting machine according to an embodiment of the present invention;

[0048] Figure 2 is an exploded isometric view of a voting machine according to an embodiment of the present invention;

[0049] Figure 3 is a block diagram of components of a voting machine according to an embodiment of the present invention;

[0050] Figure 4A is a circuit layout of an electronic cast or return mechanism of a voting machine according to an embodiment of the present invention;

[0051] Figure 4B is block diagram of a mechanical cast or return mechanism of a voting machine according to an embodiment of the present invention;

[0052] Figure 5 is a flowchart of an electronic cast or return mechanism of a voting machine according to an embodiment of the present invention;

[0053] Figure 6 is a block diagram of a counting mechanism of a voting machine according to an embodiment of the present invention;

[0054] Figure 7 is a perspective view of a voting machine according to another embodiment of the present invention;

[0055] Figure 8 is a perspective view of the voting machine from Figure 7, in an open state; and

[0056] Figure 9 is a perspective view of an upper part of the voting machine from Figure 7.DETAILED DESCRIPTION OF THE INVENTION

[0057] The present invention will now be described in detail with reference to a few preferred embodiments thereof as illustrated in the accompanying drawings. In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present invention. It will be apparent, however, to one skilled in the art, that the present invention may be practiced without some or all of these specific details. In other instances, well known structures have not been described in detail in order to not unnecessarily obscure the present invention.

[0058] Referring to Figure 1 , a voting system is disclosed. The voting system include a voting machine (1 a, 1 b) of the present invention. The voting machine (1 a, 1 b) is operatively connected with a communication network. The voting machine (1 a, 1 b) is in operative communication with one or more hardware-based security device. Thehardware-based security device is a cryptographic token or cryptoki that is at least PKCS#11 standard compatible device in the form of USB dongle or smart card. The USB dongle or the smart card) is configured to access the voting machine (1a, 1 b) orto authenticate the user, sign a file, a report or a document generated by the voting machine (1a, 1 b).

[0059] Machine-readable instructions that are executable by inserting and validating the cryptographic token (a.k.a. cryptoki), such as an access card or the smart card is also disclosed. The machine-readable instructions are configured to operate the voting machine (1a, 1 b). The machine-readable instructions comprise authenticating or validating the access card or the smart card before granting access to either operate the voting machine (1a, 1 b), or a key or a certificate on the voting machine (1a, 1 b), or combination thereof. The machine-readable instructions comprise allowing the voting machine (1 a, 1 b) to accept documents indicating votes. The machine-readable instructions comprise authorizing the voting machine (1a, 1 b) to stop accepting the documents and then tallying or counting a total number of the votes. The machine-readable instructions comprise generating reports comprising the tallied total number of votes. The machine-readable instructions further comprise signing either the documents, or the reports or combination thereof, using the access card or the smart card. The machine-readable instructions comprise authorizing the printing of the reports. The machine-readable instructions comprise validating the counted and recorded votes. The machine-readable instructions comprise transmitting either the signed documents or the signed reports, or combination thereof through communication network.

[0060] In a preferred embodiment, cryptographic tokens, also known as cryptoki, are at least PKCS#11 standard-compatible devices in the form of USB dongles or smart cards. The cryptoki are used solely to provide identity of the user to the voting machine, granting them the authority to access or navigate its functions. The machine-readable instructions are stored on a memory device embedded within the voting machine, which are installed during the initial startup. These instructions are not stored on the cryptoki; rather, they are stored in the memory device that is executable in the voting machine. These instructions are responsible for verifying whether the inserted token is authorized, allowing access to the machine's options, menus, and modules once verification is complete.

[0061] Advantageously, the voting machine (1 a, 1 b) is modular and / or scalable to be compatible with new technologies, providing long-term sustainability and reliability in election management.

[0062] Referring to Figure 2, the voting machine (1 a, 1 b) has a body and an upper part (2). The upper part (2) is mountable to the body (4). The upper part () has an interface (6) (i.e., a large screen such as 13.3 inches diagonal touchscreen). The upper part (2) has a thermal printer (8) for printing reports and a dedicated interface of the hardware-based security device. The upper part (2) has an insertion slot where the ballots are fed such that the ballots be received by the body of the voting machine (1 b).

