电子商务：管理视角chap08.pptVIP

Chapter 8Electronic Payment Systems and Security Learning Objectives Describe typical electronic payment systems for EC Identify the security requirements for safe electronic payments Describe the typical security schemes used to meet the security requirements Identify the players and procedures of the electronic credit card system on the Internet Discuss the relationship between SSL and SET protocols Learning Objectives (cont.) Discuss the relationship between electronic fund transfer and debit card Describe the characteristics of a stored value card Classify and describe the types of IC cards used for payments Discuss the characteristics of electronic check systems SSL Vs. SET: Who Will Win? A part of SSL (Secure Socket Layer) is available on customers’ browsers it is basically an encryption mechanism for order taking, queries and other applications it does not protect against all security hazards it is mature, simple, and widely use SET ( Secure Electronic Transaction) is a very comprehensive security protocol it provides for privacy, authenticity, integrity, and, or repudiation it is used very infrequently due to its complexity and the need for a special card reader by the user it may be abandoned if it is not simplified/improved Payments, Protocols and Related Issues SET Protocol is for Credit Card Payments Electronic Cash and Micropayments Electronic Fund Transfer on the Internet Stored Value Cards and Electronic Cash Electronic Check Systems Payments, Protocols and Related Issues (cont.) Security requirements Security Schemes Secret Key Cryptography (symmetric) Security Schemes (cont.) Public Key Cryptography Security Schemes (cont.) Digital Signature Security Schemes (cont.) Certificate Security Schemes (cont.) Certificate Authority - e.g. VeriSign Electronic Credit Card Systemon the Internet The Players Electronic Credit Card Systemon the Internet (cont.) The process of using credit cards offline Secure Electronic Transaction (SET) Protocol 1. The me