s,

r
te

s) lie
Vo

PB al
s( ,T
m

ot ots
fro
rd
co

k
all all

oo
ed
llo rk ed
Re

lB ,B
rn

ll B
Ba Ma ceiv
nt
n

na s
tu

g
t K ed

io ook
tio

Po
Se

tin
e

Re

s,
d
nt all t R
ra
t

its

ok
ith

or
Introducing the Election Technology Framework

es Ta : Po rde
vis B

g
en

y
it
st

in
se B K i

llo eck ad

ep
ro oll

Bs s, Bo
tK

Po s C In W

g
sS

gi

vic ts, ort eco

Re ults
rt

in
Ab tee llot

ee ot

e
,P P

tR
Re

llo

po
, P llie ll
rC eR
ed
st

rt
es rt:

Ce ss tion n
R

nd es
gh
Ba

n a
ue

Re

po
nv lec tio
te ed
ws

lls ast
ifi

se B

te ac
vic po

Ba ran lies
develops consisting of to support

sa nR
Ni
ot
eq

Ca ze E bula
Vo Clos
The TrustTheVote Project The Election Technology Framework The Election Process

ee

Ab tee
Six Main Building Blocks

ie

Vo Pl
Ba h
s

T Tal
rN

De ran

tic tio
rV
rR

n
nt

De llo p
n

tio
t

cia on
llin

a
s
se

se

aly lec
te

te

te

na f T
ec

i
Ab

Ab
Vo

Vo

Vo

Po

O cat
is a digital public works project to develop critical democracy is freely available for any jurisdiction (e.g., a county) to adopt, Registering

An l E
Fi t o
El

ifi
a
r
n

li
po

rt
gi

ffi
Be

Re
infrastructure. We are designing and developing adapt, and deploy for public elections. Typically, each Voting Absentee Voters 8 11 13 15 19 20 21

open-standards-based elections technology in collaboration jurisdiction would have one copy of each component; though Reporting In-Person Voters 8 11 13 17 18 22 23 24 25 26 27 28 29 35 36 37 38 39 40

Because We All Deserve a Better Voting Experience

with local election officials from all around the country. some voting components are deployed to each precinct. Managing Election Officials 1 2 3 4 5 6 7 9 10 12 14 16 17 18 21 23 27 30 31 32 33 34 40

Open source, open standards, and open data are key aspects Data Standards

nt all Acc eck tes:

s
llo es d

De Pre al
es ed
Ite De d
llo De d
Ba em ed

llo De l

ed
Ap ed

llie al C t
Vo e nt

bu d

n
/R ed

ra ot ep -in
Ba ts ina

h a
en

c
ad
re
Ba ts D fine
le
Ba ms fine

te

Ta de

io
n
of the Election Technology Framework, intended to assist

PB k C pd
Guiding Principles

e entr eje
s R ou
ov

vic par
ed eiv
t I fin

ts ign

tin ks l Fi
all em al

lat
pa
em
ec

Re
llo s F

te cor
o lU
l B It s C

pr

R
pt Rec

ej

re

Vo oo ol

l V s C t/
ag

AB ll Bo Rol
sP

ll B r R
ca lot n i

ot s
election officials in conducting election administration and

an
t

Ac sts
Lo Bal ctio

Po ote
ot

Po ter
M
t s ue

all

Vo
ist

Ta
al Ele

ce
es eq

rB

g
elections operations in a process that is accurate, secure, Numbers are matched with components in the diagram below.

rL
qu R

pe

ot
&
te
Grey dots fall outside the Election Technology Framework.

Ce B
Pa
Vo
transparent, and verifiable.

er
White dots do not appear in the diagram.

d
Fe

Re
e/
at
St
Registering Voting Polling Place Reporting
provides data to

provides data to

Registering includes all the people, technology, Voting includes all the people, technology, Reporting is an integral aspect of the
and activities involved in voter registration, and activities involved in the processes of TrustTheVote Projects goal of making elections
provdides 8 11 13 23 24 28 One or more per precinct 18 23 25 One or more per precinct 18 23 27 One per precinct 29 35 36 40
voter records management, voter information exports to print casting and counting ballots. wholly transparent, accurate, and trustworthy. API
registration paper document
and services, and voter list management. form In the reporting phase, elections data is stored,
Admin
scanned into is fed into prints analyzed, and prepared for public consumption. Web UI
Onboarding
Document 0r 0r and and and
for screen sent to Hand-Marked Paper Ballot Report

