=Paper=
{{Paper
|id=Vol-3049/paper4
|storemode=property
|title=Analyzing Preconditions to Introduce Internet Voting in Portugal: Insights from the Estonian Model
|pdfUrl=https://ceur-ws.org/Vol-3049/Paper4.pdf
|volume=Vol-3049
|authors=Marlon Freire,Sergio Nunes,David Dueñas-Cid
|dblpUrl=https://dblp.org/rec/conf/egov/FreireND21
}}
==Analyzing Preconditions to Introduce Internet Voting in Portugal: Insights from the Estonian Model==
Analyzing Preconditions to Introduce Internet Voting in Portugal: Insights from the Estonian Model Marlon Freire*, Sergio Nunes**, David Dueñas-Cid*** *Faculty of Engineering of the University of Porto, up201406884@edu.fe.up.pt **Faculty of Engineering of the University of Porto, ssn@fe.up.pt ***Kozminski University, New Research on Digital Societies (NERDS) & Univesity of Tartu Johan Skytte Institute of Political Studies, dduenas@kozminski.edu.pl / david.duenas.cid@ut.ee Abstract: Internet voting has been trialed or introduced for several countries, including Norway, Portugal, United States, United Kingdom and Switzerland as an additional voting channel to increase voter turnout and, also to modernize the electoral process. However, only Estonia has successful introduced internet voting, deploying e-enabled elections in general governmental levels. This paper aims to provide an exploratory study on the Estonian internet voting model to identify pre-conditions for internet voting introduction in Portugal, addressing legal, technical and technological considerations. For doing so, it includes a cross-country comparative analysis in two perspectives. Firstly, an analysis in the Estonian electoral framework, highlighting the most important legal adaptations that make possible internet voting introduction to identify potential transformation for the Portuguese context. Secondly, to provide a technological overview towards the Portuguese e-government ecosystem to seek similar conditions that can make internet voting possible in Estonia. Keywords: Internet voting, Voter turnout, Portugal, Estonia, e-Government. 1. Introduction While internet voting for remote voting has potential in the future, it is a new approach that has only been successfully implemented in very few cases. Internet voting is still a developing technology when it comes to security and trust; many countries have chosen not to use it after conducting feasibility studies or pilots due to these concerns (Applegate & Basysty, 2020). Some countries as Spain, India, Netherlands have done a limited adoption but decide to discontinue and few others countries as France, Switzerland and USA use Internet voting as an additional voting channel, especially, for expatriates voters, however, Switzerland suspended the use of Internet voting in 2019 due political pressure to verify potential vulnerabilities and to improve their system (Killer & Stiller, 2019). In the same line, Norway had trialed Internet voting with success, however, the project was also discontinued due political parties opposition to the new voting channel implications on electoral process (Cortier & Wiedling, 2017). However, the only country that fully introduced Copyright ©2021 for this paper by its authors. Use permitted under Creative Commons License Attribution 4.0 International (CC BY 4.0). 38 Ongoing Research Internet voting with success was Estonia that since 2005 have been binding more than e-enabled elections, allowing voters to vote remotely by Internet. The introduction of Internet voting is based on the advantage of the increase of voter turnout focusing on young voters (Mendez & Serdült, 2017), modernization of the electoral system and voting process and the efficiency and cost (Krimmer, Duenas-Cid, Krivonosova, Vinkel, & Koitmae, 2018). However, the main challenges rely on the legal, operational, technical, social and technological perspectives which include the building of trust by voters, security issues, lack of common standards, and legal provisions adaptions into digital forms for voting in an uncontrolled environment (Okediran & Omidiora, 2011). 2. Estonia: a Brief Overview The Republic of Estonia is a small northern European country with 1.3M people (e-Estonia, 2020), located at Baltic sea, bordering Russia, Finland, Sweden and Latvia. Estonia got its independence from Russia recognized in 1920 at the end of World War I, but only became a democratic republic after its de facto independence in 1991, after the collapse of the Soviet Union (Adeodato & Pournouri, 2020), and joined the European Union and NATO in 2004, and the Eurozone in 2011. 