EVM PPT final_24_10_2019_IM.cdr

[Audio] PRESENTATION ON EVM September, 2021. PRESENTATION ON EVM September, 2021.

1. 2. 3. 4. 5. 6. 7. 8. TOPICS What is EVM (Ballot Unit + Control Unit + VV AT) History Technical Expert Committee (TEC) Technical Security Administrative safeguards Debate around EVMs- Explained Court Judgements on EVM Why Going Back to Ballot is not a Solution 2.

1. What is EVM? (Ballot Unit + Control Unit + WPAT).

[Audio] VoterVerifiablePaperAuditTrail. Voter Verifiable Paper Audit Trail.

Control Unit CONTROL UNIT- enables the Ballot Unit to accept vote from the voter and stores the vote cast.

Ballot Unit BALLOT UNIT- the voter can franchise his/her vote by pressing a button against the candidate of his/her choice.

VVPAT Voter Verifiahlp Paner Audit Trail- allows the voters to verify that their votes are cast as intended. 7.

POLLING STATION LAYOUT Polling Agents Polling Officers Voting Compartment BU & WPAT Presiding Officer with CU Voter 8.

2. HISTORY OF EVM Four Decades and more.

HISTORY OF EVM -40 YEARS (1/2) 1977 1980-81 1982-83 1984 1989 2000 2018 CEC- S L Shakdar talked about introducing an Electronic machine. EVMs developed and demonstrated by ECIL and BEL. EVMs used first time in 50 polling stations of Parur AC in Kerala. then in 11 Assembly Constituencies: 8 states, IUT. SC suspends EVM usage: cannot be used till RP Act is amended. RP Act amended: enabling use EVMs w.e.f. 15.03.1989. EVM has been used continuously since 2000 And SC dismissed petition asking for return to Ballot papers 10.

HISTORY OF WPAT (212) 2010 2013 Oct - 2013 2017 2019 April - 2019 In All Political Party Meeting held on 04.10.2010 agreed to incorporate WPAT with EVM 14th August 2013-The Conduct of Elections Rules 1961 amended to use VVPAT & First used in Bye-election for 51 -Noksen AC in Nagaland SC allowed ECI to introduced VVPAT system in phased manner -all party -meetihg,Ahe-ComffliSsiön committed to ensure--100% coverage of VVPATs in all future elections. 100% deployment of VVPATs in Lok Sabha 2019. SC directions for verification of WPAT slips of 5 polling stations per AC or AS in a PC for greater satisfaction. Since 2000, EVMs have been used in all elections: 4 Lok Sabha and 132 State 11 Legislative Assemblies. Till date, >340 crore votes cast on EVMs..

3. TECHNICAL EXPERT COMMITTEE INDEPENDENT EVALUATION 12.

T E C- HISTORY & ROLE (1/3) 1st Technical Expert Committee (TEC) formed January, 1990 December 2005 Recommended use of the EVMs unanimously April 1990 TEC constituted for evaluation of upgraded EVMs Submitted an Evaluation Report in 2006 November 2010 Current TEC Approves EVM Design Vets and seals the software Recommends continuous improvement Recommends improvements manufacturing process design in the 13.

Past TECs (2/3) Composition of First Technical Expert Committee on EVMs — 1990 1. 2. 3. Professor S. Sampath, Chairman Technical Advisory Committee, Defence Research & Development Organization DRDO), Ministry of Defence. Professor PV Indiresan of the IIT Delhi. Dr. Rao C. Kasarabada, Director, Electronic Research & Development Centre (ERDC), Trivandrum. Composition of Second Technical Expert Committee — Dec 2005 1. Prof P.V. Indiresan, Ex-Director, IIT Madras as Chairman of TEC. 2. Prof. D.T. Shahani of IIT Delhi. 3. Prof. A.K. Agarwala of IIT Delhi. 14.

PRESENT TEC COMPOSITION (3/3) 4 Eminent Professors from IITs: Renowned Experts in their Fields. Prof Rajat Moona, Prof D T Shahani, Director IIT Bhilai, Prof Emeritus, IIT-Delhi Prof A K Aggarwala, IIT Delhi Former Director General CDAC Prof Dinesh K Sharma, Prof Emeritus, IIT Bombay 15.

