In 2009, I became extremely concerned with the concept of Unique Identity for various reasons. Connected with many like minded highly educated people who were all concerned.
On 18th May 2010, I started this Blog to capture anything and everything I came across on the topic. This blog with its million hits is a testament to my concerns about loss of privacy and fear of the ID being misused and possible Criminal activities it could lead to.
In 2017 the Supreme Court of India gave its verdict after one of the longest hearings on any issue. I did my bit and appealed to the Supreme Court Judges too through an On Line Petition.
In 2019 the Aadhaar Legislation has been revised and passed by the two houses of the Parliament of India making it Legal. I am no Legal Eagle so my Opinion carries no weight except with people opposed to the very concept.
In 2019, this Blog now just captures on a Daily Basis list of Articles Published on anything to do with Aadhaar as obtained from Daily Google Searches and nothing more. Cannot burn the midnight candle any longer.
"In Matters of Conscience, the Law of Majority has no place"- Mahatma Gandhi
Ram Krishnaswamy
Sydney, Australia.

Aadhaar

The UIDAI has taken two successive governments in India and the entire world for a ride. It identifies nothing. It is not unique. The entire UID data has never been verified and audited. The UID cannot be used for governance, financial databases or anything. It’s use is the biggest threat to national security since independence. – Anupam Saraph 2018

When I opposed Aadhaar in 2010 , I was called a BJP stooge. In 2016 I am still opposing Aadhaar for the same reasons and I am told I am a Congress die hard. No one wants to see why I oppose Aadhaar as it is too difficult. Plus Aadhaar is FREE so why not get one ? Ram Krishnaswamy

First they ignore you, then they laugh at you, then they fight you, then you win.-Mahatma Gandhi

In matters of conscience, the law of the majority has no place.Mahatma Gandhi

“The invasion of privacy is of no consequence because privacy is not a fundamental right and has no meaning under Article 21. The right to privacy is not a guaranteed under the constitution, because privacy is not a fundamental right.” Article 21 of the Indian constitution refers to the right to life and liberty -Attorney General Mukul Rohatgi

“There is merit in the complaints. You are unwittingly allowing snooping, harassment and commercial exploitation. The information about an individual obtained by the UIDAI while issuing an Aadhaar card shall not be used for any other purpose, save as above, except as may be directed by a court for the purpose of criminal investigation.”-A three judge bench headed by Justice J Chelameswar said in an interim order.

Legal scholar Usha Ramanathan describes UID as an inverse of sunshine laws like the Right to Information. While the RTI makes the state transparent to the citizen, the UID does the inverse: it makes the citizen transparent to the state, she says.

Good idea gone bad
I have written earlier that UID/Aadhaar was a poorly designed, unreliable and expensive solution to the really good idea of providing national identification for over a billion Indians. My petition contends that UID in its current form violates the right to privacy of a citizen, guaranteed under Article 21 of the Constitution. This is because sensitive biometric and demographic information of citizens are with enrolment agencies, registrars and sub-registrars who have no legal liability for any misuse of this data. This petition has opened up the larger discussion on privacy rights for Indians. The current Article 21 interpretation by the Supreme Court was done decades ago, before the advent of internet and today’s technology and all the new privacy challenges that have arisen as a consequence.

Rajeev Chandrasekhar, MP Rajya Sabha

“What is Aadhaar? There is enormous confusion. That Aadhaar will identify people who are entitled for subsidy. No. Aadhaar doesn’t determine who is eligible and who isn’t,” Jairam Ramesh

But Aadhaar has been mythologised during the previous government by its creators into some technology super force that will transform governance in a miraculous manner. I even read an article recently that compared Aadhaar to some revolution and quoted a 1930s historian, Will Durant.Rajeev Chandrasekhar, Rajya Sabha MP

“I know you will say that it is not mandatory. But, it is compulsorily mandatorily voluntary,” Jairam Ramesh, Rajya Saba April 2017.

August 24, 2017: The nine-judge Constitution Bench rules that right to privacy is “intrinsic to life and liberty”and is inherently protected under the various fundamental freedoms enshrined under Part III of the Indian Constitution

"Never doubt that a small group of thoughtful, committed citizens can change the World; indeed it's the only thing that ever has"

“Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say.” -Edward Snowden

In the Supreme Court, Meenakshi Arora, one of the senior counsel in the case, compared it to living under a general, perpetual, nation-wide criminal warrant.

Had never thought of it that way, but living in the Aadhaar universe is like living in a prison. All of us are treated like criminals with barely any rights or recourse and gatekeepers have absolute power on you and your life.

Announcing the launch of the # BreakAadhaarChainscampaign, culminating with events in multiple cities on 12th Jan. This is the last opportunity to make your voice heard before the Supreme Court hearings start on 17th Jan 2018. In collaboration with @no2uidand@rozi_roti.

UIDAI's security seems to be founded on four time tested pillars of security idiocy

1) Denial

2) Issue fiats and point finger

3) Shoot messenger

4) Bury head in sand.

God Save India

Showing posts with label biometrics. Show all posts
Showing posts with label biometrics. Show all posts

Monday, September 4, 2017

11969 - Love, demonetised - The Hindu



SEPTEMBER 03, 2017 00:00 IST


Ask not what demonetisation has done for you; instead, ask your inner cow what your biometrics can do for the nation

Long, long ago, so long ago it seems like another lifetime altogether, I had a girlfriend I totally adored. She dated other boys too but I didn’t mind. She didn’t always take my calls. She carried on for weeks as if I didn’t exist. But she did accept all my presents, all my exam notes, and allowed me to pay all the bills when we went out. She was quite generous that way.

Devotion song
My only mission in life was to be her most devoted slave, her most preferred servant. I loved her so much I would have transported beef to Bareilly if she’d asked me to. I would have eaten the roach-enriched food served by Indian Railways and admitted myself in Gorakhpur’s BRD hospital, if she’d asked me to. Or stood in a queue for 72 hours without food, water or alcohol, even if she hadn’t asked me to.

Now, I am aware that I am not a Deepika Padukone or a Sonakshi Sinha that you would be interested in reading about my love life. But I owe this past life regression to last week’s big revelations.

Yes, I am referring to demonetisation. Everyone has asked me the same two questions: why is no one angry? And why was it done? It is clear now that not one of its purported aims was achieved. So where is the rage? Why are there no mass protests?

Is it possible, as my father keeps reminding me, that we are a nation of ‘double-filtered’ morons? Are we the only country in the world where all the people can be fooled all of the time? Are we sadomasochists, that we love gratuitous punishment? Or, as a colleague put it, are we ‘sodomasochists’?

Well, my friends asked me similar questions all those years ago when I gave this girlfriend my bike, my helmet, my raincoat, and two cinema tickets purchased on my measly pocket money. I did so without hesitation when she informed me at the last minute that she had changed her mind, and wished to watch this romantic blockbuster not with me but with a ‘cousin’ visiting from another city.

I told my chortling friends back then that they did not understand the nature of true love. I would say the same today to all those wondering why Indians aren’t enraged at being taken for a ride.

The people of India love their Prime Minister. They love him the way I loved this girl. This is not an ordinary love based on cost-benefit calculations. It is a divine, unconditional, proto-Vedic love. It is bhakti. That’s why people who surrender to such love are called ‘bhakts’.

