FIELD OF INVENTION

This invention relates broadly to data replication and synchronisation and more specifically to a voter registration method and system operable to populate, validate and maintain a voters' roll. BACKGROUND OF INVENTION

It is essential to the democratic process to have an accurate and complete voters' roll. The Applicant has noted difficulties especially in less developed countries in gathering and validating voter details. Reasons for this include lack of infrastructure (both telecommunications and power supply), isolation or rural nature of some of the population, shortage of skills, corruption, etc.

The challenge is two-fold. First, voter details (usually biographic and biometric data) for each potential voter must be gathered, validated and stored centrally. Next, these details must be made available for voting, e.g. by means of publication of a voters' roll on or before voting day.

The Applicant desires a voter registration method and system which overcomes these problems and which a suitable for use in rural or less developed countries.

SUMMARY OF INVENTION

According to a first aspect of the invention, there is provided a voter registration method which includes:

receiving a plurality of intermittent voter registration messages from remote, distributed voter registration devices, the voter registration messages including voter details; collating the plurality of voter registration messages and validating the voter registration details contained therein;

populating a central voter registration database with the validated voter details;

generating a voters' roll from the voter registration database after completion of voter registration; and

sending a voters' roll message to a plurality of voter verification devices, the voters' roll message including the voters' roll. The voter registration messages may be received from a plurality of distributed data capture consoles. The data capture console may be as illustrated in South African registered design no. A2010/00968.

Voter details may include biographic information (e.g. name, address, identification number, etc.) and/or biometric information (e.g. fingerprint, photograph, iris scan, etc.).

There may only be intermittent connectivity with the data capture console.

Thus, the method may include:

establishing a data connection with the data capture console; and receiving the voter registration message containing an incremental update of voter details captured since the last data connection (if any) was established. The step of validating the voter registration details may include:

comparing the voter details in a newly received voter registration message with the voter details already stored in the voter registration database; and

raising an alert if there is a match, conflict, inconsistency, or the like.

The steps of receiving the voter registration messages and validating the voter details may occur independently and simultaneously. Thus, the receipt of the voter registration message may not delayed by the validation process. The voter details may be stored in the voter database prior to their validation with validation being performed some time later.

In the event that voter details fail the validation (in other words, there is a conflict), the method may include resolving the conflict manually or automatically.

If the conflict is to be resolved automatically, the method may include applying pre-defined or pre-definable conflict resolution rules to the conflict. If the conflict is to be resolved manually, the method may include sending a conflict message to an operator and prompting the operator for a response. The method may then include receiving a resolution message from the operator and resolving the conflict in accordance with the resolution message. The method may include:

receiving a plurality of intermittent voter validation messages from voter validation devices, the voter validation messages including validated details of voters attempting to vote; and

updating the voters' roll to include the validated details.

The messages may be sent over a telecommunications network. The telecommunications network may be a packet-switched (e.g. IP) network and may include Internet-based infrastructure (e.g. ADSL lines) and mobile network infrastructure (e.g. using GSM, CDMA, 3G, HSPA, LTE, etc.).

In one embodiment, the voter registration device and the voter verification device may be the same device. In another embodiment, they may be different devices. The voter registration device and/or the voter verification device may be portable electronic devices intended for use in the field. They may be powered by a device or system as described in South African patent no. 2009/04830.

The method may include the step of publishing the voters' roll for public inspection and, if desired, comment or amendment. The method may include receiving a voter registration message including GPS co-ordinates as an indication of where the voter details were captured. The invention extends to a voter registration system which includes:

a computer server having a communication arrangement operable to receive a plurality of intermittent voter registration messages from remote, distributed voter registration devices, the voter registration messages including voter details;

a voter registration database in electronic communication with the server;

a validation module operable to:

collate the plurality of voter registration messages and validate the voter registration details contained therein; and populate the voter registration database with the validated voter details; and

a generation module operable to:

generate a voters' roll from the voter registration database after completion of voter registration; and

send, via the communication arrangement, a voters' roll message to a plurality of voter verification devices, the voters' roll message including the voters' roll.

The computer server is further referred to as a voter server.

The modules may be conceptual modules corresponding to tasks performed by a computer processor. To this end, the system may include a computer- readable medium, e.g. main memory, and/or a hard disk drive, which carries a set of instructions to direct the operation of the processor, the set of instructions for example being in the form of a computer program. It is to be understood that the processor may be one or more microprocessors, controllers, or any other suitable computing device, resource, hardware, software, or embedded logic. Further, the system need not necessarily be consolidated into one device, and may be distributed among a number of devices.

