EP2120217B1 - Elektronische Wahlvorrichtung und entsprechendes Verfahren und Computerprogrammprodukt. - Google Patents

Elektronische Wahlvorrichtung und entsprechendes Verfahren und Computerprogrammprodukt. Download PDF

Info

Publication number
EP2120217B1
EP2120217B1 EP09160077.5A EP09160077A EP2120217B1 EP 2120217 B1 EP2120217 B1 EP 2120217B1 EP 09160077 A EP09160077 A EP 09160077A EP 2120217 B1 EP2120217 B1 EP 2120217B1
Authority
EP
European Patent Office
Prior art keywords
voting
ballot
vote
information
reading
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Not-in-force
Application number
EP09160077.5A
Other languages
English (en)
French (fr)
Other versions
EP2120217A3 (de
EP2120217A2 (de
Inventor
Bernard Charles
Jean-Marc Voelckel
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Worldline MS France
Original Assignee
Ingenico Group SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ingenico Group SA filed Critical Ingenico Group SA
Publication of EP2120217A2 publication Critical patent/EP2120217A2/de
Publication of EP2120217A3 publication Critical patent/EP2120217A3/de
Application granted granted Critical
Publication of EP2120217B1 publication Critical patent/EP2120217B1/de
Not-in-force legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C13/00—Voting apparatus
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C13/00—Voting apparatus
    • G07C13/02—Ballot boxes