[0063] Advantageously, the interface 0 of the voting machine (1 b) can be larger for ease of use of elderly or persons with disabilities such as visually impaired individuals.

[0064] Referring to Figure 3, the figure depicts connection of components of the voting machine (1 a, 1 b). A power supply (i.e., 12VAC power supply) (10) is operatively connected with each of a power supply regulator block (12), a mini personal computer (“mini-PC”) (14) and a universal serial bus (USB) hub (16). The mini-PC (14), a liquid crystal display (LCD) touchscreen (18) and an imaging device (20) are operatively connected to one another. The USB hub (16) is operatively connected to each of the smart card reader (22) and the thermal printer (8). The thermal printer (8) is operatively connected to the power supply regulator block (10). Two infrared sensors (24a, 24b) are operatively connected to Arduino (26). The mini- PC (14), the USB hub (16) and the Arduino (26) are operatively connected to one another.

[0065] Advantageously, the mini-PC (14) runs in an Ubuntu 18.04 LTS operating system. However, it will be appreciated by any skilled addressee that any operating system available and suitable for use can also be utilized by the mini-PC.

[0066] Referring to Figure 4a, an electronic cast or return mechanism (28) on a breadboard is illustrated. The electronic cast or return mechanism (28) utilizes Commercial Off-The Shelf (COTS) components. The electronic cast or return mechanism (28) has a stepper motor and infrared (IR) sensors in operative communication with an imaging device (i.e., a COTS scanner). The electronic castor return mechanism has three IR sensors. The IR sensors are positioned in a triangle (i.e., two IR sensors are positioned in front of an imaging device paper feed and another IR sensor is positioned at the back and in front of a paper roller). A stepper motor is configured to move the paper roller forward, directing the paper towards a box compartment; or backward, rejecting the votes and then returning the ballot to a tray on the voting machine (1 a, 1 b). The electronic cast or return mechanism (28) illustrates a basic functionality, including a stepper motor and a series of IR sensors that detect and validate the movement of the ballot. This setup directs the ballot either into the ballot compartment or back to a tray, depending on whether it is accepted or rejected.

[0067] In a preferred embodiment, as shown in Figure 4b, a mechanical cast or return mechanism (30) is provided. The mechanical cast or return mechanism (30) uses a lever-driven panel (32) to guide the ballot's direction, while IR sensors (34) detect the ballot’s position and trigger the display on the user interface (touch screen panel) (36).

[0068] It should be noted that the voting machine (1 a, 1 b) can incorporate components as either commercial off-the-shelf (COTS) items or custom-designed elements, offering flexibility in configuration. This is particularly important as the imaging device, such as a scanner, will utilize various sensors, including UV and IR, to detect security marks on the ballot — features not typically found in COTS imaging devices.

[0069] Referring to Figure 5, an electronic cast or return mechanism (28), or mechanical cast or return mechanism (30), flowchart is shown. Firstly, the user feeds the paper (i.e., the ballot) (38). Then the ballot enters through a slot (40). Then each of the IR sensors located on opposite sides of the voting machine (1 a, 1 b) detect the paper (42). This then triggers the stepper motor to move the paper forward (44). Next, the processor-based imaging device rolls the paper in the voting machine (1 a, 1 b) (46). Then the sensor located at the middle of the ballot box detects the paper (48). If the sensor stops detecting the paper (50), the motor is switched off (52). Then the user chooses whether to cast or return the vote (54). If the user chooses to cast the vote, the paper is moved forward by the motor and roller to the container of the voting machine (1 a, 1 b) (56). If the user chooses not to cast the vote, the paper is moved backward by the motor (58) and then the ballot is returned to a tray on the voting machine (1 a, 1 b) (60).

[0070] Referring to Figure 6, a counting mechanism (i.e., transparent machine count) (62) of a voting machine (1 a, 1 b) is shown. The counting mechanism (62) is configured to seamlessly review scanned image of the ballot and digital copy of voter’s receipt. The user can simply scan or read a valid identifier such as a QR code or barcode on a printed voter’s receipt using a barcode or a QR scanner of the voting machine (1 a, 1 b), allowing the userto view both the scanned image of the ballot and the digital copy of the voter’s receipt simultaneously on the same interface (6) or screen.

