Digital Locker from Govt. of India for securing documents

Prime Minister Narendra Modi on July 1 will launch digital locker facility that will help citizens to digitally store their important documents like PAN card, passport, mark sheets and degree certificates.

What is DigiLocker?

Dedicated personal storage space, linked to each resident’s Aadhaar number. DigiLocker can be used to securely store e-documents as well as store Uniform Resource Identifier (URI) link of e-documents issued by various issuer departments. The e-Sign facility provided as part of DigiLocker system can be used to digitally sign e-documents.

How does DigiLocker work?

To Sign-up for the Digilocker you need to have a valid Aadhaar number registered with Aadhaar.  Please type your Aadhaar number in the text box against “Enter Aadhaar Number”. You will be given two options for user authentication. “Use OTP” and “Use Fingerprint”. You can click on any one of the button.
After clicking on “Use OTP”, an OTP (One Time Password) will be sent by UIDAI to the mobile number and email-id registered with your Aadhaar. Enter the OTP and click on ‘Validate OTP’ button. Once the OTP is validated the user is taken to set username/password page to complete sign up
After Clicking on “Use Fingerprint” User will have to put the thumb print on the finger print device. If the finger print is valid, then user is authenticated and taken to set username/password page to complete sign up.

How is DigiLocker going to help me?

It will minimize the use of physical documents and will provide authenticity of the e-documents It will provide secure access to Govt. issued documents. It will also reduce administrative overhead of Govt. departments and agencies and make it easy for the residents to receive services

Frequently Asked Questions

What is the website for accessing DigiLocker?

A1 DigiLocker which is the national Digital Locker System launched by Govt. of India can be accessed at through http://digitallocker.gov.in.

What are the key features of DigiLocker?

A2 Following are the key features of the DigiLocker

For Residents

i. Digital Locker of each resident is linked to their Aadhaar number

ii. 10MB of free space in the locker to securely store resident documents and store links (URI) of Govt. department or agency issued e-documents. The storage space allocation will be increased to 1GB in subsequent release.

iii. eSign online service to digitally sign the documents online without using dongle. For details please refer to the e-Sign brochure available on the portal.

iv. Sharing of e-documents online with any registered requester agency or department

v. Download eAadhaar .

vi. List of issuers which have issued e-documents to residents and list of requesters which have accessed resident’s documents.

For Issuers

i. Facility to upload e-documents in a standard XML format in the digital locker repository or repositories and push e-document URI in the resident’s digital locker.

For Requesters

i. Secure access to documents in repository or in digital locker

For other details on digital locker please refer to digital locker write-up and presentation on the portal

How will DigiLocker help you?

A3 It will minimize the use of physical documents. It will provide authenticity of the e-documents and thereby eliminating usage of fake documents. It will provide secure access to Govt. issued documents. It will reduce administrative overhead of Govt. departments and agencies and make it easy for the residents to receive services.

How can I Sign-up for the DigiLocker?

A4 To Sign-up for the Digilocker you need to have a valid Aadhaar number registered with Aadhaar. Please type your Aadhaar number in the text box against “Enter Aadhaar Number”.  You will be given two options for user authentication. “Use OTP” and “Use Fingerprint”. You can click on any one of the button.

1. After clicking on “Use OTP”, an OTP (One Time Password) will be sent by UIDAI to the mobile number and email-id registered with your Aadhaar.  Enter the OTP and click on ‘Validate OTP’ button. Once the OTP is validated the user is taken to set username/password page to complete sign up

2. After Clicking on “Use Fingerprint” User will have to put the thumb print on the finger print device. If the finger print is valid, then user is authenticated and taken to set username/password page to complete sign up.

What is OTP?

A5 OTP is a one-time password generated randomly by UIDAI system and sent to your registered mobile number and email-id. The OTP is valid only for duration of 30minutes. Post the expiry, the OTP is rendered invalid and if you enter an invalid OTP, you would be prompted to request for a new OTP.

Sometimes I am not getting instant OTP's for login?

A6 OTP service is being operated by UIDAI. There are many other Aadhaar services using the same. For some networks it may take few seconds more. Kindly wait for OTP, the session is valid for 30 min.

What are the different components of a resident’s digital locker?

