EAC - Voluntary Voting System Guidelines

Name : | H. Stephen Berger
Organization : | N/A
Post Date : | 9/30/2005
Section Comments
Section : | 6.7.2.6
Page no. : |
Line no.: |
Comment : | The next topic is the control of the wireless link. Section 6.7.2.6 requires: 6.7.2.6 If a voting system includes wireless capabilities, then the system shall have the ability to turn on the wireless capability when it is to be used and to turn off the wireless capability when the wireless capability is not in use. The critical element here is how much confidence can there be that this requirement is met? Here again the test and evaluation is critical. If the test requires that the wireless circuitry be on a removable module or that power to the circuitry be physically turned off then there can be great confidence that the wireless circuitry will only be used when the election official intends for it to be used. Alternately, if the control of the wireless circuitry is indirect and subject to multiple means of control there will be far lower confidence that the intent of this requirement has been met. Authentication is the third element in protection against tampering. The requirements of Section 6.7.10, Authentication, would appear to be adequate to protect the use of wireless to authorized users. The requirements of Section 6.7.10 do not remove all risk but appear to reduce them to the point where an unauthorized user will find other avenues more promising. [Statements submitted at EAC public hearing, July 28, 2005, Pasadena]