Login| Sign Up| Help| Contact|

Patent Searching and Data


Title:
VOTING APPARATUS AND METHOD OF RECORDING VOTES
Document Type and Number:
WIPO Patent Application WO/2004/032065
Kind Code:
A1
Abstract:
A voting apparatus for use in an election includes a voter terminal (2), a presiding officer module (4) and an organiser module (6). The voter terminal (2) includes a voter module (10) and a plurality of candidate selection modules (14), each candidate selection module including at least one candidate selection switch (12) and means (60) for generating an electronic selection signal representing a selected candidate. The candidate selection modules (14) may be connected to the voter module (10) in a plurality of different configurations, to adapt the voter terminal (2) according to the number of candidates and/or rules of the election.

Inventors:
LEE ANTHONY CHRISTOPHER JOHN (GB)
Application Number:
PCT/GB2003/004254
Publication Date:
April 15, 2004
Filing Date:
October 03, 2003
Export Citation:
Click for automatic bibliography generation   Help
Assignee:
DRS DATA & RES SERVICES PLC (GB)
LEE ANTHONY CHRISTOPHER JOHN (GB)
International Classes:
G07C13/00; (IPC1-7): G07C13/00
Foreign References:
FR2739474A11997-04-04
US3744713A1973-07-10
US3162362A1964-12-22
DE4446728A11996-06-27
US6250548B12001-06-26
Attorney, Agent or Firm:
Raynor, Simon Mark (Midsummer House 413 Midsummer Boulevard, Central Milton Keynes MK9 3BN, GB)
Download PDF:
Claims:
CLAIMS
1. A voting apparatus for use in an election, the voting apparatus including at least one voter terminal for use by voters to cast votes for selected candidates, said voter terminal including a voter module and a plurality of candidate selection modules, each candidate selection module including at least one candidate selection switch and means for generating an electronic selection signal representing a selected candidate, wherein said candidate selection modules may be connected to the voter module in a plurality of different configurations, to adapt the voter tenninal according to the number of candidates and/or rules of the election.
2. An apparatus according to claim 1, wherein the voter module includes means for confirming and/or cancelling the selection of a candidate.
3. An apparatus according to claim 1 or claim 2, wherein the voter module includes means for generating a vote signal representing a selected candidate.
4. An apparatus according to any one of the preceding claims, wherein the voter module includes an interface for communicating with a remote terminal.
5. An apparatus according to claim 4, wherein the voter module includes means for transmitting vote signals to the remote terminal.
6. An apparatus according to claim 4 or claim 5, wherein the voter terminal is controllable via control signals received from the remote terminal, the controllable function. s including an activation/deactivation function.
7. An apparatus according to claim 6, wherein the controllable functions include a test function.
8. An apparatus according to any. one of the preceding claims, wherein each selection module includes at least one connecting element for connecting the module with an adjacent voter module.
9. An apparatus according to any one of the preceding claims, wherein each selection module includes at least one electrical connector for connection with an adjacent voter module.
10. An apparatus according to claim 9, wherein the electrical connector includes a serial bus.
11. An apparatus according to any one of the preceding claims, wherein each selection module includes a programmable microcontroller.
12. An apparatus according to claim 11, wherein each microcontroller is programmable to store a unique identification address.
13. An apparatus according to any one of the preceding claims, wherein said plurality of selection modules may be assembled to fonn a twodimensional array.
14. An apparatus according to any one of the preceding claims, wherein. the voter terminal includes a legend module for displaying details of the candidates.
15. An apparatus according to claim 14, wherein the legend module is constructed and arranged to receive a printed label bearing details of the candidates.
16. A voting apparatus according to any one of the preceding claims, including a remote terminal, the remote terminal including input/output means for communicating with a voter terminal, vote detection means for detecting selection signals generated by the voter terminal, and data storage means for storing data contained in the selection signals.
17. An apparatus according to claim 16, wherein the remote terminal includes means for transmitting an activation/deactivation signal to the voter terminal.
18. An apparatus according to claim 16 or claim 17, wherein the remote terminal includes means for transmitting a test signal to the voter terminal.
19. A voting apparatus according to any one of claims 16 to 18, wherein the remote terminal includes means for assigning unique addresses to the voter modules making up the voter terminal.
20. A voting apparatus according to any one of claims 16 to 19, the apparatus including an organiser terminal that may be interconnected with the remote terminal said organiser terminal including means for downloading election rules to the remote terminal.
21. A voting apparatus according to claim 20, wherein the organiser tenninal includes storage means for storing votes transferred to it from the remote terminal.
22. A method of recording votes in an election, the method comprising assembling a modular voter tenninal according to the number of candidates and/or rules of the election, the voter terminal including a voter module and a plurality of candidate selection modules that may be connected to the voter module in a plurality of different configurations, each candidate selection module including at least one candidate selection switch and means for generating an electronic selection representing a selected candidate, and recording votes cast by voters by detecting and recording electronic selection signals generated by the voter terminal.
23. A method according to claim 22, in which the electronic selection signals are recorded by a remote terminal.
24. A method according to claim 23, wherein the voter terminal is controlled', Via control signals received from the remote terminal, the controlled functions including an activation/deactivation function.
25. A method according to claim 23 or claim 24, wherein each selection module is assigned a unique identification address by the remote terminal.
26. A method according to any one of claims 23 to 25, wherein election rules are downloaded to the remote terminal from an organiser terminal.
27. A method according to claim 26, wherein recorded votes are downloaded from the remote terminal to the organiser terminal.
Description:
VOTING APPARATUS AND METHOD OF RECORDING VOTES The present invention relates to a voting apparatus and a method of recording votes. In particular, but not exclusively, the invention relates to an apparatus and a method for recording and counting votes, and in a preferred embodiment provides a flexible and modular apparatus and a method for electronically recording and counting votes for many varied types of elections.

