2. ELVIS Presented by Mike Stewart Chief Information Officer 11-3-2005 PKI 102 Presentation

3. EL I V ection oter nformation ystem S

4. Each state, acting through shall implement, in a uniform and nondiscriminatory manner, its chief state election official, a … The Law

5. uniform, voter registration list … statewide computerized interactive, centralized, official, single,

6. defined,maintained, and administered at the state level … Public Law 107-252, Title III, Sec. 303(a)

7. The ELVIS System  Requirements set by county workgroup  Voter Registration, Election Management  Designed to meet the core requirements of every county; large, medium, small  Election Systems & Software (ES&S)  HAVA requirements by 1/1/2006  All Kansas requirements by 6/30/2006  Automated processing  Agency Interfaces  Statewide Duplicate Check

8. Risk Assessment  Security  Voter registration data  name, address, DL, last 4 SSN  voter registration card images  interfaces to death & felon records  Authentication/Identity  I am who I say I am, can’t say “didn’t do it” audit log, PKI header information  Vetting  Level 2, vetted by CEO, SOS Elections

9. Requirements  Included in RFP  Must have KS PKI certificate to “see” ELVIS system  Portability  Election office front counter, temporary workers  Verisign USB Token Based system  Certificate must have (Universal Principle Name) in Principle Name field. Used for Microsoft active directory

10. Implementation  Verisign USB Token Based system  Certificate must have additional field, used for active directory  Private key not exportable from token  Portability  PIN  Lessons Learned  “Technical” process, must follow instructions EXACTLY  Software on workstation  Token lifecycle – forgotten PIN, distribution, temp workers

11. Questions?