[0071] The corresponding sections of the digital copy of the voter’s receipt is being updated (corresponding to a shaded oval of the chosen candidate of the user on the ballot) to display the result interpreted by the voting machine (1 a, 1 b), when the user navigate through the scanned image of the ballot. This ensures transparency and allows the user to verify the accuracy and credibility of the voting machine (1 a, 1 b).

[0072] Advantageously, the interface (6) can be easily projected onto a wall for larger displays, catering to larger audiences and enhancing visibility. Any variance identified through this transparency feature will be flagged and included in the variance report, which can also be transmitted over one or more communication networks.

[0073] Referring to Figures 7 to 9, a voting machine (1 a) according to another embodiment of the present invention is illustrated. The voting machine (1 a) has a container (i.e., a compartmentalized translucent ballot box) (64). The container (64) has translucent or frosted panel (66, 68, 70) facilitating observation of ballot movement without revealing details or compromising voter privacy. The container (64) is compartmentalized, facilitating secure storage of official documents while providing separate compartments (72, 74, 76) for miscellaneous items such as ink, voter receipts, unofficial (unused, rejected, and misread) ballots, and other election materials. Each compartment (72, 74, 76) is customizable to accommodate various election materials, ensuring safekeeping and preventing the materials from mixing with the ballots. The container has an interior that is lined or covered with protective materials to safeguard the ballots from stains and potential damage, thereby upholding the integrity of the election process and ensuring accurate results.

[0074] Advantageously, the voting machine (1 a, 1 b) is configured to recognize and display information on various languages, enhancing accessibility and userexperience by providing translation of texts shown on the interface (6) based on the voting machine’s location or the user's language preference.

[0075] The voting machine (1 a, 1 b) is configured to detect the location of the machine using an independent board with sensors such as GPS, temperature, humidity, and other similar sensors. The voting machine (a, 1 b) is configurable to use the user’s preferred language. The voting machine (1 a, 1 b) can display is configured to display information on the interface (6) in multiple languages, ensuring clarity and ease of use for a diverse range of users, promoting inclusivity, removing language barriers, and making the voting machine (1 a, 1 b) more user-friendly and accessible to a wider audience. The supported languages include, but are not limited to, English, Filipino, and other major native or local languages or dialects widely used in the Philippines.

[0076] Advantageously, the voting machine (1 a, 1 b) can include tactile markings, larger buttons or touchpoints, voice command functionality, and adjustable interfaces to accommodate various mobility and sensory needs for elderly or persons with disabilities.

[0077] Referring to Figure 8, the voting machine (1 a, 1 b) has a disinfecting lid (78) having an ultraviolet-C (UV-C) light. The lid (78) is adapted to ensure cleanliness of the voting machine (1 a, 1 b) while enhancing safety of the users by not exposing them to the UV rays. When the lid is closed, the UV-C light located inside the voting machine (1 a, 1 b) activates, disinfecting a surface area where the users make contact to the lid. The UV-C light is adapted to eliminate germs and bacteria, thereby providing a clean and hygienic environment for the next user.

[0078] Special sensors and safety mechanisms such as, but not limited to, proximity sensors and lid switches are configured to activate the UV light when the lid is closed. The sensors and safety mechanisms are configured to detect and ensure that there are no obstructions, preventing any accidental exposure to users.

[0079] The voting machine (1 a, 1 b) may include biometrics authentication unit configured to check if the voter is registered to cast votes thereto.

[0080] The voting machine (1 a, 1 b) is water-proof or water resistant, preventing damage caused by water, extreme heat, humidity, and / or shock on the components therein.

[0081] The voting machine (1 a, 1 b) is secure and prevents disassembly or easy access therein from the outside. The voting machine (1 a, 1 b) is flexible and allows straightforward access during maintenance tasks, such as clearing paper jams, without revealing the ballots or the internal components, thereby limiting access of unauthorized personnel and preventing tampering or unauthorized modifications to the voting machine (1 a, 1 b).

