Cyber Law Chhagan

“Study on Digital Signatures and Digital Signature Certificate”

“STUDY ON DIGITAL SIGNATURES AND DIGITAL SIGNATURE CERTIFICATE”

By Dewasi Chhagan Lal ROLL NO. 14 B.A.LL.B X- SEMESTER

S.S.Jain Subodh Law College, Jaipur.

Study on Digital Signatures and Digital Signature Certificate

TABLE OF CONTENTS

DECLARATION………………………………………………………………………….....2 CERTIFICATE………………………………………………………………………….…....3 ACKNOWLEDGEMENT……………………………………………………………...….…4 RESEARCH METHODOLOGY………………………………………………....................5  INTRODUCTION……………………………………………...…......6  DIGITAL SIGNATURE CERTIFICATE…………………………….7  DIGITAL SIGNATURE & CERTIFICATE UNDER IT ACT,2000…8  PROCEDURE…………………………………………………………10

BIBLOGRAPHY…………………………………………………………………………….13

1 S.S.Jain Subodh Law College, Jaipur.

Study on Digital Signatures and Digital Signature Certificate

DECLARATION

I Dewasi Chhagan Lal, do hereby declare that this project work entitled “Study on Digital Signatures and Digital Signature Certificate” is an outcome of the research conducted by me under the guidance of Ms. Riya Paul (Asst. Prof. of Law) at S.S. Jain Subodh Law College in fulfillment for the award of the degree of B.A.L.L.B. at the University Of Rajasthan I also declare that, this work is original, except where assistance from other sources has been taken and necessary acknowledgements for the same have been made at appropriate places. I further declare that, the work has not been submitted either in whole or in part, for any degree or equivalent in any other institution

DATE – 15 May 2019 Dewasi Chhagan Lal

2 S.S.Jain Subodh Law College, Jaipur.

Study on Digital Signatures and Digital Signature Certificate

CERTIFICATE

This is to certify that Dewasi Chhagan Lal student of BA.LLB X semester of S.S.JAIN SUBODH LAW COLLEGE; JAIPUR has completed her project on “Study on Digital Signatures and Digital Signature Certificate” under the guidance of Ms. Riya Paul, Assistant professor, S.S.JAIN SUBODH LAW COLLEGE. This project is original, independent work to the best of my knowledge and it has not been published anywhere and has been perused solely for academic interest.

Ms. Ria Paul (Asst. Prof. of Law) S.S. Jain Subodh Law College

3 S.S.Jain Subodh Law College, Jaipur.

Study on Digital Signatures and Digital Signature Certificate

ACKNOWLEDGEMENT

I take this opportunity to express our humble gratitude and personal regards to MS. Riya Paul for inspiring me and guiding me during the course of this project work and also for her cooperation and guidance from time to time during the course of this project work on the topic. “Study on Digital Signatures and Digital Signature Certificate.”

DATE – 15 MAY 2019 Dewasi Chhagan Lal

4 S.S.Jain Subodh Law College, Jaipur.

Study on Digital Signatures and Digital Signature Certificate

RESEARCH METHODOLOGY

Aims and Objectives: The aim of the project is to present a detailed study of the topic “Study on Digital Signatures and Digital Signature Certificate” forming a concrete informative capsule of the same with an insight into its relevance in the today’s world. Research Plan The researchers have followed Doctrinal method. Sources of Data: The following secondary sources of data have been used in the project

Websites

Method of Writing: The method of writing followed in the course of this research project is primarily analytical and based on secondary source of data. The researcher has followed Uniform method of citation throughout the course of this research project.

5 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

Chapter 1

Introduction

A digital signature is a mathematical technique used to validate the authenticity and integrity of a message, software or digital document. The digital equivalent of a handwritten signature or stamped seal, a digital signature offers far more inherent security, and it is intended to solve the problem of tampering and impersonation in digital communications. Digital signatures can provide the added assurances of evidence of origin, identity and status of an electronic document, transaction or message and can acknowledge informed consent by the signer. In many countries, including the United States, digital signatures are considered legally binding in the same way as traditional document signatures. The United States Government Publishing Office publishes electronic versions of the budget, public and private laws, and congressional bills with digital signatures. How digital signatures work Digital signatures are based on public key cryptography, also known as asymmetric cryptography. Using a public key algorithm, such as RSA, one can generate two keys that are mathematically linked: one private and one public. Digital signatures work because public key cryptography depends on two mutually authenticating cryptographic keys. The individual who is creating the digital signature uses their own private key to encrypt signature-related data; the only way to decrypt that data is with the signer's public key. This is how digital signatures are authenticated. Digital signature technology requires all the parties to trust that the individual creating the signature has been able to keep their own private key secret. If someone else has access to the signer's private key, that party could create fraudulent digital signatures in the name of the private key holder.

6 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

Chapter 2

Digital Signature Certificate

Digital Signature Certificates or DSC or Digital Signature are being adopted by various government agencies and now is a statutory requirement in various applications.Capricorn offers different class of certificates to help organization and individuals secure online transactions with legal validity as per the Indian IT Act, 2000. Capricorn certificates conform to x.509 standard of Public Key Infrastructure (PKI) in India where in additionally these are issued as per IVG and IOG guidelines issued by the office of Controller of Certifying Authorities. There are various Type and Class of DSC, the information below would help you to arrive to the right certificate for your needs.

Type of Certificates 

Sign Sign DSC can only be used for signing documents. The most popular usage of is signing the PDF file for Tax Returns, MCA and other websites. Signing via DSC gives the assurance of not only the integrity of the signer but also the data. It is proof of untampered and unaltered data.



