• • altilQItUj EXTRAORDINARY· "'" 11-""" >--0'<-""'" (I)
PART II-Sedion J-Sub-settion (I) ~~ S\iCfl.!'llll PUBLISHED BY AUTHORITY REGD. NO. D. L.-33004199 ti. 5301 No. 5301 'if ~, '1""'\". ama 26, 2015/'lll': 4. 1937 NEW DELIH, W":DNESDAV. AUGUST 26, 201S/BHADRA 4, 1937 • • *m: aIR 'l.""T sII iil f11 4il Ii" '" q (~~'Ii;If.14il aIR 'l.""T sII<i'Jf114ilfihlror) ~ 'Ii~, 25 3J1ffif, 2015 m.~.f.t. 660("l).~ m<m:, 'l.""T !ll<i'Jf114il 3!filf.t>r<r, 2000 (2000~ 21) <l<t !lRT 87 om 'mI~~~m 'l'Ut~~ f.l>rq -.mlT t ar<Jt« :--
1.~ 'Ill[ aft<: llTi:'lT.~
(2) ~m U"I'r'l if_~ <l<t~ it ':l'f«J~ I ,(hI' 1~-(1) ~ f.11niI if UfO[ <l'li fil;..rot it 'l"r'lT~ 'IW,- (~) .~ it 'l.""T slliilf114il f.l>rq, 2000 (2000 'j;f 21) 3If'l~d~;
(lO) '1;;i'lf.l~" I~;;j)~, fil;lit q""q'lq<1~~ 1\;.mr fil;lit ~~if\1lf.l4il 3If'l~ .. 'lit F.im> '('l'it 3!fil<!; li'lI<r 31 '" I~"" W~&'lit 'IT'f'lO, !fTlIPl·lif ~"~f.l",,,~ if';, tI.,fifu~ <l<t 1Ifirn 3!fi1Wr t r.rniI ~~'fO;~f.l4il ~ <l<t ~'il1<l"'dla/i 'j;f lilT<! f.tlflft 'lit ""l:~, 'J'i'l'!: t:('!lf<f~ ~ ;;meR 'f'I'l aIR ~«Il'I'I ~ft\;lIT~r 11: ry,"; ''IT'f it~ if 'l1'l4il .."'l ft\;lIT "ITl(lTT;
(,, ,.
..2 T.H..B...O.",.ZB..",..B....OP..I.N.DI.." ..' B.X_TR_"_OR_D_IN_"_Ry..._ .....~PART II 1Ie,311M •
(11) ~~m" ft '{\'lI1ll\'! 1ft~ It~~l1" 'fl' _~iijl~1jiI~~ 1't'!l1" !l!•,l( jq., !l! 'f""t~~ 'Iti~ lI!lI ~\ii( I.. lI'lI' ft~ 1't'!'f(! 'fl' m II,. \If trol1" ~t:
('f) '1fIIq~ i; 1't'!l1" ~~" t ftIm 1!mvr{I'ti'Tl1" l1lnl; lII'T~ '~iijIM I!Rrh' ft ~ flIrlrr IT'IT t:
(1') '''l(~'' ~ ~elllt., ft f!l!l!\ ~'"'~'N" al1Ii'tlI' {I'ti'Tll"!l! ttl1lt 'l'! mr lllll!l! f9rq;:m'rrr firi1rT 1T1IT '1'1~(Ot l(tAnftcq 1fT +qlttfttt il.~IfCO, 1l'ft l(*",C(ilC(fi "qlti(ul. ~Gql" t. 1IiTt t .
~t ('1\') "'IlI~"" ~It., ft "l(~"lIIT 'l""'1!Mw t:
«<) "lll"I. 1lI ..IlI'~ iff l!rc ~ Jtmm lIT ll'mf1'~ t~ 'l'I'If h~'liIfi\;f/I (I'"Il1" •.,1-", orro l'li1l; lil1\f t:
('f) 'lftlmf fll'lIT'If \if\lT1W ~ ~ IIl'IIttt' fIt'liflf 1m Ilfllll\'orIf iff Il'm 3 lIT 3111 Ili mitt ~ ~ II illIll'lr (miff, ,~"'IIlI411 Ml' 'Ilf lI'ftlIT ~ Iflm' ft~_~~ ~h 'lIT ('I) '"I\_~" t.. lm" ~l1" lft'l: 'IIt~ ,~"Ifll*, ~h 'lIT fWt il"'l' _~"'lllIofli~ i/lll\_.." IlM1f t:
(SI) '1'Ifm lIlT "lI:h.", ~!tlilft {l'ti'T1ff lIlT ,11:_.."~h t~~l1" lI'l'I' ~ ll\1r1: flIftq ~ il"R.. flIrlrr '!lIT:
(!') '1lI'ffirIII ,~""flllll ~, ~ f!l!l!\ ~'"'~,,~. ~ ''''Il1''~~ rot It {l'ti'TW ' 1l""'i lIlT "''l'ifll~ .. I'" lft'l: ."1"II:" "" "RIh t:
('5) 'oRI,~ 1!111" ~ 'IIi'tt m "Rlh t a1t f!l!l!\ 1ft 1l""'i~ (l<il~ lI'l'I' ~ m' -. m It m I'IITtiT t, ' (1') "i!"f.fIt tml1"" ft 'IIi'tt tml1" m "Rlh t M1""!'f(! It ""Ill"" "1\.«",, llIT 'I'tiT III"TTit It m~~ f9rq; "il(!"'l(""I~ 'I'lTlII 1m .M.fIt~ f9rq; .N jq., ~ 1/l'nr.-.rTllT '!lIT, t:
(t) .1l1II", ~ f!l!l!\ ~...~"q. ~~~mltlllllrotm~ '~""'llIIla llmf~ ~mlli~ ..~.4\lIIm"~.If11" '!tIimriiMlrt:
("I) ~~ it ~,",qll~" at;I1tIr~lIIT~ _..I'm m ~h t~~'''I\f{I~ ,,1\_ .." ~~qt 1llrlIT amrr t~{I'ti'T~ 1ft lII'T~mr~ 'li'r ~'"' ~II ~.. f/~~ ~:
(If) "lliItflq.cft 1\.4'1111" it ttrt ii'!.,.,Il"1[ ro "ftltti' t lI!'r I!ftor~ lI"iI'fOIl('I' iff .flI~jI'i ki~flIlIITmtr~t:
('I) 'air".. "" lI"iI'fOIl('I' ltlfl:olfll m"* ~ 01\".."" lI"iI'fOIl('I' lIflI~.'1 ~ liIiI'OIl..~ t oil «.".,..('t .""""~ .~ f!\,,f) "~'I~' 'I~ tloli'N lI'"fTOf'( llll1" Of'll llIT W1'ti'II'(lOf ltl1....ttt lIlT aromvrm It mTlf~ t : , ~) 'MI,,""~~ m~ llRi'h ~ om: llIIIlIT llfiltIr.m-' (<<IIl1" Ilf\1mr t fqlI {I'ti'T'f(! lIlT lIiiI' II"""'" If(! to " ~ ~ ~ ~ ~ • • " ---"" 4 THE GAZETTE OF INDIA; EXTRAORDINARY [PART II-Soc. 3{il] ('f'f) '~""~Il~"~ it 'l:'f qf1:Il,f'i1a 'IT aq"l'I'",!f"GJ{T qf1:Il,f'i1a <fit qt air<: ~,..i(~'u,Il'" -tlftt if~ f.\iI;~m ~l'l" ..., ~l'l~a ~,;;it ~..,F.lrua ~lU..ctt~ ,-
(i) f.l;lft~ lI'itor<J i\; FoIl( \\«l",,, f.\iI; "lR~ 'TW I{'j; I"I'\Tr i\; "" if f.l;lft~ ".. ,~" <fit ~...(~ .. , 'liT m ..m ~ air<: _;mit <fit f.l~ 'liT~ ..ctt ~ ;;it 'lil ~ 'li«fi ~ fi\; f.l;lft ~""~"~,, "..,~" if fi\>'l 00 ~ air<: fi\>'l wnor'l'f if "'3'ffiJ fi\;lf[ "IT1('IT; air<:
(ii) ~ f.h,uf1:a !t'IT$m~ m:l'~, f.l(I<lct air<: 'f\jdl",(" f.\1J1f <flIT~. i\; FoIl( fllfilR~ :
