ElectionEventLoggingCommonFormatVersionApril

20204ThispublicationisavailablefreeofThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-TheInformationTechnologyLaboratory(ITL)attheNationalInstituteofStandardsandTechnology(NIST)promotestheU.S.economyandpublicwelfarebyprovidingtechnicalleadershipfortheNation’smeasurementandstandardsinfrastructure.ITLdevelopstests,testmethods,referencedata,proofofconceptimplementations,andtechnicalanalysestoadvancethedevelopmentandproductiveuseofinformationtechnology.ThisdocumentreportsonITL’sresearch,guidance,andoutreacheffortsinInformationTechnologyanditscollaborativeactivitieswithindustry,government,andacademicorganizations.ThispublicationdescribesanelectioneventloggingcommondataformatspecificationfordevicesusedinU.S.electionssuchasopticalscanners,electionmanagementsystems,andpollingplacedevices.Thedataloggedgenerallycontainsinformationabouttheconductoftheelection,suchaswhenthepollsopen,whenavoterstartsavotingsessionorcastsaballot,orwhenadministratorslogontothedevices,etc.ThepublicationcontainsaUMLmodeloftherelevantelectionloggingdataandbackgroundinformationregardingrequirementsforelectioneventloggingintheElectionAssistanceCommission’sVoluntaryVotingSystemGuidelines.Commondataformat;elections;event;logging;timestamp;voting;

101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup通用數(shù)據(jù)格式；選舉；事件；日志記錄；時(shí)間戳；投票；VVSGSPSP1500?1011.0NISTSP1500-101,VersionNISTElectionEventLoggingCDF

CDFExecutiveExecutiveThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-Thisdocumentisaspecificationforacommondataformat(CDF)fortheelection-relatedlogginginformationproducedbyelectiondevices,includingvotingdevicesusedinpollingplacessuchasscannersandballotmarkingThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-Electionlogsgenerallycontaininformationrelevanttotheconductoftheelectionforwhichtheelectiondeviceisbeingused.Thisinformationincludesimportanteventssuchaswhenvotingoperationsareenabledonthedevice,whenavoterinitiatesavotingsession,orwhenthedevicerecordsthatthevoterhascasttheirballot.Logscanincludeerrorssuchastheinabilityofadevicetorecordavoteduetoaninternalerrororthatthepollshavebeenopenedorclosedprematurelymultipletimesduringtheelectionday.Electionanalystscanusethisinformationtodeterminenotonlywhetherthedeviceitselfwasperformingcorrectlybutalsowhetherthedevicewasusedcorrectlyintheelection,thatis,usedaccordingtoelectionprocedures.Additionally,analystscanderivevariousstatisticsfromthelogfiles,suchashowoftenvotersarrivedandinitiatedvotingsessionsortheamountoftimeonaverageittooktocastaballot.Currently,electiondevicesdonotcreateelectionlogsinaninteroperablecommondataformat,butratherthelogfilesareinproprietaryformatsandthusaremoredifficultforelectionanalyststoreadandanalyze.Iftheelectionloggingdocumentationisnotathand,thelogscanbeunintelligibleorrequireextensivereverseengineeringefforts.Thus,acommonformatfortheelectionloginformationwillmakeitsignificantlyeasierforelectionofficialsandanalystsandtestinglabstoaccessandunderstandthelogfilesand,potentially,makemoreinformeduseofthelogfilesforpurposesofelectionauditing,research,andtesting.ThisdocumentcontainsdiscussionoftherequirementsintheElectionAssistanceCommission's(EAC)VoluntaryVotingSystemGuidelines(VVSG)thatspecifytherequiredandoptionalelectioneventinformationtobelogged.Thepublicationalsoincludesasecondschemaformanufacturerstodocumenttheirspecificeventcodeusedintheirlogfiles.ThisspecificationisgearedtowardsthefollowingElectionVotingequipmentVotingsystemtestingElection-affiliatedThe

本文檔是一份關(guān)于選舉相關(guān)日志信息的通用數(shù)據(jù)格式（CDF）規(guī)范，該信息由選舉設(shè)的投票設(shè)備）UML（統(tǒng)一建模語言）101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasi101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup本文檔包含對選舉援助委員會(huì)（EAC）自愿投票系統(tǒng)指南（VVSG）中要求的選舉事SP1500-101,VersionNISTElectionEventLoggingCDFTableofExecutive WhythisSpecificationis Intended Document

CDF1引言.