If tomorrow, the Prime Minister were to come on TV at 8 p.m. and announce that from October 1, everyone must donate one finger to the government in order to make Digital India a reality, I assure you there will be serpentine queues of people dying to give him their finger.

So let’s get this straight. Demonetisation is not about the economy. It never was. Nor is it some ‘political masterstroke’, as some over-enthusiastic bhakts are claiming. At its core, the demonetisation exercise was nothing but that: an exercise. It was a drill like the ones conducted in military academies and shakhas every morning. The objective was the same: the perfection of obedience.

Essence of greatness
Any nation that seeks greatness needs two things: a great leader, and a population that can be trusted to blindly obey the great leader. We already have a great leader. But an obedient populace is still a work in progress, as not everyone has the aptitude to become a bhakt. Hence the need for drills such as demonetisation. Ideally, we should have something like demonetisation every six months, so that people get used to obeying quietly instead of asking 10,000 questions.

Some might say that this is akin to slavery, and they would be right. The world’s greatest civilisations — be it the ancient Greeks, the ancient Romans, or the seven kingdoms of Westeros — were all built on slavery. That’s why Aadhaar is an absolute necessity, for the surveillance options it offers are the only way to transmute the rebellious elements in the population into reliable slaves. Actually, the term ‘slave’ doesn’t quite capture the nature of slavery that is unique to this land. The correct term is ‘cattle’.

Have you ever seen a cow protest? Or get angry? Or question the mysterious ways of its master? As you already know, to change the world, you must first change yourself. And to make India a great nation, all Indians must embrace their new unique identity as cattle.


So here’s my humble request to all my fellow Indians: ask not what demonetisation has done for you; instead, ask your inner cow what your biometrics can do for the nation.

Sunday, January 22, 2017

10752 - Can biometrics stop the theft of food rations? No, shows Gujarat - Scroll.IN



Fingerprints can identify beneficiaries, but cannot stop ration shop owners from cheating them.

Image credit:  Anumeha Yadav

Dec 17, 2016 · 09:00 am  

Bijalbhai Vinjuda is a Dalit farm worker who lives in Sandhidha village in Dholera, not far from Gandhinagar, the capital of Gujarat. He owns no land of his own. The day he finds work on other people’s farms, he makes Rs 200.

But Vinjuda knows how to read – an ability that helped him keep track of the foodgrains his family bought every month at subsidised rates from the fair price shop under the public distribution system.

“I used to ask the ration dealer to make accurate entries and write clearly,” Vinjuda said. “But now, since the machine system, he neither records entries in the ration booklet, nor does he print the e-coupon.”

By “machine system”, Vinjuda is referring to the system of fingerprint authentication that Gujarat adopted in ration shops starting 2010 by creating a database of the biometrics of ration card holders.

This system is not the same as Aadhaar, India’s Unique Identity Project, but it is founded on the same idea that biometrics can help eliminate theft in social welfare delivery by ensuring only real beneficiaries accessed their benefits.

Under the new system in Gujarat, to collect food rations, people are expected to get their fingerprints scanned on a machine at either the ration shop or at the computerised village service centre. Once the fingerprints match against the database, a slip called “e-coupon” is generated, which lists the quantity of foodgrains that a family is entitled to. This slip can be used to withdraw foodgrains at the local ration shop.

If the experience of Vinjuda’s family is anything to go by, the system does not entirely work.

The family is entitled to 15 kilos of foodgrains – five kilos each for Vinjuda, his aged mother, and his wife. Under the National Food Security Act, Gujarat government provides 3.5 kilo wheat at Rs 2 per kilo and 1.5 kilo rice at Rs 3 per kilo to every man, woman or child eligible for foodgrains. In addition, every ration card gets 350 gram sugar and 4 litre of oil.

But Vinjuda said his family gets just 12 kilos of grains – three kilos less than their food entitlement.

The fingerprint authentication system helps the government check and authenticate if Vinjuda, a beneficiary, is who he claims to be. But it does nothing to stop the ration shop dealer from pilfering a part of Vinduja’s grain entitlements – which is called “quantity fraud”.

Gujarat has high leakages
Pilferage in the public distribution system happens in multiple ways.

Dealers siphon off foodgrains by showing sales against fake ration cards. Or they show sales against the ration cards issued to genuine beneficiaries but the card-holders do not get the grain. Sometimes the beneficiaries get only a part of their entitlements and the rest is diverted by dealers to the open market.

The public distribution system in Gujarat has long been considered one of the most “leaky” among all states. The leakages in the state’s public distribution system increased from 51.7% to 67.5% between 2004-’05 and 2011-’12, a study by economists Reetika Khera and Jean Dreze showed.

In contrast, leakages in Chhattisgarh declined from 51.8% to 9.3% in the same period.

Khera and Dreze attribute this to the major reforms that Chhattisgarh introduced in its public distribution system from 2004 onwards. The state took away the ownership of ration shops from private dealers and gave it to village co-operatives. This reduced outright theft. It also broadened the coverage of the public distribution system, making it nearly universal, and simplified entitlements to make sure everyone knew how much grain they should be getting. The higher level of community vigilance brought down the scale of quantity fraud.

In contrast, Gujarat adopted a technological fix by creating a database holding the demographic and biometric information of ration card-holders. The system has no mechanism to strengthen transparency and accountability at the local level.

Pilferage, exclusion continue
Addressing a consultation of states on the computerisation of the public distribution system on September 19 in New Delhi, MR Das, the principal secretary of Gujarat’s food and civil supplies department claimed the biometrics-based system was “people-friendly and popular”. Ration card holders no longer feel “fear and heartburn over the theft of their ration entitlements,” he said.

But in the villages of Ahmedabad and Panchmahal districts, the poor continue to report pilferage of their rations.
Jayniben Tadvi, a Koli Adivasi, lives in Sanyal village in Ghoghamba block in Panchmahal district. Her husband died at a construction site in Surat. She supports her two children working as a daily wage farm worker.


Jayniben Tadvi, a daily wage laborer, has been wrongly categorised as Above the Poverty Line. The biometrics-based ration system cannot correct such exclusion errors. Image credit: Anumeha Yadav

The state government has wrongly categorised this extremely impoverished family as Above Poverty Line – an error that Tadvi has not been able to get redressed.

Against the 15 kilos of foodgrains that the three-member family is entitled to – five kilos per person – they get just 12 kilos, she said.
Such complaints are common in Panchmahal, a district with nearly 85% rural population and several Adivasi villages.
Ration dealers often give people less than their entitlements, pocketing the rest, said villagers. Fingerprint authentication is ineffective in preventing either wrongful exclusion of poor people or quantity fraud by dealers.
On its part, the state has mandated that ration dealers provide an e-coupon or receipt which clearly displays each person’s entitlement for that month, but villagers said they often failed to do so. In some places, they even charge card holders Rs 5 to 10 for this illegally.
In Ghoghamba, the e-coupon that villagers get is not a small slip of paper but an A4-sized sheet. The local fair price shop owner Jagdishbhai Patel said after the new system was introduced, he had to purchase a printer for Rs 6,000. To recover his costs, he now charges Rs 5 per receipt.
That month, however, the printer had run out of ink, and the receipts displayed only partial details, which were not legible.



The ration shop dealers provide e-coupons after illegally charging Rs 5-Rs 10. The prints do no specify entitlements clearly.
Asked about the complaints, Ronak Mehta, the deputy secretary in Gujarat’s food and civil supplies department, said the state had provided “toll-free helplines to assist card holders in reporting complaints.”
“I agree that quantity fraud persists,” he said.