The system may include a backup or redundant server in case the voter server fails.

The system may include a voter registration device and/or a voter verification device in communication with the voter server. The voter registration device may include a GPS module. The device may then be operable to determine a GPS location, using the GPS module, of the device when the voter details were captured by the device.

According to another aspect of the invention, there is provided a method of validating a voter, the method including:

receiving, via a communication arrangement, a voters' roll message from a remote server, the voters' roll message including a voters' roll; storing the voters' roll locally;

receiving, via an input arrangement, voter details from a prospective voter during a voting attempt;

comparing the received voter details with the stored voter details and displaying the result of the comparison on a display screen and also storing the result locally; and

sending, via a communication arrangement, a voter validation message, including validated details of the comparison between the received details and the stored details and whether the voter was permitted to cast a vote.

The sending of the validation messages may be done intermittently when a usable telecommunications connection is available.

Thus, according to another aspect of the invention, there is provided a voter verification device which includes: a communication arrangement operable to receive a voters' roll message from a remote server, the voters' roll message including a voters' roll;

a local datastore on which the voters' roll is stored;

an input arrangement operable to receive voter details from a prospective voter during a voting attempt;

a verification module operable to compare the received voter details with the stored voter details and store the result at least temporarily on the local datastore; and

a display screen operable to display the result of the comparison, the communication arrangement further being operable to send a voter validation message including validated details of the comparison between the received details and the stored details. The received details may be biometric details (e.g. a fingerprint) in which case the input arrangement may be a biometric reader (e.g. a fingerprint reader).

The communication arrangement may be a modem, e.g. a wireless 3G modem.

The invention extends further to a computer-readable medium having stored thereon a set of instructions which, when executed by a computer, is operable to direct the operation of the computer to perform a method as defined above. BRIEF DESCRIPTION OF DRAWINGS

The invention will now be further described, by way of example, with reference to the accompanying diagrammatic drawings. In the drawings:

Figure 1 shows a schematic view of a network topology embodying a voter registration system in accordance with the invention;

Figure 2 shows a schematic view of a voter server of the system of Figure

1 ; Figure 3 shows a three-dimensional view of a voter verification device of the system of Figure 1 ;

Figure 4 shows a flow diagram of a broad voter registration method in accordance with the invention;

Figure 5 shows a flow diagram of a more specific voter registration method in accordance with the invention; and

Figure 6 shows a schematic view of a computer within which a set of instructions, for causing the computer to perform any one or more of the methodologies described herein, may be executed.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENT

Referring initially to Figure 1 , reference numeral 100 generally indicates a network topology embodying a voter registration system in accordance with the invention. The system includes a voter server 102 (further described in

Figure 2) in communication with a voter registration database 104.

The voter server 102 is connected via a telecommunications network 106 to a plurality of voter registration devices 108 and voter verification devices 1 14. Only two of each device 108, 1 14 are illustrated, for brevity, but it will be appreciated by one skilled in the art that the system 100 is massively scalable and that there may be many more devices 108, 1 14 depending on the specific implementation. The telecommunications network 106 includes a combination of the Internet, mobile telephone networks, communication gateways, and the like.

Each voter registration device 108 includes a local datastore 108.1 which is operable to store, at least temporarily, data captured by the registration device 108. Further, the registration device 108 includes a communication arrangement (such as a wireless 3G modem, although the specifics of the communication arrangement are not germane to this invention) which is operable to communicate data to the voter server 102. A communication link 1 10 servicing the voter registration device 108 may be unreliable and only provide transient or intermittent connectivity. The voter registration device 108 includes a user interface having a touch screen and fingerprint reader and is operable to capture voter details (or more accurately details of registrants 1 12 who wish to be eligible to vote at a later date) and send a voter registration message including the voter details across the telecommunications network 108 when the link 1 10 is operative.

Each voter verification device 1 14 (illustrated in Figure 3) includes a user interface in the form of a touch screen 151 , a biometric reader in the form of a fingerprint reader 150, a local datastore 1 14.1 and a communication arrangement. The communication arrangement may vary depending on the implementation and in this example includes a SIM card slot 152 for receiving a SIM card to identify the device 1 14 on a cellular network, network and USB ports 154, and GPS & 3G antenna mounts 156. A generated voters' roll is communicated to the voter verification device 1 14 and stored on the local datastore 1 14.1 .

