A National e-Authentication Service e-Pramaan A National e-Authentication Service

State of Art Disparate methods of authentication across e-Gov Services Unsecured communication channel for credential exchange in multiple cases Non-availability of standard for e-Authentication for public services Need for multi-factor authentication Increase in online services leads to multiple login credentials Possibility of phishing attacks

e-Pramaan e-Pramaan is envisaged by Ministry of Electronics and Information Technology (MeitY) to provide a uniform standard based secured authentication mechanisms for all government departments. e-Pramaan offers - secure authentication with four levels (password, OTP, Digital Certificate, Biometrics) of assurances ; credentials of users using different e-Governance services; SAML 2.0 (Security Assertion Markup Language) based SSO (Single-Sign On) implementation; and much more….

e-Pramaan e-Pramaan Authenticate user Services User Successful authentication Login

e-Pramaan Password One Time Password Digital Certificate Biometric Basic authentication with username and password; Image password also available Email, Mobile or Mobile app based OTP Digital Certificate Biometric Authentication via hardware or software token Aadhaar based finger print / iris authentication

Features skoch order of merit 7 Standard based multifactor strong e-Authentication development Java, PHP, Dotnet Support Single Sign On (SSO) – SAML 2.0 feature across all integrated services Flexible Authentication Chaining for Services Secure communication channel Seamless upgrade to new technologies Two way authentication Role based First Level of Authorization skoch order of merit Support for Aadhaar based Authentication 7

User Registration Options - - - - - - - - - - - - - - - - - - - - - - - - - - A - - -> - - -> Without Id Proof Driving Licence UIDAI CBDT ECI PASSPORT

Integration as multiple services Department / SP Service I Service ID: 10001 Auth Level: Pwd + OTP e-Pramaan Authentication Framework Service II Service ID: 10002 Auth Level: OTP + DSC Service n Service ID: 1000x Auth Level: BIO + OTP e-Pramaan Connector, Connector might be Java/.Net/PHP depending on services

Single portal with multiple services Department / SP Service I Service ID: 10001 Auth Level: Pwd + OTP e-Pramaan Authentication Framework Connector Service II Service ID: 10002 Auth Level: OTP + DSC Service n Service ID: 1000x Auth Level: BIO + OTP One time integration effort across multiple services Independent authentication options for each services Can be used where single connector (Java / PHP/ .Net) is used for multiple services.

Login through e-Pramaan Integration Process Service Portal Username Password Login Login through e-Pramaan User Service Portal e-Pramaan Portal Service Portal User Login SSO Request creation Authentication SSO token & User Logged IN Service Portal e-Pramaan Portal Service Portal User Log out SLO Request creation Session clear Session clear & Successful Logout

Current User ID Mapping Options Departments can mandate if they want users with only valid Aadhaar (a particular ID proof) Three levels of mapping of users is supported: Aadhaar based Service User ID based e-Pramaan ID based The services can select any of these for mapping their users depending upon the requirements of the service. Support for Role based user mapping A

Integration Setups Integration & Testing Service e-Pramaan Staging server On Successful Completion Integration Service e-Pramaan Production server

C-DAC ASA / AUA Aadhaar Ecosystem e-Pramaan Service AUA UIDAI Data Centre ASA Government Departments/ Private Organizations Authentication Service (demographic, biometric) Best Finger Detection (BFD) One Time Password (OTP) Aadhaar Mobile Update e-KYC Service

C-DAC ASA / AUA Activities ASA-AUA /e-KYC Set-up up and running in production Connectivity to SDC Bangalore Established ASA Migration from TLS 1.0 to TLS 1.2 Mobile Update Application ASA-AUA Activities Connectivity to Manesar DC 33 Departments integrated with more than 1 Cr transactions so far Client Portal

New Features Mobile App of e-Pramaan Image Password Automation URLs filling during SP registration In Progress- IRIS based authentication Integration with Driving Licence Authority for ID

Statistics Department 49 3,872 33 1,31,52,192 Transactions e-Pramaan ASA-AUA ASA-AUA

Thank You!