A dual system
Not just quantity fraud, the failure of fingerprint authentication itself opens a window for pilferage.
As an earlier story in this series reported, Gujarat faces nearly 30% of fingerprint authentication failure. This means the fingerprints of one out of nearly three ration card-holders failed to match at the time of the withdrawal of foodgrains.
For such cases, the state has asked ration shop owners to manually note down the details of the ration-card holders in a register – as they did in the past for all ration card-holders – before giving them foodgrains.
Wouldn’t this allow for old-style pilferage?

Mehta said to avoid such a possibility, the system ensures that once the fingerprint authentication fails, a one-time password is sent to the registered mobile number of the beneficiary, thereby ensuring that only he or she is able to collect the grains.
But state records do not show any use of mobile phones. In October, nearly 30% transactions failed. No transactions were recorded under the column showing transactions done “with mobile”.

Officials says 200 panchayats in Gujarat have extremely poor mobile and Internet connectivity. But they did not say why the one-time password authentication facility was not being used or recorded even in the other panchayats.

In the absence of a fully functioning system, a “dual system” exists, when grains go both through biometric authentication as well as the register system. Such a system in practice becomes even more opaque for the most vulnerable beneficiaries. They have no way of knowing which of the two systems will enable their transactions. Dealers have no incentives to reveal this information.

There is no mechanism to strengthen transparency and accountability at the local level.

Laxmiben Mer, an elderly single woman whose son was paralyzed waist-down after an accident, has an Antyodaya card which makes her eligible for 35 kilo of foodgrains every month. But she said she had received only kerosene on her card. Last month, even her kerosene was siphoned off by the dealer through the register system.

“I was in Bhavnagar for work,” she recounted. “When I returned, the dealer said since I was not present when he disbursed ration, I would get kerosene through the register. He gave only two litre kerosene this time instead of four.”

Fair price shop owner Jagdishbhai Patel in Sandhidha village said he charged for the e-coupon to recover his computer and printer costs.

Expanding biometrics in welfare
Reetika Khera, Associate Professor of Economics at the Indian Institute of Technology in New Delhi, argues that leakages may have gone up in Gujarat after fingerprint authentication was introduced.
In October, state government data showed transactions were made for only 87 lakh of the 1.2 crore rations cards. Officials were not certain if the unused ration cards belonged to bogus beneficiaries or simply those who did not take their entitlement that month.
Khera points out that the state government did not reduced the allocation of grains to ration shop dealers even though fewer people were using their ration cards.
“The government ought to have systematically studied the pattern of off-take over the previous 3-4 months,” she said. “Since allocations have remained the same, where is this grain going?”
As the state moves to Aadhaar-based authentication, the problem of pilferage is likely to persist. Other states which have introduced Aadhaar in ration shops are already experiencing both what Gujarat has faced in the form of quantity fraud, as well as new ways of identity fraud in Aadhaar-based authentication systems.
At the food ministry consultation in October in New Delhi, Karnataka’s principal secretary Harsh Gupta admitted that “biometric authentication cannot stop quantity fraud”.
Rajasthan’s principal secretary, food and civil supplies department, Subodh Agarwal, offered an example of how dealers were getting around fingerprint authentication. They were seeding or linking their own Aadhaar numbers against multiple ration cards. The state had detected 6,000-7,000 instances of such identity fraud, he said.
Without additional transparency measures, the introduction of biometrics in welfare delivery systems may simply result in new forms of corruption.

The first part of this series on Gujarat’s iniative to use biometric authentication for social services programmes can be read here.
We welcome your comments at letters@scroll.in.

Wednesday, September 28, 2016

10471 - Understanding India’s push into biometrics By: Chris Wright - Euro Money

Understanding India’s push into biometrics By: Chris Wright Published on: September 2016 From Aadhaar to iSPIRT – your guide to Indian biometrics. Print Order   • 

Aadhaar is a biometric ID card, but it is significant to financial services as a method of authentication. Using the card and a fingerprint or iris scan, it becomes possible to identify oneself accurately from anywhere, and without the need for a paper trail. A feature of Aadhaar called eKYC (electronic know-your-customer) allows a cardholder to open a bank account instantly, just using their Aadhaar number and their own biometrics. Subsequent initiatives linked to Aadhaar include a digital signature to make documents secure; and a digital locker to store those documents. • Prime minister Narendra Modi was elected on a platform of inclusion, and on Indian Independence Day in 2014, from New Delhi’s Red Fort, he introduced a keystone initiative to ensure that every family living in India has a bank account. This is known as Jan Dhan Yojana (in full, Pradhan Mantri Jan Dhan Yojana, or 'prime minister’s people money scheme’). Many open with a zero balance, but the idea is that it connects the disenfranchised to the economy. Also, it’s free, and comes with life cover. By June 2016, 220 million accounts had been opened, including 18 million in the first week in August 2014, which apparently got it into the Guinness World Records. • One of the benefits that comes with a Jan Dhan Yojana account is the RuPay debit card, usable at ATMs, point-of-sale machines and e-commerce sites at cheaper rates than Visa and MasterCard. By May 2016, 267 million debit cards had been issued. "It was conceived to fulfil RBI’s vision to offer a domestic, open-loop, multilateral system, which will allow all Indian banks and financial institutions in India to participate in electronic payments," says Puneet Gulati at JM Financial. Axis Capital calculates that RuPay has already built a 38% market share after four years of operations. A RuPay credit card will follow later this year. • RuPay is one of many initiatives by the National Payments Corp of India, a fascinating institution that has been a key driver of banking technology (as has the Reserve Bank of India, which has encouraged it throughout). NPCI was set up in 2009 by the RBI and the Indian Banks Association, and is a non-profit organization owned and promoted collectively by 10 of the biggest banks in India, from public State Bank of India to private sector ICICI and HDFC, and foreigners Citibank and HSBC. It is an umbrella organization for all the retail payments systems in India. "It is creating infrastructure which rests on the principle of large scale and high volumes, resulting in payment services at a fraction of the present cost structure," explains Priya Rohira, executive director at Axis Capital. The various products that have come out of NPCI have gone from handling 2 million transactions a day six years ago to about 22 million a day now, with an aim of reaching 100 million a day.  • Aside from RuPay, two key NPCI initiatives are the Aadhaar Payments Bridge System and Aadhaar Enabled Payments System, and this is where the interconnections between the various initiatives in India start to get interesting. Through these, the payment of government benefits, such as subsidies for natural gas, are handled automatically and paid into an account verified through the Aadhaar card. More than 1 billion transactions have been completed using the payments bridge so far, and 260 million bank accounts are directly linked to Aadhaar. This is the clearest illustration of what the government is trying to do: the Aadhaar ID has facilitated the opening of a bank account; the automatic payment of government benefits into it has made that bank account active; and suddenly that person is part of the financial mainstream, with the added benefit that wastage, corruption and fraud are removed from the system. • Another NPCI success is the Immediate Payment Service, or IMPS, which provides mobile-based fund transfer. The smartphone is going to be instrumental to India’s financial journey, perhaps even more so than elsewhere; through it, Credit Suisse analyst Ashish Gupta argues that India is going to skip two generations in banking, largely going straight from branch banking to mobile banking. Gupta also expects virtually all bank deposit holders to own a smartphone by 2020. IMPS has been a huge success: transactions through it grew by 180% year on year in fiscal 2016, with Rs1.62 trillion ($24 billion) transacted through the system in a single year.  • However, the newest initiative, the Unified Payments Interface, launched on July 31, goes further still. IMPS is by most standards a great system, but it does have limitations: only banks that are members of NPCI’s IMPS system can access its database, meaning that mobile wallets are excluded from it; the process of transfer can be cumbersome at first; and it only allows for so-called 'push’ transactions, through which the sender initiates the transaction. What is revolutionary about UPI is inter-operability, which means money can be transacted across multiple different bank accounts, cards, wallets and banks. (At least 15 banks are believed to have rolled it out on July 31, with others following.) Mobile numbers can be used to identify recipients. And where IMPS can only push, UPI can pull, too, where the recipient initiates the transfer – for example, a merchant’s billing system initiating a payment. "It’s the world’s first inter-operable mobile payments system," says Nandan Nilekani, cofounder of Infosys. "Pushing or pulling money from a smartphone will be as easy as sending or receiving an email."  • Next comes the Bahrat Bill Payment Service (BBPS), which is aimed specifically at regular bill payments. Credit Suisse reckons $115 billion of bills are processed in India each year, and paper-based payments constitute over 90% of those payments. BBPS will be an inter-operable system, operating as a single authority through which customers can pay all their bills electronically. • This whole combination of elements is known generically as India Stack, a term coined by the think-tank iSPIRT. You might think of it as a pyramid, with Aadhaar as the foundation, and various other layers built on top of it, culminating with UPI, all of it assisted by the growing use of the mobile phone. Jan Dhan means everyone will have a bank account; Aadhaar means everyone has a unique identity for verification; mobile connectivity means anyone can access it all from anywhere. • One other important point to understand, particularly from a banking perspective, is that all of this means that India moves from being data poor to data rich. "A large majority of Indians are today invisible to formal lenders due to them being thin-file or no-file customers from the point of view of lenders," says Credit Suisse’s Gupta. "The result is low credit penetration and, in particular, low unsecured credit." But one result of all these digital initiatives is that "more of modern life gets captured in digital data streams", says Gupta. • Consequently there is, perhaps, one layer left to build: Nilekani calls it the Electronic Consent Architecture. "There’s all this data that is going to start spewing out of every system, this digital footprint," he says. "Is there a way to make it simple for an individual or business to leverage his own data for his own benefit? If I want a loan, and I can show through this data that I have a consistent record of payment, then it’s more likely I will get a loan." He is talking with the Reserve Bank to see if this can be accessible to the financial sector as a standard way of assessing applicants. "And that," he says, "hopefully, will be the last step."