The voter verification device 1 14 is operable to read a fingerprint when a voter 1 1 6 (or person attempting to vote) presents his finger to the fingerprint reader 150. The voter verification device 1 14 can then compare the read fingerprint with registration data in the voters' roll to determine whether or not the voter 1 1 6 is permitted to vote. The result of the determination is displayed on the screen 151 and a voting official can proceed accordingly. The result of the determination is also transmitted to the voter server 102 when the intermittent link 1 10 is available.

Referring now to Figures 2 and 4, the voter server 102 is illustrated in more detail and a basic method 300 is illustrated. The voter server 102 includes a processor 202 which defines a plurality of conceptual modules, namely a validation module 204 and a generation module 206. The voter server 102 also includes a set of instructions in the form of a computer program 208 to direct the operation of the processor 202 and optionally other peripheral devices. The voter server 102 also includes a communications arrangement 210 which is in the form of a conventional network interface (e.g. DSL modem or network card).

The voter server 102 is in communication with the voter registration database 104 which could be integral with (e.g. hosted by) the voter server 102 or remotely networked thereto.

The voter server 102 is operable to receive (at block 302) via the communication arrangement 210 a plurality of intermittent voter registration messages from the plurality of remote, distributed voter registration devices

108. The various voter registration messages are collated and the voter details are extracted and validated (at block 304) by means of the validation module 204 to eliminate or at least reduce duplicate and fraudulent registrations. The voter database 104 is populated (at block 306) with the validated voter registration details. Finally, once registration has closed, a voters' roll is generated (at block 308) by means of the generation module 206 and sent (at block 310) to the various voter validation devices 1 14 in contemplation of voting day (or days). The invention will now be described with reference to Figure 5 and a more practical example. An example, hypothetical country wishes to host a fair election. Perhaps infrastructure (e.g. administrative, telecommunications, etc.) in the country is not very developed and is not at the levels of that of more developed countries. Thus, prior art voting solutions aimed at developed countries might not be workable and a system 100 in accordance with the invention is employed.

Plural voter registration devices 108 are deployed throughout the country. These voter registration devices 108 can be powered by solar power or battery power, for example by a device as described in South African patent no. 2009/04830, and are thus readily portable. They also employ a wireless communication arrangement (not illustrated). Each voter registration device 108 is operated by a human operator and is capable of capturing the requisite details for enabling a registrant 1 12 to be permitted to vote. The operator questions the registrant 1 12 for biographic details (e.g. name and identification number) and supporting documentation (e.g. passport) may be required. The registrant 1 12 is then required to press one or more fingers to the fingerprint reader, a facial photograph is taken and the registrant 1 12 is required to sign on a signature panel to gather biometric details. The voter registration device 108 may be the same device as the voter verification device 1 14 (Figure 3). In this fashion, voter registration details are captured (at block 402). Optionally, a voter's card (e.g. credit card size) including name and photograph can be printed and issued to the registrant 1 12.

These captured voter details need to be communicated to the voter server 102. However, because the telecommunications infrastructure is underdeveloped, the communication link 1 10 may be intermittently unavailable. The voter registration device 108 determines (at block 404) whether or not the link 1 10 is available. If so, a voter registration message incorporating the captured voter details is generated and sent (at block 408) to the voter server 102 via the telecommunications network 106. If not, the voter details are stored (at block 406) locally on the datastore 108.1 until such time as the link 1 10 is available. It will be appreciated that the voter details of a plurality of registrants 1 12 may be stored on the datastore 108.1 . It could be hours or days before the link 1 10 becomes available. Once the link is available, all stored details are transmitted to the voter server 102 and if desired the datastore 108.1 can be purged. In this fashion, data from the voter registration devices 108 can be reliably replicated on the voter database 104, even though the link 1 10 is unreliable.

The steps 402 to 408 are repeated many times for each voter registration device 108. Thus, the voter server 102 receives a multitude of these voter registration messages from all over the country, thereby gathering comprehensive voter details even of registrants 1 12 in very rural areas with no access themselves to telecommunications services or home/internal affairs offices. Steps 302 to 310 of Figure 5 are similar/identical to those of Figure 4. The validation process (at block 304) could be done in accordance with customisable rules. For instance, different registered voters should not have the same fingerprint or identification number. In this example, an available industry leading AFIS (Automatic Fingerprint Identification System) is used for duplicate detection. In the case of conflicts or duplicates, an alert may be escalated to a system administrator for adjudication and resolution.

Although not illustrated in Figure 5, once the voters' roll is generated (at block 308) it may be published for public inspection. It could be sent to government printers for printing and display at polling stations. If a registrant 1 12 notices an error, he may request an amendment. The amendments may be made via the voter registration device 108 in a similar manner to which the registration was done.

