3.3 Test Report [17 September 2003] PDF
Contents
1. After the order for the test had been placed some corrections were made in the Hardware and in the software of the voting machine s main control program The test performed by the PTB is based on the software release versions 02 02 01 05 and 2 01 of the main control connection board and display board programs The last version of the machine and the corrected main control arrived at PTB on June 5 2003 The last documents arrived at PTB on Sep 4 2003 The documents made available by the NEDAP company are listed in the Appendix to this Test Report For the sake of completeness all paragraphs with requirements of the DVREC 2 are listed in section 3 3 of this Test Report and in enclosure 2 concerning the software requirements At present the prototype of the voting machine ESI2 and the programming reading unit PRU are beeing kept at the PTB The first prototype N7D00003 of the voting machine ESI1 will be given back to the NEDAP company 2 Description of the voting machine 2 1 Identification of every voting machine and software Type version and ID numbers of the hardware Voting machine VM with control unit CU type ESI2 version 03 00 ID YMDxxxxx incl one connection board version 01 00 and five display boards version 03 00 Programming reading units PRU type ESI1 version 03 00 ID YMExxxxx Primary ballot and backup modules type ESI2 ID YMCxxxxx Description of the different identifier numbers ID YMTxxxxx Y y2. The printer and the fluorescent lamp do not work if a battery is used see list 1 No 1 functional specification in the Appendix of this Test Report a This requirement was checked by software tests Encl 1 only b For tests regarding environmental conditions see notes on paragraph 11 1 8 5 The storing of votes in the ballot module must be made in such a way so as to ensure security and continuous self checking of all data This requirement was checked by software tests Encl 1 only OK OK OK Each vote will be stored twice in each of 2 independent IC s within the ballot module OK i e each vote is stored four times in the ballot module This requirement was checked by software tests Encl 1 only As each single preference is recorded a checksum a security code applied over a number of bytes based upon Hamming Code which is an international standard is calculated and stored in the RAM This requirement was checked by software tests Encl 1 only When the voter presses the CAST VOTE S button all checksums of all preferences stored in RAM shall be checked This requirement was checked by software tests Encl 1 only As the voting machine stores preferences a read back of the last byte of data written should be made as a further check This requirement was checked by software tests Encl 1 only After storing all preferences the system should check all of these again and their checksums
3. This requirement was checked by software tests Encl 1 only The last step is a check of all preferences stored from all voters This sequence is repeated for every voting cycle This requirement was checked by software tests Encl 1 only OK OK OK OK Physikalisch Technische Bundesanstalt Seite 14 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 14 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 57 In the event that a discrepancy occurs in the checksums an error message is OK generated This requirement was checked by software tests Encl 1 only 58 This message is shown on the voting machine display and on the Control Unit OK display enabling the presiding officer to take appropriate action This requirement was checked by software tests Encl 1 only 59 8 6 The voting machine should as far as is reasonably and technically possible OK avoid or restrict the possibilities of accidental or intentional incorrect use Only the buttons on the voters panel necessary for polling are free for use by the voter This information is programmed in the primary ballot module Pressing of other buttons will not have any effect The information given to the voter and the polling staff during polling is also programmed in the primary ballot module Programming must be carried out and checked by the central office one ore more days before the poll Malfunctions of the voting m
4. The Physikalisch Technische Bundesanstalt PTB in Braunschweig and Berlin is the national institute for science and technology and the highest technical authority of the Federal Republic of Germany for the field of metrology and certain sectors of safety engineering The PTB comes under the auspices of the Federal Ministry of Economics It meets the requirements for calibration and testing laboratories as defined in the EN ISO IEC 17025 It is the fundamental task of the PTB to realize and maintain the legal units in compliance with the International System of Units SI and to disseminate them above all within the framework of legal and industrial metrology The PTB thus is on top of the metrological hierarchy in Germany To ensure worldwide coherence of measures the PTB cooperates with other national metrology institutes within EUROMET on the regional European level and on the international level within the framework of the Metre Convention The aim is achieved by an intensive exchange of results of research work carried out and by comprehensive international comparison measurements Physikalisch Technische Bundesanstalt Bundesallee 100 Abbestra e 2 12 38116 Braunschweig 10587 Berlin Deutschland Deutschland
5. voter may switch between ballot papers until he she has finished recording his her preferences This requirement was checked by functional tests and software tests Encl 1 the cast votes are stored randomly and cannot be displayed or printed on the voting machine The mode of storing votes is described in List 1 No 3 and 7 vote storage in the Appendix of this Test Report In no case will the votes be stored in sequential order See notes on paragraph 8 8 There is no possibility to display or print the cast votes on the voting machine 14 Documentation 14 1 The voting machine must be supplied with the following documentation system documentation See list 1 Technical documentation of NEDAP in the Appendix of this Test Report development documentation See list 1 Technical documentation of NEDAP in the Appendix of this Test Report test documentation See list 2 Test documentation of NEDAP in the Appendix of this Test Report a user manual See list 3 Documentation overview and user manuals No 3 and No 4 in the Appendix of this Test Report instructions for the voter See list 3 Documentation overview and user manual No 5 in the Appendix of this Test Report OK OK OK OK OK OK OK OK OK Physikalisch Technische Bundesanstalt Seite 19 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 19 of test report of 2003 09 17 Reference No PTB 8 3
