PKI in India Presented By M' Vidyasagar

1
PKI in IndiaPresented By M. Vidyasagar
2
Presentation Contents

• Enablers of PKI in India
• Indian Information Technology Act, 2000
• Trust Model in India
• Licensed CAs in India
• PKI Implementation in India
• Certificate Issuance Milestones
• Key Industry segments
• Key applications for usage of Digital Signatures
  PKI
• Existing Implementations
• Key Initiatives in India

3

• Enablers of PKI in India

4
Indian Information Technology Act, 2000

• Enacted on 9th June, 2000
• Ensures legal sanctity for the PKI enabled
  electronic transactions (Digital Signatures)
• Supports ITU X.509 v3 standard for certificates
  and other open, accepted de facto standards
• Provides for the Controller of Certifying
  Authorities (CCA) to license and regulate the
  working of Certifying Authorities
• Defines the Trust hierarchy under Controller of
  Certifying Authorities
• Defines the requirements and procedures to become
  a Licensed Certifying Authority
• Defines the framework for Licensed CAs including
• Legal
• Operational
• Technical

5
Trust Model
Controller of Certifying Authorities (Govt. of
India)
Licensed Certifying Authorities
Subscriber
Subscriber
Subscriber
6
Licensed CAs in India

• Tata Consultancy Services (TCS-CA)
• Private Certifying Authority to issue
  Certificates to Individuals, Company and
  Government users
• SafeScrypt Ltd.
• Private Certifying Authority
• Institute for Development and Research in Banking
  Technology (IDRBT-CA)
• Established by Reserve Bank of India, issuing
  Certificates to Banking industry for INFINET
  transactions
• National Informatics Centre (NIC-CA)
• An organization of Government of India, issuing
  Certificates to Government organizations for G2G
  transactions

7

• PKI Implementation in India

8
Certificate Issuance Milestones

• Creation of first CA license
• February, 2002
• Total Number of Certificates issued by all
  Licensed CAs in India
• Approximately 18,000

9
Key Industry segments

• Government
• G2G
• G2C
• Banking
• Inter/ Intra Banking transactions
• Corporate Internet Banking
• Retail Banking
• Financial Services Broking
• B2B
• Healthcare
• Telemedicine

10
Key Applications for PKI Enabling

• Government
• Filing Tax Returns online by taxpayers
• Citizen ID card
• Issuing forms and licenses
• Reservations ticketing
• Banking
• Inter/ Intra bank messaging systems
• Corporate Internet Banking applications
• Internet Banking
• Financial Services/ Broking
• Online Trading
• Electronic Contract Notes
• B2B
• Online Tendering
• e-Procurement
• Healthcare
• Healthcare Management System (HMS)
• Electronic Medical Recording (EMR)
• Electronic Prescriptions

11
Existing implementations

• Government
• Ministry of Commerce and Industry
• Electronic applications and approvals for Special
  Economic Zones and Export Oriented Units
• Online applications for licenses by the EXIM
  community
• Income Tax Department
• Online tax returns through e-Intermediaries
• Banking
• Securing the Inter/ Intra bank messaging systems
  (Structured Financial Messaging System - SFMS)
• PKI enabling Corporate Internet Banking
  application by banks like ICICI Bank, Punjab
  National Bank

12
Existing implementations (Continued)

• Financial Services Broking
• Two major depositories in India have their
  applications PKI enabled
• NSDL (National Securities Depository Limited)
• CDSL (Central Depository Services (India) Ltd.
• Two major Stock Exchanges in India have secured
  their transactions with PKI
• BSE (The Stock Exchange, Mumbai)
• NSE (National Stock Exchange)
• Majority of Depository participants and Stock
  brokers are moving towards electronic
  transactions with Digital Signatures (For Ex.
  Electronic Contract Notes as per SEBI guidelines)
  
• B2B
• e-Procurement and e-Tendering applications

13
Key Initiatives in India

• Government
• Online Tax Returns by the Income Tax Department
• National ID Card
• Railway Reservation and Ticketing
• Banking
• Structured Financial Messaging System (SFMS)
  INFINET
• Financial Services/ Broking
• SEBI Guidelines for electronic contract notes
• Healthcare
• Recommendations for Guidelines and Standards for
  Practice of Telemedicine in India The Framework
  for Information Technology Infrastructure for
  Health in India

14
For More Information
Please contact Dr. M. Vidyasagar
(m.vidyasagar_at_tcs.com or sagar_at_atc.tcs.co.in
) Please check our web site TCS-CA Trust
Portal www.tcs-ca.tcs.co.in www.tcs.com
15
Thank You!