TEDGlobal 2010
David Bismark: E-voting without fraud
Filmed:
Readability: 3.9
606,413 views
David Bismark demos a new system for voting that contains a simple, verifiable way to prevent fraud and miscounting -- while keeping each person's vote secret.
David Bismark - Voting system designer
David Bismark has co-developed an electronic voting system that contains a simple and reliable method of verification. Full bio
David Bismark has co-developed an electronic voting system that contains a simple and reliable method of verification. Full bio
Double-click the English transcript below to play the video.
00:16
So there are a few things
0
1000
2000
00:18
that bring us humans together in the way that an election does.
1
3000
3000
00:21
We stand in elections; we vote in elections;
2
6000
3000
00:24
we observe elections.
3
9000
2000
00:26
Our democracies rely on elections.
4
11000
3000
00:29
We all understand why we have elections,
5
14000
3000
00:32
and we all leave the house on the same day
6
17000
2000
00:34
to go and vote.
7
19000
2000
00:36
We cherish the opportunity to have our say,
8
21000
3000
00:39
to help decide the future of the country.
9
24000
3000
00:44
The fundamental idea is that politicians
10
29000
2000
00:46
are given mandate to speak for us,
11
31000
3000
00:49
to make decisions on our behalf
12
34000
2000
00:51
that affect us all.
13
36000
2000
00:53
Without that mandate, they would be corrupt.
14
38000
3000
00:56
Well unfortunately, power corrupts,
15
41000
2000
00:58
and so people will do lots of things
16
43000
3000
01:01
to get power and to stay in power,
17
46000
3000
01:04
including doing bad things to elections.
18
49000
3000
01:08
You see, even if the idea
19
53000
2000
01:10
of the election is perfect,
20
55000
2000
01:12
running a countrywide election is a big project,
21
57000
3000
01:15
and big projects are messy.
22
60000
3000
01:18
Whenever there is an election,
23
63000
2000
01:20
it seems like something always goes wrong,
24
65000
2000
01:22
someone tries to cheat,
25
67000
2000
01:24
or something goes accidentally awry --
26
69000
3000
01:27
a ballot box goes missing here,
27
72000
3000
01:30
chads are left hanging over here.
28
75000
3000
01:33
To make sure as few things as possible go wrong,
29
78000
4000
01:37
we have all these procedures around the election.
30
82000
3000
01:40
So for example, you come to the polling station,
31
85000
3000
01:43
and a poll station worker asks for your ID
32
88000
3000
01:46
before giving you a ballot form
33
91000
2000
01:48
and asking you to go into a voting booth
34
93000
2000
01:50
to fill out your vote.
35
95000
2000
01:52
When you come back out, you get to drop your vote
36
97000
2000
01:54
into the ballot box
37
99000
2000
01:56
where it mixes with all the other votes,
38
101000
2000
01:58
so that no one knows how you voted.
39
103000
3000
02:01
Well, what I want us to think about for a moment
40
106000
2000
02:03
is what happens after that,
41
108000
2000
02:05
after you drop your vote into the ballot box.
42
110000
2000
02:07
And most people would go home
43
112000
2000
02:09
and feel sure that their vote has been counted,
44
114000
2000
02:11
because they trust
45
116000
2000
02:13
that the election system works.
46
118000
2000
02:15
They trust that election workers and election observers
47
120000
3000
02:18
do their jobs and do their jobs correctly.
48
123000
3000
02:22
The ballot boxes go to counting places.
49
127000
3000
02:25
They're unsealed and the votes are poured out
50
130000
3000
02:28
and laboriously counted.
51
133000
3000
02:31
Most of us have to trust
52
136000
2000
02:33
that that happens correctly for our own vote,
53
138000
2000
02:35
and we all have to trust that that happens correctly
54
140000
3000
02:38
for all the votes in the election.
55
143000
3000
02:41
So we have to trust a lot of people.
56
146000
3000
02:45
We have to trust a lot of procedures.
57
150000
3000
02:49
And sometimes we even have to trust computers.
58
154000
3000
02:54
So imagine hundreds of millions of voters
59
159000
2000
02:56
casting hundreds of millions of votes,
60
161000
2000
02:58
all to be counted correctly
61
163000
3000
03:01
and all the things that can possibly go wrong
62
166000
3000
03:04
causing all these bad headlines,
63
169000
3000
03:09
and you cannot help but feel exhausted at the idea
64
174000
3000
03:12
of trying to make elections better.
65
177000
3000
03:18
Well in the face of all these bad headlines,
66
183000
2000
03:20
researchers have taken a step back
67
185000
3000
03:23
and thought about how we can do elections differently.
68
188000
3000
03:27
They've zoomed out and looked at the big picture.
69
192000
3000
03:30
And the big picture is this:
70
195000
2000
03:32
elections should be verifiable.
