1.2.7 — Sovereign Digital Infrastructure — maturity: live

Election Communications Infrastructure

Providing tamper-resistant, sovereign-controlled satellite communications links for electoral management bodies, polling stations and results transmission during national elections.

When ballot transmission fails, democracy fails — sovereign satellite infrastructure ensures no polling station, returning officer, or results server loses its link on election day.

Elections are the single highest-stakes communications event a state conducts, yet most countries run them over commercial mobile networks, rented VSAT capacity or public internet that they do not control. A disrupted or manipulated results transmission is not a technical embarrassment — it is a constitutional crisis. Foreign commercial operators, whose licensing agreements sit under another country's jurisdiction, can be pressured to delay, degrade or disclose traffic at precisely the moment when doing so has maximum political leverage.

A sovereign LEO satellite layer changes the threat model entirely. A constellation of small satellites with encrypted bent-pipe or regenerative payloads provides direct links from every polling district to the national electoral commission's tally centre, bypassing terrestrial infrastructure that may be compromised, overloaded or geographically unreachable. Because the state owns the keys, the ground segment and the orbital slots, there is no third-party chokepoint an adversary can squeeze. Onboard link encryption with hardware security modules under national custody means that even if a terminal is seized, the upstream network remains intact.

Operationally, the same constellation serves the full electoral cycle: voter-roll synchronisation in the weeks before polling, secure voice and data for roving election observers during the count, and a verified, timestamped results feed to the commission the moment each station closes. In the 72 hours when a nation is most politically fragile, the government holds the communications pipe and can prove it.

What matters

Results transmission integrity is a constitutional requirement — a single credibly-disputed tally feed can trigger a legitimacy crisis that no recount fixes.
Commercial VSAT and mobile backhaul operators are legally compelled to comply with intercept orders from their own licensing governments, not yours.
Remote and island polling stations frequently have no terrestrial fallback; satellite is the only physically viable last-mile path on election day.
End-to-end encryption keyed under national authority is the only way to guarantee chain-of-custody evidence for any post-election legal challenge.

Quick facts

Typical LEO round-trip latency for secure election data links: 18–40 ms (2024) — ITU-R Fixed-Satellite Service Handbook
Nanosatellite constellation cost to serve a mid-size nation's election network: $35–80 million (full constellation) (2024) — ESA — NewSpace Economy Activity Report
Bandwidth required per polling station for encrypted results transmission: 128 kbps minimum (2023) — ITU-T G.1010 — End-user multimedia QoS categories

Sovereignty score: 9/10 — A state that cannot guarantee the integrity of its own election communications cannot guarantee the legitimacy of its own government.

Foreign-licensed commercial VSAT and mobile operators are subject to intercept and suspension orders from their home governments, creating a direct foreign-interference pathway at the most politically sensitive moment in the electoral cycle.
Post-election legal challenges demand a provable, unbroken chain of custody for every results transmission; only a nationally keyed, nationally operated link can supply that evidence without relying on a commercial provider's cooperation.
Terrestrial infrastructure — fibre, microwave, mobile — is routinely targeted for physical disruption or traffic manipulation during disputed elections; a sovereign orbital layer removes that chokepoint entirely.
Export-controlled encryption hardware and commercial satellite capacity can be withheld or downgraded by supplier governments as a coercive tool during politically sensitive periods, making supply-chain sovereignty a precondition of operational independence.

