Skip to main content

Security Schemes in Electronic Payment Systems

Introduction 
Secure electronic function transfer is crucial to e-commerce. In order to ensure the integrity and security of each electronic transaction and other EPSS utilize some or all of the following security measures and technologies directly related to EPSS: 
1) Authentication  
2) Public Key Cryptography  
3) Digital Signatures  
4) Certificate  
5) Certificate Authorities  
6) Secure Socket Layers(SSL)  
7) Secure Hypertext Transfer Protocol(S-HTTP)
 
Electronic Payment Protocols
Securities schemes are implemented by protocols: 
1) Secure Socket Layer (SSL): Netscape communication has proposed a protocol for providing data security layered between high-level application protocols and TCP/IP. This security protocol, called SSL, provides data encryption, server authentication, message integrity and optional client authentication for a TCP/IP connection.
 
SSL provides a security "handshake" to initiate the TCP/IP connection .This handshake results in the client and server agreeing on the level of security that they will use and fulfills any authentication requirements for the connection. Therefore SSL's only role is to encrypt and decrypt the message stream.
 
This protocol fully encrypts all the information in both the HTTP request and the HTTP response, including the URL the client is requesting.

2) Secure Hypertext Transmission Protocol (S-HTTP): S-HTTP was Sn developed for commerce Net- a consortium of companies promoting the  Bestablishment of electronic commerce on the internet. S-HTTP supports a B variety of security mechanisms to HTTP clients and servers, providing the security service options appropriate to the wide range of potential end uses possible on the web. The protocol provides symmetric capabilities to both client and server. 
 
To ensure a secure conversation between a web client and server, S-HTTP works by negotiating the type of encryption scheme used between client and server. Several cryptographic message format standards can be incorporated into S-HTTP clients and servers. S-HTTP does not require client-side public- key certificates. This is significant because it means that spontaneous private transactions can occur without requiring individual users to have an  established public key.
 
One advantages of S-HTTP is that it supports end-to-end secure transaction. This means that multiple encryption/decryption need not be done at every intermediate point.

3) Secure Electronic Transaction (SET): SET has been developed mainly by the credit card industry to secure payment card transactions over open networks. SET has been published as open specification for the industry. The current version of SET was designed for common desktop PCs as the typical user terminal, and with the internet as the transport network.

Previous Next

 
Labels:

Comments

Post a Comment

Popular Post

What is COVID-19 ?

COVID-19 is a disease caused due to the infection of novel coronavirus. The first case of COVID-19 disease was founded at Wuhan, China in December 2019. It also named as severe acute respiratory syndrome coronavirus 2 (SARS-CoV-2). COVID-19 is the most widely spread disease ever in the world. In most cases it infects the respiratory system that causes fever, dry cough, and shortness of breath. Previous : What is the difference between coronavirus and COVID-19 ?
Post a Comment
Read more

EDI and Business

Organisation that Uses EDI     1) Wal-Mart : An EDI link between Wal-Mart and one of its suppliers, Seminole Manufacturing Co. cut the delivery time of Seminole slacks by 50%. This resulted in a 31% sales increase of these slacks in the first 9 months after the link was established.   2) General Motors : General Motors have integrated EDI Electronic funds transfer at 30% of its assembly plants. Shipping receipts are sent electronically from the GM plant to an Electronic Data System (EDS is subsidiary of GM) computer center where they are matched against electronic invoices and purchase orders.   Suppliers group the shipping receipts, and one payment is made. This single payment may represent dozens of different shipments to different plants. These payments are also performed electronically via Electronic Funds Transfers.   3) J C Penney : Sales of Stafford suits jumped 59% after JC Penney linked up with their supplier Lanier Clothes. EDI allowed Penney to quickl...
Post a Comment
Read more

EDI Maturity Model

The development of EDI within an organisation or a trade sector goes through a number of stages. Saxena and Wagenaar suggest a three stage EDI maturity model as a part of a three-way analysis of EDI development in organisations, trade sectors and nations.  Figure 2.20 shows the concept of EDI maturity with a six-stage maturity model, and links it to the opportunities for competitive advantage. The stages of EDI development as represented in the model are:  Stage 1:Discovery : The first stage in EDI development is the discovery stage. Discovery can be by an organisation choosing to adopt EDI to gain competitive advantage or to solve an administrative problem.  Stage 2: Introductory : This stage requires investment hardware and software but, atleast significant, will be the time commitment in establishing the parameters of the electronic trading relationship. This stage, on its own, does not result in any cost saving or efficiency gain. there are direct costs in computer ...
Post a Comment
Read more