SmartDEGREE from TCS to combat Certificate Malpractices

The Degree Certificate awarded by a University is an asset of prime importance in an individual’s life. Circulation of fake degree certificates is a menace to the society, and a threat to the integrity of both the certificate holder and the educational institution that has awarded the certificate. Hence, there is a pressing need for universities to adopt a process that can ensure security of information and authenticity of the certificate issued. Tata Consultancy Services Limited’s (TCS) SmartDEGREE, a Radio Frequency Identification (RFID) based solution, enables universities to curb the problem of fake degree certificates and forgery of mark sheets. Using SmartDEGREE, a university can award certificates with an embedded RFID tag that is encoded with the holder’s name, date of graduation, type of degree and entire transcript, photograph and biometrics (fingerprints), all digitally signed by the university authorities. SmartDEGREE also enables potential employers, foreign embassies, other universities and other stakeholders to read the data embedded in the RFID tag using an interrogator, and to verify the identity of the certificate holder and authenticity of the certificate.

SmartDEGREE from TCS to combat Certificate Malpractices

About the Author Chandrashekar Mudraganam Consultant, Smart Card Group, TCS Innovation Labs Hyderabad Chandrashekar has an experience of over 18 years in the IT industry with over 7 years focused on AutoID Technologies (Smart Cards, Biometrics, RFID & Security Systems). His expertise covers all areas of business operations including heading Strategic Business Units/Projects, Project and Organizational Management, Business Development and Marketing. He has written several articles on AutoID Technologies that have been published in leading newspapers and journals. He also regularly writes on current affairs. He is currently a Consultant with the Smart Card Group at TCS Innovation Labs, Hyderabad, India. Chandrashekar has done his Master of Science in Computer Engineering from Wayne State University, USA and Bachelor of Engineering in Electronics & Communication from Osmania University, India.

SmartDEGREE from TCS to combat Certificate Malpractices

Table of Contents 1. Introduction

3

2. About RFID

4

3. Smart DEGREE from TCS

5

4. Conclusion

7

SmartDEGREE from TCS to combat Certificate Malpractices

Introduction Universities across the world face ever increasing challenges in discharging their role as providers and enablers of higher education. One of the serious challenges faced by them is the circulation of fake or duplicate degree certificates. Besides, factors such as very high student strength and overworked staff make physical issuance and verification of degree certificates cumbersome and time consuming. Higher education services are now sought by larger segments of the global population, and students, employers and other stakeholders expect that the menace of fake or duplicate degree certificates is eradicated. TCS recognized that digitization of the certificate issuing process, and securing the certificate holder’s information were the two key aspects that would enable universities to curb the problem. TCS also recognized that the main challenge lay in developing a system that would technology-enable the existing process; would address the existing lacunae; while retaining, if not reinforcing, the end objectives of the process. To enable universities to address this menace, TCS developed SmartDEGREE, a system based on Radio Frequency Identification (RFID). Combined with the fingerprint authentication and digital encryption technology, SmartDEGREE brings in greater reliability, robustness and security in the existing process of degree certificates issue to university students. TCS has successfully implemented SmartDEGREE at the University of Hyderabad, India, where RFID based degree certificates are being issued since 2007.

3

SmartDEGREE from TCS to combat Certificate Malpractices

About RFID Radio Frequency IDentification (RFID) uses radio frequency waves to transfer data between a reader and a moveable item which is tagged, to identify, categorize and track the item. It is fast, reliable, and does not require contact between reader/scanner and the tagged item. RFID provides a wireless, over-the-air interface. Unlike bar codes, line-of-sight communication is not necessary. RFID uses an integrated microchip and antenna that reads information. The combination of the chip and antenna is called an RFID transponder, tag or inlet. When the RFID transponder is placed in the field of an RFID reader, information is transmitted to the reader and processed by a computer. Tag

RF Module

Reader Antenna

Host PC Figure 1: RFID System

Originally adopted during World War II to identify `friendly' aircraft, RFID has proliferated into other application areas such as toll payment, supply chain management, cashless payment, ticketing, brand authentication, security access, patron identification and amusement parks. Today, RFID is used, or is proposed to be used, in virtually every sector of human activity - from tracking animals, tagging new born babies with their mothers, controlling access, managing inventory and assets, and many more. The return on investment (ROI) with RFID is a well established fact that has been validated in various scenarios. RFID offers the following benefits: l Identification without visual contact l Read/write capability l Cluster reading l Secure communication l Withstanding harsh industrial environment l Reliability and speed l Reusability l Data storage at point-of-origin

4

SmartDEGREE from TCS to combat Certificate Malpractices

Smart DEGREE from TCS SmartDEGREE enables universities and other educational institutions to award degree certificates with an embedded passive 13.56 MHz RFID tag, complying with the ISO 14443A standard. Each tag has 4-8 kilobytes of memory and is encoded with the certificate holder’s name, date of graduation, type of degree and entire transcript, photograph and the biometrics (fingerprints), all digitally signed by the university authorities. The RFID-tagged certificate is an authentic representation of the student’s educational qualification and credibility, certified by the university. The entire system can be summarized in 3 simple steps, Enrolment, Personalization and Verification: l Enrolment of students (including collection of fingerprints) is done at all the affiliated colleges of the university

where students seek admission. is done at the university where the authorities electronically personalize the degree certificates in a secure environment and digitally sign using a digital certificate issued to the university. l Verification is done by 3rd parties, such as future employers, universities where the students seek admission for higher education or embassies/consulates of foreign countries, etc. l Personalization

The following figure illustrates the process of Enrolment, Personalization and Verification.

