Cyber Security

Biometric verification is any means by which a person can be uniquely identified by evaluating one or more distinguishing biological traits. Unique identifiers include: - Fingerprints - Hand geometry - Earlobe geometry - Retina and iris patterns - Voice waves - DNA - Signatures

**Statement 1 is correct:** DigiLocker is a cloud-based digital locker system launched by the Government of India under the Digital India Programme. Its primary objective is to reduce reliance on physical documents by providing secure digital storage and access to e-documents issued by government departments, educational institutions, and other entities. **Statement 2 is correct:** DigiLocker enables users to access their electronic documents (e-documents) anytime, anywhere, provided they have an internet connection. This enhances convenience, eliminates the need to carry physical documents, and ensures secure and verifiable digital storage. Therefore, both statements are correct.

In India, section 70-B of the Information Technology Act, 2000 (the IT Act) gives the Central Government the power to appoint an agency of the government to be called the Indian Computer Emergency Response Team. Further, it is legally mandatory for service providers, data centres and body corporates to report on cybersecurity incidents as outlined in the Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013, which were notified under the Information Technology Act, 2000.

The availability of open APIs for Aadhaar means that the Aadhaar system can be easily integrated into various electronic devices, such as smartphones, laptops, point-of-sale terminals, etc. This allows these devices to leverage the Aadhaar platform for authentication and other services. The Aadhaar APIs provide the capability to perform online authentication using biometric modalities like fingerprint and iris scans. This allows for secure identity verification and authentication through electronic devices and applications. Therefore, both statements 1 and 2 are correct.

The terms 'WannaCry, Petya and EternalBlue' are all related to cyber attacks. * 'WannaCry' is a ransomware that locks users' devices and prevents them from accessing data and software until a certain ransom is paid to its creator. * 'Petya' is another type of ransomware that spreads rapidly through networks that use Microsoft Windows. * The Petya and WannaCry cyber-attacks in May and June 2017 are two of the biggest in history and impacted the finances of companies throughout the globe. * 'EternalBlue' is a cyber exploit developed by the U.S. National Security Agency (NSA). It was used in the 2017 WannaCry ransomware attack and exploits a vulnerability in the Microsoft implementation of the Server Message Block (SMB) Protocol.

**Statement 1 is incorrect.** A digital signature doesn't directly identify the certifying authority that issued it. It uses a complex cryptographic process involving a public-key infrastructure (PKI) where a trusted third party (Certificate Authority) verifies the signer's identity and issues a digital certificate used for creating the signature. **Statement 2 is incorrect.** While digital signatures can be used for authentication purposes in certain scenarios, they are not the primary method for user identification when accessing information or servers on the internet. Usernames, passwords, and other credentials are more commonly used. **Statement 3 is correct.** It ensures the integrity of an electronic document by creating a unique digital fingerprint that is linked to the content. Any alteration to the document would invalidate the signature.

In India, the term "Public Key Infrastructure" (PKI) is used in the context of digital security infrastructure. PKI is a system that facilitates secure electronic communication and transactions by using digital certificates, certificate authorities, and other related components. It plays a vital role in ensuring the authenticity, confidentiality, and integrity of data exchanged online.