Schedule II Second Schedule
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"THE SECOND SCHEDULE [See sub-section (1) of section 3A] ELECTRONIC SIGNATURE OR ELECTRONIC AUTHENTICATION TECHNIQUE AND PROCEDURE
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Sl. No.
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Description
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Procedure
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"(1)
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"(2)
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"(3)
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 20151.
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015e-authentication technique using Aadhaar The words "or other" and "and other e-KYC services" inserted by S.O. 1119(E), dated 1st March, 2019, with effect from 5 March 2019or other e-KYC services
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015Authentication of an electronic recordDefined in section 2(t): electronic record means data, record or data generated, image or sound stored, received or sent in an electronic form or micro film or computer generated micro fiche; 3[(ta) electronic signature means authentication of any electronic record by a subscriber by means of the electronic technique specified in the Second... by e-authentication Technique which shall be done by—Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015(a) the applicable use of e-authentication, hash, and asymmetric crypto systemDefined in section 2(f): asymmetric crypto system means a system of a secure key pair consisting of a private key for creating a digital signature and a public key to verify the digital signature techniques, leading to issuance of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 by Certifying AuthorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015(b) a trusted third party service by subscriber's key pair-generation, storing of key pairs on hardware security moduleText omitted by amendmentThe words "on hardware security module" omitted by G.S.R. 539(E), dated 30th June, 2015, with effect from 6 July 2015 and creation of digital signatureDefined in section 2(p): digital signature means authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3 provided that the trusted third party shall be offered by the certifying authorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24. The trusted third party shall send application form and certificate signing request to the Certifying AuthorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24 for issuing a Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 to the subscriber.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015(c) Issuance of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 by Certifying AuthorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24 shall be based on e-authentication, particulars specified in Form C of Schedule IV of the InformationDefined in section 2(v): information includes 6[data, message, text,] images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; 7[(w) intermediary, with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits... Technology (Certifying Authorities) Rules, 2000, digitally signed verified informationDefined in section 2(v): information includes 6[data, message, text,] images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; 7[(w) intermediary, with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits... from Aadhaar The words "or other" and "and other e-KYC services" inserted by S.O. 1119(E), dated 1st March, 2019, with effect from 5 March 2019or other e-KYC services and electronic consent of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 applicant.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015(d) The manner and requirements for e-authentication shall be as issued by the ControllerDefined in section 2(m): Controller means the Controller of Certifying Authorities appointed under sub section (1) of section 17; 5* * * * * 3[(na) cyber cafe means any facility from where access to the internet is offered by any person in the ordinary course of business to the members of the public; (nb) cyber security means protecting inf... from time to time.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015(e) The security procedure for creating the subscriber's key pairDefined in section 2(x): key pair, in an asymmetric crypto system, means a private key and its mathematically related public key, which are so related that the public key can verify a digital signature created by the private key The words "or other" and "and other e-KYC services" inserted by S.O. 1119(E), dated 1st March, 2019, with effect from 5 March 2019and other e-KYC services shall be in accordance with the e-authentication guidelines issued by the ControllerDefined in section 2(m): Controller means the Controller of Certifying Authorities appointed under sub section (1) of section 17; 5* * * * * 3[(na) cyber cafe means any facility from where access to the internet is offered by any person in the ordinary course of business to the members of the public; (nb) cyber security means protecting inf....Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015(f) The standards referred to in rule 6 of the InformationDefined in section 2(v): information includes 6[data, message, text,] images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; 7[(w) intermediary, with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits... Technology (Certifying Authorities) Rules, 2000 shall be complied with, in so far as they relate to the certification functionDefined in section 2(u): function, in relation to a computer, includes logic, control, arithmetical process, deletion, storage and retrieval and communication or telecommunication from or within a computer; 3[(ua) Indian Computer Emergency Response Team means an agency established under sub section (1) of Section 70B;] of public key of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 applicant.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 1 and the entries relating thereto inserted by G.S.R. 61(E), dated 27th January, 2015, with effect from 28 January 2015(g) The manner in which information is authenticated by means of digital signature shall comply with the standards specified in rule 6 of the Information Technology (Certifying Authorities) Rules, 2000 in so far as they relate to the creation, storage and transmission of Digital Signature Certificate.Substituted by G.S.R. 446(E), dated 27th April, 2016, with effect from 27 April 2016. Earlier read: "item (g)"(g) The manner in which the informationDefined in section 2(v): information includes 6[data, message, text,] images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; 7[(w) intermediary, with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits... is authenticated by means of digital signatureDefined in section 2(p): digital signature means authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3 shall comply with the manner and standards specified in Rules 3 to 12 of the Digital SignatureDefined in section 2(p): digital signature means authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3 (End entity) Rules, 2015 in so far as they relate to the creation, storage, and verification of Digital SignatureDefined in section 2(p): digital signature means authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 20202.
