WO2004032065A1 - Voting apparatus and method of recording votes - Google Patents

Abstract

A voting apparatus for use in an election includes a voter terminal (2), a presiding officer module (4) and an organiser module (6). The voter terminal (2) includes a voter module (10) and a plurality of candidate selection modules (14), each candidate selection module including at least one candidate selection switch (12) and means (60) for generating an electronic selection signal representing a selected candidate. The candidate selection modules (14) may be connected to the voter module (10) in a plurality of different configurations, to adapt the voter terminal (2) according to the number of candidates and/or rules of the election.

Description

NOTING APPARATUS AND METHOD OF RECORDING VOTES

The present invention relates to a voting apparatus and a method of recording votes. In particular, but not exclusively, the invention relates to an apparatus and a method for recording and counting votes, and in a preferred embodiment provides a flexible and modular apparatus and a method for electronically recording and counting votes for many varied types of elections.

The process of holding a ballot to enable people to vote secretly is central to a democratic system. The traditional method of voting is by placing a mark on a ballot paper and placing the paper into a ballot box. There are many advantages to this process. It is simple and well understood by most people. It requires very simple equipment, that is paper, pens and boxes. For large ballots it is easy to have multiple "polling stations" to ensure voters are not disadvantaged by their physical location. Secrecy of marking the ballot paper is easy to achieve. Many different types of election can be held using the same process.

However, a major problem with the process is the' time and effort required to perfomi a manual count. The counting time and effort may be acceptable for a simple ballot (e.g. one vote, "first past the post" winner) but can become extremely difficult for more complex ballots (e.g. two or more votes, proportional representation). For this reason a number of electronic counting and electronic voting systems have been proposed.

These electronic counting systems fall into two broad categories.

Firstly, there are systems which aim to maintain the use of a ballot paper but use machines to count the marks on the papers once all votes have been cast. Although this can be quicker than a manual count it still requires all ballot papers to be "scanned" as a mechanical process and in the case of a large scale ballot requires a large number of complex machines. This results in a process that is still quite time and labour intensive and is relatively expensive.

Secondly, there are electronic voting systems which aim to remove the ballot paper and replace it with an electronic device of some kind (e.g. a computer terminal with touch sensitive display). Such systems suffer from the disadvantage that they are expensive. One or more computer terminals with display need to be available in each polling station and for particular elections this may require thousands of devices. Also, use of the equipment can be complicated because the display is of a fixed size and may not be able to display all candidate details at one time. Therefore the voter is required to select more than one screen of information before voting.

According to a first aspect of the present invention there is provided a voting apparatus for use in an election, the voting apparatus including at least one voter terminal for use by voters to cast votes for selected candidates, said voter terminal including a voter module and a plurality of candidate selection modules, each candidate selection module including at least one candidate selection switch and means for generating an electronic selection signal representing a selected candidate, wherein said candidate selection modules may be connected to the voter module in a plurality of different configurations, to adapt the voter terminal according to the number of candidates and/or rules of the election.

The voter module may include means for confirming and/or cancelling the selection of a candidate.

The voter module may include means for generating a vote signal representing a selected candidate.

Preferably, the voter module includes an interface for communicating with a remote teraiinal.

Preferably, the voter module includes means for transmitting vote signals to the remote teπninal

Preferably, the voter teπninal is controllable via control signals received from a remote teπninal, the controllable functions including an activation/deactivation function.

Preferably, the controllable functions include a test function.

Preferably, each selection module includes at least one connecting element for connecting the module with an adjacent voter module.

Preferably, each selection module includes at least one electrical connector for connection with an adjacent voter module. Preferably, the electrical connector includes a serial bus. Preferably, each selection module includes a programmable micro-controller. Preferably, each micro-controller is programmable to store a unique identification address.

Preferably, the selection modules may be assembled to forai a two-dimensional aπay.

Preferably, the voter teπninal includes a legend module for displaying details of the candidates. The legend module is preferably constructed and arranged to receive a printed label bearing details of the candidates.

Preferably, the voting apparatus includes a remote teπninal, the remote temiinal including input/output means for communicating with a voter temiinal, vote detection means for detecting selection signals generated by the voter temiinal, and data storage means for- storing data contained in the selection signals.

Preferably, the remote teπninal includes means for transmitting an acti vation/deactivation signal to the voter temiinal.

Preferably, the remote temiinal includes means for transmitting a test signal to the voter teπninal.

Preferably, the remote teπninal includes means for assigning unique addresses to the voter modules making up the voter teπninal.

Preferably, the apparatus includes an organiser temiinal that may be interconnected with the remote teπninal said organiser temiinal including means for downloading election rules to the remote terminal.

Preferably, the organiser temiinal includes storage means for storing votes transfeπed to it from the remote temiinal.

According to a further aspect of the invention there is provided a method of recording votes in an election, the method comprising assembling a modular voter temiinal according to the number of candidates and/or rules of the election, the voter temiinal including a voter module and a plurality of candidate selection modules that may be connected to the voter module in a plurality of different configurations, each candidate sel ection module including at least one candidate selection switch and means for generating an electronic selection signal representing a selected candidate, and recording votes cast by voters by detecting and recording electronic selection signals generated by the voter temiinal.

