Bengaluru: 31-yr-old techie arrested for accessing Aadhaar data

coastaldigest.com news network
August 4, 2017

Bengaluru, Aug 4: Bengaluru city police has arrested a young techie on the charge of accessing Aadhaar data following a complaint filed by the Unique Identification Authority of India (UIDAI) last week.

The arrested is Abhinav Srivastav, 31, an IIT-Kharagpur graduate, who is currently employed by ANI Technologies, which owns the Ola brand, as a software development engineer. He has been accused of accessing Aadhaar information in January 2017 through an app named ‘Aadhaar e-KYC’, which was available on the Google Play store till recently.

Police said Srivastav had developed five apps and made ₹40,000 from advertisements displayed on them. Police are now scanning all his apps to see whether more violations were committed. The Aadhaar e-KYC app was downloaded over 50,000 times from the Google Play store since its launch in January, the police said.

City Police Commissioner T. Suneel Kumar said that based on the complaint, six teams of police comprising 26 personnel were formed to nab Srivastav and they tracked him down to Koramangala after a week. He has been accused of using the services of another app, ‘e-hospital’, which is listed as an authenticated user agency (AUA) authorised to access UIDAI data.

A senior police officer said there were around 400 entities that have been authorised to access the data for authentication. Srivastav’s company was not among those authorised.

A native of Kanpur, Srivastav completed his M.Sc. in Industrial Chemistry from IIT-Kharagpur and joined a private firm in 2010 as a security researcher. He launched Qarth technologies in 2012 and shut it down in 2016 owing to financial reasons. In March 2016, Ola announced that it had acquired Qarth and its mobile payments product, X-Pay. Srivastav then joined another private firm before joining ANI Technologies last year.

Investigation revealed that the e-hospital company is not aware of his activities. However, further probe is on to ascertain the facts.

The ability of a software engineer to bypass strict protocols set in place by the UIDAI to access critical data puts the spotlight firmly on the security measures employed to protect Aadhaar data.

Police investigation have revealed that Srivastav had piggy-backed on the infrastructure of another app for hacking the data base.

“Aadhaar related information, legally housed by the National Informatics Centre server, was illegally and without authorisation accessed and used to support this mobile application,” said the police statement.

Srivastav, in order to give his ‘Aadhaar e-KYC’ app an air of authenticity, hacked into the server of the NIC, which houses the e-hospital system, which is a solution for government hospitals to handle patient care and other services, including medical records management.

As part of its regulations, the UIDAI accords certain agencies the title of an AUA, which can then provide Aadhaar-enabled services to the cardholder. For authentication, these agencies have to connect to the Central Identities Data Repository (CIDR) through the services of a Authentication Service Agency (ASA). ASAs are bound by regulations that stipulate encryption of data and logging of access.

The 'e-hospital’ platform had access as a registered AUA. Srivastav used this server to route his app requests for data access and managed to steal the data, the police said.

Question raised

In 2016, a paper titled ‘Privacy and Security of Aadhaar: A Computer Science Perspective’ by the Computer Science and Engineering Department of IIT-Delhi raised the question of leakage of Aadhaar number from an AUA.

The paper, which also discusses several other possible threat scenarios, said, “This, however, does not fully mitigate the risks and the possibility of leakage of the Aadhaar number from an AUA, either from the database, or during “Know Your Customer” (KYC) processes, or even during availing services, cannot be ruled out. In particular, there appear to be no safeguards or even guidelines, either technical or legal, on how the Aadhaar number should be maintained and used by various AUAs in a cryptographically secure way, and how to prevent the Aadhaar number of an individual from becoming public.”

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 31,2020

Jan 31: President Ram Nath Kovind on Friday hailed the contentious Citizenship Amendment Act as "historic" in his address to joint sitting of both houses of Parliament, prompting protests by some opposition members.

He also said that debate and discussion on any issue strengthens democracy while violence during protests weaken it.

"The Citizenship Amendment Act is a historic law. It has fulfilled wishes of our founding fathers including Mahatma Gandhi," he said.

"Debate and discussions strengthen democracy, but violence during protests weaken democracy," he said without directly referring to the anti-CAA protests in the country some of which have witnessed violence.

In a reference to abrogation of Article 370, Kovind said there is happiness among people of India that people in Jammu and Kashmir and Ladakh have got rights on par with the rest of the country.