4. TECHNICAL SECURITY SECURE DESIGN AND MANUFACTURING PROCESS 16.

SECURE DESIGN AND MANUFACTURING (1/5) Standalone Machine Strong "mutual authentication capability" Unauthorised Access Detection Module Secured Development and Manufacturing Most advanced Encryption techniques No Radio Frequency transmission or reception capability One Time Programmable (OTP) Dynamic Coding of Key Presses Automated self diagnostics at every switch ON Real Time Clock for date and time stamping key presses.

SECURE DESIGN AND MANUFACTURING (215) Standalone Machine: EVM is a machine not connected with external world through wire or wifi or blue tooth or any network. Unauthorised Access Detection Module (UADM): UADM embedded in the machine disables EVM permanently, if any attempt made to access microcontroller or memory. Most Advanced Encryption Techniques: Encrypted communication between Control Unit, Ballot Unit and VVPAT cannot be deciphered by tapping cables. 18.

SECURE DESIGN AND MANUFACTURING (3/5) Automated self diagnostics at every switch ON: It checks EVM's standard features each time it is Switched ON. Strong Mutual Authentication Capability: The strong mutual authentication capability ensures that any unauthorised devices cannot interact with EVMs. No Radio Frequency Transmission or Reception Capability: Any tampering of ECl- EVM by coded signals by wireless, Bluetooth or WiFi is ruled out as EVM does not have any radio frequency (RF) communication capability, hence, cannot communicate through any wireless protocol. 19.

SECURE DESIGN AND MANUFACTURING (4/5) One Time Programmable (OTP): The programme (software) used in these machines is burnt into a One Time Programmable (OTP) chip at the time of manufacturing so that it cannot be altered or tampered with. Dynamic Coding of Key Presses: Every key press is coded dynamically making it impossible for anyone to decode the signals between Control Unit or Balloting Unit or VVPAT. Real Time Clock for date and time stamping key presses: Every authorised or unauthorised key press is recorded with date and time stamp on real time basis. 20.

o o o o SECURE DESIGN AND MANUFACTURING (5/5) Secured Design Development & Manufacturing Process: Manufactured by Premium PSUs- BEL & ECIL: Both deal with manufacturing of sensitive equipment critical to the safety and security of the Nation and have strong security protocols. SOFTWARE Developed in-house by BEUECIL. Fully vetted by TEC. Never sub-contracted. Secure Manufacturing: 4-level Physical/Process access Control, Regular frisking, Outside e-gadgets prohibited, CCTV Coverage, Access Data and Process Data logging, Alarm and Alert generation. Third Party Testing by Directorate of Standardisation Testing and Quality Certification (STQC) as per Standards & Quality Process set by TEC. Software is also tested & checked by STQC for authenticity. 21.

5. ADMINISTRATIVE SAFEGUARDS SECURE PROCESS ON HANDLING & MANAGEMENT OF EVMs 22.

ADMINISTRATIVE SAFEGUARDS Stakeholder Participation Multiple Mock Polls Allocation and Movement First Level Randomizations Checking (FLC) Poll Day Checks Poll Closure & Transportation Storage and Security Counting Day Protocol Candidate Setting EVM Management System (EMS) 23 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS STAKEHOLDER PARICIPATION Active Participation of & Witness by Political- Parties/Candidates in All Processes Opening & Sealing First Level Check (FLC) of EVM Warehouses & Strong-rooms List of EVMs after ISt & 2nd randomization shared to Counting Proces political parties/candidates Conduct mock poll Candidate Setting & Symbol Padicipation During and receive mock loading-Sign on Paper Seals on FLC poll results EVMs after all processes 24 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS ALLOCATION & MOVEMENT Planned Allocation EVMs are allocated to poll going State by the Commission. Received by District Election Officer (DEO) who is personally responsible for secured storage. EMS used for inventory management of all EVMs nationwide for the sake of transparency. Secured Transportation Movement of EVMs mandatorily managed through EVM Management System (EMS). Only Containerized/Sealed Trucks used. All Trucks sealed with Lock and Paper Seals. Mandatory GPS tracking of EVM vehicles. All movement under 24X7 Police Escort. Videography done of shifting process. Political parties informed in advance about the opening, stocking and sealing of warehouses while moving EVMs. 25 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS FIRST LEVEL CHECKING (FLC) FLC is mandatorily done in the presence of representatives of political parties. Fully sanitized hall under videography and full security. Full functionality and behavioural check is done on every EVM. Defective (non-functional) EVMs are kept aside and not used in election. FLC status captured in EMS. Introduction of Pre-FLC unit on pilot basis to mitigate human errors during FLC 1, i 26 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS FLC PROCESS Presence of political parties/candidates/their representatives in every election related process is mandatory Complete physical check up (switches, cable, latches etc) & functional test Mock Poll on randomly CU sealed after selected 5% EVMs for higher FLC using 'Pink votes (1200 votes in 1%, Paper Seal' 1000 in 2% & 500 in 2%) EVMs/VVPATs stored in Strong Room under 24X7 security Mock Poll on All EVMs/VVPATs Electronic Resul! in CIJ is tallied with VVPAT Slip count and results shared with representatives Signing on seals by Engineers and representatives Photocopies of record registers shared with political party representatives 27.

