ELVIS

1
ELVIS

• Presented by
• Mike Stewart
• Chief Information Officer
• 11-3-2005
• PKI 102 Presentation

2
EL
ection
V
oter
I
nformation
S
ystem
3
The Law
Each state, acting through
its chief state election official,
shall implement, in a uniform
and nondiscriminatory manner,
a
4
uniform,
single,
centralized,
official,
interactive,
computerized
statewide
voter registration list
5
defined,
maintained,
and administered
at the state level
Public Law 107-252, Title III, Sec. 303(a)
6
The ELVIS System

• Requirements set by county workgroup
• Voter Registration, Election Management
• Designed to meet the core requirements of every
  county large, medium, small
• Election Systems Software (ESS)
• HAVA requirements by 1/1/2006
• All Kansas requirements by 6/30/2006
• Automated processing
• Agency Interfaces
• Statewide Duplicate Check

7
Risk Assessment

• Security
• Voter registration data
• name, address, DL, last 4 SSN
• voter registration card images
• interfaces to death felon records
• Authentication/Identity
• I am who I say I am, cant say didnt do it
  audit log, PKI header information
• Vetting
• Level 2, vetted by CEO, SOS Elections

8
Requirements

• Included in RFP
• Must have KS PKI certificate to see ELVIS
  system
• Portability
• Election office front counter, temporary workers
• Verisign USB Token Based system
• Certificate must have (Universal Principle Name)
  in Principle Name field. Used for Microsoft
  active directory

9
Implementation

• Verisign USB Token Based system
• Certificate must have additional field, used for
  active directory
• Private key not exportable from token
• Portability
• PIN
• Lessons Learned
• Technical process, must follow instructions
  EXACTLY
• Software on workstation
• Token lifecycle forgotten PIN, distribution,
  temp workers

10
Questions?