Voter Services Portal generates Digital Poll Book Accessible Ballot Marker Precinct Ballot Counter VoteStream
13 8 One or more per precinct is 35 36 35 36
is absentee is is tally data is
ballot scanned into prints prints prints a is fed into a PC and display, printer, and scanner that reads transfered to
a web user interface that helps a voter register, a tablet or laptop-based device a tablet or laptop-based device that presents a voter a publicly accessible service
determine eligibility, view and update their own BusyBooth Balloteer that records voter checkin. and with all the contests and questions for the voters a ballot, interprets the marks that indicate the ER
that provides the public with VoteStream 3rd Party
Printer voter record, and view and record polling place Polling Place Wait Tracker is a web user interface for voters to Printer Onboarding Document Check-in Materials specific ballot, and creates a machine-countable Marked Paper Ballot voters choices, and records the votes. CVR VDR
information about election results. Public Access (Standalone)
wait time (as in BusyBooth), among other services. Mobile app download and print blank ballots. Voter Kiosk printed ballot that records the voters choices. Web user interface Mobile app
prints prints VTL
is
The Voter Services Portal (VSP) interacts with the Registrar, via its web BusyBooth integration is A voter downloads an a PC, display and printer that assists Voters who require enhanced access are able to vote independently A voter puts a ballot into the scanner, where digital image processing JED The data formats used by VoteStream (for intake of tally data and for VoteStream includes a visual Anyone who follows the
services API, to submit voter record requests and to obtain voter similar to VSP integration in absentee ballot kit from voters in troubleshooting any difficulty boots from using options for audio or audio-enhanced presentation, and the use boots from technology is used to record a vote for each mark detected. The voter bulk data export) are standard common data formats. As a result, the scoreboard to enable local VoteStream APIs can access
absentee voter marks GIS
records and related information. BusyBooth and Balloteer are available the context of an application Balloteer, which obtains encountered during the voter check-in of peripheral devices for accessibility. is informed of any issues with the marks or selections, and has the data can come from any standards-compliant voting system. Weve elections officials to easily the data and create their
as part of the VSP, or standalone. The API is open and standards-based, for a mobile platform such as ballot information from the process with a digital poll book or paper opportunity to retrieve the ballot for further marking or for ER also written connectors applications that translate from existing share their data with the own tools and republish the
JED JED
so that all of these VSP functions can be supported by any system that iOS or Android. Registrar. poll book. replacement. ERT formats to enable VoteStream to work with existing election systems. public. data or do their own analysis.
Registration Form supports the API. Blank Absentee Ballot Marked Absentee Ballot BSE BSE

is sent to is sent to

voter record request voter record extract voter record voter record ballot info ballot info custodian transports custodian transports custodian transports custodian transports provides a
VTL
request extract request extract to voting place from voting place to voting place from voting place

Feed
API
VRR

BSB

API

Managing Election Administration Office Registrar of Voters Office Central Counting Office
VRR

BSB before election: provisions fleet

VTL after election: offloads voter checkin records downloads PDF reports
GIS ER
in uploads data files
Managing includes all the technology-based GIS JED VRR CVR
migration migration
activities of election officials for election
Local election official use the LEOs use the BDI to perform Election officials use the LEOs use the Registrars Admin UI Local election officials use
administration and preparation for a 2 3 4 API 5 6 7 14 API 18 23 API 9 10 12 15 16 API 17 23 30 API 18 21 27 31 32 33 18 28 34 40 API
web UI of the EDM Admin the process that starts with the Device Manager Admin for several data management tasks, the DPB Managers Admin
specific election. Interface, which presents them basic definition of an election Interface as a web UI to including: reviewing registration interface for both
Admin with several data access and Admin and ends with a set of ballots Admin consolidate standards-based Admin requests, voter list management, Admin provisioning data into digital Admin
Web UI data management options for Web UI and supporting data: paper Web UI data from other components Web UI integration with external services Web UI poll books and post-election Web UI
transactions to manage the ballots; data for ballot counting (primarily election definitions such as motor vehicle records, and offloading of poll book data
and and
variety of data that define a devices; data for ballot marking and ballot design), to validate support for poll book creation and and similar data capture from
jurisdiction and an election devices that assist voters in the data, create boot images, post-election updates of poll book paper poll books.