[0082] Advantageously, the voting machine (1 a, 1 b) is reconfigurable, customizable or combination thereof. The voting machine (1 a, 1 b) is configurable to execute a wide range of election types and related activities. Advantageously, the voting machine (1 a, 1 b) can be integrated in various electoral processes.

[0083] Advantageously, the voting machine (1 a, 1 b) is reconfigurable to accommodate changes in functionality, voting procedures, technology, and election standards required for the specific type of election.

[0084] Advantageously, the voting machine (1 a, 1 b) is configurable to provide advanced security, comply with international standards or combination thereof.

[0085] Advantageously, the voting machine (1 a, 1 b) is modular and compatible with off-the-shelf components, customizable and / or reconfigurable to meet specific user requirements.

[0086] Advantageously, the voting machine (1 a, 1 b) is user-centric. The voting machine (1 a, 1 b) facilitates reviewing of the ballot by a user by means of the interface (36). The voting machine (1 a, 1 b) is also configured to provide a receipt before cast / return of the ballot.

[0087] Advantageously, the voting machine (1 a, 1 b) utilizes an Optical Mark Recognition (OMR) to detect a voter's intent to vote for a specific option or candidate.

[0088] The voting machine (1 a, 1 b) is operable with hardware-based security device, a cryptographic token or cryptoki that is at least PKCS#11 standard-compatible devices and in the form of USB dongle 4 and smartcard 8, to store digital certificates assigned to users operating the voting machine (1 a, 1 b). For example, each user who is an Electoral Board member (i.e., Board of Election Inspectors (BEI)), is givena unique cryptographic token (i.e., a smartcard or USB dongle) which securely stores a non-extractable private key and a unique digital certificate that serves as a means of authentication for accessing the voting machine (1 a, 1 b) and digitally signing the documents. This robust authentication mechanism ensures that only authorized individuals can access the machine and endorse the documents.

[0089] The voting machine (1 a, 1 b) utilizes digital certificates and signatures aside from enhanced encryption algorithm (e.g., RSA SHA 512). Digital signing is the process of applying a unique electronic signature to digital documents ensuring their authenticity and integrity, while validation is the verification of these signatures to confirm that the documents haven't been altered and are from a trusted source.

[0090] Advantageously, the invention utilizes various libraries to develop a custom signing and validation process, incorporating both soft tokens (i.e., machine sign) and hard tokens (i.e., signing using hardware-based security devices or), available in USB dongle and smartcard formats. These security and transparency features allow the public to view election-related documents without altering the information, and ensure accountability of individuals who digitally signed the document. These features also facilitate identification of the voting machine (1 a, 1 b) where the document was generated for non-individual signing (i.e., machine signing).

[0091] The voting machine (1 a, 1 b) is operable with extensible Markup Language (XML) Security (xmlsec), a standard cryptographic library for XML documents, for verifying Election Markup Language (EML) signatures. EML is a specialized XML- based file format used for exchanging election-related data.

[0092] The machine-readable instructions includes executing RSA (Rivest-Shamir- Adleman) with at least 512, 4096 bits for encryption and digital signing.[0093 The machine-readable instructions includes implementing “chain of trust” in issuance of the digital certificates. "Chain of trust" refers to hierarchical structure of the digital certificates used in public key infrastructure (PKI) systems to establish and verify the authenticity of digital identities.

[0094] The machine-readable instructions utilize Structured Data format compatible with the digital signatures to store cast votes, election returns, and transmission packages such as election results. Signed Structured Data ensures that theinformation contained within is processed by an authorized machine (e.g., voting machine (1 a, 1 b)) and has not been modified since (modification of signed information invalidates the signature). The processing or receiving machine (e.g., another server that may be added by the electoral managing body) can check the authenticity of the data by validating the data with its digital signature which in turn is validated (either independently using external tools, or by utilizing the validation features of the voting machine (1 a, 1 b)) by checking if the signing certificate is trusted.

[0095] The voting machine (1 a, 1 b) utilizes EML440 (Cast Vote) as storage format for votes cast by a voter using the voting machine (1 a, 1 b). The voting machine (1 a, 1 b) utilizes EML510 (Count) as storage format for the tallied result, the election returns. The voting machine (1 a, 1 b) utilizes XML Digital Signatures as transmission package format, ready to be sent to another machine or the server.

