AADHAAR CONTROVERSY

Explainer: What is Virtual ID, and how is it different from Aadhaar?

On paper, the new process seems more secure than Aadhaar. But is the cat already out of the bag?

After years of criticism about the weakness of Aadhaar systems and the dangers they pose to privacy, the Unique Identification Authority of India on Wednesday introduced a new process that it hopes will be more secure. The “Virtual ID” is supposed to replace your 12-digit biometric-based Aadhaar number, allowing you to use it for authentication without giving away the Unique ID itself. Although the Unique Identification Authority of India did not say it in as many words, the changes are an admission of the serious risks in others having access to your Aadhaar number, especially with at least 210 official websites found to be displaying them for all to see.

But what is Virtual ID?

According to a circular issued by the Unique Identification Authority of India on Wednesday, Virtual ID will be a 16-digit random number that is mapped to your Aadhaar number. Once you have generated a Virtual ID, you can provide that 16-digit number, instead of your Aadhaar number, to any agency seeking to use Aadhaar to authenticate you.

For most people, the key takeaway is that, starting March 1, they will have to generate a Virtual ID and will have to use that instead of Aadhaar for any sort of authentication.

How does it work?

According to the circular, the Virtual ID will be mapped with the Aadhaar number, but is otherwise a random-generated number just like the Unique ID. This means that someone who only has access to your Virtual ID should not be able to use that to derive your Aadhaar number.

When you give your Virtual ID to an authentication agency, say a telecom company or a local government body, they will enter it into the system and then receive a UID token that authenticates it, and provides a limited set of demographic details, such as your name, phone number, address and so on. Simply put, these agencies will now be able to authenticate you without ever actually seeing your Aadhaar number.

The Unique Identification Authority of India has made it mandatory for agencies to start using Virtual ID by June 1. (Credit: Narinder Nanu / AFP)
The Unique Identification Authority of India has made it mandatory for agencies to start using Virtual ID by June 1. (Credit: Narinder Nanu / AFP)

How is it different from Aadhaar/how is it more secure?

A major concern regarding Aadhaar is how easily companies or government bodies that have access to it can store those numbers. Making matters worse is how easily one can use an Aadhaar number to unearth demographic data about a person, as The Tribune reported last week. Though the Unique Identification Authority of India has spent years insisting that the Aadhaar number itself is not dangerous if leaked, when coupled with demographic data, it lends itself to either profiling or financial fraud, which has taken place in the past.

The new system attempts to add a layer of security over this, by making it more difficult for agencies to get access to your Aadhaar number. Until now, wherever authentication was necessary, you simply gave them your Aadhaar number or biometrics. Though the Aadhaar Act made it illegal to store that data unless authorised, it was impossible to say what agencies or individuals were doing it.

The new system avoids that potential loophole altogether, by making sure agencies do not have access to your Aadhaar number in the first place. Instead, they are only shown your Virtual ID and receive a UID token that confirms it is mapped to your Aadhaar number. The Unique Identification Authority of India claims it will not be possible to derive the Aadhaar number from the Virtual ID. Moreover, different agencies will be given different UID tokens to authenticate the same Aadhaar – meaning they will not simply be able to merge their information and build a picture of the Virtual ID holder.

A key aspect of the security is that the Virtual ID is temporary and revocable. This means that it matters less if an agency stores your Virtual ID in the hope of profiling you, since Virtual IDs are not permanent and can change. The Unique Identification Authority of India has indicated that it will have an upper time limit for Virtual IDs.

Is it really more secure?

On paper, the process is more secure. But the question it prompts is, why was this not in place all along? The idea of the Virtual ID is to prevent agencies from collecting and storing individual Aadhaar numbers with demographic data. But government agencies have themselves been leaking Aadhaar numbers and it is entirely possible, given the way the internet works, that the entire Aadhaar database – with the UIDs and demographic data – has already been copied, either piecemeal or altogether. The process will be more secure from here on, but the cat may already be out of the bag.

I have Aadhaar. What do I need to do?

The new system will not be in place until March 1, and the Unique Identification Authority of India has made it mandatory for agencies to start using Virtual ID by June 1. Assuming it sticks to these deadlines, every Aadhaar holder will have to generate their Virtual IDs between March 1 and June 1. This can be done on the Unique Identification Authority of India’s website, at Aadhaar Enrolment Centres and on the mAadhaar mobile app. From June 1, you will need to use this Virtual ID instead of Aadhaar in most authentication circumstances.