..101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morf101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupThispublicationisavailablefreeofchargeThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-VVSGloggingrequirements Usecasesforthis UML UMLClasses Examplesofclassassociationstosupportuse Documentation ElectionEventLoggingUMLModel ElectionEventLoggingUMLModel Class Class Class Class Class Class ElectionEventLoggingUMLModel Enumeration Enumeration Enumeration ListofAppendixA— AppendixB— AppendixC— AppendixD—FileDownload

Backgroundand VVSGUMLUML類概述 支持用例的類關(guān)聯(lián)示例 UMLUML類類 類 UMLEnumeration SPSP1500?1011.0NISTSP1500-101,VersionNISTElectionEventLoggingCDFListof101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupFigure101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup

CDFFigure1-ElectionEventLoggingUMLClass Figure2-Firstusecaseforasinglelogfileper Figure3-Secondusecaseforsuccessivedeviceswritingtosamelog Figure4-Thirdusecaseforaloggingdeviceconnectedtoeventgenerating

2?3................4第三種用例，連接到事件生成設(shè)備的日志設(shè)備

........Figure5-ElectionEventLoggingDocumentationUMLClass

圖5?選舉事件記錄文檔UML類圖 Figure6-Device

6

...Figure7-ElectionEventLog Figure8- Figure9-Event

圖7?ElectionEventLog類 .圖8? 圖9?事件類 .Figure10-ElectionEventId Figure11- Figure12-DeviceType Figure13-EventDisposition

10ElectionEventId.11EventTypeDescription.12DeviceType.13EventDisposition

....ThispublicationisavailablefreeofchargeThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-

圖14?HashType枚舉 .SPSP1500?1011.0NISTSP1500-101,VersionThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-NISTThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500- Thisdocumentisaspecificationforacommondataformat(CDF)fortheelection-relatedlogginginformationproducedbyelectiondevices,includingvotingdevicesusedinpollingplacessuchasscannersandballotmarkingdevices,andothervotingequipmentusedtomanageelections.ThespecificationdescribesanelectioneventloggingUML(UnifiedModelingLanguage)[1]modelandXML(eXtensibleMarkupLanguage)[2]andJSON(JavaScriptObjectNotation)[3]schemasthatweregeneratedfromthemodel.Electioneventlogscontaininformationgeneratedbyvoting-relatedapplicationssuchasforelectionmanagementsystems(EMS),electronicpollbookapplications,orvote-captureapplicationsthatoperateontheelectiondevices.ThesortsofinformationloggedincludesinformationrequiredintheU.S.ElectionAssistanceCommission(EAC)VoluntaryVotingSystemGuidelines(VVSG)Version1.1[4]andVersion2.01,anditisexpectedthatsimilarrequirementsforelectioneventlogswillbeincludedinthenextversionoftheVVSGcurrentlyunderdevelopment.Manufacturersmayalsoincludeadditionalinformationinthelogs.WhythisSpecificationisThepurposeofthisspecificationistoprovideaconcise,interoperableXMLandJSONformatformanufacturerstointegrateintotheirvotingequipmentandforelectionoffices,researchers,testinglaboratoriesandothergroupstouseintheirownsoftware.Currently,manufacturersproducelogfilesinproprietaryformats,whichareinconsistentacrossdifferentmanufacturersinthefieldsusedforloggingevents.Thismakesanalysisoflogfilesmoredifficult,especiallywhenmultipledevicesproducedbymultiplemanufacturersareinvolvedintheanalysis.Theadvantagesofusingthisspecificationinclude:Electionlogsareinthesame,definedformatregardlessofdeviceManufacturerscanusethesame,definedformatfordefiningeventcodesandotherinformationthatmaybespecifictotheirownequipment;Analyzingandtestingelectionlogsproducedbydifferenttypesofequipmentanddifferentmanufacturersismadesignificantlyeasier.IntendedTheintendedaudienceofthisspecificationincludeselectionofficials,manufacturersanddevelopers,testinglabs,aswellasthepublic.1Atthetimeofthisspecification’spublishment,theEAChadnotcompleteditsinitialpublicreviewoftheVVSG2.0.TheloggingrequirementsinthedraftVVSG2.0areasupersetofthoseinVVSG1.1anddonotchangetherequirementsuponwhichthisspecificationisbased.