2.1 Electoral System and Legal Framework The electoral system of Estonia is based on proportional representation and like those of many other European nations. In national level, the Presidential elections (Vabariigi Presidendi valimised, in Estonian) and Parliamentary elections (Riigikogu valimised, in Estonian), and in level local, Municipality Elections (Kohaliku omavalitsuse volikogu valimised, in Estonian), and a transnational level election, the European Parliament elections. The Estonian legal framework provides the right to vote in free elections, the minimum age for Estonian citizens to vote is 18 years old and they are allowed to participate as candidates if they have attained 21 years old as well as long-term residents and EU citizens can vote in the local and EU elections. It also offers seven different voting channels where are available during the early and advance voting as well as on election day. These channels are a) early voting at county centers; b) advance voting at county centers; c) advance voting at ordinary Voting District Committees; d) custodial voting; e) Internet voting; f) home voting; and g) election day voting. For instance, the voting channels for voting from abroad are a) by post; b) at the diplomatic missions or consulates; and c) Internet voting. However, before the introduction of Internet voting in Estonia raised a huge discussion and questions whether it was legally acceptable according to the constitutional principles, especially, regarding its legitimacy, privacy, vote secrecy, voter coercion and equality (uniformity). In 2005, before the first e-enable elections, the Estonian Supreme Court reviewed the Internet voting process. In Estonian case, the legal norms comply with the constitutional provisions, because electronic identification enables secure remote identification, the digital ID-card has complete penetration, all advance voters (both electronic and paper) are placed under the same conditions, and the “virtual voting booth” (the right to replace an Internet vote with another Internet vote or a paper ballot) and the virtual double-envelope system ensure the freedom of anonymous voting and the uniformity of elections (Solvak & Vassil, 2016, p. 126). This debate has been maintained throughout the years and principle of the “virtual voting booth” as a guarantee of freedom and the Ongoing Research 39 understanding of teleological voting secrecy have become the cornerstones of the Estonian system. A consideration is regarding the adaptation of Internet voting into the electoral process. In Estonia, the election Acts or the Referendum Act also provides for opportunities to vote before the election day. The election week starts on Monday, and it consists of six advance voting days and the election day on Sunday, when the election week ends. Internet voting opens on the sixth day before the election day (on Monday) at 9 a.m. (Estonian State Electoral Office, 2020a), and closes on the day before the election day (on Saturday) at 8 p.m. An Internet vote can be annulled by voting with a ballot paper on the election day until 8 p.m. The opening of the Internet ballot box as well as tallying and counting is made in parallel with other traditional paper voting process, i.e., after closing the polling station at 8 p.m. (Estonian State Electoral Office, 2020a). The Estonian electoral management body is composed by eight entities that are responsible to organize, operate, conduct and manage elections in Estonia. These entities are a) National Electoral Committee (NEC); b) State Electoral Office (SEO); c) Voting District Committees; d) Vote Counting Committees; e) Ministry of Interior; f) Rural Municipality or City Secretaries; g) Information System Authority (RIA); and h) Internet Voting Taskforce. Both entities responsibilities are complementary in a legal, administrative, operational, technical and technological perspectives. The NEC and SEO are responsible for the legal and manage the electoral process, however, only SEO and RIA are responsible for the conduction of Internet voting. RIA is responsible for technical and technological background, including the administration of the information electoral systems and the state information infrastructure, and SEO for ensuring the accountability and monitoring of whole process. 2.2 e-Government Ecosystem and Digital Transformation The Estonian plan was also that Internet voting could be viewed as other e-government service and this strategy was developed in parallel to the implementation of the e-government in Estonia as a digital transformation agenda in the country in early 2000s, when the government in that time stimulated governmental departments and agencies to find open-source solutions to develop their systems which enforced each of them to establish their own digital agendas (Kattel & Mergel, 2019, p. 146), and it contributed particularly to design the base of the Estonian e-government ecosystem foundation, the X-Road, digital identification, digital signatures, governmental e-services portal (including services as e-tax, e-education, e-police, e-law, e-prescription, Internet voting and so on). X-Road is a secure Internet-based data exchange layer