December 3, 2007 Dear NIST, We would like to introduce a new Voting…

December 3, 2007

Dear NIST,

We would like to introduce a new Voting Technology called "Retro-control". This
is the first method which combines full transparency with complete anonymity
guaranteed and prevents from selling and buying one's votes.


Below is an overview of the method, while details could be found in a patent
description, patent application # PCT /RU2007 /000500. (see
http://www.retro-control.narod.ru/eng/html/solution.html).

Provided, there is an electronic voting system we propose to equip it with a
printing device and adjust the software so that the screen before one casts
a vote shows his/her unique identity code which is on the screen until the voter
finishes his/her voting session.

After that the screen shows the list of nominees for the voter to choose from and
vote for.

The printing device then prints out a document for the voter that we call "voter
certificate" or simply "certificate". The differences between a ballot paper and a
certificate are outlines below:

a) A voter keeps a certificate with himself/herself instead of casting it into a
ballot box.

b) To the right from nominee names printing devise inserts the identity codes
of various voters into each line of the certificate but not into the only one. The
line which is corresponding to the voter choice is inserted with a code visible on
the screen. The rest of lines are inserted with different codes of the real voters
who took their votes earlier.

For example, if a voter is coded 2201 with his/her vote for the Republican Party,
his/her certificate would look as follows (in case a voter is unique within a ballot
district):

Democratic Party            0112
Republican Party            2201
Socialistic Party         0943
Green Party              1118

Numbers 0112, 0943 and 1118 are codes of unknown voters who voted for
democratic, socialistic and green party accordingly. Once the voter is given the
certificate, he/she ascertains that his/her code 2201, which has been shown on
screen, is the same as that in the second line of the certificate standing for
Republican Party. After that the code disappears from the screen and a voter
leaves the ballot station with certificate.

It is then proposed to publish the returns in codes like in above example so that a
voter using his/her certificate could control both his/her vote and those of other
unknown voters whose codes are shown in the certificates. Each discrepancy
should be document supported, corrected and, perhaps, repaid for to the voter
that found a discrepancy. Showing the certificate with discrepancies to any
authority, a voter does not disclose his/her vote, because one can not prove that
the identity code in the line with discrepancy belongs to him/her.

In this way, a voter has a document to be able to question the returns, if the data
in his/her certificate are not completely the same as in officially published code
returns. Moreover, one can not sell and buy votes using this kind of certificate. It
is impossible to define with this document the choice of the voter, because only
original recipient knows his/her identity code, therefore, the seller cannot prove
that he/she voted as required by the buyer, thus, making no sense in the deal.

Our method is an opportunity to control one's own vote for those who did not
take a vote. For this purpose we propose to publish the list of voters who has
taken their votes with so arrangement by address that it guarantees anonymity
for voters who has taken and has not taken theirs votes. If the quantity of the
voters in one apartment is nil, or it is equal to the quantity of the voters so the
information on this address can not be published separately. It can demonstrate
the choice of voters who took the vote or who didn't take. This address should be
combined in the list with neighbor apartment. If the combined sum after two
apartments is equal neither to nil nor the total quantity of the voters it can't be
defined who personally took the vote and who didn't. There can be many
combinations of addresses. It can be the quantity of the voters within the story or
within the entire house or few houses. It is easier for the neighbors to exchange
the information and check the authenticity of the address list of the voter
quantity.

Because the total quantity of the voters must be equal to the quantity of the voters
in the list of code returns then it's enough to make sure after returns publication.
Nobody can accuse in falsification of the factious votes neither election
committee nor electronic system designers.

If there is no centralized electronic system of the voting we propose to create
simplex electronic system of the local scale when using "Retro-Control".
It consists of usual computers with printing devise. It is desirable to combine the
computers in the Local Network but it is enough to use the diskette for the
computer exchange. To follow the principle of secret ballot the monitor of the
computer should be covered with pyramid-shaped housing. There is an
eyehole on the top of the pyramid and it is the voter who may see the screen
picture. The voter can make a choice with the help of the electronic pointing
devise for example the mouse. The rest procedure doesn't differ from the one
described above.

For the voting at home and at the remote locations it is advisable to use portable
computers instead of ballot box. The screen of such computer also should be
hidden from the extraneous eyes with curtains for example. If there is a portable
printing devise so the certificate is printed automatically. If there is no devise the
certificate should be filled in by the present member of the election committee
manually. In this case the voter should memorize his/her code and press the
button. After it the code should be erased and one can see the image of his/her
certificate with the lines filled in. Then the screen can be seen and all codes are
written down in the certificate manually.

If there is no possibility to use the computers at polling place (it is a very rare
situation nowadays) we propose to use so called voting counter. It is the isolate
cabin with the cashier one of the members of the committee inside. The voting
counter is equipped with the observation eyehole. It is only the voter who can see
from outside the process of voting inside. Instead of the computer mouse the
choice is made with the pointing devise for example the fescue available outside
the voting counter. The cashier acts as a computer algorism. He defines the code
of the voter at random; cumulates code returns; fills in the certificates manually
and gives this paper thru the extending window.

The results of the voting can be published at the Internet and be sent thru mobile
telecommunication system, by means of sms short message service. But
it is easy for the voter to get the lists of code returns and addresses of the voters
from the election district by regular mail as a newspaper. Besides, local press
contains the election returns tables of each district; the regional press the
election returns tables of all districts; central press the election return tables of
all region (province). So it is easy to check if the returns in tables were counted
wrong. Thus, each voter can buy three newspapers (local, central and regional)
after the election to make sure if:

1) the district returns were included correctly into central ones;
2) the central returns were included correctly into regional ones;
3) the regional returns were included correctly into general returns.
So each voter can control every stage of elections.

As a conclusion let's get back to the advantages of our method.

1. As we proved before the system of poll is getting more transparent but the
anonymity provides the freedom of choice and the secret ballot principle. It is
advantage of the method. If the voters control the election returns the possibility
of sporadic errors in counting and malicious falsification of the results are
expelled. Whatever small the break between winners and loser of the elections
within the new system people may not worry because the loser party has to find
honest the victory in even one vote or to prove the opposite.
2. Besides the practical aspects there are moral and personal ones. The right
and possibility to control your own vote is the development of the civil rights and
freedoms. It brings the moral value to each citizen which must be developed.

3. Public affair and social significant advantages of the "Retro-control" system
come from the situation when it is impossible to accuse without adducing any
proof or just to suspect somebody in falsification of the election returns. It
follows that the legitimacy and authority of the person or party elected are getting
higher and the social concord is becoming stronger.

4. The party or a person elected thru the "Retro-control" method will be
granted the prestige on the international arena and the whole country will
be accepted as an advanced country with the democratic elections system.

5. Nowadays many designers of the electronic elections system have to make
their inventions more transparent for control. Sometimes they have to provide
the primary codes of the software. Because when one relies on the honesty of the
designers the scholars believe that the possibility of coup d'etat exists. However
the more transparent the system is the more possible this system can be exposed
to the unauthorized break-in. The "Retro-control" method solves this problem
drastically. When the voters can control their votes there is no need to control the
electronic system organization. The protection from the outer break-in is the
prerogative of the system designers and they will get the right and responsibility
to protect the system anywise and to blackout its organization.

6. The proposed system of the view thru the eyehole gives the possibility to the
watchers to control even the fingers movements of the voter. So the sharp voter
can't make a picture of his/her choice on the cell phone camera to sell his vote
then.



With best regards,
the designer of the "Retro-control" method
 Zulin A.M.
Ul. Soyuza Respublik 17-15
Barnaul, Russia, 656038