Definitions

  • the field of the invention is that of electronic voting. More specifically, the invention relates to techniques implementing electronic ballots, for example in the form of smart cards, able to be read by suitable electronic readers.
  • voting machines are however little used, and with more or less success.
  • Existing voting machines generally include a conventional smart card reader, in which the voter inserts his card (electronic voting ballot) that he has previously configured, or programmed, according to his voting intentions.
  • the reader reads the voting data on the card, then returns the card read, to proceed to the next vote.
  • it is expected that the card read is then re-initialized, to be used by another user. This approach limits the number of cards needed to conduct an election.
  • the patent document US5189288A proposes the use of an individual card on which voting data are stored in machine-readable form (eg a barcode).
  • voting machines in use are subjected to a severe control before approval, many are concerned about the risk of failure of such systems, or even fraud, and also criticize the opacity of the possible controls.
  • the electronic voting machines in use do not allow an elector to follow the voting operations and thus ensure the proper conduct of the election. In particular, counting or recounting votes is beyond the control of voters.
  • the invention particularly aims to overcome this disadvantage of the prior art by proposing a technique offering at least some of the advantages of voting machines, particularly in terms of speed and reliability, while respecting certain common practices.
  • an objective of the invention is to provide a technique to reassure voters, and facilitate voting and control operations for them.
  • Yet another object of the invention is to secure and increase the reliability of the voting and control operations, where appropriate.
  • Yet another object of the invention is also to speed up the counting of votes and, for at least some applications, to provide various information, including statistics, on the vote and its progress. For example, if a timestamp is associated with the voting information, it is possible to track how the vote has changed over time.
  • a particular objective of the invention is to propose a method for saving paper, with a view to sustainable development.
  • the invention proposes a new solution that does not present the limitations of the prior art in the form of a secure electronic voting device according to claim 1.
  • the device is designed to protect the ballot from any possible access during its processing and / or storage. This is a protection against any manipulation of the ballot (the device comprises for example a hermetic cover).
  • the device comprises for example a hermetic cover.
  • said device is also provided to protect the ballots from any remote access.
  • it may be made of a material forming an electromagnetic barrier and / or emit interference signals.
  • Said means of checking the validity of a vote may also include means for verifying the voting rights of said elector.
  • they include a means of reading a voter's card, a means of verifying the voter's affiliation to a set of expected voters and / or a means of verifying the voter's previous participation in the same vote.
  • the use of the device may for example be restricted to the voters registered on this device.
  • the device can store locally, in a secure memory, at least one identification information relating to each voter whose it counts the vote to ensure, when introducing a new ballot, that the associate voter has not already voted.
  • the device can communicate at least one identification information relating to each voter who voted to a remote server and / or query this server to determine the right to vote of an elector.
  • said control means can also check the validity of the voting information or information present on said ballot, with respect to at least one predefined validity criterion.
  • This may be, for example, the success and / or failure of the reading of said ballot by said reading means and / or the comparison of at least one initialization data or timestamp stored on said bulletin with at least one characteristic of the election parameterized at said device.
  • said control means can restrict, for example, the validity ballots according to criteria such as the municipality of the voter, the polling station, the polling date, a reference and / or an approval of said means of registration.
  • Said control means may also comprise means for controlling the completeness of the voting information.
  • control means may also comprise means for validating the vote as a function of at least one validation action performed by said elector and / or by an assessor.
  • said validation means are intended for voters, it may for example involve pressing a key, an action on a touch screen or the pronunciation of a keyword. If said validation means are used by an assessor, they may require the provision of a password, a fingerprint or other biometric information.
  • said means implemented may differ according to the validity criteria not respected.
  • certain ballot papers may be returned by said device, for example if the voter is not one of the voters expected by the device, and others kept in said separate area of said ballot box, for example if the ballot is not readable.
  • control means deliver at least one visible and / or audible signal indicative of the validity or invalidity of the vote.
  • said means of control also include means for marking the validated ballots before they are transferred to said secure ballot box.
  • said processing means may be various.
  • said processing means comprise means for storing and / or accounting for the one or more voting information.
  • Said processing means may further comprise means for determining statistics, taking into account, for example, timestamp data associated with said voting information. It may be, for example, means of calculation and presentation of voting statistics as a function of time in order to obtain in particular the evolution of the results of the vote during the poll.
  • Said processing means may also include means for transferring voting information and / or statistics to at least one remote server.
  • said means of transfer to a remote server may be implemented during and / or after the voting process, for example to have real-time voting results and / or reconstruct an evolution of voting results over time and / or perform a remote verification of voting results.
