InDEA 2 - 0 Report Draft V6 24 Jan 22 - Rev
InDEA 2 - 0 Report Draft V6 24 Jan 22 - Rev
InDEA 2 - 0 Report Draft V6 24 Jan 22 - Rev
InDEA 2.0
India Digital Ecosystem Architecture 2.0
January 2022
PREFACE
From systems to ecosystems. That is the new order. Blurring of organizational and system
boundaries is happening continuously. Agile is the new watchword – agile governance, agile
development, and agile architecture! We see the beginning of the era of digital ecosystems, which
are constellations of several large, autonomous systems - interdependent and interoperable, and
which can collectively deliver a swathe of innovative services at population scale.
India Enterprise Architecture (IndEA) was designed in 2017 with a view to enable alignment of the IT
developments with the business vision of government organizations. It provides a set of architecture
reference models aimed at a holistic and integrated approach to e-Governance. As a sequel to it,
Agile IndEA Framework was developed in 2019 to make the architecture development to be taken
up in shorter cycles. The MeitY white paper on National Open Digital Ecosystems or NODEs
published in 2020 is a set of principles, which emphasizes that governance frameworks and
community-engagement are essential components of a digital ecosystem. It defines NODEs as “open
and secure delivery platforms, anchored by transparent governance mechanisms, which enable a
community of partners to unlock innovative solutions, to transform societal outcomes.”
Reviewing IndEA framework was expedient considering the paradigm shift proposed by NODE,
coupled with the emerging demand in several Ministries and State Governments for a holistic but
simple architectural approach. InDEA 2.0 seeks to address this felt need.
InDEA 2.0 harmonizes and builds upon the architectural frameworks developed during the last few
years. While codifying their principles, it provides a pragmatic approach to realize the concept of
open digital ecosystems in an integrated and collaborative manner. It recommends a value-driven
approach, a focus on capability building and above all, a preference to ‘enabling’ rather than
‘building’. It is an evolving and dynamic framework with continuous improvement as its mantra.
An architectural framework cannot be prescriptive or overly descriptive. InDEA 2.0, therefore, leaves
enough degrees of freedom for those taking up transformational digital initiatives at the national or
state levels to build innovative, agile, and efficient architectures and solutions that best suit their
specific needs.
Knowledge without power is ineffective. Power without knowledge is wasteful. It is the right
combination of knowledge and power that can create innovative, holistic, and sustainable solutions
and outcomes. It is fervently hoped that the InDEA 2.0 framework enables establishing such a right
balance in all the ongoing architectural initiatives and accelerates the realization of the vision of
Digital India.
Chairman Co-chairman
EXECUTIVE SUMMARY
Draft for consultation (Ver 1.0 Jan 22)
InDEA 2.0 Framework
EXECUTIVE SUMMARY
Executive Summary
InDEA 2.0 is a framework that promotes the evolution of digital ecosystems. It consists of a set of
principles and architectural patterns that inform, guide, and enable the development of large digital
systems, with a focus on the public sector. The following statements define the characteristics of
InDEA:
EXECUTIVE SUMMARY
Why InDEA 2.0 ?
The boundaries between functions, jurisdictions and public-private organizations are getting
blurred due to increasing interdependencies and the need for citizen-centric approaches to
designing digital services, as opposed to organization-centric approaches. The need to provide end-
to-end services, adopting the methods of digital transformation, agile development methods,
disruptive business models, and above all, the as-yet unfathomable opportunities offered by the
emerging technologies like AI, ML, IoT and DLT are strong forces pushing the limits towards the
evolution of digital ecosystems.
The core value proposition of InDEA 2.0 to the Governments is in terms of a more rational planning
of IT investments, cost savings due to reusable and interoperable systems, and better architectures
designed faster. To the citizens, it means a more holistic and seamless experience across
organizations. And to the industry, it holds out immense promise of innovation.
The InDEA 2.0 framework is useful to the policy makers in the government, and architects and
system designers in the public and private sector.
Upholding the primacy of the principles and adoption by all organizations would produce a
multiplier effect and thereby pave the way to realizing the goals of InDEA 2.0.
InDEA 2.0 defines 3 types of building blocks, namely, core, common and reference building
blocks. Core building blocks play a pivotal and central role and occupy an extremely important
position in the architecture. Because of their extremely useful functionality they are accessed
by most of the other building blocks. Common building blocks are reusable across multiple
organizations. Reference building blocks are most often functional and technical specifications
but not working applications. The actual architecture of the digital ecosystem of any sector,
ministry or State can be derived through an appropriate combination of the core, common
and reference building blocks identified by InDEA 2.0 and supplemented by other context-
specific applications.
The InDEA 2.0 report recommends a highly selective approach to the design and development
of the building blocks. Only the core building blocks are proposed to be designed, developed,
EXECUTIVE SUMMARY
and managed centrally by the central or state governments. From a governance perspective,
the government plays an enabling role in respect of the remaining building blocks.
The pivotal role of the master plan arises out of the core building blocks, the most important of
which are the registries and directories which are sector-agnostic and pan-India. The
architectural portal also plays a very important role in making available the building blocks,
artefacts, standards, and specifications in a dynamically up-to-date fashion.
The master plan is constituted by a set of 45 building blocks organized into 10 groups or
‘zones’ of the master plan. 5 of them are core, 12 are common and 11 are reference building
blocks. The rest are building blocks at the domain or state level.
InDEA 2.0 makes architecting simple by adopting the ‘pattern approach’. InDEA 2.0 comprises
of three architectural patterns suited to different administrative environments, and the Master
Plan binds them together.
The Domain Architecture Pattern is most suitable to be adopted by the line ministries of GOI
that deal with concurrent subjects or state subjects that have substantial funding and/ or
involvement of GoI. The State Architecture Pattern, as the name indicates, is to be adopted by
the States and UTs. While this pattern encompasses all the subjects administered by the State
governments, the States can implement it in a phased manner depending upon their own
priorities and resources. The InDEA Lite Architecture Pattern is recommended for adoption by
small departments which intend to produce quick wins ‘on their own’.
A significant amount of systematic effort is required for any ministry, department, or State
EXECUTIVE SUMMARY
Government in converting the patterns into implementable solution architectures. This
requires specialized capacities and competencies.
enablers are of two types (i) policy enablers like PPP Framework, special procurement policy
(e.g outcome-based procurement), data sharing policies and rules of engagement of ecosystem
players (ii) technology enablers like, sandbox(es) and data exchange(s).
The key steps in implementation include developing a vision for the domain/ State/
Organization, developing a Digital Ecosystem Blueprint consultatively and adopting agile
methods for developing architecture and applications. Ultimately, an architectural effort
inspired by InDEA 2.0 will succeed in producing the desired impact if the sponsor can
‘reimagine’ the sector/ domain and conceptualize at least one gamechanger which has the
potential to make a huge difference. The role of the leadership at political, administrative and
technology levels is critical to create such impact.
and innovation. Governments need to go an extra mile in creating in building not capacities but
competencies. While capacity indicates the potential to perform, competency indicates the
existence of empowered multi-disciplinary teams that have the fitness to execute large
programs. Braodly, it is the difference between ‘thinking’ and ‘doing’. These competencies are
required to be built in both the public and private sectors at the policy, administrative and
technology layers of organizational hierarchies. A blended model containing F2F and online
programs with appropriate curriculum for various programs has been recommended in the
report.
To conclude, InDEA 2.0 is one of the critical enablers in the evolution of a digital economy. India
will do well to adopt InDEA!
Messages
STEERING COMMITTEE
Chairman & Co-Chairman
Shri J. Satyanarayana, Former Secretary, MeitY
Shri Ajay P Sawhney, Secretary, MeitY
Members
Shri Arvind Kumar, DG, STQC
Smt. Neeta Verma, DG, NIC
JS (Program Division), MeitY
Representative of DARPG
Representative of concerned Ministry/State
Shri Pramod Verma, Chief Architect , UIDAI
and CEO of Ek Step
Sh. Kiran Anandampillai, Architect of PMJAY
and CEO of DRISTI
Prof. V. Kamakoti, IIT Madras
Shri Sachin Puniyani, AWS
President & CEO, NeGD (Convener
WORKING GROUP
Chairman
Shri J. Satyanarayana, Former Secretary, MeitY
Members
Shri Prakash Kumar, Former CEO, GSTN
Dr. Rajendra Kumar, AS, MeitY
Shri Abhishek Singh, P&CEO, NeGD, MeitY
Dr. Jaideep Kumar Mishra, JS, MeitY
Shri Arvind Kumar, DG, STQC
Shri D C Misra, DDG, NIC,
Prof. V. Kamakoti, IIT Madras
Shri Pramod Verma, Chief Architect , UIDAI and CEO of Ek Step
Sh. Kiran Anandampillai, Architect of PMJAY and CEO of DRISTI
Shri Sachin Puniyani, AWS
Shri Shantanu Godbole, IBM
Shri Ravi Goyal, Redhat
Representative of Independent ICT Standards Assurance and Consultancy (IISAC) Pvt. Ltd.
Program Director, CDAC (Convener)
Draft for consultation (Ver 1.0 Jan 22)
TABLE OF CONTENT
CONTENTS
Contents
InDEA 2.0 .......................................................................................................................................... 1
PREFACE............................................................................................................................................ 2
Executive Summary .......................................................................................................................... 4
Messages .............................................................................................. Error! Bookmark not defined.
Shri Ashwini Vaishnaw........................................................................... Error! Bookmark not defined.
Shri Rajeev Chandrasekhar .................................................................... Error! Bookmark not defined.
Shri Ajay Sawhney ................................................................................. Error! Bookmark not defined.
Shri Abhishek Singh ............................................................................... Error! Bookmark not defined.
STEERING COMMITTEE ..................................................................................................................... 9
Chairman & Co-Chairman.......................................................................................................... 9
Members9
WORKING GROUP .............................................................................................................................. 9
Chairman................................................................................................................................... 9
Members9
COMMITTEE MEMBERS AND WORKING GROUP............................................................................... 9
CONTENTS ........................................................................................................................................ 1
TABLE OF CONTENT .......................................................................................................................... 1
InDEA 2.0 – The WHAT & WHY ......................................................................................................... 5
1. InDEA 2.0 – WHAT and WHY ..................................................................................................... 6
1.1. Context of InDEA 2.0 .................................................................................................. 6
1.2. WHAT is InDEA ? ........................................................................................................ 6
1.3. WHY InDEA 2.0? ......................................................................................................... 7
1.4. Intended Audience..................................................................................................... 8
1.5. Structure of InDEA 2.0 ............................................................................................... 8
InDEA 2.0 Principles ........................................................................................................................ 10
2. InDEA 2.0 Principles ................................................................................................................... 11
2.1 Ecosystem Principles ......................................................................................................... 11
2.1.1 Ecosystem Thinking: ................................................................................................ 11
2.1.2 Building Block approach: ......................................................................................... 11
2.1.3 Open API-based: ...................................................................................................... 12
2
InDEA 2.0 Framework
3
InDEA 2.0 Framework
4
InDEA 2.0 Framework
Since the central theme of InDEA is digital ecosystem, it is necessary to explain the term and
to delineate its boundaries in the current context to set the expectations right.
6
InDEA 2.0 Framework
A digital ecosystem can be large and nebulous. In the context of InDEA, the digital ecosystem
is visualized to extend to various sectors of the economy, with substantial emphasis on the
services provided by the public sector, while providing enabling environment for the private
sector and innovation. In other words, the primary goals of InDEA relate to G2C, G2B and
G2G space and the secondary goals include playing a facilitatory role in the B2C and B2B
space. In sum, InDEA is substantially about digital government.
While the basic justification for InDEA 2.0 derives from the foregoing discussion on digital
ecosystem approach, the case for InDEA 2.0 stands on its own feet due to the specific value it
proposes to various stakeholder groups as described in the Table 1.1.
7
InDEA 2.0 Framework
Project level value proposition: InDEA 2.0 is not a digital transformation project by itself. It
informs, guides, and inspires many digital transformation projects in the public and private
sectors to realize the value propositions stated above. Each such initiative - ongoing or future -
must define the need for and purpose of adopting InDEA 2.0 in non-technology terms to enable
the governance authorities to take appropriate investment decisions, and / or to modify goals
suitably. Each project should aim to define the significant problems or issues of the sector that it
intends to solve and establish how InDEA 2.0 could be one of the key instruments in such an
endeavor. Collectively such initiatives in each sector should demonstrate unity in diversity by
conformance to a shared vision.
