© 2003 H
ART
I
NTER
C
IVIC
4 - 40
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
Hart InterCivic Response
Hart has developed a vote simulation utility for the eSlate System. The vote
simulation utility is used to simulate voting on the eSlate and was designed using
the same philosophy to achieve a valid system test. Using an external PC to run
the vote simulation utility, keystroke and wheel turn commands are fed into the
polling place closed network to exercise the maximum amount of executable code
and ballot data.
Voting patterns, number of votes and speed on the process are all controllable
parameters from the vote simulation utility. Once a defined vote simulation cycle
is complete, additional votes may be cast on the target system.
e. The vendor will provide an automated test routine to run a complete logic
and accuracy (L&A) test of all contests loaded on appropriate system
components, using simulated vote totals that can be verified by both
precinct reports and/or an election summary. The test routine should
contain the same options identified under the Ballot Tabulation (Vote
Simulation) section.
Hart InterCivic Response
The eSlate System supports a variety of traditional Logic and Accuracy tests to
verify the system is programmed correctly. Vote patterns manually entered using
a test or election MBB on the eSlate allow the vote information to be returned to
Tally for verification of results. This can be performed on a precinct or ballot
style basis. The vote simulation utility is available to execute this process without
human intervention.
10.2 Requirements
b. How do you propose to meet these requirements? Address all
requirements listed above, making sure to include item(s) listed below:
(1) Provide a detailed description of how each system component is
configured for use at the polls. Include all hardware necessary to
program the components. If individual standalone DRE units are
proposed, include a detailed description of how audit logs are gathered
from each unit and consolidated into a single log displaying information
from all DRE units.
a. Will you meet these requirements?
Yes X No
© 2003 H
ART
I
NTER
C
IVIC
4 - 41
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
Hart InterCivic Response
The following section describes how the eSlate System is configured at the polls.
In order to fully answer the question, the process description begins prior to
deployment at the polling place.
We have arranged our discussion of the configuration of each component into
three subsections, as follows:
Election Preparation Prior to Deployment at the Polling Place,
Components Deployed at the Polling Place, and
Component Configuration at the Polling Places
Election Preparation Prior to Deployment at the Polling Place
Preparing for an election begins with entering information into BOSS. This can
be accomplished by importing data from Integrity or by manual entry (or a
combination of both). All formatting is managed through BOSS. No
"programming" occurs at the polling place.
Typically, the County uses BOSS to create an administrative database. This
database contains data that generally does not change between elections, such as:
name of the jurisdiction,
political parties,
precinct and polling place names,
precincts in polling places, and
contest names, options, and instructions.
The Administrative Data Base is carried forward from election to election and
serves as the starting point for election preparation.
Once an election cycle begins, election specific information is imported or entered
into BOSS, including, for example:
election name,
date of the election,
type of election,
contests, precincts, or polling places and
candidate names and proposition text in contests.
Ballot content is proofed using the reports produced by BOSS and, once verified,
ballot generation produces the electronic ballot data file that contains all the ballot
styles necessary for the election.
© 2003 H
ART
I
NTER
C
IVIC
4 - 42
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
The ballot styles are transferred from the ABS to the system components via the
MBB. The MBB is a reusable, portable PC card memory device that is used for
storing and transporting election information to and from the polling places. The
file created by the ballot generation process in BOSS (described below) is written
to the MBBs and contains the following:
all possible ballot styles for the jurisdiction,
a list of polling places and allowable ballot styles for each,
ballot format information for display on the eSlate, and
passwords.
The MBB is installed in the Judge's Booth Controller for each polling place,
either at Election Headquarters or at the precinct-polling place. The MBB can
have data stored to it many different times and since it utilizes flash memory, the
MBB does not require batteries to maintain the information written to it.
Components Deployed at the Polling Place
The following components of the eSlate Electronic Voting System are deployed at
the polling place.
eSlate 3000. The eSlate 3000 is the device voters use to cast their ballots
at the polling place. The eSlate is approximately 16" tall, 10" wide, and
2.75" deep, weighing approximately 5.2 pounds. Given its compact size
and light weight, the device is highly portable.