(~ ~""~"~,, "qia('" it 'li\t _.rrmrn ~ f.l;lft om "'1!~~ • ",<il'"~ it 'l:'f .tit4>(·' ;rn>jf <fit 'li\t ~",F.q", 1liIl'lf(~ ~~ 'li«ff ~ 'TW "qja(" if %>.n~t>t'\I<il~, *,,"'(0' 'IT '1:''''('' 'lit~~ RT\\\'I lftz 'lJllT "'li<Ror, ~""q,,, fil;"",tl",(., air<: ~."~,,~,, I"I'\Tr ~"'''l 'fll"'(1 ~;
('r'l) .~""~"~,, ~",q,,' it '1'",,,,,4 fuM ~'\ltt,,"'4( ('k~'~'~~ .rrmrn ~ 'TW~ if qfiIio ro 'liT~~""~Il~" "",~;;j'f if _ ~ air<: ~l'l",," 'fTll" i\; "" if fi\;lf[ "ffilT ~ aft<:;mit i\;
<'lim" i\;~ f.lRl.., ~""~" ~" ~m 'liT >It~ fi\;lf[ "ffilT ~ '
(2) if 'Ifi<: air<: "" ;;it \\llif lr!!"'f~, qf1:Il,f'i1a '!ff ~ ~ artilf.t>tlJ if qf{Il,f'i1a ~ 'liT i!i'l'If:~ ar4~ ;;it """" a<ffi "fil~4Il if~ ,
3. ai<fit4~,.. ( i\; 'ITE'l'r it lI:'f'TT i\; "fil.""'" <fit -tlftt.-f.l;lft ai<fit4 ~'f(,- (~ 'liT'l"I'f air<: .,''''''' '1:''''('' "GJ{T fi\;lf[ "IT1('IT;;it f.l;lft \\~~I~4il ~l'lil.. ~ 1lmf "" it~ 1l<Oi if "qiaf1:a ~it ••fil<l t
(li) f.l;lft ffi'l'~ '1:''''('' 'liT <'iTq 'litorr f.rnit f.l;lft <it Ri"f f1l>lI .,ta1<1l4 "" it li;ifihr~ 'liT ~ ..m ijl( f.l;lft " ..ilfl:"" 'liT~ fi\;lf[ ;;mrr &;I{'j;~ (F.m~~ 'lW "ffilT ~ 'liT~ ai<fit4 ~",'f( i\; 'l"I'f i\; FoIl( air<:~~ 'Ii!~ (F.m~ ;§;;IT~ ""'" ~ ~ .'"'" if '10 t1 ("<011'1., ..... ~ l:{ f'Ctilrr \ifTCIT ~ I ('I) f.l;lft ai<fit4 ~'f( i\; 'l"I'f air<: .1<4;Q.. i\; FoIl( &~ ¥4 'Ii!~ ;;it ai<fit4~ ,..( 'l"I'f air<:
"'."''''''''q...... 'hi'iI "', "'" ai<fit4~ 'f'lf.f i\; FoIl(~~ '
4. ai<fit4 ~..,.. ( 'Ii! 'l"I'f.-{1) ~,,,('lidr f.l;lft \\~~,~4il "l'l~.. 'R ~..,..( ..ctt llll'f 'IT lI:'f'TT <fit f.l;lft 'f"IlR 'R ~,.. ( ..m llll'f 1l'll«r. ~,.. (",ar i\; ~"N4( 'IT .'<fl~4' if I{'j;~~~ 'IT'):
Wrr'
(2)~~ I{'j;~ qR'II" "'I\<l 'litorr I
(3)~ 'liT ~"!~4< 'IT .,<flh( ... &~ qR'II" ~~ <fit ~, <fit air<: ~, ..( u;~..Ri~i\fnu«:",,, 'Ii! ~..cttijl( I{'j; ai<fit4 ~.., .. ( if "qiaRa 'li(~ ,
(4) <rrtl<ir air<: llll'f t.ft 'lI1:9:.... " ,.. "', tl ~ ... ai<fit4 ~.. ref( 'Ii! 'IT'T 'l'!T'IT;;n1( ,
(5) 1ffit~, .. ( 'IT ~", .. id( ~,.. ( 'IT~~ >It \\~~1~4il "R1il.. ~ 'IT'l: fi\;lf[~ if.\;lrr ,
(6) ~..,F.lrua lJ:'RT >It ~",'f( 'liT 'IT'T Wif.\;tft,- (~ ~",,,(,,,ari\; ffi'l' <fit~ 1l1lT"T.'l'f;
(<0) "1"'" 'Il,·ft",,·,~ iii ffi'l' <fit 1l1lT"T 'l'f;;it ~'f<'li<ff~ "IrtT ai<fit4 ~"!'" lI'IT'T '!'I <fit "fll. 'U',d: 'Ii! fli''''''' m~; , ('I) ~"" '" i\; m ~'"Rd WGm 1l1lT"T '!'I r.r.....r~ "1" '{<I • Il ,·ft'"(., "'fil '"IR<iI i\; ffi'l' 4il1l1lT"T 'i'i't <fit <Ofil." ,.]a: 'Ii! • "'] q..~ i\; FoIl( fi\>'IT "ffilT &;
• • 5 • ('If) "1"'<1 .",oftl'(·' .,fill'lf1:<il air<~ um~ 1I1!T"f 'l"I .r;l<i~" "'l:'lt ('!f\"i) air< f.r;m a<!'lTor~ "l'i'f m il> fi'Iv; f.l;>rr iiffiIT ~ f.l;~ €til'llf( 1I1!T"f 'l"I1iT "fil f.l,," >lit llTU 38 il> 'IdA .r;hi~" "'" F.m '!'IT t (•.)aif"",~" 1I1!T"f 'l'l" .,ft><~ 1i!.11i!" 't""'« 1I1!T"f 'l"I air< aif'1",~" 1I1!T"f 'l"I .,ft><~ 0l>i1?1i1-..l..1"''' f1:""'e" f.r;m a<!'lTor 1I1!T"f 'l"I ,~,;~., lI:'ft il> "'""" 'f( f.l;>rr iiffiIT ~ I
(7) <lI"ifilfil1lF"f 1I1!T"f 'l"I~m il> fi'Iv;.- (<j;) 'l"Tt>f.~ lifitl~f1:. "lGT f'rnil> oi<r<f<f 111."""1."'1'...." air< .~,;~., ~ ~ 'lit tm"~ "l'J: >lit ~;
(lI)~ \If.l.""~ >lit """""~<flit "lGT air< €till~<(U) 'lit """ '!iUl\ ~ ;
('l) ~;m. tm"~~ 1iT a<!'lTor lPl>r~ lm = (tI~,,~.<ft) ~ 'IT ~..~f1:."
3l"iI<1T'1"~ tm" .w >lit 't1Wr~ •.mtI ~ f.l; "." ,••df tm"~ 'l:'f tm"~ 'lit "l'J: >lit~ il> .,.~~n-':f.t-~-=r.T~~"fI"I::'TT ('I) €till..<air< tm"~ 'lit m "lGT ~ ~ "(VT iil11('TT 'IT '3'1"1iT~ ..... it~ ill<'I'T il> ..... ~ .m<ur f.l;>rr~ I
5.~ €til ,.. ( 1iT "",,.".-{1)~ €til'llf( il>"",,.,, 'lit~ lifit I.. ( ~ 1'f'l'l"~ fi'Iv; ~OT~ ~ 'IWI'J it wr ~~~If.l;j;l "filii" ~ 'it( ~OT ,ft.,," >lit ';'1'1'" m ~ 'IWI'J it m ~ 1iT a<!'lTor 'l'(il;
'!:U f.l;>rr~, """"'1'.1 f.l ...F.I~. >lit "l'i'f~- (<j;) 'lft~~ 1iT 1'f'l'l" ."'1,41~ 1iT a<!'lTor om- Q'(f.l;>rr '!'IT 'IT afr< it ~~~If.l;j;l "'3I"fil~iI".... 'lft til.." I" ;it~ fi'Iv; ""I" i• ( air< 1lftt lif<tl.. ,1 'f( "l'J:~ , ('I)~ tm" "'"~ €till.. ( 1iT 1'f'l'l" f.l;>rr '!'IT 'IT I
(2) .f<1lifitl.. ( 1iT "",,.,, mil> fi'Iv; ~~'l?<,f.l;j;l "filii" 'f( €til ,"( afr< ."""'1(~ lifitl.,( 'f( ..\ifit.....,..rT( 'litM"df ..... it """fil. f.l;>rr~ I
(3) "",,,i.( lifitl.,( 1iT "",,.,, m ~ fi'Iv; ~~~If.l;j;l "filii" 'f( lif<tTW 'lit~ ..... it """fil.