6. 1 The voting machine shall not record votes unless it has been activated OK See notes on 11 to 14 and 17 to 19 6 2 For the recording of votes the voting machine shall carry out or support the following steps in sequence 21 the voting machine is activated for each voter by the presiding officer or a OK person authorised by the officer each activation will be recorded by the voting machine Only the polling staff is able to activate the voting machine for the voter by pressing the assigned button i e the button assigned to the election s the voter is entitled to vote for on the control unit Physikalisch Technische Bundesanstalt Seite 10 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 10 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 22 23 24 25 26 27 28 29 30 31 LED on top of each ballot paper column highlights ballot paper s on which a voter is entitled to vote This requirement was checked by functional tests and software tests Encl 1 LED displays to the right of the ballot paper shall display the marks on open ballot paper s This requirement was checked by functional tests and software tests Encl 1 LED displays opposite each candidate s details or referendum choice will display the preferences recorded on each ballot paper presented on voting machine in the case of a referendum the
7. circuit boards PCB s are not standardized This ensures that it is difficult for unauthorised persons to manipulate the hardware for instance a ballot module Communication between the main processor and the display and communication boards is based on an I C bus system that is to say the amount of necessary cable conductions is reduced and the information exchange is less susceptible to external influences The voting machine is not equipped with connections via which the control programs stored could be supplemented or changed For construction and design of the software see Encl 1 3 1 3 The voting machine shall be designed in such a way that any unauthorised OK alterations of a technical nature will come to notice The type the version number and the individual identifier serial number ID of the voting machine and of the programming reading unit are given on a type plate Every ballot module is identified by the individual ID number The version numbers of the voting machine the connection communication board and the five display boards and the ID numbers of the voting machine and the installed ballot module can be displayed on and printed out by the voting machine This enables the polling staff to compare the type the version numbers and the individual ID numbers with the values given by the manufacturer in documentation user manual or e g listed in an authorised certificate The compartment for holding the p
8. dynamic tests are carried out with the aid of suitable software tools 3 3 Requirements and test results The following list includes all requirements of the Appendix Part 1 Conditions for voting machines of Requirements for voting machines for use at elections in Ireland DVREC 2 and contains some notes which will help to understand the test results The tests ofthe PTB do not include the paragraphs 1 5 4 9 4 11 and 12 of the Appendix Part 1 to DVREC 2 Details of the software test results are described in the SW test report see enclosure 1 No Requirement Appendix Part 1 of DVREC 2 Result and notes Conditions for voting machines 1 General 1 1 1 The requirements for voting machines contained in the Functional OK Specification document version 1 9 of May 28 2003 the electoral law and this Appendix are mandatory The agreement of the prototype of the voting machine with the details of the functional specification document was tested exemplarily for the different elections and the referendum No deviations were found Requirements defined in the electoral law paragraphs 1 5 and 4 were not examined The agreement with the requirements defined in the next paragraphs in Appendix of DVREC 2 is described in the following sections Physikalisch Technische Bundesanstalt Seite 6 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 6 of test report of 2003 09 17 Reference No PTB 8 33 PA
9. his or her vote the polling staff can de activate the voting machine without approaching the voting machine screen by turning the key mentioned in 5 2 This requirement was checked by functional tests and software tests Encl 1 Any preference s entered on the voting machine screen will not be recorded as a vote A new activation is only possible after use of the key mentioned in 5 2 This requirement was checked by functional tests and software tests Encl 1 A deactivation of the voting machine following the non use of the CAST VOTE S button shall be recorded in the memory of the voting machine This requirement was checked by functional tests and software tests Encl 1 6 5 Once the voter has pressed the CAST VOTE S button the voting machine shall not provide information about any preference s recorded or vote cast by a voter This requirement was checked by functional tests and software tests Encl 1 6 6 The number of votes cast including null votes in the case of multiple polls will be displayed on the Control Unit and on the voting machine in stand by mode This requirement was checked by functional tests and software tests Encl 1 7 Displaying and printing the total number of votes at close of poll 7 1 The voting machine shall display where necessary the total number of votes cast and where applicable the number of null votes At close of the poll the polling staff must turn the function s
10. 0111 Sep 03 2003 5 voting instructions without date 1 English for the voter sent without Version number Jun 13 2003 Physikalisch Technische Bundesanstalt Seite 25 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 25 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a Die Physikalisch Technische Bundesanstalt PTB in Braunschweig und Berlin ist das natur und ingenieurwissenschaftliche Staatsinstitut und die technische Oberbehorde der Bundesrepublik Deutschland fur das Messwesen und Teile der Sicherheitstechnik Die PTB geh rt zum Dienstbereich des Bundesministeriums f r Wirtschaft Sie erf llt die Anforderungen an Kalibrier und Pr flaboratorien auf der Grundlage der DIN EN ISO IEC 17025 Zentrale Aufgabe der PTB ist es die gesetzlichen Einheiten in bereinstimmung mit dem Internationalen Einheitensystem SI darzustellen zu bewahren und insbesondere im Rahmen des gesetzlichen und industriellen Messwesens weiterzugeben Die PTB steht damit an oberster Stelle der metrologischen Hierarchie in Deutschland Zur Sicherstellung der weltweiten Einheitlichkeit der Ma e arbeitet die PTB mit anderen nationalen metrologischen Instituten auf regionaler europ ischer Ebene in EUROMET und auf internationaler Ebene im Rahmen der Meterkonvention zusammen Das Ziel wird durch einen intensiven Austausch von Forschungsergebnissen und durch umfangreiche internationale Vergleichsmessungen erreicht
11. 17 03a 2 1 2 The voting machine shall be constructed in line with the current general state OK of technology and be designed in accordance with recognised rules of technology applied to systems used in the machine Construction The construction of the voting machine is in line with the current general state of technology The main processor used is based on the Motorola M68000 series 16 bit data bus and 32 bit adress bus here in the high speed CMOS version M68HC000 very fast and lower current consumption The storage circuits used for the main control program are two EPROM of the 27C512 type 512 kbit 64 kByte memory capacitance For the storage of the error and event history and of the last vote in the case of power loss an EEPROM X2864A with a capacitance of 64 kbit 8kByte is used Two Flash EEPROM electrical erasable PROM 28F010 capacitance 1Mbit 128 kByte per ballot module are used for the storage of the initial data and the votes cast in the primary ballot module and in the backup module All other circuits used are fast standard CMOS circuits with good device features Technical design The technical design of the voting machine and of the systems used in the machine is in accordance with recognised rules of technology in particular all circuits used are standardized circuits The electronic circuits and elements are mainly designed in the SMD source mounted device technology The dimensions of the printed