A7 Each resident’s digital locker has the following sections:

i. My Certificates: 

This section comprises of two sub sections

a. Digital Documents- which contains URI (links) of the documents issued to the resident by the Govt. department or other agencies. Each document will have the following information

• URI

• Document Name

• Issued Date

• Share option

b. Uploaded Documents-List of all the documents which are uploaded by the resident can be viewed in this subsection. Each document will have the following information

• Document Name

• Uploaded Date

• Status: to indicate whether the document is eSigned or not.

• Action: to remove or delete a document from the digital locker.

• Details

• Share: to share the uploaded document via email

• DigiSign option: once a document is eSigned it is shown as ‘√’

ii. My Profile

This section displays the complete profile of the resident (Name, Date of Birth, Gender, Residential Address, email, mobile number) as available in the UIDAI database.

iii. My Issuer

This section displays the Issuer name and the number of documents issued to the resident by the issuer.

iv. My Requester

This section displays the Requester name and the number of documents requested from the resident by the requester.

v. Directories

This section displays the complete list of registered Issuers and Requesters along with their URL.

How can I upload a document in my digital locker?

A8 Upload documents facility is available under ‘My Certificates’ section.

i. You need to first select a document type (SSC Certificate, HSC Certificate, PAN card, Voter ID card, etc.) from a drop down list.

ii. Provide a name for the document

iii. Based on the document type selected, you need to fill in the other details relevant to the document.

iv. Choose the file from your local machine to be uploaded to digital locker. Each file to be uploaded should not be more than 1MB in size and only pdf, jpg, jpeg, png, bmp and gif file types are allowed

v. Provide Description of the document (max 50 characters)

vi. Click ‘Upload’ button.

On successful upload, the document will be listed under ‘Uploaded Documents’ subsection.

what is the maximum size of the document that can be uploaded on digital locker?

A9 Each file to be uploaded should not be more than 1MB in size

Which file types are allowed to be uploaded on digital locker?

A10 Only pdf, jpg, jpeg, png, bmp and gif fie types are allowed.

How can I share the e-documents in my digital locker?

A11 For sharing your e-document (mentioned as URI under ‘Digital Documents’ subsection or under ‘Uploaded Documents’ subsection) you need to click on ‘Share’ link provided against the document you would like to share.

A dialog box will pop up. Please enter the email address of the recipient in the dialog box and click ‘Share’ button.

The document will be shared with the recipient via email. The recipient will receive an email from ‘no-reply@digitallocker.gov.in’. The subject line of the email will mention the document name and document type. The email body will have the URI link of the document and the sender name and Aadhaar number.  The recipient can access the document using the URI link provided in the email.

What is URI?

A12 A URI is a Uniform Resource Indicator generated by the issuer department, which is mandatory for every e-document of the digital locker system. This unique URI can be resolved to a full URL (Uniform Resource Locator) to access the actual document in appropriate repository.

What is an e-document?

A13 An e-document is an electronic document in XML format issued to one or more individuals (Aadhaar holders) in appropriate formats (both as XML and printable) compliant to digital locker technical specifications. You may also upload govt. issued scanned documents and also digitally sign the same, if required.

What is an ‘Issuer’?

A14 Issuer is an entity issuing e-documents to individuals in a standard format and making them electronically available e.g. CBSE, Registrar Office, Income Tax department, etc.

What is a ‘Requester’?

A15 Requester is an entity requesting secure access to a particular e-document stored in the repository (e.g. University, Passport Office, Regional Transport Office, etc.)

What is a ‘Repository’?

A16 Repository is a Collection of e-Documents which are uploaded by issuers in astandard format and exposing a set of standard APIs for secure real-time search and access.

What is ‘Access Gateway’?

A17 Access Gateway provides a secure online mechanism for requesters to access e-documents from various repositories in real-time using e-Document URI (Uniform Resource Indicator). The gateway will identify the address of the repository where the e-Document is stored based on the URI and will fetch the e-Document from that repository. Please refer to the DigiLocker Technical specifications available on the portal for further information.

How can I contact DigiLocker support team in case of any issues or concerns?

A18 You may contact DigiLocker support team via email: support@digitallocker.gov.in

How can I provide any feedback/suggestions on DigiLocker

A19 You can click on ‘DigiLocker Feedback Forum’ on the DigiLocker website to provide any suggestions or feedback.

Which biometric devices are supported by DigiLocker to capture fingerprints?