f.l;>rr;;mrrr ,
(4) <lI"I.fillif<tTW 1iT """," m~ fi'Iv; ",<fil.. tm"~ air< <flit "",."df tm"~ fum . ,~'l.'fq<ff~ 'f( "l'J: f.l;>rr '!'IT 'IT 1iT ,,'"I," <'lTlT f.l;>rr 'l'IT 'IT I
6. ~€till"( ''lfl'"'' .-{1)mum €til ," f1:••"""" ~1'f'l'l"~umf.l;>rr'l'lT'IT,~ m ~ .. ,,';('1" I~ fi'Iv; filffi"ll <m dlJtq 'liUlT~, 1iT a<!'lTor "1~'<1 .",.ft"(,, .,fil ..,f1:<iI ~ m ~ •" I'"" ;j;l"fil." IfQI • I 1iT "",,.,, m ~ fi'Iv; f.l;>rr iil11('TT I
(2) "'.!iI'd .",·R,,(·, .,fil..,f1:til ~ m ~ ."""" 1iT a<!'lTor at".,.,ail 'lit;;rrtt ~ €til 1..( 51'11°14';4 ~ dlttlSl'tIFai (11 <tiT f!l:<41Q'1~~~ fcprr 'Ul{m I
(3) "'.!iI'd ." ,.Rl'(" .,fil..,f1:til um~ lJ{ .",,",, .~.~., "'l:'lt >lit "l'i'f 1fT~m il> fi'Iv; >lit ~ f.l; ..,. "1~'d .",·R,,(·, .,fill'lf1:til1iT ."I'"'' tilfil",,,, ~ 'IT _ "filf.l,," >lit llTU 38 ~'IdA.f<1'~" ;gF.m'l'lT~ I
(4) aRihr i1f<lll51 { oFt ~ftaqlr:ctal 0f'T flt4I"FI m 'fl'1J1f d~lrfl ~ ~Il;t( Sjtilolq"i ~w~ 'I"lt ."I.Rl'(" "fill'ltl ~ m ~ '"""" ~ 'IWI'J it m um~~~ ."""" 'lit 1"'" "" 'l'(il; air< 'lft Iil",,,,, ;fI"~~ ili'\{ ." "'"" Iil",,,,,;ft,,~ t mlif<tTW 1iT ,,"''' " ~ f.l;>rr <m('TT I THB OAlB'I"I'B OF INDIA: EXTRAORDINARY [PART 11 1lC.3111J, (5 ,Mi\1r ~l"'~ 1l'f11lfll't1' 'In' Iflllm{mll'l: ~ 'I'I~ i\! lI"Il'!~~~~ I
(8) oi1 ,v,4'il1li't '!'fl'rr IllI' mol1"l'l' fll1r;r 7it 'IlTIf'Ili't llr~~~ I
(1) 1!f\' oi1I'''i~ l/it Mi1 ,"illT 'tIf!~ it iIil1 tiil' olil~(l'U( 1I:"i't lilt QIt<f~ qy t I
7. of1Iitcr , ••1111\( lI'T'AI 'id~ llmI oIt II'lIlt1! (I'<Ii'" t"It it~ flIRi.., ..,4",,, ICf't~ '"'1. t'/lt, ~~ I\l1lT< tll'm: '""'" If< flr tll '"" q.q.q.2 ~ q...,Itft q« 100-4ll flIFi\~ t illrolI1'{ '"'"~ .1~~ III oflI cft-..n q••1 Iirol'l"I:~ lim' ([2048, 4098 ~l:~1.5 ~ alto: l!oflI1r~ cn~"ht" 117, tftQli1q« ~~ 'Iii(IGjq'l "frRft"qINib'T 'lI<q...n 8280 tlft1ft~ It"'l!!CI\",1 1ft·288, 1ft·384, 'IT 1ft·821 ~~~ 1, CAdES ~j(q ..11t 8128, 2, PAdES with CAdES ll'l'I~m.r *'"' ."q",of\ 3181* flI~ff.. t • I I \
8q.... qi11(1l1 of1Iitcr (1'<1,11\( ~ 1!1\'lI'f it~~ do.,I'I" liltt~-q .... qi1 q" ol1Ilt'lr~,-
(111) 'IIIlflorm llr '!'r1ll1f it ll""I!tn,''''''~ "rlq<I'T oi'I ,~""fll~ IIRl".~ o«llO!1l:
"'"'" ""'"~ ••1.". m '"~ t :
(W) '"'Ill~ oiT<f m 'III m'rlr "I't li'I' fil"I'~ ,,,Ihft<r~ it m ~, q>Ii' !"ft (farlI' Imtl:~ qT \lfIlIT tl lIlT~ It""qi1q" of1Iitcr ,mil\(~~ !"ft (~ '""" !"ft qT "rllIT t> 'III~ q.... qi1q" ol1Ilt'lr~ lIlT "N,." m ~ f'rq q>Ii' q..~ft'i1 lIlT '~i1i(, -.mt:
(71) ~m tlT~ IllI' fll;Ift q'l\1 q14 q"~ (I'<iTIl\(~ ll""I~ "til,." llr!'rlt~:
('£I') ""'fll-'",,~lT'il' ~ q'l\tq14q" ... 1<1<0, lIlT~ lI'T'AI '~Ifi,fll~ ~".. 'III' q'!\i qi1q"~ , ..,II\( 'IIIll""I~ ,,"',." it~ ll""Illr !'rlt~:
<-> ~ q.... qi1qill ..,"M 'IIIllfllo'"''''~mr q>Ii'~~ ...... ,011 tw ~ ~ it al.~ t 'Ii't tw q••~ft'i1, -''''ifll-'",,~lT'f, q....qi1qll ...18<0,~ '"""!"ft q..~ft'i1 -'~h"lfli. tnn't
9. q....q.1(IlI of1Iitcr , .."" 'IIIll""I ,-(1) illrlft ,,,,,,,fll~ llfil" .. 'IT~ lilt illrlft II"'! ~'l'( , .. ,01' m lI"Il'!"(+OT6I'mf~m tRIIt, q.... q.q" ol1Ilt'lr (I'<iTIl\( ll1":,~~, !"ft~~ tftIllW':~"'" \'tAftf-1~ I
(2) m ll1": llr ll""Illr!'rlt, , .. '01'''',(\ ",..._..,~ t"It~ ,",",- 'WT II=~ J OJ 7 e09 lMiijl-q~ m'if ~ m' 09~~ \tlfflJltfif if\t t· (if;) ~ifft'~, \1;lffi«¥1t(jf +41t1(ul @f ~~qij\),~~~ lllt;itl'(~ ~ntri.m milT ifIT~ ifiW ;
(W) '~ifl~4~ ~t QllffiQlilt(\iI "ql(i(uN tif~~~ftlfl'JNF{~~~M';
('iT') ~~~ &14- q.. 1ft \l i%«( if t~T~ if1r 'l(~~~~ iff~~'I tqT tritOj , lj iIIT~~ it ':tv iR;(i ~;
('Ef) .~~~~lfft~~if\T~~~m m-m~m"f~'tm;
(., q \\~'liId ~ flt;~~r?lfi''''(flI\Ji~ "firm~~, 1l\l ~P.hli4<1: ~ ~ +q1t1 (III ifl~~&! fifiq'pm t I
(3) «if\1«¥(U;W~(Wi~·~itnt~liiF\ ~~, ~~'WM_44( ~UjfMW~~~-=
(iff)~~M', ~ff'~~\'\I~~~~~~ff~ lf11r fft1i&ff,~~ 'f.iil'l'~ ;
(W) ~&f\ ~ ~ ~~lit~~~fif ~~ ~~~~~ twx~~ tflflr fJ.W~ ifIT~~ f!i1t mrm~ it lfnlJt~ itlWf :
(;f)~~~,= (I)~~~m ~m~ t ~ ij(itlmt~mft~ t. ;
(II) t~'iili~" ~~~~~~'tfm~~~3N~~ ~m'lf1Y~;
(III) ~m",~wft If(~~~~~,-= (tW) ~mWf~~·Q'(illfT~lT;
(ur)~~~ m m~,f'f IfIT "ti\ftl l!\(9j~ if\T~ 'll\t ~ ~ \lfff{iff ~ q~«Ht(1jcft mtfif~~ 'f(~ ~~ tp.ff~.qhi ,Uj' trm ;
('11')~ if\ ~iRr'~lf1(wmwr~ lim'~3{f~0lW,~~ if~ t. mT~ ~~~~~;
(1f)~ I . tfi)' ltWf!~~~~ tl'<laflt< ( ~ ~ Itt, lfiT ~~~ ifil¢ifl(iJf~ tm''ft qftl1ffff 'fff 64 \W ~(lJf tffhn'ff sifT ~:'ffl"~ twf~~~~~~~~ i ( .) 1¥f ~~"VUi, ~~ - 1, ~ .~~~~ 509 1jflffUfllilf 'B'J:ffi'~'iff
(4)~~I~~~~itfr~ttiftl\("~~~~~m'ff~~1
(5)~ tm'ij\ 1fT «i1 ifj I(i ( 'ijm'f( 1fi~~~'~i~ if\ ~rf~~~'«f it~~ \1ff~ I
(8)~~~~Ift'( ""' 'ffM' (r~s= (1ft) tm~ ltlt iuft ",(IIi~i f\c(f iff~~ lt1If11Ttflf, ~~~w~~~'fi~ \I ¥t lliltf'Jf fr ~~lfffattH'fiT lttttt'M'~ t :
(G') ~'urn ~~: l1'j~mur~,~~~ \lmufTq;a;vr \11ftr;llf'\~1 ~~ ~ "ttl iOJ qi$(t ~ Sl t\$i +(rft1 ilfit\t 1fif~~ ifi~ \f\l-f,ffar~ "fit ~ :
(iT) ~ Wi1i uRi41(uj~~ '. lJr lTfit',tlP&rflIf I ~m ~q~~~fW{~~'nr . rii • I. 1/1 t1 II ,n,l't"r:rr....... Lifmu .
