Describe the typical security schemes used to meet the security requirements. | Chapter 8 Electronic Payment Systems and Security 1 Learning Objectives Describe typical electronic payment systems for EC Identify the security requirements for safe electronic payments Describe the typical security schemes used to meet the security requirements Identify the players and procedures of the electronic credit card system on the Internet Discuss the relationship between SSL and SET protocols Discuss the relationship between electronic fund transfer and debit card Describe the characteristics of a stored value card Classify and describe the types of IC cards used for payments Discuss the characteristics of electronic check systems Learning Objectives (cont.) SSL Vs. SET: Who Will Win? A part of SSL (Secure Socket Layer) is available on customers’ browsers it is basically an encryption mechanism for order taking, queries and other applications it does not protect against all security hazards it is mature, simple, and widely use SET ( Secure Electronic Transaction) is a very | Chapter 8 Electronic Payment Systems and Security 1 Learning Objectives Describe typical electronic payment systems for EC Identify the security requirements for safe electronic payments Describe the typical security schemes used to meet the security requirements Identify the players and procedures of the electronic credit card system on the Internet Discuss the relationship between SSL and SET protocols Discuss the relationship between electronic fund transfer and debit card Describe the characteristics of a stored value card Classify and describe the types of IC cards used for payments Discuss the characteristics of electronic check systems Learning Objectives (cont.) SSL Vs. SET: Who Will Win? A part of SSL (Secure Socket Layer) is available on customers’ browsers it is basically an encryption mechanism for order taking, queries and other applications it does not protect against all security hazards it is mature, simple, and widely use SET ( Secure Electronic Transaction) is a very comprehensive security protocol it provides for privacy, authenticity, integrity, and, or repudiation it is used very infrequently due to its complexity and the need for a special card reader by the user it may be abandoned if it is not simplified/improved Payments, Protocols and Related Issues SET Protocol is for Credit Card Payments Electronic Cash and Micropayments Electronic Fund Transfer on the Internet Stored Value Cards and Electronic Cash Electronic Check Systems Security requirements Payments, Protocols and Related Issues (cont.) Authentication: A way to verify the buyer’s identity before payments are made Integrity: Ensuring that information will not be accidentally or maliciously altered or destroyed, usually during transmission Encryption: A process of making messages indecipherable except by those who have an authorized decryption key Non-repudiation: Merchants need protection against the customer’s unjustifiable denial of placed orders, and customers need protection .