Camera College

Enrolment Student Enrolment Fingerprint capture Student Verification

Signature Pad Fingerprint Scanner

RFID Reader / Writer

2

Personalization Certificate Initialization Digital Signing Certificate Personalization Certificate Verification

University University Degree with RFID Tag

Foreign Consulate

1

RFID Reader / Writer

University

Fingerprint Scanner

Government Private Organization

University Degree with RFID Tag

3

Verification Certificate Reading Certificate Verification

Figure 2: Illustration of Enrolment, Personalization and Verification

5

SmartDEGREE from TCS to combat Certificate Malpractices

The system incorporates the following: l A passive HF RFID chip is embedded between two sheets of the degree certificate and the human readable data

content is printed on the surface. The certificate has the capability of storing the fingerprints of the student along with other information. l RFID readers/writers for reading or writing from RFID chips affixed inside degree certificates. l Biometric (fingerprint) enrolment application together with the required hardware is installed at the affiliated colleges of the university to enroll students. This application captures the fingerprints (preferably 2 per student) along with demographic information of the student, and verifies through 1:1 matching. l Personalization application is used for: - viewing student records - digitally signing the students record (personal information, marks obtained and fingerprints) - electronically personalizing the RFID chip with the digitally signed student information (encrypted data), using a suitable RFID reader/writer - reading/verifying the contents of the personalized RFID chip and providing enquiry facilities regarding the status of the degree certificate. This application also enables other functions like, certificate cancellation, certificate reissuance, data verification of degree certificates at the universities before and after issuance to students and generating reports. l Verification

application enables third parties such as future employers, universities where the students seek admission for higher education or embassies/consulates of foreign countries, etc to verify the contents of the degree certificate. The contents are read with an RFID reader using the Public Key of the university digital certificate to decrypt the chip contents and produce the student data in a readable form. The application also provides fingerprint verification for 1:1 match between the student fingerprint template stored inside the chip and the live fingerprint captured.

Upon accepting a job, a graduate can present the RFID tagged degree certificate to an employer. The employer can log onto a TCS Web site which is indicated on the back of the certificate, download the TCS software necessary to read the encrypted data on the certificate chip, and utilize an RFID reader to read the tag and download its data. This information can then be used to verify the identity of the new employee.

6

SmartDEGREE from TCS to combat Certificate Malpractices

Conclusion Combined with the latest advances in fingerprint authentication and digital encryption technologies, SmartDEGREE brings in greater reliability, robustness and security in the existing system of degree certificate issuance. SmartDEGREE provides many benefits to all stakeholders such as students, universities, potential employers and other organisations: l Enables embedding of authentic information in the degree certificates to curb duplication and fake

circulation l Provides greater security and thereby enhances the reliability of the university education system l Provides reliable and easy access to information when needed

7

cer tificate

About Smart Card Group, TCS Innovation Labs - Hyderabad, India

About Tata Consultancy Services (TCS) Tata Consultancy Services is an IT services, business solutions and

TCS has to its credit several disruptive innovations. It set up its first

outsourcing organization that delivers real results to global

research lab in 1981 when the IT industry in India was just taking

businesses, ensuring a level of certainty no other firm can match. TCS

shape. It set-up a software tool foundry which has over the years

offers a consulting-led, integrated portfolio of IT and IT-enabled

produced generations of tools for model driven development,

services delivered through its unique Global Network Delivery

testing, artificial intelligence and re-engineering, to name a few.

ModelTM, recognized as the benchmark of excellence in software

Today, the global network of TCS Innovation Labs work across

development.

domains and new technologies to deliver a range of solution frameworks. In the true spirit of collaboration, TCS has created a Co-

A part of the Tata Group, India’s largest industrial conglomerate,

Innovation Network (TCS COIN™). This connects to several entities in

TCS has over 143,000 of the world's best trained IT consultants in

the innovation ecosystem and TCS co-innovates with them,

42 countries. The company generated consolidated revenues of

capitalizing on the strengths of each to the benefit of all. Leveraging

US $6 billion for fiscal year ended 31 March 2009 and is listed on

its tool strength, business innovation experience and its co-

the National Stock Exchange and Bombay Stock Exchange in India.

innovation capabilities, TCS is well equipped to play a major role in AutoID Technologies. The Smart Card Group at TCS Innovation Labs -

For more information, visit us at www.tcs.com

Hyderabad, provides end-to-end services in consulting, To know more about TCS’ SmartDEGREE and other such innovative solutions from the Smart Card Group at TCS Innovation Lab, Hyderabad, India, contact [email protected]

Subscribe to TCS White Papers TCS.com RSS: http://www.tcs.com/rss_feeds/Pages/feed.aspx?f=w Feedburner: http://feeds2.feedburner.com/tcswhitepapers

All content / information present here is the exclusive property of Tata Consultancy Services Limited (TCS). The content / information contained here is correct at the time of publishing. No material from here may be copied, modified, reproduced, republished, uploaded, transmitted, posted or distributed in any form without prior written permission from TCS. Unauthorized use of the content / information appearing here may violate copyright, trademark and other applicable laws, and could result in criminal or civil penalties. Copyright © 2009 Tata Consultancy Services Limited

www.tcs.com

TCS Design Services M 1009

development, implementation and project management.