05-15-2019, 10:41 AM
Electronic voting: What Europe can learn from Estonia
<div style="margin: 5px 5% 10px 5%;"><img src="http://www.sickgaming.net/blog/wp-content/uploads/2019/05/electronic-voting-what-europe-can-learn-from-estonia.png" width="1024" height="461" title="" alt="" /></div><div><p>The May 23-26 European Parliament elections are fast approaching, and in the run up to these critical elections, many questions have been raised over security, foreign election interference and the role of technology in the process. <a href="https://cyber.gc.ca/sites/default/files/publications/tdp-2019-report_e.pdf" target="_blank" rel="noopener noreferrer">Canada’s cyber security agency recently found</a> that half of all developed countries holding elections in 2018 reported some form of cyber threat to their democratic processes, a threefold increase since 2015.</p>
<p>Such threats have created concerns around the targeting of digital components of elections, as detailed in <a href="https://blogs.microsoft.com/eupolicy/2019/02/26/securing-democracy-in-cyberspace/" target="_blank" rel="noopener noreferrer">previous Microsoft blogs</a>. As a result, some governments have scaled back the use of technology in their election systems, even though many of the high-profile digital attacks have focused on the spread of disinformation on social media rather than targeting the actual election infrastructure.</p>
<p>Governments can respond to election-related cyber threats in a way that embraces technology and creates a system which commands public trust. Estonia implemented the EU’s first country-wide internet voting (i-voting) system in 2005. Two years later, a denial-of-service cyberattack targeted both <a href="https://www.bbc.co.uk/news/39655415" target="_blank" rel="noopener noreferrer">private and public sector websites</a>. It happened after a Soviet-era statue was relocated, and hit media outlets, banks and government bodies. Estonians could not use cash machines or online banking. Newspapers and broadcasters were unable to reach their audiences.</p>
<p>The scare could have prompted Estonia to roll back on its electronic innovations, but instead it chose to, apply lessons learned, lean into technology, opting for good cybersecurity and technological advancement as the best defense.</p>
<p>Estonia’s i-voting success story is now world renown, with hundreds of foreign delegations visiting to see the system in practice. It serves as a model for governments on how online voting can be done securely and increase trust in the election process. Estonia also demonstrated leadership on election security by co-chairing the group that prepared the <a href="http://ec.europa.eu/information_society/newsroom/image/document/2018-30/election_security_compendium_00BE09F9-D2BE-5D69-9E39C5A9C81C290F_53645.pdf" target="_blank" rel="noopener noreferrer">Compendium on the Cybersecurity of Election technology</a> that set baseline for the European Commission’s <a href="https://ec.europa.eu/commission/sites/beta-political/files/soteu2018-free-fair-elections-communication-637_en.pdf" target="_blank" rel="noopener noreferrer">package</a> on Securing Free and Fair European Elections. Tarvi Martens, Chairman of the Estonian Electronic Voting Committee, spoke to Microsoft about the benefits of their system, challenges for the future, and advice to other EU countries.</p>
<p><a href="https://blogs.microsoft.com/wp-content/uploads/prod/sites/73/2018/11/estonia-evoting-v1.png"><img class="aligncenter wp-image-212997 size-large" src="http://www.sickgaming.net/blog/wp-content/uploads/2019/05/electronic-voting-what-europe-can-learn-from-estonia.png" alt="e-voting in Estonia: first country in the world to use online voting in national elections in 2005; 31.3% of Estonians voted online in the last European Parliament Elections in 2014; saves over 11,000 working days per election through online voting" width="1024" height="461"></a></p>
<p><strong>When and why did Estonia introduce internet voting?</strong></p>
<p>The government began the legislative process in 2001 and introduced the new voting system in 2005. By 2002, Estonia had also introduced an <a href="https://www.valimised.ee/en/internet-voting/stages-i-voting-voter-application">ID card system</a> and by 2005 almost 80% of the electorate had this ID card. At the time, Estonians were saying they did everything with their computer – their banking, taxes, signing documents – and asked: “why not voting?”</p>
<p><strong>Could you talk us through the process of casting a vote online?</strong></p>
<p>The <a href="https://www.valimised.ee/en/internet-voting/stages-i-voting-voter-application" target="_blank" rel="noopener noreferrer">process is actually pretty simple</a>. The voter goes to the elections webpage and downloads an application to cast their vote. Next, the voter identifies his or herself using their ID card inserted into smart card reader or their mobile phone. Once the voter is authenticated with a PIN code it would say “welcome, here is your candidate list.” The voter can then cast their vote for their preferred candidate. The whole process takes around 40 seconds – unless you take more time to decide which candidate to vote for!</p>
