PB 87, Election Security Act
Fast Tracked
Adopted
Online Text
(legacy online version)
PROGRAM BILL 87
A BILL TO BE ENTITLED
AN ACT TO AUTHORIZE THE CONTRACTING OF SERVICES TO DEVELOP A SYSTEM OF SECURE ONLINE VOTING AND FURTHERMORE TO ALLOCATE FUNDS FOR THE PURCHASE OF A SECURE STUDENT GOVERNMENT SERVER
Short Title: Election Security Act (Public)
Sponsored by: Senators FABRICIUS, PALIN, and RAMIREZ
First Reading: March 7, 2001 Version Date: March 1, 2001
Referred to: __________________________________________________________.
WHEREAS, free and fair elections are required for the continuation of a democratic society; and,
WHEREAS, no system is currently in existence that provides adequate security for either online or manual elections; and,
WHEREAS, without additional resources the Elections Board is unable to effectively hold an election; and,
WHEREAS, there is concern by informed individuals that the use of North Carolina State University servers present an unwarranted risk; now, therefore be it
ENACTED,
by the North Carolina State University Senate that the Student Body Treasurer be authorized pursuant to §5-33 to contract for the service of the development of a secure online voting program; the contract must contain the following stipulations:- The source code for the online voting program must be made publicly available (open source);
- The program must be written in a language deemed to be modern by the Division of Web Development;
- The resultant program will completely and in its entirety owned nonexclusively by Student Government;
- The resultant program must be compatible with OpenBSD and Apache;
- The resultant program must use 128 bit SSL encryption;
- No insecure connections to the resultant program shall be allowed;
- The source code for the resultant program must be fully documented in order to facilitate future updates of the resultant program;
- The resultant program must only allow each student to be able to cast a ballot once;
- No record shall be maintained by the resultant program of how a student has voted;
- The ballots generated by the resultant program must meet HTML 4.01 standards;
- The resultant program must deliver a ballot that is appropriate for a students classification and major;
- The resultant program must only accept ballots that it generates;
- The resultant program must tabulate the votes and present them in a readable format;
- The resultant program must keep a log of all votes as they are cast;
- The resultant program must be structured so that it is able to be determined if an attempt was made for unauthorized access, and determine if the attempt was successful;
- The resultant program must be structured so that it is able to be determined if someone is falsely accused of an unauthorized attempt to access the voting process;
- The resultant program must have a secure method for the elections board to set or modify the ballot;
- The resultant program must be designed in such a way as to coexist with a web server running on the same server;
- The contractor shall also provide a program that will allow the integration of manual polling stations into the determination of who has voted;
- The contractor shall be required to provide consulting services to the elections board for the remainder of this academic year;
- The contractor shall oversee the installation and setup of the operating system, as well as on the resultant program, on the Student Government server;
the bidding process shall begin immediately upon the enrollment of this act; the bidding process shall conclude at 5:00pm on March 8, 2000; the treasurer must notify the individual whom the contract has been awarded to no later than 9:00am, March 9, 2001; all funds to be paid for such services shall be allocated from the unencumbered balance; now, therefore be it further,
ENACTED, by the North Carolina State University Student Senate that the Student Body Treasurer shall be authorized to allocate funds not exceeding $300 from the unencumbered balance to hire consultant(s) to evaluate security on the contracted program and provide substantive remedies to any security deficiencies; now, therefore be it further;
ENACTED, by the North Carolina State University Student Senate the Student Body that $1139.46 be allocated from the unencumbered balance for the purchase of a Student Government server to be assembled by the division of web development from parts as follows:
- Intel PIII 1000 FCPGA 133Mhz w/fan $320
- Abit SA6R intel 815E RAID $169.99
- 256MB PC133 SDRAM $90
- Entry ATX Mid Tower 250W $39.99
- Netgear, 10/100 PCI $19.99
- Jaton 4MB PCI $29.99
- 46GB GXP 7200rpm UDMA100 $169.99
- 46GB GXP 7200rpm UDMA100 $169.99
- PS/2 Enh. 104 Keyboard $9.99
- Floppy Drive - 3.5" 1.44MB $14.99
- 52X IDE CD-ROM Drive $39.99
- Sales Tax $64.49;
now, therefore be it further,
ENACTED, by the North Carolina State University Student Senate that the Student Body Treasurer shall be authorized to expend reasonable funds to establish the Student Government server in a secure location.