Patent ID: 7637429

Claim:
An electronic voting system, comprising: a central processing unit to control operation of the voting system; a vote security device separate from the central processing unit and operatively coupled to the central processing unit, the vote security device having a processing unit, a key storage for storing a cryptographic key, and a cryptographic engine for generating encrypted and/or digitally signed messages using said cryptographic key for sending to the central processing unit; a security device that provides a cryptographic boundary for the vote security device, the central processing unit being outside of the cryptographic boundary, the security device being operable to detect tampering with the vote security device; a user interface coupled to the central processing unit for presenting a ballot to a voter and for enabling said voter to make one or more selections on said ballot; an audit trail printer operatively coupled to said vote security device and said central processing unit, said audit trail printer printing a paper audit trail ballot only in response to one or more of said messages generated using said cryptographic key received from said vote security device, said paper audit trail ballot being based on and indicating the one or more selections made on said ballot by said voter, said audit trail printer being structured to allow said voter to view but not physically access said paper audit trail ballot, said printed paper audit trail ballot being accepted or rejected by said voter via said user interface, said vote security device causing said audit trail printer to print a rejection indicator on the printed paper audit trail ballot to create a rejected paper audit trail ballot if said voter rejects the printed paper audit trail ballot, said vote security device causing said audit trail printer to print an acceptance indicator on the printed paper audit trail ballot to create an accepted paper audit trail ballot if said voter accepts the printed paper audit trail ballot; and a vote database operatively coupled to said vote security device via said central processing unit, said vote security device causing a vote database record to be stored in said vote database that includes at least the one or more selections made on said ballot by said voter and an indication as to whether said voter accepted or rejected the printed paper audit trail ballot, said vote database record including a digital signature generated by said vote security device using said cryptographic key and said cryptographic engine.