Should India Implement the National ID card scheme?

Weighing the Pros and Cons of the National Id card scheme will allow us to assess the costs and benefits of the National ID card project, enabling us to conclude whether the project should be implemented or not and what manner of fail safes and inbuilt corrective mechanisms are required.

The main costs in implementing a national ID card project include the huge administrative and logistical costs of collecting the required data from India’s 60,000 plus villages and massive cities as well as authenticating and validating this information. Maintaining the UID database is another huge cost and ensuring the efficient and timely production of the physical ID cards with accurate stored bio metric data is another large complication. Dividing up the task between numerous software firms is a way in which costs can be reduced and efficiency can be increased but privacy and the protection of data becomes a worrying issue.

The benefits of implementing a national ID card include an enhanced ability to identify and provide services to individuals below the poverty line, a foundation for the implementation of numerous schemes such as the Citizens Smart Card Project which lead to enhanced governance with reduced costs, elimination of the need for multiple identification mechanisms and the reduced costs associated with such streamlining, a comprehensive voter ID system reducing the current costs associated with authenticating voters at polling station, checks against illegal immigration enabling more efficient border control systems and a large boost to the IT industry as such a large scale project will certainly facilitate the growth of the industry providing employment and resources for research and development as firms develop systems which can be used to implement the national ID card database.

In order to deal with the worrying issue of privacy and the possibility of the data stored on the UID database being exploited, comprehensive rules and regulations must be put in place regarding the sharing and access of information data stored on the database. A body must be created which reviews the national ID cards effects on the privacy of citizens and the security of the information stored on the database. Proper legislation must be created which protects the privacy of individuals by mandating harsh penalties for groups or individuals who attempt to access or abuse the database and a body with the expertise to enforce such regulation must be established, a cyber police force of sorts.

If such measures are put in place to protect the sensitive data stored on the UID card database, the implementation of the National ID card could occur with less risk to the citizens who would be a part of the system and with a coherent, structured and efficient implementation program the benefits of the National ID card system certainly seem to outweigh the costs and potential risks. Even after taking all of this into account, we must remember that the national ID card is still in the early stages of its implementation and there is still time to, as Nanden Nilekani puts it, "balance the benefits with the risks.” and ensure the National ID card system is a success.

History and Current status of the national ID card implementation process.

A National Identity Card scheme for India, referred to as the Multi-Purpose National Identity Card or MNIC, was first initiated in 2002 by the NDA government under Prime Minister A.B Vajpyee and was then continued by the current UPA government led by Prime Minister Manmohan Singh. The UPA government initiated a pilot project of the MNIC scheme in 2008 in 13 districts of 12 states and one Union Territory wherein more than 1.2 million identity cards were issued to people above 18 years of age and in order to facilitate the national ID card project, Section 14A was inserted in the Citizenship Act, 1955 to issue a national identity card to every citizen of the country.

The MNIC project took on a new life after the terrorist attacks in Mumbai on November 26th 2008, coupled with the concerns surrounding illegal immigration and a new body, the Unique Identification Authority of India or UIDAI, headed by Nanden Nilekani, was established on January 27th 2009 to hasten the process of the implementation of the National ID card. The Interim budget presented Mr. Pranab Mukherjee on the 16th February 2009 allocated Rs. 100 Crore towards the establishment of the National Authority of Unique Identity under the National Planning Commission.

The first phase of the National ID car implementation by the UIDAI is expected to cover nine states and four union territories. National ID cards are to be issued to people living in the coastal villages of Gujarat, Maharashtra, Goa, Karnataka, Kerala, Tamil Nadu, Andhra Pradesh, Orissa and West Bengal. The Union Territories of Dadar and Nagar Haveli, Lakshadweep, Puducherry and Andaman & Nicobar Islands shall also be covered in this first phase expected to deliver the identity cards by early 2010. Numerous firms are interested in securing contracts for the implementation of the National ID card in India as such a massive IT project promises to deliver large profits to any companies involved in the implementation of the scheme. Firms, which are interested in the National ID card scheme, include TCS, Infosys, Wipro, HCL Technologies, along with smaller players like Spanco, Bartronics, Gemini Traze and NXP Semiconductors.