that enables the state’s different information systems to communicate and exchange data with each other (Solvak & Vassil, 2016, p. 126) and it is the core basement of the Estonian e-government ecosystem and technological infrastructure. Once X-Road was ready to ensure the interoperability of the systems, the next step of the Estonian government in 2000s was to develop an innovative legal framework - Identity Documents Act1 and the Digital Signatures Act2 - to enable an efficient and secure digital identification and digital signature based on usage of e-ID cards for all Estonian citizens, where about 1.24M of these cards were issued in 2002. In 2011, the Estonian government launched a new digital identification service 1 Estonian Identity Documents Act. See, https://www.riigiteataja.ee/en/eli/504112013003/consolide 2 Estonian Digital Signatures Act. See, https://www.riigiteataja.ee/en/eli/530102013080/consolide 40 Ongoing Research 'Mobile-ID' that enabled the same e-ID cards functionalities via a SIM card inserted into a mobile phone, and it allowed people to use a mobile phone as a form of secure digital identification, and additionally, introduced other e-ID tool called smart-ID in 2017. The combination of X-Road and e- ID systems enabled to develop the one-stop governmental portal ‘Eesti.ee’ as the backbone of the e- government environment (Duenas-Cid & Cepilovs, 2020), achieving more than one billion of digital signatures used so far and 67% of Estonians use e-ID cards regularly for identification and authentication into e-government services (RIA, 2020). 2.3 Internet Voting System The Estonian Internet voting system was intentionally designed to be used only with e-ID cards, for being able to simulate traditional voting process, i.e., the postal voting method. The e-ID card introduced in early 2000s, was viewed as a secure identification and authentication method for enabling Estonian voters to cast their votes using smart-card readers with the same e-ID cards PIN codes often used to access online services (Solvak & Vassil, 2016), which became possible in 2005 when e-ID cards became available by law for all Estonian citizens. In this year, Estonia became the first nation to hold legally binding general elections over the Internet during the advance voting period, with a pilot project for the local elections where 9317 voters voted using Internet voting, representing 1.9% of voter turnout. After more than seven elections using Internet voting as an additional channel, the participation of Internet voters increased from a mere 1.9% in 2005 to 43.8% in last Parliamentary elections in 2019 (Estonian State Electoral Office, 2020b). Figure 1: Two-envelope concept behind the Estonian Internet voting system. Technically, the conceptual setup of the Internet voting system is derived from the traditional way a person votes from outside of the polling district of their residence, i.e., the postal voting method (see Figure 01). As postal voting procedure, a two-envelope system is used to cast a vote. The inner envelope contains a ballot with the voter’s vote choice but has no identification markings, and the outer envelope contains the voter’s identification information. When sent to the ballot station, the information on the outer envelope is used to verify the voter’s eligibility to vote and if confirmed, the inner envelope will be separated from the outer envelope and put into the ballot box for counting (State Electoral Office of Estonia, 2017), in other words, the same processes are replicated, however this is made by using a software that ensure the whole procedure by Internet. Ongoing Research 41 3. The Portuguese Context Portugal or Portuguese Republic is a country located on the Iberian Peninsula, in south-western Europe, bordering Spain, with a population around 10M people (PORDATA, 2021b). Portugal got its re-democratization in 1975 after a long period of dictatorship between 1933 and 1974, and consequently, developed a new constitution. Portugal was also one of the founding member of OTAN and became a European Union member in 1986. 3.1 Electoral System and Legal Framework The electoral system of Portugal is based on proportional representation based on Hondt method. The elections take place in each four years. In national level, there are the presidential elections, and parliamentary elections (Assembleia da República, in Portuguese). In local levels, two municipality elections (Autárquica Geral and Autárquica Intercalar, in Portuguese), and two parliamentary of the autonomous regions of Madeira and Azores and a transnational level election, the European Parliament elections. The Portuguese constitution establishes the voting principles to be universal, equal, direct and vote secrecy and free elections suffrage, and for citizens aged over 18 years, i.e., this legal framework is very similar to other European