Preferably, the electronic selection signals are recorded by a remote teπninal.

Preferably, the voter teπninal is controlled via control signals received from the remote temiinal, the controlled functions including an activation/deactivation function.

Preferably, each selection module is assigned aunique identification address by the remote teπninal.

Preferably, election rales are downloaded to the remote terminal from an organiser temiinal.

Preferably, recorded votes are downloaded from the remote Leπninal to the organiser temiinal.

The voting apparatus preferably includes at least one modular voting teπninal, said modular voting teπninal including a plurality of voting modules that may be interconnected in a plurality of different configurations to provide a voting temiinal having a plurality of vote selection means, each voting module including at least one vote selection means, at least one indicator means for indicating a vote selection and at least one vote signalling means for generating a vote signal in response to a vote selection.

According to one prefeπed embodiment of the invention, there is provided a vote recording & counting apparatus and method that is inexpensive to produce and supply to large numbers of polling stations, but that enables votes to be recorded and counted electronically.

According to another prefeπed embodiment of the invention, there is provided a vote recording & counting apparatus and method that is flexible and modular in nature such that varied types of elections (e.g. one vote, first and second choice, multiple contests) and varied numbers of candidates can be accommodated.

Another prefeπed embodiment of the invention provides a vote recording & counting apparatus and method that is simple to use. According to a further prefeπed aspect of the present invention, there is provided an apparatus for recording and counting votes, which includes a voting temiinal constructed of multiple plastic blocks. A limited number of different block types are present but each bl ock type may be used multiple times and can be interconnected in a multitude of different configurations and quantities to constmct and simulate a ballot paper, or papers, for a particular election process. For different elections the configuration is adapted to suit. The interconnected blocks fomi a fiat rectangular teπninal with locations for each candidate name (and other necessary details) and one or more associated push switches to enable a vote, or votes, to be cast for the candidate. Each switch has a lamp that illuminates to confimi a voting intention. Each block type is simple and similar in construction so they are able to be produced in high volume at a low cost. Consequently, each "tailored" voting temiinal is inexpensive to produce because it is constructed of low cost parts that can be simply fitted together. If required for subsequent, and possibly different, elections the blocks can be disassembled and then reassembled to suit requirements. Alternatively the blocks may be considered as single use disposable parts and voting terminals would be constructed from new parts for each election.

Each type of plastic block is constructed with electrical connectors such that an electric circuit is made when the blocks are fitted together. Blocks containing the switch and lamp parts are fitted with an electronic circuit to control their function. The interconnection of the blocks is such that although the electronic circuits are identical in each switch unit, by use of serial communication 'along rows and columns of blocks, each electronic circuit can electrically detem ine its physical position in the voting teπninal structure.

In accordance with a further aspect of the present invention, a method of recording and counting votes comprises providing an electronic control unit (or remote temiinal) which in the prefeπed embodiment of the present invention is connected to the voter temiinal by an electric cable. The control unit is operated by staff ranning a polling station and controls use of the voter teπriinal and counts the votes cast at the terminal.

The control unit is configured before the start of an election with the election rales (for example, the number of candidates and number of valid votes per voter). At the start of an election the control unit is used to test that the voting temiinal is working and has been configured coπectly. During the election the control unit enables the voting temiinal to be used to cast votes for each voter. Once a voter has used a voting temiinal the temiinal is disabled by the control unit until another valid voter is ready to vote. All votes cast at the teπninal are stored in the control unit, and at the end of the election the stored votes are transfeπed (physically and/or electronically) to any specified place for consolidation with other counts and the announcement of the results.

Certain embodiments of the invention will now be described, by way of example, with reference to the accompanying drawings, in which:

Figure 1 is a block diagram illustrating schematically the main components of the voting apparatus;

Figure 2 is an isometric view of a voter temiinal;

Figure 3 is an exploded isometric view of a voter temiinal, showing the different components of the voter temiinal;

Figure 4 is a block diagram illustrating schematically the interconnections between the electronic circuits of the voting apparatus;

Figure 5 is a block diagram illustrating schematically the main electronic components of a voter module;

Figure 6 is a block diagram illustrating schematically the main electronic components of a switch LED module; and

Figure 7 is a block diagram illustrating schematically the main electronic components of a column selector module.

The following abbreviations will be used in the description of the invention as shown in the drawings:

NT Voter Temiinal - a temiinal used by voters as an electronic ballot paper.

NOM VOter Module - the basic unit of a Voter Teπninal. POM Presiding Officer Module - a remote temiinal that controls a Voter Temiinal and seives as an electronic ballot box. OM Organiser Module - a temiinal that can be used to configure POMs and collect POM data. LEM Legend Module - a part of the Voter Temiinal that carries candidate details.

