the user provides a fingerprint or iris scan, which is matched against the CIDR database - **Demographic authentication** — the user provides name, date of birth, gender, and address, which are matched against the database - **OTP authentication** — a one-time password sent to the registered mobile