Previous Year Question
Consider the following statements.
A digital signature is:
an electronic record that identifies the certifying authority issuing it.
used to serve as a proof of identity of an individual to access information or server on Internet.
an electronic method of signing an electronic document and ensuring that the original content is unchanged.
Which of the statements given above is/are correct?
Only 1
2 and 3
Only 3
1, 2 and 3
Correct Answer: C
Detailed Solution
Statement 1 is incorrect. This statement relates to a characteristic of a Digital Signature Certificate (DSC) rather than a digital signature. A DSC is an electronic record issued by a licensed Certifying Authority. It binds the identity of an individual or organisation with its public key and contains details relating to the issuing Certifying Authority.
Statement 2 is incorrect. A digital certificate, login credentials, cryptographic keys or multi-factor authentication may be used to prove the identity of an individual for accessing information or a server on the Internet. The primary function of a digital signature is not to provide access but to authenticate the person signing an electronic document and establish the integrity of that document.
Statement 3 is correct. A digital signature is an electronic method of cryptographically signing an electronic record or document. A hash value is generated from the document’s data, and the signature is created using the signer’s private key. It is verified using the corresponding public key.
If the contents of the document are altered after it has been signed, its hash value changes and signature verification fails. Thus, a digital signature helps ensure the authenticity, integrity and non-repudiation of a document.
Digital signatures have legal recognition in India under the Information Technology Act, 2000. The Controller of Certifying Authorities supervises the functioning of licensed Certifying Authorities and regulates the Public Key Infrastructure framework in the country.