· Policy makers: can benefit from aligning the IT investments in ways that are outcome-
oriented, provide benefits across the ecosystem, and are open and transparent.
· Architects: can design business and technology architectures faster and in a more
holistic way by adopting the principles and patterns recommended here.
· Industry: can contribute to the growth of InDEA 2.0 by co-creating processes for sharing
data, designing protocols and defining APIs.
InDEA 2.0 is a concept that applies across several ecosystems. It is not feasible nor
appropriate for the public sector to develop all the building blocks. It can happen only
through the active involvement of the community. The Central and State Governments can
do well by promoting ‘InDEA 2.0 Community’ through an initiative that can be called JoinUp
InDEA. The InDEA 2.0 community can crowdsource, curate and publish the specifications of
the various building blocks of InDEA 2.0, and the interfaces.
8
InDEA 2.0 Framework
which InDEA 2.0 is founded. Chapter 3 defines the InDEA architecture patterns. Chapter 4
gives an overview of the federated digital identities as an approach to overcome the
problem of proliferation of identities. Chapter 5 touches upon the emerging trends in digital
ecosystem architecture. Chapter 6 provides guidance on adoption/ implementation. .
Chapter 7 emphasizes the need to build capacities at scale on digital transformation and
digital ecosystems. Illustrative examples of digital ecosystems are provided in the
Annexures.
9
InDEA 2.0 Framework
InDEA 2.0 provides a superset of 27 principles organized into 5 categories listed below:
A. Ecosystem Principles
B. Architecture Principles
C. Business Principles
D. Technology Principles and
E. Architecture Governance Principles.
i. This superset is built upon the principles laid down in IndEA 1.0 and those adopted by
large digital ecosystems like Aadhaar, GSTN and NDHB.
ii. Any organization or enterprise intending to adopt InDEA 2.0 can select a subset of these
principles depending upon the requirements of the system/ ecosystem being
architected.
iii. Once adopted, the principles will have to be held as sacrosanct by all the actors of the
related digital ecosystem.
The InDEA 2.0 principles are listed and briefly explained below.
· Ecosystems span across Centre and States, public and private, and are composed of
several autonomous, interoperable and federated systems.
· InDEA 2.0 categorizes the Building Blocks as Core, Common or Reference Building
Blocks basing on the degree to which they are to be decentralized. (elaborated at
the end of this sub-section)
· All the building blocks shall evolve orthogonally. Any change in any building block
shall not require consequential changes to be made to the other building blocks.
· The building blocks shall interoperate via standardized, open, and stable interfaces.
· Building Blocks infuse reusability and interoperability into InDEA 2.0.
· Building Blocks designed and developed by the community and placed in the public
domain reduce the effort and cost of development of common software
components.
11
InDEA 2.0 Framework
· The Open API Policy (https://apisetu.gov.in) and the guidelines issued by the
Government of India shall be followed.
· Appropriate communities shall be promoted in various sectors of governance/
economy for developing Open APIs
· The specifications on Open APIs published by global organizations like OAS
Foundation (Open API Specification) may be adopted as needed.
· Factor the requirements of localization and diversity, inclusion, and special needs.
2.1.7 Innovation:
Enable and promote innovation, and ‘responsible’ deployment of emerging
technologies.
12
InDEA 2.0 Framework
------------------------------------------------------------------------------------------------------------------------------------------
A building block is interoperable with other building blocks through well-defined and stable APIs.
InDEA 2.0 recognizes the following 3 categories of building blocks depending upon the combination of its
attributes and the degree to which it is centrally positioned.
1. Core building blocks: which play a pivotal and central role in the enterprise system and hence occupy
an extremely important position in the architecture. Because of their extremely useful functionality they
are accessed by most of the other building blocks.
2. Common building blocks: which are most often shared assets play the role of optimizing the effort in
design, development, and maintenance. They have the common minimum horizontal functionality to
facilitate their use in a wide range of organizations.
3. Reference building blocks: which are most often in the form of tools that enhance efficiency and
effectiveness. While they provide important functionality, they are not show-stoppers.
13
InDEA 2.0 Framework
------------------------------------------------------------------------------------------------------------------------
· These principles apply to databases, applications, identities and reference data; and
to architectural and IT governance.
· Do not restrict or constrain the potential for innovation by being prescriptive when
not necessary. Adopt the principles and methods suggested in Agile IndEA
Framework.
14
InDEA 2.0 Framework
2.3.3. Outcome-driven:
Define service levels and outcomes benchmarking with the best, and then build
services around such outcomes. Work backwards to re-engineer the processes -
where necessary.
2.3.4. Choice:
Provide choice, by design, to the citizen.
15
InDEA 2.0 Framework
2.4.5. Standards:
Specify the existing technology and data standards applicable to the ecosystem and
define methods to ensure compliance with the same.
· It is necessary to
o Update the standards listed in IndEA 1.0 and establish a process for an
annual updation.
o Establish a framework for government-industry-academia collaboration
for development of standards, protocols and specifications required for
InDEA 2.0.
2.4.6. Privacy-by-Design:
Design and publish a privacy policy that conforms to the principles of Privacy-by-
Design.
2.4.7. Security-by-Design:
Design and enforce a cybersecurity policy that conforms to the principles of Security-
by-Design, and an ISMS (Information Security Management System) that conforms to
the ISOs relating to information security.
16
InDEA 2.0 Framework
o Fail securely
o Don’t trust 3rd party services
o Observe principle of separation of duties
o Avoid security-by-obscurity
o Keep security simple
· Architecture Governance
· IT Governance
· Security Governance.
2.5.2. Capabilities:
Build requisite capacities and capabilities in individuals and organizations of the
ecosystem.
· Capacities on InDEA 2.0 should be built at multiple levels in public and private
sectors.
§ Primarily in the sectors where government is the key driver of actual usage and
the underlying standards, a policy environment may be created to enable the
industry and innovator ecosystem to develop new business models based on
additional value like convenience, personalization, cost-saving, faster/ time-
bound/ instant service. The business models in the other sectors may be kept
outside the purview of InDEA 2.0 and allow the market dynamics to work.
· Subject to the above, the model RFPs on public sector procurement and PPP
should make specific provisions for enabling self-financing models of delivery
of digital services.
17
InDEA 2.0 Framework
18
InDEA 2.0 Framework
A pattern is defined as: "an idea that has been useful in one practical context and will
probably be useful in others" (Source: Analysis Patterns - Re-usable Object Models, by M.
Fowler).
Pattern is a way of putting building blocks into context; for example, to describe a re-usable
solution to a problem. Building blocks are what we use to architect. Patterns tell us how to use
them, when and why.
2 InDEA Domain · Acts as the template for designing of · GoI Ministries dealing with a
Architecture Pattern architecture of the digital ecosystem of concurrent subject
a domain (sector) · Private organizations with pan-
· Enables interoperability within the India presence and localized
domain, processes
o between centre and States
o between public and private sector
and with other related domains
· Catalyzes the evolution of a building
block that can become gamechanger for
that domain
· Promotes innovation through
ecosystem sandbox
3 InDEA State · Acts as the template for designing of · State Governments planning
Architecture Pattern architecture of the multi-sectoral digital pan-Government systems,
ecosystem of a state. integrated services
· Enables interoperability · Private organizations dealing
o across all the domains within the with LoBs in multiple sectors
State
o between the State and the Centre
o between public and private
sectors
20
InDEA 2.0 Framework
A description of the Master Plan and the 3 architectural patterns with their salient features is given
in what follows.
The rationale for the InDEA 2.0 Master Plan, and its features are given below:
a. InDEA 2.0 Master Plan is NOT an architecture or an architectural pattern. It is a plan (akin
to the master plan of a city) that provides a direction to all initiatives for digital
transformation – largely in the public sector, and in the private sector to the extent that
their initiatives interface with the government.
b. Items 1 to 4 in Figure 3.2 are best designed, developed, and managed by MeitY, Govt of
India. This would bring consistency and interoperability across the whole of Government
– central, state, and local governments included. This would also result in saving of cost
currently incurred in duplicative efforts by Governments all over the country, on these
building blocks and applications.
InDEA 2.0 Framework
c. Items 5 to 10 in Figure 3.2 are to be designed, developed, and managed by the rest of the
ecosystem, consisting of GoI Ministries, State Governments, academia, and the private
sector (including innovators).
d. Figure 3.3 represents a detailed view of the items 1 to 7 of the Master Plan. There are
altogether 10 Groups and 45 building blocks in the Master Plan.
e. Annexure 4 provides a cryptic description of the capability of each of the building blocks.
Significant effort is required to undertake the detailed design of these building blocks,
requiring the establishment of a specialized institution to guide the designs and oversee
the implementations.
f. The following conditions apply to the Master Plan.
i. The list of Groups (10) and building blocks (45) is non-exhaustive.
ii. An organization / enterprise is not required to deploy all the building blocks but
can choose what the domain needs.
g. Though the plan is represented in two dimensions, it is multi-dimensional because we
have multiple domains (sectors) and multiple States. The set of domains and set of States
is each represented by a single element of the set. When designed fully over a period,
the Master Plan can be huge in size and complexity.
h. Can InDEA 2.0 be a gamechanger? The answer depends on how effectively the InDEA
principles are assimilated by the domain experts and put into practice. InDEA framework
itself is agnostic to any domain. Its inherent game changing potential is technical in
nature and is limited to that achievable through interoperability and consistency across
the government. However, the true gamechangers are born in the different domains /
sectors by the efforts of experts who are passionate to address the fundamental issues
and challenged faced by the sector by thinking laterally and by promoting innovation.
InDEA 2.0 Framework
Figure 3.4 represents the Domain Architecture Pattern (DAP). The salient features of the
pattern and guidance on its use are explained below.
a. DAP applies to all the Ministries of Govt of India that deal with a concurrent subject i.e a
sector in which both the central and state governments can legislate, govern and
administer. DAP can also be used by the private sector organizations (i) that operate in a
sector covered by the concurrent list or (ii) that have pan-India operations - possibly with
some local variations.
b. Every domain (sector – like health, education, agriculture) shall have its own ‘domain
core’, common building blocks and reference building blocks. The essential items of the
domain core, common and reference building blocks are shown in Figure 3.4 on a non-
exhaustive basis. The respective domains need to validate and supplement these building
blocks.
c. A 3-layer architecture is suggested in DAP – core, national and state layers. This pattern
enables interoperability across the country where needed, and leaves flexibility in the
design and development of digital systems autonomously by the ecosystem players –
public and private.
InDEA 2.0 Framework
d. DAP is truly representative of the principle of federated architecture. The core registries
and directories shall be designed in a truly federated manner whereby the data is created
and maintained by the organization legally empowered to do so, and can be shared in
accordance with the applicable data protection regime. Likewise, the common
applications are codesigned or designed in consultation with the States to be closer to
the ground realities.
e. Widespread adoption of DAP by multiple states enables dissemination and replication of
best practices across the country.
f. DAP in conjunction with the principles such as open API and building blocks like data
exchange would give a great fillip to innovation catalyzed by the access to data. Value-
added services also get a boost through DAP.
g. Above all, DAP provides a fertile ground for new ideas, and can catalyze gamechangers to
evolve anywhere and benefit the whole country. The incentive for innovation would be
that the solution developed can scale rapidly and seamlessly in multiple states due to the
interoperable environment within the same sector/ ecosystem.
h. NDHB (National Digital Health Blueprint), IDEA (India Digital Ecosystem of Agriculture),
NDEAR (National Digital Education Architecture) and AG (Ayush Grid) are all founded on
InDEA principles and are good examples of how a protype or pattern can help speed up
the architecture development method.
The ISAP pattern is represented in Figure 3.5. The salient features of ISAP are mentioned
below:
a. ZA VAmong the 3 Architecture Patterns, ISAP offers the maximum challenge and
potential for architectural effort because of the large number of domains (over 30) to be
catered to, and the need for integration and interoperability o several fronts.
b. ISAP has been conceptualized as a 3-layer ecosystem consisting of a Core, Common
Applications, and domain/ sectoral ecosystems.
c. The State Core acts as the focal point for integrating the applications at the State level
but also of the central level.
d. One of the critical success factors of adoption of ISAP is to prioritize the Common and
domain applications to be implemented at first. Ideally 2 to 3 common applications
(preferably including HR and Finance) and 2 to 3 domain systems are taken up in the first
tranche. This would enable reaping quick benefits of ecosystem architecture and propel
further phases.
e. The State Core can leverage the common and reference building blocks developed at the
national level.
f. Given the pivotal importance of the State Core, it is desirable that GoI promotes the
development of State Cores in a few states as it can lead to significant architectural
learnings and proliferation of the adoption of ISAP as well.
