Blockchain-Based Consent-As-A-Service Framework for Secure and Auditable Aadhaar Data Access

Abstract

The currently existing Aadhaar data sharing system has a dearth of granular user control enabling other third party entities including banks, telecom service providers, and government agencies access to the user's data without explicit, time bound and purpose specific consent. This incites all manner of privacy, transparency, and data misuse concerns. This paper then proposes a Blockchain Based Consent as a Service (CaaS) Framework to guarantee such real time, secure and auditable access of Aadhaar linked data in the hands of users via authorized smart contracts. In the proposed model, the smart contract encapsulates each data access request includes purpose, requesting entity, the type of data, and the duration of access. A secure app or web interface will notify user or browse regarding consent requests, and allow him to accept or refuse request by using Aadhaar Virtual ID and OTP or digital signatures. Once it is approved, the access is granted to consumers on a temporary basis with full logging on a blockchain ledger that is immutable and open for all to see by users and regulators. It is compliant with the Digital Personal Data Protection (DPDP) Act 2023 and utilizes off chain storage of encrypted data. In addition to allowing users to possess granular control over their digital identity, the framework also lays the groundwork for Zero Knowledge Proof (ZKP) based functionalities and AI based anomaly detection to proactively protect users' privacy in the future.