CDF 本文件是一份關(guān)于選舉相關(guān)日志信息的通用數(shù)據(jù)格式（CDF）（包括投票場所使用的投票設(shè)備，如掃描器和選票標(biāo)記設(shè)備，以及其他用于管理選舉的投票設(shè)備）UML（統(tǒng)一建模語言101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup[1]101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup選舉事件日志包含由投票相關(guān)應(yīng)用程序生成的信息，例如選舉管理系統(tǒng)（EMS）、電舉援助委員會(huì)（EAC）自愿投票系統(tǒng)指南（VVSG）1.1[4]2.01中要求VVSG下一版本中也將包含類似的選舉事件日志XMLJSON格式，以便將其集制造商分析由不同類型的設(shè)備和不同制造商生產(chǎn)的選舉日志變得顯著1在本規(guī)范發(fā)布時(shí)，EACVVSG2.0VVSG2.0VVSG1.1NISTElectionEventLoggingCDFDocument101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupSection2startswithbackgroundandoverviewmaterialonloggingrequirementsintheEACVVSGandhowtheyareimplementedinthe101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup

CDF2EACVVSGUML模型中的實(shí)3UMLThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-NISTElectionEventLoggingCDF

CDF Background Backgroundand2Thispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-ThissectionprovidesbackgroundinformationaboutelectionequipmentloggingandrequirementsintheEACVVSGthatpertaintologgingandarethusaddressedbythisspecification.ThissectionalsoshowshowThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-ElectionapplicationssuchasEMSgenerallyoperateondevicesincludingpersonalcomputersthatthemselveshaveanoperatingsystemandaloggingcapability.TheVVSG1.1requirestheelectionapplicationstogeneratelogsofeventsthataredeemedassignificant,suchaswhentheapplicationallowsaloginbyanadministrator,orwhenthepollsareopenedandvotingisenabledontheapplication,orwhentheapplicationrecordsacastballot(onanelectronicvotecapturedevice,forexample).Theseeventsaregenerallywrittentoaseparatelogfiletypicallynamedtheelectioneventlog.VVSGloggingrequirementsInSectionoftheEAC'sVVSG1.1,OperationalRequirements,RequirementDitemizesthebasicdatathatvotingequipmentshallataminimumlog.RequirementDisasfollows2:Thevotingsystemequipmentshalllogataminimumthefollowingdatacharacteristicsforeachtypeofevent:systemuniqueeventIDand/orsuccessorfailureofevent,ifUserIDtrigger[sic]theevent,ifResourcesrequested,ifTimekeepingmechanismsshallgeneratetimeanddateTheprecisionofthetimekeepingmechanismshallbeabletodistinguishandproperlyorderallauditrecords.Timestampsshallincludethedateandtime,includinghours,minutesandTimestampsshallcomplywith[theInternationalOrganizationforStandardiization]ISO8601[Dateandtimeformat]andprovidefourdigitsoftheyearandincludetheapplicabletimezone.VotingsystemequipmentshallonlyallowadministratorstosetoradjusttheVotingsystemequipmentshalllimitclockdrifttoaminimumofoneminutewithina15hourperiodaftertheclockisset.TheUMLmodelinthisspecificationimplementstherequirementswithinRequirementDandaddsseveraladditionaloptionalfieldsfordocumentationpurposes.Thosesystemsthatsatisfy2Clausesvandvidealwithaccesscontroltothetimeadjustmentmechanismandcapabilitiestolimitclockdriftandarenotaddressedinthisspecification.