What do we not know yet?

The big question is the time limit connected to the Virtual ID.

Remember, Aadhaar was originally envisioned as a way of improving welfare delivery and providing an identity to those who do not have any. Yet, the poor and the needy, the ones who already find themselves excluded by Aadhaar, now have to make that extra effort to generate a Virtual ID in order to access subsidies or even entry to night shelters. The Unique Identification Authority of India has said Virtual ID will be temporary, which is what makes it more secure than Aadhaar, but it has not announced how long one Virtual ID will be usable.

Too short a time, say a few months, and it will be a massive inconvenience to those who need Aadhaar the most, since they are unlikely to have access to the mAadhaar app or the time to line up at an enrolment centre just to generate Virtual IDs. Too long a time, and the Virtual ID will just replace the Aadhaar number, allowing conmen to use demographic data connected to the Virtual ID in attempts to defraud Aadhaar holders.

Support our journalism by subscribing to Scroll+ here. We welcome your comments at letters@scroll.in.
Sponsored Content BY 

Following a mountaineer as he reaches the summit of Mount Everest

Accounts from Vikas Dimri’s second attempt reveal the immense fortitude and strength needed to summit the Everest.

Vikas Dimri made a huge attempt last year to climb the Mount Everest. Fate had other plans. Thwarted by unfavourable weather at the last minute, he came so close and yet not close enough to say he was at the top. But that did not deter him. Vikas is back on the Everest trail now, and this time he’s sharing his experiences at every leg of the journey.

The Everest journey began from the Lukla airport, known for its dicey landing conditions. It reminded him of the failed expedition, but he still moved on to Namche Bazaar - the staging point for Everest expeditions - with a positive mind. Vikas let the wisdom of the mountains guide him as he battled doubt and memories of the previous expedition. In his words, the Everest taught him that, “To conquer our personal Everest, we need to drop all our unnecessary baggage, be it physical or mental or even emotional”.

Vikas used a ‘descent for ascent’ approach to acclimatise. In this approach, mountaineers gain altitude during the day, but descend to catch some sleep. Acclimatising to such high altitudes is crucial as the lack of adequate oxygen can cause dizziness, nausea, headache and even muscle death. As Vikas prepared to scale the riskiest part of the climb - the unstable and continuously melting Khumbhu ice fall - he pondered over his journey so far.

His brother’s diagnosis of a heart condition in his youth was a wakeup call for the rather sedentary Vikas, and that is when he started focusing on his health more. For the first time in his life, he began to appreciate the power of nutrition and experimented with different diets and supplements for their health benefits. His quest for better health also motivated him to take up hiking, marathon running, squash and, eventually, a summit of the Everest.

Back in the Himalayas, after a string of sleepless nights, Vikas and his team ascended to Camp 2 (6,500m) as planned, and then descended to Base Camp for the basic luxuries - hot shower, hot lunch and essential supplements. Back up at Camp 2, the weather played spoiler again as a jet stream - a fast-flowing, narrow air current - moved right over the mountain. Wisdom from the mountains helped Vikas maintain perspective as they were required to descend 15km to Pheriche Valley. He accepted that “strength lies not merely in chasing the big dream, but also in...accepting that things could go wrong.”

At Camp 4 (8,000m), famously known as the death zone, Vikas caught a clear glimpse of the summit – his dream standing rather tall in front of him.

It was the 18th of May 2018 and Vikas finally reached the top. The top of his Everest…the top of Mount Everest!

Watch the video below to see actual moments from Vikas’ climb.

Play

Vikas credits his strength to dedication, exercise and a healthy diet. He credits dietary supplements for helping him sustain himself in the inhuman conditions on Mount Everest. On heights like these where the oxygen supply drops to 1/3rd the levels on the ground, the body requires 3 times the regular blood volume to pump the requisite amount of oxygen. He, thus, doesn’t embark on an expedition without double checking his supplements and uses Livogen as an aid to maintain adequate amounts of iron in his blood.

Livogen is proud to have supported Vikas Dimri on his ambitious quest and salutes his spirit. To read more about the benefits of iron, see here. To read Vikas Dimri’s account of his expedition, click here.

This article was produced by the Scroll marketing team on behalf of Livogen and not by the Scroll editorial team.