Characterization of the Security Implications of Alternative E-procurement Topologies

Abstract

In this communication we propose a classification of alternative e-procurement topologies that can be characterized in terms of their security implications. In order to establish these alternative topologies we consider how the two main participants (buyer and supplier) could access to the e-procurement solution (i.e. through the Internet or through a Virtual Private Network -VPN-). From the point of view of the buyer, we consider two main possibilities, to use a third party intermediary that hosts the solution or to host it in the buyer information system. In the first case, we describe different situations when a third party intermediary is used, and we characterize the security implications in each case. Finally, we use this classification of topologies to analyze the security implications of different e-procurement solutions offered by Opciona (Spanish e-procurement solution provider).