E-sign services

Blog By - Team MyGov,
June 30, 2015

esign

For creating electronic signatures, the signer is required to obtain a Digital Signature Certificate (DSC) from a Certifying Authority (CA) licensed by the Controller of Certifying Authorities (CCA) under the Information Technology (IT) Act, 2000. Before a CA issues a DSC, the identity and address of the signer must be verified. The private key used for creating the electronic signature is stored in hardware cryptographic token which is secured with a password/pin. This current scheme of in-person physical presence, paper document based identity & address verification and issuance of hardware cryptographic tokens does not scale to a billion+ people. For offering fully paperless citizen services, mass adoption of digital signature is necessary.

To address these concerns, Govt. of India through the Department of Electronics and Information Technology, Ministry of Communications and Information Technology has launched a simple to use online service which allows everyone to have the ability to digitally sign electronic documents.

What is eSign?

eSign facilitates digitally signing a document by an Aadhaar holder using an Online Service. eSign is designed for applying Digital Signature using authentication of signer through Aadhaar e-KYC service. This is an integrated service which facilitates issuing a Digital Signature Certificate and performing signing of requested data by authenticating the Aadhaar holder. Aadhaar is mandatory for availing the eSign Service.

esign Flow
What are the expected benefits of eSign?

Easy and secure way to digitally sign information anywhere, anytime – eSign is an online service that offers application service providers the functionality to authenticate signers and perform the digital signing of documents using Aadhaar e-KYC service. Hardware tokens are not required to be used.

Facilitates legally valid signatures – eSign process involves consumer consent, Digital Signature Certificate generation, Digital Signature creation & affixing and Digital Signature Certificate acceptance in accordance with the provisions of the Information Technology (IT) Act, 2000. It enforces compliance, through API specification and licensing model of APIs. Comprehensive digital audit trail – in-built to confirm the validity of transactions is also preserved.

Flexible and easy to implement – eSign provides configurable authentication options in line with Aadhaar e-KYC service and also records the Aadhaar number that is used to verify the identity of the signer. The authentication options for eKYC include biometric (fingerprint or iris scan) or OTP (through the registered mobile in the Aadhaar database). eSign enables millions of Aadhaar holders easy access to legally valid Digital Signature service.

Respecting privacy – eSign ensures the privacy of the signer by requiring that only the thumbprint (hash) of the document be submitted for signature function instead of the whole document.

Secure online service – The eSign Service is governed by e-authentication guidelines. While authentication of the signer is carried out using Aadhaar e-KYC services, the signature on the document is carried out on a backend server of the e-Sign provider. eSign services are offered by trusted third party service provider, currently Certifying Authorities (CA) licensed under the IT Act. To enhance security and prevent misuse, Aadhaar holders private keys are created on Hardware Security Module (HSM) and destroyed.

  • Save cost and time
  • Aadhaar e-KYC based authentication
  • Improve User Convenience
  • Flexible and fast integration with application
  • Easy to apply Digital Signature
  • Biometric or OTP based authentication
  • Verifiable Signatures and Signatory
  • Aadhaar is mandatory
  • Legally recognized
  • Integrity with a complete audit trail
  • Managed by Licensed CAs
  • API subscription Model
  • Privacy concerns addressed
  • No key storage and key protection concerns
  • Simple Signature verification
  • Suitable for individual, business and Government
  • Short validity certificates
  • Immediate destruction of keys after usage

To know more about eSign, please visit the CCA website.

  • usericon
    rupesh vishwakarma - 9 years ago

    me e-hastakshar seva ko sbhi ke liye sulabh karane ke liye e- saksharta badana chahiye|

  • usericon
    rupesh vishwakarma - 9 years ago

    ई-हस्ताक्षर सेवा का लाभ समस्त देश वासियों के लिए लाभदायक रहेगा इसके लिए ई -साक्षरता को बढावा देने की आवश्यकता हे|

  • usericon
    Anil Sharma - 9 years ago

    Sir, I think some fees is charges by certifying authority for issue of digital signature certificate and also this is valid for a certain period of time and the fees varies also for issue of kind of certificate.These formalities should be sorted out to make e-sign successful.

  • usericon
    AJAY MISHRA - 9 years ago

    sir, digital india is a good step towards development.

  • usericon
    MADAN MOHAN GARG - 9 years ago

    dear sir,make all things digitally including bribes to govt. offices through e-payments,use of debit/credit cards

  • usericon
    jaishal diwavala - 9 years ago

    #namo,its very used full aginst in active person

  • usericon
    Govind Prakash - 9 years ago

    No. What happens if someone steals Hamra.

  • usericon
    Balvantbhai somabhai Barjod - 9 years ago

    Sir Bahot Achi tarikese kam chal raha hee Apki sakar me ,,,Good morning jay shri Krishna

  • usericon
    subhash mallick - 9 years ago

    Sir, thanks please make it very simple

  • usericon
    Amar Sawang - 9 years ago

    This is the great and secure way for authentication.

  • usericon
    ARUN KUMAR GUPTA - 9 years ago

    It will make use of big data base of finger scans already available with aadhaar cards. It is only linking of finger scans with banking systems, property deals, travelling (showing ID proof for e-tickets) etc.

  • usericon
    ARUN KUMAR GUPTA - 9 years ago

    1)The process of linking aadhaar card with bank accounts is in progress.To avoid credit card frauds(lost card, cloning, theft etc),any finger of credit card holders can be scanned along with swiped card. Any mismatch with data already available with aadhaar card will generate error.
    2)Aadhaar card can be link to land/property deals during e-registration. Anyone buying property in someone else’s name will immediately get noticed during finger print scan process. This will curb benami deals

Total Comments - 89

Leave a Reply