12. 3 PA 17 03a 88 89 90 91 92 93 94 95 14 2 The system documentation shall describe a the working principle of the voting machine and the additional equipment and a OK description of the construction both electronic and mechanical explained with construction drawings block diagrams electronic and wiring diagrams printed circuit board layouts See list 1 Technical documentation of NEDAP No 9 in the Appendix of this Test Report b specifications of the environmental and operating conditions for normal operation storage and transport of the voting machine See list 1 Technical documentation of NEDAP No 8 in the Appendix of this Test Report c identification data including serial type and ordering numbers production and or delivery date electrical connection power supply This identification data must also be adequately indicated on the voting machine and the additional equipment See list 1 No 1 functional specification in the Appendix of this Test Report This identification data are indicated on a type plate and on the display or printout of the voting machine See notes 3 and 4 on paragraphs 1 3 and 1 4 14 3 The development documentation must include a a functional specification of the voting machine and programming unit See list 1 No 1 in the Appendix of this Test Report b the technical design of the voting machine and programming un
13. 393 03 c Physikalisch Technische Bundesanstalt Braunschweig und Berlin Gegenstand Object Hersteller Manufacturer Typ Type Ger tenummer Serial number Auftraggeber Applicant Anzahl der Seiten Number of pages Gesch ftszeichen Reference No Datum der Pr fung Date of test Im Auftrag By order Dr Bronder Pr fbericht Test report Type testing of a voting machine for elections referenda in Ireland in accordance with the request of 2003 03 05 and confirmation by PTB of 2003 03 20 N V Nederlandsche Apparatenfabriek NEDAP Parallelweg 2 G P O Box 105 7140 AC GROENLO The Netherlands Voting machine Powervote Integrated Election System ESI2 Hardware version Main 03 00 Connection 01 00 Display 03 00 Software version Main 02 02 Connection 01 05 Display 02 01 R3D01028 NNE00010 ID number of the prototype ID number of the Programming Unit Department of the Environment and Local Government Franchise Section Custom House Dublin Ireland 25 PTB 8 33 PA 17 03a 2003 03 20 to 2003 09 04 Berlin 2003 09 17 Bearbeiter Examiner Siegel Seal Sachse Pr fberichte ohne Unterschrift und Siegel haben keine G ltigkeit Dieser Pr fbericht darf nur unver ndert weiterverbreitet werden Ausz ge bed rfen der Genehmigung der Physikalisch Technischen Bundesanstalt Test reports without signature and seal are not valid This test report may not reproduce
14. 50082 1 Radiated 80 to 100 MHz field strength 3 V m modulated Conducted via power supply 0 150 MHz to 80 MHz 3 V Insulation IEC 60839 gt 10 MOhm under all temperature and humidity conditions the insulation of the power supply circuit must be resistant to a voltage of 2 kV between the phase and the 0 wire connected together and to earth during 10 seconds Housing IEC 60529 Drip water proof IP x 1 valid for all components of the machine that are in direct contact with the voter Energy consumption an energy consumption such that the emergency power supply for instance a battery can maintain the voting machine fully operational for at least 8 hours without replacement This paragraph is not covered by the order for testing Physikalisch Technische Bundesanstalt Seite 17 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 17 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 74 11 2 The functions of the voting machine will be maintained after being exposed to not tested the following conditions during storage Environmental temperature IEC 60068 2 25 C to 70 C Relative humidity IEC 60068 2 95 at 40 C upper limit non condensing Temperature change IEC 60068 2 25 C to 30 C Mechanical vibration IEC 60068 2 Random acceleration spectral density 1 m s 100 to 200 Hz 0 3 mis 200 to 2000 Hz during 1 hour per direction
15. Sine wave form 10 m s 10 to 200 Hz 15 m s 200 to 500 Hz Free drop IEC 60063 2 flat 2 x per side from a height of 0 25 m Tilt IEC 60068 2 along each edge of the packaging This paragraph is not covered by the order for testing 12 Manual handling of voting machine 75 The manufacturer shall ensure as far as is reasonably practicable that the voting not tested machine case is designed and constructed so as to be safe and without risk to the safety and health when moved opened or closed by persons employed at a poll The design and build shall be such as to enable the returning officer the employer to comply with Council Directive 90 269 EEC of 29 May 1990 and the Safety Health and Welfare at Work Act 1989 sections 6 7 8 9 10 and 11 copies at Part 2 of this Appendix This paragraph is not covered by the order for testing 76 Regard shall also be had to the following publications of the European Agency for not tested Safety and Health at Work e Factsheet No 10 on work related low back disorders and Research on work related low back disorders report October 2000 htp agency osha eu int publications reports lowback in particular the ISO ergonomic standards listed in Chapter 4 4 see item 3 in Part 2 of the Appendix This paragraph is not covered by the order for testing 13 Conditions for the use of voting machines for two or more polls simultaneously 77 The voting machines may be
16. X shall be in the left hand position of the LED This requirement was checked by functional tests and software tests Encl 1 when a preference is recorded details will be displayed on the bottom line of the voting machine display screen This requirement was checked by functional tests and software tests Encl 1 provision for changing a preference for a candidate or referendum choice will be provided by pressing the button a second time beside that candidate s details or referendum choice This requirement was checked by functional tests and software tests Encl 1 a voter will be able to cast his or her vote when at least one preference has been recorded on a ballot paper and where there is more than 1 ballot paper and no preference s is are recorded on the second or other remaining ballot papers following a reminder displayed on the display screen This requirement was checked by functional tests and software tests Encl 1 a vote will be recorded including a null vote where applicable in the voting memory of the voting machine following the pressing of the CAST VOTE S button This requirement was checked by functional tests and software tests Encl 1 This process shall include a check that the recording of the vote s cast has have been accomplished correctly This requirement was checked by functional tests and software tests Encl 1 If a vote is not recorded an error message shall be d