A19 The list of biometric devices currently supported by DigiLocker to capture fingerprints is as below –

1. Cogent CSD200

2. Mantra MFS100

3. Morpho MSO 1350E

4. Morpho MSO 1350E2

5. Morpho MSO 1300E

6. Morpho MSO 300

7. Morpho MSO 301

8. Morpho MSO 350

9. Morpho MSO 351

10.SecuGen HU20

11. Startek FM220

source:digitallocker.gov.in

NTERNET CRIME

Internet Crime Prevention Tips

Internet crime schemes that steal millions of Rupees each year from victims continue to plague the Internet through various methods. Following are preventative measures that will assist you in being informed prior to entering into transactions over the Internet:

• Auction Fraud
• Credit Card Fraud
• Debt Elimination 
• Employment/Business Opportunities
• Escrow Services Fraud
• Identity Theft
• Internet Extortion
• Investment Fraud
• Lotteries
• Nigerian Letter or "419"
• Phishing/Spoofing
• Ponzi/Pyramid
• Reshipping
• Spam
• Third Party Receiver of Funds
• DHL/UPS

Auction Fraud

• Before you bid, contact the seller with any questions you have.
• Review the seller's feedback.
• Be cautious when dealing with individuals outside of your own country.
• Ensure you understand refund, return, and warranty policies.
• Determine the shipping charges before you buy.
• Be wary if the seller only accepts wire transfers or cash.
• If an escrow service is used, ensure it is legitimate.
• Consider insuring your item.
• Be cautious of unsolicited offers.

Credit Card Fraud

• Ensure a site is secure and reputable before providing your credit card number online.
• Don't trust a site just because it claims to be secure.
• If purchasing merchandise, ensure it is from a reputable source.
• Promptly reconcile credit card statements to avoid unauthorized charges.
• Do your research to ensure legitimacy of the individual or company.
• Beware of providing credit card information when requested through unsolicited emails.
• Beware of handing over your credit card to shop keeper or bill collector to  swipe it on the machine, try to swipe it by yourself or you are closely watching the swipe to avoid Skimming fraud.

Debt Elimination

• Know who you are doing business with — do your research.
• Obtain the name, address, and telephone number of the individual or company.
• Research the individual or company to ensure they are authentic.
• Contact the Better Business Bureau to determine the legitimacy of the company.
• Be cautious when dealing with individuals outside of your own country.
• Ensure you understand all terms and conditions of any agreement.
• Be wary of businesses that operate from P.O. boxes or mail drops.
• Ask for names of other customers of the individual or company and contact them.
• If it sounds too good to be true, it probably is.

Employment/Business Opportunities

• Be wary of inflated claims of product effectiveness.
• Be cautious of exaggerated claims of possible earnings or profits.
• Beware when money is required up front for instructions or products.
• Be careful when the job posting claims "no experience necessary".
• Do not give your social security number when first interacting with your prospective employer.
• Be cautious when dealing with individuals outside of your own country.
• Be wary when replying to unsolicited emails for work-at-home employment.
• Research the company to ensure they are authentic.
• Contact the Better Business Bureau to determine the legitimacy of the company.
• Try to read the details in Rozgar Samachar/ Employment News for every vacancy in the Govt. department. Do not get lured of Govt. job advertisements, which demands money at any stage.
• If any advertisements/person which is not registered placement service agency, asking to deposit security money/ or any amount for getting the job, research carefully, as it could be fake.

Escrow Services Fraud

• Always type in the website address yourself rather than clicking on a link provided.
• A legitimate website will be unique and will not duplicate the work of other companies.
• Be cautious when a site requests payment to an "agent", instead of a corporate entity.
• Be leery of escrow sites that only accept wire transfers or e-currency.
• Be watchful of spelling errors, grammar problems, or inconsistent information.
• Beware of sites that have escrow fees that are unreasonably low.

Identity Theft

• Ensure websites are secure prior to submitting your credit card number.
• Do your homework to ensure the business or website is legitimate.
• Attempt to obtain a physical address, rather than a P.O. box or maildrop.
• Never throw away credit card or bank statements in usable form.
• Be aware of missed bills which could indicate your account has been taken over.
• Be cautious of scams requiring you to provide your personal information.
• Never give your credit card number over the phone unless you make the call.
• Monitor your credit statements monthly for any fraudulent activity.
• Report unauthorized transactions to your bank or credit card company as soon as possible.
• Review a copy of your credit report at least once a year.
• Banks never asks your account details on phone or through website, so beware of any one calling himself as the bank's representative asking to give details.

