Examination reforms: Nilekani panel considering question vault mechanism, digital delivery of paper at last minute to prevent leaks

The Nilekani-led High Powered Task Force is considering a question vault backed by secure software. It would hold a large, vetted collection of questions instead of one fixed paper. The task force also wants papers delivered digitally shortly before examinations. These steps aim to reduce opportunities for leaks and limit the value of stealing a complete paper.

The proposed pool could contain over one lakh questions. Experts would prepare and check questions throughout the year. Questions would then be translated, verified and securely stored. For each exam, a smaller set would be selected randomly according to a design covering difficulty levels and question types. The final paper would be encrypted before delivery.

The task force is also discussing “debundling” responsibilities. One provider would not control question preparation, exam centres and conducting the test. The HPTF has held over 58 meetings and consultations in two months. It plans to submit its final report by the end of October.

A question vault is a secure digital store containing a large number of questions. Subject experts upload questions covering different topics. They are vetted, verified and translated before storage. The vault supports exams by keeping individual questions ready, rather than creating and protecting one complete paper long before test day.

With a fixed paper, one document contains the exact questions candidates will receive. That document can become a valuable target. In the vault model, the final paper is generated from a much larger pool. The selection follows a predetermined design and can match required difficulty levels and question types. Even a question setter may not know the final combination.

The SSC already uses this approach for computer-based tests. Its questions are selected, compiled and encrypted shortly before delivery. Nilekani said the HPTF is considering a similar mechanism to remove the economic incentive attached to stealing one named paper.

The HPTF proposal involves a question pool of over one lakh questions. The questions would be prepared, vetted, verified, translated and stored throughout the year. An examination would need only a much smaller selection from that pool. This scale is designed to prevent a single prewritten paper from becoming the main security target.

The SSC offers a concrete timing example. If an examination begins at 5 pm, questions are randomly selected according to a blueprint. The paper is assembled, compiled and encrypted at 4.45 pm. It is then sent to about 200 centres across the country just before 5 pm. Candidates see it only after logging in with their passwords.

The article describes the proposed approach as digital delivery minutes before an examination. It does not give one exact assembly time for every HPTF exam. The SSC timing shows how last-minute generation and transmission could work in practice, while the final HPTF recommendations remain under discussion.

A fixed paper can be copied, sold or circulated because it contains the exact questions for an examination. A question vault changes that target. It stores many possible questions, then selects only the required set shortly before the test. This means an earlier theft may reveal only fragments, not the paper candidates will actually receive.

The SSC example shows the mechanism. Questions are chosen randomly according to a predetermined blueprint, then compiled and encrypted at 4.45 pm for a 5 pm examination. The encrypted paper is sent to centres shortly before the test. Candidates can view it only after logging in and entering their passwords. The final selection is therefore not available as an ordinary printed document.

Nilekani said the method could remove the economic incentive to steal or sell a named paper. The article presents it as a way to make leaks less useful and potentially prevent them. It also notes that security must cover creation, validation, storage, selection and delivery, not only the last step.

Translation is considered a major vulnerability because a translator may see the whole paper or part of it before candidates do. When an English paper is converted into regional languages, sensitive questions pass through another stage and another set of people. That creates access to content that must remain confidential until the examination.

The article cites the recent NEET-UG leak as an example. An official said a Marathi translator came to Delhi, translated questions, memorised them and reproduced them to earn money. The account shows how translation can expose questions even when the original paper is protected. A secure, technology-backed vault is being considered to address this weakness.

The proposed process would have questions vetted, verified, translated and stored securely. It would then select and assemble the required paper shortly before delivery. The article also stresses that translation is only one part of the wider process. Creation, validation, storage, selection and delivery must all be secured.

The task force is discussing “debundling” examination responsibilities. Under this approach, one service provider would not handle question preparation, examination centres and the conduct of tests. The aim is to avoid concentrating every sensitive task in one organisation and to divide the examination process into controlled responsibilities.

Question setting and translation involve access to exam content. Centre management and delivery involve access to operational systems and test locations. If these functions are separated, each provider would handle a narrower part of the process. The article does not prescribe a precise allocation or number of providers. It presents separation as a reform being considered after the NEET-UG paper leak.

This approach complements the question vault and last-minute digital delivery. It would not replace encryption, vetting or secure storage. Doreswamy P said protection must cover the entire process, from question creation and validation through storage, selection and delivery. The HPTF is expected to include its conclusions in a final report by the end of October.

A digital question system needs protection throughout its life cycle. Questions must be secured when experts create and upload them, when they are vetted and translated, and when they enter storage. The same protection must continue during selection, paper assembly, encryption and delivery. A weakness at any stage could expose exam content.

Doreswamy P said the system should combine strong encryption, controlled access, separation of responsibilities and comprehensive audit trails. Encryption protects stored or transmitted content from being read without authorisation. Controlled access limits who can handle questions. Separating duties prevents one person or provider from managing every sensitive step. Audit trails record critical actions, creating a record of what happened.

The SSC says its internal digital vault uses encryption technologies and processes for creating, vetting, translating and delivering questions. Its papers are assembled and encrypted shortly before tests. The HPTF is considering this broader model, but the article says the final report is still pending and emphasises that the entire process—not just the final paper—must be secured.