Some consequences of paper fingerprinting for elections

  • Authors:
  • Joseph A. Calandrino;William Clarkson;Edward W. Felten

  • Affiliations:
  • Center for Information Technology Policy and Dept. of Computer Science, Princeton University;Center for Information Technology Policy and Dept. of Computer Science, Princeton University;Center for Information Technology Policy and Dept. of Computer Science, Princeton University and Woodrow Wilson School of Public and International Affairs

  • Venue:
  • EVT/WOTE'09 Proceedings of the 2009 conference on Electronic voting technology/workshop on trustworthy elections
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Recent research has demonstrated that individual pieces of paper can be fingerprinted and reidentified later at low cost, using commodity scanners. We consider the consequences of this fact for electronic voting. The most obvious consequence is negative: the ability to fingerprint paper endangers the secrecy of ballots in any system that keeps paper records of individual ballots, including standard optical scan and DRE-VVPAT systems. We characterize the resulting risks and discuss when and how they can be mitigated. Less obviously, the ability to fingerprint paper can also have positive consequences, by enabling certain new kinds of post-election audit procedures, both to compare electronic records to the corresponding paper records and to detect the use of forged ballot stock. Paper reidentification presents new challenges for election officials, but careful consideration of its implications now may allow us to preserve ballot secrecy and strengthen election integrity.