Once the voters' roll has been finalised, a voters' roll message is sent (at block 310) from the voter server 102 and received (at block 410) by each of the plurality of voter verification devices 1 14. The voters' roll is extracted from the received voters' roll message and is stored locally in the datastore 1 14.1 . The voters' roll message is sent prior to voting day so that it is stored locally beforehand. The reason for this is that it may not be possible to link from the voter verification device 1 14 to the voter server 102 on voting day, especially if the voter verification device 1 14 is deployed in an outlying or rural area. When a voter 1 16 endeavours to vote, he will need to identify himself. In this example, he presents his voter's card to an operator of the voter verification device 1 14. The operator retrieves voter details from the locally stored voters' roll. These details are displayed on the display screen and the operator can compare them with the details on the card and with the voter 1 1 6 himself (e.g. compare the photograph to the person). The voter 1 1 6 is then prompted to apply his finger to the fingerprint reader of the voter verification device 1 14 which compares (a block 41 6) it with the details on the voters' roll thereby to determine (at block 417) whether or not the voter 1 16 is validly registered to vote. If so, an affirmative message is displayed (at block 418) and the voter 1 18 is permitted to cast his ballot in conventional fashion. If not, an error message is displayed (at block 420) and the voter 1 18 is prohibited from voting. The voter verification device 1 14 determines (at block 422) whether or not the communications link 1 10 is operative and the results of the comparison and whether the voter was permitted to cast a vote are transmitted (at block 426) in a voter validation message to the voter server 102 if the communication link 1 10 is operative, or stored (at block 424) locally for later transmission if not.

The voter server 102 receives (at block 428) a plurality of voter validation messages from the multiple voter verification devices 1 14. The voter server 102 updates the voters' roll accordingly so there is an audit trail of who voted and who did not (although details of their actual vote are not available and are not stored).

Referring now to Figure 6, an example computer system 500 includes a processor 502 (e.g. a central processing unit (CPU), a graphics processing unit (GPU) or both, a main memory 504 and a static memory 506, which communicate with each other via a bus 508. The computer system 500 may further include a video display unit 510 (e.g. a liquid crystal display (LCD) or a cathode ray tube (CRT)). The computer system 500 also includes an alphanumeric input device 512 (e.g. a keyboard or touch screen), a user interface (Ul) navigation device 514 (e.g. a mouse or touch screen), a disk drive unit 51 6, a signal generation device 518 (e.g. a speaker) and a network interface device 520.

The disk drive unit 516 includes a computer-readable medium 522 on which is stored one or more sets of instructions and data structures (e.g. software 524) embodying or utilised by any one or more of the methodologies or functions described herein. The software 524 may also reside, completely or at least partially, within the main memory 504 and/or within the processor 502 during execution thereof by the computer system 500, the main memory 504 and the processor 502 also constituting machine-readable media. The software 524 may further be transmitted or received over a network 526 via the network interface device 520 utilising any one of a number of well- known transfer protocols (e.g. HTTP).

While the computer-readable medium 522 is shown in an example embodiment to be a single medium, the term "computer-readable medium" should be taken to include a single medium or multiple media (e.g. a centralised or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term "computer-readable medium" shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by the computer and that cause the computer to perform any one or more of the methodologies of the present embodiments, or that is capable of storing, encoding or carrying data structures utilised by or associated with such a set of instructions. The term "computer-readable medium" shall accordingly be taken to include, but not be limited to, solid-state memories, optical and magnetic media, and carrier wave signals. The voter server 102, voter registration device 108 and/or voter verification device 1 14 may be in the form of, or include at least some of the components of, the computer system 500.

The Applicant believes that the invention as exemplified has numerous advantages. It provides a workable voter registration and voter verification solution in countries/regions with under-developed infrastructure (although it could naturally also be applied to countries with a developed infrastructure). The solution proposed by the invention is massively scalable and can continue to be fully functional even when communicating with thousands of voter registration devices 108 and/or voter verification devices 1 14.

The local datastore 108.1 , 1 14.1 of these devices 108, 1 14 allows for storage of data (e.g. voter details) when the communication link 1 10 is unavailable and synchronisation and replication of data when it becomes available. In this fashion, a reliable voters' roll can be generated incorporating even remote voters who otherwise might have had no access to voter registration facilities. Similarly, a voters' roll can be reliably and remotely distributed, thus enabling a fair election in that voters 1 16 validly registered to vote are permitted to do so, and those not are prevented from doing so.