17. a Page 8 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 9 10 11 12 13 14 15 3 Installation ofa ballot module 3 1 Following the insertion of a programmed ballot module into the voting machine the voting machine shall carry out the following functions in sequence check to ensure that the voting machine is functioning correctly as defined in OK the Functional Specification This requirement was checked by functional tests and software tests Encl 1 and display and or print the contents of the memory of the primary ballot OK module This requirement was checked by functional tests and software tests Encl 1 3 2 The insertion of a primary ballot module shall be controlled by means of a OK physical key The primary ballot module can be inserted and removed only by means of a red marked module switch key on the backside of the voting machine This key has two functions First the mechanical locking of the covering flap with holes for insertion of a seal over the primary ballot module slot and secondly the connection to the power supply This requirement was checked by functional tests only The compartment for holding the primary ballot module shall be provided with a lock OK and with a covering flap with holes for insertion of a seal See note on 11 This requirement was checked by functional tests only The machine can only be activated for voting if a module has been
18. achine during the election come to notice because of the cyclic internal self check procedures inherent in the voting machine 60 8 7 The voting machine shall have a physical seal on the cover of the electronics OK unit to prevent the exchange or interference with program chips Provisions have been made at the prototype of the machine for a seal to be put on the electronic panel A local inspection on serial machines is required 61 8 8 The votes shall be stored randomly in the ballot module and must not be OK displayed or printed on the voting machine This requirement was checked by functional tests and software tests Encl 1 The vote part of the ballot module contains about 30 000 storage places where part of a vote can be stored The vote storage program does not generate random num bers of its own to determine the random addresses where a vote is stored For the calculation of the addresses for storage of the votes a random number is deter mined by a timer counter The voting machine is equipped with a timer interrupt which is enabled at power on This interrupt takes place every 8 milliseconds and the timer counter increments at each interrupt This actual random value of the timer counter is passed on to the vote storage program each time a new vote storage address is determined In no case will the votes be stored in sequential order As the vote storage software program does not generate random numbers of its own to d
19. d other than in full Extracts may be taken only with the permission of the Physikalisch Technische Bundesanstalt Physikalisch Technische Bundesanstalt Seite 2 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 2 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a Contents Page 1 General remarks sn nennen ee 3 2 Description of the voting machinez ss Ha 3 2 1 Identification of every voting machine and software eeeeeeeeeeeeeeeee tees 3 2 2 Components of the System 2 23222225 3 BER 22 RER REDE 4 2 3 Operation MOUS ze eee eee eer eee e aeri e ae 4 2 4 Voting machine accessories 212 2 212 2 2 212 2 2321242 Eee ara an 4 2 5 Conditions during storage and transpott unnnnnnnnnnnnnnnnnnnnnnn nn 4 2 6 Viewofthe voting machine re ae nase eetgerbeseheenbee 4 2 7 Technical Cale ee eek 4 3 Tests And Tesullssrs2naan sin a a RER ER 5 SL Testentelar EEE LEHE nee 5 3 2 CODE OF lest nenn NE 5 3 3 Requirements and test results cccccceccccceeeeseseeeeeeeeeeeeeeeesseeeeeeeeeeeeeees 5 A ASOMCIUSION Skena n cle A erinnere 21 4 1 Functional Tests of Hardware and Software cccceeeeeeeeeeeeeeeeeeeeeeeeeeees 21 4 2 SONWANE ee 21 4 3 DOcuUmenlallon sa EEE e eee ee Eeee adele eaei 21 4 4 Statement concerning retrofitted voting machines eee 21 5 APPENDIX Lists of voting machine documentations eeeennnnneee n
20. ear of production A 1988 B 1989 K 1998 L 1999 N 2001 M month of production 1 January O October N November D December T system component identifier C ballot module of ESI2 D voting machine ESI2 E P R unit of ESI2 XXXXX five numerical characters forming the serial number of every system component Physikalisch Technische Bundesanstalt Seite 4 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 4 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a Version numbers and ID checksums of the stored programs Main control Main board memory Pack ESI2_1 Version 02 02 ID Checksums Checksum even 00EA28AA hexadecimal Checksum odd 010C794E hexadecimal Connection communication control stored on the memory ofthe conn board Version 01 05 ID Checksum Checksum 00004237 hexadecimal Display control stored on each memory of five display boards Version 02 01 ID Checksum Checksum 0000D9A8 hexadecimal 2 2 Components of the system See description in section 1 3 of Functional Specification Nedap Voting System ESI2 Powervote 2 3 Operation mode See description in section 2 of Functional Specification Nedap Voting System ESI2 Powervote 2 4 Voting machine accessories See description in sections 1 4 and 1 5 of Functional Specification Nedap Voting System ESI2 Powervote 2 5 Conditions during storage and transport See requirements in paragra
21. eep will be generated If he presses the cast votes button the beep will be longer if a mistake is made some short beeps will be generated 9 4 When the voter records a preference or casts a vote by means of the buttons on not tested the voting machine the following requirements shall apply to the buttons minimum dimensions square 10 x 10 mm round 10 mm maximum operating force for the selection of a candidate 4 N maximum travel when buttons are pushed for selection of a preference for a candidate 6 mm minimum travel when buttons are pushed O mm This paragraph is not covered by the order for testing 10 Reporting and solution of problems 10 1 The voting machine shall as far as possible be equipped with a diagnostic OK mechanism so that after each action that has been performed within the voting machine the mechanism can detect defects or incorrect working of the different components of the voting machine and their associated communication channels Whenever a voter presses the cast votes button the voting machine executes different self tests and checksum tests which are described in the functional specification If an error occurs an error message is displayed and the voting machine turns into the error state These actions must include the steps that the voter or the polling staff can perform OK The voting machine must report a defect or incorrect working to the user See note on 66 10 2 In
22. enn 22 Enclosures Encl 1 SW Test Report Voting machine ESI1 dated 2003 09 17 Software for elections in Ireland Encl 2 Software Requirements for Voting Machines for Use at Elections in Ireland dated 2003 03 18 Reference PTB Test Report No PTB 8 33 130 02 dated 2002 03 23 PTB Test Report No PTB 8 33 73 01 dated 2002 01 29 Physikalisch Technische Bundesanstalt Seite 3 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 3 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 1 General remarks By letter of March 3 2003 the PTB received the order to test the microprocessor controlled voting machine ESI2_1 of the NEDAP N V company with the updated hardware version 3 00 and software version 2 00 in accordance with Functional specification Nedap voting system ESI2 Powervote and the new Requirements for voting machines for use at elections in Ireland DVREC 2 dated March 5 2003 The order for the test does not cover paragraphs 1 5 4 testing the voting machine against the Irish statutory requirements 9 4 11 testing environmental conditions of the voting machine and para graph 12 safety and health requirements for the manual handling of the voting machine nor does it include the hardware tests of paragraphs 8 2 8 3 8 4 10 2 and 10 3 which refer to paragraph 11 of the App Part 1 to the Requirements for voting machines for use at elections in Ireland DVREC 2