Figure 3.6 shows one of the possible models of the ILAP. The following are the salient features of ILAP:
InDEA 2.0 Framework
a. InDEA Lite is meant for departments of Central or State Governments intending to adopt a holistic
approach to their portfolio of functions, and to unify their legacy systems
· They can go on a stand-alone basis at their own pace, without any dependencies
b. InDEA Lite provides a quick route to produce holistic results. (6-9 months!)
c. InDEA Lite pattern guides the dept though its layered approach
· 3 layers for GoI Depts (National- State- District levels)
· 2 layers for State Departments (State-District)
d. The application architecture adopts 2 architectural concepts:
· Common Applications & Domain-specific applications
e. InDEA Lite does not mandate Building Blocks model
· However, the department can pick and choose the relevant building blocks available at
National/ State levels.
f. InDEA Lite provides flexibility to develop/ integrate applications at any of the 3 levels,
independently of the other layers.
g. The only mandate of InDEA Lite is to follow the InDEA Principles to the extent applicable (the
‘Reduced Set’)
Subsequently, India built a set of federated digital building blocks as public infrastructure,
collectively known as India Stack, which included APB, AEPS, eSign, Digilocker, UPI, and DEPA
(a decentralized consented data sharing protocol) based on which new data networks such
as Account Aggregator and Personal Health Records are being activated.
Figure 4.1 depicts the three core interlinked aspects of a person’s/entity’s digital life, explained
below:
1. DIGITAL IDENTITIES (Who I am): This provides the ability for people and businesses to
ascertain their identity, authenticate themselves, do KYC (share profile), and manage the
lifecycle of those IDs. It is important to note that there will be multiple digital IDs co-existing
each having different purposes and levels of assurances. For example, people may have a
strongly verified unique ID like Aadhaar, mobile/email,and other online digital IDs that are
used in social media etc. Which ID can be used for what service depending on the provider
of that service, for example, opening a bank account may necessitate a strongly verified
Government issued ID, while booking a hotel may only need an email or phone number
verification.
2. DIGITAL ASSETS (What I Have): As a person (or an entity) participates in various transactions
in their life, they earn/accrue various assets such as money, property, other physical assets,
digital assets, etc. But two additional assets that must be taken into account are data and
credentials. In India, with the new data protection bill, every person will have the right to
own their data and credentials. Not only that they can own, they can use data as asset, share
with consent, and leverage to access various services such as jobs, loans, etc. Credentials
(various certificates in digitally verifiable form) enable people and entities to make claims
about them (e.g., claims about academic degree or work experience) for availing services
and the service provider having the ability to verify those claims in a paperless and trusted
manner.
3. DIGITAL TRANSACTIONS (What I Do): Once the person can digitally authenticate and
leverage their assets in their control, they participate/engage in various
interactions/transactions throughout their life, in turn, trading/earning assets. In the digital
realm, these transactions are conducted via various platforms, be it a public or private
platform. These platforms enable consumers (who are seeking the service) to connect with
the providers (who are providing services). But, as transactions increase, these platform
providers become, in one sense, the gatekeepers of it, thus reducing the choice and
portability. It also creates “winner take all” and anti-competitive behaviour. Notice that
irrespective of whether a platform is provided by Government or a private player,
concentration risk and reduced innovation sets in. Also given the scale and diversity of India,
no single platform can solve for all. A new way to think about this is to allow multiple
platforms to co-exist, but ensuring that these platforms form a 'unified interoperable
network’ through the use of “open protocols”. India with its highly successful payment
networks such as Unified Payment Interface (UPI) and Account Aggregator (AA) networks,
upcoming Open Network for Digital Commerce (ONDC), Unified Health Interface (UHI), and
other similar efforts across domains is leading the world by showing how a vibrant
ecosystem can thrive, interoperate, and still provide choice for participants and level playing
field for the innovators.
This chapter specifically covers architecture and recommendations for digital IDs and linked
federated registries. It may be recalled that Federated registries of ID constitute one of the core
building blocks of InDEA 2.0. Further aspects of digital empowerment with respect to data &
credentialing and open ecosystem networks along with architecture and recommendations are
discussed in the Chapter 5.
29
InDEA 2.0 Framework
As various Government platforms across domains are being digitized, there is a tendency to
create more IDs each with its own ID card, ID management, and effort to make it unique,
etc. Having a multitude IDs, especially to interact with the Government, makes it harder for
common man for whom these are created! Especially given the diversity in education,
awareness, and capabilities, this also has a potential to further create exclusion scenarios.
While the intent of the State is to care for the vulnerable and poor, systems must still be
designed to provide agency and choice to people. At the same time, architecture must make
it easy and convenient for people to participate and access their documents, data,
entitlements, etc.
There are fundamentally two different lenses through which the concept of uniqueness can
be seen - from user perspective and from state perspective, as differentiated below:
1. I have an ID that is unique TO ME and ONLY 1. You can have one and only Unique ID
TO ME (mobile, email ID, bank account No, (Aadhaar using biometric to de-duplicate)
etc are all unique to the user) 2. You cannot have two IDs even if you wish to
2. I can choose to create two IDs both of do
which are unique to me 3. Your records will be linked to only one
3. I can link my records to any of the unique unique ID
IDs I have easily 4. You cannot remain anonymous from the
4. I can keep my records private state point of view
It is important to note that, in India, the only universally covered unique ID (that is globally
unique) is Aadhaar due to its use of multi-modal biometrics and universal coverage. Under
the Aadhaar Act and regulations, Aadhaar can be used for the Government programs where
30
InDEA 2.0 Framework
Government is spending money to provide such services in addition to using for tax/AML
compliance.
While domain specific platforms are popular, it is important to leverage the JAM identities as
the universal IDs that are already used by almost everyone in India. It is thus recommended
that other Government systems trying to create a “state controlled'' unique ID are
encouraged to achieve it through Aadhaar authentication and eKYC. But, if that system is
creating a “user controlled” ID, then, typically the user is allowed to use mobile
number/email etc as a means to sign in.
Either way, such linkages allow citizens to onboard themselves and manage their account
using common IDs such as mobile numbers or Aadhaar numbers that they are already using
every day.
As the world becomes data rich, it is essential that various data about people, entities,
geographies, resources, assets, etc. are made available in electronic registries with Open
APIs for other applications to seamlessly validate and use attested and authenticated data.
This is even more critical when it comes to people and entities where various claims can be
electronically validated against such registries via open APIs avoiding paper-based
validations, thus increasing trust while decreasing cost of validation.
In this document, the word “Electronic Registry” is used to depict a trusted system
that enables consented subjects (people, entities, things) to enrol, manage their
record with necessary levels of verification, and avail 3rd party services built on it
using its authentication and KYC services.
A digital identifier, therefore, is the “key” to a registry where the subject (ID holder) is
present who, in turn, is empowered to control her ID, manage the registry record (her
profile in that registry), choose to use it for availing other 3rd party services through
authentication and consented eKYC (digitally signed profile sharing).
In every registry it is necessary that the subjects in that registry are “identified” in a unique
and trusted fashion. These identifiers may be purely numeric (e.g. Aadhaar number, mobile
number, health ID within ABDM, etc.) or alpha-numeric (e.g. PAN number, Vehicle number,
31
InDEA 2.0 Framework
email address, UPI Address, etc.) with or without any logic attached in generating the
identifier itself (random vs logic based identifier).
Depending on the policy, uniqueness can be either “user controlled” (user may have more
than one ID within the same registry, say, using two different mobile numbers) or “state
controlled” (by linking the ID to a globally unique ID like Aadhaar, and hence making sure a
user has one and only one entry within the registry).
Custodians of such registries should ensure appropriate policy is applied to either allow user
controlled uniqueness or state controlled uniqueness. In addition, the fields in the record of
that subject are to be verified/attested or marked as self-declared. When registering, people
must be given an option to use their existing digital IDs such as Aadhaar, mobile, etc as
appropriately to fit the purpose of that registry and also allow people to control, update,
manage their record using the common IDs such as Aadhaar, mobile, etc.
(i) one registry adding another registry’s ID to its records after appropriate user
authentication.
(ii) One registry or system trying to validate the end-user by using the entry of the
end-user in another registry through an API
Any such linking in both the scenarios should be compliant to appropriate
p
o
l
i
c
i
e
s
/
l
a
w
s
.
Technically, electronic registries can be linked via the IDs to allow easy, paperless on-
boarding of citizens and also avoid repeated data verification needs. For example, when a
beneficiary is registered for, say, PDS scheme, that record will be linked to Aadhaar by the
PDS system storing the Aadhaar number (or a tokenized version of it). Similarly, when
someone obtains a PAN, that record gets linked to Aadhaar where the Aadhaar number
becomes the linking ID. Then when that person obtains a mutual fund account, PAN number,
in turn, gets linked to the mutual fund record.
When a registry allows users to use “existing IDs from other registries” to be used as an
authentication mechanism, it not only creates an “auto verified/attested” set of fields in the
new registry (registry provider does not have to re-verify those fields again), but also gives
convenience to the people to reuse and leverage commonly used IDs. This fundamental
design pattern is what allowed Aadhaar to become a “building block” for other systems
allowing banks to open accounts with eKYC (attested common fields coming from Aadhaar in
digitally signed manner) and allow transactions with authentication.
To achieve this, it is essential that all registries are built to allow single sign-on (SSO) using
existing IDs in other registries as well as expose itself as a SSO provider for the next set of
systems.
Following are a set of recommendations for establishing federated digital ID and registries:
1. Under the federated architecture approach of InDEA 2.0, it is important to create a “federated
set of registries”, each of which is meant for a “specific purpose” rather than a universal, all-
inclusive registry.
a. Given the federated nature of service delivery and Government systems, it is essential
that each registry be maintained in an autonomous way with its own workflows,
purposes, rules of participation, etc.
b. Any registry provider/custodian must design the registry with the subject (person) in the
centre and ensure convenience, inclusion, data empowerment, and meaningful choice for
them to control and manage their own record within the registry.
33
InDEA 2.0 Framework
c. All registry providers/custodians must ensure personal data protection and consented
access fully and ensure appropriate security and privacy measures to protect the data
within the registry.
2. All such registries should have their own “digital ID” internally to uniquely identify a record.
a. These internal IDs should ideally be “user managed” (like a “user ID”) making it easier for
them to remember and reuse.
b. If not, a random number may be used with an option to attach a user ID.
3. Handling uniqueness:
a. When global state-controlled uniqueness is necessary, allow users to link their Aadhaar or
other Aadhaar linked or Aadhaar derived or Aadhaar based digital IDs to achieve it.
b. If not (if it is user-controlled uniqueness), then allow common identifiers such as mobile
numbers or other acceptable Digital IDs to be used and still allow users to voluntarily use
their Aadhaar.
c. This allows minimizing the need to remember and use many IDs by the citizens and
provides convenience of managing their account using either Aadhaar or mobile or other
acceptable digital IDs.
4. Authentication, eKYC, and SSO:
a. All registries should be built as a “building block” to be “reused” as “sources of truth”
in a paperless and trusted manner for the sake of simplifying citizen service delivery
process and reducing costs
b. All registries should offer authentication/Single-Sign-On along with eKYC (consented
digitally signed profile sharing) capabilities using the primary ID of that registry
c. The SSO should cater to cross-domain and should facilitate identity management among
multiple SSO providers. SSO mechanism should be resilient enough to handle multiple
point of failures. Also, it should identify and address security breach in SSO in proactive
and reactive manner systematically.
d. All registries should accept and allow citizens to enrol and sign-in with other available
digital IDs (white listed as per their policies) to provide 1-click enrolment and sign-in for
citizens.
e. Items b & c above ensure that the registries are not siloed and stand-alone systems, but a
true digital building block for other systems, providing citizen convenience and
eliminating repeated data capture and verification complying with appropriate
policies/laws.
In addition to the above, the following are also recommended to be explored by ID providers:
● Explore and leverage international open API specifications such as OpenID, oAuth, etc.,
when possible, to make it easy for interoperability of multiple -registries.