Reference architecture

Payload: S-band regenerative bent-pipe transponder, 50 Mbps aggregate throughput per satellite, hardware security module for onboard AES-256 key enforcement; secondary VHF channel for low-rate observer voice as fallback
Bus class: 6U cubesat bus, 12 kg, 40 W payload power; passive thermal management; radiation-tolerant COTS processor with ECC memory for onboard packet routing
Orbit: Sun-synchronous LEO at 550 km, 18-satellite walker constellation at 53° inclination for national-scale coverage, median revisit under 30 minutes, continuous contact achievable with two ground stations for equatorial and mid-latitude states
Ground segment: Two national hub earth stations (S-band uplink/downlink, TT&C); national electoral commission tally centre as primary data sink; encrypted VPN tunnel over ground fibre between hubs; SatNOGS-compatible UHF backup for telemetry only
Data pipeline: Polling-station terminal → encrypted uplink → onboard router → downlink to tally hub → national HSM decrypt → results database → cryptographic hash published to national public ledger within 60 seconds of receipt
End-user delivery: Web dashboard for electoral commission officials with per-station transmission status, latency and integrity flags; read-only observer portal with verified aggregate results; SMS alert to returning officers on link failure or integrity anomaly
Time to launch: First 6-satellite demonstrator constellation operational in 20 months from contract, covering national territory; full 18-satellite constellation before the subsequent election cycle at 36 months
Caveats: S-band spectrum coordination with ITU must begin at contract signature to guarantee orbital slots before launch; encryption payload components sourced from domestic or allied suppliers only — US ITAR-controlled parts require export licence that may not be granted for all partner states, so European (e.g. Thales, Telespazio) or Indian (ISRO commercial arm) primes are recommended

Frequently asked

Why can't an election commission just use commercial satellite broadband like Starlink or Viasat?

Commercial providers operate under their own terms of service, are licensed in foreign jurisdictions, and can throttle, reroute, or terminate service under pressure from their home governments or shareholders. During a contested election — precisely when interference is most likely — a sovereign nation needs a link that no external actor can legally or technically sever. Owning the constellation eliminates that leverage entirely.

How many satellites does a mid-size nation actually need to cover all its polling stations?

For a nation with up to 50,000 polling stations spread across a territory of roughly 500,000–1,000,000 km², a constellation of 6–12 LEO microsatellites (combined with regional gateway ground stations) can provide 4–6 daily contact windows of 8–12 minutes each — sufficient for results transmission if the ground terminals cache and burst data. For continuous, low-latency coverage, 18–24 satellites are a practical minimum. ESA's NewSpace Economy benchmarks suggest this is achievable for $40–90 million all-in.

What happens to the constellation between elections?

This is the most important question any finance ministry will ask. The answer must be a credible dual-use architecture: the same LEO constellation serves as a government secure WAN backbone, rural broadband backbone, IoT sensor network for agriculture and environment, and emergency communications fallback between election cycles. A single-purpose election satellite network is fiscally indefensible; a multi-mission network that also covers elections is straightforward to justify.

Is encrypted satellite transmission of election results legally valid under most electoral laws?

In most jurisdictions, the transmission medium is legally neutral — what matters is chain-of-custody documentation, end-to-end encryption, and audit logging. ITU-T X.1035 key exchange and NIST SP 800-77 IPsec VPN standards are widely recognised as sufficient for government-grade secure transmission. Election commissions should ensure their enabling legislation or regulations explicitly recognise cryptographically authenticated electronic results submission, as several older acts still assume paper or physical media.

Can a small nation afford to build and operate its own satellite constellation?

Smaller nations have two practical paths: a jointly operated regional constellation shared among 3–6 countries (with each holding proportional governance rights and ground terminals), or a bilateral arrangement with a trusted partner nation that provides launch and manufacturing while the sovereign country retains operational control and spectrum licensing. The UNDP and World Bank both offer concessional financing instruments for sovereign digital infrastructure that can cover 40–60% of capital costs.

How do we protect the satellite link from jamming or cyberattack on election day?

Frequency-hopping spread-spectrum waveforms, CCSDS 355.0-B-1 space data-link security, and multi-beam phased-array antennas that can null interference sources are the hardware baseline. On the cyber side, HSM-managed keys rotated per session, zero-trust network segmentation at each ground terminal, and out-of-band key distribution (physically delivered pre-election) mitigate software-layer attacks. Independent red-team testing of the full stack at least 90 days before an election is considered best practice.

What role does the ITU play, and how long does spectrum coordination take?

The ITU's Radio Regulations govern frequency assignment and interference protection for all satellite systems. A nation filing for a new LEO constellation must submit coordination requests through the ITU's radiocommunication bureau, which triggers a multilateral process that averages 3–7 years for contested bands. Nations planning a sovereign election constellation should treat ITU filing as the longest-lead-time item in the programme — it must begin at programme inception, not after the satellites are designed.