  • the counting of the votes can for example be performed both by the device and at least one remote server for a consolidation of the results.
  • said reading means, said transfer means and said ballot box are at least partially transparent, so that an elector can see his ballot permanently until he either in said urn.
  • the device has the advantage of allowing a visual control by those present. For example, they can ensure that the ballot entered in the device is the ballot paper read and transferred into the ballot box.
  • the opening of said urn can be limited to authorized persons.
  • said opening can be validated following the provision of a password, an imprint or through a biometric identification method.
  • said opening may also be refused before a time set at the ballot box, such as the end time of the vote, for example.
  • said urn is made to guarantee the unalterability of said bulletins, in particular because of physical or remote manipulation, at least until the exhaustion of the time limits for appeal against the results.
  • it will thus take into account criteria such as the use of impact-resistant material, electromagnetic insulation or sealing treatments for example.
  • said urn carries shielding means for protecting the ballots against an attempt to erase, to reading and / or writing of data by emitting electromagnetic waves.
  • it may be made of a material forming an electromagnetic barrier and / or emit interference signals.
  • the invention also relates to a secure electronic voting method according to claim 12.
  • the invention relates to a computer program product downloadable from a communication network and / or recorded on a computer readable medium and / or executable by a processor, characterized in that it comprises program code instructions for the implementation of the electronic voting method described above.
  • the invention is based on the implementation of a new voting device, combining a reader of electronic ballots, for example under the form of smart cards, and a secure ballot box, collecting the ballots after their reading and their electronic processing (accounting, storage, transfer and / or determination of statistics for example).
  • the ballot is systematically kept and sent to the ballot box, if the result of the reading is valid. However, if this result is not valid, the card can be returned, or stored in a dedicated area, separate from the ballot box.
  • the invention therefore makes it possible to propose a way of voting close to traditional ways of voting, for an elector.
  • each elector is given a ballot (for example when he arrives in the polling station).
  • This bulletin is undifferentiated, or blank (as regards the indications relating to the choice of vote, because it may include control information, for example identifying the vote concerned, the polling station, ).
  • the voter slides classically his ballot in an urn, the player playing the role of the slot of the ballot box, after having set (that is to say having registered his vote).
  • the electoral register used 11 is an electronic electoral register.
  • it can be used a paper or electronic electoral register, or any other suitable means (for example electronic voter cards).
  • the electronic voting ballot 12 delivered to an elector consists of a microprocessor and / or memory card, able to record the vote (or the votes, if any).
  • the blank vote may, if desired, be provided.
  • the approach of the invention may make it possible to prevent possible null votes (if the ballot is not legible, it may not be counted, and / or not be sent to the ballot box).
  • This particular embodiment of the invention provides for ballots 12 reusable between several elections (but not in the same election, since the ballots are kept in the ballot box after the vote), to hold account of the economic impacts of the large-scale elections for which it is designed.
  • ballots are instead designed to not be reusable.
  • the selection or the end of the entry of a voting information consists of a non-reversible operation on the bulletin 12, such as the actuation of a fuse.
  • a device 13 allows the selection of a voting information and the registration of said information on a bulletin 12.
  • This device is autonomous, that is to say it is not connected to any computer system, to limit the risk of fraud. It can be installed, classically, in a voting booth.
  • the device 13 is provided with a screen which enables it to display the possible voting options. Its interface may also include a voice synthesis device and headsets for use by visually impaired. In this embodiment, the device 13 also comprises a means for validating a voting information. This is a validation key to activate.
  • the device may be equipped for example with a keyboard or a touch screen to allow the entry of at least one voting information.
  • the invention also relies on a voting device 14 comprising means 16 for reading and processing, in particular for counting, ballot papers 12 and a ballot box 15. It is designed so that any ballot paper introduced into the reading means 16 can not be removed, and is automatically (that is to say without human contact, or particular operation) directed to the urn 15, in which it is kept in a secure manner (the urn being locked to prevent the addition or removal of ballots).
  • the device 14 may be provided with a human-machine interface enabling it, on the one hand, to send messages to the users. These messages can be issued in various forms (voice synthesis, on-screen display, printing for example) and multiple to accommodate people disabled people who may be present.
  • the device described here also provides means for validating the vote, following the reading of the ballot by at least one assessor and / or the voter. It may be, for example, a biometric sensor, another card reader, a keyboard, etc.
  • Some embodiments of the device 14 include additional means allowing it, after the end of the poll, to read and return the voting information of said ballots in order to facilitate the manual recount of votes.
  • the implementation of these additional means may include means for verifying the authorization of the operator and various rendering means (voice synthesis, on-screen display, printing for example, etc.) in particular in order to render transparent and public the recount of the votes in the event of litigation and this even to a public including persons with disabilities,
  • Periodic or systematic transfers of information read on the ballots to one or more secure servers can be implemented.