23. etermine the random addresses where a vote is stored it is not possible for anyone familiar with the software to find out where the voter s preferences are stored 9 Operability 62 9 1 The voting machine shall be configured so that a voter can only carry out voting OK actions on it See notes on paragraph 8 6 This requirement was checked by functional tests and software tests Encl 1 Physikalisch Technische Bundesanstalt Seite 15 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 15 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 63 64 65 66 67 68 69 9 2 Voting on the voting machine must be easy to understand OK Most of the explanations and instructions shown to the voter and the polling staff on the displays must be programmed in the primary ballot module for each poll These instructions can be updated depending on the experience gained in the last poll In addition the voting machine handbook for the polling staff and a short manual for the voter should be available in each polling station 9 3 The carrying out of an action by the presiding officer or by the voter must lead to OK a visible audible or tangible feedback signal within one second Actions carried out by the presiding officer or the voter lead to a change of both the voter s display and the officer s display If the voter presses a programmed button on the voter s panel a short b
24. for a not tested poll use at a poll and at the close of a poll shall be capable of being performed by the voting machine The word poll is deemed to include more than 1 poll maximum 5 held simultaneously 2 General conditions concerning the provision of information by the voting machine 2 1 The information provided by the voting machine to the user polling staff and OK voter must be relevant and clear The operating elements and identifications are neatly arranged on the voting machine They are to a large extent self explanatory and have been limited to what is necessary The detailed description of the information given by the voting machine to the users polling staff and voter is contained in the functional specification document 2 2 The voting machine must provide the user polling staff and voter with OK information either on the display screen on the voting machine or on the Control Unit or otherwise on the steps that the user must or can take in sequence using the voting machine and about the functions the voting machine is carrying out pursuant to the actions taken by the user subject to the condition that the candidate or referendum choices recorded or vote s cast on the machine by the voter cannot be related to that voter either at the time of voting or subsequently The sequence to be followed during polling is signalled to the voter and to the polling staff by suitable optical displays and acoustic signal
25. installed and the OK lock on the ballot module slot is in the closed position See note on 11 If no primary ballot module has been provided the voting machine starts with an error message and voting is impossible This requirement was checked by functional tests and software tests Encl 1 3 3 A back up module shall be installed and retained in the voting machine in OK accordance with the Functional Specification If no back up module has been provided the voting machine starts with an error message and voting is impossible This requirement was checked by functional tests and software tests Encl 1 4 Displaying ballot paper The ballot paper displayed on the voting machine must comply with the Electoral not tested Act 1992 the Electoral Amendment Act 2001 or relevant Ministerial Order under section 48 of the Act of 2001 and must be verified by statements printed from the voting machine before voting commences and at close of poll Physikalisch Technische Bundesanstalt Seite 9 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 9 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 5 Preparation before the poll 5 1 A voting machine can only be used for a poll after it has carried out or supported the following steps in sequence 16 demonstrated by way of a printed statement or on the display screen that no OK votes are recorded By reading the display or by printing out
26. irement was checked by functional tests and software tests Encl 1 Withdrawal of the key from the Control Unit will automatically stop the printing process Withdrawal of the function switch key automatically switches the voting machine to the stand by mode because the key is mechanically locked in the operation mode and can only be withdrawn in the stand by mode All current activities of the voting machine will be aborted This requirement was checked by functional tests only OK OK OK OK 7 3 After displaying or printing the total number of votes cast etc the voting machine OK can only be re activated for the casting of votes after the insertion of a new programmed ballot module After the total number of votes cast has been displayed or printed the primary ballot module used is locked for further casting of votes The election can only be continued by insertion of a newly programmed primary ballot module A copy of the contents of the previous primary ballot module is still present in the backup module If the polling staff displays or prints out the polling results for the next primary ballot module the previous copy will be overwritten 8 Reliability and security ofthe voting machine 8 1 A vote recorded in the primary ballot module must be the vote that the voter has cast This requirement was checked by software tests Encl 1 only The voting machine must be capable of recording votes on 5 ballot papers maxim
27. isplayed An error message will only be displayed if no complete shut down of the voting machine occured see requirement 10 3 This requirement was checked by functional tests and software tests Encl 1 If the voting machine is de activated by the polling staff when a voter fails to press the CAST VOTE S button each such deactivation shall be recorded in the memory of the voting machine This requirement was checked by functional tests and software tests Encl 1 OK OK OK OK OK OK OK OK OK OK Physikalisch Technische Bundesanstalt Seite 11 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 11 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 32 33 34 35 36 37 38 39 no action by the voter or polling station staff can interrupt the recording of a vote after the CAST VOTE S button is pressed e g turning key on Control Unit This requirement was checked by functional tests and software tests Encl 1 6 3 After each vote is stored the voters panel on the voting machine shall be de activated automatically The voting machine will not accept any further votes until a member of the polling station staff operating the Control Unit reactivates it This requirement was checked by functional tests and software tests Encl 1 6 4 Where the voter who has been permitted to use the voting machine does not cast