democracies. The constitutional prerogative to vote in Portugal is that the vote must be cast in person, in a controlled environment, under an electoral official supervision to ensure the integrity and the secrecy of the vote. Foreign voters who have the permanent residency permission can vote in local and national elections. The election acts provide the opportunities to vote before the election day, and the advance voting period starts fifteen days (two Sundays) before the election day, and the voting process is between the fourteenth and tenth day before the election day. It also offers four different voting channels where are available during advance voting period and on election day voting for voters who live in Portugal, covering: a) advance voting at ordinary Voting District Committees; b) custodial voting; c) home voting; and d) election day voting. Furthermore, the voting channels for voting from abroad is possible only vote by paper, using postal voting in an uncontrolled environment and only available for Parliamentary (Assembleia da República) elections, or at the diplomatic missions or consulates. The prerogative is that postal voting can be used without supervision for other types of election, but the vote must be cast in person in the case of presidential elections. Internet voting or any kind of electronic voting is not provided (Portuguese National Electoral Commission, 2021). The electoral management body is composed by eight entities responsible for the organization, conduction, operation and administration of elections. These entities are a) the Ministry of Internal Administration - SGMAI; b) National Electoral Commission - CNE; c) Constitutional Court; d) Voting District Committees - VDC; e) Vote Counting Committees VCC; f) Local Municipality Councils - LMC; g) City Secretaries; and h) The College of Representatives of the Candidacies CRC. Both entities responsibilities are complementary in a legal, administrative, operational, technical and technological perspectives. The CNE, Constitutional Court are responsible for the legal and manage the electoral process. The City Secretaries, VDCs and VCCs are connected to operational and technical activities, and SGMAI is responsible for the management of all electoral process, including responsibilities in the technical, operational and technological background, including the 42 Ongoing Research administration and update of the information electoral system. Regarding voter turnout, 932,464 voters stopped to vote in presidential elections (comparing 2001 and 2016), 308,546 in parliamentary elections (1999 to 2019) and 13,585,037 in European parliamentary elections (PORDATA, 2021a). The voter abstention has been increasing, especially in the last European parliamentary elections in 2019, where almost 65% of Portuguese voters who is living in Portugal did not participate in the electoral process. This scenario increased in the last presidential elections when around 70% of Portuguese voters decided to not vote in 2021, and from 1.549,380 expatriates voters, only 29,153 voted (PORDATA, 2021a), meaning a significant negative impact in the electoral process and for democracy in Portugal. 3.2 e-Government Ecosystem The Portuguese e-government development has started in the end of 90s and the beginning of 2000s, being the extinct entity UMIC the responsible for the digital government services development in Portugal. In 2007, a new entity AMA was created to be the responsible for the promotion of the public administration services modernization in Portugal, developing new solutions for the improvement and establishment of the interoperability of the public system. The iAP, the interoperability infrastructure, is a middleware that interconnect data from several departments and entities systems of the Portuguese e-government services, including e-ID systems, governmental portal 'eportugal.pt', digital signatures, population register, e-tax, e-justice and so on. The introduction of e-ID cards (Cartão de Cidadão) in 2007 and the mobile identification using smartphones (Chave Móvel Digital - CMD) in 2011, enabled the Portuguese citizens to access e- government services in a secure method through PIN codes or PIN tokens using CMD. For instance, the CMD became the most used e-ID means in Portugal, corresponding 44% of the authentications into public e-government services (AMA, 2021). 