Scribd
Upload
22 views3 pages

Digital Signature Authentication Overview

Digital signatures provide authentication of electronic documents and messages by using asymmetric cryptography and hash functions. The Information Technology Act of 2000 in India deals with digital signatures and certificates in Sections 2, 3, and 15. Section 2 defines digital signatures as authentication of electronic records using an electronic method outlined in Section 3. Section 3 specifies that subscribers can affix digital signatures to authenticate records and that signatures are unique to each subscriber, identifying them and proving the record was not altered. Section 15 defines secure digital signatures as uniquely belonging to the subscriber, identifying them, and being created under their exclusive control such that any record changes invalidate the signature.

Uploaded by

Madan
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as ODT, PDF, TXT or read online on Scribd
22 views3 pages

Digital Signature Authentication Overview

Digital signatures provide authentication of electronic documents and messages by using asymmetric cryptography and hash functions. The Information Technology Act of 2000 in India deals with digital signatures and certificates in Sections 2, 3, and 15. Section 2 defines digital signatures as authentication of electronic records using an electronic method outlined in Section 3. Section 3 specifies that subscribers can affix digital signatures to authenticate records and that signatures are unique to each subscriber, identifying them and proving the record was not altered. Section 15 defines secure digital signatures as uniquely belonging to the subscriber, identifying them, and being created under their exclusive control such that any record changes invalidate the signature.

Uploaded by

Madan
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as ODT, PDF, TXT or read online on Scribd

Digital signature is a mathematical scheme to verify the authenticity of

digital documents or messages. Also, a valid digital signature allows the


recipient to trust the fact that a known sender sent the message and it
was not altered in transit. In this article, we will look at the sections of
the Information Act, 2000 which deal with digital certificates.

Like written signatures, digital signatures provide authentication of the


associated input or messages.

Further, digital signatures authenticate the source of messages like an


electronic mail or a contract in electronic form.

The three important features of digital features are:

1. Authentication – They authenticate the source of


messages. Since the ownership of a digital certificate is bound
to a specific user, the signature shows that the user sent it.

2. Integrity – Sometimes, the sender and receiver of a


message need an assurance that the message was not altered
during transmission. A digital certificate provides this feature.

3. Non-Repudiation – A sender cannot deny sending a


message which has a digital signature.
According to the Information Technology Act, 2000, digital signatures
mean authentication of any electronic record by a subscriber by means
of an electronic method or procedure in accordance with the provisions
of section 3. Further, the IT Act, 2000 deals with digital signatures
under Sections 2, 3, and 15.

Section 2(1)(p)
According to Section 2(1)(p), digital signature means ‘authentication of
any electronic record using an electronic method or procedure in
accordance with the provisions of Section 3‘.

Further, authentication is a process for confirming the identity of a


person or proving the integrity of information. Authenticating messages
involves determining the source of the message and verifying that is has
not been altered or modified in transit.

Section 3
Section 3 of the Information technology Act, 2000 provides certain
provisions for the authentication of electronic records. The provisions
are:

 Subject to the provisions of this section, any subscriber


can affix his digital signature and hence authenticate an
electronic record.
 An asymmetric crypto system and hash function envelop
and transform the initial electronic record into another record
which affects the authentication of the record.

 Also, any person in possession of the public key can verify


the electronic record.

 Further, every subscriber has a private key and a public


key which are unique to him and constitute a functioning key
pair.

Secure Digital Signature (Section 15)


Let’s say that two parties agree to apply a certain security procedure. If
it is possible to verify that a digital signature affixed was

1. Unique to the subscriber affixing it.

2. Capable of identifying the subscriber.


and

1. Created in a manner under the exclusive control of the


subscriber.

2. Also, it is linked to the electronic record in such a manner


that a change in the record invalidates the digital signature
then

It is a secure digital signature.

Common questions

Powered by AI

A digital signature is considered 'secure' under Section 15 if it is unique to the subscriber, capable of identifying them, created under their sole control, and linked to the signed record such that any alteration invalidates the signature. This ensures the signature's authenticity and the integrity of the record associated with it .

Digital signatures are analogous to written signatures as both provide authenticity and bind the signer to the document. Distinctively, digital signatures use cryptographic methods to ensure the integrity and authenticity of a message. According to the Information Technology Act, digital signatures include features like non-repudiation and are reliant on cryptographic keys, unlike traditional written signatures .

Section 3 of the Information Technology Act, 2000 facilitates authentication by allowing subscribers to affix digital signatures using an asymmetric crypto system. It transforms the original electronic record into another form using a hash function which is then authenticated. Public keys can verify electronic records, ensuring only the possessor of the corresponding private key could have created the signature .

Hash functions in digital signatures convert messages into fixed-size strings of characters, which represent the message's contents. In the Information Technology Act, 2000, hash functions ensure that any alteration in the message changes the hash, thereby invalidating the digital signature. This function verifies that the content remains unaltered and confirms the message's integrity .

The Information Technology Act, 2000 defines a digital signature as the authentication of any electronic record using an electronic method or procedure in accordance with Section 3. The Act covers digital signatures under Sections 2, 3, and 15, detailing the necessary conditions and cryptographic systems used for their validity .

Asymmetric cryptographic systems are crucial as they use key pairs (public and private keys). The private key signs the message, ensuring that only the particular user could have sent it, while the public key allows anyone to verify the signature's authenticity. This ensures security because even if the public key is widely available, only the private key can create a valid signature, thus preventing forgery or unauthorized modifications .

A digital signature ensures authenticity by binding the signature to a specific user, which verifies that the user is the source of the message. It maintains integrity by assuring that the message has not been altered during transmission through a cryptographic hash function, thus proving the message's authenticity .

A compromised private key undermines the authenticity of digital signatures, as unauthorized individuals could use it to forge signatures. The Information Technology Act, 2000 emphasizes strict security procedures and control over the private key creation and storage. Measures include ensuring keys are created and maintained exclusively under the subscriber's control to prevent misuse .

Digital signatures support non-repudiation by creating a record that unequivocally links the sender to the message or electronic record. As stipulated in the Information Technology Act, 2000, once a subscriber affixes a digital signature, they cannot deny sending it, because the signature is explicitly tied to their secure private key, making repudiation legally indefensible .

The private-public key relationship is crucial since it ensures that while the private key is used to sign messages, the corresponding public key can verify them. This mechanism enhances security because even if the public key is public, the ability to sign remains solely with the private key. This separation and verification process increase trust and authenticity as detailed in the Information Technology Act, 2000 .

You might also like