back to Policy Statements

Electronic Commerce Act - 1998

Overview | Contents

Part V -- Effect of Digital Signatures

21. Secure Electronic Record with Digital Signature. The portion of an electronic record that is signed with a digital signature shall be treated as a secure electronic record if the digital signature is a secure electronic signature by virtue of Section 13.

Source: Singapore Electronic Transactions Act §19.
Comments: This section acknowledges that an electronic record signed with a digital signature will be considered a secure electronic record.

22. Digital Signature as a Secure Electronic Signature. When any portion of an electronic record is signed with a digital signature, the digital signature shall be treated as a secure electronic signature with respect to such portion of the record, if:

(a) the digital signature was created during the operational period of a valid certificate and is verified by reference to the public key listed in such certificate; and
(b) the certificate is considered trustworthy, in that it is an accurate binding of a public key to a person's identity because the following requirements have been fulfilled:
(i) the certificate was issued by a certification authority operating in compliance with the rules made under this Act;
(ii) the certificate was issued by a certification authority outside India recognized for this purpose by the Controller pursuant to rules made under this Act;
(iii) the certificate was issued by a department or ministry of the Central Government, State Government or a statutory corporation of Central or State Government approved by Central Government to act as a certification authority on such conditions as the Controller may by rules impose or specify; or
(iv) the parties have expressly agreed between themselves (originator and addressee) to use digital signatures as a security procedure, and the digital signature was properly verified by reference to the originator’s public key.
Source: Singapore Electronic Transactions Act §20.

23. Unreliable Digital Signatures. Unless otherwise provided by a rule of law or contract, a person relying on a digitally signed electronic record assumes the risk that the digital signature is invalid as a signature or authentication of the signed electronic record, if reliance on the digital signature is not reasonable under the circumstances having regard to the following factors:

(a) facts which the person relying on the digitally signed electronic record knows or has notice of, including all facts listed in the certificate or incorporated in it by reference;
(b) the value or importance of the digitally signed record, if known;
(c) the course of dealing between the person relying on the digitally signed electronic record and the subscriber and any available indicia of reliability or unreliability apart from the digital signature; and
(d) usage of trade, particularly trade conducted by trustworthy systems or other electronic means.
Source: Singapore Electronic Transactions Act §22.

Comment: A person relying on the digital signatures assumes the risk that the signature is invalid in circumstances where there is a questionable digital signature. A questionable digital signature is one that cannot be verified because of several reasons such as, error by the signer or a faulty digital signature system. However, this section does not prohibit a person from relying on a digital signature that cannot be verified. He may do so at his own risk.