• silicon.com
• Technology
• Security

By Robert Lemos, 22 January 2004 09:20

NEWS Four computer security experts have warned proponents of internet voting that such systems cannot be secured against fraud.

The experts - three computer science professors and a former IBM researcher - said on Wednesday that creating an e-voting system that both guarantees each person votes once and protects the voter's identity is impossible on the current internet system.

"Basing a voting system on the internet poses unavoidable risks of voting fraud and privacy risks," said David Wagner, an associate professor of computer science at the University of California at Berkeley. "They are unavoidable and can't be fixed."

The report comes as the US Department of Defense prepares to launch the Secure Electronic Registration and Voting Experiment (SERVE), a system that will let absentee military voters in 50 counties in seven states place their votes. The inauguration of the technology will occur with South Carolina's presidential primary on 3 February. Eventually, the programme will be expanded to handle the votes of nearly 6 million US military personnel and civilians abroad.

Early elections may dodge any online attacks because the number of potential voters will initially be small, according to the security experts. However, early successes could lead to widespread adoption of the system, which would eventually leave entire elections open to attack, the report said.

"If you vote from an insecure home computer over an insecure network, you have an insecure election," Wagner said.

The worries over internet voting build upon ongoing concerns over the security and reporting features of e-voting machines. The issues have cast a cloud of uncertainty over the upcoming election season, forcing ballot machine vendors to address a host of complaints over their products amid signs of an escalating voter backlash.

The SERVE project is designed to gather data on whether internet voting will significantly help bring overseas citizens to the virtual ballot box.

"This is a group of voters that is extremely disenfranchised today," said Meg McLaughlin, president of eDemocracy Services for technology consultancy Accenture. She added that as many as 50 per cent of overseas voters don't vote because the current system is too complex. The Defense Department contracted Accenture to build the SERVE system.

Wagner and the other authors of the report were four of the 10 security researchers who analysed the planned system at the request of the Federal Voting Assistance Program (FVAP), a branch of the Defense Department. The six other members believed the system could work, said Glenn Flood, a spokesman for FVAP.

"Security is something that we have been concerned about from the beginning," he said, adding that the department and its contractors took security advice into account. "We didn't just learn about these concerns today."

Robert Lemos writes for CNET News.com.