3.3 Internet Voting Experiment In 2005, a trial of Internet voting was introduced in the general Portuguese Parliamentary (Assembleia da República) elections. The Internet voting experiment was aimed at all citizens who were allowed to vote abroad using postal vote. From a total of 148.159 electors outside Portugal who were registered, only 4.367 voted through the Internet (12% of mailed votes) (Cunha, Leitão, & Faria, 2006). The experiment was voluntary and not valid for official elections results. Although the voters who used I-voting had a good experience (around 98%) (Cunha et al., 2006). The voter authentication and identification processes (credentials using a token with username and password) to access the Internet voting system (through a web browser) were sent by post to the registered voters (Cunha et al., 2006). Despite the good acceptation towards the usage by voters, the Portuguese government decided to discontinue the Internet voting experiments due the lack of interest by politicians and political parties at that time. 4. Methodology The methodology is based on descriptive comparative analysis, meaning that available information and data about the Estonian and Portuguese contexts have been collected from reliable Ongoing Research 43 and credible official reports, electoral process, laws, regulations from entities connected to electoral administration in both countries. Additionally, other exploratory research was conducted regarding the e-government ecosystem, including statistics of usage and penetration of digital identification tools. 5. Comparative Analysis This comparison is focused on the identification of pre-conditions for Internet voting in Portugal based on the Estonian model, seeking for challenges and opportunities on electoral system and legal perspectives, and technological - e-government tools - for supporting Internet voting process. Regarding e-government infrastructure, both countries have a positive factor in this point due the availability of digital identification services as e-ID cards, mobile ID (using mobile phones), digital signatures to access government online services and other external and private online services. However, according to the last E-Government Development Index (EGDI) published by United Nations in 2020, Estonia is ranking the 3rd position and Portugal ranked the 35th position, but both are included in the very high group established by the EGDI. Therefore, Estonia belongs to the V1 class group and Portugal V2 class, meaning that Portugal needs to improve their e- government development agenda, and which have been strategically made in the last three years through the "Portugal Digital" program. In Estonia, the penetration and usage of digital IDs in Estonia is around 70%, meaning that Estonian residents use regularly e-ID tools to access online services, i.e., 17% use mobile ID, and 35% smart-ID. The relative trust in government services is a positive factor for the consolidation in Estonia, contributing also to the acceptation of Internet voting as secure voting channel among the Estonians. For instance, Portugal has been increasing the usage of digital identification tools by citizens to use e-government services. The evolution of authentications using digital certificates in the e-government services access increased from 147.796 in 2014 to 12.876.733 in 2020, i.e., 47% using CMD and 33% using e-ID cards through digital cards readers. 6. Discussion, Findings and Conclusions When seeking for the pre-conditions that make possible Internet voting in Estonia in a Portuguese context, the results sound to be motivating, taking in consideration, especially, both e-government environment due the technological similarities on the availability of e-ID systems tools, however, with technical differences regarding the mobile ID in Portugal. Unlike the Estonian mobile ID that needs an especial SIM card to have the same validity than an e-ID card on a legal perspective, the Portuguese model only needs a previous registration process/request by the citizen in her/his e- government portal area. Digital signatures are available in both countries, using similar technologies and technical standards according to e-IDAS (electronic identification, authentication and trust services) regulation established by European Union. On legal and electoral system perspective, Portugal has the advance voting period which is, according to the Rec(2017)5, one of the pre- condition to introduce Internet voting as such Estonians have done. Other consideration about this point, is the fact that Portugal provides postal voting channel to expatriate's voters, in an uncontrolled environment, like the Estonian postal voting model which is an opportunity to 44 Ongoing Research implement an Internet voting system in the Portuguese context, modernizing the electoral process using digital tools, however, the constitutional principles seems to be a barrier for its introduction and implementation. Although some of pre-conditions to introduce Internet voting based on Estonian model in Portugal can exist, an investigation regarding the implications of this modification needs to be developed for seeking general conditions, observing and analyzing considerations based on electronic voting international standards, voters behaviour to accept new technologies in the electoral process and so on. References