ESign (India)

2021-04-15T19:01:42Z

183.83.213.154:

'''[https://www.leegality.com/blog/aadhaar-esign Aadhaar eSign]''' is an online [[electronic signature]] service in [[India]] to facilitate an [[Aadhaar]] holder to digitally sign a document.<ref>{{cite web|title=eSign – Online Digital Signature Service|url=http://www.cca.gov.in/cca/?q=eSign.html|publisher=Controller of Certifying Authorities, Govt. of India|accessdate=31 May 2015}}</ref> The signature service is facilitated by authenticating the Aadhar holder via the Aadhar-based e-KYC (electronic Know Your Customer) service.<ref name=Gazette>{{cite journal|journal=The Gazette of India (Extraordinary)|title= MINISTRY OF COMMUNICATIONS AND INFORMATION TECHNOLOGY (Department of Electronics and Information Technology) NOTIFICATION |date=28 January 2015|volume=No. 59|issue=PART II—Section 3—Sub-section (i)|url=http://www.cca.gov.in/cca/sites/default/files/files/eSign_gazette_notification.pdf|accessdate=31 May 2015}}</ref>

To eSign a document, one has to have an Aadhaar card and a mobile number registered with Aadhaar. With these two things, an Indian citizen can sign a document remotely without being physically present.

==Procedure==
The notification<ref name=Gazette/> issued by [[Government of India]] in this regard stipulates the following procedure for the e-authentication using Aadhaar e-KYC services.......................................................................................

Authentication of an electronic record by [[e-authentication]] technique which shall be done by
#the applicable use of e-authentication, [[hash function]], and [[asymmetric cryptosystem]] techniques, leading to issuance of [[digital signature]] certificate by Certifying Authority,
#a [[trusted third party]] service by subscriber's key pair generation, storing of the key pairs on hardware security module and creation of digital signature provided that the trusted third party shall be offered by the certifying authority (the trusted third party shall send application form and certificate signing request to the Certifying Authority for issuing a digital signature certificate to the subscriber),
#issuance of digital signature certificate by Certifying Authority shall be based on e-authentication, particulars given in the prescribed format, digitally signed verified information from Aadhaar e-KYC services and electronic consent of digital signature certificate applicant,
#the manner and requirements for e-authentication shall be as issued by the Controller from time to time,
#the security procedure for creating the subscriber's key pair shall be in accordance with the e-authentication guidelines issued by the Controller,
#the standards referred to in rule 6 of the Information Technology (Certifying Authorities) Rules, 2000 shall be complied with, in so far as they relate to the certification function of public key of Digital Signature Certificate applicant, and
#the manner in which information is authenticated by means of digital signature shall comply with the standards specified in rule 6 of the Information Technology (Certifying Authorities) Rules, 2000 in so far as they relate to the creation, storage and transmission of Digital Signature.

It helpful to banks to disburse loans and verify KYC identity
........................................................

==eSign Service Providers==
Organisations and individuals seeking to obtain the [https://www.leegality.com/ eSigning Service] can utilize the services of various service providers. There are empanelled service providers with whom organisations can register as an Application Service Prover after submitting the requisite documents, getting UAT access, building the application around the service and going through an IT Audit by an CERT-IN empanelled auditor.<ref>{{cite web|title=Empanelled eSign Service Providers|url=http://www.cca.gov.in/cca/?q=service-providers.html|publisher=Controller of Certifying Authorities, Govt. of India}}</ref>

However, the process of registering as an Application Service Provider is cumbersome, and requires huge investments of time, money and resources in complying with the regulations and building a suitable application. Most organisations prefer using services of plug-n-play gateway providers who take the responsibility of [https://www.leegality.com/blog/law-around-aadhaar-esign complying with the regulations], hence simplifying the process for the market.

==See also==
* [[DigiLocker]]

==References==
{{reflist}}

[[Category:Authentication methods]]
[[Category:Biometrics]]
[[Category:Cryptography]]
[[Category:Computer law]]
[[Category:E-commerce in India]]

Bharatpedia - User contributions [en]

ESign (India)