Suggestions from China's Deepseek for securing India's Online Exams

New Delhi

A simple prompt on Deepseek, regarding how to secure online exams in India, returned a comprehensive 10-point technical and institutional blueprint built after extensive review of global practices, explicitly including China’s Gaokao infrastructure.

The plan centers on the National Secure Exam Platform (NSEP), codenamed “Suraksha Exam OS”, a read-only, digitally signed, kiosk-mode operating system that locks down commodity hardware.

USB ports, external storage, screen sharing, and background apps are disabled at the kernel level.

The OS verifies its own integrity at boot and cannot be altered by exam centers.

Key pillars

• Offline-first architecture with encrypted exam packages synced locally 30 minutes before the test via MPLS, 4G/5G, or satellite, and responses uploaded only after the session ends. This eliminates the live-internet attack surface that has plagued past breaches.
• Continuous Aadhaar-linked biometric chain, registration, entry turnstiles, passive webcam-based face authentication during the exam (flagging gaze aversion, extra faces, or objects near the face), and final re-verification at submission.
• Dynamic question generation from a high-security National Item Bank using a psychometric AI engine. Every candidate receives a unique but statistically equated form with shuffled sequences and options, rendering mass memorization or copying ineffective. Threshold cryptography ensures no single party can decrypt papers early.
• Blockchain-based immutable audit trail for every critical event, biometric matches, question access, proctor interventions, creating forensically admissible records.
• 3,000 permanent “Kendriya Pariksha Kendras” (starting with 500 upgrades) featuring thin-client terminals, multi-angle night-vision cameras, redundant networks, RF shielding or approved jammers, and a 200-meter no-device perimeter with drone surveillance.
• National Command Centre co-located with CERT-In and the Ministry of Home Affairs, aggregating edge AI behavioral alerts in real time.
• Central Exam Integrity Authority (CEIA), an autonomous body modeled on the Election Commission with standard-setting powers, unannounced audits, blacklists, and investigation/prosecution authority.
• Stringent vendor controls, source-code escrow, mandatory red-teaming, and the long-pending Public Examination (Prevention of Unfair Means) Bill with 5–10 year sentences for organized fraud.

The 36-month phased plan with Aadhaar biometrics and AI proctoring mandates, followed by pilots of the secure OS and full scaling of permanent centers is the low handing recommendations.