Exploring Aadhaar
(India’s Centralized ID System)

New America
India-US
Public Interest
Technology Fellow
Kaliya Young
At Identity North June 4th, 2019
Every imaginable climate
29 States and Territories
250,000 Local Admin units
like counties
Gram Panchyats
India is Vast
1.3 Billion People
22 Official Languages
120 recognized languages
790 spoken languages

English is the language of Administration
Spoken by 12% of the people
India is Vast
Colonial Origins
Post Colonial Context
Identity was primarily at the Family level with the Ration Card system
<——Lots of Ins and Outs and Politics
Constitutionally 

Local Government at the 

Gram Panchyat Level is responsible 

for Birth and Death Registration
There was the 

National Population Register
Early 2000’s there was much 

Exploring how to change the ID system
Charismatic Leader
Nandan Nilekani
Started the 

Unique Identity Authority of India
Named as a Cabinet Member

(But not elected to Parliament)
with a “startup culture” 

Created a Minimum Viable ID
Created a Minimum Viable ID
DEMOGRAPHICS
Name
Birthdate
Gender
Address
BIOMETRICS
Photo
2 Iris Scans
10 Finger Print
BONUS (required?)
Phone Number
Email Address
Bank Account Info
AADHAAR ENROLMENT / CORRECTION FORM
Aadhaar Enrolment is free and voluntary. Correction within 96 hours of enrolment is also free. No charges are applicable for Form
and Aadhaar Enrolment. In case of Correction provide your EID, Name and only that field which needs Correction.
In case of Correction provide your EID No here: | | | | | | | | | | | | | | | dd |mm| yyyy|hh: mm: ss|
Please follow the instructions overleaf while filling up the form. Use capital letters only.
1 Pre-Enrolment ID : 2 NPR Receipt/TIN Number :
3 Full Name:
4 Gender: Male ( ) Female ( ) Transgender ( ) 5
Age: Yrs OR Date of Birth:| DD | MM | YYYY |
Declared Verified
6 Address: C/o ( ) D/o ( ) S/o ( ) W/o ( ) H/o ( ) NAME
House No/ Bldg./Apt. Street/Road/Lane
Landmark Area/locality/sector
Village/Town/City Post Office
District Sub-District State
E Mail Mobile No | | | | | | | | | | | PIN CODE | | | | | | |
7 Details of : Father ( ) Mother ( ) Guardian ( ) Husband ( ) Wife ( )
For children below 5 years Father/Mother/Guardian’s details are mandatory. Adults can opt to not specify this information, if they cannot/do not want to disclose.
Name
EID/ Aadhaar No.: | | | | | | | | | | | | | | | dd |mm| yyyy|hh: mm: ss|
8 I have no objection to the UIDAI sharing information provided by me to the UIDAI
with agencies engaged in delivery of public services including welfare services.
( ) / (×)
9 Select one of the below (OPTIONAL) ( This data cannot be Corrected after Enrolment)
I want the UIDAI to facilitate opening of a new Bank/Post Office Account linked to my
Aadhaar Number and have no objection to sharing my information for this purpose
I have no objection to linking my present bank account provided here to my Aadhaar number
State Bank Name/Branch
IFSC Code Account No.
Verification Type : Document Based ( ) Introducer Based ( ) Head of Family ( )
Select only one of the above. Select Introducer or Head of Family only if you do not possess any documentary proof of
identity and/or address. Introducer and Head of Family details are not required in case of Document based Verification.
10 For Document Based (Write Names of the documents produced. Refer back side of this form for list of valid documents)
a. POI b. POA
c. DOB
(Mandatory in case of Verified Date of Birth)
d. POR
11
For Introducer Based – Introducer’s
Aadhaar No. | | | | | | | | | | | | |
For HoF Based - Details of : Father ( ) Mother ( ) Guardian ( ) Husband ( ) Wife ( )
HoF’s EId/Aadhaar No.: | | | | | | | | | | | | | | |
dd |mm| yyyy|hh: mm: ss|
I hereby confirm the identity and address of ______________________________as being true, correct and accurate.
Introducer/HoF’s Name: Signature of Introducer/HOF
Consent
I confirm that information (including biometrics) provided by me to the UIDAI and the information contained herein is
my own and is true, correct and accurate.
Applicant’s signature/Thumbprint
Verifier’s Stamp and Signature:
(Verifier must put his/her Name, if stamp is not available)
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
To be filled by the Enrolment Agency only : Date & time of Enrolment: ___________________________________
Created a Minimum Viable ID
Check for Uniqueness -> Issue a Unique Number
Send it out on a Card with
Zero Security Features
Enrollment Process -> Send to Central Identity Repository
Leveraged Market Forces
to drive Enrollment
UIDAI worked hard

