header

e-Pramaan

 

Need for e-Pramaan:

In the current digital world more and more applications/services are offered online at citizen’s doorstep. The spread of web and mobile services has surely simplified life of citizens; however, it has also made it vulnerable. A wall of security which was there due to one’s physical presence is now removed. Possibility of stealing one’s valuable data by forgery is a threat if proper security measures are not taken.

Some of the online services are trying to secure the data and communication by authenticating the user through login- password mechanism. The approach, however, has multiple limitations such as:

A centralized authentication mechanism like e-Pramaan may help solve these issues.

 

NCMC Ecosystem Development

When we identify a person, we use certain attributes such as looks, voice etc. For a computer to recognize a person, below factors can be used.

As seen above, each of the authentication methods has its merits and demerits. None of the above methods may be singled out as foolproof identification and authentication of an individual. The most useful form of authentication will be a combination of these which are commonly known as multifactor authentication.

Envisaging these issues with the growth of Digital India, Ministry of Electronics and Information Technology (Meity) took the initiative to build a standard based uniform authentication framework/ service named "e-Pramaan".

 

e-Pramaan Authentication Levels

e-Pramaan is a standards-based National e-Authentication framework, which facilitates the authentication and security of users accessing various services on mobile and fixed platforms. It is a unique mechanism providing a unified log-in facility through SAML 2.0 based Single Sign-On (SSO) for integrated services. The Single Sign-On feature provides registered users with single window access to all services that are integrated with e-Pramaan.

It offers multi-factor authentication using (password, OTP, digital certificate and biometrics), with additional features comprising configurable chaining of authentication factors, web-site authentication, Aadhaar-based user identity verification and Driving License-based identity verification. This identity-based verification helps to map a virtual identity to a real one.

e-Pramaan is designed to work in tandem with projects like Aadhaar. It aims to consolidate disparate identity documents across government departments including driving license, PAN Etc. under a single digital profile.

e-Pramaan
e-Pramaan levels of authentication

 

Benefits for Integrated Services

Other than the benefits such as cost, time and effort effectiveness, the services integrated with e-Pramaan receive below mentioned benefits.

e-Pramaan
e-Pramaan Integrated Services

 

Benefits for Users

As discussed before, the user gets a single window to access multiple services and hence doesn't have to remember a large number of logins and passwords. The user also gets the assurance that the website (s)he is accessing is not a phishing one and the user data is secured at rest and in transit.

e-Pramaan is also available as a mobile app on https://apps.mgov.gov.in/descp.do?param=0&appid=1265&fb=true

As discussed before, e-Pramaan provides biometrics-based authentication using Aadhaar services. e-Pramaan also uses Aadhaar services to map a user's virtual identity to the real one. A complete Aadhaar ecosystem is built which also provides Aadhaar based services independently.

 

Aadhaar based Authentication and e-KYC Services (ASA-AUA)

C-DAC is empanelled with UIDAI as an Authentication Service Agency (ASA), e-KYC Service Agency (KSA) and Authentication User Agency (AUA) for providing Aadhaar based authentication and e-KYC Services. C-DAC is connected with UIDAI’s Central Identities Data Repository (CIDR) through dedicated network lines for providing secure and prompt authentication service. C-DAC’s ASA and AUA services are available to government departments as well as to registered private organizations.

Services provided by C-DAC ASA AUA are

Thus the authentication services provided by e-Pramaan will go a long way in realising the dream of Digital India, in true sense.

By
Dr Padmaja Joshi
Senior Director
C-DAC, Mumbai