Visit http://www.euromoney.com/reprints for additional distribution rights. For more articles like this, follow us @euromoney on Twitter.

Thursday, October 22, 2015

8956 - An official Andhra survey shows why Modi government should stop pushing Aadhaar so doggedly - Scroll.In


An audit of ration shops after the introduction of Aadhaar revealed that many genuine beneficiaries couldn’t collect food grain due to system glitches.


Scroll Staff  · Oct 15, 2015 · 05:30 pm

The Modi government’s insistence on the use of Aadhaar, India’s biometrics-based unique identification project, to weed out “ghosts, fakes, duplicates” from social welfare schemes is counterproductively excluding genuine beneficiaries from the programmes.

In Andhra Pradesh, an official audit conducted after ration shops adopted the Aadhaar system revealed that many genuine ration card holders couldn’t collect food grain due to fingerprint authentication failure and a mismatch of Aadhaar numbers. The audit was undertaken at five ration shops in three districts of Andhra Pradesh in May this year. At three of the stores, more than half the legitimate beneficiaries had to turn back without any ration.

The audit findings reveal the flaws in the Aadhaar project which the government obdurately maintains is essential to target subsidies for the deserving. Even though the Supreme Court, in August, ruled that enrolment for Aadhaar can’t be made mandatory for government benefits, the order was challenged by the Unique Identification Authority of India, the Reserve Bank of India and other regulatory bodies.

On October 8, a Supreme Court bench headed by Justice J Chelameswar refused to modify the August order. It referred the matter to a larger bench.

Biometrics fail beneficiaries

Amid this uncertainty, there’s evidence of Aadhaar’s ineffectiveness.

Earlier this year, the Andhra Pradesh government adopted the Aadhaar system and installed electronic point-of-sale machines at fair price shops, or ration shops, to verify beneficiaries’ fingerprints. To get ration, every ration card holder now has to provide valid Aadhaar numbers for all members of the household, and then authenticate her fingerprints on the scanner in the point-of-sale device. (The device is connected to the database of biometric information collected during Aadhaar enrolment.)

The Andhra Pradesh Civil Supplies Department started distributing ration through this process in May this year. That month, at 5,358 ration shops, 6.87 lakh ration card holders of the existing 31 lakh beneficiaries (or 22%) didn’t take ration. At 125 ration shops, the figure was higher at around 58% – 50,151 of the total 85,589 card holders didn’t collect their ration.

Faced with such a difference, the Society for Social Audit, Accountability and Transparency, a body set up by the Department of Rural Development to conduct social audits for government programmes, conducted a survey. It audited five ration shops in the districts of Anantapur, Prakasam, and Nellore, taking 20% of the “left over ration card holders” as the sample size.

The society found that in Cheemakurthi in Prakasam district, 69 of the surveyed 82 beneficiaries said their fingerprints didn’t match. In Allur in Nellore district, this problem was cited by 106 of 203 ration card holders. In Ongole in Prakasam district, 50 of 93 beneficiaries blamed the same problem.

Besides this, there were other failures. The survey discovered 35 beneficiaries from two slums who earlier used to get relatives to collect ration on their behalf because they worked in neighbouring villages. Under the new system, they missed out since it is mandatory for the beneficiary to be personally available to collect the ration.

In one instance, a ration dealer in Mudigubba allowed the beneficiaries to collect their rations manually without Aadhaar authentication, but in the system they showed up as beneficiaries who did not collect their rations. This opens the possibility of them being incorrectly getting counted as “fakes or duplicates”.

While the government wants to extend Aadhaar to a number of schemes and services, the findings in Andhra Pradesh show that the system requires more scrutiny before it can be termed as a fool-proof way of welfare delivery.

We welcome your comments at letters@scroll.in

Tuesday, September 29, 2015

8749 - National ID Month: 4 Biometric Countries - Find Biometrics


Posted on September 24, 2015

National eID card programs are set to encompass half the world population in three years time, according to a report by Acuity Market Intelligence, and biometrics play a key role in said initiatives. September is National ID Month at FindBiometrics, in which we have been taking an in depth look at this proliferating global market that accounts for some of the largest biometric deployments in the world.

Of course, while the 2018 goalpost forecasted by Acuity requires the further spread of National ID programs, a great number of countries included in that figure already have undertaken biometric registration initiatives for their citizens. Here’s a look at four countries, their national ID programs, and how biometrics factor into them.

India



Perhaps the most ambitious national ID program in the world is the Aadhaar initiative undertaken by the Unique Identification Authority of India (UIDAI). The national registry contains biographic and biometric data on every enrolled citizen, and though participation is voluntary for most living in India, there are a great deal of benefits offered by Aadhaar including the nation’s generous universal healthcare scheme.