28. it See list 1 Technical documentation of NEDAP No 3 to 13 and No 23 in the Appendix of this Test Report c listings of the application source codes See list 1 Technical documentation of NEDAP No 24 to 27 in the Appendix of this Test Report d a quality plan See list 2 Test documentation of NEDAP No 9 in the Appendix of this Test Report 14 4 The test documentation must describe which measurements the manufacturer used at the verification the validation and the testing of components of the voting machine including software and must include at least OK OK OK OK OK OK OK Physikalisch Technische Bundesanstalt Seite 20 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 20 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 96 97 98 99 100 101 102 103 104 105 106 a test plan that describes the way in which the functions of the machine and programming unit are tested software module test report that describes the results of the module tests software integration test report s that describe the results of the integration tests software system test plan and report s containing the system test plan test specification and results 14 5 The user manual The user manual must include manual handling requirements Council Directive 90 269 EEC of 29 May 1990 including a list of error codes a
29. nd explanations In a special section Troubleshooting of the user manual for the polling staff there are listed 21 error codes with instructions for the polling staff which appear when the vote has not been stored In addition to the user manual there is a document with a full list of error event codes and messages for help desc staff See list 3 Documentation No 4 in the Appendix of this Test Report instructions for unpacking opening connecting and putting the voting machine into operation OK OK OK OK OK OK operating instructions for the adjustment of the voting machine and security and or OK p g J g y locking operating instructions for the members of the polling station maintenance instructions storage instructions 14 6 Instructions for the voter This document shall contain the instructions for a voter to use the voting machine OK OK OK OK Physikalisch Technische Bundesanstalt Seite 21 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 21 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 4 Conclusions 4 1 Functional Tests of Hardware and Software The described tests of the voting machine did not give cause for objections The identification data of the hard and software can be seen on the display and on the printout of the voting machine see notes 3 and 4 on paragraphs 1 3 and 1 4 4 2 Software The software test re
30. or tests software main board ESI2 Sep 03 2003 English doc number 8011915 19 24 Rev 1 2 communication tests software main board ESI2 Aug 06 2003 English doc number 8011915 19 25 Rev 1 1 state machine tests software main board ESI2 Sep 03 2003 English doc number 8011915 19 26 Rev C esse ee me doc number 8011966 19 20 Rev A ee dl al doc number 8011923 19 20 verification tests smd mainboard voting machine May 09 2003 English doc number 7822596 19 10 Rev 1 4 BEE FAT nn doc number 7822596 19 20 to 42 Update report function tests software main board Jun 03 2003 1 English ESI2 doc number 8011915 19 28 Rev A Update report event and error tests software main Jun 03 2003 English board ESI2 doc number 8011915 19 27 Rev A test description vote storage at power failure Dec 17 2001 English NEDAP voting system ESI1 vote storage doc version 1 1 controlplan stemcomputer ESI2 May 08 2003 7 English doc code KP0015 ESI2 Rev 01 Ps 3 Documentation overview and user manuals Release date pages Documentation overview Jun 04 2003 English doc number TB7174 05E001 Rev A04 Dutch Documentation status ESI2 Aug 28 2003 English doc number TB7174 05E002 Rev A10 old version Dutch NEDAP Powervote voting machine without date English operator s guide sent Version 0907 2 Sep 17 2003 4 List of error event messages relating to without date English voting machines type ESI2 sent Version
31. oting machine user manual for help desk staff The meanings of all error codes are listed in a special document in addition to the user manual See note on 100 and list 3 Documentation No 4 in the Appendix of this Test Report 11 Environmental conditions derived from OIML 11 IEC 60839 IEC 60068 2 or as amended adapted or extended by or under any subsequent version of these documents or replacement documents 73 11 1 Environmental conditions referred to in 8 2 8 3 and 8 4 are not tested Environmental temperature IEC 60839 1 3 IEC 60068 2 5 C to 40 C Relative humidity IEC 60068 2 85 at 40 C upper limit non condensing Power supply voltage IEC 60839 1 3 230V 10 10 50Hz 2 e Power supply cuts current interruption the voting machine must be equipped with a connection to an emergency power emergency power generator or batteries e Power cuts with short time durations IEC 60839 500 ms black outs and suppression up to 75 of the nominal voltage brown out must not lead to loss of function and information e Electromagnetic compatibility EMC this equipment must comply with EN 50081 1 and EN 50082 1 for which the following tests apply Fast transients EN 50082 1 1 kV on the power supply surge test EN 50082 1 1 kV in differential mode 2 kV in common mode Air discharge EN 50082 1 ESD test with 16 kV discharges Electromagnetic disturbances EN
32. ph 11 2 of Appendix Part 1 to Requirements for voting machines for use at elections in Ireland DVREC 2 2 6 View of the voting machine See pictures and description on pages 4 5 and 10 of Voting machine operator s guide Special descriptions are given in section 1 3 of Functional Specification Nedap Voting System ESI2 Powervote 2 7 Technical data See description in section 1 8 of Functional Specification Nedap Voting System ESI2 Powervote Physikalisch Technische Bundesanstalt Seite 5 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 5 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 3 Tests and results 3 1 Test criteria Test requirements and criteria are listed in the Appendix Part 1 Conditions for voting machines of Requirements for voting machines for use at elections in Ireland DVREC 2 and in the Functional specification Nedap voting system ESI2 Powervote Quality criteria for the software are listed in enclosure 2 3 2 Scope oftest The test covers inspection of the voting machine examination of its construction and technical design test of the voting machine accessories and examination of the documentation submitted by the manu facturer Some functions and operating modes of the voting machine were also tested The software of the voting machine was tested by inspection of the source codes and of the relevant documentation Moreover static analyses and
