TGDC Meeting, July 2011

UOCAVA Roadmap Update

Nelson Hastings, Ph.D.

Technical Project Leader for Voting Standards, ITL

http://vote.nist.gov 

*

TGDC Meeting, July 2011

Page *

Purpose
        - Provide an update on the UOCAVA roadmap presented at the last TGDC meeting

TGDC Meeting, July 2011

Page *

Completed Activities
        - EAC guidelines for kiosk-based remote voting pilot projects
        - Uniformed and Overseas Citizens Absentee Voting Act (UOCAVA) Pilot Program Testing Requirements
        - Final version released August 25, 2010
        - UOCAVA Solutions Summit organized by FVAP, EAC, and NIST
        - Held August 6-7, 2010 in DC
        - FVAP’s Electronic Voting Support Wizard (EVSW) pilot program
        - Utilized in November 2010 election

TGDC Meeting, July 2011

Page *

Completed Activities
        - FVAP Metrics – December 2010
        - NISTIR 7770: Security Considerations for Remote Electronic UOCAVA Voting
        - Final version released February 23, 2011
        - EAC, FVAP, and NIST provided EAC’s Advisory Boards with information about legal, technical, and policy issues associated with remote election voting systems
        - Panelists at Standard Board meeting on February 24-25, 2011 in Oklahoma City
        - Presentations at Board of Advisors meeting on June 6-7, 2011 in DC

TGDC Meeting, July 2011

Page *

Completed Activities
        - TGDC’s Draft “Accessibility and Usability Considerations for UOCAVA Remote Voting Systems”
        - Delivered to EAC on March 2, 2011
        - Identify possible 2012 pilot projects for TGDC development material
        - TGDC whitepaper titled “Possible UOCAVA Pilot Projects for the 2012-2014 Federal Election” delivered to EAC on March 2, 2011

TGDC Meeting, July 2011

Page *

Completed Activities
        - FVAP provided a detailed description of the extent and nature of UOCAVA voter successes and the applicability of historical programs to address the causes of lower success rates
        - Part of the “2008 Post Election Survey Report” released on March 17, 2011
        - FVAP organized a Secure Ballot Delivery workshop 
        - Follow-up to the UOCAVA Solutions Summit
        - EAC and NIST participated in workshop
        - Held on March 23-24, 2011 in Chicago

TGDC Meeting, July 2011

Page *

Ongoing Activities
        - NIST leading effort for Common Data Format for blank ballot delivery in conjunction with IEEE
        - Currently in the IEEE editorial review process
        - Out for IEEE-SA ballot in August 2011
        - Approved version: Fall 2011
        - FVAP Cyber Security Review Group (CSRG)
        - First meeting held on July 1, 2011
        - Provide background and outline objectives of CSRG
        - Describe FVAP program of work for UOCAVA voting
        - Next meeting scheduled for November 2011
        - Presentation of initial results from voting system test laboratory testing and penetration testing

TGDC Meeting, July 2011

Page *

Ongoing Activities
        - NISTIR 7711:Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters
        - Final version: August 2011
        - NISTIR 7682: Information System Security Best Practices for UOCAVA-Supporting Systems
        - Final version: August 2011
        - EAC is collecting and compiling information on previous international internet voting efforts
        - Tentatively titled “A Survey of Internet Voting and Associated Risk”
        - Final version: August 2011 

TGDC Meeting, July 2011

Page *

Ongoing Activities
        - TGDC development of high-level guidelines for remote electronic absentee voting systems
        - UOCAVA working group will present a draft version for discussion at this meeting
        - FVAP’s Electronic Absentee System for Elections (EASE) grant program
        - Grants to support blank ballot distribution to UOCAVA voters for November 2012 deployment
        - Applications received by July 11, 2011 currently under review

TGDC Meeting, July 2011

Page *

Ongoing Activities
        - UOCAVA Solutions working group organized by FVAP
        - Follow-up to the Secure Ballot Delivery workshop
        - EAC and NIST to participate in working group
        - Next meeting scheduled for August 6-7, 2011 in San Francisco 
        - FVAP review of 2010 state activities for UOCAVA voters
        - Final report: October 2011
        - FVAP lessons learned review of EVSW pilot program
        - Final report: October 2011

TGDC Meeting, July 2011

Page *

Ongoing Activities
        - FVAP is having voting system testing laboratories (VSTLs) test five EVSW wizards to the security requirements in EAC’s UOCAVA Pilot Program Testing Requirements 
        - Final report: October 2011
        - Mock election and penetration testing organized by FVAP to be held on August 2-4, 2011
        - Four teams will perform penetration 
        - Final report: October 2011
        - FVAP Wounded Warrior project demonstration: August 24-28, 2011

TGDC Meeting, July 2011

Page *

Future Activities
        - TGDC to develop requirements for the UOCAVA demonstration project
        - UOCAVA working group in the process of developing their approach and will provide update at this meeting
        - TGDC to develop risk analysis of the current UOCAVA voting process
        - UOCAVA working group in the process of developing its approach and will provide update at this meeting
        - Update of EAC’s UOCAVA best practices
        - Due to limited EAC resources no timeline can be provided

We will need to say something about TGDC role – if only to say it’s still to be determined...

TGDC Meeting, July 2011

Page *

Future Activities
        - 2012 FVAP pilot projects
        - Utilization of EASE grant funded projects from FVAP
        - November 2012
        - FVAP review of EASE grant lessons learned 
        - Review of the EASE grant funded projects used in the 2012 election
        - Final report: August 2013
        - TGDC to provide technical support in analysis of lessons learned from 2012 pilot projects
        -  Spring/Summer 2013, if requested by FVAP

We will need to say something about TGDC role – if only to say it’s still to be determined...

TGDC Meeting, July 2011

Discussion/Questions

Page *