Information Technology Act 2000

Objectives

Carried out by means of electronic data interchange, and other means of electronic communication, commonly referred to as "electronic commerce“

To facilitate electronic filing of documents with Government agencies and E-Payments

Digital SIgnature

The authentication to be affected by use of asymmetric crypto system and hash function

The private key and the public key are unique to the subscriber and constitute functioning key pair

Verification of electronic record possible

Digital  Signature

Digital signatures created and verified using cryptography

Public key System based on Asymmetric keys

An algorithm generates two different and related keys

Public key

Private Key

Private key used to digitally sign.

Public key used to verify.

Role of public key

Allow parties to have free access to the signer’s public key

This assures that the public key corresponds to the signer’s private key

Trust between parties as if they know one another

Parties with no trading partner agreements, operating on open networks, need to have highest level of trust in one another

Secure digital signature

If by application of a security procedure agreed to by the parties concerned, it can be verified that a digital signature, at the time it was affixed, was:

(a)     unique to the subscriber affixing it;

(b)     capable of identifying such subscriber;

(c)  created in a manner or using a means under the exclusive control of the subscriber and is linked to the electronic record to which it relates in such a manner that if the electronic record was altered the digital signature would be invalidated, then such digital signature shall be deemed to be a secure digital signature

Regulation of Certifying Authorities 

The Central Government may appoint a Controller of Certifying Authority who shall exercise supervision over the activities of Certifying Authorities. 

Certifying Authority means a person who has been granted a licence to issue a Digital Signature Certificate. The Controller of Certifying Authority shall have powers to lay down rules, regulations, duties, responsibilities and functions of the Certifying Authority issuing Digital Signature Certificates. The Certifying Authority empowered to issue a Digital Signature Certificate shall have to procure a license from the Controller of Certifying Authority to issue Digital Signature Certificates. The Controller of Certifying Authority has prescribed detailed rules and regulations in the Act, as to the application for license, suspension of license and procedure for grant or rejection of license. 

Digital Signature Certificate

Any person may make an application to the Certifying Authority for issue of Digital Signature Certificate. The Certifying Authority while issuing such certificate shall certify that it has complied with the provisions of the Act. 

The Certifying Authority has to ensure that the subscriber (i.e., a person in whose name the Digital Signature Certificate is issued) holds the private key corresponding to the public key listed in the Digital Signature Certificate and such public and private keys constitute a functioning key pair. The Certifying Authority has the power to suspend or revoke Digital Signature Certificate. 

E-Governence

a) Legal Recognition of electronic record

         If any information is required in printed or written form under any law the Information provided in electronic form, which is accessible so as to be usable for subsequent use, shall be deemed to satisfy the requirement of presenting the document in writing or printed form.

Use of electronic records & DS (6)

Filling of any form or application in office controlled by government

Issue of grant and license or approval 

Receipt or payment of money in a particular manner

Publication of rules 

The rules regulations which are supposed to published in official gazette , such requirement shall be deemed to be satisfied if it is published in electronic gazette.

Penalties

For damage to computer, computer system.etc(43)

For failure to furnish information , return (44)

    fails to furnish any document-  Rs.1,50,000

    not submitting in specific time period-                                      

                                       Rs.5000 per day of delay

Failure to maintain books or accounts-

                 compensate the victim if any or penalty

                                                                    upto 25000