The process of holding a ballot to enable people to vote secretly is central to a democratic system. The traditional method of voting is by placing a mark on a ballot paper and placing the paper into a ballot box. There are many advantages to this process. It is simple and well understood by most people. It requires very simple equipment, that is paper, pens and boxes. For large ballots it is easy to have multiple"polling stations"to ensure voters are not disadvantaged by their physical location. Secrecy of marking the ballot paper is easy to achieve. Many different types of election can be held using the same process.

However, a major problem with the process is the time and effort required to perform a manual count. The counting time and effort may be acceptable for a simple ballot (e. g. one vote,"first past the post"winner) but can become extremely difficult for more complex ballots (e. g. two or more votes, proportional representation). For this reason a number of electronic counting and electronic voting systems have been proposed.

These electronic counting systems fall into two broad categories.

Firstly, there are systems which aim to maintain the use of a ballot paper but use machines to count the marks on the papers once all votes have been cast. Although this can be quicker than a manual count it still requires all ballot papers to be"scanned"as a mechanical process and in the case of a large scale ballot requires a large number of complex machines. This results in a process that is still quite time and labour intensive and is relatively expensive.

Secondly, there are electronic voting systems which aim to remove the ballot paper and replace it with an electronic device of some kind (e. g. a computer terminal with touch sensitive display). Such systems suffer from the disadvantage that they are expensive. One

or more computer terminals with display need to be available in each polling station and for particular elections this may require thousands of devices. Also, use of the equipment can be complicated because the display is of a fixed size and may not be able to display all candidate details at one time. Therefore the voter is required to select more than one screen of information before voting.

According to a first aspect of the present invention there is provided a voting apparatus for use in an election, the voting apparatus including at least one voter terminal for use by voters to cast votes for selected candidates, said voter terminal including a voter module and a plurality of candidate selection modules, each candidate selection module including at least one candidate selection switch and means for generating an electronic selection signal representing a selected candidate, wherein said candidate selection modules may be connected to the voter module in a plurality of different configurations, to adapt the voter terminal according to the number of candidates and/or rules of the election.

The voter module may include means for confirming and/or cancelling the selection of a candidate.

The voter module may include means for generating a vote signal representing a selected candidate.

Preferably, the voter module includes an interface for communicating with a remote terminal.

Preferably, the voter module includes means for transmitting vote signals to the remote tenninal Preferably, the voter terminal is controllable via control signals received from a remote terminal, the controllable functions including an activation/deactivation function.

Preferably, the controllable functions include a test function.

Preferably, each selection module includes at least one connecting element for connecting the module with an adjacent voter module.

Preferably, each selection module includes at least one electrical connector for connection with an adjacent voter module. Preferably, the electrical connector includes a serial bus.

Preferably, each selection module includes a programmable micro-controller. Preferably, each micro-controller is programmable to store a unique identification address.

Preferably, the selection modules may be assembled to form a two-dimensional array.

Preferably, the voter terminal includes a legend module for displaying details of the candidates. The legend module is preferably constructed and arranged to receive a printed label bearing details of the candidates.

Preferably, the voting apparatus includes a remote terminal, the remote terminal including input/output means for communicating with a voter terminal, vote detection means for detecting selection signals generated by the voter terminal, and data storage means for storing data contained in the selection signals.

Preferably, the remote terminal includes means for transmitting an activation/deactivation signal to the voter terminal.

Preferably, the remote terminal includes means for transmitting a test signal to the voter terminal.

Preferably, the remote terminal includes means for assigning unique addresses to the voter modules making up the voter terminal.

Preferably, the apparatus includes an organiser terminal that may be interconnected with the remote terminal said organiser terminal including means for downloading election rules to the remote terminal.

Preferably, the organiser terminal includes storage means for storing votes transferred to it from the remote terminal.

According to a further aspect of the invention there is provided a method of recording votes in an election, the method comprising assembling a modular voter terminal according to the number of candidates and/or rules of the election, the voter terminal including a voter module and a plurality of candidate selection modules that may be connected to the voter module in aplurality of different configurations, each candidate selection module including at least one candidate selection switch and means for generating an electronic selection

signal representing a selected candidate, and recording votes cast by voters by detecting and recording electronic selection signals generated by the voter terminal.

Preferably, the electronic selection signals are recorded by a remote terminal.