● Encourage use of e-Pramaan, Digilocker IDs as “authentication and SSO” mechanisms for
others to leverage and provide convenience for citizens.
● All Government ID providers are highly recommended to explore the feasibility of creating
an ID alliance to bring coherence, interoperability, and reuse among those keeping citizen
choice, convenience, and control at the centre
34
InDEA 2.0 Framework
● ID providers should evaluate and adopt NIST Guidelines on Digital ID1 for establishing
standardized trust levels across verification, authentication, and federation.
● The principles of federated architecture set out in Annexure 2 for governance of the digital
ID ecosystem.
35
InDEA 2.0 Framework
Attention is invited to Figure 4.1 depicted in the previous chapter on Digital Identities, where the
idea of using IDs to earn / accrue / control / leverage digital assets, and ability to participate in open
transaction networks are discussed.
InDEA 2.0 implementers must necessarily be cognizant of all the three aspects of Digital
Empowerment and therefore not only implement federated digital IDs, but also address the aspects
of data & credential, and when possible facilitate and enable an open interoperable network within
their domain.
Rest of the sections below deal with the architecture and recommendations for (i) data
empowerment (ii) credentialing and (iii) open ecosystem networks.
Every person (or an entity) participates in various transactions in across many platforms,
leaving digital footprints across such platforms. They also earn many certificates, badges and
other credentials. Unfortunately, in most cases, neither these credentials are available to
them in digitally verifiable fashion nor the related data is available to them in a unified and
trusted manner. It is necessary that both data and credentials are made available to its
owner in a digitally verifiable form and in their control for subsequent use.
In India, under the new data protection bill, every person will have the right to own
their data and credentials. Not only that they can own, they can use data as asset,
share with consent, and leverage to access various services such as jobs, loans, etc.
It is essential that all platforms adopting InDEA acknowledge this and design to provide
machine readable personal data access back to individuals.
2
NITI Aayog page on DEPA - https://www.niti.gov.in/node/1299
37
InDEA 2.0 Framework
is the technology foundation for India for creating “a secure consent-based data sharing
framework”.
NITI Aayog paper3 articulates the need, value, and the necessity for having a technology
infrastructure like DEPA to implement the data access and sharing part of the data
protection bill.
Figure 5.1: DEPA High Level Architecture illustration for financial data (from NITI Aayog Paper)
Credentials (various certificates in digitally verifiable form) empower people and entities to
make claims about them (e.g., claims about academic degree or work experience) for
availing services and the service provider having the ability to verify those claims in a
paperless and trusted manner.
India’s Co-WIN platform is a great example of population scale implementation of W3C and
WHO:DD compliant vaccine credentialing.
3
NITI Aayog paper on DEPA - https://www.niti.gov.in/sites/default/files/2020-09/DEPA-Book.pdf
InDEA 2.0 Framework
The architecture and principles described below are adapted from recent efforts in the
skilling and education sector under NDEAR and NDEAR-H and from the efforts of Co-WIN
(vaccination credentials).
In order to achieve its objectives, the electronic credential should enable the following:
2. Portability: To ensure empowerment and choice for the credential holder, the credentials
should be digitally portable across systems participating in the ecosystem. As in the case of
physical certificates, unrestricted usage by the holder should be enabled. This includes easy
digital storage of choice of the holder and easy consented sharing for various purposes that
holder deem fit.
3. Permanence: The credentials should continue to exist and be valid beyond the lifetime of
the institution where it was awarded. That is, if a training agency which has awarded a
credential subsequently ceases to exist, the credentials still remain verifiable and portable
across the ecosystem.
4. Self-Describing: The credential model should be self-describing in a manner that the verifier
of the credential does not require private sources of information to validate or understand
it. In practice, this means that all metadata, common identifiers, taxonomies, etc should be
publicly accessible in various registries.
5. Consent-based: Design must ensure privacy preservation across the system including taking
holder’s consent for collection and use.
InDEA 2.0 Framework
6. Inclusive: Design of credentials must ensure inclusion in terms of digital and physical usage
(through printed modes with signed QR codes etc.), multi-lingual support, online and offline
usage, and work seamlessly with inclusive and accessible technologies.
Credential Issuance: Various systems implementing VCs as per InDEA 2.0 should set up
credential issuance platforms (ideally by using existing open source implementations - see
DPGA registry5 for globally available implementations - which is recommended for
Government systems or using commercially available implementations) to issue standard
schema based W3C VC complaint credentials, give choice to users to download it, access via
Digilocker, and also via any additional channels such as emails, instant messaging platforms,
blockchain based systems, etc. Such issuance platforms should provide both natively digital
formats along with a printable format which contains a digitally signed QR code. In addition, a
process for issuance through revocation (as necessary) be implemented in such platforms.
Data Empowerment: Platforms implementing InDEA 2.0 should also implement DEPA
architecture for all personal data access (including transactions, audit data, etc.) so that the
individual/subject can access their data in a machine readable and digitally signed manner.
Such consented access should be based on MeitY personal data sharing and consent
principles. While implementing InDEA 2.0, systems should build core personal data APIs
(Information Provider APIs) internally and start allowing users access it via a user interface
built into those platforms. That allows InDEA 2.0 implementers to empower users with data
even when an external consent manager and a data network is not yet in place. And when an
open data network and consent manager falls in place, these same APIs can be then used to
allow users to access their personal data through other applications as well.
4
W3C Verifiable Credentials - https://www.w3.org/TR/vc-data-model/
5
Digital Public Goods Global registry - https://digitalpublicgoods.net/registry/
InDEA 2.0 Framework
But, if we look at the World Wide Web or Email, we see a different picture. We see multiple
platforms connected co-existing and interoperating allowing any browser to view any website or
someone to send email through one service provider to a recipient on another email service. This
is because of the underlying “open protocols” (such as HTTP or SMTP) that enable such “networks
of platforms” to interconnect and interoperate. These networks enable “flow of value” using
these open protocols and bring out a much more decentralized ecosystem architecture. India’s
mobile phone network is another classic example of this where many providers can interconnect
seamlessly due to underlying open protocol (GSM).
The following figure depicts the difference between a “platform approach” and “protocol approach”.
Given India’s federal structure, growing startup ecosystem, and diverse usage scenarios, it
is essential that Government departments and ministries look at facilitating open
ecosystem networks via open protocols that allow many applications and many platforms
to co-exist, give choice to consumers and providers, and drive innovation and growth
while preserving interoperability.
5.3.3 Open Networks in India
India has already started reaping the benefits of creation of such open ecosystem networks that
allow many applications and platforms to interconnect and interoperate seamlessly using open
protocols. Following table gives the current and upcoming networks.
eSign Instant digital signature service for a billion people built on eSign cca.gov.in
an open protocol (APIs)I approach allowing any application
to connect to any eSign provider in an open and
interoperable way.
PHR Personal Health Records network is an open network using DEPA nha.gov.in
(upcoming) a consent manager framework to enable individuals obtain
their health records and provide consented access.
KOMN Kochi Open Mobility Network – an open mobility network Beckn for KMTA –
connecting various modes and providers (taxis, auto Mobility openkochi.net
rickshaws, metro, buses, etc.) through an open protocol to
many consumer apps.
ONDC Open Network for Digital Commerce - an effort launched Beckn for ondc.org
(Upcoming) under the leadership of the commerce ministry to create a Commerce
decentralized commerce network for various types of
commerce in India. Currently in early pilot mode.
UHI Universal Health Interface - an open network to unify health DHP nha.gov.in
(Upcoming) and wellness services and enable interoperable discovery (Beckn for
through fulfillment of various health and wellness services. Health)
42
InDEA 2.0 Framework
It is thus important for Government agencies adopting these to adopt existing open source
protocols or work with the relevant communities to adapt and enhance as needed. By adopting
open protocol specifications ideally built by an open-source community, these networks are
driven by openness and interoperability as key principles.
While technology implementation of such open networks is possible by adopting the open
protocol as digital commons, it also requires a mechanism to manage, co-ordinate, incentivize,
and evolve the nationwide adoption and long-term sustenance of such open networks. It is
therefore important to define a governance framework that is formed and informed by the
purpose of the network. The approach of the RBI in this area may be examined in this context.
Adopting Protocol: To explore working with the communities to adopt existing open source
protocols to ensure a sustainable development and rapid adoption.
43
InDEA 2.0 Framework
Implementation Framework
InDEA 2.0 Framework
InDEA tries to address the needs of large and complex digital ecosystems as they evolve. These
needs may not be precisely articulated in the early stages but are discovered or evolve over a
period. Hence the traditional way of systems development by the government either by
themselves or through outsourcing may not work perfectly or efficiently. Digital ecosystems
require implementation frameworks that are non-traditional and provide substantial degrees of
freedom to the private sector to ‘build’ the ecosystem organically over a period. However, for this
to happen, the Government needs to establish two types of enablers, namely, policy enablers
and technological enablers. Establishing these enablers calls for special efforts, which can be
made in a phased manner after this framework is formally notified after due process of
consultation and approval.
a. Procurement Policy for digital ecosystems: which should, inter alia, enable the
following:
i. Outcome-based procurement process
ii. Outcome and SLA-linked terms of payment
The procurement policy should be used sparingly in cases where Government must
necessarily build certain core infrastructure or building blocks.
b. PPP Framework: a framework for public sector agencies to collaborate with the
private sector to create innovative and scalable digital ecosystems that provide
customer-centric services. The role of the public sector would be that of an enabler
or facilitator and private sector plays the major role in the design and
implementation. Public sector, for instance, can enable access to relevant data, use
of its field machinery, and delivery systems, besides fast-tracking/ simplifying the
licensing / statutory processes. The framework would enable selection of PPP
projects and partners in a transparent ad accountable manner. It would ensure that
the public and private sectors take up responsibilities which they are best positioned
to perform.
c. Data management and sharing policy: Data is the oxygen of digital innovation.
Providing access to the data available with the public sector to the private sector
would spur innovation and value-added services in the G2C, G2B and B2C space.
Organizations, both public and private alike, are reluctant to share the data collected
by them with other organizations for several reasons. This would impede the
evolution of digital ecosystem. To overcome this barrier, central and state
45
InDEA 2.0 Framework
governments should come out with appropriate policies for managing data in public
sector and sharing the same, with requisite safeguards, with those requiring the
same for beneficial purposes. The governments can provide guidelines on what
types / categories of data – historic data, master data, and transactional data - can
be open, what kind of data needs specific permission/ privilege to access and how
the departments can share data with other departments and the private sector.
MeitY can develop model policies and guidelines in this regard to ensure uniformity
and speed in adoption.
d. Rules of Engagement
A digital ecosystem comprises of several types of players both on the demand side
and supply side, across the entire value chain. The pace of growth would not only be
slow but also haphazard in the absence of a set of rules. It is like the condition of
traffic, including traffic jams in the absence of the rules of the road and the traffic
signals. The rules of engagement could be generic with some special provisions for
each sector. The rules specify (i) how to get engaged with the public sector agencies
for access to data (ii) the compliance requirements to be met (iii) the minimum
required IT Infrastructure and safeguards on security, privacy (iv) trust (v) standards
and protocols to be adopted and (vi) mechanisms for grievance redressal.
MeitY can develop model rules of engagement to ensure uniformity and speed in
adoption.
a. Ecosystem sandbox: The concept of Sandbox had its origins in relation to developing
solutions in a highly regulated sector, like the financial sector. We have a few
examples of Sandboxes in India set up by RBI, IRDA and NHA. It is desirable that
every large digital ecosystem sets up its own ‘ecosystem sandbox’ to validate
compliance of a solution with regulatory requirements but also technological
requirements like interoperability, security and privacy besides commercial viability
and scalability. A reference architecture for ecosystem sandbox may be designed to
cut short the gestation period in establishing the sandbox in any sector.
b. Data Exchange: The basic concept on which the visionary idea of data economy is
founded is the establishment of a data exchange(s) that enables the providers and
consumes of data to discover each other and the data (available/ required), and to
exchange the data with ease, transparency, and compliance. A high-level reference
model of the Data Exchange is provided in Annexure 4. Ministries, States and the
other ecosystem players can explore setting up data exchanges needed in various
sector to accelerate the development of data economy, which is estimated to be of
the order of US$ 500 billion in 2025. The DEPA framework designed by NITI Aayog
may be leveraged in this regard.
c. Gamechangers: The example set by UPI gives credence to the belief that most of the
sectors of the economy have the potential for discovery of technology
gamechangers that are innovative, disruptive, impactful and pan-India. It is
necessary for each sector to create appropriate incentives for the discovery of the
46
InDEA 2.0 Framework
6.2 Guidelines for architecting InDEA Digital Ecosystem for a sector/ State
Strictly speaking, digital ecosystems can’t be architected. They evolve. However, it is desirable
that the proponents create an aspirational picture of what the digital ecosystem should achieve
and could visualize the same in the form of an architecture. The following is a possible path for
such a visualization.
