High-Speed Scanner and Tabulator
DS950®
Let the DS950 handle your absentee, early vote and Election Day ballot scanning and sorting, all without missing a beat. The purpose-built DS950’s advanced technology and engineering make the high-speed scanner and tabulator best-in-class — there’s nothing like it on the market!
Security features:
- Physical and System Access Controls
- Audit Logs
- Proprietary Flash Drives
- System Application Controls
- Encryption, Hash Validation and Digital Signatures
Complete ballot control from start to finish.
Process more ballots in less time.
14-inch flat ballots processed per minute
What you don’t get with commercial-off-the-shelf (COTS) tabulators:
-
Purpose-built equipment. Election experts designed ES&S tabulators specifically for elections.
-
No scanning interruptions. ES&S tabulators scan and tabulate previously folded and damaged ballots.
-
Customizable sorting. ES&S tabulators allow for user-definable, real-time sorting, including both physical and digital ballot management.
-
Longer product life. ES&S products are engineered with industrial-grade components, ensuring a 5-7 year production and service parts supply. Our parts manufacturers are dedicated to maintaining form, fit and functional equivalents when an inevitable change comes. This allows ES&S to support our products typically 10+ years.
Security you can count on.®
Designed to be compatible with the Voluntary Voting Systems Guidelines (VVSG) 2.0, the DS950 High-Speed Central Scanner and Tabulator accurately records all ballot selections as marked by the voter and captures a digital image of each processed ballot. This paper-based system features multiple layers of physical and digital security controls, boasting the latest tested and trusted technology.
Physical and system access controls
- The DS950 uses keylocks and tamper-evident seals to secure sensitive components and protect against tampering within the unit. Similarly, the power switch and all USB ports are secured behind clear plastic lockable and sealable doors to allow access to only authorized election officials.
- Each tabulator requires designated security codes for specific administrative and election functions, such as loading an election and exporting results.
System application controls
- Once installed on the DS950, the election program cannot be overwritten or changed. The DS950 also does not permit any user to change ballot information on the unit.
- To prevent unauthorized data transfers or uploads, the DS950 accepts only approved and certified USB flash drives with trusted data that is digitally signed when created.
- All administrative functions are limited to the controls allowed through the touch-screen interface for machine operation only.
Encryption, hash validation and digital signatures
- As of EVS6302, EVS6400 and later, the DS950 uses Secure Boot and application allowlisting to verify only the certified operating system, software and firmware are on the unit.
- Each unit digitally encrypts and signs key configuration and data files for complete integrity of the election and results. All DS950 and generated data is signed with FIPS-compliant algorithms so that the program receiving the data can validate it.
Audit logs
- The DS950 generates a detailed, time-stamped audit log entry for every event — including passcode attempts, user actions, system events and error messages — that occurred on the unit.
- To track all election processes for accuracy and accountability, the DS950 audit logs are digitally signed, can be viewed on and printed from the unit, and can be exported for review.
- Only the system can create, read, modify and delete the audit log content because the user interface is locked out of these functionalities.
Need more information?
That’s why we’re here. The dedicated ES&S representative for your state can help you determine the best solutions for your jurisdiction.