Juan E. Gilbert, Ph.D. TSYS Distinguished Associate ...¾Each Prime III machine is attached to 1 or 2 separate video recorders 9Video and audio captured ¾Video of screen captured

Juan E. Gilbert, Ph.D.Human Centered Computing Lab

Auburn UniversityComputer Science and Software Engineering

Juan E. Gilbert, Ph.D.TSYS Distinguished Associate Professor

Fellow, AU Center for Governmental ServicesAuburn University

Computer Science & Software EngineeringHuman Centered Computing Lab

[email protected]://www.juangilbert.com/



Prime III

User Interface



Voter - Multimodal

Multimodal InteractionsVoters can speak and touch interchangeably



Voter

Be accessible to a wide range of votersUse multiple means of interaction (Touch, Voice, or Both)Large screen layout

Voter can change voteVoter can change their vote at anytime before casting the actual ballot

Voter verification is requiredVoters must confirm ballot (touch or voice)



Voter - Visual

Large touch screensLarge fontsImages or No ImagesTouchable Names

Voter touches the screen to make selectionConfirmation is visual

Ballot layoutOne race per screenVoter confirms ballot twice before it is recorded



Voter - Verbal

HeadsetThe system speaks to the voter through the headsetConversation is confidential – no one can hear the machine’s speech, but the voterSystem’s speech is can be pre-recorded or computer generated

Embedded microphone in the headsetCandidates are randomly assigned to numbersVoter speaks the number for a candidateConfirmation is verbal



Voter - Accessibility

SightedBlindDeafIlliteracy

Sighted and Blind

Physical DisabilitiesLimited or no use of handsFor example, military wounded in Iraq, elderly, etc.

All of these voters can independently vote!



Prime III

Usable Security



SecurityNo Network Access



Security

Prime III DVDCreated, approved and sealed by an Election CenterTechnical team that verifies the DVD’s contents are authentic

Bootable DVD ContainsExecutable Prime III CodeEncrypted Ballot filesEncrypted Key



Security

All transactions are recorded (audio/video)Separate video recorder, e.g. VHS, DVDEach Prime III machine is attached to 1 or 2 separate video recorders

Video and audio capturedVideo of screen captured withAudio produced by Prime III (not the voter’s voice)Video recorder is active when activity occurs. Sleeps otherwiseVoter remains anonymous



Security

Video surveillance of the machine, not the voterThe voters’ intent is accurately capturedPrecise audit trail of voting eventsVoter Verifiable Video Audit Trail (VVVAT)

Voter files are encryptedAdvanced Encryption Standard (AES)3DesAnd others …



Security - VVVAT



Prime III machines runningsoftware from DVDs

Video recorders

Connector Switch Voting Booths

Video/USB

Audio

Speech

Voter Speech



SecurityImposter Files

Each machine has encrypted imposter vote filesImposter vote files are constantly updatedSeveral encryption schemes are usedVote files organization/layout will varyEncryption Key contains

Key to encryption algorithmVote file organization/layout



Security

Root Directory

8asdff484a9j8asdff484a9j 43g556hhg6743g556hhg67 6746j98ftj4j6746j98ftj4j



Security

We can print ballots as wellPrinted ballots will contain only the selections for each racePrinted ballots will mirror the final ballot



Prime III

Preliminary Findings



StudiesAlabama Institute for Deaf and Blind Study

Osher Lifelong Learning Institute500+ senior citizensCounting studySetup and break down studyVR study

Campus election

AU Elderhostel (March 13, 2008)



Studies

NSBE Election (March 21 & 22, 2008)

Indiana UniversitySecurity studies with IBM Code Processor

Future StudiesPeople First of AlabamaGeorgia Disability Vote Project Community



What makes Prime III novel?

Multimodal Interface with Automatic Speech RecognitionWe are the only system with speech recognition in the world

Component DesignEasily integrated into existing systems

Video SurveillanceSoftware independence – ”If an undetected change or error in its software cannot cause an undetectable change or error in an election outcome” (Rivest and Wack, 2006)

Encrypted Imposter Files



Juan E. Gilbert, Ph.D.TSYS Distinguished Associate Professor

Fellow, AU Center for Governmental ServicesAuburn University

Computer Science & Software EngineeringHuman Centered Computing Lab

[email protected]://www.juangilbert.com/

Documents

Juan E. Gilbert, Ph.D. TSYS Distinguished Associate ...¾Each Prime III machine is attached to 1 or 2 separate video recorders 9Video and audio captured ¾Video of screen captured