UIDAI: Aadhaar can't be hacked, vested interests spreading lies

The Unique Identification Authority of India UIDAI on Tuesday dismissed reports of hacking of Aadhaar enrolment software as completely incorrect and irresponsible and said some vested interests were deliberately trying to create confusion among peopleThe denial came after an investigation by HuffPost India revealed that the Aadhaar database which contains the biometrics and personal information of over one billion Indians had been compromised by a software patch which disables critical security features of the software used to enroll new Aadhaar usersAccording to the report any unauthorized person from anywhere in the world can generate Aadhaar ID using the patch which is freely available for Rs 2500 The UIDAI said the claims about Aadhaar being vulnerable to tampering lacked substance and were totally baselessCertain vested interests are deliberately trying to create confusion in the minds of people which is completely unwarranted a statement issued by the organisation said It added that the UIDAI matches all the biometric 10 fingerprints and both iris of a resident enrolling for Aadhaar with the biometrics of all Aadhaar holders before issuing the unique IDUIDAI has taken all necessary safeguard measures spanning from providing standardized software that encrypts entire data even before saving to any disk protecting data using tamper proofing identifying every one of the operators in every enrolment identifying every one of thousands of machines using a unique machine registration process which ensures every encrypted packet is tracked the statement saidIt said all measures to ensure endtoend security of resident data were taken including full encryption of resident data at the time of capture tamper resistance physical security access control network security stringent audit mechanism 24x7 security and fraud management system monitoringEarlier a report by the HuffPost said a software patch available for as little as Rs 2500 lets a user bypass critical security features such as biometric authentication of enrolment operators to generate unauthorised Aadhaar numbers It said the patch also disables the GPS security feature of the software allowing anyone from any location to enroll usersUIDAI clarified that no operator can make or update Aadhaar unless resident himself gives his biometric Any enrolment or update request is processed only after biometrics of the operator is authenticated and residents biometrics is deduplicated at the backend of UIDAI system it saidIt added that as part of its stringent enrolment and updation process UIDAI checks enrolment operators biometric and other parameters before processing the enrolment or updates and only after all checks are found to be successful enrolment or update of the resident is further processedTherefore it is not possible to introduce ghost entries into Aadhaar database UIDAI said that even in a hypothetical situation where a ghost enrolment or update packet is sent to the UIDAI by some manipulative attempt the same is identified by the robust backend system and all such enrolment packets get rejected and no Aadhaar is generatedAlso the concerned enrolment machines and the operators are identified blocked and blacklisted permanently from the UIDAI system Inappropriate cases police complaints are also filed for such fraudulent attempts it saidUIDAI said that the reported claim of anybody is able to create an entry into the Aadhaar database then the person can create multiple Aadhaar cards is completely falseIf an operator is found violating UIDAIs strict enrolment and update processes or if one indulges in any type of fraudulent or corrupt practices UIDAI blocks and blacklists them and imposes financial penalty upto Rs 1 lakh per instance It is because of this stringent and robust system that as on date more than 50000 operators have been blacklisted UIDAI addedIt said that it keeps adding new security features in its system as required from timetotime to thwart new security threats by unscrupulous elementsCatch up on all the latest Crime National International and Hatke news here Also download the new midday Android and iOS apps to get latest updatesThis story has been sourced from a third party syndicated feed agencies Midday accepts no responsibility or liability for its dependability trustworthiness reliability and data of the text Midday managementmiddaycom reserves the sole right to alter delete or remove without notice the content in its absolute discretion for any reason whatsoever