SLM Switch LED Module - a first fomn of candidate selection module that contains a number of selection switches to be used in making a voting selection. 5 CSM Column Selector Module- a second fomi of candidate selectionmodule that allows for additional columns of SLMs. PO the Presiding Officer.

VotaPad The trade name given to the entire vote collecting system.

The voting apparatus shown in Figure 1 consists of three main components: a Voter 10 Temiinal (VT) 2 that is used by voters to register their votes, a Presiding Officer Module (POM) 4 that the Presiding Officer uses to control operation of the VT 2, and an Organiser Module 6 that is used before the vote to program the POM 4 and afterwards to collect the votes cast by the voters. In use, the VT 2 and the POM 4 are connected to one another by means of a single inter integrated circuit (I2C) serial bus 8. The OM 6 may also be 15 connected to the POM 4 via the I2C bus 8.

The VT 2 is modular and may be reconfigured according to the number of candidates and/or the rales of the electoral system. The basic component of the VT 2 is a Voter Module (VOM) 10, which includes the I2C interface and associated control circuitry for connecting the temiinal to the POM 4. It may also include one or more selection switches 20 12 that can be used by a voter to select a candidate for whom the voter wishes to cast a vote: the version shown in Figure 1 has three such selection switches and can therefore be used on its own in a first past the post (FPTP) election with up to three candidates.

The VT 2 can be extended to allow for more candidates and/or different electoral systems by adding one or more candidate selection modules. These include Switch LED Modules

25 (SLMs) 14 and their associated Legend Modules (LEMs) 16, which allow the terminal to be extended vertically for more candidates, and Column Selector Modules (CSMs) 18, which the temiinal to be extended horizontally, for use in an electoral system that allows each voter to cast a vote for more than one candidate. Furthemiore, one or more secondary VOMs (not shown) could be added for use where two or more elections are being held

30 simultaneously, such as a national and a local election. Electrical connections are provided between the voter module 10 and each of the candidate selection modules 14,18. An example of an assembled VT 2 is shown in more detail in Figure 2, the components making up the same VT 2 being shown in exploded foπτi in Figure 3. This example shows a VT 2 configured for use in an election with seven candidates, who are to be elected using the single transfeπable vote system, where voters are allowed to indicate their first and 5 second choices of candidate. The main components making up the VT 2 consist of one VOM 10, one CSM 18, one LEM 16 and two SLMs 14. Each of these modules is housed in a plastic box having on one or more of its side walls a set of interlocking elements 19 that allow the modules to be interconnected, so foraiing a rigid and durable integrated unit. Each module also includes one or more flanges 20 having screw holes 22 through which 10 screws may be inserted to secure the modules to a rigid base plate (not shown). A set of frame elements 24 are provided for finishing and/or additional strength and/or security.

The VOM 10 includes a plastic box having a^'top surface that is divided into an upper portion 26a and a lower portion 26b. The upper portion 26a canϊes two push buttons: a "Vote now" button 28 and a "Cancel" button 30. The lower portion carries the three

15 selection switches 12, which are ananged vertically adj acent the right hand edge of the box. To the left of and above the selection switches 12 a flat surface 32 is provided, to which a label 34 caπying voting instructions and details of the election candidates can be applied. A transparent cover plate 36 is provided, which may be clipped to the top of the VOM 10 to protect the label 34. The selection switches 12 and the "Vote now" and "Cancel" buttons

20 28,30 each include a light emitting diode (LED), which serves as an indicator to confimi that the button has been pressed. The VOM 10 includes electrical connectors 38 on its^' lower and right hand side walls, allowing it to be connected vertically to a SLM 14 and horizontally to a CSM 18.

The SLM 14 includes four vertically ananged selection switches 12, each of which includes 25 a LED indicator light. The SLM 14 includes electrical connectors 38 on each of its end walls, allowing it to be connected to vertically adjacent modules.

The LEM 16 is in the foπn of a plastic box having a flat upper surface 40, to which the label 34 caπying details of the candidates can be applied. A transparent cover plate 36 is provided, which may be clipped onto the LEM 16 to protect the label 34. In use, the LEM 30 16 is located to the left of the SLM 14 so that the candidate details on the label 34 are aligned with the selection switches 12. The LEM 16 contains no electronic components. The top surface of the CSM 18 includes an upper portion 42a, a lower portion 42b that carries three selection switches 12 and an intemiediate portion 42c for receiving the label 34 and its cover 36. When the CSM 18 is positioned adjacent a VOM 10 as illustrated in Figure 2, the selection switches 12 are adjacent the selection switches of the VOM 10 and aligned with the respective candidate details. This allows a voter to register a second vote for a chosen candidate in an election system that allows for this. The CSM 18 includes electrical connectors 38 on both of its side walls and on its lower wall, allowing it to be connected both vertically and horizontally to adjacent modules.

Further CSM and SLM modules 18,14 may be added as required, to construct a VT 2 that is configured according to the number of candidates standing in the election and the electoral system being used.