Encrypt Encrypt DSC can only be used to encrypt a document, it is popularly used in the tender portal, to help companies encrypt the documents and upload. You could also use the certificate to encrypt and send classified information. Encrypt DSC is fit for e-commerce documents, legal documentation and sharing documents that are highly confidential and contains information that needs to be protected. We are selling Encrypt certificate as a standalone product as well.



Sign & Encrypt Our Sign & Encrypt DSC can be used for both signing and encrypting. It is convenient for users who need to authenticate and maintain the confidentiality of the information shared. Its usage includes filing government form and application.

7 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

Chapter 3

Digital Signature & Certificate under IT Act,2000

Digital SignatureSection 2(1)(p) of the Information Technology Act, 2000 (or the IT Act) defines it as authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3. Section 3. Authentication of electronic records.– (1) Subject to the provisions of this section any subscriber may authenticate an electronic record by affixing his digital signature. (2) The authentication of the electronic record shall be effected by the use of asymmetric crypto system and hash function which envelop and transform the initial electronic record into another electronic record. Explanation.–For the purposes of this sub-section, ―hash function‖ means an algorithm mapping or translation of one sequence of bits into another, generally smaller, set known as ―hash result‖ such that an electronic record yields the same hash result every time the algorithm is executed with the same electronic record as its input making it computationally infeasible– (a) to derive or reconstruct the original electronic record from the hash result produced by the algorithm; (b) that two electronic records can produce the same hash result using the algorithm. (3) Any person by the use of a public key of the subscriber can verify the electronic record. (4) The private key and the public key are unique to the subscriber and constitute a functioning key pair. Digital Signature CertificateSection 2(1)(q) ―Digital Signature Certificate‖ means a Digital Signature Certificate issued under sub-section (4) of section 35; 35. Certifying authority to issue 1 [electronic signature] Certificate.— (1) Any person may make an application to the Certifying Authority for the issue of a 1 [electronic signature] Certificate in such form as may be prescribed by the Central Government. (2) Every such application shall be accompanied by such fee not exceeding twenty-five thousand rupees as may be prescribed by the Central Government, to be paid to the Certifying Authority: Provided that while prescribing fees under sub-section (2) different 8 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

fees may be prescribed for different classes of applicants. (3) Every such application shall be accompanied by a certification practice statement or where there is no such statement, a statement containing such particulars, as may be specified by regulations. (4) On receipt of an application under sub-section (1), the Certifying Authority may, after consideration of the certification practice statement or the other statement under sub-section (3) and after making such enquiries as it may deem fit, grant the [electronic signature] Certificate or for reasons to be recorded in writing, reject the application: [Provided] that no application shall be rejected unless the applicant has been given a reasonable opportunity of showing cause against the proposed rejection.

9 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

Chapter 4

Procedure

Requirements while you apply for a digital signature certificate 1. Submission of DSC Application form duly filled in by the applicant Any individual applying for a Digital Signature Certificate is required to fill an Application Form for online submission and verification of personal details by the certifying authority 2. Producing Photo ID proof 3. Producing Address proof To fill in the Application form the please log in to the website of the Certifying Authority. Steps to apply for a digital signature certificate STEP 1: Log on and select your type of entity Log on to the website of a Certifying Authority licensed to issue Digital Certificates in India. Having accessed the page, you will be guided to the Digital Certification Services’ section. Now under the ‘Digital Certification Services’ section, click on the type of entity for which you want to obtain the DSC:’ individual or organization’, etc. In case you are applying for an individual DSC, click on ‘individual’. A new tab containing the DSC Registration Form will appear. Download the DSC Registration Form on your PC. STEP 2: Fill the necessary details Once you have downloaded the form, fill in all the necessary details as required in the form: 1. Class of the DSC 2. Validity 3. Type: Only Sign or Sign & Encrypt 4. Applicant Name & Contact Details 10 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

5. Residential Address 6. GST Number & Identity Details of Proof Documents 7. Declaration 8. Document as proof of identity 9. Document as proof of address 10. Attestation Officer 11. Payment Details On filling up all the necessary details you must affix your recent photograph and put your signature under the declaration. Check thoroughly for completion of the form. Take a print of the completed form and preserve it. STEP 3: Proof of identity and address The supporting document provided as proof of identity and address must be attested by an attesting officer. Ensure the sign and seal of the attesting officer is visibly clear on the supporting proof documents. STEP 4: Payment for DSC A demand draft or cheque must be obtained towards payment for application of DSC in the name of the Local Registration Authority where you are going to submit your application for verification. You can find the details of the Local Registration Authority according to your city of residence by searching for a Certifying Authority licensed to issue Digital Certificates online. STEP 5: Post the documents required 1. DSC Registration Form duly completed -Supporting document for Proof of Identity and proof of address attested by the attesting officer 2. Demand Draft/Cheque for payment.

11 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

Address the enclosed envelope to the Local Registration Authority (LRA) and post it to the designated address of the LRA for further processing. On completion of the above-mentioned steps by filling in the DSC Form and providing necessary documents and payment, you have successfully completed the application process for your Digital Signature Certificate.

12 S.S.Jain Subodh Law College, Jaipur.

“Study on Digital Signatures and Digital Signature Certificate”

Bibliography

Books referred  Pavan Duggal Websites 

https://www.geeksforgeeks.org/digital-signatures-certificates/



https://www.researchgate.net/publication/233391380_A_survey_on_digital_signature s_and_its_applications

13 S.S.Jain Subodh Law College, Jaipur.