The Indian government is bullish about the Aadhaar system for a complete digital identity. The best way to see this in action is the various methods implemented for the verification of a cardholder.

There are two primary methods: the online method which involves scanning the Aadhaar QR code on the Aadhaar card with the specified authentication devices. The process is fast, secure, and centrally regulated. It uses UIDAI infrastructure to process the authentication. It works fine except for minor instances where the network becomes an issue reached during an authentication.

Hence there’s another offline method, the Aadhaar XML Paperless e-KYC Process. It involves the use of a downloadable zipped XML file from the UIDAI website. The file includes the information selected by the individual for sharing during a verification process. The file can contain information like the photo, date of birth, etc. to be shared with a service provider, apart from the mandatory name and address.

It does not disclose your Aadhaar number, even in a masked form. Also, email id and password are hashed using an algorithm specified by UIDAI.

The selected fields become a part of the XML file and are digitally signed with UIDAI’s private key. In order to verify the digital signature, the public key is also included in the XML file.

In its document UIDAI says: “… the XML file generated by the Aadhaar number holder using Offline Aadhaar Data Verification Service is a digitally signed document using UIDAI digital signature. Thus, the service provider can verify the demographic contents of the file and certify it to be authentic when doing the offline verification.”

Here is the process to download the XML file:

• Step 1: Go to URL www.uidai.gov.in
• Step 2: Enter ‘Aadhaar Number’ or ‘VID’ and mentioned ‘Security Code’ in the screen, then click on ‘Send OTP’
• Step 3: Enter the OTP received by registered Mobile Number for the given Aadhaar Number
• Step 4: Enter a Share Code which will be the password for the ZIP file and click on the ‘Download’ button
• Step 5: The Zip file containing the digitally signed XML will be downloaded

The offline verification comes in handy when the process cannot happen online or when you have to share the document. The advantage is in the ability to share only the selected information that one wants to share.

Security is a concern though

Offline Aadhaar Download, at a very optimistic level, has been tricky to perform. UIDAI does not specify the exact process of sharing the downloaded file along with the password to any institution. Couple it with the fact that UIDAI steps off from the centralized authentication.

The Aadhaar XML Download, once shared with the password, can be sent forward to be used again. There is no control over who could open the file. Strict data retention policies are governing the use of these documents, but a leak could see the data getting exposed as we have seen in the past with Aadhaar.

The use of such a document is a future, we would need it till we have significant people with online connectivity in our country. The process by UIDAI in itself would evolve to accommodate these concerns and will improve in the future.

How should it be used

The Aadhaar XML download of anyone is a piece of sensitive information that should be processed and handled with care. It should never be saved without proper security and encryption to any server. The processing of the information should, as much as possible, be done on the client and never pushed to the server.

Most Background Verification Companies in India offer this source of employee verification in their services.

We, at SpringVerify, an employee verification company, have built BGV verification processes using XML files and we always process it in an encrypted environment on the client device. Never on a server.

FAQs

What details does the Aadhaar XML file contain?

• Reference number
• Resident’s name
• Gender
• Photo
• Date of Birth
• Mobile number in hashed form
• Email in hashed form

What is XML format?

XML format is a digitally signed, shareable, and protected document. Visible data includes only the name and address while other details are optional. Once your Aadhaar Card XML File Download is complete, you can use it for verification purposes.

Benefits of e-KYC:

• E-KYC background verification services can only be used by verified agents and institutions. Hence, your credentials stay in safe hands.
• The biometric scanners need to be verified as well. Hence, offering better security.
• It is free of cost.

That was all about Aadhaar Card XML Download, there are plenty of other documents you can use for verification purposes. If you’re searching for more details around it, here’s what can help you:

• How can Pan Card be misused? And ways to prevent them
• Importance of Identity Check and How It Works
• Aadhaar masking: Here’s what you need to know about
• Passport Verification Using MRZ – SpringVerify India Blog
• A Unified Driving Licence format in India: why was it important?
• Passport Verification Using MRZ

Originally published October 03 2019, last updated April 13 2022

The post Easy Steps to get your Aadhaar XML Paperless e-KYC Done appeared first on SpringVerify Blog.