47
InDEA 2.0 Framework
c. Standards
Standards are of two broad categories – domain standards and technical standards.
While the digital architecture is basically concerned with the technical standards, it is
necessary to consider the domain standards as well since an ecosystem can not evolve
speedily in the absence of the domain standards that flow across the value chains of the
sector.
An extensive list of technology standards has been provided in IndEA 1.0. These
standards may be updated by MeitY annually and made available in inDEA Portal for the
benefit of all the stakeholders.
d. Implementation Framework
An architecture can be as good as it is implemented. As alluded to earlier, Government
can play the initial catalyzing role in the evolution of digital ecosystems. This involves
essentially, setting up a Program Management Unit (PMU), establishing Architectural
Governance structure, creating a core group drawn from the community for setting the
vision and identifying the priorities and core building blocks, defining the specifications
of the building blocks, selection of an implementing agency or consortium that creates
all the enabling environment for the ecosystem to evolve.
An important aspect of the implementation framework is establishing an institutional
mechanism for the implementation and sustenance of the initiative. The two obvious
choices are to entrust the responsibility to one of the organizations of the ministry or
the State that has all the required capabilities to handle the multiple tasks or to establish
an SPV to undertake the program. These capabilities include technical, domain, legal,
commercial and program management. In either case, the organization (a wing in an
existing organization in the first option and the SPV in the second option) shall be
autonomous in taking all architectural decisions, agile and have the necessary authority
over the jurisdictions in which the initiative is to be implemented. The successful
examples of SPVs are UIDAI (Aadhaar), NPCI (UPI) and GSTN (GST).
48
InDEA 2.0 Framework
From an architectural perspective, like that of InDEA 2.0, it is necessary that architectures should
be so designed to ensure that the emerging technologies are mainstreamed into the architecture
by design rather than being retro-fitted. Organizations embarking on greenfield IT projects should
explore the feasibility and desirability of deploying emerging technologies for enhancing the
value to stakeholders and to innovate.
49
InDEA 2.0 Framework
· The concept of digital ecosystem is nascent and not much knowledge exists on it, even
among management and technology professionals.
· InDEA 2.0 is a high-level framework, requiring significant detailing to be done in the
context of any Ministry or State to create the right architecture and building blocks.
· Realizing interoperability across multiple layers of the ecosystem could be quite
challenging, requiring significant change management in multiple organizations, public
and private.
· Concepts like co-design and co-development, enablement rather than building are
easier said than done.
Executing the InDEA program is a gigantic and complex task especially given the organizational
dynamics, complexity of the government sector and the diversities across the country. This
requires a series of carefully designed plans to be undertaken widely amongst the target
groups for graduating from “capacity building to competency building”.
· The government staff are categorized under either Administrative or Policy streams.
Typically, the targeted group from the government sector would be a hybrid group with
the following functional profiles.
o Top policy makers and administrators at Central and State Governments-
Secretaries/Addl/Joint Secretaries to GOI;
o Principal Secretaries to State Governments, Commissioners
o Heads of Department of Central and State Governments.
· The central theme of this program would be around the principles of Ecosystem
Architecture in a Federated hierarchy with security/privacy principles in focus.
52
InDEA 2.0 Framework
• Abstract
The goal of this module is to provide an overview of digital governance, the overarching
vision of Digital India Program and the principles of InDEA 2.0. Digital governance is often
defined as the adoption and use of Information and Communication Technologies (ICT),
in particular the internet, to transform the relationship between government and society
in a positive manner. The major reform paradigm of digital governance is moving towards
an entrepreneurial approach synchronizing with the functional hierarchy of the
government. In case of IndEA2.0 this transforms to architectural approaches in a
federated system with privacy and citizen-control in focus. The topics couls include the
basics of (i) enterprise architecture and ecosystem architecture (ii) Data Governance (iii)
Data Management (iv) Data Protection (v) Interoperability (vi) Principles of Federated
Architecture (vii) Procurement and PPP for InDEA (viii) Capacity & Competency Building
(ix) Business Vision and Business Architecture (x) Role of emerging technologies (xi)
Concepts of Building Blocks and (xii) Architecture Governance.
b. Stream 1 – Administrative
• Abstract
The goal of this module is to provide concepts that are crucial for IndEA2.0 laying the
foundation for the importance of administrative aspects of EA in governance. The
advanced concepts of technology are introduced in a gentle way. The module wraps up
with focus on significance of factors like partnerships, co-design, stakeholder
engagement, enablement as the preferred option compared to building, outcome-focus
of InDEA2.0, basics of IndEA 1.0 and Agile IndEA framework.
c. Stream 2 – Policy
· Abstract
The goal of this module is to provide deeper insights of InDEA2.0 laying the foundation
for the importance of policies related to technology, especially data policies and PPP
frameworks. They are crucial enablers to the success of InDEA 2.0. The advanced aspects
of technology are introduced in a gentle way. The module wraps us with focus on
significance of factors like privacy, AAA, security, provenance, performance, quality,
capability, usability and availability for the success of InDEA 2.0
53
InDEA 2.0 Framework
b. Stream 1 – Architectural
• Abstract
The goal of this module is to provide complete deep insights in to EA models (both
generic and in governance), technology tools and trends. Crucial aspects of security and
privacy by design are dealt in detail. The module wraps up with focus on components of
EA, components that enable Federated models with a case study on IndEA and digital
ecosystem.
• Stream 2 – Systems
• Abstract
The goal of this module is to provide deep insights into technology and trends for EA
from the point of view of a systems professional with focus on Data and Information, the
framework for implementing programs with colossal cross sectorial, high velocity near
real time data. The module wraps up with focus on infrastructure provisioning for
Enterprise Federated Architecture in governance with crucial aspects like security,
privacy, availability and performance in infrastructural provisioning.
This program would be open to any person/professional to attend and earn a certificate.
Typically, the program will run on lines of popular MOOCs programs. It is also proposed
that this program can be accredited to one of the popular MOOCS programs, after it gets
stabilized in due course of time.
The detailed course contents will be based on targeted outcome of the InDEA 2.0
Certificate course.
54
InDEA 2.0 Framework
Learning is always augmented with new methods to deliver training material personalized to
the scenarios of the domain in which the trainees are working.
The need for hybrid delivery mechanisms is emphasized. An appropriate mix of F2F mode,
virtual CB, self-paced learning and workshop mode is proposed.
· Face to Face
o On-site : one faculty per 15 candidates.
o 2 days for basic and 5 days for advanced programs.
· Virtual CB
o Online programs with fixed program schedule followed by standard
certification in IndEAD2.0 as defined before.
· Self-paced learning
o Online and offline programs followed by standard certification in IndEA2.0
based on adopted pace of the candidate.
· Workshop mode
o On-site : one faculty per 15 candidates
o Group discussions on topics related to InDEA 2.0
o Simple rapid evaluation methods and metrics
o Certification of participation in InDEA 2.0 workshop.
55
InDEA 2.0 Framework
Choosing proper methods for creation of content enhances its value. This includes crowd
sourcing and curation, commissioning development of case studies by academic and research
institutions.
Considering the broad nature of the process of content creation and dissemination the
following methods are proposed
· Detailed documentation, case studies and instruction/training creation based on India
specific Digital governance programs – Academic institutes, Government and Service
providers can be pooled in to create the contents
· Subject Matter Experts (SME) to create rich contents on SOA (State of Art), Trends and
Standards.
· Academic and research institutes on Emerging technologies and Indigenous adoption –
to give inputs for creating course contents and lecture materials.
· Interviews of successful practitioners / administrators of large enterprise digital
transformation projects
· All lectures and training to be created and handled by either Subject Matter Experts
(SMEs) or certified professionals.
The above model can be widely and efficiently adopted based on a robust institutional
framework. This plan should include procedures, formal/informal conventions, customs and
norms to evaluate the maturity level and the typical candidates for the same.
This framework can be in the form of exhibited proficiency and role played in adoption,
proliferation and knowledge imparting on/of InDEA 2.0.
56
InDEA 2.0 Framework
· Identified Academic institutes may act as nodes for InDEA 2.0 certification program.
· InDEA 2.0 (theory + practical) optional course at BSC / MSC/ BE IT streams with a mini
project.
· Candidates selected for AIS and Central Services to undergo a mandatory InDEA 2.0
training program at Fundamental level (Level 1)
· Training Institutes (with InDEA 2.0 certified experts) may provide institutional
collaboration for imparting training to private sector professionals.
· Public sector employees working at mid-management level and above to a mandatory
fundamental level InDEA2.0 training (by any delivery channel) and get certified
57
InDEA 2.0 Framework
GLOSSARY
GLOSSARY
58
InDEA 2.0 Framework
ANNEXURES
InDEA 2.0 Framework
IndEA Overview
IndEA defined
IndEA, a catchy acronym for the India Enterprise Architecture, is a framework for developing a
holistic architecture treating the Government as a single enterprise or more realistically, as an
Enterprise of Enterprises, which are functionally inter-related. IndEA is a structured combination of
several Reference Models that, together, enable a boundary-less flow of information across the
length and breadth of the government and facilitate the delivery of integrated services to the
stakeholders, namely, the citizens, businesses and employees. Strictly speaking, IndEA is not an
Enterprise Architecture as its name seems to connote. It is a comprehensive and convenient
framework for developing Enterprise Architecture to support ICT enabled transformation across
governments. It is an authoritative reference providing an integrated, consistent and cohesive view
of strategic goals, business services and enabling technologies across the entire organization. IndEA
can be adopted and used successfully, by the Central, State and Local Governments alike,
irrespective of their size and current status of technology implementation. It can also be used by
PSUs, large departments and agencies of the Government to derive the envisaged benefits.
Simply stated, IndEA is a way to establish Unity in Diversity in the domain of e-Governance. It is a
framework that enables the development and implementation of Enterprise Architectures
independently and in parallel by all governments and their agencies across India, conforming to the
same models and standards.
60
InDEA 2.0 Framework
IndEA brings to the table the entire value proposition of adopting Enterprise Architecture plus more.
It derives its approach from the globally known architectural frameworks like the TOGAF, Zachman
and the Federal Enterprise Architecture. The models and concepts contained in these global
frameworks have been substantially simplified and suitably contextualized to the Indian conditions.
The principles of ‘Just-in-Time’ and ‘Just Enough’ have been advocated in the design and
implementation of Enterprise Architecture.
1. IndEA Framework is basically designed keeping the architectural needs of the State
Governments. However, the Models are developed in a sufficiently generic manner,
adopting standard notations, such that the Framework can be adopted by the Ministries of
the Central Government and the CPSU’s in the upper tier and the Local Governments in the
lower tier.
2. Federated Architectural Pattern is chosen for IndEA framework for better administrative
feasibility, need for decentralization of implementations, on-boarding of legacy/ ongoing
efforts of e-Governance and above all, the need for state governments to have the flexibility
to build state specific ICT services. The Core Platform is the backbone to provide ONE
Government Experience and interoperability. Any Government or agency delivering ICT
services should centrally deploy the Core Platform. In this sense, IndEA Framework adopts a
hybrid architectural pattern – a combination of centralization of core and common assets
and decentralization of domain platforms.
Structure of IndEA
In line with other globally known architectural frameworks, the structure of IndEA consists of a
number of Reference Models, each dealing with a specific domain of the Enterprise Architecture. A
Reference Model is an abstract representation of the entities relevant to a domain of the
Enterprise Architecture, the inter-relationships among those and the standards to be followed.
The representation is both graphical - adopting standard notation like the UML, and descriptive -
61
InDEA 2.0 Framework
specifying the capabilities of each of the components (entities) comprising the Reference Model.