<p><strong>How is the internet voting process secured?</strong></p>
<p>Securing the internet voting process is similar to the way we secure other high importance information systems such as banking and critical infrastructure. The trick is to guarantee the secrecy of the votes.</p>
<p>To do this, the ballots are immediately encrypted on the computer when you vote, and they are decrypted centrally by the election commission only once they are anonymized. There is no tag of who voted how, so that’s how we can maintain secrecy and privacy. Our system is like using a double envelope system for a ballot, where we can only count – or decrypt – anonymous votes.</p>
<p>The voter can also check whether his or her vote has arrived at the election commission server properly using a secondary device. After the voter casts their vote online, they can then use an application on their smartphone to scan a QR code from the computer. The QR code enables your device to communicate to the state election servers to show the voter how he or she voted without compromising the privacy of the vote cast.</p>
<p>Finally, there are additional mechanisms to preserve the integrity of the electronic ballot box. Votes are registered with a third party –an accredited trust service provider who issues a timestamp. These timestamps, collected from the trust service provider logs, are later compared with the electronic ballot box to make sure they coincide. That ensures that the administrator of the electronic ballot box cannot delete votes at random or produce extra votes.</p>
<p><strong>What about people’s sense of the integrity of the election? Do people feel safe in Estonia voting on the internet?</strong></p>
<p>Trust in the system is rising continuously. Before this year we had three elections with around 31% of people voting on the internet. During the last elections in March we had a significant increase to 44% of voters using the online system. That is the highest proportion yet of people using i-voting in Estonia.</p>
<blockquote>
<p><span><em><span>The further away a voter lives, the more likely they are to vote from home. Also, if you are between the ages of 25 and 45, you are more likely to vote online because young people are more familiar with technology.</span></em></span></p>
</blockquote>
<p><strong>Who benefits most from an i-voting system? </strong></p>
<p>There is a correlation between i-voting and how far a voter lives from a polling station. The further away a voter lives, the more likely they are to vote from home. Also, if you are between the ages of 25 and 45, you are more likely to vote online because young people are more familiar with technology. I-voting is also helpful for people with disabilities. While Estonia has long supported making the voting process accessible for people with disabilities through paper-based voting from home, they can now also vote online. And of course, i-voting is pretty much the only option for people travelling or residing out of the country for a longer period.</p>
<p><strong>What about cost? Is an i-voting system cheaper than a paper voting system?</strong></p>
<p>Initially, there are additional costs. For example, as we introduced this additional voting method, we still had to maintain the paper-based voting infrastructure. But once it is set up, it is significantly cheaper. After the fourth election using i-voting, we calculated the costs and found out that the <a href="https://www.researchgate.net/publication/327977453">electronic vote is about half the price of a paper vote</a>.</p>
<p><strong>Is the i-voting process easier to manage?</strong></p>
<p>Yes, because it is centralized. We can do things very fast and conveniently.</p>
<p><strong>Have many government delegations come to Estonia to learn about your system?</strong></p>
<p>There is a map of the world in our office, and we have put a pin in every country which has sent a delegation to visit. It’s hard to find a country without a pin in it! During the last election in March, we had over 100 foreign officials visiting Estonia from 30 countries around the world.</p>
<figure id="attachment_212937" class="wp-caption aligncenter"><a href="https://blogs.microsoft.com/wp-content/uploads/prod/sites/73/2018/11/estonia-map-v2.jpg"><img class="wp-image-212937" src="http://www.sickgaming.net/blog/wp-content/uploads/2019/05/electronic-voting-what-europe-can-learn-from-estonia.jpg" alt="Estonia visitors map" width="700" height="368"></a><figcaption class="wp-caption-text">Flags representing foreign missions to the Estonian state electoral office.</figcaption></figure>
<p><strong>Among these government delegations, what are the most common concerns about online voting?</strong></p>
<p>We see a general fear of the unknown. It takes two things to introduce internet voting in a country: First, a kind of ID card or mobile ID – an electronic identity infrastructure.</p>
<p>Second, it takes political will. Politicians are most interested in getting re-elected. They don’t want to mess with the electoral system and the average politician doesn’t know much about the internet and security, so they would say, “let’s not mess with that.” So, it takes courage to start the process.</p>