Election Data Manager Ballot Design Studio Device Manager Registrar Digital Poll Book Manager Central Ballot Counter Tabulator Analytics
held in it. marking a ballot. and store them on boot data.
media used to run each ballot
17 22 One or more per precinct 18 22 One or more per precinct
is election definition is election and ballot definition is casting or counting device in is before election: is is vote tally data is election results data is
data transfered to data transfered to the upcoming election. voter roll extracts transferred to transfered to transfered to
a data management application for data a data management application that a voting system component that combines election a database management application a data management application a PC and display, printer, and high-capacity scanner a PC and display and printer with tabulation a data warehousing application that
about electoral jurisdictions and elections JED JED
enables Local Election Officials to JED JED
definitions, ballot designs, and voting system software, BSB
that stores and manages voter records. VRR VRR
used to provision and offload a 0r and that processes a batch of ballots, reading each, ER ER
software that local election officials use to ERT
election officials can use for data
conducted within a jurisdiction. create legally compliant ballots. to create election-specific programming for other fleet of digital poll book devices. interpreting the marks that indicate a voters create election results and reports. aggregation, analysis, and reporting.
TBM TBM TBM TBM
Voter Kiosk
CVR CVR CVR Line Legend
voting system components that cast and count ballots. after election: choices, and recording the votes.
BSE BSE voter roll updates transfered to Digital Poll Book is VDR
is
The Election Data Manager (EDM) provides a standards-based API for The Ballot Design Studio consists of a data management core and the The Device Manager aggregates data from other components and The Registrar is the voter records core, and it supports a set of The DPB Managers API supports the LEOs web interface, which a PC, display and printer that assists A local election official puts a batch of ballots into the scanner, where Local election officials provide the Tabulator with tally data from ballot VTL Local election officials use the Analytics web user interface to provide
a tablet or laptop-based device Data Transfer Networked
transactions to create, view, and update a variety of election Ballot Design Interface (BDI), a web user interface that local election validates them as being complete for a given election. After validation, transactions for data access and data management of voter records. VRR VRR enables officials to aggregate voter roll data mainly from the VRR voters in troubleshooting any difficulty boots from digital image processing technology is used to record a vote for each boots from counting devices, to assess whether all needed data is available, and if a wide range of data to be the basis of advanced reporting and analysis.
that records voter checkin. prints a JED
administration data, including districts and precincts and geospatial officials use to manage the process of designing ballots from basic text the Device Manager creates boot images for each ballot casting or Via an API, other standards-based components can submit data to the TrustTheVote Registrar or other standards-based voter records system encountered during the voter check-in mark detected. For ballots flagged for unclear marks, the election official so, to create final election results and basic results reports and results Standard reports meet Federal reporting requirements. Analytics can
data for them; and elections, contests, candidates, and ballots. Local and state-specific requirements to finished digital ballots and paper counting device. These images can be validated during Logic and Registrar, obtain elements of specific voter records, and for local before election: and convert it into poll book records for digital poll books and for process with a digital poll book or paper has the opportunity to examine the ballot image, interpret voter intent, datasets. ER correlate election results, voter registration activity, and voter Data Transfer Physical
voter roll extracts transferred to JED JED
election officials access EDMs services via a Web UI based on the API, ballots that meet U.S. standards for visual design and accessibility. Accuracy Testing, to ensure that only certified systems and software election officials update and manage records. printing paper poll books. poll book. and record the interpretation as a set of votes for that ballot. ERT demographics.
such as the TTV EDM Admin Interface. are used on Election Day. BSE TBM Report
VRR Bulk Data Transfer Physical or Networked
BSE

GIS election and geospatial PDF to print JED combined boot image VTL voter transaction log and voter
data transfered to and election definition demographic record transfered to Boot Images Physical
JED TBM
data transfered to Accessible Ballot Marker VDR

BSB Registrar BSE Central Ballot Counter VoteStream

Device Transfer Physical
VoteStream Precinct Ballot Counter Analytics
Analytics Blank Ballots Write-once Boot Media Tabulator

Election Data Manager Ballot Design Studio Device Manager Registrar VSP, BusyBooth, and Balloteer Digital Poll Book Manager and Digital Poll Books Accessible Ballot Marker Ballot Counting Devices Tabulator VoteStream and Analytics

