Professional Documents
Culture Documents
SANFELIPE 11 91 19 8 14 12,796
986
board of election inspecto
• One(1)BEI foreveryclusteredprecinct
• Threeregularmembers
–Chairman
– Deliversballot tovoter
–Poll Clerk
–ThirdMember
• Support Staff
–Dependsonnumberof precinctsclustered
–Toassist Poll ClerkandThirdMemberin
managing
– Listof VoterswithVotingRecords
– Bookof Voters
board of election inspecto No.ofPrecincts
Clustered
No.ofSupport
Staff
Totalno.ofpersonnel
(BEI+SupportStaff)
0 none 3
2 none 3
3 1 4
4 2 5
5to7 3 6
voting • Votingperiod
– 7:00a.m.to6:00p.m.
• Unlesstherearevoterswaitingfortheirturnto
voteor withintheschool premises
– Poll Clerklistsdownnamesvotersqueuing
– Poll Clerkcallsvotertocastballot
– Voterwhofailstoappearafterbeingcalledtwiceshall
not longerbeallowedtovote
– Precinct set up
• At least 10voterscancast ballot at anyonetime
voting
• Beforevotingstarts
– Showthat ballot
boxisempty
• Transparent plastic
– Turnonand
initializePCOS
– Print “ZeroReport”
• Toshowthat there
isnoentry/votein
machine’smemory
ParaanngPagboto
1
(VotingProcess)
MagpakilalasaBoardof
ElectionInspectors(BEI)sa
presintokungsaankayo
nakarehistro. Matapos
mapatunayananginyong
pagkakilanlan,bibigyankayong
balotanamaymgapangalanna
ngmgakandidato.
establishing identity of vot
• LISTOFVOTERSWITHVOTINGRECORDS
– Photograph
establishing identity of vot
establishing identity of vot • If identitycannotbeestablishedthrough
photograph
– Comparesignatures
• UseBookofVoters
– Containsapplicationsforregistration
» Includesspecimensignatureofvoter
– Othermethodstochallengeidentity
• Pre-printednames
official ballots ofcandidates
• 300candidatescan
beaccommodated
– 150namesperside
ofballot
ParaanngPagboto(VotingProcess)
2
Gamitangmarker,
itimano i-shadeng
buoangbilogna
nasatabi ng
pangalannginyong
mganapiling
kandidato.
• Ovalsoppositenamesof • Shadeoval opposite
candidate nameofchosen
candidate
Official Ballots
TamangParaanngPag-shadesabalota. (Correct wayofshadinga
ballot)
|
C Okay!
pcos(precinct count optical scan)
• Oneunitperclusteredprecinct
• Voterpersonallyfeedsballotintomachine
• Ballotcanbefedatanyorientation
• Ballotscannedbothsidessimultaneously
CANFAKEBALLOTSBEFEDINTOTHEPCOS?
• No. The ballots contain several security features that
eliminate fraud. Ballots flagged by the machine as
invalidwillbereturnedandwillnotbecounted.
NOTE:Pencilmarksareeditable,andthereforenotrecommended.In
an extreme case where marks are maliciously edited after the
ballotshavebeencasted,countedandtransmitted,andanaudit
takesplace, thiscouldleadtoalotof suspicionandconfusionin
theprocess.
pcos (precinct count optical sca …andget droppedintotheballot boxthru
thischute…
Ballotsgoinhere…
pcos (precinct count optical sca
…andtheretheyare. :)
• Atcloseofpolls
– Performclose
function
• Toprevent
additional ballots
counting
frombeinginserted
– Afterclosefunction,
PCOSautomatically
• Startscounting
process
• Printselection
returnsafter
completionof
automatedcount
– Eight(8)copies
canvassing/consolidati
• Electronicallytransmittedresults
– Usedasbasisforcanvassing/consolidationand
proclamationofwinningcandidatesfor
• City/municipal officials
• Provincial officials
• Members, HouseofRepresentatives
• SenatorsandParty-list
– Congresswill alsoreceiveelectronically
transmittedresults
• ConstitutionauthorizedtheCongresstopromulgate
rulesforcanvassingofresultsforPresidentandVice-
President
• Inserttransmissioncable
– Afterprintingfirsteight(8)copiesofER
• ToeliminatedoubtsthatthePCOScanbemanipulated
counting
remotely
• Performelectronictransmissionfunction
• Printadditional twenty-two(22)copiesofER
– AutomaticallyperformedbyPCOSafter
completionoftransmission
HOWWILLTHEELECTIONRETURNS BE
TRANSMITTED?
