Mobile Browser Flow

Sign with DSC from Android or iPhone mobile browsers using SecureSign Mobile App.

Flow Diagram

User signs from mobile browser via securesign:// deep link — no extensions or drivers required

No extensions required

This flow requires only the SecureSign Mobile App. No Java, browser extension, emSigner, or token driver install.

Step by Step

User clicks Sign with DSC on your mobile web page
Your server generates requestId and document hash (SHA-256, base64)
Browser redirects to SecureSign deep link
SecureSign App detects token, shows certificate list, collects PIN
App signs hash and redirects to your callbackUrl
Your callback handler receives signature and completes portal upload

Deep Link Format

securesign://sign?requestId={uuid}&hashBase64={sha256}&hashAlgo=SHA256&documentType=hash&callbackUrl={encoded}&apiKey={ss_live_xxx}

Return Payload

{"requestId":"a1b2c3d4","success":true,"signatureBase64":"MEUCIQD...","certificate":{"subjectCN":"Rajesh Kumar","serialNumber":"4A3B2C1D","validTo":"2027-01-01"},"signedAt":"2026-06-22T10:30:00Z"}

Code Samples

const params = new URLSearchParams({
  requestId: crypto.randomUUID(),
  hashBase64: sha256Base64,
  hashAlgo: 'SHA256',
  documentType: 'hash',
  callbackUrl: 'https://portal.example.gov.in/sign/callback',
  apiKey: 'ss_live_abc123xyz'
});
window.location.href = `securesign://sign?${params}`;

$params = http_build_query([
  'requestId' => bin2hex(random_bytes(16)),
  'hashBase64' => base64_encode(hash('sha256', $doc, true)),
  'hashAlgo' => 'SHA256',
  'documentType' => 'hash',
  'callbackUrl' => 'https://portal.example.gov.in/sign/callback',
  'apiKey' => 'ss_live_abc123xyz'
]);
header('Location: securesign://sign?' . $params);

import base64, hashlib, uuid, urllib.parse
params = urllib.parse.urlencode({
  'requestId': uuid.uuid4().hex,
  'hashBase64': base64.b64encode(hashlib.sha256(doc).digest()).decode(),
  'hashAlgo': 'SHA256',
  'documentType': 'hash',
  'callbackUrl': 'https://portal.example.gov.in/sign/callback',
  'apiKey': 'ss_live_abc123xyz'
})
redirect(f'securesign://sign?{params}')