A Software Framework for Non-Repudiation Service based on Adaptive~Secure Methodology in Electronic Commerce

  • Authors:

  • Sung Woo Tak;Eun Kyo Park

  • Affiliations:

  • College of Engineering, Software Engineering Department, South Dakota State University, Box 2220, Brookings, SD 57007-0194, USA. sung_woo_tak@sdstate.edu;School of Computing Engineering, University of Missouri, 5100 Rockhill Rd., Kansas City, MO 64110, USA

  • Venue:
  • Information Systems Frontiers
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper, we propose a secure and efficient software framework for non-repudiation service based on an adaptive secure methodology in e-commerce (electronic commerce). First, we introduce an explicit security framework of the e-commerce transaction called notary service. The proposed framework supports non-repudiation of service for a successful e-commerce transaction in terms of generation, delivery, retrieval, and verification of the evidence for resolving disputes. Second, we propose an adaptive secure methodology to support secure and efficient non-repudiation of service in the proposed framework. Our adaptive secure methodology dynamically adapts security classes based on the nature and sensitivity of interactions among participants. The security classes incorporate security levels of cryptographic techniques with a degree of information sensitivity. As Internet e-businesses exponentially grow, a need for high security level categories to identify a group of connections or individual transactions is manifest. Therefore, development of an efficient and secure methodology is in high demand. We have done extensive experiments on the performance of the proposed adaptive secure methodology. Experimental results show that the adaptive secure methodology provides e-commerce transactions with high quality of security services. Our software framework incorporating the adaptive secure methodology is compared with existing well-known e-commerce frameworks such as SSL (Secure Socket Layer) and SET (Secure Electronic Transaction).