The biometrics used in Aadhaar are fingerprint, iris and face. Because of the sheer size of India, and due to the remote locations of some of its citizens who could most benefit from its perks, the enrollment process is taking advantage of a great deal of modern biometric technology. For instance: Green Bit’s STQC certified Dactyscan84c 10-prints Livescan technology, optimized for mass enrollment solutions.

Recently a biometric iris scanning facility was launched in Andra Pradesh for the Aadhaar-based distribution of pensions. Andra Pradesh will be using iris biometrics as a primary authentication method to issue Direct Benefit Transfer, and in order to do so it has employed the IriShield USB MK120U from IriTech – the first iris biometrics solution to be STQC certified for the Aadhaar national ID program.

Israel



Israel is currently in a pilot phase for its own incredibly ambitious biometric national ID card program. In June, the country’s national ID pilot phase was extended despite serious criticism regarding its effectiveness and ability to deliver actionable statistics.

Two hours after Interior Minister Silvan Shalom announced the nine month extension the program’s detractors released a report detailing the program’s shortcomings. In addition to not offering any metrics regarding the program’s efficacy in curbing identity fraud, the trial national ID program has also been criticized for embarrassing levels of defectiveness. Sixteen percent of the 91,000 ID cards being used at the Ben-Gurion Airport have been reported as faulty or inoperable and 430,000 biometric scans have been reported as defective.

Taking the report in stride, Shalom pointed to other countries in which national ID has been successfully implemented, citing the primary difficulty stemming from the Knesset State Control Committee simply needing more time to get acquainted with the program (hence the trial’s extension).

Afghanistan


Biometric national ID powered by Ideal Innovations, Inc. (I3) has been implemented in Afghanistan for international security reasons. The Afghanistan Ministry of the Interior, in a 2011 report from the FBI titled Mission Afghanistan, stated that it had planned to enroll 8 million citizens in its national ID program serving what one government official called “the betterment of the country.” Built to be compatible with the FBI’s own biometrics database, the primary goal of Afghanistan’s national ID project is to better understand the movements of the country’s population and uncover previously invisible terrorist threats.

Of course, additional benefits come along with biometric national ID, and in Afghanistan that is still true. Though the rollout of the biometric ID cards has been reported as hitting a few snags along the way, when it was first announced The Guardian pointed out that such a program could potentially address the nation’s history of rampant electoral corruption.

South Africa



Moving our focus to South Africa we find the enormous and successful national fingerprint database deployed by NEC Corporation. South Africa’s Department of Home Affairs began the Home Affairs National Identification System (HANIS) in order to do away with paper systems in 21st century fashion (digitally). A key aspect of HANIS is NEC’s Automated Fingerprint Identification System (AFIS), which is able to store 50 million records and conduct 1:n matching procedures, boasting 99.9% accuracy.

While the usual national ID benefits were observed after the implementation, a white paper from NEC describing the project asserts that HANIS has had an even greater effect on South Africa. It is no secret that the nation’s diverse population of 48 million has been divided by language, race and culture on many occasions, but with the national ID program no matter what color or creed a person living in the country may be, they can all share one thing in common: they are definitively South African.
*
Be sure to register for our National ID Month webinar, Biometrics, National ID and the Future of Global Identity. Stay posted to FindBiometrics throughout September as we continue this conversation with National ID Month. Take part in the discussion by following us on Twitter and tweeting with the hashtag #FBNational.
National ID Month is made possible by our sponsors  NEC Corporation of America and Green Bit Biometric Systems.

Friday, July 31, 2015

8399 - India’s unique identification number: is that a hot number?

Featured Image: “Fingerprint detail on male finger” by Frettie. CC BY 3.0 via Wikimedia Commons.


Perhaps you are on your way to an enrollment center to be photographed, your irises to be screened, and your fingerprints to be recorded. Perhaps, you are already cursing the guys in the Unique Identification Authority of India (UIDAI) for making you sweat it out in a long line. That’s why I want to tell you what these guys really do.

Let me begin with some numbers. The UIDAI claims it will assign a number to half of India’s population by 2015: 600 million Indians to be photographed; 1.2 billion irises to be screened; six billion fingerprints to be collected; and 600 million addresses and other personal particulars to be gathered and brought on record.

When the 600 millionth individual is given her number, the UIDAI system will compare it with 599,999,999 photographs, 1,119,999,998 irises, and 12,999,999,999 fingerprints to make sure that the number being assigned is indeed unique. When in full flow, and right now, it is in full flow, the UIDAI system is adding a million names to its database every single day until the task is completed. No system in the world has handled anything on a mind-boggling scale like this.


Image credit: Iris Scan – Biometric Data Collection – Aadhaar – Kolkata by Biswarup Ganguly. CC-BY-3.0 via Wikimedia Commons

You may well ask: what’s wrong with photo identity cards, PINs, or passwords as identifiers? Photographs turn yellow with age, and PINs and password may be forfeited, forgotten or lost, but the body can always provide an unfailing link between the record and the person. The UIDAI system uses biometrics, a far more potent marker. The beauty of biometrics is that it is able to find an anchor for identity in the human body to which data and information can be fixed, so that the biometric identifier becomes the access gateway to the data field.

The UIDAI gives a 12-digit number after receiving and verifying biometric and demographic information. It sends the number along with other information to its central server for verification. The server verifies whether the data sent matches your identity and confirms ‘who you say you are’. Sometimes, funny things happen when the numbers are issued. A unique identification number card was issued in the name of a coriander plant with the photograph of a mobile phone fixed on it. The officials have absolutely no clue of the address to which the card has to be delivered.

Perhaps, the question that is foremost in your mind is: what will the number do for you? Well, if you are below the poverty line, the UIDAI says it is going to do wonders for you. All the subsidies that the government gives to the poor (most subsidies do not reach the poor because the delivery system is so leaky) will now be delivered directly to their doorstep, thanks to the unique identification number.

The unique identification number will make financial inclusion possible for the poor by bringing them benefits directly in cash and giving them the wherewithal for being consumers of the market. The market, by offering a choice of goods, services, experiences, and lifestyles, will enable the poor to define who they are or want to be. They will be free to live their lives in terms of choice and freedom. So, through the unique identification number programme, the government will make the poor free.

If you haven’t got hold of a magic number, please do hurry. You can’t afford to be left out of the bonanza, can you?


S. K. Das is the editor of Making the Poor Free? India's Unique Identification Number. He retired as Member (Finance), Space Commission and Atomic Energy Commission, and Ex-officio Secretary to the Government of India. During his civil service career spanning thirty-six years, he has worked in several important capacities with the Government of Karnataka and the Government of India.

Friday, May 1, 2015

7871 - Aadhaar Becomes World's Biggest Biometric ID Programme - IB Times

By Besta Shankar
April 27, 2015 13:44 IST


The Aadhaar card, which gives unique identification to residents of the country, has now become the leading biometric identification programme globally, as the number of such cards issued by Unique Identification Authority of India (UIDAI) reaches around 82 crore cards in April.

Enrolment figures in Aadhaar card programme is far ahead compared to 15 crore registrations in the Federal Bureau of Investigation (FBI) biometric database in the US, and with more number of Indians are estimated to enrol for the card, the programme is almost certain to be the largest of its kind in the world.

As on 20 April, the total number of Aadhaar cards issued by UIDAI reached 81.78 crore, with 67% of the country's 121 crore population possessing the card.