Each Reference Model also contains the list of standards that should govern the entities, their
relationships and the manner of communications between them. All the Reference Models
comprising IndEA are technology-agnostic. These Reference Models are, by definition, devoid of the
details specific to their implementation. The Performance, Business, Data, Application and
Technology Reference Models using UML notations are depicted in the Annexure (X) – Reference
Models in UML Notation.
Through a combination of the above-stated 3 basic attributes of all the Reference Models, namely,
abstraction, standards-base and technology-neutrality, the IndEA framework is sufficiently generic
for its widespread adoption by various entities of Government from national to state to local
authorities and organizations.
IndEA framework comprises of 8 Reference Models, represented graphically below, viz., Business,
Principles of IndEA
An Enterprise Architecture is to be founded on a set of Principles that inform and guide the
Architecture Development process. A good set of Principles should satisfy five criteria, namely,
Understandable, Robust, Complete, Consistent and Stable.
Citizen-centricity, Outcome-focus, Standardization, Reusability and Integration are the key mantras
followed while designing IndEA. While individual sets of principles have been stated and explained in
the respective Chapters relating to the 8 Reference Models, the most important of these principles
are given below.
InDEA 2.0 Framework
1. SDG Linkage: Performance Measurement Systems and associated metrics are aligned to
Sustainable Development Goals prioritized by the Government.
2. Integrated Services: Integrated Services that cut across agency-silos are identified, designed
and delivered through multiple delivery channels, to realize the vision of ONE Government.
3. Sharing & Reusability: All commonly required Applications are abstracted to be built once
and deployed across the Whole-of-Government through reuse and sharing. Sharing &
Reusability shall be subject to conformance with the principles of Security & Privacy.
4. Technology Independence: Application Design is open standards-based and technology-
independent.
5. Data-sharing: Data is shared across the Government, subject to rights and privileges, so as to
prevent development and use of duplicative sets of data by different agencies. Data Sharing
shall be subject to conformance with the principles of Security & Privacy.
6. Cloud First: Cloud infrastructure is chosen by default for deployment of applications and on-
site option is resorted to only with strong justification.
7. Mobile First: Mobile channels are mandatory for delivery of all services, among all delivery
channels.
8. Federated Orchestration: Integration services, capabilities and orchestration processes are
federated.
9. Primacy of Principles: The principles specified in this framework govern all reference models
and their implementations.
The key objective of PRM is to provide a uniform and consistent mechanism to measure the
efficiency and effectiveness of the different sectors or domains in achieving the overall goals of the
Government. The principal instrument of the PRM is a set of KPIs designed rationally to measure the
outputs and outcomes of the various programs, schemes, projects and activities. A prioritized and
phased approach for implementation of PRM is recommended so as to avoid the situation of
creating a plethora of KPIs, which hide the actual performance and outcomes.
The BRM is pivotal for the design of a good Enterprise Architecture, in so far as it looks at purely the
business vision and the functions/ services required to fulfil that vision but not the technologies
required to be used. The key entity in BRM is Service, be it customer-facing or internal. The
watchwords of BRM are – Service Portfolio, Citizen/Business-centricity, Service Prioritization and
Integration. A successful implementation of BRM requires a fundamental re-engineering of the
Business Processes, elimination of non-value-adds and above all, identification of services that are
common across the Government or across groups of departments and abstracting them to a
combination of uniform processes and workflows.
With a view to give a concrete shape to the BRM, the Group attempted an identification of the 16
vertical domains and 12 horizontal functions, which, together, represent most of what a
Government does.
63
InDEA 2.0 Framework
An aspirational goal of IndEA is to support the concept of ‘ONE Government’ with a single interface
offered to the citizens, hiding the boundaries of government agencies. It necessarily involves the
breaking of the departmental silos. Since it is not practically feasible to break the silos physically, this
laudable objective is sought to be achieved by breaking them virtually, through the new concept of
Virtualization of Departments.
The Application Reference Model provides the foundation to automate Services, identified as a part
of the Business Reference Model. It enables government to achieve its objective through
collaboration and data-sharing between & within departments thereby providing effective business
services to its stakeholders.
ARM provides a framework for grouping similar applications to maximize re-use. To this end, a
concentric set of layers represent the ARM Meta-model within IndEA. The inner-most layer of ARM
is the Core Platform, which provides the most generic services in a domain-agnostic, application-
agnostic and technology-agnostic manner. The three layers around the IndEA Core relate to
Common Applications, Group Applications and Domain-specific Applications.
ARM also captures guidelines and recommendations on Application Architecture Standards, use of
Open APIs, Microservices Architecture and Open Source Software. It also specifies the Secure
Coding Standards for Application Development.
DRM provides the structure and description of the department’s data (metadata), the logical data
model (depicting the relationship between various data elements), taxonomy, the security
associated with each data element and its sharing. It provides the framework to design the 3
components of Data Architecture, namely, Data Description, Data Context and Data Sharing. These
3 areas deal with Discovery, Creation, Management and Exchange of enterprise data. Database
Schema, Data Steward and Exchange Package are the key concepts/ components in the 3 areas
respectively. Defining Metadata and Data Standards are key activities in the design of Enterprise
Data Architecture.
TRM depicts the layout of the technology foundation of ICT-based systems to be designed for
delivery of identified business services. TRM lists all the components of the technology system on
an end-to-end basis, including IT Infrastructure, Applications, Access Devices, Communication
Systems and Service Delivery modes. TRM also defines the currently applicable open standards for
all the solution building blocks and components and identifies the Open Source Products for each
technology component.
TRM also deals with the various considerations for designing the solution architecture besides the
options for application deployment and service delivery. Important among these are insourcing or
outsourcing strategy, cloud strategy, and the mobile strategy.
Integration of Governmental Business processes and services across the breadth of the enterprise is
needed for delivering the services conveniently to the citizens on a sustainable basis. Government
entities need to organize, secure, prioritize, classify, and publish the information needed by other
64
InDEA 2.0 Framework
entities for seamless interoperability. IRM consists of 6-layers of integration, namely, Performance,
Process, Service, Application, Data and Infrastructure.
The objective of the IRM is to identify all the technology options for integration and provide
guidelines and recommendations for integrating business applications, services, information systems
and platforms for a boundary-less information flow.
Given the accent of IndEA on providing ONE Government experience to the users, the Integration
Architecture assumes special importance.
The SRM delineates the overall framework for providing information security to the entire gamut of
IT systems in the enterprise. Integrity, privacy, confidentiality, and availability of information / IT
systems are the key concerns addressed by SRM.
SRM adopts a layered approach to identifying and meeting the information security needs of the
enterprise. The model identifies the security controls to be applied at 6 layers, namely, the Business
Layer, Data Layer, Application Layer, Perimeter Layer, Network Layer and the End Point Layer. SRM
also touches upon the manner of designing Security Policies and Standard Operating Procedures.
The objective of GRM is to manage and maintain architecture requirements and artefacts. It
comprises of enterprise structure, processes and standards to ensure that the architecture is
consistent with the business vision and objectives of the enterprise. Effective and efficient EA
Governance ensures that priorities are based on broad consensus across the enterprise. EA is a
continuous activity and governance is an integral part for its successful implementation and
maintenance.
IndEA framework recommends a 3-tier governance structure, namely, at the political, executive
and technology levels.
The framework further recommends the establishing of 2 entities with distinct roles and
responsibilities namely, Architecture Governance Board and IT Governance Board. Blurring or
overlap of these two roles is likely to create conflicts and delays.
EA Program has to be governed keeping in view the triple constraints, namely, Scope, Time and Cost,
which represent the 3 sides of a Project (Program) Management triangle. One side can’t be changed
without affecting the other. A brief treatment of the implications of Scope, Time and Cost has been
given as a part of GRM.
Implementation Framework
IndEA is a framework for developing full-scale Enterprise Architecture for Governments. The 8
Reference Models comprising it need to be converted into respective sets of Architecture Artefacts
so as to derive the maximum benefits out of IndEA. Such a conversion of RMs into Enterprise
Architecture Artefacts involves Government-specific and/ or domain specific details to be worked
on. IndEA Adoption Guide describes the methodology to be adopted for using IndEA to develop
Enterprise Architectures.
65
InDEA 2.0 Framework
At the whole-of-government level, an Architecture team shall maintain the IndEA framework by
continuously evolving reference models through the transformation journey. Thereby, IndEA is kept
relevant and as a means of identifying new common capabilities.
66
InDEA 2.0 Framework
Annexure 2 :
Indicative set of principles of governance of Federated Architecture
1. Federated Architecture
(FA) operates collaboratively, where governance is divided between a central authority
and constituent units, balancing organizational autonomy with enterprise needs
2. The Central Authority's architecture can focus on the dynamics of economies of scale,
standards, interoperability and the common requirements, while the constituent units'
(States and organizations) architectures have the flexibility to pursue autonomous
strategies and independent processes
3. Participating members can jointly agree upon the common goals and governance of the
federation which is expressed by the policies governing the roles and responsibilities of
membership, resource discovery, and resource access.
4. There is an administration role whereby federation membership, resource discovery, and
resesource access can be granted or revoked according to governance policy
5. States and organizations can participate in a federation by selectively making some of
their resources discoverable and accessible by other federation members
6. While the purpose of a federation is to collaborate and share resources, resource owners
retain ultimate control over their own resources
7. The design of all the systems in the federation shall conform to the prevalent laws and
regulations relating to security, privacy and data‐sharing.
67
InDEA 2.0 Framework
1. Executive Summary
The GST System Project is a unique and complex IT initiative as it established for the first time a
uniform interface for the taxpayer under indirect taxes through a common and shared IT infrastructure
between the Centre and States. The Centre and State indirect tax administrations which used to work
under different laws, regulations, procedures and formats and consequently the IT systems worked as
independent sites, were integrated into one system with uniform formats and interfaces for taxpayers
and other external stakeholders.
A centralized approach to bringing a complex tax system to a single point interface with stakeholders,
has resulted in optimum utilization of system and human resources as well. The availability of granular
data on invoice and HSN has proved to be a big tool for improving compliance. This data for the whole
country available at one place is also being used for policy purposes apart from increasing compliance.
The matter relating to putting in place a strong IT Infrastructure and Service back bone which enabled
capture, processing and exchange of information amongst the stakeholders (including tax payers,
States and Central Governments, Accounting Offices, Banks and RBI) was discussed in the 4th meeting
of 2010 of the Empowered Committee of State Finance Ministers (EC) held on 21/7/2010. In the said
meeting the EC approved creation of an ‘Empowered Group on IT Infrastructure for GST’ (EG) under
the chairmanship of Dr Nandan Nilekani along with five state commissioners of Trade Taxes.
The Group was mandated to suggest, inter alia, the modalities for setting up a National Information
Utility (NIU/ SPV) for implementing the Common Portal to be called GST Network (GSTN) and
recommend the structure and terms of reference for the NIU/ SPV, detailed implementation strategy
and the road map for its creation in addition to other items like training, outreach, etc. Prior to this, the
Union Ministry of Finance had set up the Technical Advisory Group for Unique Projects (TAGUP) in
March 2010 to make recommendations on the roadmap to roll out five major financial projects
including GST.
The EG held seven meetings between 2nd august 2010 and 8th August 2011 to discuss the modalities.
68
InDEA 2.0 Framework
After due deliberations, the EG recommended creation of a Special Purpose Vehicle for implementing
the GST System Project. To enable efficient and reliable provision of services in a demanding
environment, the EG recommended a non- Government structure for the GSTN SPV with Government
equity of 49% (Centre – 24.5% and States – 24.5%) after considering key parameters such as
independence of management, strategic control of Government, flexibility in organizational structure,
agility in decision making and ability to hire and retain competent human resources. The shareholding
pattern would ensure that the Centre individually and States collectively are the largest stakeholders at
24.5% each. In combination, the Government shareholding at 49% would far exceed that of any single
private institution.
The Government of India approved the proposal for setting up a Special Purpose Vehicle to be called
Goods and Services Tax Network on the lines mentioned above on 12th April 2012. Following
decisions were taken in this context:
1. Suitable and willing non-government institutions would be identified and firmed up by the
Ministry of Finance to invest in GSTN-SPV prior to its incorporation.
2. The strategic control of the Government over the SPV would be ensured through measures
such as composition of the Board, mechanisms of Special Resolution and Shareholders
Agreement, induction of Government officers on deputation, and agreements between GSTN
SPV and Governments.