<p><strong>What advice would you give other EU countries regarding the adoption of technology?</strong></p>
<p>You just have to make a start, at least at a research level. Introducing a new voting method is a wide, society-embracing topic and might take long time. Just have in mind that at some point internet voting will be inevitable.</p>
<p><strong>Has there been interference or targeting of the online platforms in Estonia?</strong></p>
<p>The elections have never been targeted specifically. The cyberattack of 2007 thankfully happened two months after the elections. That attack was regarded as the first countrywide cyberattack targeting all the sectors, both private sector and public sector. But I think our information security was high and we handled it well. There was one and a half days of disturbance and then it was contained.</p>
<p><strong>What did you learn from that experience?</strong></p>
<p>It was a very good exercise. Now we can teach others how to defend against those kinds of attacks. Those attacks and our ability to counter them led to the opening of the <a href="https://ccdcoe.org/">NATO Cooperative Cyber Defence Centre of Excellence</a> in Estonia which has been one of the preeminent organizations leading the world’s discussions on the application of international law in cyberspace.</p>
<p><strong>Are there any more technological innovations that you’re planning to implement in future elections?</strong></p>
<p>There have been discussions about introducing voting on mobile devices, but we currently use the mobile device to verify the computer-based vote. If we move to voting from mobile devices, what do we use as second device for verification of the correct behavior of the mobile device? That’s the main challenge that we are thinking through right now. We are analyzing this, and after the European Parliament elections we will systematically research this issue. Overall, I would say that so far, we are proud of what we have achieved.</p>
<p class="tag-list">Tags: <a aria-label="See more stories about cybersecurity" href="https://blogs.microsoft.com/eupolicy/tag/cybersecurity/" rel="tag">cybersecurity</a>, <a aria-label="See more stories about election security" href="https://blogs.microsoft.com/eupolicy/tag/election-security/" rel="tag">election security</a>, <a aria-label="See more stories about Estonia" href="https://blogs.microsoft.com/eupolicy/tag/estonia/" rel="tag">Estonia</a>, <a aria-label="See more stories about EU elections" href="https://blogs.microsoft.com/eupolicy/tag/eu-elections/" rel="tag">EU elections</a></p>
</div>
<div style="margin: 5px 5% 10px 5%;"><img src="http://www.sickgaming.net/blog/wp-content/uploads/2019/05/electronic-voting-what-europe-can-learn-from-estonia.png" width="1024" height="461" title="" alt="" /></div><div><p>The May 23-26 European Parliament elections are fast approaching, and in the run up to these critical elections, many questions have been raised over security, foreign election interference and the role of technology in the process. <a href="https://cyber.gc.ca/sites/default/files/publications/tdp-2019-report_e.pdf" target="_blank" rel="noopener noreferrer">Canada’s cyber security agency recently found</a> that half of all developed countries holding elections in 2018 reported some form of cyber threat to their democratic processes, a threefold increase since 2015.</p>
<p>Such threats have created concerns around the targeting of digital components of elections, as detailed in <a href="https://blogs.microsoft.com/eupolicy/2019/02/26/securing-democracy-in-cyberspace/" target="_blank" rel="noopener noreferrer">previous Microsoft blogs</a>. As a result, some governments have scaled back the use of technology in their election systems, even though many of the high-profile digital attacks have focused on the spread of disinformation on social media rather than targeting the actual election infrastructure.</p>
<p>Governments can respond to election-related cyber threats in a way that embraces technology and creates a system which commands public trust. Estonia implemented the EU’s first country-wide internet voting (i-voting) system in 2005. Two years later, a denial-of-service cyberattack targeted both <a href="https://www.bbc.co.uk/news/39655415" target="_blank" rel="noopener noreferrer">private and public sector websites</a>. It happened after a Soviet-era statue was relocated, and hit media outlets, banks and government bodies. Estonians could not use cash machines or online banking. Newspapers and broadcasters were unable to reach their audiences.</p>
<p>The scare could have prompted Estonia to roll back on its electronic innovations, but instead it chose to, apply lessons learned, lean into technology, opting for good cybersecurity and technological advancement as the best defense.</p>
