Introducing the Election Technology Framework Critical Infrastructure to Increase Trust and Preserve Democracy

Transcription

1 Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy Open Source Election Technology Foundation TrustTheVote Project August, 2014

2 Introduction Th book technical overview of the TrustTheVote Project. It begs by describg the election process shows how that process maps to the elections technology framework OSET proposg. The book provides an overview of the framework s ma components then zooms to provide details about each component, sub-components, lks between components, data flows that make possible the planng execution of elections. The TrustTheVote Elections Technology Framework a blue-prt for developg a complete elections system, somethg that has not been developed before. The framework represents a substantial body of work that s already been completed, particularly gatherg put from local elections officials, understg their needs, draftg specifications. In addition, some components are already development. And both the Services Portal the elections results reportg system are alpha release. 2 Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy

3 Overview The TrustTheVote Project developg the Election Technology Framework, which has six ma buildg blocks: Regterg Data Regterg Data 3 Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy

4 The Election Process Regterg Election Called Absentee s In-Person s Lt Management Views Regtration 17 1 Devices Ready Devices, Provional Ballots (PBs) Vote Tallies ed Beg Election Night Central Vote Tallies ed of Falize Election Numbers are matched with components the diagram. Data 4 Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy

5 The data managed by the EDM compres all of the ation about an election, at the level of an dividual jurdiction. Jurdiction defitions: Dtricts, dtrict type, preccts, precct membership dtricts, data for preccts dtricts, a host of precctg ation: precct splits, sub-preccts, precct-parts, per-election consolidations reportg preccts, street segment /or data to support mappg Election defitions: Election (date, type, jurdiction); contests, contest/dtrict, cidates, cidate/contest, referendum, referendum/dtrict, -response, -response/referendum, a host of attributes that determe partanship (or lack thereof) for contests cidates, use (or lack) of write-s, prioritization for orderg, more. Basic specifications: For a given election, for each precct, the lt of contests referenda (cludg cidates, parties, write-, straight-party, etc.) : A manifest or checklt that specifies each precct (or other vote tallyg dtrict) the number of dtct tallies expected for one. For for each countg device used on election day, one tally for central count run of or provional s. The data managed by the BDS wide rangg set of data that describe s from State-Specific Ballot Rules: Requirements for content presentation, for sues such as cidate rotation, straight-party votg, votg structions, as well as presentation-level sues such as the use of basic text ats (mixed case vs. specifications the contests questions defed for each precct lted an election-defition dataset with both metadata the election defition Stylesheets for Paper Ballots Digital Ballots: The BDS s lifecycle starts with the acquition of a per-election combation jurdiction/election defition (either from the EDM or other systems compliant with /or VSSC election defition stards) the conversion of each of the election s basic specifications to a concrete s specification. At th pot, stylesheets become the level elements that defe a s vual presentation, startg with a basele that implements the design stards that were defed by AIGA EAC. s: The end result of design activity twofold: fhed s for h-markg at pollg places or by voters; fhed the result both a set of PDF files for prtg the full set of styles also a set of concrete specifications that clude meta-data that to be used by countg devices to For digitally presented blank s, the result a set of concrete specifications that clude vual style sent to regtration The does not manage data, but rather creates boot images for castg countg devices. These boot images clude both the software that specific to each device the election-specific data needed by each device. Concrete Ballot : The fhed defitions meta-data produced by the. Manager cluded along with concrete specifications by the BDS. 11 The (VSP) teracts with the Regtrar, via its web services, to submit voter record requests to obta voter records related ation. are available as part of the VSP, or stalone. The open stards-based, supports the. voter record request voter record extract tegration similar to VSP tegration for a mobile plat such as voter record request voter record extract to prt The Regtrar manages a voter records database (VRDB) implements a web service for access to the VRDB, either as an tegrated VRDB or as a wrapper around a legacy VRDB. The data the VRDB cludes: Regtration s Requests: personal ation, geographic ation, eligibility, participation htory, membership special voter groups, e.g., military, hicapped, protected/private. Transaction Logs: A log of transactions pertent to each voter, volvg voter requests /or LEO activity. Includes: voter regtration requests, LEO approval/rejection of such requests or of s provional s; voter check- for person votg; mail-out of, receipt of returned. s: A subset of a voter record that uniquely identified each voter s charactertics but without any personal identifyg ation cludg those needed for stattics reportg of voter transactions, e.g.: percentage of total successful military voters out of all military voters, compared to similar success rate the entire votg population. fo request a web user terface for voters to download prt blank s. kit from, which obtas ation from the Regtrar. fo extract provions fleet offloads voter check records LEOs use the BDI to per LEOs use the Regtrar s UI web UI of the EDM the DPB Manager s cludg: reviewg regtration terface for both with several data access ends with a set of s consolidate stards-based requests, voter lt management, proviong data to digital data management options for supportg data: paper data from other components tegration with external services poll books post-election s; data for countg (primarily election defitions such as motor vehicle records, offloadg of poll book data variety of data that defe a devices; data for markg design), to validate support for poll book creation similar data capture from jurdiction an election devices that asst voters held it. markg a. store them on boot media used to run each election defition election defition castg or countg device T voter roll updates The (EDM) stards-based for The consts of a data management core the The aggregates data from other components The Regtrar the voter records core, it supports a set of The DPB Manager s supports the LEO s web terface, which a PC, dplay prter that assts Local election officials provide the with