Presentation is loading. Please wait.

Presentation is loading. Please wait.

Use of digital signature in e-Governance applications BY NIC-Bangalore.

Published byJessie Gordon Modified over 9 years ago

Similar presentations

Presentation on theme: "Use of digital signature in e-Governance applications BY NIC-Bangalore."— Presentation transcript:

1 Use of digital signature in e-Governance applications BY NIC-Bangalore

2 A uthentication –Proving the identity of an entity (e.g., a person, a computer terminal, etc.) for what it claims to be. C onfidentiality –Keeping Information secret from all but those who are authorized to see it. I ntegrity –Ensuring information has not been altered by unknown or unauthorized means. N on-repudiation –Preventing the denial of previous commitments or actions. Security Requirements

3 Availability –Legitimate users have access when they need it Access control (Authorization) –Unauthorized users are kept out.. Security Requirements

4  Electronic Mail  Electronic Transfer of Data  Office Procedure Automation –File Tracking and Monitoring –Electronic File Movement  Archival of Government Records  Data built by any automation process Vulnerable G2G Applications

5  E-Procurement  Passport Applications  Land Records  Tax Returns  Bill payments  Licenses Vulnerable G2B& G2C Applications

6 Encryption and Decryption Clear-Text Cipher Text 8vyaleh31&d ktu.dtrw8743 $Fie*nP093h Deposit Rs. 80,000 in SJ’s Account Decryption Encryption

7 Digital Signature Digital Signature is :  A mechanism to sign electronic documents “electronically”.  Equivalent to the hand-written signature in the real world.  Message dependent  Digital Signature Provides Integrity, Authentication, Non- repudiation

8 NIC, Bangalore Electronic mail  e-mail has become an acceptable means of information communication  ensuring integrity and non-repudiation is a necessity  e-mail clients now provide a feature to digitally sign electronic messages

9 NIC, Bangalore Electronic mail Sender sends a digitally signed message using client Sender uses his / her private key Receiver is able to view the message by using sender’s public key –Authenticity of the message – Integrity of the message All this is in the electronic format

10 NIC, Bangalore Electronic mail Demonstration

11 NIC, Bangalore Electronic mail

12 NIC, Bangalore Electronic mail

13 NIC, Bangalore Electronic mail

14 NIC, Bangalore Electronic mail

15 NIC, Bangalore E-Procurement Sender uses public key of the tender accepting authority Tender accepting authority uses his / her private key to open the document Software takes care of bringing to the notice of the tender accepting authority if there is any alteration

16 NIC, Bangalore Nemmadi is an e-Governance project that provides citizens, an IT interface to avail services offered by the Government IN THEIR VILLAGE ITSELF

17 NIC, Bangalore  A project of the Government of Karnataka  The objective is to provide a one stop shop all the citizen’s interactions with the Government and businesses  National Informatics Centre, Bangalore has designed and developed the software for Nemmadi for G2C services.   800 tele-centres through out the state at Hoblis  Implemented through PPP Nemmadi – the players

18 NIC, Bangalore  Services In the form of certificates / documents.  Social Security Schemes In the form of sanction orders  Information Dissemination Procedure & Forms for Services / Schemes of all departments.  e-Notice Board Provide a forum for placing and viewing advertisements  Citizen Database Reduce the service time Nemmadi - What is offered ?

19 NIC, Bangalore Birth certificate No tenancy CertificateAgriculturist Certificate Death certificateAgri Labour CertificateNon-Creamy layer certificate Population certificateLand holding certificateCaste Certificate for SC/ST Living CertificateResidence CertificateCaste Certificate for Cat-A Solvency CertificateBonafide CertificateNon-creamy layer Certificate Land less CertificateIncome CertificateCaste & Income Certificate Birth registrationDeath registrationUnemployment Certificate OBC Certificate for GOI Jobs Agri Family member Certificate No Govt. Job certificate for compassionate appointment Non-Re-marriage Certificate Small & Marginal Former Certificate Income certificate for compassionate appointment Surviving Family Member Certificate Sanction orders for Pensions (PH, OAP,DWP,SSS,NSAP) Nemmadi – G2C services and schemes

