eSign Brochure1.5
1 like2,333 views
1) eSign is an online electronic signature service that allows Aadhaar holders to digitally sign documents without using physical hardware tokens. 2) It uses Aadhaar e-KYC for identity authentication, and offers biometric or OTP-based signature options. 3) eSign facilitates digitally signed documents for use across sectors like banking, taxes, education and more through its APIs.
eSign Brochure1.5
- 1. eSign Online Electronic Signature Service Introduction eSign For creating electronic signatures, the signer is required to obtain a Digital Signature Certificate (DSC) from a Certifying Authority (CA) licensed by the Controller of CertifyingAuthorities (CCA) under the Information Technology (IT)Act, 2000. Before a CA issues a DSC, the identity and address of the signer must be verified. The private keyusedforcreatingtheelectronicsignatureisstoredinhardwarecryptographictoken which is secured with a password/pin. This current scheme of in-person physical presence, paper document based identity & address verification and issuance of hardware cryptographic tokens does not scale to a billion people. For offering fully paperless citizen services, mass adoption of digital signature is necessary.Asimple to use online service is required to allow everyone to have the ability to digitally sign electronicdocuments. eSign is an online electronic signature service which can be integrated with service delivery applications via an open API to facilitate an Aadhaar holder to digitally sign a document. Using authentication of the Aadhaar holder through Aadhaar e-KYC service,onlineelectronicsignatureserviceisfacilitated. eSign GOVERNMENT OF INDIA Ministry of Communications & Information Technology Department of Electronics & Information Technology Controller of Certifying Authorities Save cost and time Aadhaar e-KYC based authentication Improve user convenience Mandatory Aadhaar ID Easily apply Digital Signature Biometric or OTP based authentication Verifiable Signatures and Signatory Flexible and fast integration with application Legally recognized Suitable for individual, business and Government Managed by Licensed CAs API subscription Model Privacy concerns addressed Assured Integrity with complete audit trail Simple Signature verification Immediate destruction of keys after usage Short validity certificates No concerns regarding key storage and key protection Salient Features of eSign eSign is an online service for electronic signatures without using physical hardware tokens. Application service providers useAadhaar e-KYC service to authenticate signers and facilitate digitalsigningofdocuments. eSign process includes signer consent, Digital Signature Certificate issuance request, Digital Signature creation and affixing as well as Digital Signature Certificate acceptance in accordance with provisions of Information Technology Act. It enforces compliance through API specification and licensing model of APIs. Comprehensive digital audit trail, in-built to confirm the validityoftransactions, isalsopreserved. eSign provides configurable authentication options in line with Aadhaar e-KYC service and also records the Aadhaar ID used to verify the identity of the signer. The authentication options for eKYC include biometric (fingerprint or iris scan) or OTP (through the registered mobile in the Aadhaar database). eSign enables millions of Aadhaar holders easy access to legally valid DigitalSignatureservice. Easy and secure way to digitally sign information anywhere, anytime - Facilitates legally valid signatures - Flexible and easy to implement -
- 2. How eSign Works CONTROLLER OF CERTIFYING AUTHORITIES 6, CGO Complex, Electronics Niketan Lodhi Road, New Delhi-03 E-mail : info@cca.gov.in Website : www.cca.gov.in Use Case- eSign online Electronic Signature in Applications Digital Locker Self attestation Tax Application for Tax ID, e-filing Financial Sector Application for account opening in banks and post office Transport Department Application for driving licence renewal, vehicle registration Various Certificates Application for birth, caste, marriage, income certificate etc Passport Application for issuance, reissue Telecom Application for new connection Educational Application forms for course enrolment and exams Member of Parliament Submission of parliament questions eSign API - Who can use eSign and where - UseCases-eSignonlineElectronicSignatureinApplications eSign Application Programming Interfaces (API) specification defines the major architectural components and also the format and elements of communication among the eSign stake holders including Application Service Provider, CertifyingAuthorities,TrustedThird Party eSign Service Providers andAadhaare- KYC service. This eSign API enables Application Service Providers to integrate eSign service in their application.Thesystem isdesignedtointegrateApplicationGatewaytoo. OnlyAadhaar holders can use eSign online electronic signature service.The eSign service can be used by individuals, businesses and Government departments for electronically signing a documentbasedonOTPorBiometric(Fingerprint/Iris)authenticationthroughAadhaare-KYCservice. eSign online electronic signature service can be effectively used in scenarios where signed documents are required to be submitted to Service Providers, Government, Public or Private sector.The agencies which stand to benefit from offering eSign online electronic signatures are those that accept large number of documents from users.SomeapplicationswhichcanuseeSignforenhancingservicesdeliveryarethefollowing:- eSign ensures the privacy of the signer by requiring that only the thumbprint (hash) of the document be submittedforsignaturefunctioninsteadofthewholedocument. The eSign service is governed by e-authentication guidelines. While authentication of the signer is carried out using Aadhaar e-KYC services, the signature on the document is carried out on a backend server of the e-Sign provider. eSign services are facilitated by trusted third party service providers - currently CertifyingAuthorities (CA) licensed under the ITAct. To enhance security and prevent misuse, Aadhaar holders private keys are created on Hardware Security Module(HSM)anddestroyedimmediatelyafteronetimeuse. Respecting privacy - Secure online service - eSign