<p>Estonia’s i-voting success story is now world renown, with hundreds of foreign delegations visiting to see the system in practice. It serves as a model for governments on how online voting can be done securely and increase trust in the election process. Estonia also demonstrated leadership on election security by co-chairing the group that prepared the <a href="http://ec.europa.eu/information_society/newsroom/image/document/2018-30/election_security_compendium_00BE09F9-D2BE-5D69-9E39C5A9C81C290F_53645.pdf" target="_blank" rel="noopener noreferrer">Compendium on the Cybersecurity of Election technology</a> that set baseline for the European Commission’s <a href="https://ec.europa.eu/commission/sites/beta-political/files/soteu2018-free-fair-elections-communication-637_en.pdf" target="_blank" rel="noopener noreferrer">package</a> on Securing Free and Fair European Elections. Tarvi Martens, Chairman of the Estonian Electronic Voting Committee, spoke to Microsoft about the benefits of their system, challenges for the future, and advice to other EU countries.</p>
<p><a href="https://blogs.microsoft.com/wp-content/uploads/prod/sites/73/2018/11/estonia-evoting-v1.png"><img class="aligncenter wp-image-212997 size-large" src="http://www.sickgaming.net/blog/wp-content/uploads/2019/05/electronic-voting-what-europe-can-learn-from-estonia.png" alt="e-voting in Estonia: first country in the world to use online voting in national elections in 2005; 31.3% of Estonians voted online in the last European Parliament Elections in 2014; saves over 11,000 working days per election through online voting" width="1024" height="461"></a></p>
<p><strong>When and why did Estonia introduce internet voting?</strong></p>
<p>The government began the legislative process in 2001 and introduced the new voting system in 2005. By 2002, Estonia had also introduced an <a href="https://www.valimised.ee/en/internet-voting/stages-i-voting-voter-application">ID card system</a> and by 2005 almost 80% of the electorate had this ID card. At the time, Estonians were saying they did everything with their computer – their banking, taxes, signing documents – and asked: “why not voting?”</p>
<p><strong>Could you talk us through the process of casting a vote online?</strong></p>
<p>The <a href="https://www.valimised.ee/en/internet-voting/stages-i-voting-voter-application" target="_blank" rel="noopener noreferrer">process is actually pretty simple</a>. The voter goes to the elections webpage and downloads an application to cast their vote. Next, the voter identifies his or herself using their ID card inserted into smart card reader or their mobile phone. Once the voter is authenticated with a PIN code it would say “welcome, here is your candidate list.” The voter can then cast their vote for their preferred candidate. The whole process takes around 40 seconds – unless you take more time to decide which candidate to vote for!</p>
<p><strong>How is the internet voting process secured?</strong></p>
<p>Securing the internet voting process is similar to the way we secure other high importance information systems such as banking and critical infrastructure. The trick is to guarantee the secrecy of the votes.</p>
<p>To do this, the ballots are immediately encrypted on the computer when you vote, and they are decrypted centrally by the election commission only once they are anonymized. There is no tag of who voted how, so that’s how we can maintain secrecy and privacy. Our system is like using a double envelope system for a ballot, where we can only count – or decrypt – anonymous votes.</p>
<p>The voter can also check whether his or her vote has arrived at the election commission server properly using a secondary device. After the voter casts their vote online, they can then use an application on their smartphone to scan a QR code from the computer. The QR code enables your device to communicate to the state election servers to show the voter how he or she voted without compromising the privacy of the vote cast.</p>
<p>Finally, there are additional mechanisms to preserve the integrity of the electronic ballot box. Votes are registered with a third party –an accredited trust service provider who issues a timestamp. These timestamps, collected from the trust service provider logs, are later compared with the electronic ballot box to make sure they coincide. That ensures that the administrator of the electronic ballot box cannot delete votes at random or produce extra votes.</p>
<p><strong>What about people’s sense of the integrity of the election? Do people feel safe in Estonia voting on the internet?</strong></p>
<p>Trust in the system is rising continuously. Before this year we had three elections with around 31% of people voting on the internet. During the last elections in March we had a significant increase to 44% of voters using the online system. That is the highest proportion yet of people using i-voting in Estonia.</p>
<blockquote>
<p><span><em><span>The further away a voter lives, the more likely they are to vote from home. Also, if you are between the ages of 25 and 45, you are more likely to vote online because young people are more familiar with technology.</span></em></span></p>
</blockquote>
<p><strong>Who benefits most from an i-voting system? </strong></p>
