Internet voting (I-voting or online voting) is one of the possibilities to vote in addition to other voting methods. I-voting means in this context voting via Internet, not voting by using a special voting device.
The State Electoral Office is responsible for the organization of Internet voting while the National Electoral Committee retains a supervisory role. Internet voting was first introduced in the local elections of 2005, when more than 9 thousand voters cast their ballot via the Internet (this corresponded to about 2 per cent of all participating voters). Today, I-voting with binding results has been carried out eight times in Estonia:
References
One of the traditional ways to vote is outside the polling district of the voter’s residence. This means that during the voting, the voter puts his or her vote into double envelope and the envelope is delivered to the voter’s polling division of residence. The general concept of I-voting has been derived from the voting outside the polling district of residence. Both voting methods use a similar way of checking that the vote has been cast only once and guaranteeing the anonymity of vote.
In order to understand the I-voting system better, the envelope voting method used in Estonia should be described shortly:
The system guarantees that the voter’s choice shall remain secret and recording of the vote in the list of voters in the polling district of residence prevents voting more than once.
I-voting is carried out according to the same scheme. The downloaded I-voting application encrypts the vote. The encrypted vote can be regarded as the vote contained in the inner, anonymous envelope. After that the voter gives a digital signature to confirm his or her choice. By digital signing, the voter’s personal data or outer envelope are added to the encrypted vote.
I-voting is possible only during the 7 days of advance polls – from the 10th day until the 4th day prior to Election Day. This is necessary in order to ensure that there would be time to eliminate double votes by the end of the Election Day.
To ensure that the voter is expressing their true will, they are allowed to change their electronic vote by voting again electronically during advance polls or by voting at the polling station during advance polls.
For example, if a voter cancels his/her electronic vote by going to the polling station to vote, it is guaranteed that only one vote is counted per voter. To that end, all polling stations are informed of the I-voters on their list of voters after the end of advance polls and before the Election Day on Sunday. If it is found at the polling district that the voter has voted both electronically and with a paper ballot, the information is sent to the Electronic Voting Committee and the voter's I-vote is canceled.
Before the ascertaining of voting results in the evening of the Election Day, the encrypted votes and the digital signatures (i.e. the data identifying the voter) are separated. Then anonymous I-votes are opened and counted. The system opens the votes only if they are not connected to personal data.
Related documents
Time of I-voting: I-votes may be given during 7 days, from the 10th day until the 4th day before the Election Day.
Possibility to recast I-vote: during the I-voting period a voter can recast his/her I-vote in which case the last I-vote counts.
Precedence of the ballot paper voting: if a voter who has already I-voted goes to the polling place during advance polls and casts his/her vote by using paper ballot, then the I-vote is canceled. After that, the voter cannot recast his or her vote electronically or by using a paper ballot. On the Election Day the I-vote cannot be changed.
Similarity of I-voting to regular voting: I-voting adheres to the election acts, general election principles and customs. Thus, it is uniform and secret, only eligible voters may vote, every person may cast only one vote, it should be impossible for voters to prove the way they voted. The collecting of votes is secure, reliable and verifiable.
The voter must be able to cast his/her vote freely and without outside coercion or influence. Incitement to I-voting by offering a computer for that purpose or influencing voters in any other way is prohibited; among other things, no collective I-voting events (opening of I-voting offices or service desks, etc.) shall be organized insofar as such activities may be considered violation of the freedom of voting.
An I-voter shall vote himself/herself. Using another person’s ID card (or mobile-ID) for voting and transfer of the card's PIN codes to another person is prohibited. In order to avoid security risks, only a trusted computer should be used, either owned by the voter or a person the voter can trust.
1. I-voting by means of ID card
Requirements:
ID card software should be renewed if necessary. (See also www.id.ee)
Stages of I-voting by means of ID card
2.I-voting by means of digital ID
Digital ID, i.e. digi-ID, is a document which allows identifying a person in the electronic environment and giving digital signature. Digi-ID looks like an ID card, but without a user’s photo, and it can only be used over the Internet.
Stages of I-voting and means in using digi-ID are similar to the ones used with ID card.
3. I-voting by means of mobile-ID
This method was used for the first time during the 2011 elections to the Riigikogu.
Requirements:
There is no need to install a card reader and special software to the computer; the mobile phone with the respective SIM card performs the functions of the card and card reader simultaneously. Mobile-ID must be activated by ID card prior to use.
Stages of I-voting if mobile-ID is used:
Mobile-ID allows a person to be identified and give digital signatures, but at the moment it is not possible to vote by using a mobile phone, a computer with Internet connection is also needed. Thus, it is too early to talk about m-voting as such.
Verification of electronic votes (I-votes) enables to receive more accurate information on the security of the computer that was used to cast the I-vote. Verification makes it possible to detect when the computer is infected with malware that changes the I-vote or blocks the I-voting. The system was used first at the 2013 local elections. Voters will be able to verify their I-votes with a smart device (smartphone or a tablet) equipped with a camera and Internet connection.
From 2017 added universal verification features will further allow for a more transparent process. The IVXV framework introduces data auditing where auditors are able to check all input and output files for their consistency throughout the process.
Related documents
What is individual verification of I-votes? (PDF)
IVXV framework general description (PDF)
Scientific Research on Estonian Internet Voting Experience (PDF)