Ballot level security features for optical scan voting machine capable of ballot image processing, secure ballot printing, and ballot layout authentication and verification

A method for authenticating ballots used in an election having multiple precincts, the method comprising:

• providing a plurality of ballots on which election-choice-information is printed, the ballots having a plurality of security features, wherein the plurality of security features printed on the ballot during the process of printing official ballots include pre-assigned security codes from a pre-assigned set of codes and a pre-assigned ballot serial number from a pre-assigned set of serial numbers;
• providing, from among the plurality of ballots, a first set of ballots having a first set of the plurality of security features associated with each ballot, the first set of security features including at least a first encrypted security code, the first encrypted security code comprising a first security code that is encrypted using a private-public key pair;
• assigning the first set of ballots to a first precinct;
• providing, from among the plurality of ballots, a second set of ballots having a second set of the plurality of security features associated with each ballot, the second set of security features being different from the first set of security features and including at least a second encrypted security code, the second encrypted security code comprising a second security code that is encrypted using the private-public key pair;
• assigning the second set of ballots to a second precinct that is different from the first precinct;
• determining, after a vote has been cast, whether a particular ballot has the first set of security features and first security code or the second set of security features and second security code and whether the particular ballot was cast in the first precinct or the second precinct;
• and
• physically marking the particular ballot as invalid when the particular ballot does not have the security features and security code from the precinct in which the particular ballot was cast.

A voting unit, comprising:

• a memory;
• a processor in communication with the memory, the processor controlling operations of the voting unit to:
• scan a voter-marked paper ballot used in an election, the voter-marked paper ballot comprising a first and second security features, wherein the first security feature is embedded in the voter-marked paper ballot, and the second security feature includes an encrypted security code printed on the voter-marked paper ballot;
• verify the first security feature by utilizing an electronic sensor to detect the first embedded security feature;
• decrypt the second security feature by processing the encrypted security code with a private-public key;
• and
• authenticate the voter-marked paper ballot by comparing the verified first security feature and the decrypted second security feature with a set of pre-assigned first and second security features stored in the memory of the voting unit, wherein the voter-marked paper ballot is physically marked as invalid when the first and second security features do not match the set of pre-assigned first and second security features stored in the memory.