I haven't read the paper if you can't tell from the system who you voted for, then you must be trusting the machine to give you some kind of random number which corresponds to each candidate. So it's only a partial verification.

In that case, there is a simple way to do it. Just publish a list of all ballets (by random ID) and their matching votes (by another random ID). No math needed.