The identity platform 'Aadhaar' provides open "Application Programming Interfaces (APIs)". What does it imply? 1. It can be integrated into any electronic device. 2. Online authentication using iris is possible. Which of the statements given above is/are correct?

Updated 11 Apr 2026 · From UPSC Prelims GS Paper I 2018, Q64

Contents15
UPSC Prelims GS2018Indian Economy
  1. A1 only
  2. B2 only
  3. CBoth 1 and 2
  4. DNeither 1 nor 2
Show answer

Answer: (C) Both 1 and 2

Correct Answer: (c) Both 1 and 2

Both statements are correct:

  1. Statement 1 is CORRECT: Aadhaar provides open APIs (Application Programming Interfaces), which means any electronic device or system — whether ATMs, mobile phones, computers, or biometric scanners — can connect to and use Aadhaar's verification services. Think of an API as a universal plug that lets different devices talk to the Aadhaar system.

  2. Statement 2 is CORRECT: Aadhaar Authentication works by sending a person's Aadhaar number along with their details (like fingerprint or iris scan) to the central database (called CIDR — Central Identities Data Repository). The database then checks if the information matches and sends back a simple 'Yes' or 'No' — it does not reveal any personal data. This makes it useful for verifying identity for services like banking, ration distribution, etc.

REMEMBER: Aadhaar APIs = can be used by any electronic system (open). Authentication = only gives Yes/No response, doesn't share personal data.

Why this was asked

Aadhaar's open APIs allow any electronic device or system to connect and use its identity verification services, making it the backbone of India's digital identity infrastructure.

By 2018, Aadhaar had become central to financial inclusion schemes like Jan Dhan accounts and DBT, making its technical capabilities a relevant exam topic.

The question tests understanding of how Aadhaar's technical architecture enables widespread integration across different systems and authentication methods.

Aadhaar API System

Science And Technology Application Programming Interfaces APIs electronic device

Aadhaar API System: Open Integration & Device Compatibility

Must know

Aadhaar APIs are open interfaces that allow any electronic device to connect to Aadhaar verification services

Open APIs mean universal compatibility — ATMs, mobile phones, computers, biometric scanners can all integrate

Good to know

API acts like a universal plug enabling different systems to communicate with Aadhaar database

What are APIs

Application Programming Interfaces (APIs) are software bridges that allow different systems to communicate with each other. Aadhaar's open APIs mean any developer or organization can integrate Aadhaar services into their electronic systems without restrictions.

API Integration Examples

Device/System

Use Case

How API Works

ATMs

Cash withdrawal verification

Sends fingerprint → gets Yes/No response

Mobile Apps

Banking, wallet authentication

Sends OTP/biometric → instant verification

POS Machines

Ration shop distribution

Scans iris/finger → confirms beneficiary

Government Portals

Subsidy disbursement

Links bank account → validates identity

Open API Benefits

Universal Integration: Any electronic device can connect without special permissions

Scalability: Millions of devices can use the same API simultaneously

Cost Efficiency: No need to build separate identity verification systems

Standardization: Same authentication process across all platforms

Exam traps

Trap: 'Open APIs' doesn't mean Aadhaar data is publicly accessible — it means the interface to verify identity is open

Confusion: API integration capability ≠ data sharing. APIs only provide Yes/No authentication responses

Aadhaar Authentication Process

Science And Technology Online authentication iris authentication

Aadhaar Authentication: Biometric Verification & Privacy Design

Must know

Iris authentication is possible online through Aadhaar's biometric verification system

Authentication sends only Yes/No response — never shares personal data from CIDR

Good to know

CIDR (Central Identities Data Repository) stores biometric data and processes verification requests

Authentication Process

%%{init: {"flowchart": {"wrappingWidth": 460}}}%%
flowchart TD
  s1["`**Biometric Capture**
Device scans **iris/fingerprint** and captures Aadhaar number`"]
  s2["`**Data Transmission**
Encrypted biometric + Aadhaar number sent to **CIDR**`"]
  s3["`**Database Match**
CIDR compares received data with stored biometric template`"]
  s4["`**Response**
System returns **'Yes' (match) or 'No' (no match)** — no personal data shared`"]
  s1 --> s2
  s2 --> s3
  s3 --> s4

