The Ballot ID could be created as an MD-5 encryption of several
    data: polling place, choices, time-stamp (to the millisecond) and a
    random number. They would ensure uniqueness. Since the MD-5
    encryption is very hard to break (even if you know the algorithm)
    knowing just the ballot ID doesn't tell you anything about the data.