  • the figure 6 illustrates a particular embodiment of the invention.
  • the device 14 comprises means 16 for reading an electronic ballot 12. These reading means are provided with an insertion slot 640, thus allowing the insertion of said ballot by a elector.
  • the ballot 12 once inserted in said reading means 16 is inaccessible to any user. Specific means (valves, anti-intrusion elements, ...) can be provided for this purpose. It is also possible that the assessor has an order to return a ballot, as long as he considers that the vote has not been made (for example, until he has indicated "voted").
  • the device may also comprise control means composed, in the particular embodiment of the invention described here, on the one hand of means 620 for validation of the vote by the elector and on the other hand means 630 for validation of the vote by an assessor.
  • control means composed, in the particular embodiment of the invention described here, on the one hand of means 620 for validation of the vote by the elector and on the other hand means 630 for validation of the vote by an assessor.
  • various validation means can be implemented.
  • biometric sensors the elector places a finger on the reader 620 and the assessor on the reader 630.
  • the device can be equipped with means for sending itself the message "voted", and / or indicate by a light signal that the vote has been taken into account.
  • the biometric means may be replaced by, and / or combined with, any suitable means for identifying and / or authenticating persons, such as electronic ID or voter ID readers, keypads for entering a PIN, means of recognition of writing, ...
  • the device may comprise, or be associated with, means for recording an electronic signature of the voter, in an elector's register. Validation of the vote may impose this parallel operation.
  • the device comprises means for transferring the electronic voting ballot 12 to the ballot box 15.
  • it may be a drive mechanism adapted to slide the card 12 into the urn 15.
  • the ballot box (classically), but also the reading means and the transfer means are at least partially transparent, so that the ballot remains permanently visible, since its insertion in the reader until its transfer in the ballot box.
  • the elector has a ballot, which is unique to the elector for the election, which he handles as a classic ballot, and which will be kept in an urn.
  • the analysis of the content of this ballot box may allow a subsequent count of verification, and / or a review of the votes, if any.
  • the ballot is secretly read and counted, which makes it possible to provide, as soon as the voting period ends, the result of the ballot. election.
  • the ballot is, when given to the elector, undifferentiated, ie it does not include any information relating to the elector (it is not an identity card or a voting card, but a ballot, on which the voter will register his vote, before slipping in the ballot box). It is more individual, that is to say intended to contain the information of a single voter during a poll.
  • the method may also comprise, in addition to the steps mentioned above, a step of communicating polling results associated with a voting device to a remote server in order to allow centralization of the polling results.
  • the method seeks to preserve the traditional public or secret nature of the voting steps so as not to confuse users: for example, the step of making an elector of said ballot available and the voting step through said device can be performed publicly while the step of registration by said voter of at least one voting information will remain secret.
  • the method provides that, although immediate, the counting of votes is not communicated in any way before the end of the vote.
  • One of the advantages of the invention is thus to allow an immediate counting of the votes at the end of the poll while offering a possibility of manual recount of the votes in case of disputes through a new reading along the water of said ballot papers e.
  • said step of registration by said voter of one or more voting information may further include a substep of initialization of said electronic bulletin.
  • said initialization sub-step may for example consist first of all in a deletion (and / or control) of potentially existing data on the bulletin. This offers the advantage of securing the vote against fraudulently pre-filled ballots and allows reuse of ballots for several separate elections.
  • said step of recording the one or more voting information may also include a substep of storing a vote timestamp datum, such as the date and / or time of the vote. , in said ballot.
  • control means made available to said elector by said registration means also allow him to verify and validate irreversibly his vote.
  • the reader can modify by itself a characteristic (physical, electrical, ...) of the bulletin by way of validation.
  • said ballot is not reusable, it may be provided that said voter validates his choice by detaching a specific part of said ballot.
  • the figure 2 illustrates an example of dynamic operation of the invention.
  • a first step 21 consists in providing an elector with an undifferentiated ballot.
  • this step is carried out publicly, that is to say in the presence of one or more people.
  • This step firstly comprises a sub-step 211 for reading the voter identification medium.
  • this support may consist of a paper electoral card or in electronic form.
  • the electoral map can be a card card with a bar code that allows reading through an electronic reader. Coupled with an electronic electoral register (the electoral register 11 in figure 1 This embodiment has the advantage of allowing a voter to be found quickly in the electoral register. These operations can also be performed electronically, especially in a manner coupled with the voting device.
  • the method then provides a sub-step 212 for verifying the identity of the voter.
  • the information read on the electoral map is brought closer to the electoral register in order to verify the inscription of the elector on the electoral register of the polling station and to obtain the identity expected of the elector.
  • a control of the identity of the owner of the card is performed. According to the embodiments, this control can be done by providing a piece of identity or by a comparison with an anthropometric or biometric fingerprint recorded for example at the level of the electoral register.
  • an electronic ballot to the elector.
  • it is an electronic card comprising a microprocessor and / or a memory.