from the web user terface to provide transactions to create, view, update a variety of election transactions for data access data management of voter enables officials to aggregate voter roll data maly from the digital image processg technology used to record a vote for each countg devices, to assess whether all needed data available, if a wide range of data to be the bas of advanced reportg analys. Via an, other stards-based components can submit data to the a admtration data, cludg dtricts preccts geospatial the creates boot images for each castg or TrustTheVote Regtrar or other stards-based voter records system so, to create fal election results basic results reports results Stard reports meet Federal reportg requirements. can data for them; elections, contests, cidates, s. Local state-specific requirements to fhed digital s paper countg device. These images can be validated durg Logic Regtrar, obta elements of specific voter records, for local convert it to poll book records for digital poll books for correlate election results, voter regtration activity, voter election officials access EDM s services via a based on the, s that meet U.S. stards for vual design accessibility. Accuracy Testg, to ensure that only certified systems software election officials update manage record the terpretation as a set of votes for that. T demographics. such as the EDM Interface. election geospatial combed boot image voter transaction log voter election defition demographic record These components are clients of the Regtrar use its s for viewg voter records or submittg requests; there little or no retaed managed data, with the notable Regtration s Requests: Via the Regtrar, these components make voter records requests receive some parts of voter : Via the Regtrar, these components obta the onle submsion of a voter regtration request or onle completion of a to be prted, signed, mailed. sent to 24 2 custodian transports to votg place custodian transports from votg place The DPB Manager stores a copy of the voter roll data obtaed from the Regtrar or other stards-compliant source of voter Each DPB uses th data Regtration s: A voter roll the small subset of the ation a voter record that needed for voter check- usg a used data used a PC, dplay prter that assts custodian transports to votg place custodian transports from votg place selections, but it does use data from the : s: Used to drive the presentation of items Regtrar / One per precct usg options for audio or audio-enhanced presentation, the use The both process paper s create output data of two kds: recorded from that, tended for use rk limitg audits of the countg a develops fed to fed to technology used to record a vote for each mark detected. The voter ed of any sues with the marks or selections, has the The device does not store or manage data, but it does consolidate analyze data: device; used as put for both tally auditg vote totalg. Consolidated to the s output dataset of all vote tallies, s, vote totals. s: Consolidated to the s output dataset. : The uses the manifest created by the Election Manager ( cluded by the the s data) to audit the put set of vote tallies, to ensure that all only the expected tallies are presented accounted for. constg of Each provides, stores, manages the data from the datasets that it receives: Jurdiction Election Defitions: Describe the election as a whole, cludg all items all vote tallyg dtricts, clude data for each. tallies available. Tallyg Device s: That s consolidated output dataset of all fal counts vote totals. The data ats used by (for take of for bulk data export) are stard common data ats. As a result, the data can come from any stards-compliant votg system. We ve also written connectors applications that translate from extg ats to enable to work with extg election systems. personal identifyg ation, but does uniquely identify each voter several charactertics of voters that are needed for stattics reportg of voter Pew VIP or Pew IC near future near future near future near future near future to support T T cludes a vual s can access the data create their own tools republh the data or do their own analys. Regtrar / Numbers are matched with components the diagram below. Designed by Dubberly Design Office Version 5.1 August 19, 2014 mh/hs Full Architecture Diagram Introducg the Election Technology Framework Because We All Deserve a Better Experience The TrustTheVote Project a digital public works project to develop critical democracy frastructure. We are designg developg open-stards-based elections technology collaboration with local election officials from all around the country. The Election Technology Framework freely available for any jurdiction (e.g., a county) to adopt, adapt, deploy for public elections. Typically, each jurdiction would have one copy of each component; though some votg components are deployed to each precct. Open source, open stards, open data are key aspects of the Election Technology Framework, tended to asst election officials conductg election admtration elections operations a process that accurate, secure, transparent, verifiable. Six Ma Buildg Blocks Regterg Data Stards The Election Process Election Called Absentee s In-Person s Lt Management Views Regtration Devices Ready Devices, Provional Ballots (PBs) Vote Tallies ed Beg Election Night Central Vote Tallies ed of Falize Election Regterg Pollg Place Regterg cludes all the people, technology, activities volved voter regtration, voter records management, voter ation services, voter lt management. a web user terface that helps a voter regter, determe eligibility, view update their own voter record, view record pollg place wait time (as ), among other services. cludes all the people, technology, activities volved the processes of castg countg s. that presents a voter with all the contests questions for the voter s specific, creates a mache-countable H- a PC dplay, prter, scanner that reads voter s choices, records the votes. an tegral aspect of the TrustTheVote Project s goal of makg elections wholly transparent, accurate, trustworthy. In the reportg phase, elections data stored, analyzed, prepared for public consumption. (Stalone) Regtration Form cludes all the technology-based activities of election officials for election admtration preparation for a specific for data about electoral jurdictions elections conducted with a jurdiction. Regtrar Election tration Office that defitions, designs, votg system software, votg system components that cast count s. Write-once Boot Media Regtrar that stores manages voter Regtrar of s Office used to provion offload a a PC dplay, prter, high-capacity scanner choices, recordg the votes. a PC dplay prter with tabulation create election results reports. Central Countg Office aggregation, analys, reportg. Data Layer The data layer cludes a set of open stards for election data, defed with the help of local election officials alized through major stards organization. The goal to trans, normalize, aggregate, publh election data to all citizens near real time. Regtrar VSP,, Data Stards EML VSSC OASIS ternational Project developed IEEE 1622 workg group election data stard data stards emergg stards s NIST VIP U.S. National Institute of Ination Project Stards Technology data at Data Formats DL- record requests voter DL- Jurdiction Election The core jurdiction election defition. DL-- DL-- DL-- DL- s DL- DL--T Tallyg Device s results defition to record the DL- Transaction Log regtration admtration, votg admtration, provional DL- Elections technology must be... Lt all voters only eligible voters on voter rolls. Count votes without errors, as they were cast. Ensure voter privacy, data tegrity, system reliability, proper authentication authorization for access. Allow verification of required accuracy. Log all changes to guarantee accountability. Enable everythg that matters about an election to be dependently verified, cludg accuracy security OSET Foundation the TrustTheVote Project All Rights Reserved. 5 Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy

6 Regterg cludes all the people, technology, activities volved voter regtration, voter records management, voter ation services, voter lt management. cludes all the technology-based activities of election officials for election admtration preparation for a specific The data layer cludes a set of open stards for election data, defed with the help of local election officials alized through major stards organization. The goal to trans, normalize, aggregate, publh election data to all citizens near real time. Elections technology must be... The data managed by the EDM compres all of the ation about an election, at the level of an dividual jurdiction. Jurdiction defitions: Dtricts, dtrict type, preccts, precct membership dtricts, data for preccts dtricts, a host of precctg ation: precct splits, sub-preccts, precct-parts, per-election consolidations reportg preccts, street segment /or data to support mappg Election defitions: Election (date, type, jurdiction); contests, contest/dtrict, cidates, cidate/contest, referendum, referendum/dtrict, -response, -response/referendum, a host of attributes that determe partanship (or lack thereof) for contests cidates, use (or lack) of write-s, prioritization for orderg, more. Basic specifications: For a given election, for each precct, the lt of contests referenda (cludg cidates, parties, write-, straight-party, etc.) : A manifest or checklt that specifies each precct (or other vote tallyg dtrict) the number of dtct tallies expected for one. For for each countg device used on election day, one tally for central count run of or provional s. The data managed by the BDS wide rangg set of data that describe s from State-Specific Ballot Rules: Requirements for content presentation, for sues such as cidate rotation, straight-party votg, votg structions, as well as presentation-level sues such as the use of basic text ats (mixed case vs. specifications the contests questions defed for each precct lted an election-defition dataset with both metadata the election defition Stylesheets for Paper Ballots Digital Ballots: The BDS s lifecycle starts with the acquition of a per-election combation jurdiction/election defition (either from the EDM or other systems compliant with /or VSSC election defition stards) the conversion of each of the election s basic specifications to a concrete s specification. At th pot, stylesheets become the level elements that defe a s vual presentation, startg with a basele that implements the design stards that were defed by AIGA EAC. s: The end result of design activity twofold: fhed s for h-markg at pollg places or by voters; fhed the result both a set of PDF files for prtg the full set of styles also a set of concrete specifications that clude meta-data that to be used by countg devices to For digitally presented blank s, the result a set of concrete specifications that clude vual style Regtration Form sent to regtration The does not manage data, but rather creates boot images for castg countg devices. These boot images clude both the software that specific to each device the election-specific data needed by each device. Concrete Ballot : The fhed defitions meta-data produced by the. Manager cluded along with concrete specifications by the BDS. 11 to prt a web user terface that helps a voter regter, determe eligibility, view update their own voter record, view record pollg place wait time (as ), among other services. The (VSP) teracts with the Regtrar, via its web tegration services, to submit voter record requests to obta voter similar to VSP tegration for a mobile plat such as records related ation. are available as part of the VSP, or stalone. The open stards-based, supports the. voter record request voter record extract voter record voter record fo fo Regtrar The Regtrar manages a voter records database (VRDB) implements a web service for access to the VRDB, either as an tegrated VRDB or as a wrapper around a legacy VRDB. The data the VRDB cludes: Regtration s Requests: personal ation, geographic ation, eligibility, participation htory, membership special voter groups, e.g., military, hicapped, protected/private. Transaction Logs: A log of transactions pertent to each voter, volvg voter requests /or LEO activity. Includes: voter regtration requests, LEO approval/rejection of such requests or of s provional s; voter check- for person votg; mail-out of, receipt of returned. s: A subset of a voter record that uniquely identified each voter s charactertics but without any personal identifyg ation cludg those needed for stattics reportg of voter transactions, e.g.: percentage of total successful military voters out of all military voters, compared to similar success rate the entire votg population. a web user terface for voters to download prt blank s. kit from, which obtas ation from the Regtrar. VSP,, These components are clients of the Regtrar use its s for viewg voter records or submittg requests; there little or no retaed managed data, with the notable Regtration s Requests: Via the Regtrar, these components make voter records requests receive some parts of voter : Via the Regtrar, these components obta the onle submsion of a voter regtration request or onle completion of a to be prted, signed, mailed. cludes all the people, technology, activities volved the processes of castg countg s. sent to s The DPB Manager stores a copy of the voter roll data obtaed from the Regtrar or other stards-compliant source of voter Each DPB uses th data Regtration s: A voter roll the small subset of the ation a voter record that needed for voter check- usg a Pollg Place a PC, dplay prter that assts provions fleet offloads voter check records LEOs use the BDI to per LEOs use the Regtrar s UI web UI of the EDM the DPB Manager s cludg: reviewg regtration terface for both with several data access ends with a set of s consolidate stards-based requests, voter lt management, proviong data to digital data management options for supportg data: paper data from other components tegration with external services poll books post-election s; data for countg (primarily election defitions such as motor vehicle records, offloadg of poll book data variety of data that defe a devices; data for markg design), to validate support for poll book creation similar data capture from jurdiction an election devices that asst voters held it. markg a. store them on boot media used to run each Regtrar election defition election defition castg or countg device for data that a PC dplay, prter, high-capacity scanner a PC dplay prter with tabulation about electoral jurdictions elections defitions, designs, votg system software, that stores manages voter used to provion offload a T conducted with a jurdiction. create election results reports. votg system components that cast count s. choices, recordg the votes. voter roll updates The consts of a data management core the The Regtrar the voter records core, it supports a set of The (EDM) stards-based for The aggregates data from other components The DPB Manager s supports the LEO s web terface, which a PC, dplay prter that assts Local election officials provide the with from transactions for data access data management of voter transactions to create, view, update a variety of election enables officials to aggregate voter roll data maly from the digital image processg technology used to record a vote for each countg devices, to assess whether all needed data available, if Via an, other stards-based components can submit data to the a admtration data, cludg dtricts preccts geospatial the creates boot images for each castg or TrustTheVote Regtrar or other stards-based voter records system so, to create fal election results basic results reports results data for them; elections, contests, cidates, s. Local state-specific requirements to fhed digital s paper countg device. These images can be validated durg Logic Regtrar, obta elements of specific voter records, for local convert it to poll book records for digital poll books for election officials access EDM s services via a based on the, s that meet U.S. stards for vual design accessibility. Accuracy Testg, to ensure that only certified systems software election officials update manage record the terpretation as a set of votes for that. T demographics. such as the EDM Interface. election geospatial combed boot image voter transaction log voter election defition demographic record Regtrar Write-once Boot Media Lt all voters only eligible voters on voter rolls. Count votes without errors, as they were cast. EML OASIS ternational election data stard Project developed data stards VSSC IEEE 1622 workg group emergg stards 24 2 NIST U.S. National Institute of Stards Technology Ensure voter privacy, data tegrity, system reliability, proper authentication authorization for access. VIP Ination Project data at used data used selections, but it does use data from the : s: Used to drive the presentation of items Regtrar / Allow verification of required accuracy. Log all changes to guarantee accountability. develops constg of The TrustTheVote Project The Election Technology Framework Six Ma Buildg Blocks a digital public works project to develop critical democracy freely available for any jurdiction (e.g., a county) to adopt, Regterg frastructure. We are designg developg adapt, deploy for public elections. Typically, each open-stards-based elections technology collaboration jurdiction would have one copy of each component; though with local election officials from all around the country. some votg components are deployed to each precct. Open source, open stards, open data are key aspects Data Stards of the Election Technology Framework, tended to asst election officials conductg election admtration elections operations a process that accurate, secure, transparent, verifiable. an tegral aspect of the TrustTheVote Project s goal of makg elections One per precct wholly transparent, accurate, trustworthy In the reportg phase, elections data stored, fed to analyzed, prepared for public consumption. H- that presents a voter a PC dplay, prter, scanner that reads with all the contests questions for the voter s specific, creates a mache-countable usg options for audio or audio-enhanced presentation, the use The both process paper s create output data of two kds: recorded from that, tended for use rk limitg audits of the countg a fed to voter s choices, records the votes. technology used to record a vote for each mark detected. The voter ed of any sues with the marks or selections, has the The device does not store or manage data, but it does consolidate analyze data: device; used as put for both tally auditg vote totalg. Consolidated to the s output dataset of all vote tallies, s, vote totals. s: Consolidated to the s output dataset. : The uses the manifest created by the Election Manager ( cluded by the the s data) to audit the put set of vote tallies, to ensure that all only the expected tallies are presented accounted for. Each provides, stores, manages the data from the datasets that it receives: Jurdiction Election Defitions: Describe the election as a whole, cludg all items all vote tallyg dtricts, clude data for each. tallies available. Tallyg Device s: That s consolidated output dataset of all fal Enable everythg that matters about an election to be dependently verified, cludg accuracy security. Absentee s In-Person s The data ats used by (for take of for bulk data export) are stard common data ats. As a result, the data can come from any stards-compliant votg system. We ve also written connectors applications that translate from extg ats to enable to work with extg election systems. aggregation, analys, reportg. the web user terface to provide a wide range of data to be the bas of advanced reportg analys. Stard reports meet Federal reportg requirements. can correlate election results, voter regtration activity, voter personal identifyg ation, but does uniquely identify each voter several charactertics of voters that are needed for stattics reportg of voter T DL- DL- DL--T DL- Jurdiction Election Tallyg Device s Transaction Log record requests voter The core jurdiction election results defition to record the defition. DL-- DL-- DL-- DL- regtration admtration, DL- votg admtration, provional s DL- counts vote totals. Pew VIP or Pew IC near future near future near future near future near future to support The Election Process T cludes a vual (Stalone) s can access the data create their own tools republh the data or do their own analys. Regtrar / OSET Foundation the TrustTheVote Project All Rights Reserved. Designed by Dubberly Design Office Version 5.1 August 19, 2014 mh/hs Numbers are matched with components the diagram below. Regterg Regterg cludes all the people, technology, activities volved voter regtration, voter records management, voter ation services, voter lt management. regtration 11 a web user terface that helps a voter regter, determe eligibility, view update their own voter record, view record pollg place wait time (as ), among other services. to prt a web user terface for voters to download prt blank s. Regtration Form sent to The (VSP) teracts with the Regtrar, via its web services, to submit voter record requests to obta voter records related ation. are available as part of the VSP, or stalone. The open stards-based, supports the. tegration similar to VSP tegration for a mobile plat such as kit from, which obtas ation from the Regtrar. voter record request voter record extract voter record request voter record extract fo request fo extract Regtrar Introducg the Election Technology Framework Because We All Deserve a Better Experience Election Called Lt Management Views Regtration Devices Ready Devices, Provional Ballots (PBs) Vote Tallies ed Beg Election Night Central Vote Tallies ed of Falize Election Regterg Election tration Office Regtrar of s Office Central Countg Office Data Layer Data Stards Data Formats 6 Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy

7 Regterg cludes all the people, technology, activities volved voter regtration, voter records management, voter ation services, voter lt management. cludes all the technology-based activities of election officials for election admtration preparation for a specific The data layer cludes a set of open stards for election data, defed with the help of local election officials alized through major stards organization. The goal to trans, normalize, aggregate, publh election data to all citizens near real time. Elections technology must be... The data managed by the EDM compres all of the ation about an election, at the level of an dividual jurdiction. Jurdiction defitions: Dtricts, dtrict type, preccts, precct membership dtricts, data for preccts dtricts, a host of precctg ation: precct splits, sub-preccts, precct-parts, per-election consolidations reportg preccts, street segment /or data to support mappg Election defitions: Election (date, type, jurdiction); contests, contest/dtrict, cidates, cidate/contest, referendum, referendum/dtrict, -response, -response/referendum, a host of attributes that determe partanship (or lack thereof) for contests cidates, use (or lack) of write-s, prioritization for orderg, more. Basic specifications: For a given election, for each precct, the lt of contests referenda (cludg cidates, parties, write-, straight-party, etc.) : A manifest or checklt that specifies each precct (or other vote tallyg dtrict) the number of dtct tallies expected for one. For for each countg device used on election day, one tally for central count run of or provional s. The data managed by the BDS wide rangg set of data that describe s from State-Specific Ballot Rules: Requirements for content presentation, for sues such as cidate rotation, straight-party votg, votg structions, as well as presentation-level sues such as the use of basic text ats (mixed case vs. specifications the contests questions defed for each precct lted an election-defition dataset with both metadata the election defition Stylesheets for Paper Ballots Digital Ballots: The BDS s lifecycle starts with the acquition of a per-election combation jurdiction/election defition (either from the EDM or other systems compliant with /or VSSC election defition stards) the conversion of each of the election s basic specifications to a concrete s specification. At th pot, stylesheets become the level elements that defe a s vual presentation, startg with a basele that implements the design stards that were defed by AIGA EAC. s: The end result of design activity twofold: fhed s for h-markg at pollg places or by voters; fhed the result both a set of PDF files for prtg the full set of styles also a set of concrete specifications that clude meta-data that to be used by countg devices to For digitally presented blank s, the result a set of concrete specifications that clude vual style Regtration Form sent to regtration The does not manage data, but rather creates boot images for castg countg devices. These boot images clude both the software that specific to each device the election-specific data needed by each device. Concrete Ballot : The fhed defitions meta-data produced by the. Manager cluded along with concrete specifications by the BDS. 11 to prt a web user terface that helps a voter regter, determe eligibility, view update their own voter record, view record pollg place wait time (as ), among other services. The (VSP) teracts with the Regtrar, via its web tegration services, to submit voter record requests to obta voter similar to VSP tegration for a mobile plat such as records related ation. are available as part of the VSP, or stalone. The open stards-based, supports the. voter record request voter record extract voter record voter record fo fo Regtrar The Regtrar manages a voter records database (VRDB) implements a web service for access to the VRDB, either as an tegrated VRDB or as a wrapper around a legacy VRDB. The data the VRDB cludes: Regtration s Requests: personal ation, geographic ation, eligibility, participation htory, membership special voter groups, e.g., military, hicapped, protected/private. Transaction Logs: A log of transactions pertent to each voter, volvg voter requests /or LEO activity. Includes: voter regtration requests, LEO approval/rejection of such requests or of s provional s; voter check- for person votg; mail-out of, receipt of returned. s: A subset of a voter record that uniquely identified each voter s charactertics but without any personal identifyg ation cludg those needed for stattics reportg of voter transactions, e.g.: percentage of total successful military voters out of all military voters, compared to similar success rate the entire votg population. a web user terface for voters to download prt blank s. kit from, which obtas ation from the Regtrar. VSP,, These components are clients of the Regtrar use its s for viewg voter records or submittg requests; there little or no retaed managed data, with the notable Regtration s Requests: Via the Regtrar, these components make voter records requests receive some parts of voter : Via the Regtrar, these components obta the onle submsion of a voter regtration request or onle completion of a to be prted, signed, mailed. cludes all the people, technology, activities volved the processes of castg countg s. sent to s The DPB Manager stores a copy of the voter roll data obtaed from the Regtrar or other stards-compliant source of voter Each DPB uses th data Regtration s: A voter roll the small subset of the ation a voter record that needed for voter check- usg a Pollg Place a PC, dplay prter that assts provions fleet offloads voter check records LEOs use the BDI to per LEOs use the Regtrar s UI web UI of the EDM the DPB Manager s cludg: reviewg regtration terface for both with several data access ends with a set of s consolidate stards-based requests, voter lt management, proviong data to digital data management options for supportg data: paper data from other components