Preferably, the voter terminal is controlled via control signals received from the remote terminal, the controlled functions including an activation/deactivation function.

Preferably, each selection module is assigned a unique identification address by the remote terminal.

Preferably, election rules are downloaded to the remote terminal from an organiser terminal.

Preferably, recorded votes are'downloaded from the remote terminal to the organiser terminal.

The voting apparatus preferably includes at least one modular voting terminal, said modular voting terminal including a plurality of voting modules that may be interconnected in a plurality of different configurations to provide a voting terminal having a plurality of vote selection means, each voting module including at least one vote selection means, at least one indicator means for indicating a vote selection and at least one vote signalling means for generating a vote signal in response to a vote selection.

According to one preferred embodiment of the invention, there is provided a vote recording & counting apparatus and method that is inexpensive to produce and supply to large numbers of polling stations, but that enables votes to be recorded and counted electronically.

According to another preferred embodiment of the invention, there is provided a vote recording & counting apparatus and method that is flexible and modular in nature such that varied types of elections (e. g. one vote, first and second choice, multiple contests) and varied numbers of candidates can be accommodated.

Another preferred embodiment of the invention provides a vote recording & counting apparatus and method that is simple to use.

According to a further preferred aspect of the present invention, there is provided an apparatus for recording and counting votes, which includes a voting terminal constructed of multiple plastic blocks. A limited number of different block types are present but each block type may be used multiple times and can be interconnected in a multitude of different configurations and quantities to construct and simulate a ballot paper, or papers, for a particular election process. For different elections the configuration is adapted to suit. The interconnected blocks form a flat rectangular terminal with locations for each candidate name (and other necessary details) and one or more associated push. switches to enable a vote, or votes, to be cast for the candidate. Each switch has a lamp that illuminates to confirm a voting intention. Each block type is simple and similar in construction so they are able to be produced in high volume at a low cost ; (Consequently, each"tailored"voting terminal is inexpensive to produce because it is constructed of low cost parts that can be simply fitted together. If required for subsequent, and possibly different, elections the blocks can be disassembled and then reassembled to suit requirements. Alternatively the blocks may be considered as single use disposable parts and voting terminals would be constructed from new parts for each election.

Each type of plastic block is constructed with electrical connectors such that an electric circuit is made when the blocks are fitted together. Blocks containing the switch and lamp parts are fitted with an electronic circuit to control their function. The interconnection of the blocks is such that although the electronic circuits are identical in each switch unit, by use of serial communication along rows and columns of blocks, each electronic circuit can electrically determine its physical position in the voting terminal structure.

In accordance with a further aspect of the present invention, a method of recording and counting votes comprises providing an electronic control unit (or remote terminal) which in the preferred embodiment of the present invention is connected to the voter terminal by an electric cable. The control unit is operated by staff running a polling station and controls use of the voter terminal and counts the votes cast at the terminal.

The control unit is configured before the start of an election with the election rules (for example, the number of candidates and number of valid votes per voter). At the start of an election the control unit is used to test that the voting terminal is working and has been configured correctly. During the election the control unit enables the voting terminal to be

used to cast votes for each voter. Once a voter has used a voting terminal the terminal is disabled by the control unit until another valid voter is ready to vote. All votes cast at the terminal are stored in the control unit, and at the end of the election the stored votes are transferred (physically and/or electronically) to any specified place for consolidation with other counts and the announcement of the results.

Certain embodiments of the invention will now be described, by way of example, with reference to the accompanying drawings, in which : Figure 1 is a block diagram illustrating schematically the main components of the voting apparatus; Figure 2 is an isometric view of a voter terminal ; Figure 3 is an exploded isometric view of a voter terminal, showing the different components of the voter tenninal ; Figure 4 is a block diagram illustrating schematically the interconnections between the electronic circuits of the voting apparatus; Figure 5 is a block diagram illustrating schematically the main electronic components of a voter module; Figure 6 is a block diagram illustrating schematically the main electronic components of a switch LED module; and Figure 7 is a block diagram illustrating schematically the main electronic components of a column selector module.

The following abbreviations will be used in the description of the invention as shown in the drawings : VT Voter Terminal-a terminal used by voters as an electronic ballot paper.

VOM VOter Module-the basic unit of a Voter Terminal.

POM Presiding Officer Module-a remote terminal that controls a Voter Terminal and serves as an electronic ballot box.

OM Organiser Module-a terminal that can be used to configure POMs and collect POM data.

LEM Legend Module-a part of the Voter Terminal that carries candidate details.

SLM Switch LED Module-a first form of candidate selection module that contains a number of selection switches to be used in making a voting selection.

CSM Column Selector Module-a second form of candidate selection modulethat allows for additional columns of SLMs.

PO the Presiding Officer.

VotaPad The trade name given to the entire vote collecting system.