Adeodato, R., & Pournouri, S. (2020). Secure implementation of e-governance: A case study about estonia. In Advanced Sciences and Technologies for Security Applications (pp. 397–429). Springer. https://doi.org/10.1007/978-3-030-35746-7_18 AMA. (2021). Estatísticas de autenticação (e-ID systems authentication statistics). Retrieved March 19, 2021, from https://www.autenticacao.gov.pt/web/guest/estatisticas-de-autenticacao Applegate, M., & Basysty, V. (2020). Considerations on Internet Voting: An Overview for Electoral Decision- Makers. Cortier, V., & Wiedling, C. (2017). A formal analysis of the Norwegian E-voting protocol. Journal of Computer Security, 25(1), 21–57. https://doi.org/10.3233/JCS-15777 Cunha, J., Leitão, M., & Faria, J. (2006). A Methodology for Auditing e-Voting Processes and Systems used at the Elections for the Portuguese Parliament. Electronic Voting 2006, (May 2014), 253. Retrieved from https://www.researchgate.net/publication/220764752_A_Methodology_for_Auditing_e- Voting_Processes_and_Systems_used_at_the_Elections_for_the_Portuguese_Parliament Duenas-Cid, D., & Cepilovs, A. (2020). E-Estonia as a role model? Some general considerations and applicability in France. L’Harmattan. Retrieved from https://www.researchgate.net/publication/338622043_E- Estonia_as_a_role_model_Some_general_considerations_and_applicability_in_France e-Estonia. (2020). Overview — Estonia. Retrieved December 14, 2020, from https://estonia.ee/overview/ Estonian State Electoral Office. (2020a). Advance Voting | Elections in Estonia. Retrieved March 19, 2021, from https://www.valimised.ee/en/estonian-elections-nutshell/advance-voting/advance-voting Krimmer, R., Duenas-Cid, D., Krivonosova, I., Vinkel, P., & Koitmae, A. (2018). How Much Does an e-Vote Cost? Cost Comparison per Vote in Multichannel Elections in Estonia (pp. 117–131). https://doi.org/10.1007/978-3-030-00419-4_8 Mendez, F., & Serdült, U. (2017). What drives fidelity to internet voting? Evidence from the roll–out of internet voting in Switzerland. Government Information Quarterly, 34(3), 511–523. https://doi.org/10.1016/j.giq.2017.05.005 Okediran, O., & Omidiora, E. (2011). A Survey of Remote Internet Voting Vulnerabilities. World of Computer Science and Information Technology Journal (WCSIT) (Vol. 1). Ongoing Research 45 PORDATA. (2021a). PORDATA. Electoral participation statistics in Presidential and European Parliament elections. Retrieved March 19, 2021, from https://www.pordata.pt/DB/Portugal/Ambiente+de+Consulta/Tabela/5820872 PORDATA. (2021b). Portuguese population: total residents. Retrieved June 23, 2021, from https://www.pordata.pt/Portugal/População+residente++média+anual+total+e+por+sexo-6 Portuguese National Electoral Commission. (2021). Eleição Legislativa (Parliamentary Elections, in English). Comissão Nacional de Eleições. Retrieved March 19, 2021, from http://www.cne.pt/faq2/117/3 RIA. (2020). Estonian ID cards - ID.ee. Retrieved December 11, 2020, from https://www.id.ee/en/ Solvak, M., & Vassil, K. (2016). E-voting in Estonia:Technological Diffusion and Other Developments Over Ten Years (2005 - 2015). Johan Skytte Institute of Political Studies, 244. State Electoral Office of Estonia. (2017). General Framework of Electronic Voting and Implementation thereof at National Elections in Estonia. Retrieved September 23, 2019, from https://www.valimised.ee/sites/default/files/uploads/eng/IVXV-UK-1.0-eng.pdf About the Authors Marlon Freire Marlon Freire works as a PhD candidate in the Doctoral Program in Digital Media and an assistant professor at Faculty of Engineering of the University of Porto, Portugal. Nowadays, Freire also works as a solution and software architect at Bosch TT Portugal in the Industry 4.0 and Smart HR 4.0 platforms development. Sergio Nunes Nunes holds a Ph.D. in Information Retrieval (2010) focused on using temporal features for relevance estimation, and an MSc in Information Management. His main research interests are in Information Retrieval and Web Information Systems, particularly, in the use of temporal features for ranking, the study of information dynamics on the Web, and computational media. David Duenas-Cid David Duenas-Cid serves as a Research Fellow at the Johann Skytte Institute of Political Studies (University of Tartu, Estonia) and Assistant Professor in the Management in Networked and Digital Societies (Kozminski University, Poland). He is the president of the Thematic Group in Digital Sociology at the International Sociological Association, and General Chair in the E-Vote-ID Conference. Currently running a research funded by the Polish Ministry of Science (OPUS 2020/39/B/HS5/0166) and by the European Union’s Horizon 2020 Research and Innovation Programme (Electrust - Dynamics of Trust and Distrust Creation in Internet Voting, H2020-WF-03-2020) focusing the procesos of creation of trust and distrust in internet voting.