1. Government of India Department of Electronics and Information Technology Ministry of Communications and Information Technology

2. Meaning 1 HindiEnglish e-Pramaane-Authentication

3. Several e-Governance initiatives undertaken across country Increasing need for e-Authentication of users accessing online services through web/mobile Lack of standard, consistent and robust e-Authentication mechanisms Inadequate and disparate across various applications Mostly offline methods Lack of uniformity in the authentication methods Different ID proofs needed for accessing similar public services Need 2

4. Consistency in government processes for e-Authentication 1 Services are delivered to the authorized recipient 2 To avoid duplication of authentication infrastructure and reduce the cost and efforts 3 Enable Single Sign-on across various government applications 4 Incorporate Aadhaar based authentication in e-Authentication mechanisms 5 Guidelines for determining the authentication assurance levels 6 Objectives 3

5. Implementation Approach 4

6. e-Pramaan: The Framework

7. Identity Management Authentication Credential Registration Single Sign-On Website Authentication Fraud Management Framework | Key Components 5

8. Level 1 Level 2 Level 4 Level 3 Framework | Authentication Levels 6

9. e-Pramaan: Specifications & Guidelines

10. Incorporates Global Standards in e-Authentication IEEE, NIST Supporting Text Collaborative Developed in consultation with industry and academia Supporting Text Open Based on open standards Supporting Text Specifications and Guidelines 7

11. Standards Incorporated 8 HMAC based (HOTP) RFC 4868 Time based OTP (TOTP)RFC 6238 SMS/Email based OTPRFC 2289 PKI/Digital Certificates X.509 v3 certificate standard, as specified in RFC 5280 BiometricsIEEE, ISO, NIST Demographics Demographics Standards issued by Govt. of India SSOSAML v2.0 CommunicationSSL 3.0/TLS 1.0 EncryptionRSA 2048/ECC/AES

12. e-Pramaan: The Project

13. e-Pramaan - Authentication as a Service 9 Authenticated

14. e-Pramaan in eGov ecosystem 10

15. e-Pramaan Value Proposition 11 Shared infrastructure for e-Authentication needs Easy on-boarding – minimal change at the application level of department Saving cost, time and other resources Value Addition to Aadhaar authentication Obviates the need of departments being AUA Provide ASA services Centralized AUA/ASA service – so implementation issues, reporting, fraud monitoring etc will be handled at one place Enable federated authentication – will allow use of other credentials as PAN, passport etc as per the requirement of departments PKI (Digital Signature) based authentication also included Single Sign-on Authentication even for mobile based delivery of services Fraud Management

16. Thank You www.epramaan.gov.in