The voting apparatus shown in Figure 1 consists of three main components: a Voter Terminal (VT) 2 that is used by voters to register their votes, a Presiding Officer Module (POM) 4 that the Presiding Officer uses to control operation of the VT 2, and an Organiser Module 6 that is used before the vote to program the POM 4 and afterwards to collect the votes cast by the voters. In use, the VT 2 and the POM 4 are connected to one another by means of a single inter integrated circuit (I2C) serial bus 8. The OM 6 may also be connected to the POM 4 via the I2C bus 8.

The VT 2 is modular and may be reconfigured according to the number of candidates and/or the rules of the electoral system. The basic component of the VT 2 is a Voter Module (VOM) 10, which includes the I2C interface and associated control circuitry for connecting the terminal to the POM 4. It may also include one or more selection switches <BR> <BR> 12 that can be used by a voter to select a candidate for whom the voter wishes to cast a vote: the version shown in Figure 1 has three such selection switches and can therefore be used on its own in a first past the post (FPTP) election with up to three candidates.

The VT 2 can be extended to allow for more candidates and/or different electoral systems by adding one or more candidate selection modules. These include Switch LED Modules (SLMs) 14 and their associated Legend Modules (LEMs) 16, which allow the terminal to be extended vertically for more candidates, and Column Selector Modules (CSMs) 18, which the terminal to be extended horizontally, for use in an electoral system that allows each voter to cast a vote for more than one candidate. Furthermore, one or more secondary VOMs (not shown) could be added for use where two or more elections are being held simultaneously, such as a national and a local election. Electrical connections are provided between the voter module 10 and each of the candidate selection modules 14,18.

An example of an assembled VT 2 is shown in more detail in Figure 2, the components making up the same VT 2 being shown in exploded form in Figure 3. This example shows a VT 2 configured for use in an election with seven candidates, who are to be elected using the single hansfenable vote system, where voters are allowed to indicate their first and second choices of candidate. The main components making up the VT 2 consist of one VOM 10, one CSM 18, one LEM 16 and two SLMs 14. Each of these modules is housed in a plastic box having on one or more of its side walls a set of interlocking elements 19 that allow the modules to be interconnected, so forming a rigid and durable integrated unit.

Each module also includes one or more flanges 20 having screw holes 22 through which screws may be inserted to secure the modules to a rigid base plate (not shown). A set of frame elements 24 are provided for finishing and/or additional strength and/or security.

The VOM 10 includes a plastic box having a top surface that is divided into an upper portion 26a and a lower portion 26b. The upper portion 26a carries two push buttons: a "Vote now"button 28 and a"Cancel"button 30. The lower portion carries the three selection switches 12, which are arranged vertically adjacent the right hand edge of the box.

To the left of and above the selection switches 12 a flat surface 32 is provided, to which a label 34 carrying voting instructions and details of the election candidates can be applied.

A transparent cover plate 36 is provided, which may be clipped to the top of the VOM 10 to protect the label 34. The selection switches 12 and the"Vote now"and"Cancel"buttons 28, 30 each include a light emitting diode (LED), which serves as an indicator to confirm that the button has been pressed. The VOM 10 includes electrical connectors 38 on its lower and light hand side walls, allowing it to be connected vertically to a SLM 14 and horizontally to a CSM 18.

The SLM 14 includes four vertically arranged selection switches 12, each ofwhich includes a LED indicator light. The SLM 14 includes electrical connectors 38 on each of its end walls, allowing it to be connected to vertically adjacent modules.

The LEM 16 is in the form of a plastic box having a flat upper surface 40, to which the label 34 carrying details of the candidates can be applied. A transparent cover plate 36 is provided, which may be clipped onto the LEM 16 to protect the label 34. In use, the LEM 16 is located to the left of the SLM 14 so that the candidate details on the label 34 are aligned with the selection switches 12. The LEM 16 contains no electronic components.

The top surface of the CSM 18 includes an upper portion 42a, a lower portion 42b that carries three selection switches 12 and an intermediate portion 42c for receiving the label 34 and its cover 36. When the CSM 18 is positioned adjacent a VOM 10 as illustrated in Figure 2, the selection switches 12 are adjacent the selection switches of the VOM 10 and aligned with the respective candidate details. This allows a voter to register a second vote for a chosen candidate in an election system that allows for this. The CSM 18 includes electrical connectors 38 on both of its side walls and on its lower wall, allowing it to be connected both vertically and horizontally to adjacent modules.

Further CSM and SLM modules 18, 14 may be added as required, to construct a VT 2 that is configured according to the number of candidates standing in the election and the electoral system being used.

As shown in Figure 5, the basic electronic components of the VOM 10 include a slave PIC (Programmable Input/Output Controller) micro-controller 44, which is connected to the vote selection switches 12 and the"Vote"and"Cancel"switches 30,28, each of which contains an indicator LED 46. The micro-controller 44 communicates with the POM 4 through the I2C bus 8, via a buffer 50. The I2C bus 8 has vertical and horizontal extensions through which any connected SLMs 14 and CSMs 18 can communicate with the POM 4, the vertical extension including a second buffer 51. The micro-controller 44 also includes a set of pass through connections, including an input connection 52, which is connected to logic I via resistor 54, a first output connection 56 for connection vertically to an adjacent SLM 14 and a second output connection 58 for connectionhorizontallyto an adjacent CSM 18.

