DIGITAL SIGNATURE CERTIFICATE
Parvesh K. Kheterpal parvesh@indiacp.com
Why Digital Signatures
Security of document requires
• Authenticity • Confidentiality • Integrity
• Non-repudiation
Solutions Offered
Physical World
Authenticity Notaries, Physical Presence, Photo ID card Envelopes
Electronic World
Digital Signature
Privacy & Confidentiality
Encryption
Integrity
NonRepudiation
Signatures, Barcodes, Watermarks, Sealed letter Notarized signature, Receipts &Confirmations
Digital Signature Digital Signature
Definition
DIGITAL SIGNATURE CERTIFICATE
(DSC)
An electronic signature duly issued by the certifying authority that shows the authenticity of the person who is signing the e-form.
What does DSC contain and how it looks like
Types of DSC
Class 1 Class 2 Class 3
Validity of DSC
1 year 2 years
Issuing Authority for DSC
Digital Signatures under MCA-21
Required for
• Signing of e-forms
• Secure login
Required to
• Directors • Company Secretary • Manager • Authorised Signatory • Professionals (CA/CS/CWA/Advocate)
DSC can be obtained
• Personal capacity
–Individual User
• Representative capacity
–Company User
Individual User
It can be used for any purpose and in any designation
Director of any company
Manager of any company DSC as Individual User Authorized representative of any company CS of any company Auditor of any company
Company User
DSC can be used in single designation and for a single organization only.
e.g.
DSC in the name of Mr. X as a partner of ABC & Associates
DSC can be used only by Mr. X as a partner of ABC & Associates
System requirements
• Operating System: Windows NT, 2000, XP
• Browser: Internet Explorer 5.5 and above • Browser Settings – Active-X controls need to be enabled in your Internet browser. In order to ensure this, please do the following: – Open a browser window – Go to Tools >> Internet Options >> Security – Click 'Default Settings' and set to 'Medium'
How to obtain your DSC
Follow following steps:
• Register yourself • Online enrollment request • Physical application with annexure • Downloading of DSC
Register Your-self
Online enrollment form
Mail - DSC has been approved
Down Load your DSC
Enter the Authentication PIN received in the email notification.
After clicking the “Download” button, a message shall appear on the screen that the certificate can be downloaded on same machine on which the request was generated. Click “OK” on the message window to proceed if you are using the same machine.
Your signature has been downloaded successfully
Check your DSC
How to Affix DSC on e-forms
Where to keep your DSC
Always keep your DSC on USB token
Pen Drive Vs. USB token
Pen Drive / CD
It is a portable hard Disk, which is un-secure and could be used for copying and deleting any files.
USB Token
It is secure device, having inbuilt Cryptographic Service Provider (CSP) and Cryptographic processor, used specifically to carry Digital Credentials of individuals and is primarily used for Two Factor authentication. A virus cannot affect USB Token, and the digital certificate stored would always be secure.
Pen Drive are prone to Virus Attack, as it is a normal hard disk, the certificates can always be destroyed / mutilated by Viruses.
The Digital Certificate has to be manually copied and deleted from the browser each time you would have to sign. When you carry Digital Certificate in a Pen Drive, it is like keeping blank signed
In USB Token when you insert the USB Token, it automatically copies the certificate to the browser and when you remove the USB Token it automatically
Cheque in your wallet.
Where as in USB Token, it is simply storing unsigned cheque book in your vault.
Loss of your DSC and Revocation of your DSC
Measures to avoid misuse of DSC
Exclusive Access
Password Management
Avoidance in DSC Delegation
Apply/affix DSC with proper care
USB Tokens in proper Lock n Key
Misuse of DSC may lead to
• Filing of form without the knowledge of owner • Change of Management of the company i.e. filing of form 32 and change of director • Dispute under sec.397/398 • Section 628 cases for wrong information
• Pre-certification of forms without
the knowledge of professionals
Future Usages of DSC with Government
1. Issuing forms and licences 2. Filing tax returns online 3. Online Government orders/treasury orders 4. Online file movement and approval system 5. Public information records 6. E-voting 7. Online money orders
Last but not the least… E-transformation opens tremendous opportunities for Professionals & Business Houses, But it require extensive care while its usage, as with negligence one can lose his own identity/ integrity which may cause serious problems.
Thank you
Contact Details:
Parvesh K. Kheterpal Corporate Professionals . Com Pvt. Ltd. 7/9, Sarvapriya Vihar,
New Delhi – 110016
Ph: + 91 11 26966100/7100 M: + 91 9810727467 Email: parvesh@indiacp.com URL: www.corporateprofessionals.com