As shown in Figure 5, the basic electronic components of the VOM 10 include a slave PIC (Programmable Input/Output Controller) micro-controller 44, which is connected to the vote selection switches 12 and the "Vote" and "Cancel" switches 30,28, each of which contains an indicator LED 46. The micro-controller 44 communicates with the POM 4 through the I2C bus 8, via a buffer 50. The I2C bus 8 has vertical and horizontal extensions through which any connected SLMs 14 and CSMs 18 can communicate with the POM 4, the vertical extension including a second buffer 51. The micro-controller 44 also includes a set of pass through connections, including an input connection 52, which is connected to logic 1 via aresistor 54, a first output connection 56 for connection vertically to an adjacent SLM 14 and a second output connection 58 for connection horizontally to an adjacent CSM 18.

The SLM 14 shown in Figure 6 includes a slave PIC micro-controller 60, which communicates with the POM 4 via the 12 C bus 8 and the buffer 50. The 12 C bus 8 has a vertical extension through which any connected SLMs 14 can communicate with the POM 4. The micro-controller 60 is connected to four vote selection switches 12, each of which contains an indicator LED 46. The micro-controller 60 also includes a set of pass through connections, including a input connection 62, which is connected to logic 0 via a resistor 64, and an output connection 66 for connection to the input of the next vertically adjacent SLM 14. The CSM 18 shown in Figure 7 includes a slave PIC micro-controller 68, which communicates with the POM 4 through the I2C bus 8, via the buffer 50. The I2C bus 8 has vertical and horizontal extensions through which any connected SLMs 14 and CSMs 18 can communicate with the POM 4, the vertical extension including a buffer 70. The micro- controller 68 is connected to three vote selection switches 12, each of which contains an indicator LED 46. The micro-controller 68 includes a set of pass through connections, including a input connection 72, which is connected to logic 0 via a resistor 74, a first output connection 76 for connection to a vertically adjacent SLM 14 and a second output connection 78 for connection to a horizontally adjacent CSM 18.

The POM 4 includes amaster/slave PIC micro-controller 80, which is connected to a POM memory 82 and a set of controls/indicators 84. The master/slave PIC micro-controller 80 communicates with the VOM 10, the SLMs 14 and the CSMs 18 through the I2C bus 8, via a buffer 86.

The OM 6 consists of a standard personal computer, and comm-inicates with the POM 4 through the I2C bus 8 and the buffer 86. The OM 6 contains software instructions representing the rales of the election (e.g. the number of candidates, the number of votes per voter etc.), which it downloads to the POM 4 through the I2C bus 8 and the buffer 86. It also collects voting data from the POM 4 after the election, again via the I2C bus 8 and the buffer 86. The OM 6 can force the POM 4 to perfomi an initialisation sequence through the I2C bus 8 and the buffer 86.

All of the units making up the voting apparatus (the OM 6, the POM 4 and the VT 2), as well as the modules making up the VT 2, contain a PIC micro-controller and communicate on a single I2C bus 8. Power for the POM 4 and the VT 2 may be provided by a "brick" psu (power supply unit) connected to the mains, or by a battery.

Operation of the voting apparatus will now be described.

The OM (Organiser Module) 6 consists of a PC with an I2C interface 8. In addition it may have a network interface in order to communicate with other systems. The p pose of the OM 6 is to "organise" the collection of votes. There are two stages to this. The first stage takes place prior to the election where POMs need initialising, configuring and tracking. The second stage occurs after close of voting where the OM 6 collects voting data from the POMs. The OM 6 needs to:

1. Configure POMs.

2. Print labels for POMs as they are configured so that POMs can readily be identified.

3. Print candidate labels for the VTs 2.

4. Keep track of POMs.

5. • Maintain security of the configuration process of POMs.

6. Read voting data from POMs. 7. Maintain security of voting data during the POM reading process.

The POM configuration process consists of keeping a record of which POM 4 is conducting which contest; telling the POM 4 the contest rules; telling the POM 4 what layout to expect from the VT 2; and keeping the process secure so that mistakes cannot be made. In order to do this the OM 6 has to: 1. Read the unique serial number of the POM 4 and record this against a contest.

2. Check that the POM 4 is in the right mode and state (i.e. it must be in Configuration Mode in a Non Configured state).

3. Initialise the POM 4 (delete all votes, set a config status flag in POM 4, reset other status flags in POM 4 etc.). 4. Load the contest ID to POM 4.

5. Load the contest rules to POM 4.

6. Load the contest layout to POM 4.

7. Print a sticky label with the Contest name and ID, to be adhered to the POM 4.

8. Print a "ballot" paper, for attaching to the VT 2. 9. Optionally, record the name of the PO.

10. Load the cuπent time into POM 4.

In addition to the above the OM 6 has to be able to cope with the necessity of configuring more than one POM 4 for the same contest, in case of a POM failure, and recording this fact. If a polling station requires more than one POM 4 for a contest, there has to be facility for this and for adding the collected votes to the DB database at read time. As well as this the OM 6 has to be able to cope with a POM 4 that appears to be in the wrong state. For example, a POM 4 in Open Ballot state must not be configured unless overridden by some authority.

