Electronic voting in Brazil
Electronic voting was first introduced to Brazil in 1996; with the first tests carried out in the state of Santa Catarina. The primary design goal of the Brazilian voting machine is extreme simplicity, the model being a public phone booth.
The first Brazilian voting machines were developed in 1996 by a Brazilian partnership of three companies OMNITECH (previously known as TDA), Microbase and Unisys do Brasil attending the TSE RFP for the Brazilian Elections in 1996. This machine was a modified IBM PC 80386 compatible clone, known as UE96. In 1998, Diebold-Procomp, Microbase and Samurai (formerly known as OMNITECH) partnered to produce UE98. In 2000, Microbase and Diebold-Procomp developed the UE2000 together. In 2000, Brazil completed the first completely automated election.
The original operating system was VirtuOS, similar to DOS and includes multitasking support, was developed by Microbase. It was used in the 1996, 1998 and 2000 elections. In 2002, Unisys was unable to renew their partnership with Microbase, and were unable to reuse the VirtuOS based code. Microsoft stepped in, and provided licenses Windows CE operating system free of charge. In 2008, Diebold-Procomp migrated to a Linux OS to reduce costs.[1]
The Brazilian voting machine accomplishes three steps (voter identification, secure voting and tallying) in a single process, eliminating fraud based on forged or falsified public documents. Political parties have access to the voting machine's programs before the election for auditing. There still remain some questions about the security of the electronic voting system, but no case of election fraud has been uncovered:
- Critics argue that the voting machines do not produce receipt for the voter, nor maintain an internal paper based journal which would allow for vote auditing. This makes them highly dependent on trusting the software. The application program which verifies the internal integrity of the system is itself vulnerable to modification.[2] An inspection by the City of Sto. Estevão, Bahia described the system of seals and closure of the machine as simple, and allowed easy access to the internal memory slot.[3][4]
- It is possible to violate the secrecy of the vote, obtaining the list of the Voter registry IDs and the order of the votes. So by simple comparison one could determine which ID voted for which candidate.
- Election workers could vote in place absent voters without their permission. However, as voting sections are composed of multiple workers drawn at random from the population as a means of preventing this type of fraud.
On the eve of an election, the election authorities in each State select a number of voting machines by lot (all available voting machines take part in that lot, identified by their serial number), and those machines so selected, instead of being used in actual pooling stations, are retained in the seat of the State's Regional Electoral Court for a "parallel voting", conducted for audit purposes in the presence of representatives designated by the political parties. The audit vote takes place on the same date as the election. This parallel voting is a mock election but the votes entered in the voting machine are not secret, instead they are witnessed by all party representatives present at the audit process. The whole audit is filmed, and the representatives of the political parties present for the audit direct publicly that a random quantity of votes are to be inserted in the machine for each candidate. A tally is kept of the instructions received from each party representative. Each party representative orders a number of votes to be inserted at the machine, but he only reveals that number, and the recipients, during the audit. So, the numbers are not previously known, because the only way they could be known by others is if there were a collusion between rival parties. At the end of the process, then, when all the parties have directed that certain number of votes then chosen are to be registered for each candidate in the audit vote, the votes ordered to be inserted by each party representative for each candidate are added up, and the total number of votes of the mock election is known, as well as the total number of votes of each candidate. Once the mock votes end and the profile of the vote is known, the electronic counting of the votes contained in the voting machines used during the audit takes place. The result indicated by the voting machines software has to correspond to the previously known result. As the machines were selected at random by lot, if the result given by the software corresponds to the previously known result resulting from the sum of the parties's public instructions (which has happened in all elections so far), the system is deemed by the election authorities as reliable for receiving, properly registering and accurately tallying the votes. Given that the machines are chosen at random, the reliability of the chosen ones is deemed to represent the reliability of the others. If the audit failed to produce a positive result (the matching of the votes counted to the sum of the instructions), then the whole election in the State in question would be void.
The voting system has been widely accepted, due in great part to the fact that it speeds up the vote count tremendously. In the 1989 presidential election between Fernando Collor de Mello and Luiz Inácio Lula da Silva, the vote count required nine days. In the 2002 general election, the count required less than 12 hours. In some smaller towns the election results are known minutes after the closing of the ballots.
Supporters of the electronic vote claim that unless the fraud were intentionally designed into the machines, it would be impossible to carry an extensive fraud in such a small amount of time. The Brazilian Supreme Electoral Court (TSE) regularly funds research aimed at improving security. The source code to the voting software is proprietary and the public is not able to examine it. In order to be able to recount the votes, a printing system has been developed and a new electoral registration system is planned.[5][6]
Brazil loans the machines to other countries. They have been used for elections in Paraguay and Ecuador, and there are plans to export the patented machines.
A new biometrics-based voting machine, with an additional apparatus that does the voter's fingerprint recognition before allowing the ballot to be cast, started being used in 2012.[7] TSE is gradually gathering the fingerprints of all registered voters to spread the process, that will be used by 22 million voters in the 2014 general election.[8]