EACVVSG中與記錄相關(guān)的要求的背景信息，這些要求UML模型中實(shí)現(xiàn)。101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupElectionapplicationssuchasEMSgenerallyoperateondevicesincludingpersonalcomputersthatthemselveshaveanoperatingsystemandaloggingcapability.TheVVSG1.1requirestheelectionapplicationstogeneratelogsofeventsthataredeemedassignificant,suchaswhen101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupD2：1ID2ID34事件成功或失敗（如適用ID[sic]（如適用請求的資源（如適用）ii計(jì)時(shí)機(jī)制的精度應(yīng)能夠區(qū)分并正確iii.時(shí)間戳應(yīng)包括日期和時(shí)間，包括小時(shí)、分鐘和秒。iv.時(shí)間戳應(yīng)符合]ISO8601]，并提供v投票系統(tǒng)設(shè)備應(yīng)僅允許管理員設(shè)置vi.投票系統(tǒng)設(shè)備應(yīng)在時(shí)鐘設(shè)置后15本規(guī)范中的UML模型實(shí)現(xiàn)了需求D2vviCDFSP1500-101,VersionNISTElectionEventLoggingCDFThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-RequirementDcanexportdirectlyintotheformatdescribedThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-UsecasesforthisTherearethreegeneralusecasesthatthisspecificationisintendedtoAnelectiondevicecreatesanelectioneventlogandwriteseventstothatlog.Thelogmaybeonremovablemediaorothermemory.Anelectiondevicecreatesanelectioneventlogonremovablemediaandwriteseventstothatlog;duringelectiondaythemediamayberemovedandreinsertedintoadifferentelectiondevice,whichcontinuestowriteeventstothesamelogcreatedbythefirstMultipleelectiondevicesareconnectedtoaloggingdevice,whichcreatesasingleelectioneventlogandwriteseventsfromthemultipledevicestothatlog.Thefirstusecaseresultsintheelectiondevicecreatinganeventlogandwritingthedeviceidentificationandotherrelatedinformationintotheelectioneventlog,subsequentlyfollowedbytheeventsrecordedbythedevice.Thereisthusaone-to-onecorrespondencebetweenthedeviceandtheelectioneventlog.Thesecondusecasecomesintoplayifadevicebeingusedin,say,apollingplace,malfunctionsandmustbereplaced.Theelectioneventlogisbeingrecordedonthedevice’sremovablemedia.Whentheremovablemediaisinsertedintothereplacementdevice,thereplacementdevicewillcontinuetowritetothesameelectioneventlogfile.Inthesecondusecase,thereisamany-to-onecorrespondencebetweenthedevicesandtheelectioneventlog.Thus,theelectioneventlogformatisarrangedsuchthattheelectioneventsareproperlyassociatedwiththecorrespondinggeneratingdevices.Thethirdusecaseismuchlikethesecondinthattherewillbemultipledevices,howevertheywillbeconnectedtoaloggingdevicesuchasaserverthatcreatesanelectioneventlogandassociateseventswitheachoftheconnecteddevices.Thereisaone-to-onecorrespondencebetweentheloggingdeviceandtheelectioneventlog,andthereisamany-to-onecorrespondencebetweentheconnecteddevicesandtheelectioneventlog.Aswiththesecondusecase,theelectioneventlogformatisarrangedsuchthatelectioneventsareproperlyassociatedwiththecorrespondinggeneratingdevices.UMLFigure1showstheUMLmodel,whichconsistsof3classes,onefordescribinginformationaboutthelogfilesuchaswhengenerated,asecondclassfordescribinginformationaboutthedevicemodel,manufacturer,andotherrelatedinformation,andathirdclasstocontaintheloggeddetailsforindividualevents.Thethirdclassisassociatedwiththesecondclasssothattheelectioneventsareproperlyassociatedwiththegeneratingdevice.All3classesandtheirattributescorrespondverycloselytothatofXMLandJSON.