Data Layer
The data layer includes a set of open
standards for election data, defined with
the help of local election officials and
formalized through major standards
organization.
The data managed by the EDM comprises all of the information about an election, at
the level of an individual jurisdiction.
Jurisdiction definitions: Districts, district type, precincts, precinct membership in
districts, GIS data for precincts and districts, and a host of precincting information:
precinct splits, sub-precincts, precinct-parts, per-election consolidations and
reporting precincts, and street segment and/or GIS data to support mapping
addresses to precincts.
Election definitions: Election (date, type, jurisdiction); contests, contest/district,
candidates, candidate/contest, referendum, referendum/district, ballot-response,
ballot-response/referendum, and a host of attributes that determine partisanship (or
lack thereof) for contests and candidates, use (or lack) of write-ins, prioritization for
ballot ordering, and more.
The data managed by the BDS is wide ranging set of data that describe ballots from
several viewpoints, used at different points in the BDS usage lifecycle for a specific
election.
State-Specific Ballot Rules: Requirements for ballot content and presentation,
derived from each states election law, regulations, or practice. These include rules
for issues such as candidate rotation, straight-party voting, and voting instructions, as
well as presentation-level issues such as the use of basic text formats (mixed case vs.
uppercase, Roman vs. Italic).
Concrete Ballot Specifications: A complete ordered set of every text element that
appears on each official ballot. These are created by extending an elections basic
ballot specifications the contests and questions defined for each precinct listed in
an election-definition dataset with both metadata in the election definition and
The Device Manager does not manage data, but rather creates boot images for ballot
casting and counting devices. These boot images include both the software that is
specific to each device and the election-specific data needed by each device.
These are:
Concrete Ballot Specifications: The finished ballot definitions and meta-data
produced by the Ballot Design Studio.
Election Definition: The definition of the current election, created by the Election
Manager and included along with concrete ballot specifications by the BDS.
The Registrar manages a voter records database (VRDB) and implements a web
service API for access to the VRDB, either as an integrated VRDB or as a wrapper
around a legacy VRDB. The data in the VRDB includes:
Voter Registration Records and Requests: Voter personal information, geographic
information, eligibility, participation history, membership in special voter groups, e.g.,
military, handicapped, protected/private.
Voter Transaction Logs: A log of transactions pertinent to each voter, involving
voter requests and/or LEO activity. Includes: voter registration requests, LEO
approval/rejection of such requests or of absentee ballots and provisional ballots;
voter check-in for in person voting; mail-out of absentee ballot, and receipt of
returned absentee ballot.
Voter Demographic Records: A subset of a voter record that uniquely identified
These components are clients of the Registrar and use its APIs for viewing voter records
or submitting requests; there is little or no retained managed data, with the notable
exception of log data.
Voter Registration Records and Requests: Via the Registrar API, these components
make voter records requests and receive some parts of voter records.
Basic Ballot Specifications: Via the Registrar API, these components obtain the ballot
information for a specific ballot tied to a specific precinct of a voter or of a location.
Voter Transaction Logs: A log of transactions pertinent to each voter, for example,
online submission of a voter registration request or online completion of a form to be
printed, signed, and mailed.
The DPB Manager stores a copy of the voter roll data obtained from the Registrar or
other standards-compliant source of voter records. Each DPB uses this data and
records voter check-in events.
Voter Registration Records: A voter roll is the small subset of the information in a
voter record that is needed for voter check-in using a poll book.
The device does not store or manage data outside of user sessions for indicating
ballot selections, but it does use ballot data from the Ballot Design Studio:
Extended Ballot Specifications: Used to drive the presentation of ballot items and
the collection of voter choices that are then presented on a printed paper ballot.
The Precinct Ballot Counter and Central Ballot Counter both process paper ballots The device does not store or manage data, but it does consolidate and analyze data:
and create output data of two kinds:
Tallying Device Records: Each output dataset of each run of each ballot counting
Tallying Device Records: The vote tallies for each ballot item in a batch of paper device; used as input for both tally auditing and vote totaling. Consolidated into the
ballots processed by the ballot counter. Tabulators output dataset of all vote tallies, CVRs, and vote totals.
Cast Vote Records: For each individual counted ballot, a record of all the votes Cast Vote Records: Consolidated into the Tabulators output dataset.
recorded from that ballot, intended for use in risk limiting audits of the counting
Tabulation Manifest: The Tabulator uses the manifest created by the Election
process. Manager (and included by the Device Manager in the Tabulators data) to audit the
input set of vote tallies, to ensure that all and only the expected tallies are presented
and accounted for.
extended by
Each provides, stores, and manages the data from the datasets that it receives: Voter Transaction Logs: A log of transactions pertinent to each voter from each
system that records voter transactions.
Jurisdiction and Election Definitions: Describe the election as a whole, including
all ballot items and all vote tallying districts, include GIS data for each. Voter Demographic Records: A subset of a voter record that does not contain
personal identifying information, but does uniquely identify each voter and several
Basic Election Results: Tally data collected on election night, before the final set of
characteristics of voters that are needed for statistics and reporting of voter
tallies is available.
transactions.
Tallying Device Records: That Tabulators consolidated output dataset of all final
vote tallies.