Nandan Nelikani, former chairman of the Unique Identification Authority of India. Reuters

Many thought the National Democratic Alliance (NDA) government would dump the programme after it came to power in May last year. However, following the intervention of the former chairman of UIDAI Nandan Nilekani, who explained the merits of biometric ID system to Prime Minister Narendra Modi, the government has been putting it to use as a major tool to control subsidy leakages and carry out financial inclusion programme such as Jan Dhan Yojana.

"It is a very scientific and useful instrument. Although, we have not made it mandatory for the Aadhaar card for claiming subsidies, our experience has been positive," Petroleum Minister Dharmendra Pradhan told The Times of India.

Among the states, Uttar Pradesh saw the maximum number of enrolments with 10.48 crore cards, followed by Maharastra with 9.19 crore cards.

"Aadhaar has been useful to create basic information in India. But to make it a game changer, it needs to be linked to Jan Dhan accounts while scaling up DBT," said Ashok Gulati, Infosys chair professor on agriculture at ICRIER.


Thursday, March 19, 2015

7533 - Indian state deploys IriTech iris solution for pensioners 12 March 2015 14:25 GMT - Planet Biometrics



India’s Andhra Pradesh state has launched an iris-based identity management solution developed by US firm IriTech for use in pension distribution.


The state’s Chief Minister N. Chandrababu Naidu presented the IriShield USB MK2120U solution at an event in the state on Tuesday.

Although the iris scanner is manufactured by US-based IriTech, it was assembled to be marketed in India through its Indian partner, Biometronic Technology.

The solution becomes the first iris authentication scanner to be STQC certified by the Indian government for the ongoing Aadhaar unique ID project.

However, IriTech also makes the first iris product to be registered by the DGS&D (Department of Goods Supply and Disposal, Ministry of Commerce & Industry), with the IriShield USB MK2120U to be delivered to specific government departments and ministries.

“The state’s decision to use iris technology as a primary method to issue Aadhaar verified DBT (Direct Benefit Transfer) will address concerns of total inclusiveness of its residence as well as providing a more accurate and a hygiene solution,” says Binod E. Mathai, Director of Biometronic Technology.

The benefit of iris recognition include a superior enrolment rate, and it is less affected by aging and wear as fingerprints.
In 2011, the Indian government launched a massive programme to collect the iris patterns and fingerprints of all of its 1.2 billion citizens within three years.

In January, Indian biometrics expert Nandan Nilekani predicted that budget smartphones using iris scanners could become an important authentication tool for his country’s biometric Aadhar unique ID number project.

Note: Iritech will be exhibiting at the connect:ID event in Washington on 23-25 March. 


- See more at: http://www.planetbiometrics.com/article-details/i/2793/#sthash.9QNseeGf.dpuf

Wednesday, January 14, 2015

7178 - Explore Asian touchless sensing market that is expected to reach $1,596.4 million by 2018


Touchless sensing is a technology that facilitates interaction with a device without the need for physical contact or touch. The two major markets of touchless sensing are touch-less sanitary equipment and touch-less biometric. The touchless sanitary equipment market consists of major products like touchless faucets, soap dispensers, trash cans, hand dryers, paper towel dispensers, and flushes.

The touchless biometric market consists of face, iris, voice, and touchless fingerprint biometrics. The touchless biometric market has a much greater market share than the touchless sanitary equipment market in the total touchless sensing market.

Key Players in the Asian Touchless Sensing Market are Cognitec Systems GmbH (Germany), Cross Match Technologies (U.S.), Elliptic labs (Norway), ESPROS Photonics Corporation (Switzerland), Eyesight Tech (Israel)

The biometrics market in Asia is set to grow with technological advancements, increased awareness about security solutions, and low costs. Biometric identification technology is increasingly being seen as a secure and reliable way to verify a person's identity in Asia, both - in the government and commercial sectors.

As organizations become more security-conscious, biometric-based solutions will grow in terms of usage and importance. Asia is the fastest growing region in terms of technology advancement, infrastructure, healthcare, and so on.

In countries like China, Japan, and Korea, prime importance is placed on security. There are numerous initiatives that have been taken in these countries for citizen security.

In China and Japan, biometric security has been deployed at airports, banks, ATMs, and other government institutes. India pioneered the mega project, UID (Unique identification) or ‘Aadhaar’, for its citizens.

Under this project, all citizens will be assigned one unique number for their identity. The Indian government has decided to install Aadhaar-enabled biometric attendance systems (AEBAS) in all central government offices, to be implemented by March 2015.


The Asian touchless sensing market has been segmented and forecast based on technologies, components, products, and end users. The technology segment of this market comprises face recognition, fingerprint recognition, iris recognition, and voice recognition.

On the basis of components, the market has been segmented into faucets, hand dryers, paper towel dispensers, soap dispensers, and trash cans. By products, touchless biometric devices and touchless sanitary equipment make up this market segment.

In addition, the market is further segmented and forecast based on end users, namely building/infrastructure, consumer electronics, enterprises, finance & banking, medical, public sector/service, and transportation & logistics.


This report includes market shares and value chain analyses, along with market metrics such as drivers and restraints. In addition, it presents a competitive landscape and company profiles of the key players in this market.

Get customization on this report.

7177 - Biometrics Boosting Indian Governments Productivity - Planet Biometrics

Biometrics Boosting Indian Governments Productivity

A biometric time-keeping scheme introduced for India’s central government employees last September has already contributed to a significant rise in attendance, according to an official study.
An analysis of the last three months since the Aadhaar enabled Biometric Attendance System was implemented shows that employees are spending nearly 20 minutes extra in office every day.

Given the average of 8.5 hours per working day, the increase is equivalent to an additional workforce of almost 1,900 employees each day.

"Considering that over 47,000 employees are using it now, an average gain of 20-minutes per day means an approximate gain of 16,000 man-hours,” a government official told India Today.
Launched in September, the system can also track employees’ attendance at work in real time through a website, attendance.gov.in.

The real-time information is hoped to improve transparency, particularly as the system will be able to track employees in outlying offices as well as central departments.
According to the website, the average clocking in time is 9.28am, and the leaving time is 17.46pm.


Some 720 million citizens out of the targeted 1.2 billion have so far been enrolled in India’s Aadhaar ID programme, with the rest targeted to the part of the system by March 2015. 

Thursday, June 6, 2013

3397 - Army’s Fingerprint and Iris Databases Head for the Cloud - Wired.com





A soldier scans an Afghan’s eye for placement in the U.S. military’s large wartime biometrics databases, March 2012. Photo: U.S. Army

The next time U.S. soldiers snap a picture of your eye or scan your face, they’re likely to store all that personal, physical data in the cloud.

The Army’s Intelligence command recently awarded a sole-source contract to bring the classified Defense Cross-Domain Analytical Capability, a database storing various kinds of security-relevant information the Army collects, onto the proverbial “cloud” of distributed servers and networks. Among the focuses of the project: “integrating Biometrics into the cloud,” according to a description of the contract.

The effort “involves the Entity management and tracking system for Biometrics/Human Terrain Facial recognition capability (photos, video) and edge-to-Cloud Enterprise Messaging (Corps/Division Node to/from Handheld,” says the Army Intelligence and Security Command. “Human Terrain” refers to an Army program in Iraq and Afghanistan that sought to map unfamiliar tribal networks and other social structures. Integrating that into an intelligence database is a major shift, but more on that in a second.