33. port Encl 1 makes some recommendations for an improvement of the software in case a further development of the software is envisaged see summary of the software test report The operativeness of the machine is not however affected by this in any way whatsoever The software tests did not give cause for objections 4 3 Documentation The documents listed have been submitted and are complete 4 4 Statement concerning retrofitted voting machines The electronic construction of the metal electronics compartment has been further developed com pared with the hardware version of the ESI1 see list 1 Technical documentation of NEDAP No 28 Differences between new and retrofit machines Revision A02 in the App of this Test Report This change is not required by DVREC 2 So both the old and the new version of this hardware com partment can be used with the new software version 02 02 without influencing the tested properties The cabinet and other components of the voting machine like the connection board and the display boards are not influenced and are completely equivalent to the version of ESI2 That is why it is recommended to mark the retrofitted voting machines and programming units appro priately on their type plates So it is possible to notice the difference at any time if necessary Physikalisch Technische Bundesanstalt Seite 22 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 22 of tes
34. pr 22 2003 1 English SW version 01 04 to 01 05 Rev A doc number 8011966 01 01 rar Rc EA BEE doc number 9556583 19 03 Rev A source code Mar 17 2003 English main control program ESI2 V02 00 Dutch connection print V1 04 display print V02 00 on 3 5 disc source code main control program ESI2 Apr 23 2003 English V02 01 on 3 5 disc Dutch source code main control program ESI2 Jun 06 2003 English V02 02 on 3 5 disc Dutch source code ESI2 Apr 23 2003 English connection print V01 05 and Dutch display print V02 01 on 3 5 disc Differences between new and retrofit voting May 22 2003 English machines ESI2 doc number TB7174 05E003 Rev A02 29 Cast vote beep interrupt ESI2 Aug 18 2003 1 English doc Number 8011915 19 29 Rev A02 Physikalisch Technische Bundesanstalt Seite 24 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 24 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a re 2 Test documentation of NEDAP Release date pages Overview ESI2 software tests Aug 27 2003 English doc Number 9556583 19 12 Rev A03 test results integration tests software main board ESI2 Aug 06 2003 English doc number 8011915 19 20 Rev 1 1 functions tests software main board ESI2 Aug 14 2003 English doc number 8011915 19 22 Rev 1 1 driver tests software main board ESI2 Aug 14 2003 English doc number 8011915 19 23 Rev 1 1 event and err
35. rimary ballot module is provided with a lock and a covering flap with holes for insertion of a seal The primary ballot module must be programmed for the poll s and the correctness of programming must be tested After that the voting machine must be sealed with an official seal at the right side of the case and transported to the polling stations In addition there shall be two physical seals on the cover of the electronics unit to prevent the exchange or interference with program chips Before the poll the presiding officer of the polling station must check whether the seals are still intact Physikalisch Technische Bundesanstalt Seite 7 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 7 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 4 9 6 7 8 1 4 In the case of a processor controlled machine any alteration of the installed OK software by an unauthorised person will be detected The program version numbers and checksums of the installed software for the main control board the connection communication board and the five display boards can be displayed on and printed out by the voting machine This enables the polling staff to compare these program version numbers and checksums with the values given by the manufacturer in documentation user manual or e g listed in an authorised certificate 1 5 The relevant statutory procedures for the preparation of a voting machine
36. s Operation of the functions of the Control Unit which release and block the voting machine during polling as well as operation of the voting machine prior to and after polling are described in the user manual voting machine handbook The detailed description of the information given by the voting machine to the users polling staff and voter is contained in the functional specification document and was checked by functional tests and software tests Encl 1 The voter cannot be identified by the voting machine and the voting machine does not have elements with which data of the voter can be input or stored 2 3 The voting machine must provide a statement before polling commences and at OK close of poll listing the candidates on the ballot paper the total number of activa tions of the voting machine the number of votes cast if any including any null votes in the case of multiple polls on the machine number of deactivations of the voting machine where a voter does not press the CAST VOTE S button and other relevant details of the voting machine and the poll s concerned The detailed description of the information given by the voting machine to the users polling staff and voter is contained in the functional specification document and was checked by functional tests and software tests Encl 1 Physikalisch Technische Bundesanstalt Seite 8 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03
37. software design Aug 05 2003 sa aE NEDAP voting system ESI2 ESI2_1 software doc number 8011915 19 01 doc version 1 2 14 Update report software main board ESI2 Feb 18 2003 ee es SW version 01 04 to 02 00 Revision A pee en doc number 8011915 01 01 15 Update report software main board ESI2 Apr 03 2003 English ee SW version 02 00 to 02 01 Revision A heey e doc number 8011915 01 01 Physikalisch Technische Bundesanstalt Seite 23 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 23 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a Fl Technical documentation of NEDAP Release date pag es io report software main board ESI2 Apr 22 2003 English SW version 02 00 to 02 01 Revision A doc number 8011915 01 02 Update report software main board ESI2 Jun 03 2003 1 English SW version 02 01 to 02 02 Revision A doc number 8011915 01 03 Update report software display print ESI2 Feb 18 2003 1 English SW version 01 06 to 02 00 Rev A doc number 8011923 01 01 Update report software display print ESI2 Mar 19 2003 1 English SI version 02 00 10 02 01 Rev A er doc number 8011923 01 02 Update report software display print ESI2 Apr 23 2003 English SI version 02 00 10 02 01 Rev A Cn doc number 8011923 01 02 Update report software connection print ESI1 Mar 19 2003 English SW version 01 04 to 01 05 Rev A doc number 8011966 01 01 Update report software connection print ESI2 A
38. t report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 5 APPENDIX Lists of voting machine documentations Ps 1 Technical documentation of NEDAP Release date pages functional specification May 28 2003 62 English NEDAP voting system ESI2 powervote doc number 8011915 18 01 doc version 1 9 SW Version 02 02 2 executable file NWS EXE for Ireland version 2 02 Jun 03 2003 English on 3 5 disc for test handling onl N technical specification NEDAP voting system Dec 14 2001 10 English ESI1 vote storage doc version 1 2 4 Hardware Wahlger t ESD1 Jan 02 1998 160 German doc version 1 1 Hardware modifications main board from HMT to Apr 23 2003 4 English SMT Revision A01 doc number 7822596 19 01 hardware specification NEDAP voting system Oct 19 2001 4 English ESI1 vote storage after interrupt doc version 1 0 ed Bez reliability of the voting machine ESI1 Oct 2001 20 English doc version 1 1 validation plan for environmental conditions for Mar 26 2003 4 English doc number 9556583 19 11 Rev A01 re 10 interface specification 08 Ea English voters panel amp main processor board doc number 8011966 19 01 Rev B 11 hardware and software specifications IT 5 matt EO connection board voting machine Ireland ESI1 version 0 0 12 hardware and software specifications May 05 2003 16 ee display board voting machine Ireland ESI1 doc number 8011923 19 02 Rev 0 3 Be a ed 13 detailed