Information is displayed to the voter through a full SVGA LCD display,
illuminated by a backlight. Since the eSlate is not a touch screen, the
display is protected from damage in intense usage environments by a
durable polycarbonate screen. Backup power can be provided by a "D"
cell battery pack.
The eSlate's PrecisionVote design includes an integrated selector, known
as the SELECT Wheel. The SELECT Wheel is a Rotary Optical Encoder
(ROE) through which the voters select their preferences by turning the
SELECT Wheel and pressing the adjacent ENTER button when the
preferred choice is highlighted.
The Rotary Optical Encoder is the most precise, durable interface on the
market. The eSlate's PrecisionVote design yields advantages over other
systems, particularly touch screen systems.
Unlike touch screen systems, the eSlate requires no calibration, and
there are no concerns with imprecise touch areas or errors caused by
multiple touches.
© 2003 H
ART
I
NTER
C
IVIC
4 - 43
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
The two-step process, making a selection with the Wheel and then
pressing the ENTER button to record the selection, affords a greater
level of assurance that the vote has been cast accurately.
Since the voter addresses the eSlate through the SELECT Wheel, we
can protect the display screen with the polycarbonate cover that is
durable, inexpensive, and field replaceable. (By comparison, after
normal use, touch screens may lose up to 35 percent of clarity due to
surface abrasions).
The SELECT Wheel makes an audible click when rotated, a feature
that has been welcomed by visually impaired users. The SELECT
Wheel can also be used by voters with significant mobility
impairments
Other buttons, all of which are designed to be highly tactile and
intuitive, allow the voter to obtain assistance in using the device, move
to the previous or next screen, and cast the ballot
Judge's Booth Controller (JBC). The eSlate System's JBC is located at
each polling place and networked to the other eSlates located at the polling
place. The JBC supports the Polling Place Officials in controlling and
monitoring the election process in the polling place or precinct. Each JBC
controls up to 12 eSlates and enables the Polling Place Officials to know
which booths are in use at any given time.
The JBC issues an Access Code linked to the voter's precinct. When
entered on the eSlate by the voter, the Access Code informs the JBC of the
correct ballot to present to the voter. The Access Code is not linked to the
voter's identity. The JBC also holds the PC card (MBB) on which
election information and cast votes are stored, and (if required) manages
modem transmission to election central headquarters. The JBC has the
following features:
a display for delivery of instructions and messages to the operator,
including information about system power status, number of votes cast
during the day, and other information to support efficient polling place
management;
an alphanumeric keypad for entering precinct names, ballot styles, and
other data;
a built-in printer for printing ballot Access Codes, test and election
information, and voter receipts, if required;
a slot to insert a flash memory card (MBB); and
12 status lights used to indicate the state of each of the connected eSlate
voting units.
© 2003 H
ART
I
NTER
C
IVIC
4 - 44
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
Disability Access Unit (DAU)
The eSlate System is ADA accessible by design.
The DAU is an optional device that can be installed in an eSlate and provides the
following additional features:
audio output for "reading" the ballot to the voter;
a slot to insert a flash memory card (MBB) containing audio files; and
remote switch input used for physically challenged voters, supporting a
range of alternative input devices including breath control ("sip-and-puff")
devices
When an eSlate is configured with the DAU, it is identical to all other eSlate
devices with the exception of the earphones and /or other accessibility devices
attached to the input ports. Therefore, voters with disabilities use the same device
and interface as all voters to cast their vote.
All disability features can be used interchangeably, in whole or part, with the
eSlate's standard interfaces, allowing the voter to overcome any physical
challenges he/she might face in casting his or her ballot. The accessible devices
may also be used by voters without disabilities.