Currently, at least some biometric data is stored locally in the warzone of Afghanistan, in or around where soldiers and marines on patrol take it from locals and insurgents. That limits troops’ ability to exploit it, particularly when they’re mobile: troops who detain a suspicious person in, say, Djibouti won’t necessarily know if he’s already been nabbed in Iraq or Afghanistan or elsewhere. And supporting mobile operations is key to the whole cloud-storage project. “Mobile support in Cloud Corps Nodes includes provisioning the handhelds as data receivers and summarization of query results for handheld,” the Army command envisions.

But there are drawbacks to migrating the biometric data to the cloud. Among them, familiar to anyone who tries to get at their important GoogleDoc over an overtaxed wi-fi connection at Starbucks, is bandwidth. If it’s bad for you there, it’s much worse for soldiers in the middle of a warzone. “It’s an excellent opportunity when operating in environments like the NYPD can with their mobile biometric devices in all of 3G’s glory,” says a biometrics specialist who worked with the U.S. government in Afghanistan, “but Tora Bora is another story. (Then there’s the expense of supporting and accessing the cloud-based database in a rugged warzone, the specialist adds: “Personally, I think bandwidth is going to cost more than humans.”)

Still, the military is into biometrics in a big way. It’s created and maintained biometrics databases containing literally millions of iris and fingerprint scans from Iraqis and Afghans. The Iraq database has outlasted the Iraq war: it resides permanently at U.S. Central Command in Tampa.

Evidently unsatisfied with the clunky ViewFinder-esque mobile tools for collecting biometric data in the field, in February the Pentagon inked a $3 million research deal with California’s AOptix to check out its smartphone-based biometric identifier, built on an iPhone and iOS. Then there’s all the Pentagon’s additional research into identifying people by the unique pungencies of their body odor and the ways they walk.

It’s worth noting that the architects of the Army’s star-crossed “human terrain” mapping, a much-criticized attempt at warzone anthropology, swore up and down that their interviews with tribal leaders had nothing to do with gathering intelligence. That distinction had much to do with the distaste many anthropologists had with working alongside the military, but architects Montgomery McFate and Steve Fondacaro said they weren’t spying because they weren’t part of the military’s “targeting cycle.”

“[G]iven the vast collection and reporting effort that supports lethal targeting, using HTS [the Human Terrain System] to fulfill this function would be redundant and duplicative,” they wrote in 2012. (.PDF) “Whereas [human intelligence] requires highly specific information about individuals in order to capture or kill, social science, as practiced in HTS, seeks broad contextual information for nonlethal purposes.”

Whatever McFate and Fondacaro’s intentions, folding biometric data from the Human Terrain System into an intelligence database collapses their distinction. Once that information enters the database, nothing stops analysts from marshaling it for potentially lethal military operations. That will have implications if the Army ever again tries to get into the social science business.
The obvious worry for any effort like this, aside from bandwidth, is going to be data security. Military cloud storage is still in its infancy — in 2009, the colonel in charge of the Defense Cross-domain Analytical Capability cautioned, “To a certain degree it’s cloud technology, but we are applying something that’s less bleeding-edge” — and many in uniform fear that they can’t adequately secure a cloud-based infrastructure. It’s a real concern in an age when Chinese cyber-espionage of U.S. military secrets runs deep. The unique physical characteristics of millions of people isn’t something you want to leave vulnerable.

Still, if the military can figure out how to lock down its cloud, the Army looks likely to start storing some of its most sensitive and difficult-to-replicate physical data onto it. The 12-month project kicks off in late August — giving the Army plenty of time to collect more facial, eye and fingerprint information before upload.

Noah Shachtman contributed reporting.

Sunday, February 3, 2013

2901 - Biometric ID Systems Grew Internationally… And So Did Concerns About Privacy




As the year draws to a close, EFF is looking back at the major trends influencing digital rights in 2012 and discussing where we are in the fight for free expression, innovation, fair use, and privacy. Click here to read other blog posts in this series.

Around the world, systems of identification that employ automatic recognition of individuals’ faces, fingerprints, or irises are gaining ground. Biometric ID systems are increasingly being deployed at international border checkpoints, by governments seeking to implement national ID schemes, and by private-sector actors. Yet as biometric data is collected from more and more individuals, privacy concerns about the use of this technology are also attracting attention. Below are several examples of the year’s most prominent debates around biometrics.
  • FRANCE: In early March, the French National Assembly (Assemblée Nationale) passed a law proposing the creation of a new biometric ID card for French citizens, saying the measure would combat “identity fraud.” Embedded in the cards would be a compulsory chip containing personal information such as fingerprints, a photograph, home addresses, height, and eye color. All of this information would be stored in a central database. French Senator François Pillet called the initiative a time bomb for civil liberties. Near the end of March, however, the French Constitutional Council ruled that the new law proposing the introduction of a new biometric ID for French citizens was unconstitutional.
  • MEXICO: Documents obtained by EFF under Mexico’s Transparency and Access to Information Act show that as of May, nearly 4 million minors had been enrolled into registries associated with a new Mexican ID card for youths. Billed as a document that can help streamline registration in schools and health facilities, Mexico’s Personal ID Card for minors comes embedded with digital records of iris images, fingerprints, a photograph, and a signature. Despite concerns about privacy implications raised by organizations such as the Federal Institute for Access to Public Information, the Mexican government is now poised to launch the next step of the project - extending the ID cards to adults.
  • EUROPEAN UNION: The issue of privacy concerns surrounding biometric passports in Europe made its way to the European Court of Justice (ECJ), the highest court in the European Union. In September, the Dutch Council of State (Raad van State, the highest Dutch administrative court) asked the ECJ to decide if the regulation requiring fingerprints in passports and travel documents violates citizens’ right to privacy. The case entered a Dutch court after three Dutch citizens were denied passports, and another citizen was denied an ID card, for refusing to provide their fingerprints. The ECJ ruling will play an important role in determining the legality of including biometrics in passports and travel documents in the European Union.
  • INDIA: The Unique Identity Authority of India (UIDAI) continued collecting fingerprints, facial photographs, and iris scans from Indian residents for its massive unique ID endeavor, known as Aadhaar, which will result in the world’s largest biometric databaseand will compile 10 times as much data as all of Facebook. The program is moving forward at a rapid clip despite privacy concerns raised by advocates such as the Centre for Internet and Society in India, and the Indian Parliament. In addition, a slew of other government agencies have moved ahead with biometric collection programs of their own. And just this past week, Visa and a group of Indian banks unveiled the “Saral Money” account, which links individuals’ Aadhaar numbers with credit card transactions and introduces a further complication into the privacy concerns inherent in this massive e-government endeavor.

Tuesday, June 26, 2012

2634 - UID: Are your biometric I-cards stacked against you? - Economic Times





24 Jun, 2012, 01.31PM IST, M Rajshekhar, ET Bureau 

Imagine a rural family of five. Mom. Dad. Two kids. And Grandma. Assume too that they are below the poverty line. The day is coming when this family will have to give its biometrics out to myriad agencies. 


You know that Nandan Nilekani's Unique Identification Authority of India (UIDAI) or the Registrar General's National Population Register (NPR) has been collecting biometrics for a while now. 

But a set of other departments have entered the fray. This ranges from the PDS department, ministry of rural development (MoRD), states' education departments, the Rashtriya Swasthya Bima Yojana (RSBY), banks, the department of social welfare, the post office...they are all collecting biometrics (see Agencies Collecting Biometrics Right Now). 

