Thursday 31 January 2013

Why Digital Signatures Are Always Unique


                    Know About Digital Signatures



(Section 3 of I.T. Act)

The enactment of information technology Act, 2000 comprehensively addresses the legal issues concerning the electronic messaging and electronic payment systems. Digital signature is the new concept brought under the ambit of legislation in India. With this , there is bound to begreater role for the information technology commerce. E-commerce relies heavily on electronically transmission of messages carrying digital signatures. It is a common beleif that a digital signature is just a digitised image of a signature (drawn by hand ).
Infact , digital signature is not the replica of the manual signature captured through a scanner or otherwise. The digital signature must be applied in a manner to satisfy the following critical features of any message.

Authenticity-


It refers to the validity of the source of the communication. In the manual system we identify the source of document or instruction from the drawer's signatures. In the electronic message , it is the Digital signatures that verify the source or the originator of the message. The customer who originates an electronic payment ( funds transfer ) instruction must be able to establish authenticity of transaction.


Integrity-


Integrity of a message transmitted electronically is of paramount importance. The message has to be received intact and should not have altered any way during transmission.

Non-Repudiation-



Non-Repudiation is very important from banker's point of view so that it can act upon a funds transffer message. There should not be an opportunity for the sender of the message to deny that he or she has sent the message at all and in the form in which it has been recieved. As for example, a party having sent a message to buy particular shares should not be able to claim that it did not send the message when the price (of shares ) avtually fell down.

The Digital signature is unique to each message and any change to the message changes the digital signature.



Technology for Digital Signatures-


The most common manner of signing electronically is by the help of a pulic key cryptography as contemplated by the Information Technology Act. Cryptography is usually base on the use of algorithmic functions to generate two different but mathematically related keys (i.e. large numbers produced using a series of mathematical formulae applied to prime numbers ). One such key is used for creating digital signature or transforming data into a seemingly unintelligible form , and the other one for verifying a digital signature or returning the message to its original form.

The use of cryptography for authentication , purposes by producing a digital signature necessarily imply the use of encryption to make any information confidential in the communication process , since the encrypted digital signature may be merely appended to a non encrypted message . Generally a digital signature is an appendage to its message and the transformations involved in the creating of digital signature which do not affect the message. Digital signatures are annexed to the data and leave the content.

Before a sender can digitally sign an electronic communication, the sender must create a public-private key pair. The Private Key is used by a relying party to verify the digital signature.



Signing Digitally-



To sign digitally or any other item of information

-> The signer first delimits precisely the borders of what is to be signed.
-> Then a hash function in the signer's software computes a hash result which for all practical purposes is unique to the message .
-> The signer's software then transforms the hash result into a digital signature using the signer's private key.


The resulting digital signature is thus unique to both the message and the private key used to create it.

A third party i.e. the Certification Authority is entrusted with the job of verufying key pair among the two parties. The RBI (The Reserve Bank of India ) has appointed the IDRBT, Hyderabad as one of the certification authorities for security , management fortile financial sector


Do like and comment on this post

23 comments:

  1. I was totally unknown about Digital signatures

    ReplyDelete
  2. Ya but i think now you are clear about it , Right

    ReplyDelete
  3. A picture is always better than hundreds of words.Your explanation things about digital signatures is really very good. Thanks for writing such an informative blog.Keep it up!

    ReplyDelete
    Replies
    1. Thnks @Electronic Signature well u know now a days online frauds are increasing so digital signatures are the best way to be safe

      Delete
  4. Ya Its the best way

    ReplyDelete

  5. These certificates are accepted for IFFCO, Northern Railway, MCA 21, E-filing, E -tendering etc. and There are 3 types of Digital Signature Certificates

    Class-1, Class-2 & Class-3 and each having different level of security.

    All the authorized signatories of company under MCA21 require Class-2 Digital Signature Certificate.

    Similarly any document filed by CA/CS/CWA & TAX PRACTIONERS under MCA21 require Class-2 Digital Signature Certificate.

    ReplyDelete
  6. Thanks for sharing Technology for Digital Signatures Certificate this useful information! Hope that you will continue sharing this useful information! Hope that you will continue with Post is nicely written and it contains many good things for me. I am glad to find your impressive way of writing the post. Now it becomes easy for me to understand and implement the concept.

    ReplyDelete
  7. Great Post. Thanks for sharing your tips with us some great information has been detailed here digital signature.This is very good information.Really nice blog. Keep it up!!!

    ReplyDelete
  8. I am thankful to you for explaining this digital signature certificate in detail.This is very informative article.Once again thanks for sharing this useful information.

    ReplyDelete
  9. Good Blog.I have learn lot of information about digital Signature. Thank you so much for posting the digital signature.

    ReplyDelete
  10. Thanks to your well-written article, especially for explaining the technology of authenticating and verifying one's signature.

    ReplyDelete
  11. Digital signature software saves time and money by allowing you to sign contracts online, using e-signature technology. It's private and secure and takes much of the hassle and frustration out of document signing.

    ReplyDelete
  12. This is fabulous.Great post!Thank you for sharing.Keep it up!!!
    - electronic signature

    ReplyDelete
  13. Thanks for sharing this! At the place where I work, we have always used a form of an electronic signature to sign off contracts. It has been really useful and very convenient in running our business.

    ReplyDelete
  14. That is pretty cool, I was wondering how electronic signatures worked. Now I know! Thanks.

    ReplyDelete
  15. That was very useful and interesting information Digital signature3’s Digital Signature for e-tendering is a structure of electronic signatures, which is generated and checked by making use of Public Key Cryptography that is derived from the idea of a key couple created by an arithmetical algorithm, the private and public keys. The private key, which is employed as Digital Signature for e-tendering is firmly held by the possessor, whereas the public key is exposed to everyone for examining the Digital Signature for e-tendering.

    Visit:- http://www.digitalsignature3.com/ for more information

    ReplyDelete
  16. This is a great blog Know About Digital Signatures. I am pretty much impressed with your good work. You put really very helpful information. Keep it up.IEC Code Online

    ReplyDelete
  17. I am regular blog reader for update news about Tax, Audit and Digital Signature Certificate, so please keep up sharing your valuable information. Apply For Digital signature Certificate Online

    ReplyDelete
  18. Happy to see your blog as it is just what I have looking for. You are one of the well-known Digital signature providers in India. Digital Signature Certificate

    ReplyDelete
  19. Wow, that is great article. I am glad to read your post here. Your content is really informative article. You have a good writing also. Your design article is beautiful, i like it. Thank you for sharing with us. stiply.nl

    ReplyDelete
  20. This article is very helpful, so far I am confused about what is a trademark, whether we have to register a trademark, after reading this I am sure and want to register the name of my blog for copyright protection on the trademarks website in the Netherlands. Thank you for sharing Zivver.eu/nl

    ReplyDelete