The SLM 14 shown in Figure 6 includes a slave PIC micro-controller 60, which communicates with the POM 4 via the I2C bus 8 and the buffer 50. The I2C bus 8 has a vertical extension through which any connected SLMs 14 can communicate with the POM 4. The micro-controller 60 is connected to four vote selection switches 12, each of which contains an indicator LED 46. The micro-controller 60 also includes a set of pass through connections, including a input connection 62, which is connected to logic 0 via a resistor 64, and an output connection 66 for connection to the input of the next vertically adjacent SLM 14.

The CSM 18 shown in Figure 7 includes a slave PIC micro-controller 68, which communicates with the POM 4 through the I2C bus 8, via the buffer 50. The I. 2C bus 8 has vertical and horizontal extensions through which any connected SLMs 14 and CSMs 18 can communicate with the POM 4, the vertical extension including a buffer 70. The micro- controller 68 is connected to three vote selection switches 12, each of which contains an indicator LED 46. The micro-controller 68 includes a set of pass through connections, including a input connection 72, which is connected to logic 0 via a resistor 74, a first output connection 76 for connection to a. vertically adjacent SLM 14 and a second output connection 78 for connection to a horizontally adjacent CSM 18.

The POM 4 includes amaster/slave PIC micro-controller 80, which is connected to a POM memory 82 and a set of controls/indicators 84.'I'he master/slave PIC micro-controller 80 communicates with the VOM 10, the SLMs 14 and the CSMs 18 through the I2C bus 8, via a buffer 8 6.

The OM 6 consists of a standard personal computer, and communicates with the POM 4 through the I2C bus 8 and the buffer 86. The OM 6 contains software instructions representing the rules of the election (e. g. the number of candidates, the number of votes <BR> <BR> per voter etc. ), which it downloads to the POM 4 through the I2C bus 8 and the buffer 86.

It also collects voting data from the POM 4 after the election, again via the I2C bus 8 and the buffer 86. The OM 6 can force the POM 4 to perform an initialisation sequence through the I2C bus 8 and the buffer 86.

All of the units making up the voting apparatus (the OM 6, the POM 4 and the VT 2), as well as the modules making up the VT 2, contain a PIC micro-controller and communicate on a single I2C bus 8. Power for the POM 4 and the VT 2 may be provided by a"brick" psu (power supply unit) connected to the mains, or by a battery.

Operation of the voting apparatus will now be described.

The OM (Organiser Module) 6 consists of a PC with an I2C interface 8. In addition it may have a network interface in order to communicate with other systems. The purpose of the OM 6 is to"organise"the collection of votes. There are two stages to this. The first stage takes place prior to the election where POMs need initialising, configuring and tracking.

The second stage occurs after close of voting where the OM 6 collects voting data from the POMs. The OM 6 needs to: 1. Configure POMs.

2. Print labels for POMs as they are configured so that POMs can readily be identified.

3. Print candidate labels for the VTs 2.

4. Keep track of POMs.

5. Maintain security of the configuration process of POMs.

6. Read voting data from POMs.

7. Maintain security of voting data during the POM reading process.

ThePOM configuration process consists of keeping arecord ofwhichPOM 4 is conducting which contest; telling the POM 4 the contest rules ; telling the POM 4 what layout to expect from the VT 2; and keeping the process secure so that mistakes cannot be made. In order to do this the OM 6 has to: 1. Read the unique serial number of the POM 4 and record this against a contest.

2. Check that the POM 4 is in the right mode and state (i. e. it must be in Configuration Mode in a Non Configured state).

3. Initialise the POM 4 (delete all votes, set a config status flag in POM 4, reset other status flags in POM 4 etc.).

4. Load the contest ID to POM 4.

5. Load the contest rules to POM 4.

6. Load the contest layout to POM 4.

7. Print a sticky label with the Contest name and ID, to be adhered to the POM 4.

8. Print a"ballot"paper, for attaching to the VT 2.

9. Optionally, record the name of the PO.

10. Load the current time into POM 4.

In addition to the above the OM 6 has to be able to cope with the necessity of configuring more than one POM 4 for the same contest, in case of a POM failure, and recording this fact. If a polling station requires more than one POM 4 for a contest, there has to be facility for this and for adding the collected votes to the DB database at read time. As well as this the OM 6 has to be able to cope with a POM 4 that appears to be in the wrong state. For

example, a POM 4 in Open Ballot state must not be configured unless overridden by some authority.

The POM reading process consists of checking which POM 4 is currently connected and therefore which contest this is; checking that this POM 4 has not already been read; checking that the status of the POM 4 is correct ; reading the voter data; checking that the check sum (CS) of Voter data matches the calculated CS; recording the data in a database (DB); and setting the status to Read. In order to do this OM 6 has to: 1. Read the POM ID and the contest ID and verify that this is correct against its own DB.