The POM reading process consists of checking which POM 4 is cuπently connected and therefore which contest this is; checking that this POM 4 has not already been read; checking that the status of the POM 4 is correct; reading the voter data; checking that the check sum (CS) of Voter data matches the calculated CS; recording the data in a database (DB); and setting the status to Read. In order to do this OM 6 has to: 1. Read the POM ID and the contest ID and verify that this is correct against its own DB. - 2. Read the POM status to make sure that all statuses are coπect - including that it has- not already been read.

3. Check its own DB to make sure that data for this contest has not already b een read.

4. Read the time from the POM and check to see if this is within set limits of the actual time. 5. Read the voter data from POM.

6. Check the CS.

7. Record the data to some other application.

8. Set the POM status and its own DB status to Read.

The OM 6 communicates with a POM 4 using the I2C bus. An external serial to I2C interface enables this. The OM 6 communicates to a single POM 4 at a time to avoid confusion. Additionally the OM 6 may have communication to other systems via a network.

The POM (Presiding Officer Module) 4 is the module within a polling station that controls a VT 2 and stores votes that have been cast. It allows the PO to control the voting process; it checks the integrity of the VT 2; it checks the validity of each vote; and it stores votes to be down-loaded later to an OM 6.

The POM 4 is powered by low voltage. Normally it is connected to a "brick" psu that is connected to a mains supply, but the POM 4 can be externally battery powered if required.

The POM's data connection is via a flying lead which carries an I2C bus as well as power. When connected to an OM 6 this is via an interface box connected to the OM 6. When connected to a VT 2 (only a single VT 2 per POM 4) this is via the VOM 10. In both cases the POM 4 provides the power to the connected unit.

Whenever power is connected to a POM 4 it will always do a self test in addition to a user interface test. The user interface test consists of turning on all its indicators for the user to check. The user then presses all the POM's buttons in sequence to check functionality.

The POM 4 is used in three distinct modes and has a push button (Open/Close Poll) by which a PO can select these. In addition it has an "Ann" button to enable a single vote along with a LED to indicate this. Furthermore there is a bleeper that is used in different ways to help the user understand what is going on. The three modes are: Configuration; Ballot Open; and Close Ballot. There are three coπesponding LEDs to indicate which mode is cuπent. In addition, these modes can be considered as states whereby one state follows another to maintain strict sequence (a user camiot select Open Ballot prior to configuration) and it is not possible to jump states. The POM 4 keeps track of its cuπent state and thus is able to be inteπogated.

An operator can go from one mode to another by pressing the Arm button whilst simultaneously operating the Open/Close Poll button for a period of time. However this can only happen if the internal state of POM 4 is valid (for example an unconfigured POM will not allow itself to enter Open Poll mode).

The POM 4 must be in configuration mode before it can be configured by an OM 6. This is by default the first state of the POM. It is only when a POM 4 is in this state that an OM- 6 can configure it. The POM 4 can be forced to this state by the OM 6 but normally this state is achieved only by previously being in Close Ballot state. In addition, if a POM 4 has not completed a Close Ballot state (i.e. votes have been read by an OM 6 and this status has been recorded within the POM) it cannot proceed to Configuration state (unless forced to do so by the OM 6). In Configuration mode there are two states. These are Not Configured and Configured. When the POM 4 first enters Configuration mode it is in a Non Configured state. When the OM 6 has successfully configured a POM 4, the state is changed by the OM 6 to Configured. In this Configured state the POM 4 can be connected to a VT 2. The POM 4 goes to Configuration mode by pressing the Ann button and simultaneously pressing the Open/Close Poll push button for a period of time. On entry to Configuration mode the coπesponding LED flashes to indicate that the POM 4 has successfully entered Configuration Mode and is awaiting Configuration (i.e. is still in Non Configured state). When Configured the LED stops flashing and remains on whilst there is still power (on restoration of power the LED comes on again i.e. the POM remembers its state).

When a POM 4 is connected to a VT 2 it immediately verifies that the physical layout of the VT 2 matches the layout for the loaded contest. In addition it forces a test mode where, interactively with the PO, it checks the functionality of the VT 2. In addition, having completed this test it continuously checks connectivity to the VT 2. In the event of power failure or communication failure with a VT 2, the test is repeated upon restoration of power/connectivity. There are two indicators on the POM 4 indicating Disconnected and Test Needed, to help the user deteπnine the state of the system.

Open Ballot Mode is the mode where the POM 4 acts as an electronic ballot box. In order to enter this mode the user presses the Ann button whilst simultaneously pressing the Open/Close Poll push button for a period of time. This can only be achieved if the POM 4 has been configured AND if a coπect working and tested VT 2 is connected. When Open- B allot mode is entered the coπesponding LED will illuminate constantly and the Configure mode LED will extinguish indicating that Open Ballot mode is now active.

