“Study on Digital Signatures and Digital Signature Certificate”

“STUDY ON DIGITAL SIGNATURES AND DIGITAL

SIGNATURE CERTIFICATE”

By

Dewasi Chhagan Lal

ROLL NO. 14

B.A.LL.B X- SEMESTER

S.S.Jain Subodh Law College, Jaipur.

 Study on Digital Signatures and Digital Signature Certificate

TABLE OF CONTENTS

DECLARATION………………………………………………………………………….....2

CERTIFICATE………………………………………………………………………….…....3

ACKNOWLEDGEMENT……………………………………………………………...….…4

RESEARCH METHODOLOGY………………………………………………....................5

 INTRODUCTION……………………………………………...…......6
 DIGITAL SIGNATURE CERTIFICATE…………………………….7
 DIGITAL SIGNATURE & CERTIFICATE UNDER IT ACT,2000…8
 PROCEDURE…………………………………………………………10

BIBLOGRAPHY…………………………………………………………………………….13

1
S.S.Jain Subodh Law College, Jaipur.
 Study on Digital Signatures and Digital Signature Certificate

DECLARATION

I Dewasi Chhagan Lal, do hereby declare that this project work entitled “Study on Digital
Signatures and Digital Signature Certificate” is an outcome of the research conducted by me
under the guidance of Ms. Riya Paul (Asst. Prof. of Law) at S.S. Jain Subodh Law College
in fulfillment for the award of the degree of B.A.L.L.B. at the University Of Rajasthan
I also declare that, this work is original, except where assistance from other sources has been
taken and necessary acknowledgements for the same have been made at appropriate places. I
further declare that, the work has not been submitted either in whole or in part, for any degree
or equivalent in any other institution

DATE – 15 May 2019

Dewasi Chhagan Lal

2
S.S.Jain Subodh Law College, Jaipur.
 Study on Digital Signatures and Digital Signature Certificate

CERTIFICATE

This is to certify that Dewasi Chhagan Lal student of BA.LLB X semester of S.S.JAIN
SUBODH LAW COLLEGE; JAIPUR has completed her project on “Study on Digital
Signatures and Digital Signature Certificate” under the guidance of Ms. Riya Paul, Assistant
professor, S.S.JAIN SUBODH LAW COLLEGE. This project is original, independent work
to the best of my knowledge and it has not been published anywhere and has been perused
solely for academic interest.

Ms. Ria Paul

(Asst. Prof. of Law)

S.S. Jain Subodh Law College

3
S.S.Jain Subodh Law College, Jaipur.
 Study on Digital Signatures and Digital Signature Certificate

ACKNOWLEDGEMENT

I take this opportunity to express our humble gratitude and personal regards to MS. Riya
Paul for inspiring me and guiding me during the course of this project work and also for her
cooperation and guidance from time to time during the course of this project work on the
topic. “Study on Digital Signatures and Digital Signature Certificate.”

DATE – 15 MAY 2019

Dewasi Chhagan Lal

4
S.S.Jain Subodh Law College, Jaipur.
 Study on Digital Signatures and Digital Signature Certificate

RESEARCH METHODOLOGY

Aims and Objectives:

The aim of the project is to present a detailed study of the topic “Study on Digital Signatures
and Digital Signature Certificate” forming a concrete informative capsule of the same with an
insight into its relevance in the today’s world.

Research Plan

The researchers have followed Doctrinal method.

Sources of Data:

The following secondary sources of data have been used in the project-

 Websites

Method of Writing:

The method of writing followed in the course of this research project is primarily
analytical and based on secondary source of data. The researcher has followed Uniform
method of citation throughout the course of this research project.

5
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

Chapter 1 Introduction

A digital signature is a mathematical technique used to validate the authenticity and integrity
of a message, software or digital document. The digital equivalent of a handwritten signature
or stamped seal, a digital signature offers far more inherent security, and it is intended to
solve the problem of tampering and impersonation in digital communications.

