Are you the one you say you are?

The real test of reliability for the UID system will be during identity authentication. The UIDAI, with its online authentication and biometric check, will be helpful in building the infrastructure and systems necessary to authenticate residents in different parts of the country.

There is no doubt that the UID can provide the strongest form of pre-verification and identity authentication. But to ensure that targeted benefit programs reach intended beneficiaries in line with the pro poor agenda, a clear adoption process must be put in place by introducing the UID at every point of service delivery. 

For this, many service delivery agencies may need to re-engineer their business processes. Agencies will have to adhere to norms and procedures specified by the UIDAI for fingerprint capture and verification, and introduce a robust biometric authentication process at every point of sale.

Two main forms of authentication, depending on the situation and equipment available, are Online and Offline authentication.

Online authentication:

• Demographic authentication – UID number and demographic information of the UID holder is compared to the information stored in the UID database. The assurance level here is medium.

• Biometric authentication - Biometrics of the UID holder, his UID and key demographic details are compared to the details in the CIDR (Central ID Data Repository). The assurance level in this case is high.

• Demographic/Biometric authentication with API (Application Programming Interface): Registrar's backend system makes a programmatic call to the authentication APIs exposed by the UID system to perform authentication. The assurance level here may be medium-high depending on whether the check used demographic or biometric inputs.

Offline authentication: (does not use the authenticating service provided by the UIDAI)

• Photo match authentication – Low assurance level
• Comparison of the scanned fingerprint of the cardholder to the biometric stored on the Registrar-issued card. The assurance level here is medium.

Authentication and the UIDAI revenue model

Basic identity confirmation would be free. Here, the authenticator will provide the UID number, name and one other parameter such as date of birth of the person, and the central database will confirm the identity as a 'Yes' or 'No' response.

Chargeable authentication services can be of two types:

• Address verification - The agency will submit the UID, name and address of the resident to the CIDR, which will confirm the address. As a result, the agency will not have to do physical address verification.

• Biometrics confirmation - Services such as issuing a credit card or granting a loan need the confirmation of the resident's identity which involves the submission of photographs and other documentation. In the proposed transaction with the UID Authority, the agency can send the scanned photograph or fingerprint together with other demographic details to confirm the identity of the person.