101-0051.PS.TSIN/8206.01/gro.iod//:sptth101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup.以被移除并重新插入到不同的選舉設(shè)備中，該設(shè)備繼續(xù)將事件寫入由第一個(gè)設(shè)備創(chuàng)建的同一日志。1UML33XMLJSON Thispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-Figure1Thispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-UMLClassesTheElectionEventLogclassistherootclassandcontainsinformationabouttheelectioneventlogfileitself(asopposedtoinformationaboutdevicesandelectionevents).Itincludes:Details,foranydetailsaboutthelogElectionId,foridentifyingtheelectionthatthelogfileisspecificGeneratedTime,forthegenerationdate/timeoftheelectioneventlogTheElectionEventLogclassistheparentofoneormoreDeviceclasses,whichcontaininformationaboutthedevice(s)generatingtheelectionevents.Deviceincludes:Details,foranydetailsaboutthedevicethatmayneedtobeHashType,fordescribingthetypeofcryptographichashfunctionusedforeventlogId,foridentifyingthedevice,forexamplebyusinganidentifiersuchasaserialManufacturer,foridentifyingthenameoftheModel,foridentifyingthemodeloftheType,fordescribingthetypeofVersion,foridentifyingtheversionoftheEachinstanceoftheDeviceclassisaparentofoneormoreElectionEventclasses,which

1?UML101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morf101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupElectionEventLog（而不是有關(guān)設(shè)備ElectionId，用于標(biāo)識日志ElectionEventLogDeviceDevice成選舉事件設(shè)備的信息。Device用于描述設(shè)備的類型DeviceElectionEventThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-Thispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-Description,adescriptionoftheDetails,foradditionalinformationthemanufacturermayDisposition,anindicationoftheeventHash,forholdingacryptographichashoftheId,theidentificationnumberorstringusedbythemanufacturertoidentifytheSequence,auniqueidentifierfortheevent,e.g.,asequentialSeverity,anindicationofseverity,e.g.,whetheraneventiscritical,informational,TimeStamp,whentheeventType,thetypeofUserId,anidentificationoftheuserassociatedwithortriggeringtheExamplesofclassassociationstosupportuseFigures2,3,and4illustratehowtheclassesareassociatedtosupporttheusegeneralFigure2showstheassociationsforthefirstusecaseinwhichthereisasinglelogfileperdeviceandmultiple,unboundedelectioneventsassociatedwiththedevice.Figure2-FirstusecaseforasinglelogfileperFigure3showstheassociationsforthesecondusecaseinwhichtheremaybemultipledevicesusedsuccessivelytowritetothesamelogfile,whichcouldoccurifadevicemalfunctions,andtheremovablemediacontainingthelogfileisre-insertedintoareplacementdevice.

關(guān)于選舉事件的信息。ElectionEvent101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerf101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup嚴(yán)重性，嚴(yán)重性的指示，例如，事件是否關(guān)鍵、信息性等。時(shí)間戳，事件發(fā)生的時(shí)間UserId234圖2?3ElectionEventLoggingCDFSP1500-101,VersionNISTElectionEventLoggingCDF Thispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasiThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupFigure4-Thirdusecaseforaloggingdeviceconnectedtoeventgenerating

