Synetic College Logo
Unit 3 of 4 · MBA Sem 4

Unit 3: Digital signatures and IT law

Managing Digital Innovation and Transformation notes · PTU syllabus (MBA 944-18)

3 min read5 topics10 exam questions
On this page
  1. Unit summary
  2. Digital signatures and certificates
  3. Certifying authorities and their liabilities
  4. E-governance in India
  5. The Information Technology Act, 2000: object and scope
  6. Relevance of the IT Act to other laws
  7. Key terms
  8. Quick revision
  9. Important questions

Unit summary

Law gives digital transactions the same force as paper ones. This unit covers digital signatures and certificates, certifying authorities and their liabilities, e-governance in India, and the Information Technology Act 2000 — its object, scope and relevance to other laws.

After this unit you can

  • Explain digital signatures and certificates
  • Explain the role and liabilities of certifying authorities
  • Explain e-governance initiatives in India
  • Explain the object and scope of the IT Act 2000 and its relation to other laws

PTU syllabus topics

  • Digital signature and certificates
  • certifying authorities and liabilities
  • e-governance in India
  • Information Technology Act 2000 — object
  • scope and relevancy with other laws
ProcessHow a digital signature works
  1. 1Hash the document
  2. 2Encrypt the hash with the sender's private key
  3. 3Send document + signature
  4. 4Receiver decrypts with the public key
  5. 5Compare hashes

    Match = authentic and unaltered

1

Topic 1

Digital signatures and certificates

  • Digital signature: an electronic signature using asymmetric cryptography and a hash function to authenticate the signer and ensure integrity.
ProcessSigning and verifying
  1. 1Hash the document
  2. 2Encrypt the hash with the signer's private key
  3. 3Send document, signature and certificate
  4. 4Receiver decrypts the signature with the public key
  5. 5Compare with a fresh hash — match means authentic and unaltered
  • Digital Signature Certificate (DSC): classes based on verification level (Class 3 and document signer certificates now in use); used for MCA filings, income-tax returns, GST, e-tenders.
  • Aadhaar e-Sign: online electronic signature using Aadhaar OTP or biometric authentication.
2

Topic 2

Certifying authorities and their liabilities

  • Controller of Certifying Authorities (CCA): licenses and regulates CAs, maintains the root certifying authority of India, sets standards.
  • Certifying authority duties: verify identity, issue, suspend and revoke certificates, maintain secure systems, publish certificate practice statements and revocation lists, keep records.
  • Liabilities: licence suspension or revocation for breach; penalties and compensation under the IT Act for negligence or misrepresentation; subscribers must keep private keys secure.
3

Topic 3

E-governance in India

ClassificationE-governance initiatives
E-governance

  • Identity and payments

    Aadhaar, UPI, DigiLocker, e-Sign

  • Services

    UMANG app, Common Service Centres, e-District

  • Taxation

    GSTN, income-tax e-filing, faceless assessment

  • Business

    MCA21, Government e-Marketplace (GeM), Udyam registration

  • Public delivery

    Direct Benefit Transfer, PM-KISAN, ONORC

  • Health and education

    ABHA, CoWIN, SWAYAM, DIKSHA

  • Benefits: transparency, speed, lower corruption, inclusion; challenges: digital divide, privacy, cybersecurity, interoperability.
4

Topic 4

The Information Technology Act, 2000: object and scope

  • India's law for electronic commerce, electronic governance and cyber crime; based on the UNCITRAL Model Law (1996); amended in 2008.
  • Digital signature (Section 3): authentication using asymmetric crypto system and hash function — a key pair (private key to sign, public key to verify).
  • Electronic signature (Section 3A): includes digital signatures and other notified techniques (Aadhaar e-sign).
  • Digital Signature Certificate (DSC): issued by a Certifying Authority licensed by the Controller of Certifying Authorities (CCA).
ClassificationElectronic governance (Sections 4–10A)
E-governance

  • Legal recognition of electronic records (Section 4)

  • Legal recognition of electronic signatures (Section 5)

  • Use in government — filing, issue of licences, receipt of payments (Section 6)

  • Retention of electronic records (Section 7)

  • Electronic Gazette (Section 8)

  • Validity of contracts formed electronically (Section 10A)

  • Cyber offences: tampering with source code (Section 65), computer-related offences (66), identity theft (66C), cheating by personation (66D), cyber terrorism (66F), obscene content (67); Section 43 — compensation for unauthorised access and damage; Section 79 — intermediary safe harbour subject to due diligence (IT Rules, 2021).
  • Adjudication: adjudicating officers; appeals to the TDSAT (Cyber Appellate Tribunal merged in 2017).
  • Digital Personal Data Protection Act, 2023 now governs personal data processing.
5

Topic 5

Relevance of the IT Act to other laws

  • Indian Evidence Act (now Bharatiya Sakshya Adhiniyam, 2023): electronic records admissible as evidence with certificates.
  • Indian Penal Code (now Bharatiya Nyaya Sanhita, 2023): offences such as forgery and cheating extend to electronic records.
  • Banker's Books Evidence Act and RBI Act: electronic banking records and payment systems.
  • Exclusions (First Schedule): negotiable instruments other than cheques, powers of attorney, trusts, wills, contracts for sale of immovable property.
  • Related laws: DPDP Act 2023, Consumer Protection (E-Commerce) Rules 2020, IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021.

Key terms

Digital signature
Cryptographic signature authenticating an electronic record
CCA
Controller of Certifying Authorities
Certifying authority
Licensed issuer of digital signature certificates
E-governance
Delivery of government services through digital means
Electronic record
Data or record stored or transmitted electronically

Quick revision

  • Digital signature process; DSC classes and uses; Aadhaar e-Sign.
  • CCA; CA duties and liabilities.
  • E-governance initiatives, benefits and challenges.
  • IT Act 2000: object, digital and electronic signatures, e-governance sections, offences, adjudication.
  • Relation to evidence, criminal, banking laws; exclusions; DPDP Act.

Important exam questions

Practice questions written to the PTU exam pattern for this unit's syllabus: short answers (Section A style) and long answers (Sections B and C style).

Short-answer questions

  1. Q1.What is a digital signature?
  2. Q2.What is a Digital Signature Certificate used for?
  3. Q3.What is the role of the CCA?
  4. Q4.Name four e-governance initiatives in India.
  5. Q5.State two objects of the IT Act 2000.
  6. Q6.Name two documents excluded from the IT Act.

Long-answer questions

  1. Q1.Explain digital signatures and certificates.
  2. Q2.Discuss the role and liabilities of certifying authorities.
  3. Q3.Discuss e-governance in India.
  4. Q4.Explain the object and scope of the IT Act 2000 and its relevance to other laws.

Stuck on this unit?

Message SBS on WhatsApp for help with Managing Digital Innovation and Transformation, or to ask about studying MBA at Synetic.

WhatsApp us