• TheBEIthenconnectstheTransmissiondevicetothePCOSviatheEthernetport.
TheAutomatedCountingMachines isonly “connected” onceattheendofthe
votingday,andthendisconnectedaftertransmission.
• Thetransmissionprocesstakeslessthan2minutes/designation.
• Asinthemanualprocess,theresultsfromtheprecinctswillbetransmittedtothe
MunicipalCanvassingServer/Station.
• The municipal canvassing server canvasses all the results from the precincts
under its jurisdiction. Onceall theresults arecanvassed, theMBOC (Municipal
Board of Canvassers) can generate and print out the Municipal Certificate of
Canvassaswell astheStatementofVotes.Thisprocessisrepeated,transmitting
the results and printing the necessary reports in the Provincial and National
CanvassingStations.
HOWSUREAREWETHATRESULTSCANNOTBEINTERCEPTEDAND
ALTEREDDURINGTRANSMISSION?
• PriortotransmittingtheElectionReturns,thePCOSdigitallysigns
thefilesusingtheSHA256algorithmandencryptsthemusingthe
AES128algorithm.
• This encryption level is as good, if not better than most online
banking transactions, which are “connected” 24 hours a day,
sevendaysaweek.
• Bycontrast,theAutomatedCountingMachinesisconnectedonly
attheendof thevotingday, onlyfortheshortperiodneededto
send the information. This makes therisk of “hacking” virtually
impossible.
Congress COMELEC
National Board Manual Systemof
of Canvassers Physicaltransport
Canvassing
Prov. COC
Provincial SOVM/C
Boardof
Canvassers Physicaltransport
Mun./CityCOC
Municipal/City SOVP
Boardof
Canvassers
Physicaltransport
ElectionReturns
Precinct
Congress COMELEC
National Board Electronic
of Canvassers Physicaltransport
Transmission
Prov. COC
Provincial SOVM/C
Boardof ComelecCentral
Canvassers Back-upServer
Physicaltransport AdvanceResults/
Monitoring
Secured
Mun./CityCOC Public
Municipal/City SOVP Website
Boardof
Canvassers ServerforDominant
Physicaltransport
Majority/Minority
Parties, CitizensArm,
KBP
ElectionReturns AdvanceResults
Precinct
• Securitymeasuresunderamanual election
systemstill applicable
• Strengthensecuritythroughautomation
security
– Password
– PIN
– Digital signatures
– Encryption
-bit encryption
)
128
2
• 22 = 4 • 29 = 512 • 216= 65,536
• 23 = 8 • 210= 1024 • 217= 131,072
security (128
quintillion,374quadrillion,607trillion,431billion,
768million,211thousandand456
340,282,366,920,938,463,463,374,607,
431,768,211,456
• 128-bitencryption
– Samesecuritysystemusedbybanks
• RandomEncryption
security
– Temperatureofmachine
– Voltage
– Uniquemachineidentity
– Useridentity
• Nosingle/masterdecryptioncode
• Timeneededtodecryptoneprecinctresult
will besameamountoftimeneededto
decryptnextprecinctresult
• Transmissiontakesatmost2minutes
security
• Copiesfordistribution
– 30copiesofelectionreturnsattheprecinctlevel
– 30copiesofcertificateofcanvassatmunicipal
level
– 14copiesofcertificateofcanvassatprovincial
level
• AuditLog
– Activities
– Time
– Date
security
ISTHEREANYASSURANCETHATTHEHARDWAREANDSOFTWARETHATTHE
AESWILLUSEARESAFEANDSECURE?
• Yes.
• Security andsystemintegrityare overriding
concerns before, during, and after the
elections.
A.PRE-ELECTIONS
• Source-CodeAudits–Thesystemwillundergothenecessarysource-codeaudits
(by an Independent International Source Code Auditor, political parties and
interestedparties)asprescribedbylaw.
• Testing – Before the Automated Counting Machines are deployed for the
elections, the technology will be tested and certified by the DOST and will
undergo2-3FieldTeststofine-tunethesystem,andaMockElectiontosimulate
theactualconditionsintheelections.
• Pre-SealingEvent–ThreedaysbeforetheElections,alltheAutomatedCounting
Machines will have been deployed to all the voting centers throughout the
country. DuringthePre-SealingEvent, theBEIs, witnessedbytheWatchersand
representatives of thepolitical parties involved, will test the systemandmake
surethatthetechnologywillfunctionasexpected.
B.DURING
• Accessing the System– The BEIs access the administrative menu of the systemby
positioningtheSecurityKeyonthecontactpointfirmly.TheBEIwouldthenbeshowna
newpageintheTouchScreenpanel---theAdministrativeMenu.