38 ~~~ iff( ~1ff 'f1fi t ;
8 THE GAZETTlJ OF INDIA: EXTRAORDINARY [PART II-SEC. 3(0] : ' (U) ~'1(W1I~'1 $l'1l oIY';l SlI~fd s?iillfil(Wl f\f41~H $lfllolY';l am: ai1'1~I~"1 SI'11 oIY';l SlI~ at1fi\i4IaifOfiT~ SI'1l oIY::' SlfilijijO<ol~~~I:f<~~~ I
(7)~~~<ffl~'1 ~(Wl atefit<f~ <tiT~~~~~k1R1~Q ~~~- (~ ~ ~~~ ~fijICl\ll I:f<~~m ~~, ~ atIU1r~ ~m ~ ~~~I~lfi~~~it~~;
(~ ~~~ RN~ <fiT~~ ~lfPl.1 ~qr~ (i!l~~t(~cft) ~ ~ 1.JT ~~n{{~'1 ~ ~~~"~<fit~CllT~~~iJi~~'UQ,m, ~ ~~efit~CfiT~rit:fcfi~!t~ldqdT~RN"~~~~~cfit~;
('aT) ~~afR~~itm:Tlf~~~~m~~~~~~~";~IR:d~ ~l
10. ~i;ffi""flt((Wl ~~ <fiT ~H'lHq'1.-(1) ~q:ijt(Ji .(WI ~~ ~~ ~ ~~ ~ fctft:tSilrQlfi<OI.~fctfilfll~Cfl<OI 31h: '5flf~ fctfflJit r4Cfl(OI ~~~~;~ am: t(i;ffi~'ilt{'1 ~ ~mef{ it~ (f~~ lim \'il'TlTm"~ ~ef{ ~fll~Cfi<"Q"j". m ~'i1"4Cfl<ol am: SlJiloIQ'J4 ~fll~if\<OI ~~ nlPlRISG ~lT'4Tt. <fiT 31'jql~1 ~lT'4TWI; ,
(2)~ fclft) fI' ~Cfl(Vf <it ~kiR1 f?st d ~ lfT.t'tflf ~~ foRT~- ~ ~ fctfi)JiI ..4Cfi<OI iJi~~ <fiT lft~~~ CfiT ~'11f~Cfi(1 ~ <tiT~~ ~;
(~ ~'1"'I~ifl(Wl1 ~JllIT'f ~ <tiT~~~~~~~ ~"'l~Cfi(1 ~ <iT~~ ~;
(on) ~~ ~~ 509 SI+ilolQ7j ~ afdl1ftg ffiCfi ~. ~~~~ lf ~mr~t.~~.~&f{~CfiT~<11f.lCfi(WlI!:Jl~~am:~~~ ;'11~<.fi{'1t~Jl'S~<fiT~~<fiT~(4Iq'1~~~~~,~;
(3) m f~tfih'lr4ifl<OI <tit~~~~ f.lkiR1~€1 CfiT~~~- (Cfi) ~~~ ~ ~'11Pl2fi(WlI'4Jl1?Jii fctftf ~ aum I:f<~~ ijcq' ~ ~o?1PlCfl{1I~\il CfiT ~~~;
(If) ~ef{~~~m~~-- -.
(I) , ~~ ~~qlQ1~~qf ljl~1 ~'ilq~uil c,l) ~I'J- ~~I \JIlql a, q~ ~C«''i.,~qi ~I'f(;i!l«~ ~"''''))4 fumr atl~~;:[t'il14( (~) <tIT ~qj"{~ Cfi\ W~~ rn' if~ ID"U ~~qia<ofl it f.llSqlfad~; .-
(ii) ~ ijcq' ~ ~ f.l f4tSC! 'S I~Jl~~ <fiT~ crot gt7:~~~ 'S I\ti~f(! <fit ij110111 ~;
(iii) ~~~~~ "41 ~Jl~ Wlf~~ ij1lfVH1 't I~Jlf(! ~ <fit~~ I
(4) l(CR1lt'i It{Wf~~ it ~ fAt Rl d arm~ Sf +i I01 q?t CN f.llm 6lf: f4 f.l fctcsa mm ~ 3l'jm\ ~("4lqrtmr~ I
(5) "Sfftt~~ ~e41q'1 ~ ~ ~ ~~Cf{lftlCfl ~ 1R~~~ am:~~~ If{ ~~CfiT~~~t~(4Iq'1~'UQ,m I
(6) ~Jflrtld( Qffi&T<T CliT ijc4lql1~~~ '!i~~I~Cfl~ q'\ ~M'"{CN~~~ ~ctllql1 ~ '\.ifl1!,1IT I
(7) ftwfafH ~Psrr qrr Nc-l.ll Qi1 ~ i)}~~ m:J7.T t:ifq aftT~~ mrn~ 't:ff 'fr~ q~~H1~t1T~Wllfffitf~tlt~lq'1~~ I • • ['i'f1lT II~~ 3(i)] 9 "
11. 'Ql'ffiq~~~_~~~.-mff&l:q~~, ~ t(!ffl~Jfq(1 ~~~,m~mvf ~~fff{lm~t~~~~, ~~~t- ~ If'l''FfqI' - - " ~r«(tti~ 3275 f.'ll'1tf<lrlVAtI lfl"IilR~ ~mvr 0 ~~~~~;ft~~;r{tt, ~509\l+1,ulq'1~~m(Q:~~~t0 ~ ~~~ ttli?lffl 'ff~ I~~qTli 'lflT (fitffT~ iff ~) ar;:q' '1\',.,; ~1"·~ ~atfW~~1lr~ l{\1'(ll{l'ft{Of~'lfffiT~~ a ~tftt I\(tt~ m ~ Rrcc tttmtt\l l{tdt .. 1f( ffflfl~W ifr m i't rn ~~ fm1:~ 1flIT &tRtrr~ tm .. '~"l"': ~'-'lTO\'" ~~ ..~ Q ~~ l('ffi~ff~'(!f ~ ffIl' \(lffi~6l«(ij~ ~~~ wq ililllf,*,,~i'j" ~~ Q m 11\ t(lf~fttf1't(il· mt.m 'liT ~~iti~it~ ~'m~ tti1'~~~ $r((fFq4l\f~~ \if! (q"h«) 3986~tffi ttff'~ mlf Wff - ~rw{~~ ~~Hl ~3629 - .
~~~ ~164 all (t(ifl+ft 4648 ~ m~~ o;~t!\"1:(266 ~sn (if) ll\l 180·4 ~m:~ ~t;ft~~o;'«'.1 ~1,5~mlIf~25e &l'ffRf (~It\!qfV,~ lti), Q.'tf«~nr~~tq«ffit)·Wt14TIlf, ~ri;q9'ldl3741a 0 t.f'l f¥I\fi (1 t(ttmtf{~ (if ~~ 1, ~"'{'f \(Iffl ~lf't~.f 1.0(~ ffiT~M~ t) ~'1l~'fl*fT'A:il'~lfT hUp:/Iwww,w3.orgITR/2001/REC·)(.mI-c14n-20010316
2. ~fi'j r.,-etl\it tPt~ lJ;'i~(1' 1.1 (fttq rvNt 'fiT m lfl'W t) hUp:/Iwww,w3.org/2006/12./xml"014n11 ~(~lilt.{~«t -'), ~~.~'«1411'·'«t14tJ;'l, ~1(C(..wt 3741 ~~tff(if ~~' ~~ 1. tiftfflCfK1 tt'f'4l{¥i o;(ij 1,0 (~C\ffill'tft tt1f "tlfN~ t) http://www,w3,orgITRl2001/REC~ xml·o14n·20010315 2, ~fnffl~~' ~'f~l{H~' 1.1 (~'1~-4ff 'fiT~~ t) I ;~'~1.~'" -- 10 THE GAZETTE OF INDIA: EXTRAORDINARY [PART II-SEC. 3(i)] http://www.w3.org/2006/12/ xml-c14n 11 C(CffiC(fl C({1il-C(cffiC(flC({1~ NCffiC(fl C({111pt~ 1.0. ~3lft http://www.w3.orgffR/1999/REC-xslt-19991116 XPath - RFC 3653 ~&n:~ q(I~fQ;d 'qT q(I~fQ;d ~"lTW'qT~ - atm"~~ SjJlIOjq'l (~am:) ~.509 <ft3 ajJiflpfifll {l lWfGfi~~~~ ~¥ft C(~,..nf):~JI 311 (C(fl C( cfl<\i41C(fl-1 m<ur 1.5 ~CfiCf ~-1fI{C(fli) lft"-256, lft"-384, 'qTlft"-521 ~~&n:~ 1. QCffi QJI Q{1'ti~ <lI1 (Q'fI41 6283 alh XAdES
2. C(Cffi ~JI C({1'ti~ 311 (C('fI~ 6283 attt PAdES XAdES ~m'lJ ~'Rfcr~ $IT fcl; C(Cffi ((JI (({1 OOR ~ f4 f.'l1l6l all «(('fI41 3161 <Signature 10?> <Signed Info> <canonicalization Method!> <Signature Method/> «Reference' URI?> «Transforms»?
<Digest Value> </Reference>+ </Signed Info> <Signature Value> «Keylnfo> (Key Name) (Key Value) (Retrieval Method) «X509 Data> (X509 SKI) .1.
, ['WI 1I-W16 3(i)] (X509 SUbject Name) (X509 Certificate) (X509 CRL) (X509. Digest) </x509 Data» </Keyinfo>) «Object 10?»* </Si.gnature> --I I 11 I I ) I J I.
-- - - -- ---- -------------- - ----- ~ "?" !?Ff1IT~~~~CfitGma-r~; ..+..~ ~I Ofltl~~~~~~Qmrr~; 3ftT"."