tegration with external services poll books post-election s; data for countg (primarily election defitions such as motor vehicle records, offloadg of poll book data variety of data that defe a devices; data for markg design), to validate support for poll book creation similar data capture from jurdiction an election devices that asst voters held it. markg a. store them on boot media used to run each Regtrar election defition election defition castg or countg device for data that a PC dplay, prter, high-capacity scanner a PC dplay prter with tabulation about electoral jurdictions elections defitions, designs, votg system software, that stores manages voter used to provion offload a T conducted with a jurdiction. create election results reports. votg system components that cast count s. choices, recordg the votes. voter roll updates The consts of a data management core the The Regtrar the voter records core, it supports a set of The (EDM) stards-based for The aggregates data from other components The DPB Manager s supports the LEO s web terface, which a PC, dplay prter that assts Local election officials provide the with from transactions for data access data management of voter transactions to create, view, update a variety of election enables officials to aggregate voter roll data maly from the digital image processg technology used to record a vote for each countg devices, to assess whether all needed data available, if Via an, other stards-based components can submit data to the a admtration data, cludg dtricts preccts geospatial the creates boot images for each castg or TrustTheVote Regtrar or other stards-based voter records system so, to create fal election results basic results reports results data for them; elections, contests, cidates, s. Local state-specific requirements to fhed digital s paper countg device. These images can be validated durg Logic Regtrar, obta elements of specific voter records, for local convert it to poll book records for digital poll books for election officials access EDM s services via a based on the, s that meet U.S. stards for vual design accessibility. Accuracy Testg, to ensure that only certified systems software election officials update manage record the terpretation as a set of votes for that. T demographics. such as the EDM Interface. election geospatial combed boot image voter transaction log voter election defition demographic record Regtrar Write-once Boot Media Lt all voters only eligible voters on voter rolls. Count votes without errors, as they were cast. EML OASIS ternational election data stard Project developed data stards VSSC IEEE 1622 workg group emergg stards 24 2 NIST U.S. National Institute of Stards Technology Ensure voter privacy, data tegrity, system reliability, proper authentication authorization for access. VIP Ination Project data at used data used selections, but it does use data from the : s: Used to drive the presentation of items Regtrar / Allow verification of required accuracy. Log all changes to guarantee accountability. develops constg of The TrustTheVote Project The Election Technology Framework Six Ma Buildg Blocks a digital public works project to develop critical democracy freely available for any jurdiction (e.g., a county) to adopt, Regterg frastructure. We are designg developg adapt, deploy for public elections. Typically, each open-stards-based elections technology collaboration jurdiction would have one copy of each component; though with local election officials from all around the country. some votg components are deployed to each precct. Open source, open stards, open data are key aspects Data Stards of the Election Technology Framework, tended to asst election officials conductg election admtration elections operations a process that accurate, secure, transparent, verifiable. an tegral aspect of the TrustTheVote Project s goal of makg elections One per precct wholly transparent, accurate, trustworthy In the reportg phase, elections data stored, fed to analyzed, prepared for public consumption. H- that presents a voter a PC dplay, prter, scanner that reads with all the contests questions for the voter s specific, creates a mache-countable usg options for audio or audio-enhanced presentation, the use The both process paper s create output data of two kds: recorded from that, tended for use rk limitg audits of the countg a fed to voter s choices, records the votes. technology used to record a vote for each mark detected. The voter ed of any sues with the marks or selections, has the The device does not store or manage data, but it does consolidate analyze data: device; used as put for both tally auditg vote totalg. Consolidated to the s output dataset of all vote tallies, s, vote totals. s: Consolidated to the s output dataset. : The uses the manifest created by the Election Manager ( cluded by the the s data) to audit the put set of vote tallies, to ensure that all only the expected tallies are presented accounted for. Each provides, stores, manages the data from the datasets that it receives: Jurdiction Election Defitions: Describe the election as a whole, cludg all items all vote tallyg dtricts, clude data for each. tallies available. Tallyg Device s: That s consolidated output dataset of all fal Enable everythg that matters about an election to be dependently verified, cludg accuracy security. The data ats used by (for take of for bulk data export) are stard common data ats. As a result, the data can come from any stards-compliant votg system. We ve also written connectors applications that translate from extg ats to enable to work with extg election systems. aggregation, analys, reportg. the web user terface to provide a wide range of data to be the bas of advanced reportg analys. Stard reports meet Federal reportg requirements. can correlate election results, voter regtration activity, voter personal identifyg ation, but does uniquely identify each voter several charactertics of voters that are needed for stattics reportg of voter T DL- DL- DL--T DL- Jurdiction Election Tallyg Device s Transaction Log record requests voter The core jurdiction election results defition to record the defition. DL-- DL-- DL-- DL- regtration admtration, DL- votg admtration, provional s DL- counts vote totals. Pew VIP or Pew IC near future near future near future near future near future to support The Election Process Absentee s In-Person s T cludes a vual (Stalone) s can access the data create their own tools republh the data or do their own analys. Regtrar / OSET Foundation the TrustTheVote Project All Rights Reserved. Designed by Dubberly Design Office Version 5.1 August 19, 2014 mh/hs Numbers are matched with components the diagram below. : Place cludes all the people, technology, activities volved the processes of castg countg s sent to a PC, dplay prter that assts custodian transports to votg place custodian transports from votg place custodian transports to votg place custodian transports from votg place Regtrar of s Office Regtrar of s Office Introducg the Election Technology Framework Because We All Deserve a Better Experience Election Called Lt Management Views Regtration Devices Ready Devices, Provional Ballots (PBs) Vote Tallies ed Beg Election Night Central Vote Tallies ed of Falize Election Regterg Election tration Office Regtrar of s Office Central Countg Office Data Layer Data Stards Data Formats 7 Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy

