The Ballot ID could be created as an MD-5 encryption of several
data: polling place, choices, time-stamp (to the millisecond) and a
random number. They would ensure uniqueness. Since the MD-5
encryption is very hard to break (even if you know the algorithm)
knowing just the ballot ID doesn't tell you anything about the data.