圖3?Figure4-ThirdusecaseforaloggingdeviceconnectedtoeventgeneratingCDFSP1500-101,VersionNISTElectionEventLoggingCDFThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-Figure4showstheassociationsforthethirdusecaseinwhichaloggingdeviceisconnectedtomultipledevices.Theconnecteddeviceswouldsendelectioneventstotheloggingdevice,whichwriteseventstothelogfileandmaintainstheThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-Toanalyzeanelectionlog,onemustunderstandthemeaningofthevariouseventIDsusedinthelogaswellas,potentially,otherfields.Asconfiguredtoday,manufacturersgenerallyusetheirownspecificeventIDs,thusthereisnoconsistencyoftheIDvaluesortheirmeaningacrossdifferentmanufacturers.OneapproachtomakingeventIDseasiertounderstandwhenanalyzingmultiplemanufacturerdevicesistomakethemconsistentinmeaninganduse.OnecouldprovideaneventIDlexiconthatwoulddescribeallknowneventsandassigndefinitions/meaningstothem,andeachmanufacturercouldusethislexiconinallitselectionlogs.Ultimately,however,thisapproachwasnottakeninthisspecificationbutcouldinafutureversion.Figure5-ElectionEventLoggingDocumentationUMLClassTheapproachtakenbythisspecificationistoprovideasecondElectionEventLoggingDocumentationUMLmodelforcontainingtheeventIDdocumentation,alongwithdocumentationforeacheventtype.Manufacturerscanincludeadocumentationfileinthisformatforeachoftheirdevices.Themodelincludesfieldsfordeviceandmanufacturerdocumentation,additionaldetails,andthenaseriesoffieldsforcontainingeacheventIDanditscorrespondingdefinition,andeacheventtypeanditscorrespondingdefinition.

101-0051.PS.TSIN/8206.01/gro.iod//:sptth101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupIDIDIDIDID圖5?選舉事件記錄文檔UMLUMLIDIDSPSP1500?1011.0NISTCDFSP1500-101,VersionNISTElectionEventLoggingCDF Election ElectionEventLoggingUMLModel3ElectionEventLoggingUMLModelThissectioncontainsdocumentationanddiscussionofthefeaturesincludedintheElectionEventLoggingandElectionEventLoggingDocumentationUMLmodels.Asnotedpreviously,thismodelwasusedinderivingtheXMLandJSONschemas,andtheschemausagecloselyfollowsthatoftheUMLmodel.TheUMLclassesaredescribedfirst,followedbytheenumerations.Eachdescriptioncontainsanimageoftheclass(fromtheUMLmodel)andatablecontainingdetailsabouteachoftheclass’sattributes.Todenotethatcertainclassattributesderivefromtheclass’sassociationswithotherclasses,curlybracesareusedaroundthoseattributenames,e.g.,ifClassAhasanassociationwithClassBthatisnamed“Automobile”,thenthetableofattributesforClassAwouldinclude“{Automobile}”asoneoftheattributes.ThefollowingsectionsdealwiththeclassesintheElectionEventLoggingandElectionEventLoggingDocumentationUMLmodels.ClassDevicecontainsinformationaboutthedevicegeneratingelectioneventlogs.Idistheonlyrequiredattribute,allotherattributesareoptional.IfthedevicetypeisnotfoundintheDeviceTypeenumeration,Typeis‘other’andOtherTypecontainstheappropriatetype.Hashisusedtospecifyacryptographhashassociatedwiththeevents,thatis,aneventlogentry,usingvaluesfromtheHashTypeenumeration.IfthetypeofhashisnotfoundintheHashTypeenumeration,HashTypeis‘other’andOtherHashTypecontainsthetypeofhash.Figure6-Class

ElectionEventLoggingElectionEventLoggingDocumentationUML模型中包含的功能的文檔和討論。如前所述，該模型用于導(dǎo)出XML和JSON模UMLmodel101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupUML類，然后是枚舉。每個(gè)描述都包含類（101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupDeviceIdDeviceTypeTypeother'，OtherType包含相應(yīng)的類型。Hash（即事件日志條目）相關(guān)聯(lián)的加密哈希，使用HashTypeHashTypeHashType'other'，OtherHashType包含哈希類型。6ThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-AttributeUsedtoassociateanydetailswiththeeventUsedtodescribealoggedThetypeofhash,fromtheHashTypeUsedtoassociateanydetailswiththeeventUsedtodescribealoggedThetypeofhash,fromtheHashTypeCDFSP1500-101,VersionNISTElectionEventLoggingCDFThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupAttributeIfHashTypeis'other',thetypeoftheAserialnumberorotherwiseidentifierassociatedwiththedevice.ManufactureroftheModeloftheEnumeratedusageofthedevice,e.g.,opscan-precinct,etc.UsedwhenTypeisVersionidentificationoftheEnumeratedusageofthedevice,e.g.,ClassElectionEventLogistherootclassoftheElectionEventLoggingUMLmodel.ItincludesDeviceforidentifyingthedevice(s)generatingtheelectionevents,thedateandtimewhentheelectioneventlogwascreated,andanidentificationoftheelection.Detailsisusedasneededforadditionaldescription/details.Figure7-Class

