1. TGDC Meeting, Jan 2011 Report from Workshop on UOCAVA Remote Voting Systems Nelson Hastings National Institute of Standards and Technology http://vote.nist.gov

2. TGDC Meeting, Jan 2011 Page 2 Overview Held in Washington, DC on August 6-7, 2010 Co-sponsored by the Election Assistance Commission (EAC), DoD’s Federal Voter Assistance Program (FVAP), and the National Institute of Standards and Technology (NIST) About 100 attendees from federal agencies, state and local election offices, industry, and academia Explored technical issues associated with remote electronic absentee voting systems for military and overseas voters

3. TGDC Meeting, Jan 2011 Page 3 Original Goal Establish a comparative threshold for an acceptable level of risk by identifying accepted risks of the current UOCAVA voting process Develop measures and/or criteria for comparing risks of remote electronic absentee systems to those of the current system.

4. TGDC Meeting, Jan 2011 Page 4 Day One Opening address by FVAP on Challenges and Issues Keynote and Invited Talk on Technical perspectives on UOCAVA voting systems Panel on Maintaining Effectiveness in a Hostile Environment Presentation from a UOCAVA manufacturer Two Invited Talks on Lessons learned from previous UOCAVA pilot projects These sessions set the stage for discussions during breakout sessions on day two

5. TGDC Meeting, Jan 2011 Page 5 Updated Goal Evaluate the level of security, usability, accessibility and access of the UOCAVA voting process using the postal mail to return marked ballots Identify desirable properties of future UOCAVA voting systems.

6. TGDC Meeting, Jan 2011 Page 6 Day Two Attendees were asked to participate in one of three day long breakout sessions to explore specific areas in more detail Voter Authentication and Privacy Auditability Network and Host Security The breakout sessions had three co-chairs that represented the election, security, and accessibility and usability communities

7. TGDC Meeting, Jan 2011 Page 7 Day Two (2) Voter Authentication and Privacy session Discussed when is authentication needed Identified architectures for blank ballot delivery Push verse pull models Identified characteristics of blank ballot delivery systems Mapping voters to ballot style Authentication ballots on return Ballot accounting

8. TGDC Meeting, Jan 2011 Page 8 Day Two (3) Auditability session Discussed auditing issues in the current UOCAVA system Transcription of voted ballots Identified end-to-end voting systems as away to provide auditability throughout the election process Identified properties of auditable system Audit of system performance Confirming ballots were counted correctly Integrity of records Public transparency

9. TGDC Meeting, Jan 2011 Page 9 Day Two (4) Network and Host Security session Discussed demographics of UOCAVA voters Who they are Where are they located Discussed risk of mail based and electronic transmission of ballots Consensus was timely delivery of ballots could be greatly improved using electronic methods Consensus was ballot returned via email was least secure method Brainstormed ~60 desirable properties (-ilities) Interoperability Auditability Forens-ability

10. TGDC Meeting, Jan 2011 Page 10 Workshop Outcomes Report from Workshop on UOCAVA Remote Voting Systems Summary of the plenary session and the discussions in the breakout groups Draft of report has been reviewed by Co-chairs of breakout sessions Will distribute to workshop participants for comment Final report released March 2011

11. TGDC Meeting, Jan 2011 Page 11 Workshop Outcomes (2) Workshop on Secure Ballot Delivery San Francisco in February/March 2011 Develop draft requirements for secure ballot delivery for consideration by FVAP, EAC, and NIST Organized by participants of the August 2010 workshop Workshop on End-to-End Cryptographic Voting Systems for UOCAVA Voters August/September 2011

12. TGDC Meeting, Jan 2011 Discussion Page 12