Skip to content
Home » Regulation of Certifying Authorities (CAs)

Regulation of Certifying Authorities (CAs)

Regulation of Certifying Authorities (CAs)

Introduction

In electronic transactions, trust and authentication are critical. This is ensured through digital signatures, which are issued and managed by Certifying Authorities (CAs).

👉 In India, the regulation of Certifying Authorities is governed by the
Information Technology Act, 2000

1. What is a Certifying Authority (CA)?

Definition

A Certifying Authority (CA) is:

  • A trusted entity
  • That issues Digital Signature Certificates (DSCs)
  • Verifies the identity of users

📌 Example: Used in e-filing, online banking, e-governance

2. Role of Certifying Authorities

  • Issue digital signature certificates
  • Verify identity of applicants
  • Maintain certificate records
  • Ensure secure digital transactions
  • Revoke certificates when required

3. Regulation of Certifying Authorities

Controller of Certifying Authorities (CCA)

Definition

The Controller of Certifying Authorities (CCA) is the governing authority under the IT Act.

Functions of CCA

  • Grants license to CAs
  • Regulates and supervises CAs
  • Maintains national repository of certificates
  • Ensures compliance with rules

Licensing of Certifying Authorities

Process

  1. Application submission
  2. Verification by CCA
  3. Grant of license
  4. Periodic renewal

📌 Only licensed entities can act as CA

Duties of Certifying Authorities

1. Issue Digital Certificates

  • After verifying identity

2. Maintain Records

  • Keep logs of issued certificates

3. Ensure Security

  • Protect private keys
  • Use secure systems

4. Revocation of Certificates

  • Cancel certificates if compromised

5. Follow Standards

  • Comply with government regulations

Suspension and Revocation of License

Reasons

  • Violation of rules
  • Security breaches
  • Misuse of authority

📌 CCA can suspend or cancel CA license

Digital Signature Certificate (DSC)

Definition

A DSC is:

  • An electronic certificate
  • Used to verify identity

Components of DSC

  • Public key
  • Identity information
  • Issuing authority details

Types of Digital Signature Certificates

  • Class 1 → Basic security
  • Class 2 → Moderate security
  • Class 3 → High security

Functions of Digital Signatures

  • Authentication
  • Data integrity
  • Non-repudiation

Security Requirements for CAs

  • Use secure cryptographic systems
  • Protect private keys
  • Maintain audit logs
  • Follow prescribed standards

Legal Provisions (IT Act, 2000)

Section 17

  • Appointment of Controller

Section 18

  • Powers of Controller

Section 24

  • Procedure for granting license

Section 30

  • Duties of Certifying Authority

Section 35

  • Issue of Digital Signature Certificate

Section 37

  • Revocation of certificate

Advantages of CA Regulation

  • Ensures trust in digital transactions
  • Prevents fraud
  • Enables secure communication
  • Supports e-commerce and e-governance

Limitations

  • Complex implementation
  • Dependence on CA trust
  • Risk if CA is compromised

Real-Life Examples

  • Digital signatures in income tax filing
  • Company registration using DSC
  • Secure email authentication

Conclusion

Regulation of Certifying Authorities ensures secure and trustworthy digital communication. By controlling issuance and management of digital certificates, the IT Act establishes a strong framework for authentication, integrity, and non-repudiation in electronic transactions.

📘 MCA Exam Tip

For 10–15 marks:

  • Define CA
  • Explain role of CCA
  • Licensing process
  • Duties of CA
  • Relevant IT Act sections