~B1IT~~~~citGmmt:1
13.~ t{fd lei ~~ lfACfi.-~ ilIfll'F1 am:~ef{~ <fiT~ atefiR ~ffi"~ a1tt ij<"~ 14'1 ~ 00t~mr~ f.h11ft>'tf@a 1WR~fcf; fflCltiiJf ~ ,ft~~. 3NfQ: :-
(i) atefiR~ Sltll ol4';l ~ ~~ sn~lf7l4i)~~ mfR "Ilft ajJ<fl(4CfiI{llfT1fG~ fttIDa ;
(ii) oqmr~arr{~~~.509 Sltll ol4'l1 -;fTfit;
(iii) ~&R ~ Ifll ~(Wf ;
(iv) Sltllof)Cfi~ol -srrfaCfiIf{4)' (~) ~ ~ ~1'1(WfI~'1 SltlI OI4'l1 SlIff'4fij Sil<?1<flI(Wf (afld1lt«<fl) W '+J1<R~ fttIDa ;
(v) Sl'il OI4';l -srrfa<flIH;4l (~) ~.~~ffitroolIT1fG~~ I [qIT.~. 19/26/2015-~ MINISTRY OF COMMUNICATIONS AND INFORMATION TECHNOLOGY (Department of Electronics and Information Technology) NOTIFICATION New Delhi. the 25th August. 2015 G.S.R. 660(E).-ln exercise of the powers conferred by section 87 of the Information Technology Act, 2000 (21 of2000). the Central Government hereby makes the following rules, namely:- I. Short title and commencement- (I) These rules may be caJled the Digital Signature (End entity) Rules, 2015.
(2) They shall come into force on the date of their publication in the Official Gazette.
Definitions--( I)In these rules. unless the context otherwise requires.- (aJ "!\\;l" II........., tho In£onr...tion T""hnnlneY Act 2000(21 of2000);
(b) "canonicalisation", in relation to a xml digital signature, means the process of converting electronic record' that has more than one possible representation into a 'standard', 'normal', or 'canonical form' in which the variations 12 THE GAZETTB OF INDIA: EXTRAORDINARY [PART. Il~EC. 3(1)]
(c) in representation of electronic record shall be standardised by applying consistent rules, primarily as part of the xml digital signature creation and verification processes;
"counter signature" means a signature on 8 previous signature.in a series of signatures, £Iffixed after the verification the signature on electronic record and subsequent signatures on previous signatures. serially;
· " , ,
(d) "detached signature" means the signature that is stored Indep~ndent of electl'Onlc record being signed;
(e) "dlgestmethod element", in relation to a'xml digital signature, means the digest algorithm to be used for the:
original data object 01' transformed, Ifany 'xml transforms' exists;
(f) "digestvalue element" means the value of the digest;
(g) "end entity" means the subscriber or sy~tem on behalf of the subscriber in whose n8me the Electronic Signature Certificate is Issued;
(h) "end entity signature" means authentication of any electronic record by an end entity by means of a digital signature, electronic method or procedure in accordance with the Dl'ovislons ot'!lectll\l\!l ~ f\I' ~ A of'tho Aot; •
(i) "enveloped signature" means enveloping of the slghllture and the initial electronic record Into anothel' electronic record;
~ 0) "enveloping signature" means a signature over a electronic record that Is referenced and contained within the signature element;
(k) "initial electronic record", in the context of xml digital signature process, means canonlcallsed and transformed form of ign dlnfo;
(1) "kcylnfo element" means an element that enables key information to be packaged along with the signature element; .
(m) "long term signature" means a signature element that is made verifiable tbr 11 long term by implementing measures to enable the detection of unauthorised alterations of signature;
(n) "manifest element", In relation to a xml digital signature, means a structure to carry a list of reference elements processing model defined by the application;
(0) "object element" means an ,optional element of xml digital signature l which Is used for enveloplnn siltnature whAM th... dlltll obJoot bolns C1isnQd I:. inCiludc;d III Lilli! IUIll;
(p) "ocsp responder" means an online service that provides revocation status ofa digital signature certificate;
(q) "online certificate statu~ protocol" means an online certificate-revocation checking protocol that enables relying parties to determine the revocation status ofan Identified digital ignature certificate;
(r) "parall I signatures" means one or more Independent signature over the same electronic record in which the orderIng of the signatures Is not important;
"
(s)
(t)
(u)
(v)
(w) "reference element", in relation to a xml dIgital signature, means an element that carries a references to d~ua objects, an optional list of transform to be applied prior to digest (xml transforms), digestmethod and dlgestvalue value of referenced data objeots;
"slgnedlnfo", In relation to axml digital signature, mellns an element that contains a set of . information to be signed for creating an xml signature, where It shall contains references to the data object that Includes the' canonicallsatlon and sIgnature algorithm ; , "signature" means digital signature or xml digital signature;
"slgnaturevalue" mean$ an ~1~mAnt tnl't tho llotuAI vAlu. ottho dlshal oliuahlul, " , "slgnaturemethod h means an element that contains the algorithm used for signature generation and this algorithm Identlfles all cryptographic functions Involved In the signature generation; .
T [''IT'111-~ 3(1)] 13
(x) "signaturepropertlestl means an clement that provides a way to carry additional Information about the slanature, such as a time stamp or any other Information which are defined by application;
(y) "time stamp" means a notation that indicates the correct date and time ·ofan action and Identity of the person or device that sent or received the time stamp and is enforced using time stamp token;
f' I
(z)
(ltt)
(zb) "time stamp token" means a cryptographically secure confirmation generated by applying digital signature of a time !Itlmping service provider that inci~des the time when the confirmation was generated;
I'time stamping service provider II means a trusted entity authorised to generate time stamps;
tlxmltl means Extensible Markup Language that provides a standard methodology with formal syntax to IdentitY elements of Information, describe the structure of data nnd also to store data in an Independent manner, shall have the following propertles,- (I) with xml, content and presentation are separate;
(Ii) the structure of xml data In a particular context is described using either xml schema or a document type definition;
(iii) xml schema or a document type definition are stored separately from the xml document Itself and can ~ ua$d ~.......Qlid..h. Q 61 ......." ",.,,1 d"\;UIII"'lI~ lV. \;ulIlVIIIIUIlIi\;1,
(zc) "xml digital signature element" means an element thut defined by standard xml schema for capturing the result of a di~ital signature operation applied to arbitrary dati\ In xml tbmlat. sh.all satisfy the followins.- .
(I) xml digital signature element shall exist as a standalone document or envelop the data object that It signs;
(II) xml digital signature e.lement shall hl1ve signedInfo, signaturevalue, keyinfo, object and has Id attribute of type child elements In order in which they appear;
(zd) Uxml digital signature" means the digital ~ignature on xm! electronic record;
(ze) Ii"ml document" means a document with xmllogical and physical structure that Is used to carry data elements, composed of declarations, elements, comments, character references, and processing Instructions Bnd a physical structure composed of entities, starting with the root, or document entity;
(zf) "xml schema" means a set of pre-defined or user defined keywords and their attributes arranged In a structured manner, shall atlstY the followlng,~
(i) should be used for a particular purpose where as a schema describes the structure of an xm! docum nt Bnd provides specification of element names that Indicates which elements are allowe~ in an xml document, and in what combinations; and .
(II) should provide extended functionality such as data types, inheritance, and presentation rules and default values for attributes; .
~zgJ "xml transrorm" means an element tnat specIfY an optional ordered list of processIng steps applied to the data objects before It was digested where the transforms Include canonicaJizatlon, encoding or decoding, extensible.
style sheet language transformations, xpath flItering, and xml schema validation;
(zh) Uxml namesp8ce" means a uniform resource Identifier (uri) reference where the mechanisms described In the specification are used In xml documents as element types and attribute names and also to use various xml vocabularies without having nllme collision.
(2) Words and expressions used her In and not defined but defined In the Act shall have the meanings respectively assigned to them In the said Act.
3. Manner of authentication of Information by means of dlgltal.lgnature.-A digital signature shall,- (Il) be created and verified by cryptography which concerns with transforming electronic record Into seemingly unintelligible forms; .
(b) use Public Key Cryptography, which employs an algorithm using two different but mathematical related keys; one key (called the private key) for creating a digital signature and another key (called the public key) for verifYing a digital signature;
(~) use an hash function for creating and verifying a digital signature which required to make digital signature generation and verification efficient. .
4. Creation of dlaltal sllnature.-(l) The signatory shall, while signing an electronic record or any other Item of Information; first apply an huh ·functlon In the IIlanatol')l'lI hllrdwAra nr JlnftwlI"" 14 THE GAZETTE OF INDIA: EXTRAORDINARY
(2) The hash function shall produce a hash result.
(3) The signatory's hardware or software shall then transform the hash result into a digital signature using signatory's private key and signature algorithm.
(4) The contextual information like date and time, shall be then made part of the digital signature.
(5) The counter sign!itures or parallel signatures or both may also be applied to electronic record.