Internet Extortion

• Security needs to be multi-layered so that numerous obstacles will be in the way of the intruder.
• Ensure security is installed at every possible entry point.
• Identify all machines connected to the Internet and assess the defense that's engaged.
• Identify whether your servers are utilizing any ports that have been known to represent in securities.
• Ensure you are utilizing the most up-to-date patches for your software.

Investment/ Good opportunities Fraud

• If the "opportunity" appears too good to be true, it probably is.
• Beware of promises to make fast profits.
• Do not invest in anything unless you understand the deal.
• Don't assume a company is legitimate based on "appearance" of the website.
• Be leery when responding to investment offers received through unsolicited email.
• Be wary of investments that offer high returns at little or no risk.
• Independently verify the terms of any investment that you intend to make.
• Research the parties involved and the nature of the investment.
• Be cautious when dealing with individuals outside of your own country.
• Contact the Better Business Bureau to determine the legitimacy of the company.

Lotteries

• If the lottery winnings appear too good to be true, they probably are fake.
• If you have not opted for any Lottery, winning call is absolutely false.
• Be cautious when dealing with individuals outside of your own country.
• Be leery if you do not remember entering a lottery or contest.
• Be cautious if you receive a telephone call stating you are the winner in a lottery.
• Beware of lotteries that charge a fee prior to delivery of your prize.
• Be wary of demands to send additional money to be eligible for future winnings.
• It is a violation of federal law to play a foreign lottery via mail or phone.
• If any winning call asking you to deposit money in any bank account so you could get your due, be wary do not answer these call, inform police.

Nigerian Letter or "419"

• If the "opportunity" appears too good to be true, it probably is.
• Do not reply to emails asking for personal banking information.
• Be wary of individuals representing themselves as foreign government officials.
• Be cautious when dealing with individuals outside of your own country.
• Beware when asked to assist in placing large sums of money in overseas bank accounts.
• Do not believe the promise of large sums of money for your cooperation.
• Guard your account information carefully.
• Be cautious when additional fees are requested to further the transaction.

Phishing/Spoofing

• Be suspicious of any unsolicited email requesting personal information.
• Avoid filling out forms in email messages that ask for personal information.
• Always compare the link in the email to the link that you are actually directed to.
• Log on to the official website, instead of "linking" to it from an unsolicited email.
• Contact the actual business that supposedly sent the email to verify if the email is genuine.

Ponzi/Pyramid

• If the "opportunity" appears too good to be true, it probably is.
• Beware of promises to make fast profits.
• Exercise diligence in selecting investments.
• Be vigilant in researching with whom you choose to invest.
• Make sure you fully understand the investment prior to investing.
• Be wary when you are required to bring in subsequent investors.
• Independently verify the legitimacy of any investment.
• Beware of references given by the promoter.

Reshipping

• Be cautious if you are asked to ship packages to an "overseas home office."
• Be cautious when dealing with individuals outside of your own country.
• Be leery if the individual states that his country will not allow direct business shipments from the United States.
• Be wary if the "ship to" address is yours but the name on the package is not.
• Never provide your personal information to strangers in a chat room.
• Don't accept packages that you didn't order.
• If you receive packages that you didn't order, either refuse them upon delivery or contact the company where the package is from.

Spam

• Don't open spam. Delete it unread.
• Never respond to spam as this will confirm to the sender that it is a "live" email address.
• Have a primary and secondary email address - onefor people you know and one for all other purposes.
• Avoid giving out your email address unless you know how it will be used.
• Never purchase anything advertised through an unsolicited email.

Third Party Receiver of Funds

• Do not agree to accept and wire payments for auctions that you did not post.
• Be leery if the individual states that his country makes receiving these type of funds difficult.
• Be cautious when the job posting claims "no experience necessary".
• Be cautious when dealing with individuals outside of your own country.

DHL/UPS

• Beware of individuals using the DHL or UPS logoin any email communication.
• Be suspicious when payment is requested by money transfer before the goods will be delivered.
• Remember that DHL and UPS do not generally get involved in directly collecting payment from customers.
• Fees associated with DHL or UPS transactions are only for shipping costs and never for other costs associated with online transactions.
• Contact DHL or UPS to confirm the authenticity of email communications received.

Courtesy : http://wopostbank.blogspot.in/