Digital signatures can provide the added assurances of evidence of origin, identity and status
of an electronic document, transaction or message and can acknowledge informed consent by
the signer.

In many countries, including the United States, digital signatures are considered legally
binding in the same way as traditional document signatures. The United States Government
Publishing Office publishes electronic versions of the budget, public and private laws, and
congressional bills with digital signatures.

How digital signatures work

Digital signatures are based on public key cryptography, also known as asymmetric
cryptography. Using a public key algorithm, such as RSA, one can generate two keys that are
mathematically linked: one private and one public.

Digital signatures work because public key cryptography depends on two mutually
authenticating cryptographic keys. The individual who is creating the digital signature uses
their own private key to encrypt signature-related data; the only way to decrypt that data is
with the signer's public key. This is how digital signatures are authenticated.

Digital signature technology requires all the parties to trust that the individual creating the
signature has been able to keep their own private key secret. If someone else has access to the
signer's private key, that party could create fraudulent digital signatures in the name of the
private key holder.

6
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

Chapter 2 Digital Signature Certificate

Digital Signature Certificates or DSC or Digital Signature are being adopted by various
government agencies and now is a statutory requirement in various applications.Capricorn
offers different class of certificates to help organization and individuals secure online
transactions with legal validity as per the Indian IT Act, 2000.
Capricorn certificates conform to x.509 standard of Public Key Infrastructure (PKI) in India
where in additionally these are issued as per IVG and IOG guidelines issued by the office of
Controller of Certifying Authorities.
There are various Type and Class of DSC, the information below would help you to arrive to
the right certificate for your needs.

Type of Certificates
 Sign
Sign DSC can only be used for signing documents. The most popular usage of is signing the
PDF file for Tax Returns, MCA and other websites. Signing via DSC gives the assurance of
not only the integrity of the signer but also the data. It is proof of untampered and unaltered
data.
 Encrypt
Encrypt DSC can only be used to encrypt a document, it is popularly used in the tender
portal, to help companies encrypt the documents and upload. You could also use the
certificate to encrypt and send classified information. Encrypt DSC is fit for e-commerce
documents, legal documentation and sharing documents that are highly confidential and
contains information that needs to be protected. We are selling Encrypt certificate as a
standalone product as well.
 Sign & Encrypt
Our Sign & Encrypt DSC can be used for both signing and encrypting. It is convenient for
users who need to authenticate and maintain the confidentiality of the information shared. Its
usage includes filing government form and application.

7
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

Chapter 3 Digital Signature & Certificate under IT Act,2000

Digital Signature-

Section 2(1)(p) of the Information Technology Act, 2000 (or the IT Act) defines it as
authentication of any electronic record by a subscriber by means of an electronic method or
procedure in accordance with the provisions of section 3.

Section 3. Authentication of electronic records.–

(1) Subject to the provisions of this section any subscriber may authenticate an electronic
record by affixing his digital signature. (2) The authentication of the electronic record shall
be effected by the use of asymmetric crypto system and hash function which envelop and
transform the initial electronic record into another electronic record. Explanation.–For the
purposes of this sub-section, ―hash function‖ means an algorithm mapping or translation of
one sequence of bits into another, generally smaller, set known as ―hash result‖ such that an
electronic record yields the same hash result every time the algorithm is executed with the
same electronic record as its input making it computationally infeasible– (a) to derive or
reconstruct the original electronic record from the hash result produced by the algorithm; (b)
that two electronic records can produce the same hash result using the algorithm. (3) Any
person by the use of a public key of the subscriber can verify the electronic record. (4) The
private key and the public key are unique to the subscriber and constitute a functioning key
pair.