to get buy in from 

ecosystem of actors
5 Ways to do Authentication With Aadhaar
Aadhaar Number
Name and Address
Aadhaar Number
Biometric
Aadhaar Number
Request for OTP
Aadhaar Number
Multi-Factor
eKYC DOC
Name Addressss
Y/N
Y/N
Y/N
Y/N
Aadhaar Number
Biometric OTP
Via Authentication User Agents 

and Authentication Service Providers Via the KYC User Agents

and KYC Service Providers
Resident Golden Record
Applying the “Single Source of Truth”
Computer Science model to people.
Problems
Very Little Transparency
Into How The System is Built
Reporters, Security Researchers, NGOs

who point out Flaws in the System 

are being subject to First Incident Reports 

(Criminal Investigation) initiated by the UIDAI
There are Zero Security
Features on the Cards
Photocopying of cards
happens “everywhere”.
Problems
Problems
When they do use OTPs
Not Everyone has a
Unique Phone Number
Sub-AUAs are not common
so people aren’t doing
biometric Auth
Universally Accepted
Universal ID
Because everyone has one
Good about Aadhaar
Debate about Aadhaar is Polarized
Aadhaar didn’t get “killed” when the 

national government changed parties in 2014.
It finally got legal standing in 2016 when the

Aadhaar Act was pasted as a Money Bill.
It survived a Supreme Court Challenge

ruling was that there was a legitimate state interest

by banned private sector use.
Aadhaar 2.0?
New America
India-US
Public Interest
Technology Fellow
Kaliya Young
At Identity North June 4th, 2019
kaliya@identitywoman.net