Biometric Authentication Methods

Method

Accuracy

Use Cases

Online Capability

Fingerprint

High

Banking, POS, mobile apps

✓ Yes

Iris Scan

Highest

High-security applications, rural areas

✓ Yes

Face Recognition

Medium

Mobile verification

✓ Yes

OTP

Demographic only

Basic authentication

✓ Yes

Privacy Protection

No Data Sharing: Authentication never reveals name, address, or personal details

Encrypted Transmission: Biometric data is encrypted during transmission to CIDR

Minimal Response: System only confirms if the person is who they claim to be

Audit Trail: All authentication requests are logged for security monitoring

Exam traps

Trap: Online iris authentication IS possible — don't confuse it with requiring physical presence

Privacy Misconception: Authentication ≠ data sharing. Only Yes/No response is given, not personal information

Aadhaar Infrastructure Components

Indian Polity Aadhaar

Aadhaar Infrastructure: UIDAI, CIDR & Enrollment System

Must know

UIDAI (Unique Identification Authority of India) is the statutory body managing Aadhaar

CIDR stores biometric and demographic data of all Aadhaar holders

Good to know

Aadhaar covers 99%+ of adult population making it world's largest digital identity system

Aadhaar System Architecture

# Aadhaar Infrastructure
## **UIDAI**
- Policy formulation
- Technology standards
- Authentication oversight
- Data security
## **CIDR**
- Biometric storage
- Demographic data
- Deduplication engine
- Authentication processing
## **Enrollment System**
- Registration centers
- Mobile enrollment
- Document verification
- Quality checks
## **Authentication Network**
- API services
- Device certification
- Service providers
- Security protocols

Key Milestones

Year

Milestone

Significance

2009

UIDAI established

Legal foundation for digital identity

2010

First Aadhaar issued

Beginning of enrollment process

2016

Aadhaar Act passed

Legal backing and privacy framework

2018

Supreme Court judgment

Limited mandatory usage, privacy safeguards

Technical Specifications

12-digit unique number generated using demographic and biometric deduplication

10 fingerprints + 2 iris scans stored as encrypted templates, not images

99.9% uptime for authentication services with multiple data centers

Multilingual support for enrollment and authentication across India

Digital Identity Applications

Indian Economy

Digital Identity Applications: Financial Inclusion & Government Services

Must know

JAM Trinity (Jan Dhan-Aadhaar-Mobile) enables direct benefit transfer to beneficiaries

DBT (Direct Benefit Transfer) uses Aadhaar to eliminate intermediaries in subsidy distribution

Good to know

Aadhaar authentication reduces identity fraud and duplicate beneficiaries in welfare schemes

Major Applications

Sector

Application

Benefit

Authentication Method

Banking

Account opening, KYC

Instant verification

Biometric + OTP

PDS

Ration distribution

Eliminates bogus cards

Fingerprint/Iris

MGNREGA

Wage payments

Prevents ghost workers

Biometric attendance

LPG Subsidy

PAHAL scheme

Direct cash transfer

Bank account linking

Telecom

Mobile connections

eKYC process

OTP-based verification

Economic Impact

₹1.78 lakh crore savings in subsidy leakages through DBT

Financial inclusion: 50+ crore Jan Dhan accounts linked to Aadhaar

Reduced transaction costs: Digital KYC vs physical document verification

Rural banking: Micro-ATMs using Aadhaar authentication in villages

Exam traps

JAM Trinity confusion: Jan Dhan (bank accounts) + Aadhaar (identity) + Mobile (delivery channel) — all three components are essential

Mandatory vs voluntary: Post-2018 SC judgment, Aadhaar is mandatory only for PAN, subsidies, and government schemes