Unique Identification Number: Implications and Challenges

Indian UID project

1. UNIQUE IDENTIFICATION NUMBER
Implications and Challenges
02/04/10 1ISIM

2. Presentation AgendaPresentation Agenda
UID – What, Why & How
Features
General Challenges
General implications and implications on
cyber world
UID and IT Act 2000
Concerns
Conclusion
02/04/10 2ISIM

3. WHAT it means ?WHAT it means ?
PURPOSE
A unique identification number (UID) to
all Indian residents that is
◦ robust enough to eliminate duplicate and
fake identities
◦can be verified and authenticated in an easy,
cost effective way
02/04/10 3ISIM

4. WHY it needs?WHY it needs?
Any identity problems??Any identity problems??
•inability to prove identity is one of the
biggest problem which cause the following
–preventing the poor from accessing benefits and
subsidies.
–Undue benefits to wrong persons
–Public as well as private sector agencies
struggling to fix identity before providing
individuals with services.
–Individual are compelled to undergo a full cycle
of identity verification for each and every cases
02/04/10 4ISIM

5. WHY it needs? WHY it needs?
Any benefits out of identifying ?Any benefits out of identifying ?
◦transformational in eliminating fraud and
duplicate identities
◦need to prove identity only once will bring
down transaction costs for the poor
◦transform the delivery of social welfare
programs by reaching it in right hands
02/04/10 5ISIM

6. Who will make it ?Who will make it ?
The Unique Identification Authority of India
(UIDAI), attached to the Planning
Commission.
(web site : http://uidai.gov.in/ )
02/04/10 6ISIM

7. How it works?How it works?
Resident approach enrolling agency with
supporting documents .( Photo and
biometrics captured)
The enrolling agency to the registrar
who will pass this on to the UID
database.
The system will engage in a de-
duplication exercise.
If the individual is not already in the
database, a UID number will be issued
otherwise rejected.
02/04/10 7ISIM

8. How authentication works?How authentication works?
online authentication.
In this, the biometric of the person will
be matched online with the biometric in
the system(a one is to one match will be
run).
Only authentication, no extra data about
the residents.
02/04/10 8ISIM

9. Features of the UIDAI Features of the UIDAI
modelmodel
The UID number will only provide identity
The UID will prove identity, not citizenship
A pro-poor approach
Enrolment of residents with proper
verification
A partnership model
The UIDAI will emphasize a flexible model
for Registrars
02/04/10 9ISIM

10. Features of the UIDAI Features of the UIDAI
modelmodel
•Enrolment will not be mandated
•The UIDAI will issue a number, not a card
•The number will not contain intelligence
•The Authority will only collect basic
information on the resident
•Process to ensure no duplicates
•Online authentication
•The UIDAI will not share resident data
•Technology will undergird the UIDAI system
02/04/10 10ISIM

11. General ChallengesGeneral Challenges
•Addressing challenges of scale...
•Enrollment process
–enrol the poor and hard to reach groups
–Tracking enrolments across the country
•Capturing biometrics
•Children's biometrics
•Recording deaths in the UID system
•Authentication
•Technology architecture
•Legal framework
•Data security and fraud
•Project risk
02/04/10 11ISIM

12. ImplicationsImplications
•For residents:
◦The UID will become the single source of identity
verification.
◦It will transform all of them into "Netizens" with a
"Digital ID" maintained in the data base of the UIDAI
•For Authorities & Agencies
Can ensure the identity before delivering services

•For Government
Eliminating duplication under various schemes is
expected to save the government exchequer
upwards of Rs. 20,000 crores a year
02/04/10 12ISIM

13. Implications on cyber worldImplications on cyber world
Can be made it compulsory for having a
UID for accessing any cyber services.
This will benefit in two ways
◦Prevention of cyber crime
◦Aid for investigation of cyber crime
02/04/10 13ISIM

14. See his words…See his words…
“When we have the full coverage, that is once
everybody has the number, which may take
number of years, it will help in identification
of a person. At that point if somebody
doesn't have UID that would itself become
an issue. And more appropriately under the
then legal framework you can also track
somebody (with help of the UID number).
So I think it would benefit security. ”
02/04/10 14ISIM

15. How it will help in How it will help in
prevention of cybercrimeprevention of cybercrime
•Once identity become compulsory
,people would be feared of being caught.
•Elimination of fraud identity
•Identification is possible through
biometric enabled mobile phone. In case
of doubt authentication can be made
•Identification process is easy for public
service providers eg:- cyber cafe, mobile
phone service providers etc.
02/04/10 15ISIM

16. How it will help in How it will help in
Investigation of cybercrimeInvestigation of cybercrime
When ID become compulsory for digital
services, gathering valid proof will
become easy.
02/04/10 16ISIM

17. UID and IT ActUID and IT Act
UID will be "Information Residing Inside a
Computer Resource" and is subject to the
provisions of Information Technology Act
2000 (ITA 2000/08) 
Any alteration of UID information which is
unauthorised and causes wrongful harm is
therefore an "offence" under Section 66,
72, 72A of ITA 2000/8 and is also subject
to payment of compensation under Section
43 and 43A ITA 2000/8.
02/04/10 17ISIM

18. UID and IT Act UID and IT Act Contd.Contd.
The UID authority is also subject to the
provisions of Sec 67C since the ultimate owner
of the data is that of the data subject and the
UIDAI is only an "Intermediary" as per the
provisions of ITA 2000/8
Maintenance of "Inaccurate Data" leading to
wrongful loss would constitute lack of "Due
Diligence" and could make the UIDAI liable.
Proper legal frame work should be enacted
02/04/10 18ISIM

19. ConcernsConcerns
UIDAI is constituted before finalizing Authority &
Legal frame work
“Framework –  The UIDAI would be set up under a
Statutory authority. The UIDAI is in the process of
drafting a legislation for this purpose”-
UIDAI website
Safe guard against Privacy invasion ?
Legal and Technological safeguard against possible
misuse, hacking etc. ?
Answer to a question regarding security
Nilekani replied
“"That is a very legitimate concern. We are looking
at the design as to how to make it secure,"
02/04/10 19ISIM

20. Interview with NilekaniInterview with Nilekani
02/04/10 20ISIM

21. ConclusionConclusion
We hope ,one of the most ambitious
project of India will succeed.
If administer properly, it can eliminate
many social evils including cyber crimes
and track the offenders.
We wish all the best to Nilekani and his
team.
02/04/10 21ISIM

22. References References
http://uidai.gov.in/
http://www.naavi.org:80/cl_editorial_09/edit_june_27_s_national_id.htm
http://bit.ly/8RAiKP
http://www.youtube.com/watch?v=tCp6UKA4YKM
http://cyberlawsinindia.blogspot.com/2009/09/is-unique-identification-authority-of.html
http://economictimes.indiatimes.com/infotech/software/UID-number-could-help-improve-national-security-Nilekani/articleshow/5314881.cms
02/04/10 22ISIM

23. Thank you
Questions please?
02/04/10 23ISIM