Pramod,
If your clarification is not perceived
as “ official “ , then how will public believe me ?
Warm Regards,
Hemen Parekh
+91 98675 50808
From: Pramod Varma
[mailto:pramodkvarma@gmail.com]
Sent: 04 April 2018 17:10
To: Hemen Parekh
Subject: Re: WHO IS TRYING TO FOOL WHOM ?
Sent: 04 April 2018 17:10
To: Hemen Parekh
Subject: Re: WHO IS TRYING TO FOOL WHOM ?
Thank you Helen Ji. Yes please clarify. You
need not name me or attribute it to me. You can simply say that your questions
were clarified regarding VID and its reversibility and design takes care of
your concern. Hence you are clearing any confusion arising from earlier email.
Much appreciated!
Regards,
Pramod.
Sent from mobile. Please excuse typos.
Sent from mobile. Please excuse typos.
On Wed, 4
Apr 2018, 5:05 pm Hemen Parekh, <hcp@recruitguru.com>
wrote:
Pramod,
Thanks for your prompt clarification .
It helps clear doubts
Can I share it with others ?
Warm Regards,
Hemen Parekh
+91 98675 50808
From: Pramod Varma
[mailto:pramodkvarma@gmail.com]
Sent: 04 April 2018 15:42
To: Hemen Parekh
Subject: Re: WHO IS TRYING TO FOOL WHOM ?
Sent: 04 April 2018 15:42
To: Hemen Parekh
Subject: Re: WHO IS TRYING TO FOOL WHOM ?
- to avoid spamming everyone in cc, just replying to you
Just to clarify. VID number is a completely random number and NOT
generated from an Aadhaar number. That means with whatever algorithm and AI or
big data, Aadhaar number CANNOT be reverse engineered from VID. Both numbers
are NOT correlated through an algorithm, but, simply linked. In addition, VID
is revocable and hence has a short temporary life span making it useless to
store in databases of various agencies. More at https://uidai.gov.in/your-aadhaar/help/faqs.html#virtual-id
Hope you can avoid spreading confusion further. Thanks for your
understanding.
Regards, Pramod.
On Wed, Apr 4, 2018 at 10:34 AM,
Hemen Parekh <hcp@recruitguru.com>
wrote:
Where Angels Fear
to Tread ?
------------------------------------
Today’s Times of India carries following news :
Unique
Identification Authority of India (UIDAI) has launched the much-awaited 'Virtual
ID' which will be a
random 16-digit number mapped to a person's Aadhaar number.
The concept of Virtual ID was announced earlier this year to address privacy concerns. The new feature will allow Aadhaar holders to quote their Virtual ID (VID) number without actually disclosing the 12-digit Aadhaar number for authentication or verification purposes.
UIDAI had stated that
it will be compulsory for all agencies that undertake authentication to accept
the VID from their users from June 1, 2018.
According to UIDAI in
the beta form, users can generate their Virtual ID and use it to update address
in Aadhaar online for the time being.
..Soon, service
providers will start accepting VID in place of Aadhaar number.
For now, you can use
this for online address update in your Aadhaar,"
the UIDAI said in a tweet.
The tweet urges the
users to generate their VIDs and gives a link of the Aadhaar website for the
same. The VID would give any authorised agency details like name, address and
photograph, which are enough for any verification.
After the concept of Virtual ID was announced , on 12
Jan 2018, I sent following questions ( as email ) to UIDAI , hoping that they
will come forward with clarifications :
Aadhar Virtual ID Compromised ? [ 12 Jan 2018 ]
QUESTIONS :
Are
VIRTUAL ID numbers generated using some Random
Number Generator ( such as PRNG =
Pseudo Random Number Generator / TRNG =
True Random Number Generator ) ?
· Do
both types of Generators depend upon some software
algorithm ? ( - a somewhat deterministic logic )
· Considering
the Aadhar Virtual ID requirement ( viz : generation of data encryption keys )
, is it more likely that UIDAI is using TRNG ?
· If
, given a starting number ( original / real Aadhar Number ) , TRNG generates a “ linked “ RANDOM NUMBER , is it possible to REVERSE this process ?
· Using BIG DATA / DATA
ANALYTICS /
Artificial Intelligence /
MACHINE LEARNING etc , can one figure out the ORIGINAL / REAL
Aadhar Number , from its counter-part Virtual Number ?
Over
a period of few months, it is likely that the servers of those Agencies , may
have billions of sets of linked “ Real Numbers / Virtual Numbers “
Could
such a large enough database ( if some hacker can lay his hand on it ) , be
enough for a software geek to design a Neural Network ( backward
propagation / forward
propagation ) , to reverse the process ?
I
am tempted to believe that such a scenario is entirely possible !
Since there is no reply from UIDAI , today’s Question
( to the Users of Aadhar ):
Is someone trying to pull the wool over our eyes
?
04 April 2018
www.hemenparekh.in
/ blogs
No comments:
Post a Comment