2. Read the POM status to make sure that all statuses are correct-including that it has not already been read.

3. Check its own DB to make sure that data for this contest has not already been read.

4. Read the time from the POM and check to see if this is within set limits of the actual time.

5. Read the voter data from POM.

6. Check the CS.

7. Record the data to some other application.

8. Set the POM status and its own DB status to Read.

The OM 6 communicates with a POM 4 using the I2C bus. An external serial to I2C interface enables this. The OM 6 communicates to a single POM 4 at a time to avoid confusion. Additionally the OM 6 may have communication to other systems via a network.

The POM (Presiding Officer Module) 4 is the module within a polling station that controls a VT 2 and stores votes that have been cast. It allows the PO to control the voting process; it checks the integrity of the VT 2; it checks the validity of each vote; and it stores votes to be down-loaded later to an OM 6.

The POM 4 is powered by low voltage. Normally it is connected to a"brick"psu that is connected to a mains supply, but the POM 4 can be externally battery powered if required.

The POM's data connection is via a flying lead which carries an I2C bus as well as power.

When connected to an OM 6 this is via an interface box connected to the OM 6. When

connected to a VT 2 (only a single VT 2 per POM 4) this is via the VOM 10. In both cases the POM 4 provides the power to the connected unit.

Whenever power is connected to a POM 4 it will always do a self test in addition to a user interface test. The user interface test consists of turning on all its indicators for the user to check. The user then presses all the POM's buttons in sequence to check functionality.

The POM 4 is used in three distinct modes and has a push button (Open/Close Poll) by which a PO can select these. In addition it has an"Ann"button to enable a single vote along with a LED to indicate this. Furthermore there is a. bleeper that is used in different ways to help the user understand what is going on. The three modes are: Configuration ; Ballot Open; and Close Ballot. There are three corresponding LEDs to indicate which mode is current. In addition, these modes can be considered as states whereby one state follows another to maintain strict sequence (a user cannot select Open Ballot prior to configuration) and it is not possible to jump states. The POM 4 keeps track of its current state and thus is able to be interrogated.

An operator can go from one mode to another by pressing the Arm button whilst simultaneously operating the Open/Close Poll button for a period of time. However this can only happen if the internal state of POM 4 is valid (for example an unconfigured POM will not allow itself to enter Open Poll mode).

The POM 4 must be in configuration mode before it can be configured by an OM 6. This is by default the first state of the POM. It is only when a POM 4 is in this state that an OM 6 can configure it. The POM 4 can be forced to this state by the OM 6 but normally this state is achieved only by previously being in Close Ballot state. In addition, if a POM 4 has not completed a Close Ballot state (i. e. votes havebeen read by an OM 6 and this status has been recorded within the POM) it cannot proceed to Configuration state (unless forced to do so by the OM 6). In Configuration mode there are two states. These are Not Configured and Configured. When the POM 4 first enters Configuration mode it is in a Non Configured state. When the OM 6 has successfully configured a POM 4, the state is changed by the OM 6 to Configured. In this Configured state the POM 4 can be connected toaVT2.

The POM 4 goes to Configuration mode by pressing the Ann button and simultaneously pressing the Open/Close Poll push button for a period of time. On entry to Configuration mode the corresponding LED flashes to indicate that the POM 4 has successfully entered Configuration Mode and is awaiting Configuration (i. e. is still in Non Configured state).

When Configured the LED stops flashing and remains on whilst there is still power (on restoration of power the LED comes on again i. e. the POM remembers its state).

When a POM 4 is connected to a VT 2 it immediately verifies that the physical layout of the VT 2 matches the layout for the loaded contest. In addition it forces a test mode where, interactively with the PO, it checks the functionality of the VT 2. In addition, having completed this test it continuously checks connectivity to the V r 2. In the event of power failure or communication failure with a VT 2, the test is repeated upon restoration of power/comecti. vity. There are two indicators on the POM 4 indicating Disconnected and Test Needed, to help the user determine the state of the system.

Open Ballot Mode is the mode where the POM 4 acts as an electronic ballot box. In order to enter this mode the user presses the Ann button whilst simultaneously pressing the Open/Close Poll push button for a period of time. This can only be achieved if the POM 4 has been configured AND if a correct working and tested VT 2 is connected. When Open Ballot mode is entered the corresponding LED will illuminate constantly and the Configure mode LED will extinguish indicating that Open Ballot mode is now active.

In order for a single vote to be recorded it is necessary for the PO to press the Ann button : This in turn arms the VT 2 which flashes the"VOTE NOW"LED and illuminates the "CANCEL,"LED, and enables the voter's intention to be read. When the"VOTE NOW" push button is pressed by the Voter, the vote is recorded in the POM 4 and the VT 2 is disabled. When the POM 4 is armed the Ann LED is illuminated indicating to the PO that the VT 2 is aimed. When the POM 4 has successfully recorded a vote the Arm LED is extinguished along with the"VOTE NOW"and"CANCEL"LEDs on the VT 2. If at any time the PO presses the Arm button for a period of time whilst in an aimed state, it will become disarmed and so will the VT 2. The cuvent state of the VT 2 will be recorded as a vote but marked in memory. Once a vote has been recorded it is NOT possible for it to be deleted i. e. once it is in the"ballot box" (the POM 4) it remains there until read by an OM 6.