20 NIC, Bangalore Nemmadi – Architecture

21 NIC, Bangalore  Services provided at the village level  Requests are accepted in OFFLINE mode also  KIOSK operator to provide services on turnkey basis  Provision to scan the application and associated documents - Less paper flow  Workflow application  Hybrid model with both computer and manual process merged appropriately Nemmadi – Significant features

22 NIC, Bangalore  Tele-centres accept requests  Sent to the State Data Centre (SDC)  The request then is routed to the taluk office The taluk office houses the server which stores the transactions  The officials process the requests from the back office  Data gets replicated both ways between SDC and Taluk server  Tahsildar digitally signs the electronic details using his private key  Digitally signed certificates can be printed at the tele- centres Nemmadi – Flow of requests

23 NIC, Bangalore  A smart client application developed on.Net platform  Offline mode supported  Unicode for data storage  Bilingual  Bio-Metric authentication for non-repudiation  Scanner and Web cam interface for capturing documents and photographs  PKI for digitally signing documents & verifiable  Bar-coded certificates / sanction order on watermarked stationery  RDS is a n-tier application Nemmadi – Technology

24 –The certificates / endorsements are signed digitally by the Tahsildhar. –The XML representing the certificate is first hashed. –The hash of the XML is signed using the private key of the Tahsildhar. –The digital signature thus obtained is stored in the database. –The digital signature is transcribed onto the physical certificate as a 2-D barcode. –Over the counter re-issue of certificates Digitally signing documents in RDS

25

26 Every certificate is identified by a unique key called the request-ID The bar code contains the request ID concatenated with the digital signature Verification of the document is done to satisfy the recipient that the document’s contents was not tampered Verification of certificates

27 Purpose For Verification GoK is issuing signature less certificates / sanction orders for various services and schemes and delivered from both the Hobli Telecentres and the Taluka office. Needles to say, the eco-system needs to be put in place to ensure that certificates are verified before accepting the same for delivering benefit to the citizens.

28 Types Of Verification Verification methodologies Web BasedSMS based Offline Request Id Bar Code Request Id Bulk Requests

29 Web Based Verification Using Req.Id Connect to http://202.138.101.172/rdscertificateverific ation/RDSCV-VerifyRequestIdPage.aspx. http://202.138.101.172/rdscertificateverific ation/RDSCV-VerifyRequestIdPage.aspx Input Request Id and Click Verify.

30 Web Based Verification Using Req.Id. Compare the certificate with hard copy

31 Web Based Verification Using Bar Code Connect to http:// 202.138.101.172/rdscertificateverification/RD SCV-VerifyBarCodePage.aspx.. http:// 202.138.101.172/rdscertificateverification/RD SCV-VerifyBarCodePage.aspx Use a barcode reader to read the 2-D bar code printed at the bottom of the certificate

32 Offline Verification Fully Independent Verification  does not require an internet connection  does not have dependence on the content on website  rugged of all the processes.  The user needs to download and install a verification utility custom developed for Nemmadi  Stepwise procedure to download and install the verification utility and supporting tools given at website  Challenge : typing the contents exactly as certificate verification will not be successful even if there is a small change in the characters being typed

33 Web Based Verification Using SMS SEND SMS :- TO NUMBER EXAMPLE :- SUL01110100044 TO OUTPUT :- Taluk name Hobli Village APPLICANT NAME Father / Husband’s name reservation-category caste income date –of-printing-of-certificate Verification of single request using SMS

34 19.9.1009National Informatics Centre Bangalore Financial Inclusion Identification of beneficiaries Enrolment de-duplication Smart card preparation Disbursement of pension Management and monitoring

35 19.9.1009National Informatics Centre Bangalore Financial Inclusion Platform for data interchange has been build List of beneficiaries to be paid pension is generated and digitally signed (pdf) Treasury verifies this and compares the amount against the treasury bill Similarly banks also verify the list before crediting the amount to the a/c

36 19.9.1009National Informatics Centre Bangalore Architecture TALUK A Gram Panchayat SDC / Central Server BANK INTERNET MIS SERVER KSWAN ENROLMENTENROLMENT DE-DEUPLICATIONDE-DEUPLICATION Client Payment

37

Download ppt "Use of digital signature in e-Governance applications BY NIC-Bangalore."

Similar presentations

Chapter 10 Encryption: A Matter of Trust. Awad –Electronic Commerce 1/e © 2002 Prentice Hall 2 OBJECTIVES What is Encryption? Basic Cryptographic Algorithm.

