Government of India Department of Electronics and Information

Government of India Department of Electronics and Information Technology Ministry of Communications and Information Technology

1 Meaning Hindi English e-Pramaan e-Authentication

2 • Need Several e-Governance initiatives undertaken across country • • Increasing need for e-Authentication of users accessing online services through web/mobile Lack of standard, consistent and robust e-Authentication mechanisms • Inadequate and disparate across various applications • Mostly offline methods • Lack of uniformity in the authentication methods • Different ID proofs needed for accessing similar public services

3 Objectives 1 • Consistency in government processes for e-Authentication 2 • Services are delivered to the authorized recipient 3 • To avoid duplication of authentication infrastructure and reduce the cost and efforts 4 • Enable Single Sign-on across various government applications 5 • Incorporate Aadhaar based authentication in e-Authentication mechanisms 6 • Guidelines for determining the authentication assurance levels

4 Implementation Approach Framework Specifications and Guidelines e-Pramaan as a Service e-Pramaan as pluggable authentication components

e-Pramaan: The Framework

5 Framework | Key Components Identity Management Authenticatio n Credential Registration Single Sign. On Website Authenticatio n Fraud Management

6 Level 1 Level 3 Framework | Authentication Levels Level 2 Level 4

e-Pramaan: Specifications & Guidelines

7 Specifications and Guidelines Incorporates Global Standards in e. Authentication • IEEE, NIST • Supporting Text Collaborative • Developed in consultation with industry and academia • Supporting Text Open

8 Standards Incorporated HMAC based (HOTP) RFC 4868 Time based OTP (TOTP) RFC 6238 SMS/Email based OTP RFC 2289 PKI/Digital Certificates X. 509 v 3 certificate standard, as specified in RFC 5280 Biometrics IEEE, ISO, NIST Demographics Standards issued by Govt. of India SSO SAML v 2. 0 Communication SSL 3. 0/TLS 1. 0 Encryption RSA 2048/ECC/AES

e-Pramaan: The Project

9 e-Pramaan - Authentication as a Service Authenticated

10 e-Pramaan in e. Gov ecosystem

11 • e-Pramaan Value Proposition Shared infrastructure for e-Authentication needs • • • Value Addition to Aadhaar authentication • • Easy on-boarding – minimal change at the application level of department Saving cost, time and other resources Obviates the need of departments being AUA Provide ASA services Centralized AUA/ASA service – so implementation issues, reporting, fraud monitoring etc will be handled at one place Enable federated authentication – will allow use of other credentials as PAN, passport etc as per the requirement of departments PKI (Digital Signature) based authentication also included Single Sign-on Authentication even for mobile based delivery of services Fraud Management

Thank You www. epramaan. gov. in