SETECS System: Security System and Infr as tructure for Global Electronic Commerce

SETECS System June 1999

SETECS

SETECS System:SETECS System:Security System and InfrSecurity System and Infrastructure tructure

for Global Electronic Commercefor Global Electronic Commerce

Sead Muftic

Computer Science DepartmentStockholm University / Royal Institute of Technology

[email protected]

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

Secure financial transactions

Document transactions

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

Secure financial transactions

Digitalcash

Creditcards

Homebankin

g Direct(EDI)

Document transactions

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

Secure financial transactions

Digitalcash

Creditcards

Homebankin

g Direct(EDI)

Document transactions

Global System

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

Secure financial transactions

Digitalcash

Creditcards

Homebankin

g Direct(EDI)

Document transactions

1. Security2. Standardized3. Functionality4. Scaling

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

Secure financial transactions

Digitalcash

Creditcards

Homebankin

g Direct(EDI)

Document transactions

SET

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

Secure financial transactions

Digitalcash

Creditcards

Homebankin

g Direct(EDI)

Document transactions

SETECS

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approach:

Secure transactions

Secure financial transactions

Digitalcash

Creditcards

Homebankin

g Direct(EDI)

Document transactions

SETECS

SETECS System June 1999

SETECSSETECS System -- Certification Infrastructure

CACA

Bankcardassociation

NationalCAs

RegionalCAs CACA

Root CA

CACA CACA

IssuerBank

AcquirerBank

PaymentGateways

CardholdersMerchants

SETECS System June 1999

SETECSSETECS System -- Components and Structure

Corporate ConsumersCorporate

Consumers(E-malls) Payment

GatewaysCardholders Merchants

Open InternetNetwork

Issuer

Bank

Shoppingand payments

AcquirerBank

Authorizationsand captures

SETECS System June 1999

SETECSSETECS System -- W@llet Functions

SETECS Merch@nt

Server

IssuerBankRegistration and

CertificationTransactions

M@ll

Shopping, payments and

inquiries

Searching and locating

Customers

RegistrationCredit Cards

Transactions

SETECS System June 1999

SETECSSETECS System -- Merch@nt Server Structure

Payment GatewayServer

Cardholders

Payment transactions

AcquirerBank

Registration andcertification

Merchant’s Web Server

Home Page(with SET buttons) Server’s

Administration

Registration, secure payments, inquiries

Server’s Data Base

Shopping,registration,

secure paymentsand inquiries

SETECS System June 1999

SETECSSETECS System -- P@yment G@teway Server

P@yment G@tewaySETECS Server

IssuerBank

Server’sAdministration

Registration, secure payments, inquiries

Server’s Data Base

Registration andcertification

SETECS Merch@nt Server

Cardholders

AcquirerBank Private

Banking Network

SETECS System June 1999

SETECSSETECS System -- M@lls

SETECS Merch@nt

Server

Shopping, payments and

inquiries Searching

and locating

Cardholders

US M@ll European M@ll

Asian M@ll Australian

M@ll

SETECS System June 1999

SETECSSETECS System -- Certification System

Consumers

US Server European Server

Asian Server Australian

Server

Top (Root) Server

Corporations

SETECS System June 1999

SETECS

Crypto modules Smart card Certification client

Security Platform

TCATCA

PCAPCA

UCAUCA

HCAHCA

PCAPCA

UCAUCA

HCAHCA

App clientApp client App serverApp server

SETECS System -- Protection of Documents

SETECS System June 1999

SETECS SETECS SystemSETECS System

The Concept and Approcah:

* * SETECS is the comprehensive global system for secure transactions in electronic commerce

* * SETECS supports secure payment transactions based on credit cards

* SETECS extends secure credit card payments with additional secure payment transactions based on other forms of payments : invoices, checks, subscriptions

* SETECS also provides international infrastructure for secure shopping, registration and certification

* The system may be used for open networks (Internet shopping) and also for internal, corporate electronic commerce systems

SETECS System June 1999

SETECS SETECS SystemSETECS System

Conclusions :

* * Five components: W@llet, Merch@nt Server, P@yment G@teway Server, B@nk Server and Certific@tion Server

* International certification infrastructure for secure payments and electronic commerce transactions * International system of shopping malls with easy

merchants’ registration and cardholders access* Flexible components for various environments, payments

and certification policies* Security technologies suitable for modifications,

extensions and customizations

SETECS System June 1999

SETECS

SETECS System:SETECS System:Security System and InfrSecurity System and Infrastructure tructure for Global Electronic Commercefor Global Electronic Commerce

Sead [email protected]

u.se