3. The Board of Directors of GSTN SPV would comprise 14 Directors with 3 Directors from the
Centre, 3 from the States, a Chairman of the Board of Directors appointed through a joint
approval mechanism of Centre and States, 3 Directors from private equity stake holders, 3
independent Directors who would be persons of eminence and a CEO of the GSTN SPV selected
through an open selection process.
4. Relaxation in relevant rules would be granted to enable deputation of Government officers to
the GSTN SPV for exercise of strategic control and for bringing in necessary domain expertise.
5. GSTN SPV would have a self- sustaining revenue model, where it would be able to levy user
charges on the taxpayers and the tax authorities availing services.
6. GSTN SPV would be the exclusive national agency responsible for delivering integrated indirect
Tax related services involving multiple tax authorities. Accordingly, any other service provider
seeking to deliver similar integrated services would be required to enter into a formal
arrangement with GSTN SPV for the services.
7. GSTN would be funded through a one- time non- recurring Grant- in aid of Rs. 315 crore from
the Central Government towards expenditure for the initial setting up and functioning of the
SPV for a three year period after incorporation.
Objective-
On 1st of July, 2017, GST brought together multiple tax regimes administered by various tax
authorities, including central and 36 states and union territories and to supplement this revolutionary
reform, Goods and Services Tax Network (GSTN) has built Indirect Taxation platform to help taxpayers
in India to prepare, file returns, make payments of indirect tax liabilities and do other compliances.
GSTN operates primarily with the following objectives-
69
InDEA 2.0 Framework
● Provide common and shared IT infrastructure and services to the Central and State
Governments, Tax Payers and other stakeholders for implementation of the Goods & Services
Tax (GST).
● Provide common Registration, Return and Payment services to the Tax payers.
● Partner with other agencies for creating an efficient and user-friendly GST Eco-system.
● Encourage and collaborate with GST Suvidha Providers (GSPs) to roll out GST Applications for
providing simplified services to the stakeholders.
● Carry out research, study best practises and provide Training and Consultancy to the Tax
authorities and other stakeholders.
● Provide efficient Backend Services to the Tax Departments of the Central and State
Governments on request.
● Develop Tax Payer Profiling Utility (TPU) for Central and State Tax Administration.
● Assist Tax authorities in improving Tax compliance and transparency of Tax Administration
system.
● Deliver any other services of relevance to the Central and State Governments and other
stakeholders on request.
●
3. Implementation Methodology
Principles
GSTN was setup to ameliorate Efficiency, Transparency, Commitment, Collaboration, Excellence,
Accountability & Innovation in the finance sector of our nation. Its vision is to become a trusted
National Information Utility (NIU) which provides reliable, efficient and robust IT Backbone for the
smooth functioning of the Goods & Services Tax regimen enabling economic agents to leverage the
entire nation as One Market with minimal Indirect Tax compliance cost.
Infrastructure
GST Network was registered as a non-government, not-for-profit, private limited company under
section 25 of the Companies Act 1956 with the following equity structure-
The decision to structure GSTN in its current form was taken after approval of the Empowered
Committee of State Finance Ministers and the Union Government after due deliberations over a long
period of time.
InDEA 2.0 Framework
As per decision of GST Council, the shares held by non-Government Financial Institutions are being
transferred to Central and State Governments so that both hold 50% shares each of GSTN and it
becomes a 100% government owned company.
Capabilities-
The complexity of indirect tax reform, that is GST, required a dependable, scalable and highly secure
system to serve all stakeholders involved in administering and enforcing GST law and applicable rules.
GST System is a single face to all taxpayers for all statutory activities, such as payment of taxes,
registering for new businesses, filing of returns etc.
The use of open source technologies and platform design philosophy, enabled GST System to merge
tax systems of 36 states/UTs and CBIC into a single system, handle traffic of 1.3 Cr taxpayers, & operate
without tight integration within GST modules, external entities, technology verticals and platform. The
choice of technology principles, tools and architecture also provide for highly available fault tolerant
(HAFT) system ensuring failure proofing. Projects of GSTN are-
1. Goods and Service Tax (GST) is the largest indirect tax reform in the history of India. The
reform mandated integration of entire nation’s diverse tax portfolio into a single taxation
system. This brought upon a massive complexity in developing an IT platform, to handle not
InDEA 2.0 Framework
only the diverse tax systems of 36 States/Union Territories & Union Government, but also
needed providing a single interface for more than a crore taxpayers’ for their GST compliance
functions. GSTN has already enabled Tax Payment of 30.42 Lakh Crores by 1.25cr Taxpayers in
India.
2. EWay Bill is an Electronic Way bill for movement of goods to be generated on the eWay Bill
Portal. A GST registered person cannot transport goods in a vehicle whose value exceeds Rs.
50,000 (Single Invoice/bill/delivery challan) without an e-way bill that is generated on
ewaybillgst.gov.in. GSTN has already enabled creation of over 165 Cr. E-Way Bills so far.
3. E-Invoice known as ‘Electronic invoicing’ is a system in which all B2B invoices are electronically
uploaded and authenticated by the designated portal. Post successful authentication, a
unique Invoice Reference Number (IRN) is generated for each invoice by IRP. Along with IRN,
each invoice is digitally signed and added with QR code. This process is collectively called as e-
invoicing under GST. Over 1129 Cr. B2B Invoices have already been generated over GSTN up till
Dec,2020.
Future roadmap/sustainability-
As of now, GSTN is continuously improving taxpayer interaction with GST Portal with focus to ensure
availability of all GST Services to Indian taxpayers and authorities in a seamless manner. Currently
emphasis is on making the system more robust in terms of handling load beyond 1.5 Cr taxpayers,
ensuring application durability and improving in-site navigation to ensure better user experience.
GSTN is also enhancing its offline tools to provide more freedom at hands of taxpayers to work on
compliance related activities offline. This will also involve a tool that will enable taxpayers to do their
business accounting in digital way. An effort is being done to enhance the GSP eco-system to onboard
more service compliance activities for taxpayers.
GSTN is also engaged in creating many other value adding services like a mobile app for taxpayer
facilitation, Business Intelligence using cutting edge AI/ML techniques, improved return filing
procedure helping taxpayers have a prefilled return forms for filing and payment.
72
InDEA 2.0 Framework
1. Executive Summary
The National Education Policy 2020 (NEP) lays down a high-level road map and goals for the country in
the next 20 years - “to achieve universal access to quality education”. This requires the development of
digital infrastructure, use of technology for aiding learning and access to learning. India is committed to
attain Sustainable Development Goals by 2030 - United Nations Sustainable Development Goal (SDG) 4
for Education, requires countries to ensure “inclusive and equitable quality education and promote
lifelong learning opportunities for all”.
In the context of COVID-19 related disruption of schooling, DIKSHA made it possible for all states/UT’s
to ensure and accelerate learning/education at home through innovative programs & has been one of
the top rated Free Education App on Google Play Store in India since May 2020. DIKSHA immensely
helped in leapfrogging the use of technology for the benefit of teachers and learners across India.
DIKSHA policies and tools make it possible for the education ecosystem (educationist, experts,
organisations, institutions - government, autonomous institutions, non-govt and private organisations)
to participate, contribute and leverage a common platform to achieve learning goals at scale for the
country
As part of PM eVidya announced under the Atma Nirbhar Bharat programme, DIKSHA is the ‘one
nation; one digital platform’ for school education in India. DIKSHA is being transformed into a platform
for diverse and rich curriculum linked e-content requirements of learners and teachers for all
states/UTs accessible across digital devices (laptop/mobile/desktop/tablets, TV and radio) in order to
have coherence of access and learning experience.
At the same time, DIKSHA is designed to inherently support states/UTs to exercise autonomy,
independence and choice to craft and run learning programs to suit their needs and achieve their
goals, by using solutions, tools and data on the platform.
Objective-
Education is now increasingly resourced and conducted through digital devices to ensure continuous
learning during the Covid-19 pandemic. Schools across the country have moved towards adopting
various modes to facilitate teaching and learning at home. While digital or online education cannot
replace classroom learning, it has some advantages. It allows flexible and personalized learning at the
73
InDEA 2.0 Framework
speed of the learner and one can continuously augment and expand content through digital means.
3. Implementation Methodology
Principles
DIKSHA platform embodies, is designed and implemented on the basis of ten design principles and they
are Shared infrastructure, Enable extensibility via platform, Create transparency and accountability,
Enable extensibility via platform, Allow configurable design with plug ‘n’ play capabilities, Offer diverse
solutions, interoperable via open standards, Distributed access via multiple delivery channels, Designed
to scale via commodity computing, & Data security and privacy by design.
Building Blocks
DIKSHA is built on open source technology, made in India and made for India, which incorporates
internet scale technologies and enables several use-cases and solutions for teaching and learning.
DIKSHA is built using MIT licensed open-source technology called Sunbird, (initially upgraded by EkStep
Foundation), which is a digital infrastructure for learning and is designed to support multiple languages
and solutions and offers over a 100 micro services as building blocks for the development of platforms
and solutions.
The vastness and diversity of India is reflected in the scale at which school education operates in the
country - with about 95 lakh schoolteachers and 25 crore students, characterized by geographical,
socio-cultural and linguistic diversity. Therefore, decentralised education platform like DISHA is best
suited for the digital education system to work in India, keeping in view the ground realities of each
State and Union Territory.
DIKSHA is a flexible and evolving platform, with the below-mentioned diverse capabilities, that will
continue to evolve, based on the aggregated needs of the various states/UTs.
1. The Energised textbook solution allows educational boards to achieve that by enabling just-in-time
access to digital content through QR codes printed in textbooks. This solution enables 18 crore+
students and 70 lakh+ teachers to leverage technology in the same way as a select few have been
able to do so far.
2. Digital Teacher Training (DTT) courses allow roll out of structured learning programs targeted to
build or enhance specific knowledge and skills for learners. Over 30 lakh teachers have been
74
InDEA 2.0 Framework
3. Periodic rollout of quizzes to provide an interactive format for joyful learning and promote healthy
competition
4. Federated and multi-tenanted feature lets tenants like 35+ states/UTs, NCERT, CBSE are create and
manage their programs on DIKSHA and help in further expanding its ever-evolving horizons.
5. Diverse content in over 20 languages propagated via various mediums like TV, radio, mobile apps,
websites helps in educating diverse set of students in every part of India.
6. Features like ‘Vidya Daan’ help in sourcing, curating, and organizing content at scale and
encourages community collaboration across the country.
7. Target user based curriculum for students ranging from early childhood to higher classes, helps in
personalised & self-paced learning.
8. Compatibility with advanced technologies like Artificial Intelligence, Augmented Reality,& Virtual
Reality, and its Integrability with Digi Locker makes it one stop solution every student of India in
K12 Spectrum.
DIKSHA has witnessed more than 170 Crores learning sessions till date which showcases the relevance
of the available e-resources as well as the integration of digital learning in the daily lives of teachers
and students across the nation. It is truly an education platform for modern & digital India.
Standards
Standards used within DIKSHA include Codification standards - language, master data, etc., Content
standards (SCROM and enhanced Content Markup Language), Question Markup Language (QuML)
Specifications, Electronic Credential Specifications and other open standards for consent, security, etc.
InDEA 2.0 Framework
1. Executive Summary
The National Health Policy (NHP) 2017 defined the vision of ‘health and wellbeing for all at all ages’. The
policy strongly advocated the concept of Continuum of Care. These lofty ideals are sought to be achieved
by refactoring the existing schemes and introducing several new schemes including some digital
initiatives. Citizen-centricity, quality of care, better access, universal health coverage, and inclusiveness
are some of the key principles on which the Policy is founded. This mammoth task requires that a holistic,
comprehensive and interoperable digital architecture is crafted and adopted by all the stakeholders. In
the absence of such architecture, the use of technology in the health sector continues to grow in an
uneven manner and in silos.
In the above context the need for creating a framework for the evolution of a National Digital Health Eco-
system was recognized. This has been realized by creating the National Digital Health Blueprint (NDHB),
which is more than an architectural document, as it provides specific guidance on its implementation as
well.
The Blueprint keeps the overall vision of NHP 2017 in perspective and recommends a pragmatic agenda to
start with, adopting the principle of ‘Think Big, Start Small, Scale Fast’. To this end, it has been designed
as a layered framework, with the Vision and a set of Principles at the core, surrounded by the other layers
relating to Digital Health Infrastructure, Digital Health Data Hubs, Building Blocks, Standards &
Regulations, and an Institutional Framework for its implementation. The document also contains a high-
level action plan.