During a"Non Vote"state (the POM 4 and the VT 2 are not armed and no vote can take place) the POM 4 continuously checks connectivity to the VT 2. In the event of power failure or communication failure with the VT 2, the test is repeated upon restoration of power/connectivity. In the event of failure of some part of the VT 2, or its communications, at any time, then the Disconnected and Test Needed LEDs will illuminate. Only when a correct working and tested VT 2 is restored to the system will the POM 4 allow itself to be armed.

During a"vote" (when the POM 4 and VT 2 are aimed), in the event of power failure or communication failure with a VT 2, the POM 4 and VT 2 are immediately disarmed and the test is repeated upon restoration of power/connectivity. Only when a correct working and tested VT 2 is restored to the system will the POM 4 allow itself to be rearmed.

It is the POM's job to recognise that a selection has been made in near to real time as it is the POM's job to make sure that the rules of the election are obeyed. If a selection is allowed, the POM 4 will illuminate the appropriate selection. When the"VOTE NOW" button is pressed, the POM 4 will verify the actual selection against what it believes to have been selected over time. It will record the selection in two separate non volatile memories along with a time stamp as well as checking various check sums against predetermined algorithms. It will then disarm itself and the VT 2, and finally remove the armed status.

The POM 4 is able to withstand power failure at any time and still maintain data integrity.

It does this by a combination of smart power management and using non volatile memory to remember what state it was in. The smart power management means that power failure is detected early and, since the POM 4 can control VT power, there is always sufficient stored power on board to complete to a safe state where data and state can be stored in non volatile memory, which is read to continue when power is restored.

The Close Ballot mode is entered when the poll is closed and the POM 4 needs to prevent further votes being cast-this may be considered as equivalent to the sealing of a ballot box. In order to get to this mode the ann button must be held as simultaneously the Open/Close Poll button is pressed for a period of time. This can only occur if the previous state of the POM 4 was Open Ballot mode and disarmed. A successful transition to this mode will be indicated by the illumination of the corresponding LED and the extinguishing of the Poll Open LED.

In this mode the POM 4 may be disconnected and/or the power removed without any loss of data. On power up the POM 4 will recognise this mode and remain in it. Votes are non volatile so data integrity will remain.

In this mode there are two states: these are Unread and Read. The initial state on entering Close Ballot is Unread.

When the POM 4 is connected to an OM 6 the OM 6 will interrogate the POM and, if satisfied, collect the data. from the POM. The POM 4 will move to Read status when told to by an OM 6. In this mode the POM 4 is acts as a Slave.

The POM 4 is responsible for the following: 1. Keeping track of and adhering to the correct sequence of operation.

2. Security and validity of the polling station system and data The VT 2 is a pseudo ballot paper. That is to say that it looks like a conventional ballot paper and functions as a ballot paper except that 1) where the voter would normally mark a paper with an X, (s) he instead presses a button, and 2) it is physically thicker in order to accommodate switches, electronics etc. The VT 2 is modular so that it can be built to any layout that a normal voting paper may have. There are four physical modules that are used in various combinations to make a VT 2. These are: 1. VOM (VOter Module) 2. SLM (Switch LED Module) 3. CSM (Column Selector Module) 4. LEM (LEgend Module) All of these modules-except the LEM-are active (contain electronics) and are interconnected via a single I2C bus. It is this same bus that interconnects the VT 2 via a cable to the POM 4. The power is included in this bus so the power to the VT 2, and indeed each module, is supplied from the POM 4. Within the VT 2, the bus also contains a pass through wire, which is used by the POM 4 to configure the modules within the assembled VT 2.

Virtually any physical layout of a VT 2 can be achieved, this being constrained only by power, cost and physical size. When a VT 2 is assembled the whole unit is robust enough

to be fit for purpose i. e. typically used by 1000+ voters in an election, able to survive being held by any part, and able to withstand being knocked or even dropped. It is also possible for an unskilled person to assemble the VT 2 and to disassemble the VT 2 after use non- destructively. In this example the VT 2 has multiple voter sensors per module, but it is possible to have any number of voter sensors per module (including one).

From manufacture, although there is software distinction between different types of module, for any particular module there is none i. e. all SLMs are the same. Only when the VT 2 is assembled is there some distinction and this is only when the assembled VT 2 is connected to a cooperative POM 4. In use, the modules collaborate automatically to work out their respective physical positions and are assigned a unique address. Furthermore, each module type knows what resources it carries and is able to communicate this to a POM 4.

All of the modules within a VT 2 are able to survive a power cut and/or communications failure. In addition, they automatically revert to their module type default address at power on.

The VOM 10 is the minimum voter module. The VOM 10 is rectangular and is the size and layout of a three candidate FPTP (first past the post) ballot paper, with an addition 25. 4mm space at the top for a"VOTE NOW"button and a"CANCEL"button. Therefore it includes"VOTE NOW"and"CANCEL"buttons, a space for voter instruction and contest name, three voting switches (arranged vertically), and positions for details of three candidates. The area not covered by the"VOTE NOW"and"CANCEL"buttons and the three vote switches is flat, allowing a normal ballot paper (with no voting boxes) to be securely positioned on the module, The VT 2 has connection via a flying lead to the POM 4. The VOM 10 has connection built in to connect to a CSM 18 and/or a SLM 14. Within this connection is the I2C bus, power and pass through wire. The design allows for a Primary VOM 10 and multiple Secondary VOMs.

