Previous Year Question
The identity platform Aadhaar provides open Application Programming Interfaces (APIs). What does it imply?
It can be integrated into an electronic device.
Online authentication using iris is possible.
Which of the statements given above is/are correct?
Only 1
Only 2
Both 1 and 2
Neither 1 nor 2
Correct Answer: C
Detailed Solution
Statement 1 is correct. An Application Programming Interface (API) is a set of defined protocols and specifications through which different software applications or electronic systems can communicate securely. Aadhaar APIs allow authorised applications and compatible electronic devices to be integrated with the Aadhaar authentication system.
This integration does not mean that open or direct access is provided to Aadhaar’s Central Identities Data Repository. An authentication request is transmitted to UIDAI in the prescribed encrypted format through an authorised Authentication User Agency (AUA) and Authentication Service Agency. Biometric authentication requires Registered Devices that comply with UIDAI standards.
Statement 2 is correct. Aadhaar authentication can be performed through demographic information, a One-Time Password and biometric modalities. Fingerprints and iris can be used for biometric authentication. An iris scanner captures the digital pattern of the eye’s iris, which is transmitted to the UIDAI system as an encrypted authentication request.
During authentication, the requesting entity is generally not provided with the biometric data stored in the Aadhaar database. UIDAI provides an authentication response after performing the matching. This enables identity verification while keeping biometric information protected within the controlled system.
UIDAI currently also provides a Face Authentication facility. This is an extension introduced after the 2018 question and does not alter the validity of iris-based authentication mentioned in the question.