Links

Secure Registry

Introduction

OpenG2P offers a secure registry that stores person details that have been collected across multiple programs. Duplication of person's data is avoided by deduplicating using the unique ID associated with the person (like MOSIP) or by running demographic deduplication heuristics such that the same person is not added multiple times to the same registry. To avoid duplication of fields like age, date of birth, city etc., the fields are "codified" with schemas.
The data in the registry is encrypted at rest.
The registry is queried by various programs to create beneficiary list. See Program Management. The queried data is anonymised such that Personally Identifiable Information (PII) is not exposed in a human readable form or provided to downstream systems.
Registry supports the following features**:
  1. 1.
    Tokenised registry
  2. 2.
    Schema base fields
  3. 3.
    REST APIs interface
  4. 4.
    Verification with ID system
  5. 5.
    Deduplicated entries
  6. 6.
    CRUD operations
  7. 7.
    Attestation
  8. 8.
    Evidence
  9. 9.
    Verifiable credentials
  10. 10.
    Anonymous profile
  11. 11.
    Complex queries
** Full implementations of these features will be available in version 1.2.x of OpenG2P.

Individuals and groups

A registry may contain individuals or groups like family, household etc.

FAQ

Is the data encrypted and saved in DB?
Yes, all person data is encrypted with strong cryptographic techniques and saved in the DB. The decryption of this data happens in-memory.