PKI & Digital Signature for KPKT eSPA
A secure, compliant and efficient digital signing framework under the Digital Signature Act 1997, enabling KPKT’s eSPA ecosystem with trusted digital certificates issued by Pos Digicert.
Digital certificates, eKYC, and signing flows are integrated to support developers, buyers, witnesses, landowners and officers within eSPA/HIMS.
Legal Effect of Digital Signatures
Under the Digital Signature Act 1997, documents and messages signed with a valid digital signature carry full legal weight, equivalent to traditional paper-based signatures.
- Section 62(2) – A document signed with a digital signature in accordance with the Act is as legally binding as one signed with a handwritten signature or thumbprint.
- Section 64 – A digitally signed message is valid, enforceable and effective as if written on paper.
- Section 65 – A copy of a digitally signed message is as valid as the original unless a unique original is designated by the signer.
Regulatory Alignment
Digital certificates and signatures used in eSPA support compliance with Malaysian laws → Housing Development (Control and Licensing) Act 1966 [Act 118]:
Documents signed via digital certificates remain valid and cannot be tampered with after signing under the legal framework of the DSA 1997.
Public Key Infrastructure (PKI)
PKI provides the technical and trust foundation that enables secure digital signatures for eSPA. It ensures that every signature is bound to a verified identity and that documents are protected against manipulation.
PKI Components
- Customer / User – Individuals such as buyers, witnesses, landowners and officers.
- Registration Authority (RA) – Validates identity and registration information.
- Certification Authority (CA) – Pos Digicert issues and manages digital certificates.
- Signatures Repository – Stores certificates and related information.
- Relying Parties / Systems – eSPA, HIMS and other systems that rely on digital signatures.
Electronic Know Your Customer (eKYC)
eKYC is used to verify the identity of applicants before a digital certificate is issued. It ensures that certificates are only granted to legitimate individuals.
What is iDsaya?
- A mobile app designed to deliver a secure digital identity.
- Enables passwordless authentication and digital signing.
- Manages digital certificate PIN and TOTP used during the signing process.
What is eKYC?
- “Electronic Know Your Customer”.
- Uses biometric authentication and facial recognition to verify user identity and documents quickly and securely.
- Includes ID document verification and live facial recognition to prevent identity fraud.
Process Flows
The following diagrams summarise the flows extracted from the PKI & Digital Signature documentation for KPKT eSPA, covering eKYC, individual registration, developer quota management and the digital signing journey.
Benefits & Challenges of Digital Certificates
Benefits
High Security
- Ensures the authenticity of the signer’s identity.
- Digital certificates provide strong cryptographic protection.
Identity Verification & Audit Record
- eKYC links the digital certificate to a verified individual.
- Every signing action is recorded for audit and compliance.
Effective & Efficient
- Speeds up the signing of agreements and approvals.
- Supports electronic data collection and reduces manual paperwork.
- Helps reduce operational costs for all stakeholders.
Challenges
- Implementation Cost – Initial setup, integration and certificate costs.
- User Acceptance – Requires adoption and change from manual to digital processes.
- Awareness – Continuous education needed on digital signatures and their legal effect.
Despite these challenges, digital certificates significantly enhance trust, security and efficiency in document handling within eSPA.
Digital Transformation at KPKT
The implementation of PKI and digital certificates within eSPA forms part of KPKT’s broader digital transformation, moving from manual and paper-based processes to secure, end-to-end digital workflows.
- Replaces physical signatures with legally recognised digital signatures.
- Streamlines housing-related approvals and agreements.
- Improves transparency and traceability in transactions.
Powered by Pos Digicert
Pos Digicert underpins this transformation as the trusted Certification Authority:
- Issues and manages digital certificates for eSPA/HIMS users.
- Provides secure infrastructure for digital signing and certificate lifecycle management.
- Supports compliance with Malaysian cryptographic and digital identity regulations.
Contact Pos Digicert
For enquiries on digital certificates, eKYC integration, or digital signing for KPKT eSPA, please contact Pos Digicert.