[E-voting] Minimum requirement to juge voting "technology"

[David GLAUDE]

PourEva is re-thinking about what is OK or not.

I did try to make them sign the VVAT manifest at 
http://www.free-project.org/resolution/

However we try to define what set of requirement or what "test" can be 
used to judge a voting "technology".

Saying that it must be VVAT and respect the secrecy of the vote is one 
thing... but is there more requirement?

"
It must be noted that such an audit trail is only useful if it is used 
regularly for recounts to verify the electronic result.

However an audit trail alone is not sufficient - all aspects of the 
voting process need to be made secure.

Providing a voter-verifiable audit trail should be one of the essential 
requirements for any new voting systems.
"

VVAT is only one of them...

Here is our first draft:
http://wiki.ael.be/index.php/VoteElectroniqueConditions (in French)
1. Secrecy (obvious but with eVoting, it is not easy to "randomize" 
properly, also the voter ID must not be known by the computer)
2. VVAT trace that can be read and counted without computer assistance.
3. minimum % of manual recount and how to deal with discrepancy
4. Citizen can operate without technical knowledge
5. Paper trail of the result and sub-result (important if electronic 
transmission of "unofficial" result is done).
6. If the grand-total computation of the result are done electronicaly, 
then manual recount of significant % should be done.

One point is that we (PourEva) have been focusing on the end-user side 
of e-Voting... but there are a lot of potential problem with:
* Voter registration
* Voter ID checking (electronic ID card)
* Transmission of the partial-result and computation of the total result

In Belgium, our "expert" do monitor the election day and the computer 
program used for the ballot-box and the voting machine. But they have no 
control what so ever on the program making the Total Result. (no source 
code, no audit, no ...) But maybe printing the partial result in the 
news paper is enough to verify.

Any participation to a list of requirement (even in english) is welcome.

David GLAUDE

-- 
Member states shall ensure that data processing is not considered to
be a field of technology in the sense of patent law, and that
innovations in the field of data processing are not considered to be
inventions in the sense of patent law.