Secure electronic voting device
View Patent ↗A secure device for electronic voting employs a write-once vote-recording medium. The medium has an initial writing mode in which data can be written but not read and a subsequent reading mode whereby data can be read but writing is permanently disabled. Once switched from the writing mode to the reading mode, it cannot be switched back. A hardware mechanism provides successful write confirmation The medium can be installed like a cartridge into a vote-recording device. The voting device provides encryption/authorization that combines polling parameters with voter information to produce a “fuse string”. For each vote, a fuse string is written to the array. The poll is “closed” by switching the medium to “read” mode, preventing further modification or tampering. To read out the results of the poll, an auditor enters “password” information to decode/decrypt the recorded information.
1. A write-once vote recording medium for electronic voting, comprising: an array of write-once e-fuse elements; writing circuitry; reading circuitry; operating mode control circuitry for switching said recording medium from an initial writing mode to a reading mode such that when in said initial writing mode, the writing circuitry is enabled and the reading circuitry is disabled to prevent reading of the array; and when in said reading mode the reading circuitry is enabled and the writing circuitry is permanently disabled to prevent further writing of the array; said reading and writing modes being mutually exclusive, and when switched from the initial writing mode to the reading mode, the mode cannot be switched back to the initial writing mode.
2. A device according to claim 1 , further comprising write confirmation means for confirming successful writing of the array of e-fuse elements.
3. A device according to claim 2 , wherein said write confirmation means is a comparator.
4. A device according to claim 3 , further comprising authentication means for controlling access to said operating mode control circuitry.
5. A device according to claim 1 , wherein said e-fuse elements are write-once fusible elements which, when written, change permanently from a relatively low-resistance first state to a relatively high-resistance second state.
6. A secure device for electronic voting, comprising:
a write-once vote recording medium;
means for verifying a poll office user's credentials;
means for voter eligibility;
means for entering vote selections,
means for generating a fuse string from said vote selections and voter eligibility information;
means for storing said fuse string into said vote recording medium;
means for enabling said vote recording medium into a writing mode;
means for switching said vote recording medium from a writing mode to a reading mode;
means for verifying auditor credentials;
and means for reading said vote recording medium; wherein:
said write-once vote recording medium has an initial writing mode in which reading of the medium cannot occur, a reading mode in which writing of the medium cannot occur, and means for switching irreversibly from said initial writing mode to said reading mode.
7. A device according to claim 6 , wherein said write-once vote recording medium is a removable fuse bay cartridge device.
8. A device according to claim 7 , wherein: said fuse bay cartridge device further comprises: a write-once array of e-fuse elements; and mode control means for switching said fuse bay cartridge device from an initial writing mode to a reading mode; wherein: when in said writing mode, e-fuse elements can be written, but not read; when in said reading mode, e-fuse elements can be read, but not written; when said fuse bay cartridge device is switched from said writing mode to said reading mode, it cannot be switched back to said writing mode.
9. A device according to claim 6 , wherein said fuse strings are encrypted.
10. A device according to claim 9 , wherein at least part of said encryption is accomplished according to a Device ID stored in said vote recording medium.
11. A system for electronic voting, comprising:
a vote-recording device and a vote auditing/tabulating device;
said vote recording device including:
a user interface;
poll office access control means;
voter access control means; and
means for receiving a write-once fuse bay cartridge; said vote auditing/tabulating device including:
a user interface;
audit access control means; and
means for receiving the write-once fuse bay cartridge;
wherein:
said fuse bay cartridge has an initial writing mode in which the cartridge can be written but cannot be read, and a reading mode in which the cartridge can be read, but the cartridge's writing capability becomes permanently disabled such that once switched into the reading mode the cartridge cannot be switched back into the writing mode.
12. A system according to claim 11 , wherein said write-once fuse bay cartridge is an e-fuse device.
13. A system according to claim 12 , further comprising a unique device ID stored in said e-fuse device.
14. A system according to claim 13 , wherein said e-fuse device further comprises write confirmation means for verifying successful writing of said e-fuse device.
15. A system according to claim 11 , wherein said write-once fuse bay cartridge is an anti-fuse device.