Healthcare has always been central to all development efforts be it a national or global agenda.
Government of India envisages as its goal the attainment of the highest possible level of health and well-
being for all at all ages and intends to provide universal access to good quality health care services
without anyone having to face financial hardship as is enunciated in National Health Policy, 2017.
The most promising approach adopted by National Health Policy towards this goal is extensive
deployment of Digital Tools/Technology to enhance health system performance. Government is
committed to Universal Health Coverage for all citizens; to make healthcare affordable, accessible, and
equitable, and Digital Health technology has a huge potential for supporting Universal Health Coverage
(UHC).
Ministry of Health and Family Welfare (MoHFW) prioritized the utilization of Digital Health to ensure
effective “service delivery” and "citizen empowerment" so as to bring significant improvements in the
public healthcare delivery.
To improve efficiency in healthcare delivery, extend healthcare to rural areas and provide better quality
services at low cost, certain eHealth initiatives using ICT (Information and Communication Technologies)
were undertaken by MOHFW across the country with the following objectives.
76
InDEA 2.0 Framework
The Objectives of NDHB are aligned to the Vision of NHP 2017 and the SDG’s relating to the health sector.
These include:
a. Establishing and managing the core digital health data and the infrastructure required for its
seamless exchange;
b. Promoting the adoption of open standards by all the actors in the National Digital Health Eco-
system, for developing several digital health systems that span across the sector from wellness to
disease management;
c. Creating a system of Personal Health Records, based on international standards, and easily
accessible to the citizens and to the service providers, based on citizen-consent;
d. Patient is the owner of his/her EHR and the health facilities and government entities maintain the
data under trust on behalf of patient. The collection as well as the end use of the data shall be
through a consent framework. The anonymized data can however be used for the research
purposes duly following the principles so defined. It is the responsibility of the health facility to
ensure privacy, security and confidentiality of the data.
e. Following the best principles of cooperative federalism while working with the States and Union
Territories for the realization of the Vision;
3. Implementation Methodology
Principles
An eco-system cannot be built – it must evolve. Given this, a set of Principles - rather than specifications -
were recommended to enable the evolution of National Digital Health Ecosystem. The key principles of
the Blueprint include, from the domain perspective, Universal Health Coverage, Inclusiveness, Security
and Privacy by Design, Education and Empowerment of the citizens, and from the technology perspective,
Building Blocks, Interoperability, a set of Registries as Single Sources of Truth, Open Standards, Open APIs
and above all, a minimalistic approach.
77
InDEA 2.0 Framework
Building Blocks
Building blocks are reusable frameworks or artefacts that most stakeholder groups need to rely upon for
designing, developing and delivering their services. The Blueprint identifies the Minimum Viable Set of
Building Blocks required for the health ecosystem to evolve and describes their capabilities at a high-
level. It is for the implementing organization, to arrange for the design, development and establishment
of the Building Blocks. Conformance to the NDHB Principles on one side and to the NDHB Standards &
Regulations on the other side, are critical for an efficient design and development of the Building Blocks.
Based on the study of the existing health systems, discussions with stakeholders and analysis, 35 key
Building Blocks have been identified across the 3-Level/4-layered architecture of NDHB. These have been
represented in the above Figure.
A few of the critical capabilities of heath ecosystem, addressed by appropriate combinations of the
Building Blocks, are explained briefly along with a schematic of the Blueprint:
2. Citizen to be in Control: The need for maintaining the confidentiality, security and privacy of the
health records cannot be over-emphasized. These regulatory requirements are built into the
design, rather than being retrofitted. The Blueprint achieved these complex and mandatory
requirements through a combination of a few Building Blocks, namely, Consent Manager,
Anonymizer and Privacy Operations Centre. Besides these Building Blocks, application-specific
features and relevant International standards defined in the Blueprint fortify the privacy regime.
3. Service Access/ Delivery: Omni-channel access/ delivery are an important capability required in
NDHE. This is achieved by a combination of Web (India Health Portal), Mobile (MyHealth App)
and Call Centres besides Social Media Platforms. The Unified Communication Centre enables
real-time monitoring and real-time interventions needed in the health ecosystem.
These building blocks are allocated under a high-level federated model with three levels of roles
delineated between Centre, State and Health Facilities. Except for the minimum data set needed at
Centre and State level the data shall primarily reside at health facility level.
The Application Layer of the Blueprint is merely a placeholder in so far as it identifies the thematic areas
for development and deployment of applications but refrains from listing them exhaustively. Such an
approach is adopted not only because of the large number and variety, but also because the applications
must evolve in an innovative way that cannot be defined upfront. Taking the legacy applications on board
to the NDHE requires that each application is rigorously assessed w.r.t it’s conformance to the standards,
using a set of criteria like that defined by the Digital Service Standard, notified by Ministry of Electronics
and Information Technology, GoI.
The value of the Blueprint can be realized mainly in terms of the impact the Digital Health Services make
on the various stakeholder groups. The Blueprint provides an illustrative, but by no means exhaustive list
of Digital Health Services, to indicate the nature of qualitative difference its implementation can make.
Needless to say that the portfolio of services must be validated and updated through a series of
consultations with the stakeholder groups.
Standards
The health sector must adopt the international standards in a large number of areas. However, The
Blueprint has adopted a pragmatic approach and recommended only the minimum viable set of
standards, to make it easier for the eco-system players to adopt the same. FHIR Release 4 (in a highly
condensed form), SNOMED CT and LOINC are among the standards recommended.
79
InDEA 2.0 Framework
recommended.
80
InDEA 2.0 Framework
81
InDEA 2.0 Framework
Abstract: - The goal of this course module is to provide an overview and a general idea of digital
governance in the form of InDEA 2.0 - the overarching vision of Digital India Program. Digital
governance is often defined as the adoption and use of Information and Communication
Technologies (ICT), in particular the internet, to transform the relationship between government
and society in a positive manner. The major reform paradigm of digital governance is moving
towards an entrepreneurial approach synchronizing with the functional hierarchy of the
government. In case of InDEA 2.0, this transforms to entrepreneurial architectural approaches in
a Federated Hierarchy with Privacy in focus.
Learning Objectives
· Governance, People and technology
o The realm of Public Services
o People and Process
o Administration Management Governance and Services
o Digital Divide and closing the gap
o The Entrepreneurial approach
· Digital Governance – The fundamentals
o The scope and relevance of Digitization
o Sample Digitization – A practical example
o The scope and relevance of Technology
o Sample elements of Technology - A Practical example
o The concept of “Enterprise” and relevance to Governance
o Digital ID
82
InDEA 2.0 Framework
Abstract: - The goal of this course module is to provide background of generic thought process
and concepts that are crucial for InDEA2.0 laying the foundation for the importance of
administrative aspects of EA in hierarchical governance. The advanced aspects of technology are
introduced in a gentle way. The module wraps us with focus on significance of factors like
privacy performance etc. in InDEA2.0.
Learning Objectives
· Governance Services and Technology
o Digital Government Projects as Multidimensional Initiatives
o The idea of Federation in administration and governance
o The idea of autonomy and centralization
o Technology as an indispensable tool and an enabler
o The idea of Federation in technology adoption
o Functional and conceptual components of technology
o Administrative aspects of technology
o Ease of use and User experience
o Adoption and proliferation of technology
o SOE and Digitization
o Architectural aspects of a Digitalization SOE
o EA in other countries
· Fundamental Components
o Functional components
o Infrastructure components
o Gentle introduction to Data, information, UI, Dashboards
o Gentle Introduction to design architecture and components
o Gentle introduction to Backend and Front end and Middleware
o Gentle introduction to IT hardware and communication infrastructure
83
InDEA 2.0 Framework
· Building Blocks of EA
o Definitions, Functions and Specifications
o Re-usable components
o Standards and SOA (State of Art)
o Approaches towards building “blocks”
o Types of Building Blocks
o Tools for EA.
· Policy and technology
o Technology aligned Policies of Vision, Capacity, Competency
o Technology aligned Policies for adoption and proliferation
o Technology aligned capability and performance model
o Scalability and Migration
o Federated architecture for technology proliferation in governance
o Infrastructure provisioning
o Sectorial interfaces and interoperability
o Business policies (purchase, service, contracts, development, maintenance etc.)
o IT Services/Resources as Commodities
o Technology and Vendor neutralism
o Services, Performance and Availability
o Open source approaches
o Emerging technologies and ease of their adoption
o PPP – GOI Policies
· Accommodating the Data Legislation/Laws
o Preserving privacy, AAA, non repudiation, security, provenance etc.
d. Technology Stream
(Two days [Suggested 3 X 1 Hour Session + 2 X 1.5-hour Session [Q & A/ Interactive] for
each day])
Abstract: - The goal of this course module is to provide complete heads up and deep insights in
to technology and trends for EA. The module wraps us with focus on infrastructure provisioning
for Enterprise Federated Architecture.
Learning Objectives
· Data and Technology Primer
o Introduction to Big Data
o Query Engines
o Storage Engines
o Analytics
o Ingestion and Orchestration
o Platforms (OS)
o DR DC
o Virtualization
· Big Data Frame works
o Hadoop, Apache Spark
o Infrastructure
o Clusters and Clouds
84
InDEA 2.0 Framework
e. Case study and Discussion (3 X 1 Hours + Oral presentation QA and debate for each
group, wrap-up for each of the above modules) – Optional/Place Holder
Abstract: -The goal of this course module is to discuss significant roadmaps towards InDEA 2.0 by
comparing and contrasting with digital governance adoption in India and in other countries. A short
write up on EA, digitization experience would be provided to all members to work upon. Each of the
group (administrative / policy/technology) would be divided in to small teams and come up with
ideas and framework as they see. Each group would present their learnings followed by a debate
and QA.
Learning objective
· Digital Governance
o The role of private enterprises and professionals
o Products and Services
o Participatory growth
o Digital ID, E-processes, E-administration, E-management and E-governance, E-
Services
o Data, information, UI, Dashboards
o The Backend and Front end and Middleware
o IT hardware and communication infrastructure
o IT Services/Resources as Commodities
o Technology and Vendor neutralism
o Open source approaches
o PPP – GOI Policies
· Building Blocks of EA
o Functions and Specifications
o Re-usable components
o Standards and SOA (State of Art)
o Approaches towards building “blocks”
85
InDEA 2.0 Framework
b. Architectural Stream
(Two days [Suggested 3 X 1 Hour Session + 2 X 1.5-hour Session [Q & A/ Interactive] for
each day])
Abstract: - The goal of this course module is to provide complete heads up and deep insights in
to EA models, tools and trends. The module wraps us with focus on components of EA
Learning Objectives
· Enterprise Architecture and Technology Trends
o Views, tools and languages
o Ontologies in EA
o Adopting the Technology layer
o Data, Information and Interfaces
· Security and Privacy by design
· Federated Approach
o Architecture, Data and Digital IDS
· Detailed exposure to India specific Models (and Development methodology)
o IndEA1, IndEA2
c. Technology Stream
(Two days [Suggested 3 X 1 Hour Session + 2 X 1.5-hour Session [Q & A/ Interactive] for
each day])
Abstract: - The goal of this course module is to provide complete heads up and deep insights in
to technology and trends for EA. The module wraps us with focus on infrastructure provisioning
for Enterprise Federated Architecture.
Learning Objectives
· Data and Technology Primer
o Introduction to Big Data
o Query Engines
o Storage Engines
o Analytics
o Ingestion and Orchestration
o Platforms (OS)
o DR DC
o Virtualization
· Big Data Frame works
o Hadoop, Apache Spark
86
InDEA 2.0 Framework
o Infrastructure
o Clusters and Clouds
o Compute and Storage
o Networking
· Security, Privacy, Availability, Performance (in Infrastructure Provisioning)
Abstract: - The goal of this course module is to provide complete heads up and deep insights in
to Case Studies of Aadhaar, GSTN, DIKSHA and NDHB implementation Case studies of Emerging
Technologies and their Program Management.
Learning Objectives
· Case studies of
o AADHAR, GSTN, DIKSHA, NDHB
§ Design, Architecture, Infrastructure
§ Early Challenges
§ Implementation and Adoption Success.
· Emerging Technologies
o AI IOT Block chain and Trends.
87
InDEA 2.0 Framework
88