Question 64 from UPSC CSE 2019 - Science & Technology

Question

Consider the following statements:
1. A digital signature is an electronic record that identifies the certifying authority issuing it.
2. It is used to serve as a proof of identity of an individual to access information or serve on the Internet.
3. It is an electronic method of signing an electronic document and ensuring that the original content is unchanged.
Which of the statements given above is/are correct?

IASCODEX · Accepted Answer

Correct Option: D. 1, 2, and 3

Strategy: Each statement needs precise scrutiny. Statement 1 might initially mislead, as digital signatures themselves do not identify the certifying authority, but rather the certificate does; yet, as part of the signature's infrastructure, the authority's identity becomes integral. Statement 2 correctly highlights the function of serving as identity proof for authentication over the internet. Statement 3 accurately describes the primary technical role of digitally signing an electronic document while preserving content integrity. All three statements, while nuanced, are essentially correct in mainline usage and per the IT Act.

Key Info: A digital signature is a cryptographic mechanism ensuring the authenticity, integrity, and non-repudiation of electronic documents. Under India's Information Technology Act, 2000, a digital signature is defined as the authentication of any electronic record by a subscriber using an electronic method or procedure. Digital signatures are generated and verified through asymmetric cryptography (public-private key pair). Digital Signature Certificates (DSC) are issued by Certifying Authorities (CAs) licensed by the Controller of Certifying Authorities (CCA), Ministry of Electronics and Information Technology. These certificates bind the identity of an individual with a public key, thereby serving as proof of identity when accessing information or services or when digitally signing documents. The verification process automatically identifies the issuing CA via the certificate. Digital signatures ensure that the signed electronic document remains unaltered; any change to the document after signing invalidates the signature, thus guaranteeing content integrity. Examples of electronic documents requiring digital signatures include e-filing of tax returns, corporate filings, and secure email communications. The issuance and regulation of digital signatures and CAs in India are governed by Sections 35 to 42 of the IT Act. Globally, standards for digital signatures include PKI (Public Key Infrastructure) protocols and X.509 certificate standards.

IASCODEX · Answer

Option A: 1 only

IASCODEX · Answer

Option B: 2 and 3 only

IASCODEX · Answer

Option C: 3 only