8 Regterg cludes all the people, technology, activities volved voter regtration, voter records management, voter ation services, voter lt management. cludes all the technology-based activities of election officials for election admtration preparation for a specific The data layer cludes a set of open stards for election data, defed with the help of local election officials alized through major stards organization. The goal to trans, normalize, aggregate, publh election data to all citizens near real time. Elections technology must be... The data managed by the EDM compres all of the ation about an election, at the level of an dividual jurdiction. Jurdiction defitions: Dtricts, dtrict type, preccts, precct membership dtricts, data for preccts dtricts, a host of precctg ation: precct splits, sub-preccts, precct-parts, per-election consolidations reportg preccts, street segment /or data to support mappg Election defitions: Election (date, type, jurdiction); contests, contest/dtrict, cidates, cidate/contest, referendum, referendum/dtrict, -response, -response/referendum, a host of attributes that determe partanship (or lack thereof) for contests cidates, use (or lack) of write-s, prioritization for orderg, more. Basic specifications: For a given election, for each precct, the lt of contests referenda (cludg cidates, parties, write-, straight-party, etc.) : A manifest or checklt that specifies each precct (or other vote tallyg dtrict) the number of dtct tallies expected for one. For for each countg device used on election day, one tally for central count run of or provional s. The data managed by the BDS wide rangg set of data that describe s from State-Specific Ballot Rules: Requirements for content presentation, for sues such as cidate rotation, straight-party votg, votg structions, as well as presentation-level sues such as the use of basic text ats (mixed case vs. specifications the contests questions defed for each precct lted an election-defition dataset with both metadata the election defition Stylesheets for Paper Ballots Digital Ballots: The BDS s lifecycle starts with the acquition of a per-election combation jurdiction/election defition (either from the EDM or other systems compliant with /or VSSC election defition stards) the conversion of each of the election s basic specifications to a concrete s specification. At th pot, stylesheets become the level elements that defe a s vual presentation, startg with a basele that implements the design stards that were defed by AIGA EAC. s: The end result of design activity twofold: fhed s for h-markg at pollg places or by voters; fhed the result both a set of PDF files for prtg the full set of styles also a set of concrete specifications that clude meta-data that to be used by countg devices to For digitally presented blank s, the result a set of concrete specifications that clude vual style Regtration Form sent to regtration The does not manage data, but rather creates boot images for castg countg devices. These boot images clude both the software that specific to each device the election-specific data needed by each device. Concrete Ballot : The fhed defitions meta-data produced by the. Manager cluded along with concrete specifications by the BDS. 11 to prt a web user terface that helps a voter regter, determe eligibility, view update their own voter record, view record pollg place wait time (as ), among other services. The (VSP) teracts with the Regtrar, via its web tegration services, to submit voter record requests to obta voter similar to VSP tegration for a mobile plat such as records related ation. are available as part of the VSP, or stalone. The open stards-based, supports the. voter record request voter record extract voter record voter record fo fo Regtrar The Regtrar manages a voter records database (VRDB) implements a web service for access to the VRDB, either as an tegrated VRDB or as a wrapper around a legacy VRDB. The data the VRDB cludes: Regtration s Requests: personal ation, geographic ation, eligibility, participation htory, membership special voter groups, e.g., military, hicapped, protected/private. Transaction Logs: A log of transactions pertent to each voter, volvg voter requests /or LEO activity. Includes: voter regtration requests, LEO approval/rejection of such requests or of s provional s; voter check- for person votg; mail-out of, receipt of returned. s: A subset of a voter record that uniquely identified each voter s charactertics but without any personal identifyg ation cludg those needed for stattics reportg of voter transactions, e.g.: percentage of total successful military voters out of all military voters, compared to similar success rate the entire votg population. a web user terface for voters to download prt blank s. kit from, which obtas ation from the Regtrar. VSP,, These components are clients of the Regtrar use its s for viewg voter records or submittg requests; there little or no retaed managed data, with the notable Regtration s Requests: Via the Regtrar, these components make voter records requests receive some parts of voter : Via the Regtrar, these components obta the onle submsion of a voter regtration request or onle completion of a to be prted, signed, mailed. cludes all the people, technology, activities volved the processes of castg countg s. sent to s The DPB Manager stores a copy of the voter roll data obtaed from the Regtrar or other stards-compliant source of voter Each DPB uses th data Regtration s: A voter roll the small subset of the ation a voter record that needed for voter check- usg a Pollg Place a PC, dplay prter that assts provions fleet offloads voter check records LEOs use the BDI to per LEOs use the Regtrar s UI web UI of the EDM the DPB Manager s cludg: reviewg regtration terface for both with several data access ends with a set of s consolidate stards-based requests, voter lt management, proviong data to digital data management options for supportg data: paper data from other components tegration with external services poll books post-election s; data for countg (primarily election defitions such as motor vehicle records, offloadg of poll book data variety of data that defe a devices; data for markg design), to validate support for poll book creation similar data capture from jurdiction an election devices that asst voters held it. markg a. store them on boot media used to run each Regtrar election defition election defition castg or countg device for data that a PC dplay, prter, high-capacity scanner a PC dplay prter with tabulation about electoral