The Aadhaar Digital Account-On the way

          By now majority of Indians are familiar with Aadhaar. Aadhaar has begun to permeate our daily life. In a typical day, we hear the word ‘Aadhaar’, at least once. The context may be financial or non-financial.

          As more and more sectors discover the benefits Aadhaar can provide to their daily routine, the word Aadhaar will be heard more and more.

          Not only in the Government sector but in the private sector numerous discussions are taking place on the immense possibilities of Aadhaar.

          In the next couple of years, Aadhaar Number Holders in India will be able to use Aadhaar for a number of non-financial authentication services.

         

Q: What is Aadhaar authentication?

Ans:Aadhaar authentication is the process wherein Aadhaar number, along with other attributes (demographic and/or biometrics and/or OTP) is submitted to UIDAI’s Central Identities Data Repository (CIDR) for verification; the CIDR verifies whether the data submitted matches the data available in CIDR and responds with a “yes/no”. No personal identity information is returned as part of the response.

Q: When do I need to authenticate?

Ans: Various service providers, such as PDS, NREGA, banks, are expected to link Aadhaar authentication to their services. Residents would need to authenticate either at the time of subscribing to the service or at the time of availing service delivery, as required by the service providers. This would benefit the residents as no one else can avail the benefits meant for a particular resident.

          Now, the most interesting part:::

Q: Is there a mechanism to notify the residents when an authentication occurs against their Aadhaar number?

Ans: UIDAI has an sms and email based notification mechanism. Through this mechanism, every time CIDR receives an authentication request against an Aadhaar number, a notification will be sent to the registered mobile / email address.

UIDAI will also provide a facility wherein residents can request the history of authentication requests for a specified period of time

Source: UIDAI Website

          The ANH need not be present at the authentication site, if the Biometric authentication method is not being used.

          The ANH may or may need not be present at the authentication site, if the OTP authentication method is being used. This is because the OTP will flow to the registered mobile number of the ANH and the mobile can be held by a non ANH too.

          The ANH need not be present at the authentication site, if the demographic authentication method is being used.

          Hence the need to quickly open up Aadhaar Digital Accounts. The ANHs need to have a record of all authentication requests on their Aadhaar Number. This ADA will act as an important verification mechanism in case of any disputes at a later date.

          It is expected that Aadhaar authentication services will be enabled only to registered agencies.       

Outline of ADA:-

01)  The Login ID would the Aadhaar Number itself.

02) Password can be static or dynamic. Static means the ANH will key in every time with his/her registered password. Dynamic means an OTP to the ANHs registered mobile in CIRD. For additional security the combination of static and dynamic too can be implemented.

03) All the authentications requests whether self-initiated or third-party initiated will be available.

04) The following data to be visible as part of the Authentication request:

A)   Mode

B)    Time

C)    Location

D)   Requestor

E)    Any other details as decided

05)  Print Option

06)  No Save option to external media