e Sign Aashutosh Introduction Needs and Requirements Possible

e. Sign Aashutosh

Introduction (Needs and Requirements) • Possible to replace hand written signature by electronic signature. • e. Sign that will allow citizens to sign documents electronically, thereby saving time and efforts for them. • e. Sign is an online electronic signature service in India to facilitate an Aadhaar holder to digitally sign a document. • To e. Sign a document, one has to have an Aadhaar card and a mobile number registered with Aadhaar.

Challenges and Solutions • Mainly two challenges: a. authentication of the user and b. Trusted method of signing • Solutions: a. Aadhaar based authentication b. Public Key Infrastructure (PKI) is used to securely sign the user document and establish the trust

Brief Process • e-Hastakshar offers on-line platform to citizens for instant signing of their documents securely in a legally acceptable form, under the Indian IT Act 2000 and various Rules and Regulations therein. • C-DAC through its e-Hastakshar initiative enables citizens with valid Aadhaar ID and registered mobile number to carryout digital signing of their documents on-line. • The digital certificate offered by C-DAC CA through the e. Sign service to the applicant is for one-time signing usage and shall be of class "Aadhaar-e. KYC-OTP". • C-DAC utilizes the service of Unique Identification Authority of India (UIDAI) for online e-authentication and Aadhaar e. KYC Service. • As a provider of Digital Signature Certificates (DSC) and e. Sign services, C-DAC plays the role of a Certifying Authority (CA) under the Controller of Certifying Authorities (CCA).

Process Diagram

• Citizens with Aadhaar ID will be able to upload their documents to e. Sign service to obtain them digitally signed. • At the backend, validation of user is carried out using Aadhaar service and generates a key pair. • (a public key and a private key) for the user and signs the document. The user is provided with the digitally signed document and the Digital Signature Certificate.

Benefits of e. Sign Service • Secure online service e. Sign services are offered by trusted third party service provider, like Certifying Authorities (CA) licensed as per the IT Act under the Controller of Certifying Authorities (CCA). C-DAC plays the role of CA and has placed necessary security measures to ensure security of the whole signing process. • • • No Physical verification required Unlike the case of traditional CA that requires verification process by a personal visit which cause inconvenience, e. Sign provides ease of service on-line based on Aadhaar based e-Authentication. No need of Hardware tokens e. Sign is an online service and with this, traditional hardware-tokens are not required anymore. Multiple ways to authenticate e. Sign service provides authentication based on multiple ways such as One-Time-Password (OTP, received through registered mobile in Aadhaar database) or Biometric (fingerprint or iris-scan). Presently enabled for OTP based authentication. • Privacy is preserved e. Sign service ensures the privacy of the signer by just requiring the hash of the document instead of the complete document.

Process • Application user through ASP submits document hash, Aadhaar number and OTP or Biometric and consent for ESP to generate keys, submit request for DSC CA, and also to generate digital signature. • • • ESP facilitates invoking e. KYC request to UIDAI’s CIDR ESP facilitates generation of key pair and submits application form. ESP facilitates submission of request for DSC to CA. CA issues the DSC. ESP facilitates generation of digital signature and sends along with DSC to ASP.

Highlights • Integrated Digital signature and DSC issuance based on Aadhaar authentication • • Each time for digital signature, new DSC is issued. DSC is of 30 minutes validity only. Digital Signature integration is easy for user and ASP. On-demand basis digital signature generation, no hardware token handling

Ecosystem

e. Sign Operating Model • • • Application Service Provider (ASP) esign Service Provider (ESP) Certifying Authorities (CA) e. KYC Service Agency (KSA) Unique Identification Authority of India (UIDAI) Controller of Certifying Authority (CCA)

Next… Implementation of e. Sign in DVDMS.

Question and Answer.

THANK YOU!

References 1. https: //en. wikipedia. org/wiki/ESign_(India) 2. http: //esign. cdac. in/ 3. http: //cca. gov. in/cca/? q=e. Sign. html