Virtual ID, limited KYC: Aadhaar has new two-layer security feature
Days after a major breach was reported in the Aadhaar database, the UIDAI has come up with a new two-layer security system to protect privacy. Aadhaar holders will now have a Virtual ID and Know Your Customer (KYC) will be limited. All agencies will incorporate the new system by June 1. Know how these will make your data safer.
UIDAI statement on the new features
How do the new systems work?
The Virtual ID is a 16-digit number generated randomly everytime your Aadhaar has to be authenticated. Instead of providing agencies your real Aadhaar, you can submit this virtual ID, thus keeping your Aadhaar confidential. Under limited KYC, UIDAI will issue a unique token for Aadhaar holders, which will remain same for any one agency. Thus none will need to store your real Aadhaar.
When will it go live?
The UIDAI says it will release all necessary APIs (Application Programming Interface) till March 1. All agencies have been asked to implement the features by June 1. If they fail, their services might be discontinued and financial disincentives imposed, the UIDAI circular said.
Protecting Aadhaar data privacy, thwarting cyber attacks major challenges: Report
Just yesterday, an RBI-backed research note flagged serious concerns about Aadhaar. "The primary challenge is to protect the data from the prying and excessive profit-seeking excess of the business world," it said. But cyber vulnerability is a bigger concern, the report claimed. "(A) major challenge for UIDAI is to protect the data under its control since the biometrics is now an important national asset."