The final goal of the Nationl ID card project is to provide every citizen in the country with a national ID card and unique identifying number linked to a comprehensive database which is operated and controlled by the UIDAI by 2012. The UIDAI will be responsible for “creating and maintaining the core database and to lay down all necessary procedures for issuance and usage of UID including arrangements for collection, validation and authentication of information, proper security of data, rules for sharing and access to information, safeguards to ensure adequate protection of privacy and all aspects related to all of these issues.”

National ID cards and privacy.

There are many criticisms of the National Identity Card with respect to its impact on privacy including the fact that citizen’s personal data will now be concentrated in one location, rendering the information more vulnerable to abuse, exploitation, dissemination and disclosure then if it were decentralized. The specific risks associated with the concentration and centralization of personal information in the Multipurpose National Identification Card database include; "errors in the collection of information, recording of inaccurate data, corruption of data from anonymous sources, and unauthorized access to or disclosure of personal information."

Many people are also concerned by the lack of security measures in place to properly safeguard citizen’s private, sensitive information as India has no generally established data protection laws such as the USA’s federal privacy statute or the European directive on data protection, and such a lack of regulation could encourage the trading and selling of personal information due to the absence of strong penalization as a deterrent.

Due to the sensitive nature of the data which is to be collected about individuals, rigorous mechanisms and structures for auditing the effect of the MNIC database on citizen’s privacy need to be established. Unfortunately, currently there are no such mechanisms in place and if the National Identity Card authority is to implement new systems or store more data about every individual, there is no body or system which could assess the effects of such an action on the privacy of individuals and provide recommendations or prevent the implementation of privacy eroding add-ons. As a result of this lack of inbuilt oversight and independent, credible review, there can be no proper re-evaluation and regulation of the information the MNIC database collects on individuals.

On the legal front it can be argued that if National ID cards are made compulsory, individuals privacy rights will be greatly eroded as, “International law and India’s domestic law expressly set a standard in tort law and through constitutional law to protect an individual’s privacy from unlawful invasion, under the International Covenant on Civil and Political Rights (ICCPR), ratified by India, an individual’s right to privacy is protected from arbitrary or unlawful interference by the state, the Supreme Court also held the right to privacy to be implicit under article 21 of the Indian Constitution in Rajgopal v. State of Tamil Nadu and India has enacted a number of laws that provide some protection for privacy. For example the Hindu Marriage Act, the Copyright Act, Juvenile Justice (Care and Protection of Children) Act, 2000 and the Code of Criminal Procedure all place restrictions on the release of personal information”.

National ID cards and Poverty elevation.

Poverty reduction is one of the main issues the Indian Government is dealing with. Unfortunately, current anti-poverty schemes are treated with great skepticism due to the large sums of money that never reach their intended recipients. Currently, the Indian Government spends 10% of its budget on subsidies but economists estimate more than half this money fails to reach its intended targets. Fraud is one of the main reasons for this loss of subsidy money and the National Identity Card could address this issue by enabling more reliable identity checks by utilizing the holder’s biometric data stored on the card.

Poverty reduction programs in the form of food and fuel subsidies for individuals below the poverty line also fail due to the incompatibility of Below Poverty Level cards in different states across the nation, since BPL cards only apply to the specific state in which they were issued. Thus, migrant workers who travel to other states in search of work cannot use their old BPL cards. Unlike India’s numerous existing forms of identification, the National ID Card will be recognized around the country ensuring subsidy money reaches the individuals who require it the most.

Currently, the leakage of money intended for the poor is estimated to be around 60% and projections for the national ID card estimate this figure will drop to 10% after large-scale implementation due to the reduction in fraud and enhanced ability to better target subsidies towards individuals who require them by identifying and providing better services to people below the poverty line. This represents enormous savings for the government and the increased effectiveness of poverty reduction programs, as a result of which, unlike most poverty reduction proposals, the national ID card scheme has received near unanimous approval. The national ID card project is also set to become the foundation of the Citizens Smart Card Project, which will enable citizens to avail subsidies on food, energy and education depending on their entitlements, according to the 11th report of the Second Administrative Reforms Commission.