jurdictions elections defitions, designs, votg system software, that stores manages voter used to provion offload a T conducted with a jurdiction. create election results reports. votg system components that cast count s. choices, recordg the votes. voter roll updates The consts of a data management core the The Regtrar the voter records core, it supports a set of The (EDM) stards-based for The aggregates data from other components The DPB Manager s supports the LEO s web terface, which a PC, dplay prter that assts Local election officials provide the with from transactions for data access data management of voter transactions to create, view, update a variety of election enables officials to aggregate voter roll data maly from the digital image processg technology used to record a vote for each countg devices, to assess whether all needed data available, if Via an, other stards-based components can submit data to the a admtration data, cludg dtricts preccts geospatial the creates boot images for each castg or TrustTheVote Regtrar or other stards-based voter records system so, to create fal election results basic results reports results data for them; elections, contests, cidates, s. Local state-specific requirements to fhed digital s paper countg device. These images can be validated durg Logic Regtrar, obta elements of specific voter records, for local convert it to poll book records for digital poll books for election officials access EDM s services via a based on the, s that meet U.S. stards for vual design accessibility. Accuracy Testg, to ensure that only certified systems software election officials update manage record the terpretation as a set of votes for that. T demographics. such as the EDM Interface. election geospatial combed boot image voter transaction log voter election defition demographic record Regtrar Write-once Boot Media Lt all voters only eligible voters on voter rolls. Count votes without errors, as they were cast. EML OASIS ternational election data stard Project developed data stards VSSC IEEE 1622 workg group emergg stards 24 2 NIST U.S. National Institute of Stards Technology Ensure voter privacy, data tegrity, system reliability, proper authentication authorization for access. VIP Ination Project data at used data used selections, but it does use data from the : s: Used to drive the presentation of items Regtrar / Allow verification of required accuracy. Log all changes to guarantee accountability. develops constg of The TrustTheVote Project The Election Technology Framework Six Ma Buildg Blocks a digital public works project to develop critical democracy freely available for any jurdiction (e.g., a county) to adopt, Regterg frastructure. We are designg developg adapt, deploy for public elections. Typically, each open-stards-based elections technology collaboration jurdiction would have one copy of each component; though with local election officials from all around the country. some votg components are deployed to each precct. Open source, open stards, open data are key aspects Data Stards of the Election Technology Framework, tended to asst election officials conductg election admtration elections operations a process that accurate, secure, transparent, verifiable. an tegral aspect of the TrustTheVote Project s goal of makg elections One per precct wholly transparent, accurate, trustworthy In the reportg phase, elections data stored, fed to analyzed, prepared for public consumption. H- that presents a voter a PC dplay, prter, scanner that reads with all the contests questions for the voter s specific, creates a mache-countable usg options for audio or audio-enhanced presentation, the use The both process paper s create output data of two kds: recorded from that, tended for use rk limitg audits of the countg a fed to voter s choices, records the votes. technology used to record a vote for each mark detected. The voter ed of any sues with the marks or selections, has the The device does not store or manage data, but it does consolidate analyze data: device; used as put for both tally auditg vote totalg. Consolidated to the s output dataset of all vote tallies, s, vote totals. s: Consolidated to the s output dataset. : The uses the manifest created by the Election Manager ( cluded by the the s data) to audit the put set of vote tallies, to ensure that all only the expected tallies are presented accounted for. Each provides, stores, manages the data from the datasets that it receives: Jurdiction Election Defitions: Describe the election as a whole, cludg all items all vote tallyg dtricts, clude data for each. tallies available. Tallyg Device s: That s consolidated output dataset of all fal Enable everythg that matters about an election to be dependently verified, cludg accuracy security. The data ats used by (for take of for bulk data export) are stard common data ats. As a result, the data can come from any stards-compliant votg system. We ve also written connectors applications that translate from extg ats to enable to work with extg election systems. aggregation, analys, reportg. the web user terface to provide a wide range of data to be the bas of advanced reportg analys. Stard reports meet Federal reportg requirements. can correlate election results, voter regtration activity, voter personal identifyg ation, but does uniquely identify each voter several charactertics of voters that are needed for stattics reportg of voter T DL- DL- DL--T DL- Jurdiction Election Tallyg Device s Transaction Log record requests voter The core jurdiction election results defition to record the defition. DL-- DL-- DL-- DL- regtration admtration, DL- votg admtration, provional s DL- counts vote totals. Pew VIP or Pew IC near future near future near future near future near future to support The Election Process Absentee s In-Person s T cludes a vual (Stalone) s can access the data create their own tools republh the data or do their own analys. Regtrar / OSET Foundation the TrustTheVote Project All Rights Reserved. Designed by Dubberly Design Office Version 5.1 August 19, 2014 mh/hs Numbers are matched with components the diagram below. : Place One per precct that presents a voter with all the contests questions for the voter s specific, creates a mache-countable a fed to H- fed to a PC dplay, prter, scanner that reads voter s choices, records the votes. usg options for audio or audio-enhanced presentation, the use technology used to record a vote for each mark detected. The voter ed of any sues with the marks or selections, has the Introducg the Election Technology Framework Because We All Deserve a Better Experience Election Called Lt Management Views Regtration Devices Ready Devices, Provional Ballots (PBs) Vote Tallies ed Beg Election Night Central Vote Tallies ed of Falize Election Regterg Election tration Office Regtrar of s Office Central Countg Office Data Layer Data Stards Data Formats Introducg the Election Technology Framework Critical Infrastructure to Increase Trust Preserve Democracy