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020e-authentication technique and procedure for creating and accessing subscriber's signature key facilitated by trusted third party
Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020Authentication of an electronic recordDefined in section 2(t): electronic record means data, record or data generated, image or sound stored, received or sent in an electronic form or micro film or computer generated micro fiche; 3[(ta) electronic signature means authentication of any electronic record by a subscriber by means of the electronic technique specified in the Second... by e-authentication technique which shall be done by—Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(a) the applicable use of e-authentication, hash and asymmetric crypto systemDefined in section 2(f): asymmetric crypto system means a system of a secure key pair consisting of a private key for creating a digital signature and a public key to verify the digital signature techniques leading to issuance of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 by Certifying AuthorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24, provided that Certifying AuthorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24 shall ensure the subscriber identity verification, secure storage of the keys by trusted third party and subscriber's sole authentication control to the signature key.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(b) Identity verification of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 applicant shall be in accordance with the Identity Verification Guidelines issued by ControllerDefined in section 2(m): Controller means the Controller of Certifying Authorities appointed under sub section (1) of section 17; 5* * * * * 3[(na) cyber cafe means any facility from where access to the internet is offered by any person in the ordinary course of business to the members of the public; (nb) cyber security means protecting inf... from time-to-time.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(c) The requirement to operate as trusted third party shall be specified under e-authentication guidelines issued by the ControllerDefined in section 2(m): Controller means the Controller of Certifying Authorities appointed under sub section (1) of section 17; 5* * * * * 3[(na) cyber cafe means any facility from where access to the internet is offered by any person in the ordinary course of business to the members of the public; (nb) cyber security means protecting inf....Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(d) a trusted third party shallSubstituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020i) facilitate Identity verification of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 applicant;Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020ii) establish secure storage for subscriber to have sole control for creation and subsequent usage of subscriber's signature key by sole authentication of subscriber;Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020iii) facilitate key pair-generation, secure storage of subscriber's signature key and facilitate signature creation functions;Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020iv) facilitate the submission of DSC application form and certificate signing request to the Certifying AuthorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24 for issuing a Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 to the DSC applicant, andSubstituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020v) facilitate revocation of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 and destruction of subscriber's signature key.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(e) Issuance of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 shall be based on verification of credentials of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 applicant by Certifying AuthorityDefined in section 2(g): Certifying Authority means a person who has been granted a licence to issue a 1[electronic signature] Certificate under section 24 as per the provisions of the InformationDefined in section 2(v): information includes 6[data, message, text,] images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; 7[(w) intermediary, with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits... Technology Act and Rules made thereunder.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(f) The manner and requirements for authentication and storage of keys shall be as issued by the ControllerDefined in section 2(m): Controller means the Controller of Certifying Authorities appointed under sub section (1) of section 17; 5* * * * * 3[(na) cyber cafe means any facility from where access to the internet is offered by any person in the ordinary course of business to the members of the public; (nb) cyber security means protecting inf... from time to time under e-authentication guidelinesSubstituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(g) The security procedure for creating the subscriber's key pairDefined in section 2(x): key pair, in an asymmetric crypto system, means a private key and its mathematically related public key, which are so related that the public key can verify a digital signature created by the private key shall be in accordance with the e-authentication guidelines issued by the ControllerDefined in section 2(m): Controller means the Controller of Certifying Authorities appointed under sub section (1) of section 17; 5* * * * * 3[(na) cyber cafe means any facility from where access to the internet is offered by any person in the ordinary course of business to the members of the public; (nb) cyber security means protecting inf....Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(h) The standards referred to in rule 6 of the InformationDefined in section 2(v): information includes 6[data, message, text,] images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; 7[(w) intermediary, with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits... Technology (Certifying Authorities) Rules, 2000 shall be complied with, in so far as they relate to the certification functionDefined in section 2(u): function, in relation to a computer, includes logic, control, arithmetical process, deletion, storage and retrieval and communication or telecommunication from or within a computer; 3[(ua) Indian Computer Emergency Response Team means an agency established under sub section (1) of Section 70B;] of public key of Digital Signature CertificateDefined in section 2(q): Digital Signature Certificate means a Digital Signature Certificate issued under sub section (4) of section 35 applicant.Substituted by Information Technology (Amendment) Act, 2008, s. 49, dated 5th February, 2009, with effect from 27 October 2009. Earlier read: "the First Schedule and the Second Schedule"Serial number 2 and the entries relating thereto inserted by S.O. 3472(E), dated 29th September, 2020, with effect from 6 October 2020(i) The manner in which informationDefined in section 2(v): information includes 6[data, message, text,] images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; 7[(w) intermediary, with respect to any particular electronic records, means any person who on behalf of another person receives, stores or transmits... is authenticated by means of digital signatureDefined in section 2(p): digital signature means authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3 shall comply with the manner and standards specified in rule 3 to 12 of Digital SignatureDefined in section 2(p): digital signature means authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3 (End entity) Rules, 2015 in so far as they relate to the creation, storage and verification of Digital SignatureDefined in section 2(p): digital signature means authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of section 3.