EIP in a Nutshell

Anybody interested in transparent elections? How about the ability to see your ballot immediately after your vote? How about being able to download the entire election and count all the votes yourself as the election is going on? How about being notified on the progress of the election as it is occurring? In order to do any of that, you’re going to have to be able to see your ballot after you voted (referred to as a "cast" ballot).

EIP is essentially a ballot marking process that supports the use of paper or electronic ballots. The basic idea is that in order to GUARANTEE free, fair and accurate elections, voters need to be able to physically locate their completed ballots. It turns out that

The ONLY WAY to conduct free and fair secret ballot elections allowing for 100% verifiable accuracy is by marking each ballot with some kind of unique auditing number known only to the voter

That's what EIP does. It enables ballot verification through auditing when hand counting paper ballots, and also when using machines. Here is how an electronic EIP Election works:

  1. Show up in person at a precinct to vote.
  2. Somebody makes sure you are eligible to vote. Once that is established, you are escorted over to a token table where you are randomly issued a ballot audit mark (BAM) that is also a part of your marked ballot. Only the voter knows which BAM (on their marked ballot) was assigned to them.
  3. Vote on paper ballots, a machine or any device (it doesn't matter anymore), and you are done. (In this case we are using a machine)
  4. Later on, use that BAM to look up your completed ballot on the web, your phone or other device. And count all the votes in the election for yourself if you so choose.

Now you can use your favorite device to not only trace your ballot, but also to follow the election results immediately and ultimately count all the votes all by yourself using a publicly available standardized EIP Cast Vote Records Ledger.

So there you have it, Election Integrity in a nutshell!

Going Old School

Those who have studied the protocol in detail believe the electronic ballot processed above is the fastest, most resource effective, most accurate, most likely cheapest, and least error-prone process anywhere in the world today. Another EIP alternative is to augment the tried-and-true approach of hand counted paper ballots. That process looks like this:

  1. Show up in person at a precinct to vote.
  2. Somebody makes sure you are eligible to vote. Once that is established, you are escorted over to a ballot issuance table where you are randomly and anonymously issued a marked ballot (a ballot with a BAM attached).
  3. Complete the paper ballot with your choices in private.
  4. Return your completed ballot to a registrar where it is placed in a queue for the teller committee to count and you are done. Now you can use the BAM to locate your physical ballot should you ever wish to.
  5. As a best practice, go ahead and scan each ballot so that it can be digitized for auditing purposes by anyone and everyone.

Note: Using hand counts, election results are never available immediately, only after the teller committee has completed their count. This can take some time, and it doesn’t scale well. However some people prefer to use this method, regardless. That’s fine, provided the ballot is marked and distributed as described above. Perhaps that approach is the best of both worlds? You decide.

As you can see, the protocol supports the processing of completed ballots either by paper or by “machine”. Voters should be able to use whichever process they choose. However, in some jurisdictions rogue legislatures have gone as far to make one of these approaches practically illegal. For example, in Colorado, hand counts of paper ballots are, believe it or not, not allowed in approximately 61 of the 64 counties in Colorado for public sector election thanks to the Democrat Party who passed this Orwellian legislation without voter approval, simply because they had the majority in all branches of government. Worse, the machine processes used are not EIP compliant since BAMs are also not allowed in Colorado (gee, I wonder why?).

Nevertheless, the Election Integrity Protocol supports the use of machines in this case without even touching the machines! Likewise, if machines are not allowed or not preferred, then you can use paper. The result will be the same in either case. Why? Because the completed ballot is now truly auditable.

Discussion

Whether a jurisdiction decides to count ballots by hand, or to run them through EIP compliant software systems, the process is the same because the machine process is derived directly from the hand count process. In fact, an EIP machine count is a hand counting of paper ballots without hand counting and without paper ballots! In other words, since both approaches can be configured to adhere to the protocol, either one can be used.

Token / BAM Assignment

Let’s dig into this process a little deeper. Suppose after you voted, you wanted to be able to look up your ballot to make sure that the candidates or issues you voted on are accurate. Basically, you want to perform a self-audit of the election all on your own. How would you go about doing that?

  • All you would need to do is stick your name on the completed ballot. Done.

Now you can look up your ballot to see that the values haven’t changed and you can download the entire election and count the votes yourself.

In many elections, this is sufficient because you don’t care that anyone sees how you voted. In fact, congressional elections (a form of Roll Call voting) require the identity of the voter, your congressman, to be listed.

