Security & Privacy Challenges In UIDAI

The UID authority will only issue a unique identifier – a randomized number – that will only identify a person with his attributes that will include biometric information (Fingerprints, IRIS, Face). It is clear that only the biometric information will be unique to an individual, and will be used for de-duplication process. While name, photograph, address etc of a person may not be entirely private, since these can
be obtained from various sources, it is the biometric information which is unique to an individual that is claimed to be highly confidential and personal, even though we have pointed to evidence contrary to this. This attribute is not only personal to an individual, but it is permanent and does not change significantly over a lifetime for an adult. Compromise of biometrics of a person will have serious consequences for an individual throughout his life.

We have pointed out security vulnerabilities of a biometric system, and possibilities of data compromise that can lead to the loss of privacy of an individual

Finally, we have highlighted the best practices for security and privacy protection, developed by the Data Security Council of India (DSCI). These can be used by the Authority to secure its systems, especially the numerous registrars and sub-registrars around the country, who will store the same data of their region for all time to come. DSCI will be happy to associate with UIDAI in its security and privacy initiatives.

• Category: Position Papers

• Download:
• • security_and_privacy_challenges_in_the_uidai_project.pdf

• Tags:
  • Aadhar
  • Biometric
  • UIDAI