Component Configuration at the Polling Places
The eSlates (stored in the voting booths), JBC, MBB, and booths are either
delivered beforehand or are brought to the precinct by the Poll Workers. The JBC
is the host for a serial-connected network consisting of one JBC and from one to
12 eSlates, depending on the size of the precinct and the anticipated turnout of
registered voters. The eSlates in the booths are linked together with booth-to-
booth cables and the eSlate in booth one is connected to the JBC with the JBC-to-
booth cable.
The Polling Place Official begins by plugging in the system through a single
power connection to the JBC. All eSlates attached to the JBC are then
instantaneously and simultaneously activated in diagnostic mode. When power is
applied to the JBC, a power on self-test is run by the internal software and a check
is performed for the presence of the MBB.
The MBB may have been installed at headquarters or can be installed at the
polling place. The JBC reads the MBB and verifies that it contains the proper
data. The first step in pre-election sequence requires the Polling Place Official to
enter the polling location into the Controller and assign booth numbers to the
eSlates. Assigning booth numbers is accomplished simply by pressing the Enter
button in each connected eSlate.
At this point, a "zero count" tape is printed from the Controller and the polls are
ready to open. Only after the zero count tape is produced does the Controller
display the option to open the polls. The Polling Place Official selects "Open
Polls" and then is prompted for an optional password. The polls open and the
© 2003 H
ART
I
NTER
C
IVIC
4 - 45
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
Controller's Booth Status Lights are green, indicating each connected eSlate is
"Available."
The process of opening the polls, including setting up booths and connecting all
devices, can be completed in a typical polling place (four to five booths) in less
than 15 minutes. The time required from the point power is applied to the JBC to
the point that the eSlate devices are ready accept votes is measured in seconds.
Throughout the day, as each vote is cast, a Cast Vote Record (CVR) is created
and stored in three physically separate locations. One CVR is stored on the eSlate
device on which it was cast, another in Flash memory on the JBC, and the third on
the MBB. The creation of "triplicate original" Cast Vote Records has several
advantages:
It provides data redundancy and an audit path that can be used in the event
of a recount or challenge.
It assures a high level of data integrity since the system is able to perform
constant validation checks to ensure data consistency.
By storing CVRs on physically separate devices, the danger of losing a
vote if a single unit becomes inaccessible disappears.
Once voting is complete, the polls are closed through the JBC in a few simple
steps. The polling place official presses the "Close Polls" button on the JBC and
each eSlate attached to the JBC is immediately deactivated. Unlike other systems,
the polling place official does not need to "harvest" votes from each individual
machine, since the "triplicate original" feature has already stored all Cast Vote
Records on the JBC and the MBB.
It is also at this point that the polling place official can modem results, if the
County has chosen to do so, and can also print a polling place/precinct tabulation.
Each component of the eSlate System creates a complete audit log of all actions
that affect it. At the polling place, each individual eSlate unit maintains an audit
log, and an audit log for the polling place is maintained on the Judge's Booth
Controller.
All eSlate components generate comprehensive audit logs. However, the eSlate's
architecture at the polling pace eliminates the requirement to gather such logs
from stand-alone units. Instead, the Judge's Booth Controller automatically
compiles audit logs from devices it controls. The eSlate System's SERVO utility
can be used to easily gather audit logs from all eSlate voting devices and JBCs as
part of standard post election processes for verification and archiving and
resetting equipment.
(2) Describe the post election night process to capture any information not
captured during the transfer of votes to the tabulation system. The list
© 2003 H
ART
I
NTER
C
IVIC
4 - 46
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
should include ballot images, hardware logs, device activity logs, and
operator activity logs.
Hart InterCivic Response
All information is captured and transferred to the tabulation system on Election
Night. All Cast Vote Records and audit data is supplied to Tally when the MBB
is read. The voting system does produce additional records stored on the precinct
equipment through the "triplicate original" process. This data takes a different
path, thereby elevating the security and auditability of the system.
Following Election Day, data and equipment management is managed through the
SERVO software component of the eSlate System.