(6) The following information may also be a part of signature,-
(a) the signatory's public key signature certificate(s);
(b) the public key certificate(s) of the licensed Certifying Authorities which used to verify the authenticity of the digital signature certificate issued to the signatory;
(c) the self signed certificate generated by the Controller used to verifY the authenticity of the public key certificate of the licensed Certifying Authorities;
(d) the certificate revocation Iist(s) maintained by the licensed CertifYing Authorities, and the controller which is used to check whether the digital signature certificate has been revoked under section 38 the Act;
(e) online certificate status protocol responder certificates and online certificate status protocol responses that may be used In lieu or certiT1Cale revocation IlSl.
(7) To create long term valid digital signature,-
(a) a timestamp shall be applied initially to the signed data including the certificates and revocation information;
(b) ensure that initial time stamp shall cover all the data and signature(s);
(c) a nested time stamp option shall be used to ensure signature validity past the time stamping service provider's (tssp) key or algorithm expiry where the nesting oftime stamps implies that a subsequent time stamp shall be applied to the prior time stamp;
(d) signature(s) and time stamps may be embedded in the data itself or stored separately as standalone.
5. Verification of digital signature.-{ I)The verification of a digital signature shall be accomplished by computing a new hash result of the original electronic record by means of the hash function used to create a digital signature and by using the public key and the new hash result, the verifier shall check-
(a) if the digital signature was created using the corresponding private key and shaH be applicable for parallel and counter signatures applied on the electronic record, if present;
(b) the time when the digital signature was createq.
(2) To verify counter signature, the signature on electronic record and thereafter signature on previous signature serially ~11l1l1 lJe vel j£ie..J. .
(3) To verify parallel signature, signature on electronic record shall be verified independently.
(4) To verify long term signature, the initial timestamp and all subsequent time stamp applied on the each prior timestamp shall be verified.
6. Verification of Digital Signature Certificate.-{l) The self signed certificate generated by the Controller, which begins the trust chain for the public key infrastructure, shall be used to verify the authenticity of the public key certificate of the licensed CertifYing Authorities. .
(2) The public key certificate of the licensed Certifying Authorities shall be used to verify the authenticity of the digital signature certificate issued to the subscribers. -
(3) The certificate revocation list maintained by the licensed Certifying Authorities shall be checked to confirm whether the certificate of the licensed Certifying Authorities'is valid or whether it has been revoked under section 38 the Act.
(4) While verifying the validity of a digital signature the corresponding digital signature certific~te shall chain up through the public key certificate of the issuing Certifying Authority to the self signed certificate of the Controller and if any of the certificates in the trust chain is not trUsted the signature shall not be verified.
(5) The Digital Signature Certificate shall be verified with respect to time of signature created.
(6) The chain of certificates shall be verified in accordanc;:e with the standards specified in rule 7.
(7) If the certificate validity is less than one hour, the checking of revocation list shall not be reqUired.
('l t ['lWT Il-~ 3(i)] 15 ,
(b)
(c)
(d)
7. Digital signature standards.-The most important standards that shall be applicabl.e for different activities associated with digital signature functions are as under- Product Standards Cryptographic hash function SHA-2 as specified in FIPS 180-4 RSA Public Key Technology PKCS# I RSA Encryption Standard ([2048, 4096 bit]); Version 1.5 Encryption ~d digital signature PKCS#7,CMS Validation of Digital Signature Certificate RFC 5280 ECC curve NIST P-256, P-384, or P-521 Long term signature rormats I . CAdES RFC 5126,
2. PAdES with CAdES Time stamp token As specIfied RFC 3 I () I
8. Manner of authentication of information by means of xml digital signature.- A xml digital signature shall,
(a) be created and verified by cryptography which concerns with transforming electronic record into seemingly unintelligible forms;
use Public Key Cryptography, which employs an algorithm using two different but mathematical related keys, one key (called the private key) for creating a xml digital signature and another key (called the public key) for verifying a xml digital signature;
use an cryptographic hash function for creating and verifying a xml digital signature;
use canonicalization and xml transformation to create standard electronic record prior to creation and verification of xml digital signature;
(e) authenticate xml documents which contain data as references and corresponding hashes, which is affected by the use of hash algorithm,canonicalization, xml transformation and public key algorithm.
9. Creation ofxml digital signature.--(l) To sign an electronic record or any other item of information, the signatory shall first constructs reference elements; xml digital signature element, signedinfo, keyinfo and signaturevalue.
(2) For the purpose of reference element generation, the signing software shall-
(a) crea~e re~rt:II~:l) "'1""UYllL(.» yy,th '·.,f'.,....noo to tho 'tOft> of 'nf'nrm"tinn. yml transform element(s) (OPtional), digest algorithms and digest value;
(b) optionally apply xml transform(s) to each referenced object in a sequential order;
(c) apply the hash function in the signatory's hardware or software to each reference elements, store the hash result in the reference element;
(d) ensure that if the object element is created, it shall not have a manifest element;
(e) ensure that exclusive canonicalization "without comments" has been mandatorily specified in addition to any other transforms.
(3) For the purpose xml digital signature generation, the signing software shalJ-
(a) create signedinfo element with signaturemethod, canonicalisation method and reference(s);
(b) apply canonicalisation to signedinfo and calculate the hash value of canonicalised signedinfo using the hashing algorithms implied by the signaturemethod;
(c) ensure that,-
(i) the signatory has seen all the contents of the document before signing;
(ii) the .content~ display requirements, in the case of automated signing process, is not required;
(a) each resource shall be rendered on the screen;
16 [PART 11-5 , 3(1)]
(b) each referenced xml resource shl1l1 be rendered using xalt Dnd the xslt shalJ be the last transform don to render the resource on the screen;
(c) each non xOlI resource shall be rendered using mlmetypo ottrlbuto mentioned In tho obj ct;
(d) generato the'sl noM u.ln the slinuturo nlsorlthm ond Ih hn h. tho I notory' prlvnt key, and the public key pllI'om I r (If applicable) and porform bllse64 encoding of the iAnntu result fmd ulle It to form .lglll!tllrev81~le: I
(e) construct tho signature element that Includes slsnedlnfo, Items of Information, kcylnfo with )(509 eertitlcl\te element and slgnaturevalue llnd the x509 certlfreote element shall carry the signatory's )(509 pu~lic key certificate.
(4) The contextual information like dato llnd tillie, sh~1\ be then made part ofthc xml digital signature.
(5) The counter slgnotures or parallel signatures or both may ohm be applied to electronic record.
(6) The followln" Informntlon may also be a port ohlanature=- (1\) the pUblic key certlfleate(s) of the,lIcen ed CertifYing Authorities which UlIl~d to verifY the authenticity of , tho d1llltftlslgnDture cllrtlncate IS:iu~d to tho slanatol'j'; ,
(b) 111\1 '1lill r 311t11\il~ \;llrum:lue genertnoU by the Controller ulled to verifY the authenticity of the public key certlflcRte of the licensed Certlfylni Authorltlos;
(c) the certificate revocntlon 118t(s) malntalnud by the Ifconaud Certlfyln& Authorltle! ond Qontl'OlIur which Is used cheek whethor tho digital slgtiuture cortltlcnto hilS been revoked under soctlon 38 the Act;
(d) online certltlcfttc stotus protocol responder certlfleate and online certlflcftte status protocol responsell may be used In 1I0u of certltlcllte revocation list.
(7) To create long ter~ vnlld xml ~Igltal 19natur
(a) a timestamp shall be npplled Initially to the signed document, wheN the Initial time stamp IIhall cover all tho electronic record nnd slgnllture(s)j
(b) n nested time stamp pllon shall be used to onsure slgnftture validity pilat the time-at mplng service provider (tssp)'s koy or alSQrlthm ~xpil'j' whe.ro as "osUna of time stamp Implies that II subsequent time stnmp lIhall be applied to the prior tlmo stamp;
(c) alsn&ture(s) and ~Imo !Itamps may be ombeddad In tho data Itsclfor stoNd lIoplll'ltely IlII standalone.
10. Verine lion or ml dl Ital at natur. I) Tho verification (lfthe xml dl Itol 19nfttur ,hall be accompllshod by ignlltur vlllld!ltion. r furenc· validation 1l11d certificate validation and lin xOlI digital Illgnllture shall be trOllted valid only If Ign"tur~ vplldatlon. refuronce: validation Bnd certlfioate validation llJ)Qcltled below lIro complied with.
(2) To fteeompll~h lIigntlture validation=.
(ft) canonical form ofllianed!nfo llll produced durlna reforenco valldfttlon shall be used;
(b) canonical form of Illsnllturomethod using tho canonlcaUlAtion method shall be obtained;
, ,
(c) tho pUblic kay oonmlned In the sllOl\1Ory'5 xS09 certltlcftte fullt Is Included In the xml dlaltalalanlltul'O, tho cllnonlculialed form ofslanedlnfo slanaturovalue, ond cDnonlcallsled fOrm ohlanat"romothod shllli bo used to vorlt)' the slsnuturo.
