...
...

e-Hastakshar service supports Aadhaar e-KYC based on applicable modes of authentication - OTP/TOTP, Biometric (Fingerprint/ IRIS), Two Factor (OTP + PIN) authentication.

...
The objective of eSign service is to offer on-line service to citizens for instant signing of their documents securely in a legally acceptable form. Two major challenges involved are (a) authentication of the user and (b) Trusted method of signing. Aadhaar based authentication is carried out to address the first challenge and Public Key Infrastructure (PKI) is used to securely sign the user document and establish the trust.
...
Imagine a life without carrying a pen and no printed application forms required to be filled in, for opening an account in a bank or for getting a PAN card. It was the signature put by applicant on the form that was preventing them from going online. But now, it is possible to replace hand written signature by electronic signature, which can be put in documents securely in a legally acceptable form under the Indian IT Act 2000. C-DAC offers eSign service called e-Hastakshar that will allow citizens to sign documents electronically, thereby saving time and efforts for them.
e-Hastakshar: C-DAC's On-line Digital Signing Service
...

e-Hastakshar offers on-line platform to citizens for instant signing of their documents securely in a legally acceptable form, under the Indian IT Act 2000 and various Rules and Regulations therein.

...

C-DAC through its e-Hastakshar initiative enables citizens with valid Aadhaar ID and registered mobile number to carryout digital signing of their documents on-line.

...

C-DAC utilizes the service of Unique Identification Authority of India (UIDAI) for e-authentication and e-KYC Service.

Benefits of e-Hastakshar: C-DAC’s online Digital Signing Service
...

Time and cost effective

...

Secure online service

...

Facilitates legally valid signatures

...

Easy and secure way to digitally sign at anywhere, anytime

...

Flexible and easy to implement

...

Aadhar based Authentication

...

Using open API facilitates applications to leverage digital signature service

...

C-DAC follows the guidelines of CCA and Aadhar to provide security

...

Provides legally valid signatures as per Indian IT Act 2000

...

Two factor authentication (OTP with PIN) for Offline e-KYC Mode based on Aadhaar e-KYC XML

...

C-DAC is an empanelled eSign service provider (ESP) and a Certifying Authority (CA)

...

Ensures privacy of users by requiring only the thumb print (hash) of the document for signature instead of whole document

ASP Integration Process
C-DAC offers its eSign service, named e-Hastakshar to Aadhaar holders with registered mobile numbers
...
Using Aadhaar OTP (One Time Password) or Biometric (Figure minutiae/IRIS) based e-KYC services to authenticate the document signer.
...
Using OTP/TOTP (One Time Password) and PIN based e-KYC services to authenticate the document signer.

STAGING

...

PRE-PRODUCTION

...

PRODUCTION

...

GO-LIVE

...

The various stakeholders involved in the process include the Application Service Provider (ASP), eSign Service Provider (ESP), the Controller of Certifying Authority (CCA) and Unique Identification Authority of India (UIDAI). All these stakeholders together ensure that an Aadhaar holder is enabled to sign a document through eSign service.

C-DAC is an ESP and offers services to various ASPs. In order to register as an ASP with C-DAC ESP (e-Hastakshar), the corresponding organization needs to carry out certain necessary steps including integration of their application(s) with e-Hastakshar. The integration is based on the four levels of processes.

e-Hastakshar service is exposed as stateless service over HTTPS. Usage of an open data format such as XML and widely used protocol such as HTTP allows easy adoption and deployment of this service.

ASP initiates eSign request and ESP authenticates document signer for e-KYC before eSign. e-Hastakshar facilitates authentication of document signer by calling authentication URL of C-DAC ESP. The e-KYC response shall be received by e-Hastakshar and it shall perform eSign on the request received from ASP.

... ... ... ... ...