The National ID card could also have wider ranging impacts on poverty elevation in India as it could enable the “financial inclusion” of the two thirds of Indians who do not have bank accounts, providing them with the necessary identification to create a bank account.

National identity card - Smart card technology

India's national ID card is essentially a smart card, a pocket-sized card with embedded integrated circuits which can process data. It can receive an input which is processed, by way of the ICC applications, and delivers it as an output. The National ID card will have 16KB of memory and is designed to uphold the specifications laid out in ISO/IEC 7816, an international standard for smart cards created by the international organization for standardization (ISO) and the International Electrotechnical Commission (IEC). The cards are designed to support a minimum of 300,000 EEPROM write cycles and will retain data for at least 10 years (Source: Government Tender notice for card manufacturers)

The government press release describes the card as:

"The identity card being given to each individual citizen, has a micro processor chip with a memory of 16 KB which is a secure card. Besides having several physical feature into the design of the card, it is the cyber security using ‘asymmetric key cryptography’ and ‘symmetric key cryptography’ that has made the card secure against the risk of tempering and cloning. The National Informatics Centre has made a major contribution towards developing the processes for database management and smart card technology."

Linking the National Identity Number with other government databases

Worrying signs of Wear

UK’s “unhackable” national ID card hacked in 12 minutes

• 12 Comments
• Share

by Devin Coldewey on August 6, 2009

Remember the national ID cards the UK spent billions on, then forgot to distribute readers for? Well, there’s another bump on that particular road, namely that the security around your private information is about on the level of “cookie jar.” A hacker with a phone and laptop, hired by a UK newspaper, cloned the card within a few minutes, then wrote new content onto it: “I am a terrorist — shoot on sight.” Imagine if that showed up on the checkpoint scanner while you were going through customs. Guess it’s lucky they don’t have the scanners yet!

This is only the latest misstep in the unpopular and poorly-managed national ID program over there. It’s really simple, guys. No critical information should be able to be skimmed from the ID. If you must put it digitally on the card, there’s enough space in a 128KB memory chip to fit a picture, all relevant information, and have it all encoded with 128-bit encryption only decodable by proprietary hardware with line of sight.

And, of course, those fragile chips are so vulnerable to damage. Who could blame someone if the memory component was rendered unreadable… accidentally, of course?

Source: http://www.crunchgear.com/2009/08/06/uks-unhackable-national-id-card-hacked-in-12-minutes/

Objectives of the Omniscient ID card

Objectives of the National ID card project

Obviate need for multiple documentary proof

Facilitate easy verification

Facilitate easy availing of government or private services

Help welfare programmes reach intended beneficiaries

Serve as basis for e-governance services

The ID shall also serve the following purposes

To prepare a National Population Register (NPR)

To prepare National Register of Indian Citizens (NRIC)

To prepare National Register of Residency (NRR) – for non-citizens

To provide National Identity Number (NIN) to each person

To provide Multi-purpose National Identity Card (MNIC) to each citizen

To provide Multi-purpose Residency Card to non-citizens

The Agency ready for Action

An agency of the Indian government, the unique identification authority of India has been tasked with implementing the multi purpose identification card by providing all Indians with a unique identification number and data basing information about residents along with their basic biometric data. The agency was established in the February of 2009 and holds a cabinet rank under the planning commission of India. The national ID card project is estimated to create 100,000 new jobs in the country, and business opportunities worth Rs 6,500 crore (US$ 1.34 billion) in its first phase. In order to get the ball rolling for the agency, the Union Labor Ministry has offered its verified Employment Provident Fund (EPFO) database of 42 million citizens as the first database to be integrated into the unique ID system.

The primary role of the UID Authority will be responsible for creating and maintaining the core database. The UID will also establish all necessary procedures for issuance and usage of UID. These include arrangements for collection, validation and authentication of information, proper security of data, rules for sharing and access to information and safeguards to ensure adequate protection of privacy.

