The state of electronic voting machines is rather scary to me.  According to Wikipedia only 27 states require a voter-verified paper audit trail.  That seems rather foolish given the importance of the electoral process.  If individuals are willing to spend millions of dollars, collectively billions of dollars, to try to get people elected it seems reasonable that there may be some individuals willing to defraud the vote to achieve their goal. [To be clear, I am in no way accusing anyone of doing so.]

I’ve believed for some time now that voting could be done conveniently and securely electronically. So I’ve put together my vision of an electronic voting system.

User Interface

From a UI perspective I’ve used two types of electronic voting machines.  The first one was hideous.  It was literally a large board that had every race and candidate on it visible at a single time.  Each candidate had a button and when you pushed the button next to their name a red LED lit up.   It was easy enough to use, but it was really intimidating to look at.  I have no idea how write-in candidates were handled although I do recall there being a button for them.  I’m unable to find a picture of them so I’m hoping they are no longer in use.

The second voting machine I thought was pleasant enough, although I thought the UI buttons should have been bigger to avoid screen calibration issues.  I think each ballot item should be an individual screen, that way the options would be ridiculously large and even those without fine motor skills would be able to vote easily.  Other than that, the UI seemed reasonable enough to me.

Voter-Verified Audit Trail

My major problem is with the lack of a voter-verified audit trail on the machines that I’ve used.  I’m simply taking the computer’s word for it that my vote was counted.  My major modification to electronic voting machines would be the addition of a thermal printer that prints a human readable ballot onto a traditionally sized card-stock ballot.  In addition a QR code would be printed on the bottom of the ballot which contains the vote information in a very computer friendly form as well as a ballot id number.

The choice of a thermal printer is due to their reliability and low-maintenance costs.  The card-stock is a requirement so that the ballots can be easily fed into vote scanners.  The inclusion of a QR code is to allow a computer to easily verify that the optical character recognition of the physical ballot was successful and to allow for the voting machines to record ballot ids of authentic physical ballots.  The ballot ID would never be associated with a person, it would be recorded as being cast.

Once the ballot is printed a final confirmation screen appears that asks the voter to ensure the printed ballot matches their desired selection and gives them the opportunity to raise a flag if it does not.  If they’re happy with their vote they will take the ballot and place it into the central ballot box.

My second modification would be the creation of a digital ballot box.  Upon the completion of the final confirmation screen the vote would be tallied individually on the machine as well as sent to the electronic ballot box for the voting location.

Three Independent Vote Counts

Finally I would institute that the voting machines be collected by one party, the electronic ballot boxes another and the paper ballots by another.

In order for an election to be finalized each party would need to independently deliver their tally of the results to a fourth party that will confirm that first and foremost the outcome of the vote is the same, secondly the electronic voting data should be identical, finally the physical ballot tally should be within a small margin of error of the electronic data.  This margin of error is only to account for scanner errors.

I believe this would make sure that no one party would have the ability to corrupt an election.

The big question is, what happens if the data doesn’t match?  It’s my opinion that the physical ballots should have the final word.  That’s because it’s a physical item that the voter was able to verify matched their intentions.  It’s also how voting has been done in the United States since 1892.  If it’s managed to work over over a hundred years it seems reasonable to me.

Over-all, I think this would be a very secure way to vote.  There are 4 copies (Machine, Electronic Ballot, Paper Human Readable Copy, Paper QR Code] of the voter data that should all match.  Any significant deviation would warrant an investigation to explain the variance.