  • the method then implements a second step 22 of recording a voting information on said bulletin.
  • This step which is usually done in the voting booth, is divided into several sub-steps.
  • the first substep consists of an initialization 221 of the ballot. Since the ballots are reusable for another election and in order to limit the risk of fraud, it is planned to erase any data potentially present on the ballot paper, or at least to allow checking the contents of the newsletter.
  • information 302 characterizing the election for example the nature of the election, the municipality and the polling station of the elector, a reference of the device 13, are added on the bulletin 12.
  • This information may also include a timestamp of the vote 304 (date and / or time of the vote). These data may be used for statistical purposes or allow for future checks. According to another embodiment, they may have been previously registered on all newsletters.
  • the method then provides a substep 222 for entering or selecting voting information by the voter from the voting options presented to him.
  • the choice of a voting option by the elector is followed by a substep 223 for storing the voting information input or selected at the level of the voter. electronic ballot.
  • the figure 3 also illustrates the storage 306 of the voting information validated by the voter at the level of the ballot memory 12.
  • a last sub-step 225 of validation of the vote closes the registration phase on the ballot and causes the return of said ballot to the voter.
  • this validation is done by pressing a validation key of the device 13.
  • it may be for example a voice recognition of a keyword through the device.
  • Different modes of validation can be implemented outside the device 13, for example by means of an action of said voter on said bulletin.
  • the next step is a public identification step of the voter.
  • This step is similar to step 21 (but may be based on different means) and comprises a sub-step 231 of reading the voter identification medium, similar to the step 211 described above and allowing to search for the elector on the electoral register, and in a sub-step 232 verification of his identity.
  • this results in validating the elector's right to vote, that is to say, to validate the passage to the next step of reading and counting the vote.
  • step 23 may take place before or after the introduction of the ballot in the voting device 14.
  • the device 14 may be provided with the necessary control means and in particular, if the voting right is verified from manual way, a means of validation 630 by an assessor, which can be either a means identifying the assessor, or a simple command (button, lever, ).
  • step 24 of reading and counting takes place publicly.
  • the voter inserts his ballot 12 into the device 14.
  • the support on a biometric sensor 630 for validation by the assessor causes the reading of the vote and its immediate recognition.
  • a message indicates to the elector the effective taking into account of his vote.
  • the reading of the bulletin may comprise the reading of at least one information present on said bulletin other than the voting information.
  • This information may in particular make it possible to carry out an additional check of the validity of the ballots. In case of misreading of the ballot or doubt about its validity or multiple insertion, the vote is not counted.
  • the step 25 of transfer of the ballot in the ballot box follows the taking into account of the vote.
  • the last step is a 26 signature step of the elector.
  • the manner in which the voter's signature is affixed depends on the embodiments. In a particular embodiment, close to the traditional votes, the voter can for example sign an electronic electoral register with a special pencil and a touch screen. In another embodiment, it can also affix its fingerprint on a touch screen. Another possibility of realization would be the use of another biometric means.
  • the means for voter registration can be implemented by the voting device 14, for example by means of the biometric sensor 620 illustrated in FIG. figure 6 . This operation can then be carried out simultaneously with the vote (likewise, if necessary, that the step of registration).
  • the method has the advantage of allowing a very fast, even instantaneous, counting of the votes at the end of the poll. If transfers were made to a server, it also has, almost instantaneously, the result of the vote of all the polling stations equipped.
  • the figure 4 describes an embodiment of the vote counting according to the invention.
  • the communication 400 of the results of the electronic vote can be carried out in different ways by the vote counting device. It can be for example at least one of the following means: an impression, a voice synthesis, a display on a screen, communication to a remote site, making available on a website ...
  • the ballots remain in the ballot box, for example pending the end of the appeal period 402.
  • the method according to the invention provides for manual counting of the ballots 408 by reading the stored voting information.
  • the figure 5 illustrates another method, for the taking into account of the vote, based on the voting device of the invention.
  • the method provides a first step 500 of insertion of the ballot in the voting device, followed by a step 510 of verification of the right to vote of the voter.
  • it is a verification of the elector's identity (as in step 23, figure 2 ), followed by a verification that the vote of that elector has not already been counted for that ballot.
  • this step is followed by a step 520 of reading the electronic voting ballot and in particular the voting information it contains.
  • a ballot is considered valid if it is legible and contains the expected polling date.
  • step 510 When it is detected (step 510) that a ballot does not correspond to a voter having a right to vote or when, in step 530, a ballot is considered invalid, an alert 560 is provided in order to report the refusal of the ballot.
  • it may be a local indication (visual or audible for example) and / or an indication to a remote server, for example to warn an authorized person of any anomaly during the course of unfolding of the poll.
  • This step is followed by an elimination step 570 of the ballot.
  • it may be a destruction, deletion or marking of the ballot, a retention in an annex urn or a rejection.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Time Recorders, Dirve Recorders, Access Control (AREA)