But in other types of elections, where we vote for president for example, you absolutely do not want the identity of the voter to be exposed. In these cases where there is a requirement to separate your identity from your vote, you need to replace your name with something else in order to comply with the mandate of maintaining a "secret ballot". It needs to be unique for the election, and it needs to be known to you, but nobody can trace it back to you.

  • That thing is called a "ballot audit mark". It’s really nothing more than a vote tracking number for your completed ballot. A ballot that includes a unique BAM or token is referred to as a "marked" ballot. Logically, it's really just a number that allows you to track your completed ballot and as a result, the entire election is now auditable.

Let’s try to think of some examples: What about my Social Security number? Since it is unique, that would probably work - but I am uncomfortable with floating that around so let’s use something else like my phone number, my address, my driver's license number. What’s wrong with all of these? They are unique, but they can be traced back to me to identify who I am, and therefore to associate me with that ballot. So using any of those options as “tokens” for processing a BAM-enabled ballot is out of the question.

But, if we could figure out the perfect token to use and the proper manner in which to issue it, then we have solved the worlds problems with regard to elections, and we don’t have to kill each other over this. How about a randomly generated unique number? That works!

So now that you’ve been issued this token / ballot audit mark, what is it used for? Four things:

  1. You use it to vote by either attaching it to a paper ballot or by entering it into a computer application where the BAM is added as a new field to the electronic ballot (aka the "Cast Vote Record", often referred to as the CVR). The BAM is a permanent part of the ballot/CVR.
  2. Once you vote, you use the BAM as your personal tracking number. From now until the end of time, you will always be able to go back and verify your vote - no matter where or how it was counted or stored!
  3. Since the election provider issues the ballots, they know in advance which BAMs are valid because they created them! If any ballots are received with BAMs not in the original list, they are discarded. If any replicas are received, they are adjudicated.
  4. The BAM not only makes the election results transparent, it enables the election to be audited.

Ballot Issuance

Now that we understand how our ballot is tracked and is therefore auditable, let’s return to a discussion of how it might be issued. This is particularly important in elections where the identity of the voter must be kept away from their vote - a secret ballot election.

Imagine we have a set of pre-printed paper ballots with the associated ballot audit mark placed on every page of every ballot. All we have to do now is issue the ballot to the voter in an anonymous manner. This could be done in a number of ways, but one simple approach would be to allow the voter to choose their own ballot from among a randomly sorted pile of marked ballots. This way, only the voter knows which ballot they selected. Since the ballot is marked, they can use the tracking number on the ballot to look up their vote later on and verify it. All that’s left is to make sure the voter leaves the polling center with a copy of their notarized ballot.

That’s what the Election Integrity Protocol (EIP) does. It generates or processes an existing marked ballot which enables free, fair and 100% verifiable elections for any election worldwide.

Voting at Scale

Let’s take this a step further. Our token is now attached to our marked ballot, we can verify our vote and nobody else can trace it back to us. Assuming a machine count, the votes are being counted by a single company on a single centralized computer. Because of the BAM, this works just fine for smaller elections, but it doesn't scale well. As the electorate grows in size, wouldn’t it be better if multiple people or companies or universities or whoever could count the vote at the same time? And be able to see the same data at the same time as the election is occurring? Of course it would! That’s where distributed ledgers come in. A distributed ledger is nothing but a single ledger distributed across multiple physical locations. The ledger is logically a single database filled with everybody’s votes. Once the votes are written to the ledger, they cannot be changed, and everybody gets to see the same data immediately at the same time.

If everybody agrees that the vote totals are the same, then we have better assurance that the election totals are valid. In fact, we are guaranteed that they are valid if everybody verifies their own completed ballot. But even if they don't, we can be assured that the results are valid if a statistically significant number of them do - say between 3 and 24 percent of them depending on the desired confidence level and margin of error.

Finally, it would be even more reassuring if we could enhance data security as much as possible. While not entirely necessary, we can add Blockchain technology to these ledgers, in order to make them more robust. Note that neither distributed ledgers nor blockchains are required to make the protocol work, they only help with scalability and security, respectfully.

So what we have here is a bulletproof methodology that produces free and fair elections throughout the world that cannot be refuted or cheated. In fact,

If the protocol is followed, there is no way to come up with any other outcome than the truth

And when it comes to elections, what could be better than that?

None of your personal information is being collected, sold or distributed anywhere