UPSC Prelims 2018 Q17: Science & Technology – Computer & Information Technology
- (a) 1 only
- (b) 2 only
- (c) Both 1 and 2
- (d) Neither 1 nor 2
Answer: (c) Both 1 and 2
Explanation
Aadhaar Open APIs - Implications
| Statement | Claim | Verdict | Detail |
|---|---|---|---|
| 1 | Open APIs mean Aadhaar can be integrated into any electronic device | TRUE | UIDAI publishes open APIs (Auth API, e-KYC API, OTP API, biometric API) that any authorised device / application / service provider can integrate, following UIDAI licensing and STQC-certified biometric devices. |
| 2 | Online authentication using iris is possible | TRUE | Aadhaar authentication supports biometric (fingerprint + iris) and OTP-based modes. UIDAI-certified iris scanners are widely deployed at banking correspondents, PDS shops and ration outlets. |
Answer: (c) Both 1 and 2.
Why each option is right or wrong
- (a) Incorrect. Statement 2 is also right - Aadhaar auth supports iris scan as one biometric modality.
- (b) Incorrect. Statement 1 is correct - open APIs enable integration into diverse devices/apps.
- (c) CORRECT. Both statements are true - Aadhaar's open APIs support wide device integration and iris-based authentication.
- (d) Incorrect. Both statements are established features of the Aadhaar auth stack.
Key point
Aadhaar auth modes: Demographic, OTP, biometric (fingerprint + iris), and multi-factor. Open APIs = published by UIDAI = integrable by any licensed AUA/KUA. Iris auth is fully supported.
Remember
Aadhaar exposes open, documented APIs that licensed entities can integrate into a wide variety of electronic devices and applications. Its authentication supports multiple modes including OTP, fingerprint, iris and face - so online authentication using iris is very much possible and widely used at banking correspondents and ration outlets.
Common mistakes
- Assuming iris auth is theoretical - it is production-grade and used widely in PDS, banking correspondents and enrolment.
- Thinking 'open API' means unauthenticated public API - it is open (documented) but access is licensed to authorised entities.
- Confusing Aadhaar APIs with UPI APIs - both are NPCI/UIDAI open-tech stacks but serve different domains.
Exam tip
Aadhaar tech stack: Auth APIs + e-KYC + Aadhaar Enabled Payment System (AePS) + DigiLocker. Iris + fingerprint + face auth all supported. Devices must be STQC/UIDAI certified.
Sources
- UIDAI - Aadhaar Authentication API Specification (v2.5)
- UIDAI - Aadhaar Biometric Standards and STQC Certification