Twitter
Advertisement

Virtual Aadhaar IDs to plug data breach

UIDAI also starts limited KYC plan for better privacy

Latest News
article-main
FacebookTwitterWhatsappLinkedin

Aadhaar card-holders can generate virtual IDs from March and use them for various purposes, including SMI verification, instead of sharing their actual 12-digit biometric code that's been hit by privacy and data breach concerns.

The Unique Identification Authority of India (UIDAI) that runs the government's Aadhaar programme also introduced a limited 'Know Your Customer' (KYC) scheme under which only need-based details of a user will be provided to an authorised agency providing a particular service, say, a telco.

The virtual ID facility will start from March 1 and authentication agencies will be required to start implementing the plan by March-end. From June 1, 2018, it will be compulsory for authentication agencies to accept virtual IDs.

Agencies that do not migrate to the new system will face financial disincentives.

The twin moves come amid a raging controversy over a newspaper's alleged expose on unauthorised access of UIDAI database earlier this month, and the government's crackdown against it.

UIDAI said on Wednesday that an Aadhaar card-holder can obtain, from its website, a virtual ID, a random 16-digit number that, together with biometrics, would give out limited details like name, address and photograph — enough for any verification.

A user can generate as many virtual IDs as he or she wants, a move aimed at boosting privacy of 119 crore people with Aadhaar. The older ID gets automatically cancelled once a fresh one is generated. It will be temporary and revocable, mapped to a person's Aadhaar number.

"Virtual ID will be a temporary, revocable 16 digit random number mapped with the Aadhaar number. It is not possible to derive Aadhaar number from Virtual ID," a circular issued by UIDAI said.

"Aadhaar number is a permanent ID for life... there is a need to provide mechanism to ensure its continued use by card holders, while optimally protecting the collection and storage of Aadhaar number itself in many databases," UIDAI said.

Aadhaar was started seven years ago to streamline payment of benefits and cut down on massive wastage and fraud. About 95.10 per cent of India's population has registered for it. Critics say Aadhaar links enough data to create a comprehensive profile of citizens, and the data — containing fingerprints, iris scans, and demographic information — can be misused.

Optional plan starts from March 

  • The virtual ID facility will start from March 1
  • Authentication agencies will have to start implementing the plan by March-end 
  • From June 1, 2018, it will be compulsory for authentication agencies to accept virtual IDs 
  • Agencies that do not migrate will face financial disincentives
Find your daily dose of news & explainers in your WhatsApp. Stay updated, Stay informed-  Follow DNA on WhatsApp.
Advertisement

Live tv

Advertisement
Advertisement