Aadhaar face authentication: How the new rules enable secure, consent-based offline verification for events, hotels, and deliveries

Face authentication has been legitimised by the Unique Identification Authority of India (UIDAI), marking it as a significant change in handling online identities. This technology enables Aadhaar cardholders to authenticate their Aadhaar online by using their faces and matching them with their Aadhaar enrolment photo. This is facilitated by giving utmost importance to their consent, allowing them to manage their data whenever and however they feel like. Rules have been updated under Digital Personal Data Protection (DPDP), making offline Aadhaar verification possible so that Aadhaar credentials are secured without reliance on online servers. With the launch of an updated Aadhaar application soon, operations involving events, hotel check-ins, deliveries, and access are expected to become easier and more privacy-oriented.

Understanding face authentication: New Aadhaar verification method

Face recognition is a 1:1 consented method of verification. The facial image taken during the time of verification is matched with the Aadhar photo present in the UIDAI giant database at the time of enrolment. On successful matching, the identity of the individual is established. In contrast to fingerprinting and iris scanning, face recognition can be easily done even in scenarios where other biometric verification systems are not convenient or even feasible, for instance, at the time of entering an event, hotel, or gated community.

Previously, face verification had very limited legal recognition and mainly only applied to governmental functions. Currently, the new set of rules by Aadhaar gives full legal recognition to face verification as a valid legal means of verification, along with OTP, biometric, and other secure means. It also significantly enhances offline verification of Aadhaar by allowing users to conveniently share digitally signed copies of credentials through trusted apps or QR codes without needing to directly access the UIDAI server.

Significance of face authentication in Aadhaar verification

The Unique Identification Authority of India (UIDAI) organised a webinar on offline Aadhaar verification before the launch of the Aadhaar App. More than 250 people attended the webinar and learned about the functionality and uses of offline Aadhaar verification. UIDAI informed the participants how this process helps with the secure verification of identity without compromising identity protection by not requiring the Aadhaar cards themselves.

This Aadhaar App will enable the user to share their own or their select family members’ Aadhaar information and provide advanced features for identity protection and updates by mobile or address. Face authentication proves the presence of the Aadhaar card holder at the verification location and satisfies the proof of presence criterion by confirming the Aadhaar card holder’s presence at the verification location. UIDAI officials state that face authentication doesn’t send any authentication information to the central server, and hence face authentication or face recognition technology is secure and superior to the previous methods.

Aadhaar privacy and consent: Ensuring secure identity verification

According to PIB, the key aspect highlighted in the new guidelines is that Aadhaar must only be used for specific reasons and must follow the consent mechanism. Individuals must now have the authority to accept or reject any Aadhaar-related verification, as well as the facility to disclose only certain information, including age or photo, but not the entire Aadhaar details. This, again, is in accordance with the DPDP Act, which strictly lays down the measures to avoid any potential abuse of personal data.