Digital / electronic signature; E-governance; certifying authority — Intellectual Property Rights I Notes

Digital / electronic signature; E-governance; certifying authority

How can a document you never physically touched carry your signature? The answer is a pair of mathematical keys: a private key only you hold “locks” the document, and a public key anyone can use “unlocks” it — proving both who you are and that nothing was altered. That is the digital signature, and it makes paperless government possible.

What these three connected ideas are

A. Digital and electronic signature

A digital signature authenticates an electronic record using asymmetric cryptography and a hash function (s.3). Two mathematically linked keys are used: the signer’s private key (kept secret) creates the signature, and the matching public key (published in a certificate) lets anyone verify it. This proves two things — authentication (the record came from this person) and integrity (the record was not altered after signing).

The 2008 amendment introduced the broader, technology-neutral term electronic signature (s.3A) — any technique specified in the Second Schedule that reliably authenticates an electronic record. A digital signature is one type of electronic signature. (Note the direction: every digital signature is an electronic signature, but not every electronic signature is a digital signature.)

B. E-governance

E-governance is the use of electronic records and signatures in the working of Government — e-filing, e-payments, and delivery of public services online. Chapter III of the Act (ss.4–10A) enables it:

s.6 — filing, issue, grant of licences and receipt of money by Government may be done in electronic form;
s.7 — retention of records in electronic form satisfies legal record-keeping requirements;
s.8 — publication of rules/regulations in the electronic Gazette is valid.

Its benefits are transparency, speed, lower cost and reduced corruption; passport, PAN, income-tax and land-record services are everyday examples.

C. Certifying authority

A Certifying Authority (CA) is a licensed body that issues Digital Signature Certificates (DSCs) (s.35), binding a public key to the identity of its holder — the digital equivalent of a passport office vouching for identity. CAs are licensed and supervised by the Controller of Certifying Authorities (Topic 9). To issue a certificate the CA must verify the applicant’s identity and that the applicant holds the corresponding private key. Examples in India include e-Mudhra, (n)Code Solutions and NIC. The CA can also suspend (s.37) and revoke (s.38) certificates.

Information Technology Act, 2000, s.3(2): “the authentication of the electronic record shall be effected by the use of asymmetric crypto system and hash function which envelop and transform the initial electronic record into another electronic record.”

Information Technology Act, 2000, s.35(1): “any person may make an application to the Certifying Authority for the issue of a Digital Signature Certificate in such form as may be prescribed by the Central Government.”

In Simple Terms: A digital signature uses two keys — a private one you keep and a public one others use — to prove a document is really yours and untouched. An electronic signature (s.3A) is the wider, technology-neutral version. E-governance is government done electronically (e-filing, e-payments). A Certifying Authority is the licensed body that issues the certificates linking your public key to your identity.

🧩 WORKED EXAMPLE — proving who signed

Facts. A company files a return electronically, signed with its director’s digital signature. The tax office doubts it was really the director.

Rule. s.3 — a digital signature by asymmetric cryptography authenticates identity and guarantees integrity; the public key is verified against the director’s Digital Signature Certificate issued by a licensed CA (s.35).

Apply. The signature can be verified with the director’s public key in his certificate; a successful verification proves it was created with his private key and the record is unaltered.

Conclusion. The digital signature is valid proof of authorship and integrity; the return is validly signed.

flowchart TD
    DS["Digital / electronic signature (ss.3, 3A)"]:::root
    DS --> KEYS["Private key signs · public key verifies (asymmetric crypto)"]:::leaf
    DS --> CERT["Digital Signature Certificate issued by CA (s.35)"]:::leaf
    DS --> EGOV["Enables e-governance (ss.6, 7, 8): e-filing, e-payment"]:::leaf
    CERT --> CCA["CA licensed & supervised by Controller (CCA)"]:::leaf
    classDef root fill:#FFF8DC,stroke:#000,color:#000;
    classDef leaf fill:#E6F3FF,stroke:#1E3A8A,color:#000;

Case Laws

Shreya Singhal v Union of India (2015) — affirmed the constitutional framework within which the Act’s e-governance and authentication scheme operates.
State of Delhi v Mohd. Afzal (2003) — electronic records and their authentication were accepted as reliable evidence, supporting the digital-signature regime.

📄 Full notes + Question Bank (₹199) — every topic in depth, model answers to all past KSLU questions, in one printable PDF. Get the bundle · 10 Solved Problems · All Intellectual Property Rights I topics