71
197000
3000
03:36
Voters should be able to check
72
201000
3000
03:39
that their votes are counted correctly,
73
204000
3000
03:42
without breaking election secrecy,
74
207000
2000
03:44
which is so very important.
75
209000
3000
03:47
And that's the tough part.
76
212000
2000
03:49
How do we make an election system completely verifiable
77
214000
3000
03:52
while keeping the votes
78
217000
2000
03:54
absolutely secret?
79
219000
2000
03:56
Well, the way we've come up with
80
221000
2000
03:58
uses computers
81
223000
2000
04:00
but doesn't depend on them.
82
225000
2000
04:02
And the secret is the ballot form.
83
227000
2000
04:04
And if you look closely at these ballot forms,
84
229000
2000
04:06
you'll notice that the candidate list
85
231000
2000
04:08
is in a different order on each one.
86
233000
2000
04:10
And that means, if you mark your choices on one of them
87
235000
3000
04:13
and then remove the candidate list,
88
238000
2000
04:15
I won't be able to tell from the bit remaining
89
240000
3000
04:18
what your vote is for.
90
243000
3000
04:21
And on each ballot form there is this encrypted value
91
246000
3000
04:24
in the form of this 2D barcode
92
249000
2000
04:26
on the right.
93
251000
2000
04:28
And there's some complicated cryptography
94
253000
2000
04:30
going on in there,
95
255000
2000
04:32
but what's not complicated
96
257000
2000
04:34
is voting with one of these forms.
97
259000
3000
04:37
So we can let computers do all the complicated cryptography for us,
98
262000
3000
04:40
and then we'll use the paper for verification.
99
265000
3000
04:44
So this is how you vote.
100
269000
2000
04:46
You get one of these ballot forms at random,
101
271000
4000
04:50
and then you go into the voting booth,
102
275000
2000
04:52
and you mark your choices,
103
277000
2000
04:54
and you tear along a perforation.
104
279000
3000
04:59
And you shred the candidate list.
105
284000
3000
05:02
And the bit that remains, the one with your marks --
106
287000
3000
05:05
this is your encrypted vote.
107
290000
2000
05:07
So you let a poll station worker
108
292000
2000
05:09
scan your encrypted vote.
109
294000
2000
05:11
And because it's encrypted,
110
296000
2000
05:13
it can be submitted, stored
111
298000
2000
05:15
and counted centrally
112
300000
3000
05:18
and displayed on a website
113
303000
2000
05:20
for anyone to see, including you.
114
305000
3000
05:23
So you take this encrypted vote
115
308000
3000
05:26
home as your receipt.
116
311000
2000
05:28
And after the close of the election,
117
313000
2000
05:30
you can check that your vote was counted
118
315000
2000
05:32
by comparing your receipt
119
317000
3000
05:35
to the vote on the website.
120
320000
3000
05:39
And remember, the vote is encrypted
121
324000
2000
05:41
from the moment you leave the voting booth,
122
326000
3000
05:44
so if an election official wants to find out how you voted,
123
329000
3000
05:47
they will not be able to.
124
332000
2000
05:49
If the government wants to find out how you voted,
125
334000
2000
05:51
they won't be able to.
126
336000
3000
05:54
No hacker can break in
127
339000
2000
05:56
and find out how you voted.
128
341000
2000
05:58
No hacker can break in and change your vote,
129
343000
3000
06:01
because then it won't match your receipt.
130
346000
3000
06:04
Votes can't go missing
131
349000
3000
06:07
because then you won't find yours when you look for it.
132
352000
3000
06:11
But the election magic doesn't stop there.
133
356000
3000
06:14
Instead, we want to make the whole process
134
359000
2000
06:16
so transparent
135
361000
2000
06:18
that news media and international observers
136
363000
3000
06:21
and anyone who wants to
137
366000
2000
06:23
can download all the election data
138
368000
2000
06:25
and do the count themselves.
139
370000
2000
06:27
They can check that all the votes were counted correctly.
140
372000
3000
06:30
They can check
141
375000
2000
06:32
that the announced result of the election
142
377000
2000
06:34
is the correct one.
143
379000
2000
06:36
And these are elections
144
381000
2000
06:38
by the people, for the people.
145
383000
2000
06:40
So the next step for our democracies
146
385000
3000
06:43
are transparent
147
388000
2000
06:45
and verifiable elections.
148
390000
2000
06:47
Thank you.
149
392000
2000
06:49
(Applause)
150
394000
7000
ABOUT THE SPEAKER
David Bismark - Voting system designerDavid Bismark has co-developed an electronic voting system that contains a simple and reliable method of verification.
Why you should listen
One of the main objections to e-voting is that it's difficult for each voter to know that her vote was recorded accurately and counted correctly, while she remains anonymous. In the system designed by David Bismark and his colleagues, each voter gets a takeaway slip that serves as a record of the vote, and allows elections to be independently verified.
Apart from his work on voting systems, Bismark runs Recito Förlag, a publishing company in Sweden.
David Bismark | Speaker | TED.com