[0096] The voting machine (1 a, 1 b) utilizes document format compatible with the digital signatures to store reports and display a stamp of authenticity to any printed copies of the report.

[0097] The voting machine (1 a, 1 b) utilizes Digital Signature compatible document format (e.g., PDF 1 .7, Office Open XML, OpenDocument 1 .2) ensuring that contents of the report are authenticated by the holder of the certificate used to sign the document, and any printed copy of the document can be matched against a digitally signed software copy if the need arises.

[0098] The foregoing preferred embodiments of this invention are merely an illustration of this invention rather than its limitation. It is intended to cover various modifications and changes included within the spirit and scope of the appended claims, the scope of which should be accorded the broadest interpretation to encompass all such modifications and similar structures.

Claims

Claims1 . A voting machine comprising: one or more hardware-based security device operatively connected to the voting machine, the one or more hardware-based security device configured access the voting machine or to authenticate a file, a report or a document generated by the voting machine; and one or more machine-readable instructions are stored on a memory device embedded within the voting machine, the one or more machine readable instructions configured to operate the voting machine, the one or more machine-readable instructions comprises: authenticating or validating the one or more hardware-based security device before granting access to either operate the voting machine, or a key or a certificate on the voting machine, or combination thereof; allowing the voting machine to accept one or more documents indicating one or more votes; authorizing the voting machine to stop accepting the one or more documents and then tallying or counting a total number of the votes; generating one or more reports comprising the tallied total number of votes; signing either the one or more documents, or the one or more reports or combination thereof, using the one or more hardware- based security device; authorizing the printing the one or more reports; validating the counted and recorded votes; and transmitting either the one or more signed documents or the one or more signed reports, or combination thereof through one or more communication network.

2. The voting machine according to claim 1 , wherein the one or more hardware-based security device is at least PKCS#11 standard-compatible devices in the form of either one or more smartcard, one or more hardware token, or combination thereof.

3. The voting machine according to claim 1 , wherein the one or more hardware-based security device stores the key or the certificate including a unique non-extractable private key, a unique public key, a unique digital certificate, or combination thereof.

4. The voting machine according to claim 1 , wherein the one or more hardware-based security device can be validated by using a unique identification number or biometrics or combination thereof.

5. The voting machine according to claim 1 , wherein the document is preferably one or more ballot.

6. The voting machine according to claim 1 , wherein the voting machine is processor-based.

7. The voting machine according to claim 1 , wherein the report is preferably one or more election reports including initialization report, voting receipts, election return, variance report, statistical report, immutable audit log, or combination thereof.

8. The voting machine according to claim 1 , wherein the voting machine is portable, modular, reconfigurable, customizable, or combination thereof.

9. The voting machine according to claim 4, wherein the voting machine has a container with caster wheels for easy mobility, the container having one or more translucent panel and one or more compartments.

10. The voting machine according to claim 9, wherein the voting machine includes one or more processor-based imaging device.11 . The voting machine according to claim 10, wherein the voting machine includes one or more sensors operatively connected with the one or more processorbased imaging device.

12. The voting machine according to claim 11 , wherein the voting machine further includes one or more stepper motor operatively connected with the one or more processor-based imaging device and the one or more sensors.

13. The voting machine according to claim 12, wherein the voting machine further includes either an electronic or mechanical cast or return mechanism, or combination thereof.

14. The voting machine according to claim 13, wherein the cast or return mechanism triggers the one or more stepper motor.

15. The voting machine according to claim 14, wherein the one or more stepper motor is configured to move one or more roller forward directing the ballot towards the container when casting the votes, or to move backward rejecting the votes and then returning the ballot to a tray externally connected on the voting machine.

16. The voting machine according to claim 13, wherein the mechanical cast or return mechanism further includes one or more lever adapted to directing the ballot towards the container when casting the votes, or to move backward rejecting the votes and then returning the ballot to a tray on the voting machine.