– Openingof theElections– ToopentheElections, theBEI wouldpress the START
button on the touch screen. The systemwould then prompt the BEIs for two
passwords succcession. Upon opening, the systemwould automatically print the
ZEROVOTEDOCUMENT.
– ZEROVOTEDOCUMENT- ThisreportisbasicallyanERshowingzerovotesforeach
candidate ineachcontest. This is the automatedversionof publicly inverting the
ballot box in themanual process, showing that the box has not been previously
stuffedwithvotes.ThereportwouldthenbesignedbytheBEIsandthewatchers.
• The Automated Counting Machines captures an image of each of the ballot cast.
Furthermore,thatsameimagewouldbeappendedwithahuman-readablereportofhow
theAutomatedCountingMachines interpretedthemarks. Incasesof recounts,wecan
reviewtheballotimages,andseeataglancehowthemarkswereevaluated.
WHATHAPPENSIFAVOTERSELECTS LESS
CANDIDATESTHANEXPECTED?
• It’s called an under-Vote. Under-votes are valid
votes, and will be interpreted by the system
accordingly. For example, for a contest where the
voter can select a maximum of 12 candidates,
choosing a number of candidates less than the
expected12isstillvalidandwillbecounted.
WHATHAPPENSIFAVOTERSELECTMORE
CANDIDATESTHANEXPECTED?
• It’s called an over-vote. The systemwill not accept
over-votingforanycontest.Shouldtherebeaninstance
of over-vote for a particular contest (for example,
voting for 2 candidates in the President contest), that
contest will not be counted. However, the other
contestswouldstillbeevaluatedandcounted,provided
thatthosecontestswerenotover-votedin.
INCASEOFMASSIVEBLACKOUTS ONMAY10, COULDIT
LEADTOFAILUREOFELECTIONS?
• NO. TheDepartment of Energycanandshouldprioritize
May10,2010 NationalElections.
• Therearealwaysportablegenerators providedbythepoll
watchers,politicalparties,amongothersduringelections.
• Thisassures therewillbeinternetaccessfromatleast2to
3carriersperpollingprecinctnationwide.
• Intheremoteislandprecinctswherethecarriersmayfind
difficulty in extending their servicecoverageandas back-
up,mobilesatellitetechnologywillbeused.
• It isexpectedthattheseremoteislandprecinctswill cover
less than 1%of the 40k polling centers with an average
voting population of 200 to 400 per clustered precinct, a
totalofapproximately200kvotes.
• -ElectronicallytransmittheER,togetherwiththeprecinct’s
statisticalreportandthePCOSunit’sauditlogreporttothe
followingdestinations:
-city/municipalBOC; provincialBOC;
-NBOCsofCOMELECandCongress;
-Dominantmajorityparty,Dominantminorityparty;
-Accreditedcitizens’arm,andKBP;and
-Centralserver.
CANMALICIOUSENTITIESINSERTAVIRUS
INTOTHEPCOS?
• No.Firstofall,physical accesstothesystemislimitedto2
memory card slots, whichwill be secured using a serially
labeledlock.Theselockswouldprevent,ormakeitobvious
that the machine has been tamperedwith. Furthermore,
theOperatingSystemusedinthePCOSisLinux,whichasa
platformis verysecure, employingaccess controls tolimit
the activities of profiles. This Operating System
environment will not tolerate the presence of virus and
malware, or at the very least, prevent such malicious
programmingfromrunning.
HOWSOONWILLTHEWINNERSBE
DETERMINED?
• Based on experience, 90% of results would arrive
between4 to6 hours after theclose of polls. Factors
that may delay the process are delays in transmission
duetonetworkunavailabilityandtheneedtoundergo
contingency procedures (contingency transmission
system).Furthermore,notallpollingplacesarereadyto
attheexactclosingtime,dependingonvoterpresence
andaccommodationofvotersbeyondtheclosingtime,
asprescribedbylaw.
CANAFAILUREOFELECTIONSHAPPEN?
• NO. It isnot possible. Asthevoterswill still bevoting
usingpaper(it is still a“paper-based”elections),there
is nochanceof failureof elections. Shouldthevoting
machines, despiteall theprecautions andcontingency
procedures inplace, still fail intheprecinct, thevoters
can still resort to “manual” elections --- using the
ballots.Theholdingofelectionsarenotdependentand
“held hostage” by the performance of the voting
machines.
successful implementati
• Vigilanceofcitizenry
• Cooperation
• Coordination
• Support
Salamatpo!