Here is the official press release from the Indian Government regarding the nation ID card project. http://pib.nic.in/release/release.asp?relid=44711

The Man behind the Madness

Nandan Nilekani: Best known around the world as the man who inspired Thomas L. Friedman's book "the world is flat", Nanden Nilekani is currently the head of the Unique Identification Authority of India , charged with implementing the national identity card, and is the former CEO and MD of Infosys Technologies, one of India's largest private IT companies, employing more than a 103,905 software professionals.

To get a feel for the man and his view of the world check out his enthralling and insightful TED talk http://www.ted.com/talks/lang/eng/nandan_nilekani_s_ideas_for_india_s_future.html

National identity cards; current status, networks, stakeholders, values, conflicts, and research

The National ID card technology in its current form:

- Biometric details such as fingerprints and photo ID can be stored on existing microchips embedded in identity cards.

- Data basing tools and servers are available though updating and creating the systems for 1.1 billion people is challenging at best. - National data bases need to be constructed

- Access / interface software systems are available and these can be utilized by multiple government organizations to disseminate information.

- Project timetable; 3 years to implement the project, including a one year pilot programme which would involve a 100 million people.

Larger Network of Technologies:

- Data base required to store information such as name, age, sex, address, photo ID, unique ID number, fingerprints.

- Network such as the internet which would require servers.

- Logistics network consisting of grass roots level organization which would enroll and audit citizens in remote areas and spread awareness about the new ID card technology.

Immediate Direct Stakeholders:

- General population

- local administration

- government

- IT firms

- local administration

Indirect Stakeholders

- businesses - banks - insurance

- microcredit organisation

- corrupt government officials - no longer have easy access to loopholes in the system

- illegal immigrants

- individuals in the black market

- NGO's

- Welfare officials

- land owners

- Terrorists

- Security agencies

- political parties

- stakeholders

Values relevant to each stakeholder

- government: Efficiency, organization

- business: Profit maximization

- corrupt government officials: loopholes in the system

- Terrorists: Windows of opportunity, anonymity, freedom of mobility

- immigrants: access to welfare, education and health

- black market: profit, anonymity

- NGO' s: efficiency, transparency

- land owners: order, organization, authenticity

- banks: profits, accountability

- microfinance: reach, penetration

- political parties: reach, penetration, access to voter banks

- security agencies: information

Conflicts

- Privacy VS efficiency

- Personal convenience VS economy wide convenience

- Transparency VS anonymity

- Delivery of basic welfare VS new route to citizenship

- Bureaucracy VS Automation

- Huge start up cost VS Possible long term benefits

- Public sector VS Private sector

- security VS big brother oppression

- Past VS future

- Old India VS New India

- India 1 VS india 2

National Identity Card: 2001 a space odyssey or back to 1984

Hal: "I am putting myself to the fullest possible use, which is all I think that any conscious entity can ever hope to do."

- Arthur C. Clarke 2001 a space odyssey

"People simply disappeared, always during the night. Your name was removed from the registers, every record of everything you had ever done was wiped out, your one-time existence was denied and then forgotten. You were abolished, annihilated: vaporized was the usual word."- George Orwell, 1984,

A national identity card could result in one of these two situations and it is in our best interest to work out which is more likely, as national ID cards are now in the pipeline for countries preparing for the 21st century. India hopes to role out its national ID card in three years and a ministry, led by Nandin Nilekani, one of the biggest names in IT, has already been set up to oversee the process. The UK has also toyed with the idea of a national identity card and Singapore already has the system in place. As population, governance and technology continues to expand, the question of national ID cards will soon become a much more pressing and immediate issue for countries around the globe and the raging debate between efficiency and privacy will continue to grow as citizens around the world decide on how much information and power they are willing to provide to their governments.

The implementation of these cards will require the use of advanced IT data-basing technology, enormous political will and unparalleled logistical organization, not to mention gigantic sums of money and human capital. India's National ID card project has already been labelled one of the biggest IT projects in human history and if China was to follow , one could only guess at the scale and complexity involved.

This blog is aimed at trying to understand the methods by which a country would implement a national ID card project and the reason for doing so, are such initiatives worth the immense costs and complications? Will they help or hinder our society? And in the end, would national ID cards result in a 2001 space odyssey utopia or a 1984 nightmare?