In order for a single vote to be recorded it is necessary for the PO to press the Ann button". This in turn amis the VT 2 which flashes the "VOTE NOW" LED and illuminates the "CANCEL" LED, and enables the voter's intention to be read. When the "VOTE NOW" push button is pressed by the Voter, the vote is recorded in the POM 4 and the VT 2 is disabled. When the POM 4 is aπned the Ann LED is illuminated indicating to the PO that the VT 2 is aπned. When the POM 4 has successfully recorded a vote the Ami LED is extinguished along with the "VOTE NOW" and "CANCEL" LEDs on the VT 2. If at any time the PO presses the Ann button for a period of time whilst in an aimed state, it will become disaπned and so will the VT 2. The cuπent state of the VT 2 will be recorded as a vote but marked in memory. Once a vote has been recorded it is NOT possible for it to be deleted i.e. once it is in the "ballot box" (the POM 4) it remains there until read by an OM 6. During a "Non Vote" state (the POM 4 and the VT 2 are not aimed and no vote can take place) the POM 4 continuously checks connectivity to the VT 2. In the event of power failure or communication failure with the VT 2, the test is repeated upon restoration of power/connectivity. In the event of failure of some part of the VT 2, or its communications, at any time, then the Disconnected and Test Needed LEDs will illuminate. Only when a coπect working and tested VT 2 is restored to the system will the POM 4 allow itself to be aimed.

During a "vote" (when the POM 4 and VT 2 are aimed), in the event of power failure or communication failure with a VT 2, the POM 4 and VT 2 are immediately disamied and the test is repeated upon restoration of power/connectivity. Only when a coπect working and tested VT 2 is restored to the system will the POM 4 allow itself to be rearmed.

It is the POM's job to recognise that a selection has been made in near to real time as it is the POM's job to make sure that the rales of the election are obeyed. If a selection is allowed, the POM 4 will illuminate the appropriate selection. When the "VOTE NOW" button is pressed, the POM 4 will verify the actual selection against what it believes to have been selected over time. It will record the selection in two separate non volatile memories along with a time stamp as well as checking various check sums against predetermined algorithms. It will then disarm itself and the VT 2, and finally remove the amied status. The POM 4 is able to withstand power failure at any time and still maintain data integrity. It does this by a combination of smart power management and using non volatile memory to remember what state it was in. The smart power management means that power failure is detected early and, since the POM 4 can control VT power, there is always sufficient stored power on board to complete to a safe state where data and state can be stored in non volatile memory, which is read to continue when power is restored.

The Close Ballot mode is entered when the poll is closed and the POM 4 needs to prevent further votes being cast - this may be considered as equivalent to the sealing of a ballot box. In order to get to this mode the aim button must be held as simultaneously the Open/Close Poll button is pressed for a period of time. This can only occur if the previous state of the POM 4 was Open Ballot mode and disamied. A successful transition to this mode will be indicated by the illumination of the coπesponding LED and the extinguishing of the Poll Open LED. In this mode the POM 4 may be disconnected and/or the power removed without any loss of data. On power up the POM 4 will recognise this mode and remain in it. Votes are non volatile so data integrity will remain.

In this mode there are two states: these are Unread and Read. The initial state on entering Close Ballot is Unread.

When the POM 4 is connected to an OM 6 the OM 6 will inteπogate the POM and, if satisfied, collect the data from the POM. The POM 4 will move to Read status when told to by an OM 6. In this mode the POM 4 is acts as a Slave.

The POM 4 is responsible for the following: 1. Keeping track of and adhering to the coπect sequence of operation. 2. Security and validity of the polling station system and data

The VT 2 is a pseudo ballot paper. That is to say that it looks like a conventional ballot paper and functions as a ballot paper except that 1) where the voter would normally mark a paper with an X, (s)he instead presses a button, and 2) it is physically thicker in order to accommodate switches, electronics etc. The VT 2 is modular so that it can be built to any layout that a noi al voting paper may have. There are four physical modules that are used in various combinations to make a VT 2. These are:

1. VOM (VOter Module)

₁2. SLM (Switch LED Module) 3. CSM (Column Selector Module)

4. LEM (LEgend Module)

All of these modules - except the LEM - are active (contain electronics) and are interconnected via a single I2C bus. It is this same bus that interconnects the VT 2 via a cable to the POM 4. The power is included in this bus so the power to the VT 2, and indeed each module, is supplied from the POM 4. Within the VT 2, the bus also contains a pass through wire, which is used by the POM 4 to configure the modules within the assembled VT 2.

Virtually any physical layout of a VT 2 can be achieved, this being constrained only by power, cost and physical size. When a VT 2 is assembled the whole unit is robust enough to be fit for purpose i.e. typically used by 1000+ voters in an election, able to survive being held by any part, and able to withstand being knocked or even dropped. It is also possible for an unskilled person to assemble the VT 2 and to disassemble the VT 2 after use non- destractively. In this example the VT 2 has multiple voter sensors per module, but it is possible to have any number of voter sensors per module (including one).

