RE: WHO IS TRYING TO FOOL WHOM ?

Dear Pramod,

Thought following might interest you :

https://scienceblog.com/502457/generating-random-numbers-via-laser/?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+scienceblogrssfeed+%28ScienceBlog.com%29

Warm Regards,

Hemen Parekh

+91 98675 50808

3P Consultants \ Strategic Human Resources Consultants

From: Pramod Varma [mailto:pramodkvarma@gmail.com]
Sent: 04 April 2018 18:50
To: Hemen Parekh
Subject: Re: WHO IS TRYING TO FOOL WHOM ?

Actually irreversibility of VID is already in UIDAI docs on the website. I just clarified your specific question.

Regards, Pramod.

linkedin.com/in/pramodkvarma  |  @pramodkvarma

On Wed, Apr 4, 2018 at 5:51 PM, Hemen Parekh <hcp@recruitguru.com> wrote:

Pramod,

If your clarification is not perceived as “ official “ , then how will public believe me ?

Warm Regards,

Hemen Parekh

+91 98675 50808

3P Consultants \ Strategic Human Resources Consultants

From: Pramod Varma [mailto:pramodkvarma@gmail.com]
Sent: 04 April 2018 17:10

To: Hemen Parekh
Subject: Re: WHO IS TRYING TO FOOL WHOM ?

Thank you Helen Ji. Yes please clarify. You need not name me or attribute it to me. You can simply say that your questions were clarified regarding VID and its reversibility and design takes care of your concern. Hence you are clearing any confusion arising from earlier email. Much appreciated!

Regards, Pramod.
Sent from mobile. Please excuse typos.

On Wed, 4 Apr 2018, 5:05 pm Hemen Parekh, <hcp@recruitguru.com> wrote:

Pramod,

Thanks for your prompt clarification . It helps clear doubts

Can I share it with others ?

Warm Regards,

Hemen Parekh

+91 98675 50808

3P Consultants \ Strategic Human Resources Consultants

From: Pramod Varma [mailto:pramodkvarma@gmail.com]
Sent: 04 April 2018 15:42
To: Hemen Parekh
Subject: Re: WHO IS TRYING TO FOOL WHOM ?

- to avoid spamming everyone in cc, just replying to you

Just to clarify. VID number is a completely random number and NOT generated from an Aadhaar number. That means with whatever algorithm and AI or big data, Aadhaar number CANNOT be reverse engineered from VID. Both numbers are NOT correlated through an algorithm, but, simply linked. In addition, VID is revocable and hence has a short temporary life span making it useless to store in databases of various agencies. More at https://uidai.gov.in/your-aadhaar/help/faqs.html#virtual-id

Hope you can avoid spreading confusion further. Thanks for your understanding.

Regards, Pramod.

linkedin.com/in/pramodkvarma  |  @pramodkvarma

On Wed, Apr 4, 2018 at 10:34 AM, Hemen Parekh <hcp@recruitguru.com> wrote:

Where  Angels   Fear  to  Tread   ?

------------------------------------

Today’s Times of India carries following news :

“ Aadhar  privacy concerns : UIDAI launches Virtual ID “

https://timesofindia.indiatimes.com/india/uidai-launches-virtual-id-to-address-privacy-concerns-related-to-aadhaar/articleshow/63605078.cms

Unique Identification Authority of India (UIDAI) has launched the much-awaited 'Virtual ID' which will be a random  16-digit  number mapped to a person's Aadhaar number.

The concept of Virtual ID was announced earlier this year to address privacy concerns. The new feature will allow Aadhaar holders to quote their Virtual ID (VID) number without actually disclosing the 12-digit Aadhaar number for authentication or verification purposes.

UIDAI had stated that it will be compulsory for all agencies that undertake authentication to accept the VID from their users from June 1, 2018.

According to UIDAI in the beta form, users can generate their Virtual ID and use it to update address in Aadhaar online for the time being.

..Soon, service providers will start accepting VID in place of Aadhaar number.

For now, you can use this for online address update in your Aadhaar," the UIDAI said in a tweet.

The tweet urges the users to generate their VIDs and gives a link of the Aadhaar website for the same. The VID would give any authorised agency details like name, address and photograph, which are enough for any verification.

After the concept of Virtual ID was announced , on 12 Jan 2018, I sent following questions ( as email ) to UIDAI , hoping that they will come forward with clarifications :

Aadhar Virtual ID Compromised ?  [  12  Jan  2018  ]

https://myblogepage.blogspot.in/2018/01/aadhar-virtual-id-compromised.html

QUESTIONS  :

     Are VIRTUAL ID numbers generated using some Random Number Generator ( such as PRNG =  Pseudo Random Number Generator / TRNG = True Random Number Generator ) ?

·         Do both types of Generators depend upon some software algorithm ? ( - a somewhat deterministic logic )

·         Considering the Aadhar Virtual ID requirement ( viz : generation of data encryption keys ) , is it more likely that  UIDAI is using TRNG ?

·         If , given a starting number ( original / real Aadhar Number ) , TRNG generates a “ linked “ RANDOM NUMBER , is it possible to REVERSE this process ?

·         Using BIG DATA  /  DATA ANALYTICS  /  Artificial Intelligence /  MACHINE LEARNING etc , can one figure out the ORIGINAL / REAL Aadhar Number , from its counter-part Virtual Number ?

Over a period of few months, it is likely that the servers of those Agencies , may have billions of  sets of linked “ Real Numbers / Virtual Numbers “

   

Could such a large enough database ( if some hacker can lay his hand on it ) , be enough for a software geek to design a Neural Network ( backward propagation / forward propagation ) , to reverse the process ?

I am tempted to believe that such a scenario is entirely possible !

Since there is no reply from UIDAI , today’s Question (  to  the  Users  of  Aadhar  ):

Is someone trying to pull the wool over our eyes  ?

04  April  2018

www.hemenparekh.in / blogs