Bengaluru: 31-yr-old techie arrested for accessing Aadhaar data

coastaldigest.com news network
August 4, 2017

Bengaluru, Aug 4: Bengaluru city police has arrested a young techie on the charge of accessing Aadhaar data following a complaint filed by the Unique Identification Authority of India (UIDAI) last week.

The arrested is Abhinav Srivastav, 31, an IIT-Kharagpur graduate, who is currently employed by ANI Technologies, which owns the Ola brand, as a software development engineer. He has been accused of accessing Aadhaar information in January 2017 through an app named ‘Aadhaar e-KYC’, which was available on the Google Play store till recently.

Police said Srivastav had developed five apps and made ₹40,000 from advertisements displayed on them. Police are now scanning all his apps to see whether more violations were committed. The Aadhaar e-KYC app was downloaded over 50,000 times from the Google Play store since its launch in January, the police said.

City Police Commissioner T. Suneel Kumar said that based on the complaint, six teams of police comprising 26 personnel were formed to nab Srivastav and they tracked him down to Koramangala after a week. He has been accused of using the services of another app, ‘e-hospital’, which is listed as an authenticated user agency (AUA) authorised to access UIDAI data.

A senior police officer said there were around 400 entities that have been authorised to access the data for authentication. Srivastav’s company was not among those authorised.

A native of Kanpur, Srivastav completed his M.Sc. in Industrial Chemistry from IIT-Kharagpur and joined a private firm in 2010 as a security researcher. He launched Qarth technologies in 2012 and shut it down in 2016 owing to financial reasons. In March 2016, Ola announced that it had acquired Qarth and its mobile payments product, X-Pay. Srivastav then joined another private firm before joining ANI Technologies last year.

Investigation revealed that the e-hospital company is not aware of his activities. However, further probe is on to ascertain the facts.

The ability of a software engineer to bypass strict protocols set in place by the UIDAI to access critical data puts the spotlight firmly on the security measures employed to protect Aadhaar data.

Police investigation have revealed that Srivastav had piggy-backed on the infrastructure of another app for hacking the data base.

“Aadhaar related information, legally housed by the National Informatics Centre server, was illegally and without authorisation accessed and used to support this mobile application,” said the police statement.

Srivastav, in order to give his ‘Aadhaar e-KYC’ app an air of authenticity, hacked into the server of the NIC, which houses the e-hospital system, which is a solution for government hospitals to handle patient care and other services, including medical records management.

As part of its regulations, the UIDAI accords certain agencies the title of an AUA, which can then provide Aadhaar-enabled services to the cardholder. For authentication, these agencies have to connect to the Central Identities Data Repository (CIDR) through the services of a Authentication Service Agency (ASA). ASAs are bound by regulations that stipulate encryption of data and logging of access.

The 'e-hospital’ platform had access as a registered AUA. Srivastav used this server to route his app requests for data access and managed to steal the data, the police said.

Question raised

In 2016, a paper titled ‘Privacy and Security of Aadhaar: A Computer Science Perspective’ by the Computer Science and Engineering Department of IIT-Delhi raised the question of leakage of Aadhaar number from an AUA.

The paper, which also discusses several other possible threat scenarios, said, “This, however, does not fully mitigate the risks and the possibility of leakage of the Aadhaar number from an AUA, either from the database, or during “Know Your Customer” (KYC) processes, or even during availing services, cannot be ruled out. In particular, there appear to be no safeguards or even guidelines, either technical or legal, on how the Aadhaar number should be maintained and used by various AUAs in a cryptographically secure way, and how to prevent the Aadhaar number of an individual from becoming public.”

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 26,2024

DKudupi.jpg

Mangaluru: The coastal districts of Dakshina Kannada and Udupi are witnessing a fascinating weather pattern, with chilly early mornings giving way to dry, sweltering afternoons. Over the past two days, dense fog blanketed the rural landscapes, while urban centers like Mangaluru felt the stark contrast of brisk mornings and peak afternoon heat.

The India Meteorological Department (IMD) noted that in rural areas, the morning chill caused temperatures to dip by one to two degrees Celsius below the seasonal norm, intensifying the fog. Monday saw Mangaluru recording a maximum temperature of 33.3°C and a minimum of 22.6°C, reflective of the sharp day-night variation.

