CIS 1310 – HTML & CSS

12

E-Commerce Overview

CIS 1310 – HTML & CSS

Learning OutcomesLearning Outcomes

Define E-commerce

Identify Benefits & Risks of E-Commerce

Describe E-Commerce Business Models

Describe E-Commerce Security & Encryption

Describe Issues Related to E-Commerce

CIS 1310 – HTML & CSS

E-CommerceE-Commerce

In Relation to the Sale of Goods & Services:

Allow Individuals & Organizations to Exchange Information

Integrate Communications, Data Management, & Security

Major Functionality:

◦ Buying of Goods

◦ Selling of Goods

◦ Performance of Financial Transactions over the Internet.

CIS 1310 – HTML & CSS

AdvantagesAdvantages

Business Reduced Costs

Increased Customer Satisfaction

More Effective Data Management

Potentially Higher Sales

Consumer Convenience

Easier Comparison Shopping

Wider Selection of Goods

CIS 1310 – HTML & CSS

RisksRisks

Business Need for a Robust, Reliable Web Site

Fraudulent Transactions

Customer Reluctance to Purchase Online

Increased Competition

Consumer Possible Security Issues

Possible Privacy Issues

Purchasing from Photos & Descriptions

CIS 1310 – HTML & CSS

IssuesIssues

Intellectual Property

Security

Fraud

Taxation

International Commerce

CIS 1310 – HTML & CSS

TrendsTrends

Positive

Bigger Product Images

Glean More Detail

More Robust Reviews

Useful Coupons

Negative

Smaller and Hidden Product Descriptions

Fail to Give Feedback After Adding Items to the Cart

CIS 1310 – HTML & CSS

E-Commerce Business ModelsE-Commerce Business Models

B2C (Business-to-Consumer)

B2B (Business-to-Business)

C2C (Consumer-to-Consumer)

B2G (Business-to-Government)

CIS 1310 – HTML & CSS

Web ServicesWeb Services

Transmit Data Between Companies Using the Internet

Software System

Support Interoperable Machine-to-machine Interaction

Other Systems Interact Using HTTP with XML

CIS 1310 – HTML & CSS

SecuritySecurity

Encryption Ensures Privacy within Organization & on Internet

Converts Data into an Unreadable Format

Ciphertext

Decryption Process of Converting Ciphertext Back into its Original Form

Plaintext or Cleartext

Encrypt/Decrypt Process Requires Algorithm & Key

CIS 1310 – HTML & CSS

Symmetric-Key EncryptionSymmetric-Key Encryption

AKA Single-key Encryption

Encryption & Decryption Use Same Key

Sender & Receiver Must Know Key

Before Communicating Using Encryption

Advantage: Speed

CIS 1310 – HTML & CSS

Asymmetric-Key EncryptionAsymmetric-Key Encryption

AKA Public-key Encryption

Two Keys are Created at the Same Time

Public Key

Private Key

Much Slower than Symmetric-key Encryption

CIS 1310 – HTML & CSS

Hash EncryptionHash Encryption

Purpose is to Verify Integrity of Information

Hash Algorithm Transforms String of Characters

Creates “Digest”

Shorter Fixed-length Value or Key that Represents Original String

One-way Encryption

For Information that Will Not be Read or Decrypted

CIS 1310 – HTML & CSS

Secure Sockets Layer (SSL)Secure Sockets Layer (SSL)

Protocol that Allows Data to be Privately Exchanged

Over Public Networks

Developed by Netscape

Encrypts Data Sent Between Client & Server

Utilizes Both Symmetric & Asymmetric Keys

https Protocol

Browsers Display a “Lock” Icon

CIS 1310 – HTML & CSS

Secure Sockets Layer (SSL)Secure Sockets Layer (SSL)

Server & (Optionally) Client Digital Certificates

For Authentication

Symmetric-key Cryptography

Using a "Session Key" for Bulk Encryption

Public-key Cryptography for Transfer of Session Key

Hash Encryption to Verify Integrity of Transmission

CIS 1310 – HTML & CSS

Digital CertificateDigital Certificate

Form of an Asymmetric Key

Used by SSL to Authenticate Identity of Web Server

Contents of a Digital Certificate Include: Public Key

Effective Date of Certificate

Expiration Date of Certificate

Details About Certificate Authority (Issuer)

Details About Certificate Holder

A Digest of Certificate Content

CIS 1310 – HTML & CSS

Digital CertificateDigital Certificate

Obtaining Request Certificate from a Certificate Authority

Pay Application Fee

Certificate Authority:

Verifies Your Identity

Issues Your Certificate

Supplies You With a Public/Private Key Pair

Store Certificate In Server, Browser, or E-mail Application

Certificate Authority Makes Your Certificate Publicly Known