This is the latest iteration in India's tryst with biometrics. From a beginning where only the NPR - and, a little later, the UIDAI - were to capture biometrics, we have now reached a point where myriad departments and ministries are camping in India's villages and towns, capturing fingerprints and iris images. 

Identity Thieves 

There was to be one large database. Now, we are moving to a system where multiple agencies capture and store biometrics data in myriad servers. This is amplifying the risk of biometric theft. 

As Sunil Abraham, the head of Bangalore-based Centre for Internet and Society says, "If biometrics is used as authentication factor then it would be possible for a criminal to harvest your biometrics - such as using a glass to collect fingerprints - without your conscious cooperation. Or the registrar can cache your biometrics and duplicate transactions." 

As the number of databases containing biometrics rises, the risk of this information leaking out increases. There have been complaints against an UIDAI enrolment agency called Madras Security Printers that it had sold data to private companies. There were also charges that enrolment agencies had outsourced the enrolment work to other companies, which they are not allowed to do. 

What complicates matters further is there are not many safeguards. The country doesn't have a policy on how biometrics can be captured, used, stored and destroyed. But before we get deeper into that story, it is useful to understand why multiple departments have begun collecting biometrics. 

Biometric Rush 

According to a senior bureaucrat who recently retired from the ministry of planning, the answer lies in the 2014 elections. "For the government, cash transfers are the large reforms that they think UPA 2 can point towards in the next elections. For this reason, they need all this up and running before 2014." 




However, over the past few months, parts of the government are increasingly unsure if UIDAI and NPR will meet their targets. "I do not think the 2014 target can be met at all," says a senior official in the National Informatics Centre (NIC). "We have to enroll another 800 million people. Then, we have to deduplicate them. Then, we have to make the cards and distribute them." 

This is one reason why a set of government departments are configuring their own alternatives. Take the Department of Financial Services (DFS). It has been testing an online, biometric system for cash payments in Haryana's Mewat district for months now. Here, each bank will store its customers' biometric information in its own servers. 

If a customer of bank A goes to a banking correspondent (BC) agent of bank B, his biometrics would be forwarded by bank B to bank A for authentication. Once authenticated, the transaction will be completed. "We should be rolling the new system out nationally from July or August," says the bureaucrat. 

The rural development ministry is also testing its payment system. Once the local administration tells the ministry about who worked how many days, the ministry will be able to put money into their accounts automatically via a payment gateway. Right now, this is done manually with the block development officer and sarpanch making out the cheques. 

This pilot, says DK Jain, joint secretary, MoRD, started 3-4 months ago in parts of Gujarat, Karnataka, Odisha and Rajasthan. In another six months, it will be available across the country. And then, there is the PDS. 

Here, different states are putting different systems in place. Andhra, says a senior mandarin in the food ministry, is going with UID, Haryana is looking at smart cards, Jharkhand is going with Aadhaar, MP and Gujarat are testing food coupons, while Chhattisgarh has decided to use RSBY and Orissa has chosen NPR. 

Apart from this, data is also being collected by the RSBY and BC companies on behalf of the banks handling welfare payments, or scrambling to meet their financial inclusion targets. 

A New Set of Worries 

As the number of databases rises, a new set of worrying questions are coming to the fore. The first has to do with this enthusiastic adoption of biometrics. If they do not work, people might be excluded from something as basic as citizenship, or from government programmes. 


IISc students staged a silent protest against UID after Nandan Nilekani, chairman of UID, addressed students of National Institute of Advanced Studies at IISc campus in Bangalore. 

Second, safety of this information. If your credit card PIN becomes public information, you can always call your bank and get it blocked. But what do you do if someone gets hold of your biometrics? 

Says human rights researcher Usha Ramanathan, "Biometrics is intimate personal data. Its proliferation represents a distinct threat to the personal security of the individual. Interestingly, it has hardly been tested, and when tested, been found deeply defective. Biometrics does not work for everyone, it can be stolen, it cannot be replaced, it changes, and none of this is acknowledged. Biometrics is too sensitive to be collected, held, transacted and shared without stringent protection of law." 

However, we have rushed ahead. A suggestion from the standing committee on finance which, while rejecting the draft National Identification Authority of India Bill, said biometrics cannot be collected without discussion and authorisation by the parliament has gone entirely ignored. 

Cyber Security 

And then, there are data safety questions. Says the NIC official, "In my opinion if all the solutions are in isolation to each other then there cannot be any common safeguard mechanism. Every organisation shall have to ensure their own data security by applying normal cyber security principles." 

The official was referring to technology standards - on data encryption and firewalls. How are we doing here? Not very well. Says B Sambamurthy, head of Hyderabad-based Institute for Development and Research into Banking Technology: "There are standards for capturing, storaging and retrieving of biometric data. The problem is not with technology or standards but rigorous compliance." 

And then, there are more procedural aspects - like ensuring that the information collected is not shared, or that it be used only for the purpose for which it was collected. These are entirely missing. Take Andhra Pradesh, where the government tried to share the biometrics it had collected for one programme with other government departments. But that triggers larger questions about consent and ownership over biometric information. Can a person's biometrics be used in ways he or she has not expressly authorised? 

These are issues that the privacy bill will have to look at. Says a bureaucrat working on the bill, "It will lay down the broad standards. Any agency which wants to collect this information will need to get enrolled or registered with a central body before it can start collecting data. It cannot share this data with anyone else. It also lays down the penalties in case anyone violates these terms." 

It also envisages the creation of a new agency - a standalone agency which will define privacy standards and monitor compliance. But, it is a long way off. The ministry wants to revise the Bill in the coming month, and then place the bill online for public comments, and then another round of interministerial consultations. 

In the meantime, be careful. There is little by way of penalties that can be imposed on any organisation that shares your information with anyone. 

Sunday, February 5, 2012

2322 - Biometric data to be used in Goa elections - Express Buzz

Biometric data to be used in Goa elections

Suman K Jha
Express News Service
Last Updated : 29 Jan 2012 10:13:35 AM IST

NEW DELHI: Amid the UID row, now it is the turn of the Election Commission to jump on the biometric bandwagon. For the first time, all voters for the upcoming Assembly elections in Goa will have to register their thumb imprints at the polling booths.  

 The EC officials say that sooner or later, “the EC will have to get the biometric data for the voters, and the Goa experiment is a pilot project”. Later, when the EC has all the biometric data of Indian voters, every voter will have to give their thumb imprints before casting their votes. “This will make the election process far more transparent and foolproof,” the officials added. Goa elections will be held on March 3. In another first, every voter in Manipur Assembly elections is being “photographed”. While electoral photo-ID cards are often a must for the voters while casting their ballot, the move to photograph every voter is inspired by some “localised factors”, the EC sources said.   “Very often, there are allegations of impersonation during voting - that of various insurgents and their sympathisers casting votes in lieu of bonafide voters. The present move entails every voter, flashing their index finger with the indelible voter’s ink, captured on the camera,” the EC officials noted.  

In addition to the Manipur voters, every voter in Goa will also be photographed with their index fingers, marked with the voter’s ink.  There’s another initiative of the EC that is creating a buzz in Manipur -- provisions for “postal ballots” for insurgents, presently engaged in peace talks with the government.  

“On the election eve, The Indian insurgents cannot go to the polling booth, so we provide them with postal ballot. The common objective, after all, is to bring the Indian insurgents to the mainstream,” an EC official said.