The Offline Verification Seeking Entity (OVSE) Framework

Source: NIE

Subject: Government Initiatives

Context: The Punjab School Education Board (PSEB) has become India’s first school education board, and Maharishi Dayanand University (MDU), Rohtak, the first university, to onboard UIDAI’s Offline Verification Seeking Entity (OVSE) framework.

The Offline Verification Seeking Entity (OVSE) Framework
The Offline Verification Seeking Entity (OVSE) Framework

About The Offline Verification Seeking Entity (OVSE) Framework:

What it is?

  • A secure, regulatory framework established by the Unique Identification Authority of India (UIDAI) that authorizes eligible organizations to carry out local, offline identity verification of individuals using verifiable digital credentials rather than querying central identity databases.

Nodal Organisation: Unique Identification Authority of India (UIDAI), Ministry of Electronics and Information Technology (MeitY).

Aim: To provide a tamper-evident, contactless, and privacy-preserving identity verification ecosystem that reduces operational costs, eliminates physical document submissions, and prevents identity fraud across sectors.

How it Works?

  • An authorized organization initiates an offline verification request through a web portal, kiosk, or QR code trigger.
  • The user authorizes the request and explicitly consents to share specific credentials via the official identity application.
  • Verification takes place locally on the device (which can include offline biometric/face-match checks) without establishing a live connection to UIDAI’s Central Identities Data Repository (CIDR).
  • The consented, digitally signed credentials are then securely returned to the verifying organization’s system via a secured callback URL.

Key Features:

  • Zero Dependency on Central Databases (No CIDR Query): Verification occurs locally through encrypted, verifiable credentials, eliminating the need for real-time lookups on central servers and shielding central databases from system loads.
  • Strict Consent and Selective Sharing: Users maintain complete control over what information is revealed, retaining the option to share either full or selective demographic credentials based on necessity.
  • Privacy by Design (No Number Storage): Verifying entities are strictly prohibited from retaining plain national identity digits; data must be masked or redacted, minimizing data-leak exposure.
  • Enterprise-Ready Interoperability: Easily connects to mobile apps, enterprise portals, self-service kiosks, and physical counters via standardized API protocols and application-to-application intent calls.
  • Proof-of-Presence Integration: Incorporates secure, on-device face authentication and digital signatures to confirm physical presence without transmitting raw biometrics across the network.

Significance:

  • Eliminates the circulation and photocopying of physical documents, directly addressing privacy risks and identity theft in public and private institutions.
  • Eliminates repetitive physical document verification and manual data entry, dramatically speeding up institutional lifecycles like school admissions, exam registrations, and certificate issuance.