eSign Aashutosh

Introduction (Needs and Requirements) Possible to replace hand written signature by electronic signature. eSign that will allow citizens to sign documents electronically, thereby saving time and efforts for them. eSign is an online electronic signature service in India to facilitate an Aadhaar holder to digitally sign a document.  To eSign a document, one has to have an Aadhaar card and a mobile number registered with Aadhaar.

Challenges and Solutions Mainly two challenges: authentication of the user and Trusted method of signing Solutions: Aadhaar based authentication Public Key Infrastructure (PKI) is used to securely sign the user document and establish the trust

Brief Process e-Hastakshar offers on-line platform to citizens for instant signing of their documents securely in a legally acceptable form, under the Indian IT Act 2000 and various Rules and Regulations therein. C-DAC through its e-Hastakshar initiative enables citizens with valid Aadhaar ID and registered mobile number to carryout digital signing of their documents on-line. The digital certificate offered by C-DAC CA through the eSign service to the applicant is for one-time signing usage and shall be of class "Aadhaar-eKYC-OTP". C-DAC utilizes the service of Unique Identification Authority of India (UIDAI) for on-line e- authentication and Aadhaar eKYC Service. As a provider of Digital Signature Certificates (DSC) and eSign services, C-DAC plays the role of a Certifying Authority (CA) under the Controller of Certifying Authorities (CCA).

Process Diagram

Citizens with Aadhaar ID will be able to upload their documents to eSign service to obtain them digitally signed. At the backend, validation of user is carried out using Aadhaar service and generates a key pair. (a public key and a private key) for the user and signs the document. The user is provided with the digitally signed document and the Digital Signature Certificate. 

Benefits of eSign Service Secure online service eSign services are offered by trusted third party service provider, like Certifying Authorities (CA) licensed as per the IT Act under the Controller of Certifying Authorities (CCA). C-DAC plays the role of CA and has placed necessary security measures to ensure security of the whole signing process. No Physical verification required Unlike the case of traditional CA that requires verification process by a personal visit which cause inconvenience, eSign provides ease of service on-line based on Aadhaar based e-Authentication. No need of Hardware tokens eSign is an online service and with this, traditional hardware-tokens are not required anymore. Multiple ways to authenticate eSign service provides authentication based on multiple ways such as One-Time-Password (OTP, received through registered mobile in Aadhaar database) or Biometric (fingerprint or iris-scan). Presently enabled for OTP based authentication. Privacy is preserved eSign service ensures the privacy of the signer by just requiring the hash of the document instead of the complete document.

Process Application user through ASP submits document hash, Aadhaar number and OTP or Biometric and consent for ESP to generate keys, submit request for DSC CA, and also to generate digital signature. ESP facilitates invoking eKYC request to UIDAI’s CIDR ESP facilitates generation of key pair and submits application form. ESP facilitates submission of request for DSC to CA. CA issues the DSC. ESP facilitates generation of digital signature and sends along with DSC to ASP.

Highlights Integrated Digital signature and DSC issuance based on Aadhaar authentication Each time for digital signature, new DSC is issued. DSC is of 30 minutes validity only. Digital Signature integration is easy for user and ASP. On-demand basis digital signature generation, no hardware token handling

Ecosystem

eSign Operating Model Application Service Provider (ASP) esign Service Provider (ESP) Certifying Authorities (CA) eKYC Service Agency (KSA) Unique Identification Authority of India (UIDAI) Controller of Certifying Authority (CCA)

Implementation of eSign in DVDMS. Next… Implementation of eSign in DVDMS.

Question and Answer.

THANK YOU!

References https://en.wikipedia.org/wiki/ESign_(India) http://esign.cdac.in/ http://cca.gov.in/cca/?q=eSign.html