Building a Records Management System (RMS) for National eGovernance Division (NeGD), a Digital India Corporation

The Daffodil team realized that NeGD’s primary aim with the NAD web application was to eliminate certification forgery and issuance of fake academic awards from the entire Indian education system. With this end goal and the sheer scale of this undertaking in mind, the team set out to develop a highly compliant, secure and resolute solution for the same. 

The UI for the NAD web portal was built using the high-performance React library with Laravel Lumen serving as the API backend. Data migration was carried out on the AWS cloud with managed workflows for unlimited scalability using the Apache Airflow tool. 

The Daffodil team made sure that as per NeGD’s requirements, the NAD portal had the following competencies:

High-Speed Document Transmission

NAD was linked with DigiLocker, another NeGD flagship undertaking, which serves as a nation-wide virtual storehouse for authentic documents. Universities would sign up for NAD through DigiLocker and prepare students’ certificates in a CSV file for upload. Initially, the upload duration for 15-16 lakh student records was 1 hour, but was brought down to about 12 minutes using Apache Spark Pi deployments and Redis for reading and writing sensitive data at scale.

Managed Scalability

Once the university uploads its academic records to the NAD portal, they are made available to students. Students can sign up for a DigiLocker account to get direct access to a securely maintained record of their academic certificates and exam results published via the NAD. DigiLocker IDs are sent to students through bulk messaging. These IDs are sent to a large database of students which can be scaled up as required through asynchronous group messaging mode.

Airtight Security

The Daffodil team carried out periodic security audits on NAD to identify and weed out vulnerabilities in the system. Authentication keys were open to multiple usage which made them vulnerable to attacks but this has now been eliminated. The system has also been shielded against Cross-Site Scripting (XSS) attacks and comprehensive access logs can help identify future vulnerabilities.

Streamlined Registration Workflow

Registering on the NAD portal is an intuitive process, made easier by the instruction on how to register available to first time users. A university registered on the portal has immense flexibility in modifying degree name dropdowns, configuring doctypes, and uploading records. 

The upload status and verification stage can be tracked for all academic awards and a dummy view of the final look of the certificate is also available to check for formatting errors. There are several templates available for universities to model their academic awards on.

Other Enhancements

• Several government portals show errors when displaying names of students from regions in India that use special English characters such as ‘ü’ or ‘é’. But the NAD portal has been calibrated to avoid this issue as it could lead to potential legal issues for students.
• Universities can upload and have flexibility to modify the curriculum of courses offered by them. There is also flexibility when it comes to credit exchange between universities.
• Users can add QR codes and digital signatures to academic awards to enhance their authenticity through the NAD portal.