Challenge
 

A government project handling 7.5 crore enrollments required a secure, compliant solution for processing and storing Aadhaar numbers (UIDAI-issued unique IDs) while managing up to 50 lakh daily transactions. The project's primary objectives were to ensure data storage and transfer security, prevent double subsidy benefits, and adhere to strict government compliance standards

The key challenges were the following:

• Data Security: Preventing data breaches while handling sensitive Aadhaar information across millions of daily transactions.

• Sanity Checks: Avoiding double benefit accruals for the same beneficiary across various government subsidy channels.

• Compliance: Meeting stringent government guidelines that prohibited direct storage of Aadhaar or Virtual IDs in databases.

Approach

Data Storage and Sanity:

• Tokenization of Aadhaar numbers was implemented, with the tokenized data securely stored in a separate AWS database, ensuring that even in case of a breach, actual Aadhaar numbers remained protected.

• A dedicated service was designed to check whether a beneficiary had already received a subsidy, thereby preventing duplicate benefit claims across government channels

Data Transfer:

• Real-time, dynamic RSA encryption (updated every 5 minutes) was applied to ensure secure data transfer between browsers and servers. This robust encryption rendered any leaked in-transit data unusable, safeguarding against potential breaches.

Xponentium Impact