ADMINISTRATIVE SAFEGUARDS RANDOMIZATION 1 st Randomization (114) PSI 2nd Randomization PS2 PS(n) AC (n) 28 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS FIRST RANDOMIZATION (2/4) EVMs are Randomized twice using EMS. No human intervention in randomisation. only FLC approved EVMs as per EMS randomisation. 1st Randomization • Done after FLC get picked up for first • To allocate EVMs from district, randomly, to a particular AC/AS. In presence of representatives of political parties. List of AC/AS-wise Randomized EVMs shared with political parties. 29 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS SECOND RANDOMIZATION (3/4) EVMs are Randomized twice using EMS. No human intervention in randomisation. Only FLC approved EVMs recorded in EMS get picked up for first randomisation. 1st Randomization 2nd Randomization • Done just before 'candidate setting'. • To allocate EVMs available in an AC/AS to polling stations. In presence of candidates/election agents and list shared. 30 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS RANDOMIZATION- THE FOUNDATION OF EVM SECURITY Till first randomization- no one knows which EVM is going to which Constituency. Till nomination finalization- no one knows the sequence of names on the ballot paper. Hence, till candidate setting no one (not even ROIDEO/CEO/Commission) knows which button on which BU will be assigned to which candidate, making even an attempt to tamper absolutely futile. Till 2nd Randomization- no one knows which EVM will go to which PS. Added to this is the 3 stage Randomization of polling officials to different polling stations. 31 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS CANDIDATE SETTING (1/2) The Process Insert ballot paper in the Ballot Unit & Set Number of Candidates Symbol loading in VVPAT Candidate Setting in Control Unit Seal Ballot Unit Seal VVPAT Seal Candidate Set of CU Mock Poll on Every EVM with VVPAT + 1000 vote on 5% EVMs with VVPATs 32 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS CANDIDATE SETTING (212) Security Measures Done only after finalization of the names of contesting candidates. Fully sanitized hall under videography and full security. o Done in the presence of candidates or their agents. Introduction of new SLUs for loading symbols in VVPATs, and enabling O simultaneous live viewing on TV monitor by all stakeholders 33 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS MULTIPLE MOCK POLLS Each EVM & WPAT undergoes mock poll during FLC, and again during Candidate Setting. In addition 10% EVMs are randomly picked up for higher vote (500-1200) mock poll. Electronic result count is verified with paper slips count. 10% EVMs randomly taken out for Training and Awareness undergo Mock Polls several times. Before start of actual poll, Mock poll on each EVM alongwith VVPAT with at least 50 votes in the presence of polling agents. Electronic result count is verified with paper slips count. 34 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS POLL DAY CHECKS Polling Agents Central Armed Police Force (CAPF) and Micro Observers deployed at poling stations. Web Casting/CCTVs Frequent visits (Sector Officers [Senior officers/ Observers) 2 hourly reporting of votes polled • Media vigil 35 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS POLL CLOSURE & TRANSPORTATION Poll Closed on EVM by pressing CLOSE button — EVM cannot accept any further vote. EVMs sealed in the respective carrying cases & polling agents sign on them. EVMs transported back to the reception centres under armed escort. Candidates' representatives are allowed to follow them. 36 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS STORAGE & SECURITY (1/5) EVM Warehouse/Strong-room with only One Entry Point. Entry secured by a Double Lock System with DEO & Dy. DEO, each having custody of keys of one lock each. 24X7 Armed security. The opening & closing of EVM warehouse ONLY in presence of Political party representatives- advance written intimation mandatory. • Every EVM moved is managed by ECl through EMS. Post Polling: • Polled EVMs are stored in strong room having double lock system. Candidates allowed to put their own seals on locks. 37 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS STORAGE & SECURITY Various lavers of security of polled EVMs (215) I. 2. 3. 4. Unique ID of BUS, CUs & VVPATs shared with political parties/candidates. Sealing of CU and BU with Pink Paper Seals during FLC and commissioning respectively on which political parties and candidates put their signatures. Sealing of EVMs before starting actual poll on which polling agents also put their signatures. Seals on carrying cases of EVMs after closing of poll on which polling agents also put their signatures. 38 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS STORAGE & SECURITY (3/5) 5. 6. 7. 8. 9. Double lock system at the door of strong room on which candidates also put their own seals. CCTV feed to Candidates Camping Area to monitor strong room Two Cordoned round-the-clock security (Inner perimeter manned by CAPF and Outer perimeter by State Armed Police. Log-book and videography of officers inspecting the two cordons daily. Candidates/their representatives are allowed to watch the strong room 24x7 10. 2417 security arrangement for unused EVMs also. 39 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS SECURE STORAGE IN STRONGROOMS TILL COUNTING (4/5) SAP- State Armed Police SAP CAPF CCTV Evu Rom CAPF- Central Armed Police Force Polled EVMs kept in strong room, sealed in the presence of the Candidates and Observer. Facilitation for Candidates to watch the Polled EVM strong Room 24/7. Starting from FLC of EVMs to Counting of votes, EVMs are kept in Strong-room with full 24/7 security. 40 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS STORAGE DURING ELECTION PETITION PERIOD (5/5) Election Petitions can be filed within 45 days of result declaration. EVMs (BU+CU) & VVPATs remain under sealed conditions till EP position is ascertained. EVMs and VVPATs under EP, are kept under safe custody of DEO (Strong Room) till final disposal of EP. Print on WPAT Slips remains for 5 years. Remaining EVMs and VVPATs not in EP are now free for re-use. 41 Presence of political parties/candidates/their representatives in every election related process is mandatory.