17. A method of operating a voting machine, the method comprising: inserting a hardware-based security device to a voting machine, the voting machine validates the hardware-based security device; providing a key or a certificate on an interface of the voting machine by a user; removing the hardware-based security device from the voting machine; selecting a task from a list on the interface; accessing and signing a document on the voting machine by the user; counting and recording of the votes by means of the one or more machine readable instructions; and transmitting a vote count by the voting machine to one or more communication network.

18. The method according to claim 17, wherein the one or more hardwarebased security device is at least PKCS#11 standard-compatible devices in the form of either one or more smartcard, one or more hardware token, or combination thereof.

19. The method according to claim 17, wherein the hardware-based security device stores a unique non-extractable private key, a unique public key, a unique digital certificate, or combination thereof.

20. The method according to claim 17, wherein the one or more hardwarebased security device can be validated preferably using a unique identification number or biometrics or combination thereof.

21. The method according to claim 17, wherein the document is preferably one or more ballot.

22. The method according to claim 17, wherein the report is preferably one or more election reports including initialization report, voting receipts, election return, variance report, statistical report, immutable audit log, or combination thereof.

23. The method according to claim 17, wherein the task is either “open voting”, “close voting”, “rezero”, “resume voting”, “transmit results”, “print results”, “diagnostics” that is a module that check whether the hardware peripherals of the voting machine are working / functioning properly, or “transparent machine count” that is a transparency module.

24. The method according to claim 23, wherein the method includes authenticating, generating and initialization report, which is equivalent to an election returns with all candidates having zero votes, if the open voting task is selected, the initialization report indicating a list of candidates including corresponding zero votes or an initialization report.

25. The method according to claim 22 or claim 24, wherein the method includes casting votes on the ballot and then inserting the ballot into an imaging device (e.g., a scanner) of the voting machine by the user and collecting the ballot by the voting machine.

26. The method according to claim 25, wherein the method includes: scanning the ballot and flashing the votes on the interface of the voting machine or viewing an image of the ballot or an electronic copy of the voter receipt, or a combination thereof; scanning the ballot in at least four different orientations; and permitting the ballot to be scanned an unlimited number of times unless a scan limit is set.

27. The method according to claim 26, wherein the method further includes pulling one or more lever of a mechanical cast or return mechanism or an electronic cast or return mechanism to trigger one or more stepper motor to move one or more roller forward directing the ballot towards the container when casting the votes.

28. The method according to claim 27, wherein the method further includes either pushing one or more lever or choosing on the screen to trigger the electronic cast orthe return mechanism to trigger one or more stepper motor to move backward rejecting the votes and then returning the ballot to a tray on the voting machine.

29. The method according to claim 28, wherein the method further includes indicating an error status when the voting machine cannot process a ballot, with specific categories of errors, these include an "error reading the ballot," where the machine is unable to read the ballot; an "invalid ballot," where the ballot fails to meet security feature validation; a "misread ballot," where the ballot passes security checks and is processed, but the interpretation does not match the physical markings; and a "rejected ballot," where the ballot is validated for security features but is not processed due to other issues.

30. The method according to claim 29, wherein the method further includes indicating the detection of an "invalid ballot" if the security marks in the ballot cannot be read by the voting machine.

31. The method according to claim 29, wherein the method further includes indicating the detection of a "misread ballot" if the ballot is read by the voting machine but the voter or the operator selects to return the ballot due to the voting machine incorrectly interpreted the ballot.

32. The method according to claim 29, wherein the method further includes indicating the detection of a "rejected ballot" if the security marks in the ballot can be read by the voting machine but cannot process the ballot further due to other reasons.

33. The method according to claim 29, wherein the method further includes printing a vote receipt, digitally signing the election documents such as but not limited to electronic ballot images, voters’ receipt, election results, diagnostic report, logs, printing an election return, connecting to one or more communication network,transmitting the election results to the one or more communication network, or combination thereof.

34. The method according to claim 29, wherein the method further includes providing transparent machine count (i.e., variance report).

35. The method according to claim 29, wherein the method further includes catering wide range of languages including local languages / dialects.

36. The method according to claim 29, wherein the method further includes providing a hardware design catering needs of person with special needs i.e., with wheelchairs, deaf / blind features, thereby enhancing accessibility to users.

Images