From manufacture, although there is software distinction between different types of module, for any particular module there is none i.e. all SLMs are the same. Only when the VT 2 is assembled is there some distinction and this is only when the assembled VT 2 is connected to a cooperative POM 4. In use, the modules collaborate automatically to work out their respective physical positions and are assigned a unique address. Furthemiore, each module type knows what resources it carries and is able to communicate this to a POM 4.

All of the modules within a VT 2 are able to survive a power cut and/or communications failure. In addition, they automatically revert to their module type default address at po er on.

The VOM 10 is the minimum voter module. The VOM 10 is rectangular and is the size and layout of a three candidate FPTP (first past the post) ballot paper, with an addition 25.4mm space at the top for a "VOTE NOW" button and a "CANCEL" button. Therefore it includes "VOTE NOW" and "CANCEL" buttons, a space for voter instruction and contest name, three voting switches (ananged vertically), and positions for details of three candidates. The area not covered by the "VOTE NOW" and "CANCEL" buttons and the three vote switches is flat, allowing a nonnal ballot paper (with no voting boxes) to be securely positioned on the module.

The VT 2 has comiection via a flying lead to the POM 4. The VOM 10 has connection built in to connect to a CSM 18 and/or a SLM 14. Within this connection is the I2C bus, power and pass through wire. The design allows for a Primary VOM 10 and multiple Secondary VOMs.

Within each voter button there is a LED so that users can see which button has been selected, and within the "VOTE NOW" and "CANCEL" buttons there are also LEDs so that users can detemiine the state of the VT 2. These LEDs are controlled by a single PIC micro-controller in slave mode. The push buttons are fed to this same micro-controller. The micro-controller communicates with other modules via the I2C bus. This bus is buffered in the POM and SLM directions.

The VOM 10 is multifunctional in that it has to work as a CSM 18 (which not only has to control column selection but also work as a SLM 14 with three voter buttons) and a controller of the "VOTE NOW" and "CANCEL" button/LED combinations. The difference between this CSM function and a noπnal CSM is that it is hard wired to the first column and the first SLM 14. Otherwise, the VOM 10 uses pass through in the same way as for any CSM 18.

The CSM 18 is used each time an additional column is required. Within a CSM 18 there is built a physical three voter button SLM 14 i.e. part of a CSM functions exactly the same as a SLM 14 that has three voter buttons. This is described further in the description of SLM 14 for all SLM functions. The size of a CSM 18 is 25.4mm x 101.2mm. Connectivity is to each "side" of the module and "below": i.e. three ways - one to connect to a previous column, one to allow another column, and one to allow another SLM 14. Pass through applies both horizontally and vertically where there is a single In but two Outs -- V_0ut and H_0ul for vertical and horizontal Outs.

The Functions of the CSM 18 are controlled by a PIC micro-controller working in slave mode.

The SLM 14 consists offourvoterbuttons and LEDs in a 25.4mm x 101.2mm module. An SLM 14 is used to increase the number of voter buttons in a vertical direction on a VT 2. Connectivity is via each end of the SLM 14 so that it is possible to stack a number of SLMs end on end. Pass through applies.

The functions of the SLM 14 are controlled by a PIC micro-controller in slave mode. All SLMs are identical until self configuration has taken place and then the only difference is a stored address.

The job of the SLM 14 is to:

1. Cooperate in the self configuration process

2. Be able to store a unique (to the system) address 3. Be able to recognise that a button (one or more of its own) has been pressed and to communicate this (and which one(s)) to the POM

4. Be able to control its LEDs by command from POM

Pass through is the process of passing received logic level to another module. The reason for pass through is so that modules within an assembled VT 2 can cooperatively help the POM 4 detemiine their position.

Each module has two pass through wires. These are In and Out. Normally the In wire is closest to the VOM 10. All In wires are pulled down to a logic 0 via a resistor. Since each module is linked to another in a chain, any particular module can sense the state of its In and deteπninistically create an Out, which is connected to the next module's In. By cooperating in an ordered fashion and using pass through the POM 4 can tell the position of any module in the chain. There can only be one horizontal chain (row) but there can be unlimited vertical chains (columns).

On power up all Ins are at logic 0 (meaning that all Outs are also in this state) except for the VOM 10 whose In, which is internal, is pulled up to logic 1. All modules listen and can interpret commands.

The following sequence describes how cooperatively the POM 4 can learn the position of each module within the first column and how each module acquires a unique address.

1. The POM 4 issues a "learn" command on the module default address which consists of a column address (1 in this case) and a row address (1 in this case)

2. Only the module with the default address and with its In at logic 1 responds and at the same time it changes its address to that given by the "learn" command In this case it would be a VOM.

3. The VOM raises its V_0ul to logic 1 (the In of the next module in the chain) 4. POM maps the position of the VOM.

5. POM issues a "Learn" command on the module default address which consists of a column address (1 in this case) and the next row address (2 in this case)

6. Only the SLM with default address and with its In at logic 1 responds and at the same time it changes its address to that given by the "learn" command. 7. The SLM raises its Out to logic 1 (the In of the next module in the chain) 8. POM maps the position of the SLM.