ADMINISTRATIVE SAFEGUARDS COUNTING DAY PROTOCOL On the day of counting, strong room opened in the presence of Candidates, RO and Observer under videography. Round-wise CUs are brought to the counting tables from Strongrooms under CONTINUOUS CCTV Coverage. Unique ID number of the CU & the signed seals are verified and shown to the polling agents. EVMs are stored back in Strong Room in the presence of candidates/their representatives till the completion of the Election Petition period. Presence of political parties/candidates/their representatives in every election related process is mandatory 42.

ADMINISTRATIVE SAFEGUARDS EVM Management System (EMS) In house EVM Stock Management Software Barcode of every EVM is scanned into EMS every time it moves from one Warehouse to another All EVM Allocations done on EMS FLC status(OK/Rejected) captured in EMS EVMs Randomisation twice on EMS EVM sent for repair captured in EMS EVMs under EP marked in EMS EVM Mgt System 43 Presence of political parties/candidates/their representatives in every election related process is mandatory.

6. DEBATE AROUND EVMs-EXPLAlNED! CLARIFICATION ON ALL ISSUES 44.

DOUBTS CREATED AROUND EVM Hacked EVM EVM Challenges Vote Stuffing after Poll Closure M HACKIN Memory Manipulation Remotely Altered Control Unit Display Defective Vs Tampered Altered software code Replaced Microcontr Oller or Memory chips International Comparison 45.

NO POSSIBILITY OF EVM HACKING 'Hacking' is unauthorised access to or control over computer network security systems for some illicit purpose. In the case of ECl EVMs, the word 'Hacking' is not applicable for following reasons: The EVM is a stand-alone machine and is not connected to any network through wire or wirelessly. The SW programme in the OTP Microcontroller can neither be read nor modified. 46.

NO POSSIBILITY OF REMOTELY ALTERED DISPLAY THROUGH WIRELESS COMMUNICATION It is alleged this can be done by either replacing the original display module with another display fitted with a wireless device or inserting an extra circuit board which can communicate with an external unit via a wireless device and tamper the result by controlling the CU display used for declaring the result. Such a modification would require unfettered access to the EVM after FLC - Ruled out. In M3 EVMs the display is mounted in the UADM. Any attempt to open the IJADM will send the EVM into Factory Mode- Ruled out. O 47.