Aadhaar Identity North Presentation

  • 1.
    Exploring Aadhaar (India’s CentralizedID System) New America India-US Public Interest Technology Fellow Kaliya Young At Identity North June 4th, 2019
  • 2.
    Every imaginable climate 29States and Territories 250,000 Local Admin units like counties Gram Panchyats India is Vast
  • 3.
    1.3 Billion People 22Official Languages 120 recognized languages 790 spoken languages English is the language of Administration Spoken by 12% of the people India is Vast
  • 4.
  • 5.
    Identity was primarilyat the Family level with the Ration Card system
  • 6.
    <——Lots of Insand Outs and Politics Constitutionally Local Government at the Gram Panchyat Level is responsible for Birth and Death Registration There was the National Population Register Early 2000’s there was much Exploring how to change the ID system
  • 7.
    Charismatic Leader Nandan Nilekani Startedthe Unique Identity Authority of India Named as a Cabinet Member (But not elected to Parliament) with a “startup culture” Created a Minimum Viable ID
  • 8.
    Created a MinimumViable ID DEMOGRAPHICS Name Birthdate Gender Address BIOMETRICS Photo 2 Iris Scans 10 Finger Print BONUS (required?) Phone Number Email Address Bank Account Info
  • 9.
    AADHAAR ENROLMENT /CORRECTION FORM Aadhaar Enrolment is free and voluntary. Correction within 96 hours of enrolment is also free. No charges are applicable for Form and Aadhaar Enrolment. In case of Correction provide your EID, Name and only that field which needs Correction. In case of Correction provide your EID No here: | | | | | | | | | | | | | | | dd |mm| yyyy|hh: mm: ss| Please follow the instructions overleaf while filling up the form. Use capital letters only. 1 Pre-Enrolment ID : 2 NPR Receipt/TIN Number : 3 Full Name: 4 Gender: Male ( ) Female ( ) Transgender ( ) 5 Age: Yrs OR Date of Birth:| DD | MM | YYYY | Declared Verified 6 Address: C/o ( ) D/o ( ) S/o ( ) W/o ( ) H/o ( ) NAME House No/ Bldg./Apt. Street/Road/Lane Landmark Area/locality/sector Village/Town/City Post Office District Sub-District State E Mail Mobile No | | | | | | | | | | | PIN CODE | | | | | | | 7 Details of : Father ( ) Mother ( ) Guardian ( ) Husband ( ) Wife ( ) For children below 5 years Father/Mother/Guardian’s details are mandatory. Adults can opt to not specify this information, if they cannot/do not want to disclose. Name EID/ Aadhaar No.: | | | | | | | | | | | | | | | dd |mm| yyyy|hh: mm: ss| 8 I have no objection to the UIDAI sharing information provided by me to the UIDAI with agencies engaged in delivery of public services including welfare services. ( ) / (×) 9 Select one of the below (OPTIONAL) ( This data cannot be Corrected after Enrolment) I want the UIDAI to facilitate opening of a new Bank/Post Office Account linked to my Aadhaar Number and have no objection to sharing my information for this purpose I have no objection to linking my present bank account provided here to my Aadhaar number State Bank Name/Branch IFSC Code Account No. Verification Type : Document Based ( ) Introducer Based ( ) Head of Family ( ) Select only one of the above. Select Introducer or Head of Family only if you do not possess any documentary proof of identity and/or address. Introducer and Head of Family details are not required in case of Document based Verification. 10 For Document Based (Write Names of the documents produced. Refer back side of this form for list of valid documents) a. POI b. POA c. DOB (Mandatory in case of Verified Date of Birth) d. POR 11 For Introducer Based – Introducer’s Aadhaar No. | | | | | | | | | | | | | For HoF Based - Details of : Father ( ) Mother ( ) Guardian ( ) Husband ( ) Wife ( ) HoF’s EId/Aadhaar No.: | | | | | | | | | | | | | | | dd |mm| yyyy|hh: mm: ss| I hereby confirm the identity and address of ______________________________as being true, correct and accurate. Introducer/HoF’s Name: Signature of Introducer/HOF Consent I confirm that information (including biometrics) provided by me to the UIDAI and the information contained herein is my own and is true, correct and accurate. Applicant’s signature/Thumbprint Verifier’s Stamp and Signature: (Verifier must put his/her Name, if stamp is not available) ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- To be filled by the Enrolment Agency only : Date & time of Enrolment: ___________________________________
  • 11.
    Created a MinimumViable ID Check for Uniqueness -> Issue a Unique Number Send it out on a Card with Zero Security Features Enrollment Process -> Send to Central Identity Repository
  • 12.
  • 13.
    UIDAI worked hard toget buy in from ecosystem of actors
  • 26.
    5 Ways todo Authentication With Aadhaar Aadhaar Number Name and Address Aadhaar Number Biometric Aadhaar Number Request for OTP Aadhaar Number Multi-Factor eKYC DOC Name Addressss Y/N Y/N Y/N Y/N Aadhaar Number Biometric OTP Via Authentication User Agents and Authentication Service Providers Via the KYC User Agents and KYC Service Providers
  • 30.
    Resident Golden Record Applyingthe “Single Source of Truth” Computer Science model to people. Problems Very Little Transparency Into How The System is Built Reporters, Security Researchers, NGOs who point out Flaws in the System are being subject to First Incident Reports (Criminal Investigation) initiated by the UIDAI
  • 31.
    There are ZeroSecurity Features on the Cards Photocopying of cards happens “everywhere”. Problems
  • 32.
    Problems When they douse OTPs Not Everyone has a Unique Phone Number Sub-AUAs are not common so people aren’t doing biometric Auth
  • 34.
    Universally Accepted Universal ID Becauseeveryone has one Good about Aadhaar
  • 37.
  • 38.
    Aadhaar didn’t get“killed” when the national government changed parties in 2014. It finally got legal standing in 2016 when the Aadhaar Act was pasted as a Money Bill. It survived a Supreme Court Challenge ruling was that there was a legitimate state interest by banned private sector use.
  • 40.
  • 41.
    New America India-US Public Interest TechnologyFellow Kaliya Young At Identity North June 4th, 2019 kaliya@identitywoman.net