Chapter 10 Encryption: A Matter of Trust. Awad –Electronic Commerce 1/e © 2002 Prentice Hall 2 OBJECTIVES What is Encryption? Basic Cryptographic Algorithm.
Public Key Infrastructure A Quick Look Inside PKI Technology Investigation Center 3/27/2002.

Public Key Infrastructure A Quick Look Inside PKI Technology Investigation Center 3/27/2002.
Cryptography Chapter 7 Part 4 Pages 833 to 874. PKI Public Key Infrastructure Framework for Public Key Cryptography and for Secret key exchange.

Cryptography Chapter 7 Part 4 Pages 833 to 874. PKI Public Key Infrastructure Framework for Public Key Cryptography and for Secret key exchange.
Cryptography and Network Security

Cryptography and Network Security
Electronic payment Methods: Defined: It is alternative payment mechanism for electronic transactions instead of traditional payment methods like cheque,cash,

Electronic payment Methods: Defined: It is alternative payment mechanism for electronic transactions instead of traditional payment methods like cheque,cash,
1 Pertemuan 12 Authentication, Encryption, Digital Payments, and Digital Money Matakuliah: M0284/Teknologi & Infrastruktur E-Business Tahun: 2005 Versi:

1 Pertemuan 12 Authentication, Encryption, Digital Payments, and Digital Money Matakuliah: M0284/Teknologi & Infrastruktur E-Business Tahun: 2005 Versi:
RDD Bihar Jan 091 E-Shakti: An ICT intervention in implementation of MGNREGS Department of Rural Development Government of Bihar.

RDD Bihar Jan 091 E-Shakti: An ICT intervention in implementation of MGNREGS Department of Rural Development Government of Bihar.
6/1/20151 Digital Signature and Public Key Infrastructure Course:COSC513-01 Instructor:Professor Anvari Student ID:106845 Name:Xin Wen Date:11/25/00.

6/1/20151 Digital Signature and Public Key Infrastructure Course:COSC Instructor:Professor Anvari Student ID: Name:Xin Wen Date:11/25/00.
Department of Information Engineering1 Major Concerns in Electronic Commerce Authentication –there must be proof of identity of the parties in an electronic.

Department of Information Engineering1 Major Concerns in Electronic Commerce Authentication –there must be proof of identity of the parties in an electronic.
Application of Digital Signatures: Case Studies Jagdeep S Kochar Executive Director.

Application of Digital Signatures: Case Studies Jagdeep S Kochar Executive Director.
Client/Server Computing Model of computing in which very powerful personal computers (clients) are connected in a network with one or more server computers.

Client/Server Computing Model of computing in which very powerful personal computers (clients) are connected in a network with one or more server computers.
70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 9: Planning and Managing Certificate Services.

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 9: Planning and Managing Certificate Services.
Trusted Electronic Transactions.  Why conduct transactions electronically?  Three Characteristics that ensure trust in electronic transactions  How.

Trusted Electronic Transactions.  Why conduct transactions electronically?  Three Characteristics that ensure trust in electronic transactions  How.
FIT3105 Smart card based authentication and identity management Lecture 4.

FIT3105 Smart card based authentication and identity management Lecture 4.
Polytechnic University of Tirana Faculty of Information Technology Computer Engineering Department Identification of on-line users and Digital Signature.

Polytechnic University of Tirana Faculty of Information Technology Computer Engineering Department Identification of on-line users and Digital Signature.
Asper School of Business University of Manitoba Systems Analysis & Design Instructor: Bob Travica System interfaces Updated: November 2014.

Asper School of Business University of Manitoba Systems Analysis & Design Instructor: Bob Travica System interfaces Updated: November 2014.
Chapter 8 Web Security.

Chapter 8 Web Security.
“Electronic Payment System”

“Electronic Payment System”
E- Business Digital Signature Varna Free University Prof. Teodora Bakardjieva.

E- Business Digital Signature Varna Free University Prof. Teodora Bakardjieva.
Alexander Potapov.  Authentication definition  Protocol architectures  Cryptographic properties  Freshness  Types of attack on protocols  Two-way.

Alexander Potapov.  Authentication definition  Protocol architectures  Cryptographic properties  Freshness  Types of attack on protocols  Two-way.

Similar presentations

Ads by Google