(3) To aocampUsh refcronce vftlldDtlon~
(ft) cllnonlclllfso thll slitlodlnfa elemont based on the cllnonleollstltlon method In tho slgnedlntb shall be usedi
(b) far each reference In the llignedlnfa=- (I), If tnmllformatlonll were uppl1ed by the signatory, then the vorlfler loftw«re mllY lte-rot'eronce tho uniform resourco Identltler (uri) Bnd oxeouto transforms provided by the lIlgnAtory In the referenco olomont:
(II) Qompute dlgott ofreterenced Item ullng the dlscatmothod apecltlod In Ila reference elementj (1II) complU'O the Qomputed dlseat vAluo a8lJ!nst digostvilluo In the stgnedlnfo -:effreneo; If thero Is Any mismatch ~r validation fllla;
(4) The Dlalt"1 Slinllture Certificate Included In the xml dlQlttll aillnature shall be vorlf1cd In accordonce with tha prAvhllonll ap<t.lt1ed In rille Ch
(5) To veritY countur B1anftlurG, the IIlanllturo on eloctronlc record ftral lind alllnftturo on prevIous algnllluro Ihllll bQ vorlfted lIerlally.
[~ 1I ..."@l6 3(i)) 17 " .
(6) 1 0 verifY parallel signature, signature on electronic record shall be verified independently.
(7) To verify long term signature, the initial timestamp and all subsequent time stamp applied on the each prior timestamp shall be verified.
11. The xml digital signature standards.-The most important standards that shall be applicable for different activities associated with xml digital signature functions are as under- The Product Standard RFC 3275 with th following constraint p Manifest is not permitted inside Object, p Keylnfo containjng X509Certificate element is mandatory.
0 The Reference Processing shall use the Exclusive CanonicaliZ&tion(without comments) in addition to other transforms.
XML Digital Signature Standard 0 For XML resource. XSLT shall be the last transform done to enable the rendering of the document on screen.
0 For rendering ofdocument on the screen 0 Each referenced XML resource shal! be implemented using XSLT.
0 Each non XML resource shall be implemented using Mime TYrle attribute mentioned in the object.
- XML Namespace RrC 3936 Si nature ~)ding UTF-S RFC 3629 Signature Value Encoding I1asc64 RFC4648 Reference element Digest SHA256 FIPS 180-4 I- - -- --Signature Algorithm SHA256withRSA PKCS-I Version 1.5 -- 0 Exclusive (without comments), XML-EXC-CI4N, RFC 3741 '" Canonical XML Sigl'1ature block Canonicalization 1. Canonical XML 1.0 (omits comments) hrtp:llwww.w1.ore/TPJ:IOO IJIU:;C tunl o14n :l00 10' It;
2. Canonical XML J.l (omits comments) http://www.w3.org/2006/12/xml-cI4nli Exclusive (without comments), XML-EXC-CI4N, RFC 3741 Canonical XMl'
1. Canonical XML 1.0 (omits comments) http://www.w3.orgfrRl200 lIREC-xml· c14n~20010315 Transform Algorithms
2. Canonical XML 1.1 (omits comments) http://www.w3.org/20061l2/xml-c14nll XSLT-XSLTransforms (XSLT) Version 1.0. W3C http://www.w3.org/TRlI999IREC-xslt-1999111.6 XPath - RFC 3653 • Signature Type envt;loped or enveloping or detached - - Digital Signature Certificate (DER) X.S09 V.:l issued as per interoperability guidelines - I I .'
18 THE GAZETTE OF INDIA: EXTRAORDINARY [PART II-SEC. 3(i)] I Public Key Algorithms R A PKCS- I Version t.5 ECC curve NIST P-256, P-384, or P-521 Long Term Signature formats 1. XMLERS RFC 6283 and XAdES
2. XMLERS RFC 6283 and PAdES with XAdES Time Stamp Token As specified RFC 316 I in XML notation
12. The basic Syntax ofxntl digital signature and terms used in the rule shall be as follows, namely:- --- ---- < ignature IO?> <Signedlnfo> <CanonicalizationMethodl> <SignatureMethodl> «Reference URI?> (<Transforms>)?
<DigestMethod> <DigestValue> <lReference>+ </Signedlnfo> <SignatureValue> «Keylnfo> (KeyName) (KeyVaJue) (RetrieyaIMethod) (<X509Data> (X509SKJ) (XS09SubjectName) (XS09Certificate) (XS09CRL) (X509Digest) <I~509Data> ) <t~eyirlfo>) «Object tD?»* </Signature> L- .-,-- --J Where "?" denotes zero or one occurrence; "+" denotes one or more occurrences; and "." denotes zero or more occurrences;n [qrrr II-~ 3(i)] 19 J3. Digital Signature functions Standard.- The manner of digital signature creation and verification, in respect of signature profile and signature format, shall also conform to the following guidelines issued by Controller, namely:-
(i) Interoperability Guidelines for Digital Signature Certificates issued under Information Technology Act;
(ii) X.509 Certificate Policy for India PKI;
(iii) Signature profiles;
(iv) Online Certificate Status Protocol (OCSP) Service Guidelines for Certifying Authorities (CA);
(v) Time Stamping Services Guidelines for Certifying Authorities (CA).
[F. No. 19/26/20157CCA] TAPAN RAY, Addl. Secy.
~~, 25 311Tf'a", 2015 m.<fiT.~. 661(31').-~~,~ sn?i1fll4i'l~, 2000 (2000 <fiT 21) cfiT &m 16 ~ ~~mu 87 *f~ (2) *~ (s.) ID"U~~rreim <fiT 'SI1fTlT~~~~nJeti'l {~(.~ I ~l\tl~l) ~, 2004 <fiT * ~mwrm ~~ f.l4;t~~ ij frt1.nr~ t 3fVffiI: :--
1.(1}~ f.np:ff <fiT~ '1Tlf~ sn ~l fil4i'l (~~). ti'm&<f~, 2015 t: I (2}~~~~WfiT~RcfiT~~~~1
2.~S1'~lfil4i'l (~&IT~) f.t<nf, 2004 ~,-- (Cfi) ~2~, m (s.) ~~ 1f( f.lk'lRt~ij~~~,3T~ :-- "(s.) ~~ ~ 31ijSl~Cfij ~~ * lR, \JfT~~~~~ if * atm ~&R (affillr~) frt1.nr, 2015 ~ qfhil~d ~, <fiT Sfilf~r: ~ 3T~~ \JfT~~~ afRo ~~~I";
(\[) f.Pm 4 ~, m ("f) ~BlR 1f( f.lk'l~~d~~~, 3fVffiI::- "("f)~~m: (affinr~)~, 2015 ~ f.t<nf 7 ~ f.t1pf 12 ~~~ <fiT, ~ qcJi ~tfGr!ratm~~~,~afR~~~,31ijQI(1'1 Cfi':~lf'.lTt:; afR ['"1"OT. \T. 10/~G/~016~] ~ U<r, 3f1f(~ ~ : ~~ 'ifRQ. ~ ~. arnfUR1JT, mlf Il, ~ 3.~ (i) ~~~. m.<fiT.fit. 735(31'), . ~29~,2014ID"U~~~ ~I NOTIFICATION New Delhi, the 25th August, 2015 G.S.R. 661(E).-In exercise of the powers conferred by clause (e) of sub-section (2) of Section 87 read with Section 16 of the Information Technology Act, 2000 (21 of2oo0), the Central Government hereby makes the following rules to amend the Information Technology (Security Procedure) Rules, 2004.
I. (I) These rules may .be called the Information Technology (Security Procedure) Amendment Rules, 20 IS.
(2) They shall come into force on the date of their publication in the Official Gazette.
2. In the Infbrmation Technology (Security Procedure) Rules, 2004,-
(a) in rule 2, for clause (e), the following clause shall be substituted, namely:- "(e) words and expressions used in these rules and not defined but defined in the Act and the Digital SIgnature lhna entity) Rules, 2015 shall have the same meaning respectively assigned for them in the said Act and rules/';
20 THE GAZETTE OF INDIA: EXTRAORDINARY (PART II-SEC--1ill1 \ \
(b) in rule 4, for clause (I), the folio ving clause shall be substituted, namely:- "(f) that the standards referred to .in rule 7 or rule J2 of the Digital Signature (End entity) Rules, 2015 have been complied with, in so far-as they relate to the creation, storage and transmission of the digital signature; and".
[F. No. J9/26/20J5-CCA] TAPAN RAY, Add!. Secy.
Note: The principal rules were published in the Gazette of India, Extraordinary, Part If, and Section 3, Sub-section (i), vide notification number G.S.R. 735(E), dated the 29th October, 2004.
~-q7fT <rt~, 25 3Tl1~, 2015 m:'fiT:Ft. 662(or~ mcflR,~ S1h?lfl1.4l1 ?,j'~, 2000 (2QOO 'f.T 21) 4l1' ~;rr. 87 IDU ~~Tftt;<IT <fiT~m ~~ si1~lftl4l1 (S1iiI OOCfl,<:OI~) ~lf, 2000 Cf.T ,1fr'< ff~ihrrpF(:.r ~~ f.:ti>lr~l<iJd m"lf~~, ~:-- 1, (1) ~f.ftrqT'fiT~rn+r~ stlwfll4ll (S1JiJ-lOCfl(OI~) ~~~, 2015 ~ I
(2)~~~if~~R4l1'~B-~~1
2.~st1~"lftlcf\) (SiitI OOCfl(OI~) f.t<n:r, 2000 if,-- (Cfi) f.l<nr 6 #, m-:z-uft if, "lfRCfi" ~ftrf ~ mft1'.~ ~ 311'<:Q,m(' Slfc)f"Q4T ~ ~-lFf tIT"~.
