Voters can independently verify that their votes have been counted correctly. Voters can cast their votes quickly, in one session, and with minimal equipment or special skills. A variety of ballot question formats including open ended questions are permitted. There are no restrictions on the location from which a voter can cast a vote. However the more private of these schemes are inconvenient or impractical for large-scale elections.
Voters use the tags as tokens that permit their votes to be counted.
This scheme is verifiable. However, if the validator and tallier collude they can determine the mapping between tag and voter, violating voter privacy. This solves the collusion problem, but it requires the use of a very complex protocol for distributing tags. Our solution is based closely on this scheme. Sensus has been designed as an easily adaptable modular system.