Work / Bharat-First / Pariksha Suraksha

No. 11 · Bharat-First · Examination Integrity

Every paper unique.
Every leak useless.

Three hundred million Indians sit for high-stakes exams every year. Forty paper leaks hit the news in 2023 to 2024 alone. The NEET-UG 2024 scandal pulled twenty-four lakh candidates back into the Supreme Court. The fix is not stricter custody. The fix is to make the leak meaningless.

Candidate ID PS-2026-04419-NEET
Exam NEET-UG 2026
Centre DEL-19 · Sector 22
Seat B / 14
Paper Hash a3f9 · 7b21 · e408
Released At T − 0 sec

Question paper for this candidate, this seat

UNIQUE · O(1) lookup · < 1 ms

300MAspirants protected per year
<0.0001False positive rate, collusion
10Anti-cheat detection layers
3-of-5Shamir secret sharing
57API endpoints, single Express server

Act I · The Single Document

One paper passes through five to eight hands.
One compromised hand ends a generation's career.

The NTA, UPSC, SSC, state PSCs and university boards all share the same architectural flaw. The complete question paper exists as a single document long before the exam. Every custody handoff is an attack surface.

40+

Paper leaks 2023·2024

Major leaks reported across NEET, UGC-NET, BPSC, UPSSSC and several state board examinations within two academic years.

24L

NEET-UG 2024 affected

Twenty-four lakh candidates pulled into a Supreme Court intervention on examination integrity. A whole admission cycle disrupted.

5·8

Custody handoffs per paper

Setting team, printing press, transport, district storage, centre superintendent, invigilator. One weak link is enough to leak everything.

Act II · Three Interlocking Innovations

Make the paper unique.
Make the cheating provable.
Make the leak impossible.

I.

Unique paper per candidate

Every candidate gets a different question paper. Same difficulty, same topics, different items. Pre-rendered and served via a single table lookup in under one millisecond. Leaking one paper is useless against the next seat.

O(1) at exam start

II.

Statistical collusion detection

Pairwise log-likelihood ratio analysis catches cheating patterns no human invigilator can see. False positive rate under 0.0001. BFS-based ring detection across centres produces PDF evidence that withstands legal scrutiny.

FPR < 0.0001

III.

Zero-knowledge lifecycle

Each question is individually encrypted with AES-256-GCM. Time-Lock Puzzles serve as cryptographic fallback. Shamir's Secret Sharing (3-of-5) handles emergency key release. A hash-chain audit trail with Merkle proofs verifies any event in O(1).

AES-256-GCM · TLP · SSS

Act III · The Ten-Layer Proctor

Client-side proctor.
LAN lockdown kiosk. Both speak to the same server.

The ExamProctor module runs in the candidate browser. Every violation is logged with a timestamp and pushed to the server. The data is evidence for human investigation, never automatic disqualification.

#DetectionWhat it catches
01Tab and window switchVisibility API plus focus and blur listeners. The candidate cannot leave the exam tab unnoticed.
02Copy, paste, cut preventionClipboard operations are blocked at the document level and logged with origin.
03Screenshot blockingPrintScreen, Cmd+Shift+3/4/5, Snipping Tool keystrokes are intercepted before they reach the OS.
04DevTools detectionWindow-size anomaly detection plus execution-timing probes catch attached debuggers.
05Keyboard shortcut blockingF12, Ctrl+Shift+I/J, Ctrl+S/P/L/T/N/W are all intercepted in the capture phase.
06Multi-monitor detectionScreen Details API, screen.isExtended, resolution anomalies. Catches the second screen.
07VM and remote desktop detectionUser-agent scanning, WebGL renderer fingerprinting, hardware concurrency checks.
08Fullscreen lockdownExit detected and logged. Automatic re-entry attempted before the next event.
09Heartbeat systemFive-second heartbeat to /api/v1/proctor/heartbeat. Missed heartbeats are flagged.
10Forensic watermarkInvisible overlay with candidate ID, exam ID and timestamp, refreshed every sixty seconds.

Act IV · The Stack

Cloud for setting and audit.
LAN for the actual exam. One Makefile to ship both.

A TCS iON-style offline deployment. Every centre runs nginx, mvp-server.js, dnsmasq for DNS and DHCP, chrony as the local NTP source, and a real-time terminal monitor dashboard. The internet is optional.

  • Next.js 15 · React 19
  • Tailwind · shadcn/ui
  • Express · 57 endpoints
  • NestJS microservices
  • Python compute workers
  • Google Gemini 2.5 Pro
  • 3PL IRT calibration
  • Constraint satisfaction · simulated annealing
  • Pairwise log-likelihood
  • AES-256-GCM
  • RSA Time-Lock Puzzles
  • Shamir 3-of-5
  • Hyperledger Fabric chaincode
  • Merkle proofs · O(1) verify
  • Terraform · GCP Compute
  • nginx · dnsmasq · chrony
  • Chromium enterprise policy · 60+ rules
  • iptables kernel-level firewall

Act V · Proof

Two commands.
From nothing to a live exam centre.

Live deployment

Landing, about and pitch deck live now. Candidate exam terminal at /exam handles login, OTP and proctored exam. Admin dashboard at /admin/dashboard exposes exam management, question bank, monitoring and audit verification.

https://pariksha.dmj.one

One Makefile to deploy and destroy

Terraform plus GCP Compute Engine. The whole stack stands up or comes down with one command. No partial state, no manual cleanup.

make deploy  # create VM, install, start (~5 min) make destroy  # delete VM and all resources

LAN-lockdown kiosk

kiosk-setup.sh transforms an Ubuntu machine into a single-purpose exam kiosk. iptables-lockdown.sh enforces a kernel-level network firewall. chromium-policy.json applies sixty-plus enterprise browser rules. Designed to mirror the TCS iON deployment model.

Auditable by anyone

Every event lands in a hash-chain audit log. /api/v1/audit/proof/:eventId returns the Merkle proof. /api/v1/verify/:hash lets a third party verify a single event without trusting the operator.

If three hundred million careers can be defended, so can one institution's.

I architect high-stakes systems where every event must be provable, every leak must be useless, and every minute of downtime is a stolen future. If your examinations, audits or evidence pipelines need that bar, this is the work.