Poll machines’ security features shown in PPRCV demo

Election watchdog Parish Pastoral Council for Responsible Voting (PPCRV) is keeping a close watch on the Vote Counting Machines (VCMs) to be used for the 2016 presidential elections.

In response to PPCRV’s request, Smartmatic conducted a public demonstration of the VCMs over the weekend at the Cardinal Sin Auditorium at the Paco Catholic School in Manila.

Smartmatic Project Manager Marlon Garcia explained that the VCMs are secured with features such as multi-level user authorization, authentication access control, digital signatures and encrypted files.

“Like the previous machines, the new VCMs use high encryption levels, which make hacking impossible.  256-bit keys encryption is utilized, doubling the security over their predecessors,” Garcia said.

Atty. Karen Jimeno, Smartmatic’s Head for Voters’ Education, was also there to conduct the demonstration in Filipino. 

The demonstration showcased the VCM’s various security features. 

For instance, the VCMs require a unique user name and password for each member of the Board of Election Inspectors (BEI) which identify the concerned BEI member and all their audit log entries. 

The VCMs also have physical security devices (a.k.a. iButtons) and digital certificates for each BEI member to initialize the machine and control access to its functionalities, as well as digitally signing electoral results.

The VCMs complement security features in the ballots.  All ballots will contain a bar code containing specific information such as city/municipality, district and clustered precinct associated.  The VCMs will only accept ballots related to its precinct information.

All ballots will be printed in a special security paper containing an Ultraviolet (UV) color-shifting ink proprietary pattern that cannot be reproduced by a photocopier or scanner.

Jimeno said the VCMs have ultraviolet sensors capable of detecting the presence or absence of UV patterns that will ensure that only authentic ballots will be recognized.

“Cheating can be detected even on election day.  In real time, the machines can detect if there’s something wrong with any of the lenses, or if any part of it has been tampered with. It can even detect if the ballots have been tampered with,” Garcia stressed.

He added that the VCMs store the election definition files, election results package, log files, all reports and digital images (both sides) of all ballots assigned to a precinct.  These are all protected with digital signatures and encryption algorithms.

The VCMs are also equipped with a voter verified paper audit trail (VVPAT) which enables auditability of the elections system.  Also, the VCM provides verification of the votes on the screen, or even via audio for voters with disabilities.

An important aspect of the automated elections system is the Source Code, the software program which runs the VCMs.  The Commission on Elections and Smartmatic made the Source Code available for public review since October 8, 2015 or seven months prior to the elections.

PPCRV Chairperson Ambassador Tita de Villa said they have six representatives to the ongoing public review on the Source Code.

She added that PPCRV is scheduled to conduct more demonstrations of the VCMs as part of its voters’ awareness and transparency advocacy.