All these identity systems have faced security flaws, identity thefts, and data breaches. The very fact that these systems house personal data with potential for misuse makes for a real debate. The Forbes article by Jayshree Pandya talks about the implications and the risks involved with having such sensitive data at hand for private entities to use.

Aadhaar is the biggest repository of human biometric data ever compiled in the history. Over a Billion people from India have their biometric and personal information in the database, with around 99% of adults already enrolled. There are apparent concerns of misuse of the data by the government and private institutions, including profiling, tracking of different accounts, and politically influencing individuals. The identity system has been linked with multiple governments and private accounts, including bank accounts, phone numbers, government-subsidized ration, and more.

Following the heated debates in 2018 and the subsequent review of the identity system by the government, the Indian Judiciary made it unlawful to use Aadhaar cards as the identity of any individual. However, the Indian Cabinet has passed an act yesterday, which allows the use of Aadhaar as an identity document, subject to authentication.

The use of Aadhaar as an identity document is slated to become robust and secure with the Indian government taking heed of all the concerns around the system. It would be used by state governments to issue subsidies as well.

Aadhaar Masking

The Indian government, in their latest iteration to the laws regulating Aadhaar use, have allowed for its use as a personal identifier. However, the use of the personal identification number on the Aadhaar is still limited. No private entity, other than the government-approved ones, can use the Aadhaar number or store it for any purpose.

The government is even looking into options for issuing temporary random numbers masking the actual identity number of the individual for usage.

Private entities can access the necessary information, except the biometric and iris scans, to validate an individual. Once validated, the entities can then save the Aadhaar in their records only after masking the first 8 digits of the personal identifier. This is called Aadhaar masking.

Anyone can log in to their Aadhaar account and download digital masked Aadhaar cards. The card with the first 8 digits masked is by law an identifier for any individual owner. It could be used to identify, to open bank accounts, and to showcase your residence.

What does it mean for businesses and individuals going forward?

These are exciting times to be alive. The need for digital identities is a pressing one going forward. The level of fraud and identity thefts have made it a necessary shift.

Businesses will be able to get better information about the person they are talking to, providing service to, or selling a product to. The cases of fraud and impersonation will fall as the system and technology behind the databases evolve. Aadhaar is here to stay.

Yet there is a need to make the system better and to have security layers in place. The government is working towards it, and we Indians will be some of the first people in the world to have superior identity systems in place.

For individuals, it would be an asset that would help them access different services both government and private. It will reduce the moving parts for any subsidies and services from the government and in the future be the best identifier of you being an Indian.

About SpringRole

SpringRole is enabling everyone’s #VerifiedProfessionalProfile on the Blockchain. It is a decentralized attestation-based professional network platform powered by the blockchain.

SpringRole is the platform where people can view, share, and get attestations on their professional profile, thereby creating a verified resume that they can share and use. The organizations themselves verify a user’s educational qualifications and work experience, which is written directly to the blockchain. To assess a user’s skill set, SpringRole has a system of weighted endorsements that let users objectively look at people’s profiles and evaluate their skill level.

About SpringVerify

SpringVerify is the modern take on the age-old problem of employee verification being costly, tedious, and out of reach of small businesses. We are trying to build a platform where the employee verification process happens seamlessly and with minimal effort required from both the company and the employee.

We believe that employee verification is a must for any business. It is a critical process in ensuring that every employee working with you is faithful and could be trusted. CareerBuilder survey shows that a company stands to lose on average $17000 on a wrong hire.

We have built the platform with blockchain and believe that it will change virtually everything it comes in contact with. Blockchain helps us in building a decentralized system which keeps all our data secure and immutable.

That was all about Aadhaar Masking, there are plenty of documents you can use for verification purposes. If you’re searching for more details around it, here’s what can help you:

• How Vaccination Verification Is A Game-Changer For Your Company?
• How can Pan Card be misused? And ways to prevent them
• Importance of Identity Check and How It Works
• A Unified Driving Licence format in India: why was it important?
• Easy Steps to get your Aadhaar XML Paperless e-KYC Done
• Passport Verification Using MRZ – SpringVerify India Blog

The post Aadhaar masking: Here’s what you need to know about appeared first on SpringVerify Blog.