SERVO is a software application that tracks the Precinct Voting System
equipment maintained by the jurisdiction. The primary purpose of SERVO is to
manage the data supplied by the precinct hardware (individual eSlates and JBC),
maintain on-going equipment history, and supply election records as required.
SERVO is used to back up the triplicate original cast vote records and audit logs
from eSlates and JBCs used in an election. The backed-up data can then be used
to verify, or recount, the MBB-generated tabulation results and to provide reports
on cast vote records, audit logs, and equipment used for the election.
SERVO may also be used to recover data from equipment in the event of a lost or
damaged MBB, to reset equipment as needed, and to set the clock on a JBC.
SERVO uses the triple redundancy features of the eSlate Electronic Voting
System to their fullest advantage. Election results are initially generated from the
direct reading of MBBs into Tally. SERVO generated recount data from the JBC
and eSlate memories can be used to compare against the MBB results, creating a
distributed, closed-loop process that provides redundant cross verification of
election results. This makes the ability to recount election results a seamless
option for every election cycle, increasing system reliability and security.
SERVO is intended for use at a jurisdiction's warehouse, or the location at which
all of the JBCs and eSlates are stored. It is typically used prior to deployment of
JBCs and eSlates and at the conclusion of an election. Equipment management
tasks include adding a device's public serial number to the SERVO database and
resetting a device.
SERVO creates a database of:
the public serial numbers of PVS equipment maintained by a jurisdiction
reconciled records of the duplicate original Cast Vote Records (ballot
images) and audit logs from eSlates and JBCs used in an election.
© 2003 H
ART
I
NTER
C
IVIC
4 - 47
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
(3) Give an estimate of the time to set up the system components (i.e., DREs
and controller unit) to make them ready for delivery to the polls. This
should include a list of the steps necessary to set up each component and
the time required for each step. Do not include the time needed for
retrieval or storage of the device. List shall include all activities necessary
from the point they are removed from storage to the point they are ready
to be delivered to the polls (e.g., powering on unit, clearing prior election,
hardware test and setup if necessary, loading election data, tagging
device, maintenance of printer, etc). Include, in detail, a description of the
testing procedures for all components of the system and automated tools
available.
Hart InterCivic Response
In Exhibit IV-7: Component Set Up Time, we present estimates adapted from Hart
InterCivic's guide for warehouse use when preparing for an election.
Tasks
Average Time to Complete
1. Open Booth/Container
15 seconds per unit
2. Visual Inspection
30 seconds per unit
3. Install audio card in Disabled Access Unit (250 units)
15 seconds per unit
4. Power on functional test
2 minutes per polling location
5. Reset equipment
15 seconds per unit
6. Check paper supply in JBC (250 units)
30 seconds per unit
7. Install MBBs in JBC (250 units)and seal unit
15 seconds per unit
8. Clean screen on eSlate/DAU (Includes closing of
booth)
10 seconds per unit
Exhibit IV-7: Component Set Up Time. The table above presents
estimated time associated with each set up task.
All major subsystems and assemblies (BOSS, Ballot Now, Tally, eSlate units,
DAUs, and JBCs) include automatic diagnostic testing. These tests include error
checking of function output, input validation, Cyclic Redundancy Checks, and
real time error checking. Additional manual functional tests are available for each
subsystem, including testing of the input switches and buttons on the eSlate and
DAUs. For the Polling Place equipment, these tests are performed automatically
upon power up of the system.
The unique design of the eSlate Electronic Voting System allows the "power on
functional test" to consist of nothing more than a button test. There is nothing to
calibrate or adjust. Upon power up, the "Button Test" screen appears on each unit
© 2003 H
ART
I
NTER
C
IVIC
4 - 48
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
and provides a visual confirmation that the test was successful. This greatly
simplifies the election preparation process.
11.0 BALLOT
MANAGEMENT
(INTERFACE TO VOTE
TABULATION SYSTEM)
The Boulder County Clerk & Recorder uses Teamwork Tabulation software.