9. This process continues until there is no response to the POM's "Learn" command, which means that the end of the chain has been reached.

The following sequence describes how through cooperation the POM 4 can learn the position of each CSM 18 and how each CSM 18 acquires a unique address

1. The POM issues a "Horizontal pass through High" command to VOM (its address is already unique from the above process).

2. VOM raises its horizontal pass through (H_out) to logic 1.

3. POM issues a "Learn" command on the module default address which consists of a column address (2 in this case) and a row address (1 in this case)

4. Only the module with the default address and with its In at logic 1 responds and at the same time it changes its address to that given by the "learn" command. In this case it would be the CSM in column 2.

5. The CSM raises its V_0ut to logic 1 (the In of the next module in the vertical chain) 6. POM maps the position of the CSM.

7. The sequence for learning position with a column can now be used.

By using both of these sequences it is possible, with pass through, to map the entire VT 2 automatically.

Claims

1. A voting apparatus for use in an election, the voting apparatus including at least one voter teπninal for use by voters to cast votes for selected candidates, said voter teπninal including a voter module and a plurality of candidate selection modules, each candidate selection module including at least one candidate selection switch and means for generating an electronic selection signal representing a selected candidate, wherein said candidate selection modules may be connected to the voter module in a plurality of different configurations, to adapt the voter teπninal according to the number of candidates and/or rales of the election.

2. An apparatus according to claim 1 , wherein the voter module includes means for confiπning and/or cancelling the selection of a candidate.

3. An apparatus according to claim 1 or claim 2, wherein the voter module includes means for generating a vote signal representing a selected candidate.

4. An apparatus according to any one of the preceding claims, wherein the voter module includes an interface for communicating with a remote temiinal.

5. An apparatus according to claim 4, wherein the voter module includes means for transmitting vote signals to the remote terminal

6. An apparatus according to claim 4 or claim 5, wherein the voter teiminal is controllable via control signals received from the remote teπninal, the controllable functions including an activation/deactivation function.

7. An apparatus according to claim 6, wherein the controllable functions include a test function.

8. An apparatus according to anyone of the preceding claims, wherein each selection module includes at least one connecting element for connecting the module with an adjacent voter module.

9. An apparatus according to any one of the preceding claims, wherein each selection module includes at least one electrical connector for connection with an adjacent voter module.

10. An apparatus according to claim 9, wherein the electrical connector includes a serial bus.

11. An apparatus according to any one of the preceding claims, wherein each selection module includes a programmable micro-controller.

12. An apparatus according to claim 11, wherein each micro-controller is programmable to store a unique identification address.

13. An apparatus according to any one of the preceding- claims, wherein said plurality of selection modules maybe assembled to form a two-dimensional array.

14. An apparatus according to any one of the preceding claims, wherein, the voter temiinal includes a legend module for displaying details of the candidates.

15. An apparatus according to claim 14, wherein the legend module is constructed and arranged to receive a printed label bearing details of the candidates.

16. A voting apparatus according to any one of the preceding claims, including a remote teπninal, the remote teπninal including input/output means for communicating with a voter teπninal, vote detection means for detebting selection signals generated by the voter temiinal, and data storage means for storing data contained in the selection si ⁱg£5n^J- als.

17. An apparatus according to claim 16, wherein the remote temiinal includes means for transmitting an activation/deactivation signal to the voter temiinal.

18. An apparatus according to claim 16 or claim 17, wherein the remote temiinal includes means for transmitting a test signal to the voter temiinal.

19. A voting apparatus according to any one of claims 16 to 18, wherein the remote teπninal includes means for assigning unique addresses to the voter modules making up the voter temiinal.

20. A voting apparatus according to any one of claims 16 to 19, the apparatus including an organiser teπninal that may be interconnected with the remote temiinal said organiser temiinal including means for downloading election rules to the remote teπninal.

21. A voting apparatus according to claim 20, wherein the organiser teπninal includes storage means for storing votes transfeπed to it from the remote temiinal.

22. A method of recording votes in an election, the method comprising assembling a modular voter tenninal according to the number of candidates and/or rules of the election, the voter teπninal including a voter module and a plurality of candidate selection modules that may be connected to the voter module in a plurality of different configurations, each candidate selection module including at least one candidate selection switch and means for generating an electronic selection _ nal representing a selected candidate, and recording votes cast by voters by detecting and recording electronic selection signals generated by the voter teπninal.

23. A method according to claim 22, in which the electronic selection signals are recorded by a remote temiinal.

24. A method according to claim 23, wherein the voter teπninal is controlled^" via control signals received from the remote temiinal, the controlled functions including an activation/deactivation function.

25. A method according to claim 23 or claim 24, wherein each selection module is assigned a unique identification address by the remote teπninal.

26. A method according to any one of claims 23 to 25, wherein election rules are downloaded to the remote temiinal from an organiser teπninal.

27. A method according to claim 26, wherein recorded votes are downloaded from the remote temiinal to the organiser teπninal.