The president said Parliament has created record in the first seven months of the new government headed by Narendra Modi by enacting several landmark legislations.

"My government is taking strong steps for making this decade as India's decade and this century as India's century," he said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 10,2020

Bengaluru, Jun 10: Janata Dal-Secular (JD-S) supremo and former Prime Minister H.D. Deve Gowda said on Tuesday that he filed his nomination for the June 19 Rajya Sabha elections from Karnataka in response to a collective call from national leaders to be back in the Parliament.

"Though I was not personally interested to contest, national leaders from Congress President Sonia Gandhi, National Conference President Farooq Abdullah, TMC and Left parties want me back in Parliament," he told reporters here.

Gowda, 87, filed his nomination in the Vidhana Soudha, submitting the papers to Assembly Secretary and Returning Officer M.K. Vishalakshi, a party official told IANS.

Gowda''s second son and former minister H.D. Revanna and third son and former Chief Minister H.D. Kumaraswamy were present on the occasion.

"Our party''s all 34 legislators also urged me to contest as my presence is necessary in Parliament at a time when the country was grappling with multiple crises in the aftermath of coronavirus," said Gowda.

Claiming that there was no pressure from his two sons as they are more concerned with his health, Gowda said he was touched by the requests of the national leaders, especially Gandhi who personally called him and asked him to contest as the country needed his presence in Parliament.

Gowda agreed to contest in the bypoll as his party''s candidate after the Congress state unit assured him of its support with its surplus votes, as the JD-S with 34 legislators is short of 10 votes of the required 44 votes.

It will be second time Gowda will enter the Rajya Sabha, 24 years after he was its member as the Prime Minster from June 1996 to April 1997 of the United Front government.

"Congress General Secretary K.C. Venugopal informed Kumaraswamy on June 6 that the party was fielding only its senior leader Mallikarjun Kharge from Karnataka and had surplus votes to ensure my victory as our party is 10 votes short of the required 44 votes to win," Gowda said.

Kharge filed his nomination on Monday.

Party''s outgoing member Kupendra Reddy, whose 6-year term ends on June 25, told Gowda that he was not interested for a second term as he did not get enough time in the upper house to raise issues.

"As our party does not have numbers in Parliament to get more time allotted to raise issues and participate in debates, Reddy wanted me to be in the Rajya Sabha in his place so that I could serve the nation better," Gowda said.

Gowda lost in the May 2019 general elections from Tumkur to G.S. Basvaraj of the BJP.

With the term of the four members -- Congress'' B.K. Hariprasad and Rajeev Gowda, BJP''s Prabhakar Kore and JD-S''s Reddy ending on June 25, the Election Commission notified the poll on June 1.

According to the poll panel, the nominations will be scrutinised on Wednesday and last date for withdrawal by candidates is June 12. Polling and vote count is on June 19.

From the ruling BJP, its grassroot cadres Eranna Kadadi and Ashok Gasti filed their nominations after Gowda.

By fielding Gowda for the fourth seat, the Congress and JD-S, who had post-poll and pre-poll alliances for the Lok Sabha and state Assembly elections in May 2019 and May 2018, queered the pitch for the BJP, denying it the chance to win a third seat.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 16,2020

New Delhi, Jun 16: With an increase of 10,667 cases and 380 deaths in the past 24 hours, the COVID-19 count in India has reached 3,43,091 on Tuesday, according to the Union Health and Family Welfare Ministry.

It is noteworthy that today's spike in cases is lower than the 11,502 registered in the country yesterday and has also stayed below the 11 thousand mark it had been crossing for the past two days in a row.

However, there is an increase in the number of deaths due to the infection from yesterday, with 380 deaths being reported from across the country, the toll due to COVID-19 has now reached 9,900.

The COVID-19 count includes 1,53,178 active cases, while 1,80,013 patients have been cured and discharged or migrated so far.

Maharashtra with 1,10,744 cases continues to be the worst-affected state in the country with 50,567 active cases while 56,049 patients have been cured and discharged in the state so far. The toll due to COVID-19 has crossed the four thousand mark and reached 4,128 in the state.
It is followed by Tamil Nadu with 46,504 and the national capital with 42,829 confirmed cases.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.