Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes

Scantegrity II is an enhancement for existing paper ballot systems. It allows voters to verify election integrity - from their selections on the ballot all the way to the final tally - by noting codes and checking for them online. Voters mark Scantegrity II ballots just as with conventional optical...

Full description

Bibliographic Details
Main Authors: Chaum, David, Carback, Richard T., Clark, Jeremy, Essex, Aleksander, Popoveniuc, Stefan, Rivest, Ronald L., Ryan, Peter Y. A., Shen, Emily (Emily Huei-Yi), Sherman, Alan T., Vora, Poorvi L.
Other Authors: Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Format: Article
Language:en_US
Published: Institute of Electrical and Electronics Engineers 2010
Subjects:
Online Access:http://hdl.handle.net/1721.1/52547
https://orcid.org/0000-0002-7105-3690
_version_ 1826189770783457280
author Chaum, David
Carback, Richard T.
Clark, Jeremy
Essex, Aleksander
Popoveniuc, Stefan
Rivest, Ronald L.
Ryan, Peter Y. A.
Shen, Emily (Emily Huei-Yi)
Sherman, Alan T.
Vora, Poorvi L.
author2 Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
author_facet Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Chaum, David
Carback, Richard T.
Clark, Jeremy
Essex, Aleksander
Popoveniuc, Stefan
Rivest, Ronald L.
Ryan, Peter Y. A.
Shen, Emily (Emily Huei-Yi)
Sherman, Alan T.
Vora, Poorvi L.
author_sort Chaum, David
collection MIT
description Scantegrity II is an enhancement for existing paper ballot systems. It allows voters to verify election integrity - from their selections on the ballot all the way to the final tally - by noting codes and checking for them online. Voters mark Scantegrity II ballots just as with conventional optical scan, but using a special ballot marking pen. Marking a selection with this pen makes legible an otherwise invisible preprinted confirmation code. Confirmation codes are independent and random for each potential selection on each ballot. To verify that their individual votes are recorded correctly, voters can look up their ballot serial numbers online and verify that their confirmation codes are posted correctly. The confirmation codes do not allow voters to prove how they voted. However, the confirmation codes constitute convincing evidence of error or malfeasance in the event that incorrect codes are posted online. Correctness of the final tally with respect to the published codes is proven by election officials in a manner that can be verified by any interested party. Thus, compromise of either ballot chain of custody or the software systems cannot undetectably affect election integrity. Scantegrity II has been implemented and tested in small elections in which ballots were scanned either at the polling place or centrally. Preparations for its use in a public sector election have commenced.
first_indexed 2024-09-23T08:22:02Z
format Article
id mit-1721.1/52547
institution Massachusetts Institute of Technology
language en_US
last_indexed 2024-09-23T08:22:02Z
publishDate 2010
publisher Institute of Electrical and Electronics Engineers
record_format dspace
spelling mit-1721.1/525472022-09-30T09:10:06Z Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes Chaum, David Carback, Richard T. Clark, Jeremy Essex, Aleksander Popoveniuc, Stefan Rivest, Ronald L. Ryan, Peter Y. A. Shen, Emily (Emily Huei-Yi) Sherman, Alan T. Vora, Poorvi L. Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science Rivest, Ronald L. Rivest, Ronald L. Shen, Emily Huei-Yi privacy end-to-end verifiability electronic voting cryptography Scantegrity II is an enhancement for existing paper ballot systems. It allows voters to verify election integrity - from their selections on the ballot all the way to the final tally - by noting codes and checking for them online. Voters mark Scantegrity II ballots just as with conventional optical scan, but using a special ballot marking pen. Marking a selection with this pen makes legible an otherwise invisible preprinted confirmation code. Confirmation codes are independent and random for each potential selection on each ballot. To verify that their individual votes are recorded correctly, voters can look up their ballot serial numbers online and verify that their confirmation codes are posted correctly. The confirmation codes do not allow voters to prove how they voted. However, the confirmation codes constitute convincing evidence of error or malfeasance in the event that incorrect codes are posted online. Correctness of the final tally with respect to the published codes is proven by election officials in a manner that can be verified by any interested party. Thus, compromise of either ballot chain of custody or the software systems cannot undetectably affect election integrity. Scantegrity II has been implemented and tested in small elections in which ballots were scanned either at the polling place or centrally. Preparations for its use in a public sector election have commenced. 2010-03-12T18:14:35Z 2010-03-12T18:14:35Z 2009-11 2009-10 Article http://purl.org/eprint/type/JournalArticle 1556-6013 INSPEC Accession Number: 10978370 http://hdl.handle.net/1721.1/52547 Chaum, D. et al. “Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes.” Information Forensics and Security, IEEE Transactions on 4.4 (2009): 611-627. © 2009 Institute of Electrical and Electronics Engineers https://orcid.org/0000-0002-7105-3690 en_US http://dx.doi.org/10.1109/TIFS.2009.2034919 IEEE Transactions on Information Forensics and Security Article is made available in accordance with the publisher's policy and may be subject to US copyright law. Please refer to the publisher's site for terms of use. application/pdf Institute of Electrical and Electronics Engineers IEEE
spellingShingle privacy
end-to-end verifiability
electronic voting
cryptography
Chaum, David
Carback, Richard T.
Clark, Jeremy
Essex, Aleksander
Popoveniuc, Stefan
Rivest, Ronald L.
Ryan, Peter Y. A.
Shen, Emily (Emily Huei-Yi)
Sherman, Alan T.
Vora, Poorvi L.
Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes
title Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes
title_full Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes
title_fullStr Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes
title_full_unstemmed Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes
title_short Scantegrity II: End-to-End Verifiability by Voters of Optical Scan Elections Through Confirmation Codes
title_sort scantegrity ii end to end verifiability by voters of optical scan elections through confirmation codes
topic privacy
end-to-end verifiability
electronic voting
cryptography
url http://hdl.handle.net/1721.1/52547
https://orcid.org/0000-0002-7105-3690
work_keys_str_mv AT chaumdavid scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT carbackrichardt scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT clarkjeremy scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT essexaleksander scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT popoveniucstefan scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT rivestronaldl scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT ryanpeterya scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT shenemilyemilyhueiyi scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT shermanalant scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes
AT vorapoorvil scantegrityiiendtoendverifiabilitybyvotersofopticalscanelectionsthroughconfirmationcodes