Claims (13)

  1. Gesicherte elektronische Wahlvorrichtung (14), umfassend Mittel zum Ablesen (16) von elektronischen Wahlzetteln (12), die mindestens eine Wahlinformation tragen, die vorher von einem Wähler mit Hilfe von angemessenen Schreibmitteln (13), die nicht in der elektronischen Wahlvorrichtung enthalten sind, eingeschrieben wird,
    dadurch gekennzeichnet, dass sie umfasst:
    - Mittel zum Einsetzen (640) eines Wahlzettels in die Lesemittel, die mit Mitteln zusammenwirken, die das Herausziehen des Wahlzettels verhindern;
    - Mittel zur Kontrolle (620, 630) der Gültigkeit einer Wahl, die einen Befehl zur Weiterleitung des Wahlzettels zu einer Urne (15) liefern, nachdem die Wahlinformation(en), die er enthält, berücksichtigt wurden, wenn der Wahlzettel und/oder die Bedingungen der Wahl für gültig befunden werden, wobei die Kontrollmittel mindestens eine Information zur Identifikation und/oder Authentifikation eines Wählers und/oder mindestens eines für die Wahl verantwortlichen Beisitzers berücksichtigen;
    - Mittel zur Verarbeitung (16) der Wahlinformation(en), die von den Lesemitteln abgelesen wurde(n);
    - Mittel zur automatischen Weiterleitung des Wahlzettels zu der gesicherten Urne nach Empfang eines Eingangsbestätigungssignals und ohne menschliches Eingreifen,
    um eine doppelte Verbuchung der Wahlinformationen einerseits mit Hilfe der von den Lesemitteln abgelesenen Daten und andererseits zeitversetzt durch Wiederverarbeitung der in der Urne aufbewahrten Wahlzettel zu ermöglichen.
  2. Wahlvorrichtung nach Anspruch 1, dadurch gekennzeichnet, dass die Kontrollmittel mindestens eines der Elemente umfassen, die der Gruppe angehören, die umfasst:
    - Mittel zum Erhalt mindestens einer biometrischen Information;
    - Mittel zum Ablesen mindestens eines Trägers von Identifikations- und/oder Authentifikationsdaten;
    - eine Tastatur zur Eingabe eines Identifikations- und/oder Authentifikationscodes;
    - Mittel zur vokalen Speicherung und/oder Erkennung mindestens eines Schlüsselwortes;
    - Mittel zur Speicherung und/oder Erkennung einer handschriftlichen Signatur.
  3. Vorrichtung nach einem der Ansprüche 1 bis 2, dadurch gekennzeichnet, dass die Kontrollmittel die Gültigkeit der Wahlinformation(en), die auf dem Wahlzettel vorhanden sind, im Vergleich mit mindestens einem vordefinierten Gültigkeitskriterium überprüfen.
  4. Vorrichtung nach einem der Ansprüche 1 bis 3, dadurch gekennzeichnet, dass sie mindestens eines der Mittel umfasst, die der Gruppe angehören, die umfasst:
    - Mittel zum Löschen der Wahlinformationen eines Wahlzettels;
    - Mittel zur Rückgabe des Wahlzettels;
    - Mittel zur gesicherten Speicherung eines Wahlzettels in einer von der gesicherten Urne getrennten Zone;
    - Mittel zur Verbuchung eines Scheiterns oder eines nicht berücksichtigten Wahlzettels;
    - Mittel zur Kennzeichnung eines Wahlzettels;
    - Mittel zur Zerstörung eines Wahlzettels,
    die eingesetzt werden, wenn der Wahlzettel und/oder die Wahlbedingungen von den Kontrollmitteln als nicht gültig eingestuft werden.
  5. Vorrichtung nach einem der Ansprüche 1 bis 4, dadurch gekennzeichnet, dass die Kontrollmittel mindestens ein sichtbares und/oder hörbares Signal liefern, das die Gültigkeit oder die Ungültigkeit der Wahl anzeigt.
  6. Vorrichtung nach einem der Ansprüche 1 bis 5, dadurch gekennzeichnet, dass die Verarbeitungsmittel Mittel zur Speicherung und/oder Verbuchung der Wahlinformation(en) umfassen.
  7. Vorrichtung nach einem der Ansprüche 1 bis 6, dadurch gekennzeichnet, dass die Verarbeitungsmittel Mittel zur Bestimmung von Statistiken umfassen, die Zeitstempeldaten berücksichtigen, die den Wahlinformationen zugeordnet sind.
  8. Vorrichtung nach einem der Ansprüche 1 bis 7, dadurch gekennzeichnet, dass die Verarbeitungsmittel Mittel zur Weiterleitung der Wahlinformationen und/oder der Statistiken zu mindestens einem entfernten Server umfassen.
  9. Vorrichtung nach einem der Ansprüche 1 bis 8, dadurch gekennzeichnet, dass die Lesemittel, die Weiterleitungsmittel und die Urne zumindest teilweise transparent sind, so dass ein Wähler seinen Wahlzettel permanent sehen kann, bis er in der Urne ist.
  10. Vorrichtung nach einem der Ansprüche 1 bis 9, dadurch gekennzeichnet, dass die Urne mit Verriegelungsmittel ausgestattet ist, deren Öffnen nur in Abhängigkeit von mindestens einem der vorbestimmten Kriterien möglich ist, die der Gruppe angehören, die umfasst:
    - ein Datum und eine Uhrzeit des Endes der Wahlen;
    - ein Datum und eine Uhrzeit des Endes einer Beschwerdefrist;
    - eine Information zur Authentifikation und/oder Identifikation mindestens einer autorisierten Person.
  11. Vorrichtung nach einem der Ansprüche 1 bis 10, dadurch gekennzeichnet, dass die Urne Abschirmungsmittel zum Schutz der Wahlzettel vor einem Versuch des Löschens, Ablesens und/oder Schreibens von Daten durch Entsendung von elektromagnetischen Wellen trägt.
  12. Gesichertes elektronisches Wahlverfahren mit Hilfe einer Vorrichtung nach einem der Ansprüche 1 bis 11, dadurch gekennzeichnet, dass es die folgenden Schritte umfasst:
    - Einsetzen (500) eines Wahlzettels in die Lesemittel, die mit Mitteln zusammenwirken, die das Herausziehen des Wahlzettels verhindern;
    - Kontrolle (510) der Gültigkeit einer Wahl, die einen Befehl zur Weiterleitung des Wahlzettels zu einer Urne liefert, nachdem die Wahlinformation(en), die er enthält, berücksichtigt wurden, wenn der Wahlzettel und/oder die Bedingungen der Wahl für gültig befunden werden, wobei die Kontrolle mindestens eine Information zur Identifikation und/oder Authentifikation eines Wählers und/oder mindestens eines für die Wahl verantwortlichen Beisitzers berücksichtigt;
    - Verarbeitung (540) der Wahlinformation(en), die von den Lesemitteln abgelesen wurde(n);
    - automatische Weiterleitung des Wahlzettels (25) zu der gesicherten Urne nach Empfang eines Eingangsbestätigungssignals und ohne menschliches Eingreifen,
    um eine doppelte Verbuchung der Wahlinformationen einerseits mit Hilfe der von den Lesemitteln abgelesenen Daten und andererseits zeitversetzt durch Wiederverarbeitung der in der Urne aufbewahrten Wahlzettel zu ermöglichen.
  13. Computerprogrammprodukt, das von einem Kommunikationsnetz herunterladbar ist und/oder auf einem von einem Computer lesbaren Träger gespeichert ist und/oder von einem Prozessor ausführbar ist, dadurch gekennzeichnet, dass es Programmcodeanweisungen für den Einsatz des elektronischen Wahlverfahrens nach Anspruch 12 umfasst.
EP09160077.5A 2008-05-16 2009-05-12 Elektronische Wahlvorrichtung und entsprechendes Verfahren und Computerprogrammprodukt. Not-in-force EP2120217B1 (de)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
FR0853209A FR2931282B1 (fr) 2008-05-16 2008-05-16 Procede de vote electronique, produit programme d'ordinateur dispositif d'inscription de vote et dispositif de lecture correspondants.