39. the event of a power failure between 500 msec and 2000 msec of pressing OK the CAST VOTE S button a vote stored in the Eeprom of the machine shall not be lost providing there is no fatal machine failure on restoration of power This requirement was checked by software tests Encl 1 only 10 3 In the event of a voting machine failure that affects the vote storage process OK between 500 msec and 2000 msec of pressing the CAST VOTE S button unless the failure is such as to cause a complete shut down of the machine an error message shall be displayed e g error no xxxx vote not stored This requirement was checked by software tests Encl 1 only While an error code is displayed the message is not displayed see note 72 Physikalisch Technische Bundesanstalt Seite 16 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 16 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 70 10 4 The diagnostic mechanism shall not be accessible to or be capable of being OK switched off by the user No switching mechanism for the user has been provided 71 10 5 The diagnostic mechanism must provide the user with messages text or code OK that support and speed up the trouble shooting procedure See note on 66 72 10 6 The meaning of the fault messages generated by the diagnostic mechanism OK and the actions to be taken with respect to each fault message must be clearly stated in the v
40. the module contents the polling staff can check that no votes are stored in the primary ballot module Prior to the election in order to document that the ballot module is empty print out of a zero polling result can be initiated via the Functions menu 17 and checked that the voting machine is functioning correctly in accordance OK with the Functional Specification Sections 2 and 8 After a primary ballot module has been inserted and the red module switch key turned on the backside of the voting machine in the operating position the voting machine executes different self tests described in the functional specifica tion If an error occurs an error message is displayed and voting is impossible 18 5 2 Votes shall only be recorded if the key referred to in 3 2 is inserted in the OK Control Unit The polling staff can release the voting machine for voting only if a red marked function switch key is inserted in the control unit and if this key is in the operating position This requirement was checked by functional tests only 19 Withdrawal of the key from the Control Unit will switch the voting machine to OK standby and prevent votes from being recorded The function switch key is mechanically locked in the operating position It can only be withdrawn when it is turned into the standby position In this position voting is impossible This requirement was checked by functional tests only 6 The poll 20 6
41. um 90 preferences simultaneously as per paragraph 13 The capacity of the ballot module is set out in paragraph 1 8 of the Functional Specification This requirement was checked by functional tests and software tests Encl 1 OK OK Physikalisch Technische Bundesanstalt Seite 13 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 13 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 47 48 49 50 51 52 53 54 55 56 8 2 Subject to 10 3 a cast vote must not be lost by a power failure the failing of one OK component the effect of environmental conditions detailed in paragraph 11 1 through normal use or through failures in the operation of the voting machine a This requirement was checked by software tests Encl 1 only b For tests regarding environmental conditions see notes on paragraph 11 1 8 3 The installed ballot module and its contents must be fully maintained in case of a power failure the effect of environmental conditions as set out in paragraph 11 1 through normal use or through failures in the operation of the voting machine a This requirement was checked by software tests Encl 1 only b For tests regarding environmental conditions see notes on paragraph 11 1 8 4 The functions of the voting machine must be fully maintained in the event of a power failure or exposure to the environmental conditions as detailed in 11 1
42. used for one two or more maximum 5 polls that are OK held simultaneously including an election and a referendum The number of polls including a referendum which can be held simultaneously is described in the functional specification in section 1 8 78 The voting machine shall be equipped in such a way that it fulfils the following OK requirements the designation of the selection buttons for each ballot paper is stored in tabular form in the ballot module This requirement was checked by software tests Encl 1 only Physikalisch Technische Bundesanstalt Seite 18 zum Prufbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 18 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 79 80 81 82 83 84 85 86 87 the voting machine can be activated for the voter for a maximum of 5 polls The number of polls including a referendum which can be held simultaneously is described in the functional specification in section 1 8 This requirement was checked by functional tests and software tests Encl 1 the ballot papers displayed on the voting machine are clearly separated from each other The voter s panel is provided with five display boards separated from one another and arranged in columns the voter can record preferences starting on any ballot paper The preferences will start from 1 on each ballot paper except a referendum ballot paper The
43. witch key in the operating position while pressing the function button The voting machine is now in the Function mode and the polling staff can close poll and show the votes cast on the display The number of null votes can be printed out see note on 40 OK OK OK OK OK OK OK OK Physikalisch Technische Bundesanstalt Seite 12 zum Pr fbericht vom 2003 09 17 Geschaftszeichen PTB 8 33 PA 17 03a Page 12 of test report of 2003 09 17 Reference No PTB 8 33 PA 17 03a 40 41 42 43 44 45 46 additionally it shall print where necessary the total number of voters who were permitted to use the machine activations the total number of votes cast the number of null votes and the total number of deactivations The print out of the poll result includes the number of votes cast the number of null votes the number of activations and the number of deactivations This requirement was checked by functional tests and software tests Encl 1 7 2 Activation of the voting machine for the display and printing of the information referred to in paragraph 7 1 shall be accomplished by means of the key referred to in paragraph 5 2 This requirement was checked by functional tests and software tests Encl 1 The back up module shall be checked to ensure that any existing data in the module is deleted before the contents of the primary ballot module are copied to the back up module This requ
Download Pdf Manuals
Related Search