Within each voter button there is a LED so that users can see which button has been selected, and within the"VOTE NOW"and"CANCEL"buttons there are also LEDs so that users can determine the state of the VT 2. These LEDs are controlled by a single PIC

micro-controller in slave mode. The push buttons are fed to this same micro-controller.

The micro-controller communicates with other modules via the I2C bus. This bus is buffered in the POM and SLM directions.

The VOM 10 is multifunctional in that it has to work as a CSM 18 (which not only has to control column selection but also work as a SLM 14 with three voter buttons) and a controller of the"VOTE NOW"and"CANCEL"button/LED combinations. The difference between this CSM function and a normal CSM is that it is hard wired to the first column and the first SLM 14. Otherwise, the VOM 10 uses pass through in the same way as for any CSM 18.

The CSM 18 is used each time an additional column is required. Within a CSM 18 there is built a physical three voter button SLM 14 i. e. part of a CSM functions exactly the same as a SLM 14 that has three voter buttons. This is described further in the description of SLM 14 for all SLM functions. The size of a CSM 18 is 25. 4mm x 101. 21nm.

Connectivity is to each"side"of the module and"below" : i. e. three ways-one to connect to a previous column, one to allow another column, and one to allow another SLM 14. Pass through applies both horizontally and vertically where there is a single In but two Outs-- VoUt and HoU, for vertical and horizontal Outs.

The Functions of the CSM 18 are controlled by a PIC micro-controller working in slave mode.

The SLM 14 consists of four voter buttons and LEDs ina25. 4mmx 101. 2mmmodule. An SLM 14 is used to increase the number of voter buttons in a vertical direction on a VT 2.

Connectivity is via each end of the SLM 14 so that it is possible to stack a number of SLMs end on end. Pass through applies.

The functions of the SLM 14 are controlled by a PIC micro-controller in slave mode. All SLMs are identical until self configuration has taken place and then the only difference is a stored address.

The job of the SLM 14 is to: 1. Cooperate in the self configuration process 2. Be able to store a unique (to the system) address

3. Be able to recognise that a button (one or more of its own) has been pressed and to communicate this (and which one (s) ) to the POM 4. Be able to control its LEDs by command from POM Pass through is the process of passing received logic level to another module. The reason for pass through is so that modules within an assembled VT 2 can cooperatively help the POM 4 determine their position.

Each module has two pass through wires. These are In and Out. Normally the In wire is closest to the VOM 10. All In wires are pulled down to a logic 0 via a resistor. Since each module is linked to another in a chain, any particular module can sense the state of its In and deterministically create an Out, which is connected to the next module's In. By cooperating in an ordered fashion and using pass through the POM 4 can tell the position of any module in the chain. There can only be one horizontal chain (row) but there can be unlimited vertical chains (columns).

On power up all Ins are at logic 0 (meaning that all Outs are also in this state) except for the VOM 10 whose In, which is internal, is pulled up to logic 1. All modules listen and can interpret commands.

The following sequence describes how cooperatively the POM 4 can learn the position of each module within the first column and how each module acquires a unique address.

1. The POM 4 issues a"learn"command on the module default address which consists of a column address (1 in this case) and a row address (1 in this case) 2. Only the module with the default address and with its In at logic 1 responds and at the same time it changes its address to that given by the"learn"command In this case it would be a VOM.

3. The VOM raises its VOUS to logic 1 (the In of the next module in the chain) 4. POM maps the position of the VOM.

5. POM issues a"Learn"command on the module default address which consists of a column address (1 in this case) and the next row address (2 in this case) 6. Only the SLM with default address and with its In at logic 1 responds and at the same time it changes its address to that given by the"leam"command.

7. The SLM raises its Out to logic I (the In of the next module in the chain)

8. POM maps the position of the SLM.

9. This process continues until there is no response to the POM's"Learn"command, which means that the end of the chain has been reached.

The following sequence describes how through cooperation the POM 4 can leam the position of each CSM 18 and how each CSM 18 acquires a unique address 1. The POM issues a."Horizontal pass through High"command to VOM (its address is already unique from the above process).

2. VOM raises its horizontal pass through (HOu) to logic 1.

3. POM issues a"Learn"command on the module default address which consists of a column address (2 in this case) and a row address (1 in this case) 4. Only the module with the default address and with its In at logic 1 responds and at the same time it changes its address to that given by the"leam"command. In this case it would be the CSM in column 2.

5. The CSM raises its VO, t to logic 1 (the In of the next module in the vertical chain) 6. POM maps the position of the CSM.

7. The sequence for learning position with a column can now be used.

By using both of these sequences it is possible, with pass through, to map the entire VT 2 automatically.