Publications (3)

Publication Number Publication Date
EP2120217A2 EP2120217A2 (de) 2009-11-18
EP2120217A3 EP2120217A3 (de) 2010-12-01
EP2120217B1 true EP2120217B1 (de) 2019-01-23

Family

ID=40185213

Family Applications (1)

Application Number Title Priority Date Filing Date
EP09160077.5A Not-in-force EP2120217B1 (de) 2008-05-16 2009-05-12 Elektronische Wahlvorrichtung und entsprechendes Verfahren und Computerprogrammprodukt.

Country Status (4)

Country Link
US (1) US20090283597A1 (de)
EP (1) EP2120217B1 (de)
BR (1) BRPI0901462A2 (de)
FR (1) FR2931282B1 (de)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8038053B2 (en) * 2008-03-06 2011-10-18 Precise Voting Llc Voting apparatus with secure ballot box assembly
US8413880B2 (en) * 2008-03-06 2013-04-09 Precise Voting Llc Voting apparatus with secure ballot box assembly
WO2013134016A1 (en) * 2012-03-05 2013-09-12 Yottavote, Inc. Near field communications based referendum system
FR3067843B1 (fr) * 2017-06-14 2019-11-15 Ladinvest Machine a voter
US11288909B2 (en) * 2019-07-01 2022-03-29 A. Rifkin Co. Secure collection device for paper ballots
US20240087357A1 (en) * 2022-09-13 2024-03-14 Tete Weston Voter Authentication And Voting Device

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0419335A1 (de) * 1989-09-20 1991-03-27 Octo Abstimmverfahren und Mittel zu seiner Durchführung
US5189288A (en) * 1991-01-14 1993-02-23 Texas Instruments Incorporated Method and system for automated voting
DE10124982A1 (de) * 2001-05-21 2002-11-28 Idea Tv Ges Fuer Kommunikative Vorrichtung und Verfahren für die Teilnahme eines Rundfunkhörers oder Fernsehzuschauers an Multiple-Choice-Quizsendungen
US20050247783A1 (en) * 2004-05-05 2005-11-10 Dominion Voting Systems System, method and computer program for vote tabulation with an electronic audit trail

