Electronic signature authentication requires certified identity verification, secure key management, subscriber control, and compliance with prescribed digital signature standards.

Electronic signature authentication may use Aadhaar or other e-KYC, or a trusted third-party mechanism for creating and accessing a subscriber's signature key. Both methods require e-authentication, hashing and asymmetric cryptography and lead to issuance of a Digital Signature Certificate by a Certifying Authority. The trusted third-party route requires identity verification, secure key storage, subscriber-only authentication control, facilitation of signature creation and certificate revocation, and destruction of the signature key. Applicable e-authentication, public-key certification, and digital-signature creation, storage and verification standards must be followed.

---

---

---