The current procedure for setting up the Teamwork Tabulation ballot
tabulation system uses information from the ballot layout and from the
Integrity Voter Registration System. This data identifies contests, measures
and candidates for each ballot type, "vote for" rules, and the base order after
applying the state and local candidate and ballot issue positions. The
Teamwork ballot counting program is manually configured from this data
with all contest and ballot type definitions keyed in to a separate program.
Both precinct ballots and absentee/mail/provisional ballots are tabulated
using the same program.
11.1 Requirement
The proposed software shall automatically transfer all ballot setup
information from the ABL system to the ballot tabulation system for both
DRE and absentee/mail/provisional ballot processes.
Hart InterCivic Response
Tally is the eSlate's tabulation and reporting application. Tally reads, stores, and
tabulates the Cast Vote Records from Mobile Ballot Boxes and provides a flexible
reporting engine. Tally assures Boulder County election officials that tabulation
is a simple, straightforward and, most important, accurate process.
At the close of polls on Election Day, all of the MBBs (including those used for
absentee/mail or Early Voting) are returned to the central counting location or
satellite tabulation centers. (Results also may be electronically transmitted from
the polling place or regional collection centers.) The Tally database is initialized
by the locked BOSS database that was used to create the election. This
initialization prepares Tally for tabulation.
Tally accepts results in the form of Cast Vote Records from MBBs, and tabulates
all Election Day, absentee, provisional, and Early Voting votes. The integration
of results from these various voting options is seamless, since all Cast Vote
Records come from the voting process to Tally on the MBB. Future voting
methodologies (for example, Internet Voting) will be handled in the same manner
to maintain the highly integrated nature of the system.
11.2 Proposer's Response
© 2003 H
ART
I
NTER
C
IVIC
4 - 49
RESPONSE TO SECTION
IV,
REQUIREMENTS AND SUBMITTAL
B
OULDER COUNTY
,
COLORADO
VOTING TABULATION
b. How do you propose to meet this requirement? Make sure to include
item(s) listed below:
(1) Describe the process required to prepare the ballot tabulation portion of
your system after the ballot layout has been completed and proofed.
Hart InterCivic Response
All data is automatically transferred to Tally from the Ballot Origination Software
System. When the Tally application is launched, a BOSS database must be
selected to open a new election to tabulate. When the BOSS database for the
Election is selected, the data in BOSS is transferred to Tally automatically.
Tally assures the Election Official that tabulation is a simple, straightforward, and
most important, an accurate process. At the close of polls on Election Day, all of
the MBBs (including those used for absentee/mail or the Early Voting process)
are returned to the central counting location. The Tally database is initialized by
the locked BOSS database that was used to create the election. This initialization
makes the ballot definition data available to Tally for tabulation.
Tally accepts results from and tabulates all Election Day, absentee/mail, and Early
Voting votes and election canvass information. The integration of results from
these various voting options is seamless, since all CVRs come from the voting
process to Tally on the MBB.
Many procedures that would be handled manually by other systems are automated
by using Tally. Write-in candidates from both the DRE (eSlate) and ABS (Ballot
Now) options are tabulated by Tally. Prior to tabulation, the names and any
acceptable aliases for the certified write-in candidates are entered into the Tally
application. During tabulation, Tally reads the CVRs from all MBBs. These
MBBs include the write-in candidate names generated at the eSlate, or during
absentee/mail ballot resolution. Votes for the write-in candidates are counted and
reported, as for all candidates. The names of write-in candidates are displayed in
reports with the annotation "(W)."
Under current Colorado law and procedure, provisional voters use paper ballots;
the eSlate System meets this requirement through the Ballot Now System.
Absentee/mail/provisional ballots, produced through the eSlate System's Ballot
Now component are separated from other cast votes and held for scanning, and
therefore tabulation, until a determination of eligibility is made.
However, in the event that Colorado permits electronic processing of provisionals,
the eSlate includes integrated capability for managing provisional votes.
a. Will you meet these requirements?
Yes X No