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4373134A (en) * 1981-05-06 1983-02-08 Grace Phillip F Magnetic card vote casting system
US5583329A (en) * 1994-08-01 1996-12-10 Election Products, Inc. Direct recording electronic voting machine and voting process
FR2739474B1 (fr) * 1995-09-29 1997-12-05 Serpeinesm Sa Machines a voter et cartes de vote afferentes
US7422150B2 (en) * 2000-11-20 2008-09-09 Avante International Technology, Inc. Electronic voting apparatus, system and method
FR2822270A1 (fr) * 2001-03-15 2002-09-20 Tahar Lahdiri Installation de vote
US7482928B2 (en) * 2001-12-28 2009-01-27 Private Pallet Security Systems, Llc Mini pallet-box moving container
US6971574B1 (en) * 2004-05-20 2005-12-06 Herskowitz Irving L Method of accurately verifying election results without the need for a recount
ATE395674T1 (de) * 2004-07-27 2008-05-15 Scytl Secure Electronic Voting Verfahren zum verwalten und schützen von wählprozessen, die mit einem elektronischen wähl- endgerät assoziiert sind, und verwendetes operatives modul
US8038053B2 (en) * 2008-03-06 2011-10-18 Precise Voting Llc Voting apparatus with secure ballot box assembly

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0419335A1 (de) * 1989-09-20 1991-03-27 Octo Abstimmverfahren und Mittel zu seiner Durchführung
US5189288A (en) * 1991-01-14 1993-02-23 Texas Instruments Incorporated Method and system for automated voting
DE10124982A1 (de) * 2001-05-21 2002-11-28 Idea Tv Ges Fuer Kommunikative Vorrichtung und Verfahren für die Teilnahme eines Rundfunkhörers oder Fernsehzuschauers an Multiple-Choice-Quizsendungen
US20050247783A1 (en) * 2004-05-05 2005-11-10 Dominion Voting Systems System, method and computer program for vote tabulation with an electronic audit trail

Also Published As

Publication number Publication date
FR2931282A1 (fr) 2009-11-20
FR2931282B1 (fr) 2015-01-02
EP2120217A3 (de) 2010-12-01
EP2120217A2 (de) 2009-11-18
BRPI0901462A2 (pt) 2010-01-26
US20090283597A1 (en) 2009-11-19

Similar Documents

Publication Publication Date Title
TWI511518B (zh) 多功能驗證系統之改良
US20190206174A1 (en) Automated dispensing machine with improved security
CN101523444B (zh) 用于无痕生物识别的方法和系统
EP2120217B1 (de) Elektronische Wahlvorrichtung und entsprechendes Verfahren und Computerprogrammprodukt.
US20010034640A1 (en) Physical and digital secret ballot systems
US20070210148A1 (en) Remote validation system useful for financial transactions
US20020077886A1 (en) Electronic voting apparatus, system and method
US20040050930A1 (en) Smart card with onboard authentication facility
US20050218225A1 (en) Methods and systems for voter-verified secure electronic voting
CN103003825A (zh) 用于柔性基板的安全性改进
EP2260473B1 (de) Elektronische wahlauszählung mit authentifizierbarem ergebnis
EP2502211A1 (de) Verfahren und system zur automatischen überprüfung der authentizität eines ausweisdokuments
US20160196509A1 (en) Ticket authorisation
Yadav et al. A biometric traits based authentication system for indian voting system
EP0856624B1 (de) Sicherheitsvorrichtung für Kraftfahrzeuge und Lernverfahren dafür
WO2010007479A2 (fr) Appareil et procédé de génération d'un titre sécurisé à partir d'un titre officiel
US20020039432A1 (en) Legal age limit and fingerprint verification system
Annadate et al. Online voting system using biometric verification
Nikam et al. A critical study of electronic voting machine evm utilization in election procedure
US20240144765A1 (en) Method and device for absentee voting
Rajesh Smart Electronic Voting Machine Using IoT
FR2796741A1 (fr) Systeme de paiement securise, permettant de selectionner un montant quelconque
WO1998032103A1 (fr) Dispositif et procede telematique de traitment in situ de titres de paiement
KR100890472B1 (ko) Ｒｆｉｄ를 이용한 부재자 투표의 처리방법
FR2944907A1 (fr) Procede de vote electronique securise

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK TR

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK TR

RIC1 Information provided on ipc code assigned before grant

Ipc: G07C 13/00 20060101AFI20090908BHEP

Ipc: G07C 13/02 20060101ALI20101028BHEP

17P Request for examination filed

Effective date: 20110422

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: INGENICO GROUP

17Q First examination report despatched

Effective date: 20160513

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20180921

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1092071

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190215

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: FRENCH

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602009056797

Country of ref document: DE

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20190123

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190423

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190523

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 1092071

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190123

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190423

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190424

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190523

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602009056797

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 602009056797

Country of ref document: DE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

26N No opposition filed

Effective date: 20191024

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20190512

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190531

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190531

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20190531

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190512

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190512

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20191203

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190512

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190531

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190531

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20090512

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190123