<p>There is a correlation between i-voting and how far a voter lives from a polling station. The further away a voter lives, the more likely they are to vote from home. Also, if you are between the ages of 25 and 45, you are more likely to vote online because young people are more familiar with technology. I-voting is also helpful for people with disabilities. While Estonia has long supported making the voting process accessible for people with disabilities through paper-based voting from home, they can now also vote online. And of course, i-voting is pretty much the only option for people travelling or residing out of the country for a longer period.</p>
<p><strong>What about cost? Is an i-voting system cheaper than a paper voting system?</strong></p>
<p>Initially, there are additional costs. For example, as we introduced this additional voting method, we still had to maintain the paper-based voting infrastructure. But once it is set up, it is significantly cheaper. After the fourth election using i-voting, we calculated the costs and found out that the <a href="https://www.researchgate.net/publication/327977453">electronic vote is about half the price of a paper vote</a>.</p>
<p><strong>Is the i-voting process easier to manage?</strong></p>
<p>Yes, because it is centralized. We can do things very fast and conveniently.</p>
<p><strong>Have many government delegations come to Estonia to learn about your system?</strong></p>
<p>There is a map of the world in our office, and we have put a pin in every country which has sent a delegation to visit. It’s hard to find a country without a pin in it! During the last election in March, we had over 100 foreign officials visiting Estonia from 30 countries around the world.</p>
<figure id="attachment_212937" class="wp-caption aligncenter"><a href="https://blogs.microsoft.com/wp-content/uploads/prod/sites/73/2018/11/estonia-map-v2.jpg"><img class="wp-image-212937" src="http://www.sickgaming.net/blog/wp-content/uploads/2019/05/electronic-voting-what-europe-can-learn-from-estonia.jpg" alt="Estonia visitors map" width="700" height="368"></a><figcaption class="wp-caption-text">Flags representing foreign missions to the Estonian state electoral office.</figcaption></figure>
<p><strong>Among these government delegations, what are the most common concerns about online voting?</strong></p>
<p>We see a general fear of the unknown. It takes two things to introduce internet voting in a country: First, a kind of ID card or mobile ID – an electronic identity infrastructure.</p>
<p>Second, it takes political will. Politicians are most interested in getting re-elected. They don’t want to mess with the electoral system and the average politician doesn’t know much about the internet and security, so they would say, “let’s not mess with that.” So, it takes courage to start the process.</p>
<p><strong>What advice would you give other EU countries regarding the adoption of technology?</strong></p>
<p>You just have to make a start, at least at a research level. Introducing a new voting method is a wide, society-embracing topic and might take long time. Just have in mind that at some point internet voting will be inevitable.</p>
<p><strong>Has there been interference or targeting of the online platforms in Estonia?</strong></p>
<p>The elections have never been targeted specifically. The cyberattack of 2007 thankfully happened two months after the elections. That attack was regarded as the first countrywide cyberattack targeting all the sectors, both private sector and public sector. But I think our information security was high and we handled it well. There was one and a half days of disturbance and then it was contained.</p>
<p><strong>What did you learn from that experience?</strong></p>
<p>It was a very good exercise. Now we can teach others how to defend against those kinds of attacks. Those attacks and our ability to counter them led to the opening of the <a href="https://ccdcoe.org/">NATO Cooperative Cyber Defence Centre of Excellence</a> in Estonia which has been one of the preeminent organizations leading the world’s discussions on the application of international law in cyberspace.</p>
<p><strong>Are there any more technological innovations that you’re planning to implement in future elections?</strong></p>
<p>There have been discussions about introducing voting on mobile devices, but we currently use the mobile device to verify the computer-based vote. If we move to voting from mobile devices, what do we use as second device for verification of the correct behavior of the mobile device? That’s the main challenge that we are thinking through right now. We are analyzing this, and after the European Parliament elections we will systematically research this issue. Overall, I would say that so far, we are proud of what we have achieved.</p>
<p class="tag-list">Tags: <a aria-label="See more stories about cybersecurity" href="https://blogs.microsoft.com/eupolicy/tag/cybersecurity/" rel="tag">cybersecurity</a>, <a aria-label="See more stories about election security" href="https://blogs.microsoft.com/eupolicy/tag/election-security/" rel="tag">election security</a>, <a aria-label="See more stories about Estonia" href="https://blogs.microsoft.com/eupolicy/tag/estonia/" rel="tag">Estonia</a>, <a aria-label="See more stories about EU elections" href="https://blogs.microsoft.com/eupolicy/tag/eu-elections/" rel="tag">EU elections</a></p>
</div>