(1) The Controller shall be the repository of all Digital Signature Certificates issued under this Act.

(2) The Controller shall -
      (a) make use of hardware, software and procedures that are              secure from intrusion and misuse;
      (b)  observe such other standards as may be prescribed by               the    Central Government,

to ensure that the secrecy and security of the digital signatures are assured.

(3) The Controller shall maintain a computerised database of all public keys in such a manner that such database and the public keys are available to any member of the public.