101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfo101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup圖7?類ThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-AttributeUsedtoassociateanydetailswiththeeventUsedtodescribethedevice(s)generatingtheelectionevents.IdentifiestheelectionassociatedwiththeIdentifiesthedateandtimethelogwasUsedtoassociateanydetailswiththeeventSPSP1500?1011.0NISTSP1500-101,VersionNISTElectionEventLoggingCDFClassElectionEventLogDocumentationistherootclassoftheElectionEventLoggingDocumentationUMLmodel.ItincludesEventIdDescriptionandEventTypeDescription,aswellasotherinformationforidentifyingthespecificdeviceassociatedwiththeelectioneventdocumentation.Figure8-Class

CDF101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup圖8?類ThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-AttributeAserialnumberorotherwiseidentifierassociatedwiththeManufactureroftheModeloftheVersionidentificationoftheForassociatingadescriptionwithaneventID.Forassociatingadescriptionwithaneventtype.Identifiesthedatethedocumentationreportwas一個(gè)序列號或其他與... an CDFSP1500-101,VersionNISTElectionEventLoggingCDFClassEventholdsinformationaboutaspecificevent.Severityisanoptionalattributefordescribingaseverityindicationfortheevent.IftheeventdispositionisnotfoundintheEventDispositionTypeenumeration,Dispositionis‘other’andOtherDispositioncontainstheotherdisposition.Figure9-Class

101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfo101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup圖9?ThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-AttributeUsedforabriefdescriptionoftheUsedforadditionalinformationabouttheevent,e.g.,vendorreservedThedisposition,e.g.,successorfailure,oftheevent.UsedwhenDispositionisContainsacryptographichashoftheevent,encodedasastring.AnidentifierassociatedwiththeAsequencenumber/stringtouniquelyidentifytheeventinthelogUsedforanindicationoftheseverityoftheevent,asdeterminedbythedevicevendor.Identifiesthedateandtimetheeventwasgenerated.Usedforthetypeofevent,asdeterminedbythedevicevendor.aoutteevent,e.g.,venorDispositionotherdeviceIdentifiesthedateandtimetheeventwasgenerated.Usedforthetypeofevent,asdeterminedbythedevicevendor.ThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbupAttributeAnidentifierassociatedwithauser,asrelevant.ClassEventIdDescriptionassociatesabriefdescriptionwithanelectioneventID,usedinFigure10-Class

101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfo101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup圖10?類ThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-AttributeUsedforabriefdescriptionoftheAnidentifierassociatedwiththeSPSP1500?1011.0NISTSP1500-101,VersionNISTElectionEventLoggingCDFClassEventTypeDescriptionassociatesadescriptionwithanelectioneventlogtype,usedinFigure11–Class

CDFClass101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahc101-0051.PS.TSIN/8206.01/gro.iod//:sptth:morfegrahcfoeerfelbaliavasinoitacilbup11ClassThispublicationThispublicationisavailablefreeofchargefrom:/10.6028/NIST.SP.1500-AttributeUsedforadescriptionoftheeventAnidentifierassociatedwiththeeventNISTElectionEventLoggingCDFThefollowingsectionsdealwiththeenumerationsintheElectionEventLoggingandElectionEventLoggingDocumentationUMLmodels.DeviceTypeisusedinDevice::TypetodescribethetypeorusageofthedevicegeneratingtheFigure12-Enumeration

CDFElectionEventLoggingElectionE