One of them is the separation of ballots. Another is complete balloting secrecy. Another is the use of fully rewritable mass storage systems that can be accessed freely not only from the voting machine but from other machines as well.

To get to the point, is there a concept out there that requires the use of a mass storage system that does not allow rewriting - only additions to previously written data, that does not separate ballots but creates a single document which is a string of ballots cast on a specific machine, and which uses encryption to guarantee, as each ballot is added to the string, that no subsequent modifications can occur without detection? The encrypted string would be public, updated in real time, and would furthermore contain a full, unmodifiable log of all the code run by the machine from the initial boot sequence through each addition to the string to shutdown. Once shut down, the machine could net be booted again with the same mass storage device. The mass storage device would not work with another machine either.