While mornings painted a serene picture with mist-covered trees and a cool ambiance, the afternoons proved relentless, with temperatures soaring between 11 am and 3 pm, offering little respite. Currently, there are no signs of rainfall, with forecasts predicting the continuation of this dual weather pattern for the coming days.

Local residents have mixed feelings about this weather trend. Farmers in rural areas appreciate the cool mornings that ease early chores but express concerns over the dry afternoons, which may affect crop irrigation if the dry spell prolongs. In contrast, urban dwellers are enjoying the foggy mornings but brace for the scorching afternoons.

Meteorologists attribute the sudden chill to shifts in atmospheric pressure along the coast, a precursor to possible weather transitions in December. Whether this pattern persists or leads to unexpected changes remains to be seen, but the twin districts are clearly caught in nature's dramatic play of contrasts.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 28,2024

Mangaluru: The upcoming assembly session at Suvarna Soudha, Belagavi, scheduled from December 9 to 19, will primarily focus on addressing issues pertaining to North Karnataka, according to Assembly Speaker U T Khader. "While the main emphasis will be on North Karnataka, concerns from other regions will also be part of the discussions," he clarified.

Speaking to reporters at the Circuit House in Mangaluru on Thursday, Khader shared that a meeting of the Business Advisory Committee had been convened, with the Chief Minister, Leader of the Opposition, and other key figures in attendance to ensure effective deliberations during the session.

"The session was initially planned from December 9 to 20. However, it was later decided to conclude it by December 19, as the All India Kannada Literary Convention is set to begin on December 20 in Mandya," Khader explained.

When asked about the process for discussions in the Assembly, Khader assured, "Discussions will take place according to the established rules."

The Speaker also highlighted his participation in various international conferences. "As Speaker of the Legislative Assembly, I have consistently sought opportunities to represent the Assembly at overseas conventions. I am pleased to announce that I will be attending the International Peace Conference in Vatican City," he said. "It is an honor to participate as a representative of the Mangaluru constituency and as the Speaker of the Assembly."

In response to questions about government grants, Khader remarked, "Grants do not come automatically. MLAs must actively follow up with the relevant authorities rather than simply complain about the lack of grants in their constituencies."

Addressing the tragic incident of three students drowning at a resort in Ullal, the Speaker emphasized, "The Deputy Commissioner has been instructed to enforce strict safety measures in resorts to prevent such incidents in the future."

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 22,2024

bjpprotest.jpg

Bengaluru, Nov 22: For the second day running, the Karnataka BJP on Friday staged a statewide protest condemning the government’s alleged move to notify land of farmers as Waqf property.

The BJP staged a protest before the offices of Deputy Commissioners at district headquarters.

The BJP leaders are vehemently demanding that the state government cancel a 1974 Gazette notification in this regard.

The agitators are also demanding scrapping of the Waqf Board and the resignation of Chief Minister Siddaramaiah and Minister for Waqf and Housing Zameer Ahmad Khan.

The BJP MLAs, MLCs, MPs gathered in the premises of Freedom Park and staged a protest under the leadership of Leader of Opposition R. Ashoka and slammed the state government.

MLA T.S. Srivatsa led the protest in Mysuru and hundreds of party workers and farmers staged the protest under the leadership of former MP Pratap Simha in Kodagu.

Former MP Sumalatha Ambareesh led the agitation in Mandya.

This was the first time that Sumalatha took part in the party’s programme after the Lok Sabha elections.

State President B.Y. Vijayendra claimed, “The Congress government in Karnataka is issuing notices to farmers claiming the ownership of their lands to the Waqf Board and pushing them on the streets overnight.”

In the first week of December, three teams formed by the BJP will travel across the state and record the grievances of farmers.

“The state government is attempting to snatch away the lands belonging to temples as well,” Vijayendra alleged and added that the teams would comprise all senior leaders of the BJP.

Meanwhile, the police have taken Sri Ram Sena chief Pramod Muthalik into custody while staging a protest march to the office of Zameer Ahmad Khan in Bengaluru.

Muthalik along with Hindutva activists was planning to lay siege to Zameer’s office over the Waqf row.

The police stopped Muthalik and requested him to submit the memorandum by reaching the minister’s office in a vehicle. However, Muthalik refused to go with the police and continued his footmarch. The police took him into custody following arguments.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.