Juan E. Gilbert, Ph.D. TSYS Distinguished Associate ...¾Each Prime III machine is attached to 1 or...

Preview:

Citation preview

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Juan E. Gilbert, Ph.D.TSYS Distinguished Associate Professor

Fellow, AU Center for Governmental ServicesAuburn University

Computer Science & Software EngineeringHuman Centered Computing Lab

gilbert@auburn.eduhttp://www.juangilbert.com/

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Prime III

User Interface

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Voter - Multimodal

Multimodal InteractionsVoters can speak and touch interchangeably

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Voter

Be accessible to a wide range of votersUse multiple means of interaction (Touch, Voice, or Both)Large screen layout

Voter can change voteVoter can change their vote at anytime before casting the actual ballot

Voter verification is requiredVoters must confirm ballot (touch or voice)

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Voter - Visual

Large touch screensLarge fontsImages or No ImagesTouchable Names

Voter touches the screen to make selectionConfirmation is visual

Ballot layoutOne race per screenVoter confirms ballot twice before it is recorded

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Voter - Verbal

HeadsetThe system speaks to the voter through the headsetConversation is confidential – no one can hear the machine’s speech, but the voterSystem’s speech is can be pre-recorded or computer generated

Embedded microphone in the headsetCandidates are randomly assigned to numbersVoter speaks the number for a candidateConfirmation is verbal

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Voter - Accessibility

SightedBlindDeafIlliteracy

Sighted and Blind

Physical DisabilitiesLimited or no use of handsFor example, military wounded in Iraq, elderly, etc.

All of these voters can independently vote!

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Prime III

Usable Security

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

SecurityNo Network Access

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Security

Prime III DVDCreated, approved and sealed by an Election CenterTechnical team that verifies the DVD’s contents are authentic

Bootable DVD ContainsExecutable Prime III CodeEncrypted Ballot filesEncrypted Key

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Security

All transactions are recorded (audio/video)Separate video recorder, e.g. VHS, DVDEach Prime III machine is attached to 1 or 2 separate video recorders

Video and audio capturedVideo of screen captured withAudio produced by Prime III (not the voter’s voice)Video recorder is active when activity occurs. Sleeps otherwiseVoter remains anonymous

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Security

Video surveillance of the machine, not the voterThe voters’ intent is accurately capturedPrecise audit trail of voting eventsVoter Verifiable Video Audit Trail (VVVAT)

Voter files are encryptedAdvanced Encryption Standard (AES)3DesAnd others …

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Security - VVVAT

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Prime III machines runningsoftware from DVDs

Video recorders

Connector Switch Voting Booths

Video/USB

Audio

Speech

Voter Speech

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

SecurityImposter Files

Each machine has encrypted imposter vote filesImposter vote files are constantly updatedSeveral encryption schemes are usedVote files organization/layout will varyEncryption Key contains

Key to encryption algorithmVote file organization/layout

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Security

Root Directory

8asdff484a9j8asdff484a9j 43g556hhg6743g556hhg67 6746j98ftj4j6746j98ftj4j

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Security

We can print ballots as wellPrinted ballots will contain only the selections for each racePrinted ballots will mirror the final ballot

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Prime III

Preliminary Findings

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

StudiesAlabama Institute for Deaf and Blind Study

Osher Lifelong Learning Institute500+ senior citizensCounting studySetup and break down studyVR study

Campus election

AU Elderhostel (March 13, 2008)

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Studies

NSBE Election (March 21 & 22, 2008)

Indiana UniversitySecurity studies with IBM Code Processor

Future StudiesPeople First of AlabamaGeorgia Disability Vote Project Community

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

What makes Prime III novel?

Multimodal Interface with Automatic Speech RecognitionWe are the only system with speech recognition in the world

Component DesignEasily integrated into existing systems

Video SurveillanceSoftware independence – ”If an undetected change or error in its software cannot cause an undetectable change or error in an election outcome” (Rivest and Wack, 2006)

Encrypted Imposter Files

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Juan E. Gilbert, Ph.D.TSYS Distinguished Associate Professor

Fellow, AU Center for Governmental ServicesAuburn University

Computer Science & Software EngineeringHuman Centered Computing Lab

gilbert@auburn.eduhttp://www.juangilbert.com/

Recommended