Data Standards Data Formats

The goal is to transform, normalize, Basic ballot specifications: For a given election, for each precinct, the list of state-specific rules. each voters characteristics but without any personal identifying information extended by
aggregate, and publish election data to contests and referenda (including candidates, parties, write-in, straight-party, etc.) Stylesheets for Paper Ballots and Digital Ballots: The BDSs ballot lifecycle starts including those needed for statistics and reporting of voter transactions, e.g.: Ballot Design Studio
VRR BSE JED ERT VTL
Ballot Design Studio

DL-VRR DL-BS-E DL-JED DL-JED-ERT DL-VTL

that will be on an official ballot for that precinct. with the acquisition of a per-election combination jurisdiction/election definition percentage of total successful military absentee voters out of all military absentee
all citizens in near real time. Device Manager extended by Device Manager
(either from the EDM or other systems compliant with VIP 5 and/or VSSC election voters, compared to similar success rate in the entire voting population.
Tabulation Manifest: A manifest or checklist that specifies each precinct (or other Accessible Ballot Marker Accessible Ballot Marker
definition standards) and the conversion of each of the elections basic ballot
vote tallying district) and the number of distinct tallies expected for one. For Voter Record Extended Ballot Specification Jurisdiction and Election Tallying Device Records Voter Transaction Log
specifications to a concrete ballots specification. At this point, stylesheets become the Digital Poll Book Manager Digital Poll Book Manager
example, a typical precinct might have one tally for each day of early voting, one tally
focus of interactive ballot design, beginning with human interaction with presentation A number of variations on voter An extension of the basic ballot Definiton An extension of the election A log record for local election
for each ballot counting device used on election day, and one tally for central ballot Registrar Registrar
BSB GIS TBM ER CVR VDR
count run of absentee or provisional ballots. level elements that define a ballots visual presentation, starting with a baseline that record requests and voter specification to express: The core jurisdiction and election results definition to record the officials actions in voter
implements the ballot design standards that were defined by AIGA and EAC.
Usage Legend Voter Services Portal /etc. Voter Services Portal /etc.
records. A) All the presentation-level artifacts of definition. DL-BS-B DL-JED-GIS DL-JED-TBM DL-JED-ER DL-CVR vote-count output of: registration administration, DL-VDR
Election Data Manager an actual ballot. Election Data Manager
Extended Ballot Specifications: The end result of ballot design activity is twofold:
Basic Ballot GIS Tabulation Basic Election Cast Vote A) Counting devices such as optical absentee voting administration, Voter
finished ballots for hand-marking at polling places or by absentee voters; and finished EML TTV VSSC NIST VIP exchange out Precinct Ballot Counter / Central Ballot Counter B) All the presentation style elements. scanner. Precinct Ballot Counter / Central Ballot Counter
Specifications extensions of Manifest Result Records and absentee and provisional Demographic
ballots to be represented as a series of screens on a voting device. For paper ballots, exchange in Tabulator C) All the artifacts of a printed ballot that B) Tabulation devices that combine all Tabulator
the result is both a set of PDF files for printing the full set of ballot styles and also a are needed for counting devices to DL-JED vote-counts into raw consolidated vote ballot management, for each Record
set of concrete ballot specifications that include meta-data that is to be used by
OASIS international TTV Project developed IEEE 1622 working group U.S. National Institute of Voting Information Project used in data migration Analytics interpret marked ballots. counts and vote totals. individual voter request or ballot. Analytics

ballot counting devices to interpret marked ballots. For digitally presented blank election data standard data standards emerging standards Standards and Technology data format used in API Votestream Votestream
ballots, the result is a set of concrete ballot specifications that include visual style 300 Section Pew VIP or Pew ERIC future extensions or future extensions VIP 5 and near future near future near future TTV upcoming near future near future TTV 300 Section
elements for each screen of each ballot.

Guiding Principles Accurate Secure Transparent Verifiable

Elections technology must be... List all voters and only eligible voters on voter rolls. Ensure voter privacy, data integrity, system reliability, and Allow verification of required accuracy. Enable everything that matters about an election to be
Count votes without errors, as they were cast. proper authentication and authorization for access. Log all changes to guarantee accountability. independently verified, including accuracy and security.

20072014 OSET Foundation and the TrustTheVote Project All Rights Reserved.
Designed by Dubberly Design Office Version 5.1 August 19, 2014
mh/hs