Digital Signature Certificate-

Section 2(1)(q) ―Digital Signature Certificate‖ means a Digital Signature Certificate issued
under sub-section (4) of section 35;

35. Certifying authority to issue 1 [electronic signature] Certificate.—

(1) Any person may make an application to the Certifying Authority for the issue of a 1
[electronic signature] Certificate in such form as may be prescribed by the Central
Government. (2) Every such application shall be accompanied by such fee not exceeding
twenty-five thousand rupees as may be prescribed by the Central Government, to be paid to
the Certifying Authority: Provided that while prescribing fees under sub-section (2) different
8
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

fees may be prescribed for different classes of applicants. (3) Every such application shall be
accompanied by a certification practice statement or where there is no such statement, a
statement containing such particulars, as may be specified by regulations. (4) On receipt of an
application under sub-section (1), the Certifying Authority may, after consideration of the
certification practice statement or the other statement under sub-section (3) and after making
such enquiries as it may deem fit, grant the [electronic signature] Certificate or for reasons to
be recorded in writing, reject the application:

[Provided] that no application shall be rejected unless the applicant has been given a
reasonable opportunity of showing cause against the proposed rejection.

9
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

Chapter 4 Procedure

Requirements while you apply for a digital signature certificate

1. Submission of DSC Application form duly filled in by the applicant

Any individual applying for a Digital Signature Certificate is required to fill an Application
Form for online submission and verification of personal details by the certifying authority

2. Producing Photo ID proof

3. Producing Address proof

To fill in the Application form the please log in to the website of the Certifying Authority.

Steps to apply for a digital signature certificate

STEP 1: Log on and select your type of entity

Log on to the website of a Certifying Authority licensed to issue Digital Certificates in India.

Having accessed the page, you will be guided to the Digital Certification Services’ section.

Now under the ‘Digital Certification Services’ section, click on the type of entity for which
you want to obtain the DSC:’ individual or organization’, etc.

In case you are applying for an individual DSC, click on ‘individual’. A new tab containing
the DSC Registration Form will appear. Download the DSC Registration Form on your PC.

STEP 2: Fill the necessary details

Once you have downloaded the form, fill in all the necessary details as required in the form:

1. Class of the DSC

2. Validity

3. Type: Only Sign or Sign & Encrypt

4. Applicant Name & Contact Details

10
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

5. Residential Address

6. GST Number & Identity Details of Proof Documents

7. Declaration

8. Document as proof of identity

9. Document as proof of address

10. Attestation Officer

11. Payment Details

On filling up all the necessary details you must affix your recent photograph and put your
signature under the declaration. Check thoroughly for completion of the form. Take a print of
the completed form and preserve it.

STEP 3: Proof of identity and address

The supporting document provided as proof of identity and address must be attested by an
attesting officer. Ensure the sign and seal of the attesting officer is visibly clear on the
supporting proof documents.

STEP 4: Payment for DSC

A demand draft or cheque must be obtained towards payment for application of DSC in the
name of the Local Registration Authority where you are going to submit your application for
verification.

You can find the details of the Local Registration Authority according to your city of
residence by searching for a Certifying Authority licensed to issue Digital Certificates online.

STEP 5: Post the documents required

1. DSC Registration Form duly completed

-Supporting document for Proof of Identity and proof of address attested by the attesting
officer

2. Demand Draft/Cheque for payment.

11
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

Address the enclosed envelope to the Local Registration Authority (LRA) and post it to the
designated address of the LRA for further processing.

On completion of the above-mentioned steps by filling in the DSC Form and providing
necessary documents and payment, you have successfully completed the application process
for your Digital Signature Certificate.

12
S.S.Jain Subodh Law College, Jaipur.
 “Study on Digital Signatures and Digital Signature Certificate”

Bibliography

Books referred

 Pavan Duggal

Websites

 https://www.geeksforgeeks.org/digital-signatures-certificates/
 https://www.researchgate.net/publication/233391380_A_survey_on_digital_signature
s_and_its_applications

13
S.S.Jain Subodh Law College, Jaipur.