How does a sovereign election satellite link integrate with existing national cybersecurity frameworks?

The satellite link is one segment of a larger chain that includes terminal authentication, national PKI certificates, centralised results servers, and audit logging — all of which must align with the country's national cybersecurity law or strategy. NIST's Cybersecurity Framework (CSF 2.0) and ITU-T X-series recommendations provide the interoperability baseline. The election commission's CISO and the national cybersecurity agency should jointly own the integration test plan, treating the satellite segment as a classified government network, not a commercial broadband service.

Glossary

LEO (Low Earth Orbit): An orbital band typically 400–1,200 km above Earth's surface, where satellites complete an orbit in roughly 90–120 minutes and deliver latencies of 10–40 ms — far lower than geostationary orbit.
VSAT (Very Small Aperture Terminal): A compact two-way satellite ground station, typically with a dish of 0.75–2.4 m diameter, used to connect remote sites — such as rural polling stations — to a central hub via satellite.
Store-and-Forward: A data transmission mode in which a satellite collects data from a ground terminal as it passes overhead, stores it onboard, and relays it to a gateway station later — suitable when continuous coverage is not available.
HSM (Hardware Security Module): A tamper-resistant physical device that generates, stores, and manages cryptographic keys, ensuring that sensitive election data encryption keys cannot be extracted or compromised by software attacks.
Chain of Custody: The documented, unbroken sequence of possession and control of election results data from the polling station to the central tally system, required to prove results have not been altered in transit.
Frequency-Hopping Spread Spectrum (FHSS): A radio transmission technique that rapidly switches carrier frequencies in a pseudo-random sequence known only to authorised parties, making the signal highly resistant to jamming and interception.
ITU Radio Regulations (RR): The binding international treaty that governs the use of the radio-frequency spectrum and satellite orbital positions globally, administered by the International Telecommunication Union.
Zero-Trust Architecture: A cybersecurity model in which no user, device, or network segment is trusted by default — every connection must be continuously authenticated and authorised, regardless of whether it originates inside or outside the network perimeter.
Microsatellite: A satellite with a mass of 10–100 kg, typically launched as part of a constellation; capable of carrying communications payloads sufficient for government data links at a fraction of the cost of traditional large satellites.
PKI (Public Key Infrastructure): A framework of digital certificates, certificate authorities, and cryptographic keys that enables entities — such as polling stations and results servers — to verify each other's identity and encrypt communications securely.

References

ITU-R S.1897 — Characteristics of VSATs for telemetry and supervisory control in FSS — Defines technical characteristics and performance requirements for VSAT terminals used in supervisory and telemetry applications, providing the baseline specification for satellite-connected polling station terminals in the fixed-satellite service.
ESA — NewSpace Economy Activity Report — Benchmarks the cost of small-satellite government communication constellations at $35–80 million for a mid-size national footprint, and identifies dual-use government WAN and emergency communications as the primary financing justification for sovereign LEO networks.
NIST SP 800-77 Rev.1 — Guide to IPsec VPNs — Provides comprehensive guidance on IPsec VPN configuration for government networks, including satellite-based links; widely adopted by national election commissions as the encryption baseline for results transmission systems.
ITU-T G.1010 — End-user multimedia QoS categories — Establishes minimum bandwidth and quality-of-service parameters for interactive data applications including government telemetry; election results transmission over satellite is classified under the interactive data category requiring a minimum of 128 kbps with packet loss below 1%.

Related applications

1.2.1 — National Backup Internet Systems (Sovereign Digital Infrastructure)
1.2.2 — Sovereign Communications Networks (Sovereign Digital Infrastructure)
1.2.3 — Government Secure Communications (Sovereign Digital Infrastructure)
1.2.4 — Diplomatic Communications Systems (Sovereign Digital Infrastructure)
1.2.5 — National Emergency Connectivity (Sovereign Digital Infrastructure)
1.1.1 — Rural Broadband Networks (Rural & Remote Connectivity)
1.1.2 — Remote Village Internet (Rural & Remote Connectivity)
1.1.3 — Connectivity for Remote Schools (Rural & Remote Connectivity)