How MonitorExam ensures Privacy with Security

MonitorExam is a solution which ensures that the exams are conducted in a credible manner.

To ensure that, it observes various factors of the student behaviour and his/her environment and raises red flags to the live proctor when it sees a possible deviation from the expected behaviour.  

This simple thing means that MonitorExam may need camera to be open even if student is giving exam from his room and that makes student vulnerable to loss of privacy.

Step 1. Common Problems Faced by Students while giving Proctored Exams:

For MonitorExam we were looking for a solution which ensured that the candidate is authenticated correctly, but at the same time, we were concerned about stressing the student by scanning his personal space.

When we came across explored state of the are security technologies, we realized that it would make the entry of the student passwordless.

This was important because a lot of times you forget your passwords.

These students, during your exam, are not allowed to carry any paper with them, where they can write their password. This makes starting an exam itself a risky task even after the student has paid, reached center on time for a reason which make not be in his control.

Since every exam is paid, student, at the time of exam has

1. performance concern - How will I perform in the exam?
2. time concern and - Will I be able to finish on time?
3. financial concern.  - Will I have to appear again?

Step 2. How MonitorExam solves the problem.

MonitorExam, at the time of verification of the student for the first time, associates a device security feature like a

Username <-> Password <-> Device Authentication

Device authentication as second factor:

Now, this device authentication can be used as a second factor i.e. the student can first enter the password and then a second authentication factor instead of the OTP.

1. enter username
2. enter password
3. enter OTP Device Authentication

Since mobile phones are not allowed in an exam, getting an OTP becomes a challenge. Hence Device Authentication as a second factor would be a good idea.

Device authentication for passwordless:

1. Enter Username
2. Enter Password Device Authentication

MasterKey with Test Administrator:

A common hardware key can be given to administrator, where he can support any student in the exam center who is not able to login due to any of the issues

Biometric Authentication with Privacy:

One big limitation of biometric data is that if stolen it cannot be changed like a password. Hence the safest way is to not let it reach the internet. MonitorExam uses a technology which ensures that the biometric data does not reach the server and remains on the Student's machine, thereby reducing the risk of privacy breach for the student.

So MonitorExam's message to the student is

"Take Exams without Giving up on your Privacy"