How would cybersecurity assure an election?

[ericgeater]

I'd be curious to hear your ideas on how elections that depend on technology could improve their security.  From collecting ballots, to transmitting tallies, to demonstrating assurance of votes cast, to redundancy and integrity checks, to maintaining confidentiality of votes.  How would you create a trustworthy system that can scale from rural to metropolitan densities -- and do this economically?

And I'm talking from tabula rasa.  This is a "roll your own" configuration question.  Don't include any current voting technology systems, unless you happen to be familiar with a specific vendor's level of security assurance, and what they specifically do to preserve integrity.

Thanks!

[ericgeater]

Kudos on the "QRL" back there.

73, N4EAG

[Caute_cautim]

@ericgeaterThank you for the 73, ZL1GWE/5W0JM

@CraginSThank you for explaining the messy system the USA has currently.   Here in New Zealand we have the same similar issues, but on a far smaller scale.  Which provides opportunities for innovations and trial and error or experimentation, especially using cloud development systems etc.

What I alluded too, is the similar to this:  Self-Sovereignty https://sovrin.org/announcing-sgfwg-monthly-blog-post-series/

https://www.globenewswire.com/news-release/2017/11/15/1193646/0/en/Canada-s-ATB-Financial-joins-Sovr...

Yes, it goes back to the Blockchain, as part of the overall picture, but only a component of the whole.

There is an interesting white paper on the subject:  https://sovrin.org/wp-content/uploads/Sovrin-Protocol-and-Token-White-Paper.pdf

There are many white papers:  https://www.evernym.com/white-papers/'

There is even a paper on security voting data:  https://pages.convertkit.com/e700d73bc0/397fb75c90

Which was funded by DHS Science and Technology Cybersecurity directorate.

I think this provides a good baseline for knowing the actual insecurities and potential ways forward,

It appears that we have some of the building blocks, but there is still a long way to go, before a secure system can be put together for this purpose.

Regards

Caute_cautim

[ogormrob]

Eric,

Great question... I have been wondering the same. See my strand put in a few minutes ago. We need a very secured system integrated with Social Security and the Census to really get this right. Even then yes the Census would need a deep grab of data like it does every 10 years and I would begin doing 1 to 5 year "true-ups" that are not as in depth as the decade Census. But Off off those true-ups establish voter roles compared against each person SSN. Imagine also pulling corrections and court information and state motor records.

Only then could we really who is established to vote in the US and who is not?

Each motor vehicle/truck license is associated with social security number and a Multi-factor-authentication "something you have" (token) State Identity/License card and each SSN is provided a "something you know" (password) login to the voter system. There is one vote per SSN. IPHONEs and Androids could be used for the voter system and are tied through biometrics - something you are to the other two factors of authentication. All traffic to and from endpoints is encrypted over SSL. How is that for a thought. I am sure with this type of large government system there will be "snowflake" states and "big brother" pundits - but how else you verify one vote for, one non-convicted american citizen? These are just quick thoughts on subject...Thanks for the interesting question.

Now how pie in the sky is that?

[Caute_cautim]

@ogormrob   Not so Pie in the Sky as you think.   The World Bank is stating that Digital Identity is necessary for the growth and economic wealth of nations.  Link this to Fintech and Open Money initiatives, and you can quickly see why this is important.  

The situation needs to resolved, as the drive to get away from paper and pen for elections will come, but at what cost?    Trust, Ethics, Bias all come into play.   We need a digital transformation for elections to take place.

Regards

Caute_cautim