~1«((t1(( 3itt CflCf ~<{otl{((ij~ 1fT-256, 1:ft·384 ~ tft-521 "~~W ~;
(~) f.t<n:r 7 ~~ 1R f.l+:o1R!f@d f.t1.r11~~,~ :-- "7.~~ 54 .. 101431 ~S1iiIOOCfl(OI ~'tlll1<li ID"'U "IT-')';nft-;ffi~ ~'':~~~ SlitlIJlq?l ~~.~ ~~ ~1fitcfiT dlfirFrr<rq' ~ ,~*1rf Wtf'ff;;:m ari-nr w:me:R Qlilolq~1 ~ ~ \iI"rtT aj d (CflI4CflI (j Jt"T1fGWti fitIDm ~~~ I" ;
(If) f.hn:f 23 if,--
(i) U (50) if "1"4"1(01" ~ ~ lf~ "f.fffi IDU \iflft~ ti(~lq'1 ~~fct; Rl~j(11 ~ ~.~3{ij':~ 1'fi1:1: \ifT((lT ;
(ii) m- (~) ~ lf~-:;nq: f.lk1R!~d ~ otr:~~~, 3f~ :- "(~)~ ID"<T 31'j*1fC<t ~~~~ mrrr~ SIIiI IJOCfi{OI~~atjq,~ ... ~ lf~ at~TGTdT ~ ij (<Irq '1~~ aim ~~ Slit I01 q?l \iIRf m ~ ~ at jSl ~CRf ~~ Rl~iif ~ tNT lfftcf*r~wu~~ WilIQ'1lflll'G(T<f;- Rl~iij'i ~~~ 3itt qRClJ.fi ~~~ B- Slit loA Cfi'<:0l~ fctcRur if mf4t;r fcF4T~ am \VfCflT f.lq~Cfi IDU 31 j'1l ~'1 ~~ ;" ;
('tf) f.Pnr 24 #, mr ("f) ~ ato#,n~wu ~il; ~ mtTtf1~(((1 (~) ~.509 SIIiI IJOCfi(OI ;ftftt~ 31 j*11 (n ~fi(G anr:f'l4' ret d~~ ;
(So) f.l<nr 25 ~, m- (ii) #, "~~, fcl;" ~~ ~ 11lfim( "~IDU "frtT~liTlR~lcti ffi"iif ~ ~'~ahr:~lrqd~~;
("f) f.P:m 31 #, \3qf.l<lii (1) #m- (ix) ~lf~ f.lk1~~d m-3kr:~~~;
n(x) f.f<i:(Cfi mu~~~ \iIRf~1 ~I'd' ~.509 S1itl olq?l <ftfcf 'fiT <Sl'jql~'" 1'11'111->1'# 3(i)] 2\ ,
(xi)~ UtI il!"t imaif~ lI'!'f~ 3!\>: 'ihfl~l1'ft ire 1Jr'Rofoi< f~4i<ff 'I'f "1""" ;
(xii)~ llrtI-mt 'll'f1'I a" 14" ql4<,~i\; firl:i<if 'I'f "1""" ;
(XiII)~ il:ftT;;rra "at4ittf ~""'H \I"I"q~ ale "<lir~i\;It1 1Jr'R*'> fltai<if" 'I'f "1q,,,,, ;
(iI)~4 it.
(<Ii)~ <j; itaq~ ,."~,,,T'!1f:I'IT'Ii anlR ;".- (I) "=gan"~ i\; 1'!tR q-( ·'~f<I",o.e" ~ -w ii!T1t'T;
(iI) "anir<of "r.1><,4e, miRlfto ilrtr\llWf~;;fT1\"~ 'liT~ f.l;m~;
(li)~ li it M~M "'l1f'lFf aIR flt>mr i\; ll't<f 'liT arrmr..l"TIl" ql1lfl:!'i'1 't.l"lIo1" q-( f.l",~~e ~ ''In(1IT, a!'If« :..
(I) "q~~," "I'M" 'I<:ftt am: f.lmt i\; 'l¥ ;lit~ lfu1; ;lit "",0,,, tr.l1\t fil';wr (lflt{I~") am: f.\1m; UtI 'lrtl'~"C4IQ" 1Jr'R*'> 1fl<:1<if ~ ....:r.m:~ ,";
(iI) ""~"''l:~ 1J:'I'I1" ;rqllflof ~ dl!ft<t :",-
(1) "ml'P'"~ i\; 1'!tR q-( ~mt<r.~W \ift1tlt ;
(2) "il1t«>t ,,11l'ff~6' m iRIfto~m rrslIr~ ij(]'i("~ <j;[;IM- ftlJr 'fT11,lTT I [q;;,~, 19/26/2015-1fTlfntJ lI'i'<! U'l', "l"lt~ ~ ;wr f.t>nr 'l!1ta ll;~, "",!lj{~, 'll1'I1I, '" 3, 3'I'fi (I) it aIf!l'l:~"r If, lIT,'liT,f.t, 789("1), m-thi 17 "'<i«, 2000 UtI~ f.1>1( 'It( it aIR _ atftttr ltmwr !t. lIT,'f;f.f.t. 783(31), ~25~, 2011 UtI ftlJr'PIT 'IT , NoTIFICATION New Deihl, the 25th AugU5tt 20 IS C.s.a. 662(E).-ln exercise of the powers conferred by sectioo 87 of the Information TechnolOgy Act, 2000 (210(2000). the Central Government hereby ma~ the (ollowing MIld further to amend the InformatiOn Technology (CenifYlng Authorities) Rules, 2000.
I. (I) These rules may be ~alled the Information Technology (Certifying Authorities) Amendment Rules, 21)15.
(2), They shalt come into (oree on the date of their publication in tht Official dtlZelle.
2. In the infonnation Technology (Ctrtlf'ylng Allthoritles) RLlles, 2000,-
(a) In rule 6, in the table. under thc heading "The Standard", fot the entries "DSA and RSA", the entries .. OSA, RSA and Curves NIST P-2S6, p.jll4, or' P·.s2'" shall tit subStitlJted;
(b) for mle 1, tht following Nle shall be 3ubstituted. hamely:- "1.0igitsl Signalu~ Certificate SlJIndsrd.-AII Digitsl Signature Certlficate3 and Certlfi~e Revocation List issued by the Certifying Authorities shall eonform to Inlcropcrabitiry duidelines for Digital Signature Certificates issued by Controller under the Infonnation Technology Aet."j ·(e) in role 23,-
(i) in clause (e), after the word .. Statement". the words "in accordance with the Identity Verification Guidelines issued by the Controlle.... shall be inserted;
HIE GAZETIE OF INDIA: EXTRAORDINARY
(ii) after clause(e), the following clause shall be inserted, namely:- "(ca) subsequent to initial approval of Certification Practice Statement by the Controller during tl'e application for a licence, all the changes in the subscriber identity verification method or guidelines employed for issuance of Digital Signature Certificate shall be in accordance with the Identity Verificatio:l Guidelines issued by the Controller and the changes shall be incorporated in the Certification Practic~ Statement periodically and shall be approved by the Comroller,";
(d) in rule 24. in clause (f) , the words, brackets and [etters "in accordance with the X.S09 Certificate Policy for India PKI(CP) issucd by the Controller" shall be inserted at the end;
(e) in rule 25, in clause (ii) , the words "in accordance with the Identity Verification Guidelines issued by the Comrnllcr" shall be inserted at the end;
(f) in rule 31, in sub-rule (I) , after clause (ix.), the following clauses shall be inserted namely: "(x.) compliance to relevant X.S09 Certificate Policy for India PKI issued by the Controller;
(xi) compliance to guidelines issued by the Controll.er for other services like Time Stamping and OCSP service;
(xii) compliance to Identity Verification Guideline.'l ic;'l""~ h), tho C ..._II"'r;
(xiii) compliance to "Digital Signature Certificates Interoperability Guidelines" issued by the Controller.";
(g) in SCHEDULE IV,-
(a) in Form A; under the sub-heading "Important Notice:",-
(i) for the word "filled" the word "signed" shall be substituted;
(ii) the words "Application form must be submitted in person." shall be omitted;
(b) in Fonn B,
(i) for Ihe entries under the sub-heading "Authentication of Identity and Proof of Residence", the following shall be substituted, namely:- ''The identity verification methods and proof of residence requirements shall be as per Certification Practice St~tement (CPS) of the CA and Identity Verification Guidelines issued by the Controller.";
(ii) under the sub-heading "Imponant Notice:",- (I) for the word "filled" the word "signed" shall be substituted;
(2) the words "Application fonn must be submitted in person." shall be omitted.
(J:' lroJo. 10000~01S-<:CA] TAPAN RAY, Add!. Secy.
Note. : The principal rules were published in the Gazette of India, Extraordinary, Part II, and Section 3, Sub-section (i), vide notification number G.S.R. 789(E), dated the 17th October, 2000 and last amended by notification No. G.S.R. 783(E), dated the 25th October 2011.
Printed by the Manager, Government of India Press, Ring Road, Mayapuri, New Delhi-I 10064 and Published by the Controller of Publications. Dclhi_IIOO-li4 .' ..