Election Systems & Software iVotronic DRE
Vendor: Election Systems & Software, Inc. (ES&S)
Voter-Verifiable Paper Trail Capability: Yes
Brief Description: ES&S’ iVotronic Touch Screen Voting System is a touch screen voting machine that records votes on internal flash memory. A poll worker uses a device called a Personal Electronic Ballot (PEB; pictured above at left) to turn the machine on and enable voting. Voters choose their ballot language and then make their selections using a touch screen, much in the same way that modern ATMs work. When the polls close, poll workers move summary data from each machine onto the PEB. The PEBs are then transported to election headquarters or their contents transmitted via a computer network.
Checking the Voter-Verifiable Paper Trail: The iVotronic has an optional voter-verifiable paper trail printer, known as the Real-Time Audit Log (RTAL). States such as Ohio, West Virginia, and North Carolina require the RTAL by law, while iVotronics in South Carolina, Texas, and Pennsylvania do not have this option. The RTAL printer is a reel-to-reel cash-register type of printer under transparent plastic, and is located just to the left of the touch screen (pictuted above right). The RTAL records all of the voter’s actions, so if a voter changes her mind about a race on the ballot, the RTAL records both the initial choice and the final choice.
In Detail: When the voter enters the polling place, a poll worker first confirms the voter is registered. Then the poll worker walks with the voter to an iVotronic and inserts the PEB in the PEB slot (visible as the rectangular slot in the upper left corner of the middle image above). The PEB communicates with the iVotronic using infrared signals, much like a TV remote control works, except that the PEB and iVotronic will not communicate unless the PEB is completely inserted. If the election requires a party-specific ballot, the poll worker chooses this for the voter. Activation by the PEB enables the iVotronic to vote once.
The voter then selects a ballot language and makes decisions using the touchscreen. When the voter is done, he or she presses a small “vote” button at the very top of the iVotronic to cast the vote. The vote is then recorded to three internal flash memories that reside inside the machine. A fourth memory is a removable card, called a “compact flash” (CF) card; note that CF is the same technology used in many digital cameras to store photos. During the election, the CF card holds audio files (for those with visual disabilities) and ballot definitions; vote data is written to the CF card when the machine is closed.
A poll worker closes the polls by using the PEB with a password to enter a supervisor menu on each iVotronic. After closing the election for a given machine, summary vote data are transmitted to the PEB via infrared signals. After the PEB is used to close all the iVotronic machines, it contains all the summary data for the precinct. Depending on local regulations and procedures, poll workers can use a “printer kit” at this point to print the result summary from the PEB on to paper. The PEB for that precinct, any printouts and the CF cards are then either physically transported to a central tabulation facility or its contents sent over a computer network using a laptop running ES&S’ Unity software.
Things to Look Out For
• The PEB slot on the face of the iVotronic is particularly sensitive. The EVEREST study showed that a voter with a magnet and a properly programmed PDA (with an infrared port) could gain privileged access to the sensitive functions of the machine. If you see anyone spending a long time in an iVotronic voting booth and engaging in activity that appears to be centered around the upper-left part of the iVotronic, they might be messing with the PEB slot. Of course, they might also just be voting, so don’t cry wolf.
• The PEB device is particularly sensitive. An attacker who gains access to a PEB for a short or extended period of time can change votes on the PEB or attack the central Election Management System when the PEB is returned to election headquarters. PEB devices should only be handled by pollworkers and pollworkers should keep a vigilant watch over their use of the PEBs throughout the day (that is, they should not be leaving them around casually and the area in which the PEBs are kept should be secure and monitored at all times). If you see a voter or non-pollworker with a PEB, notify election protection immediatey.
References
Ohio EVEREST Review
Executive Summary
Technical Manager Report
Technical Details
Final Academic Report
Systeest Technical Report
Security and Reliability of Webb County’s ES&S Voting System and the March ‘06 Primary Election, Dan Wallach (2006)
Software Review and Security Analysis of the ES&S iVotronic 8.0.1.2 Voting Machine Firmware, Florida (SAIT Lab, 2007)
Leave a Reply
Follow Verified Voting
