Secure Electronic Transaction Research Articles

Semi-quantum blind double signature scheme with semi-trusted arbitrator

In order to solve the security of electronic transactions on limited goods, some quantum blind double signature (QBDS) protocols were proposed. In existing QBDS protocols, all participants must have specific quantum computing capabilities. Realistically, high cost of quantum devices may hinder people from using the QBDS protocol. Therefore, we propose a semi-quantum arbitrator blind double signature (SQABDS) scheme. In this scheme, the sender (signer) and the receiver both are classical participants, which can relatively reduce the dependence on quantum hardware. The introduction of blind signers can protect the privacy of electronic transactions, the introduction of semi-trusted arbitrator can relax the strong assumption about the trustworthiness of the arbitrator, for the arbitrator cannot forge the signature. In addition, the SQABDS scheme can be used to sign classical messages directly without performing any quantum swapping tests or quantum gate operations. Finally, the analysis shows that our scheme is securer and its quantum cost is relatively lower.

A Novel and Secure Fake-Modulus Based Rabin-Ӡ Cryptosystem

Electronic commerce (E-commerce) transactions require secure communication to protect sensitive information such as credit card numbers, personal identification, and financial data from unauthorized access and fraud. Encryption using public key cryptography is essential to ensure secure electronic commerce transactions. RSA and Rabin cryptosystem algorithms are widely used public key cryptography techniques, and their security is based on the assumption that it is computationally infeasible to factorize the product of two large prime numbers into its constituent primes. However, existing variants of RSA and Rabin cryptosystems suffer from issues like high computational complexity, low speed, and vulnerability to factorization attacks. To overcome the issue, this article proposes a new method that introduces the concept of fake-modulus during encryption. The proposed method aims to increase the security of the Rabin cryptosystem by introducing a fake-modulus during encryption, which is used to confuse attackers who attempt to factorize the public key. The fake-modulus is added to the original modulus during encryption, and the attacker is unable to distinguish between the two. As a result, the attacker is unable to factorize the public key and cannot access the sensitive information transmitted during electronic commerce transactions. The proposed method’s performance is evaluated using qualitative and quantitative measures. Qualitative measures such as visual analysis and histogram analysis are used to evaluate the proposed system’s quality. To quantify the performance of the proposed method, the entropy of a number of occurrences for the pixels of cipher text and differential analysis of plaintext and cipher text is used. When the proposed method’s complexity is compared to a recent variant of the Rabin cryptosystem, it can be seen that it is more complex to break the proposed method—represented as O(ɲ× τ) which is higher than Rabin-P (O(ɲ)) algorithms.

Selective Layered Blockchain Framework for Privacy-preserving Data Management in Low-latency Mobile Networks

<p>With the gradual development of Fourth Industrial Revolution technologies, such as artificial intelligence, the Internet of Things, and big data, and the considerable amount of data in mobile networks, low-latency communication and security management are becoming crucial. Blockchain is a data-distributed processing technology that tracks data records to support secure electronic money transactions and data security management in a peer-to-peer environment without the need of a central trusted authority. The data uploaded to the blockchain-shared ledger are immutable, making tracking integrity preservation facile. However, blockchain technology is limited because it is challenging to utilize in the industry owing to its inability to correct data, even when inaccurate data are uploaded. Accordingly, research on blockchain mechanisms that consider privacy-preserving data management is required to commercialize blockchain technology. Previously, off-chain, blacklist, and hard-fork methods have been proposed; however, their application is challenging or impractical. Therefore, to protect privacy, we propose a layered blockchain mechanism that can correct data by adding a buffer blockchain. We evaluated the latency, security, and space complexity of layered blockchains. The security and security-to-latency ratio for data management of the selective layered blockchain is 2.2 and 11.3 times higher than the conventional blockchains, respectively. The proposed selective layered blockchain is expected to promote the commercialization of blockchain technologies in various industries by protecting user privacy.</p> <p> </p>

Cloud Security And Electronic Transaction Security:

The insecurity of cloud leads to loss or exposure of vital information thereby threatens online transactions. These unfortunate happenings resulted in financial loss, reduced patronage of cloud services and investment diversions. Therefore, this chapter assesses cloud security and electronic transaction security. The chapter adopts qualitative research method, data were sourced secondarily through content analysis of edited books, peer-reviewed journals and credible online resources. It was descriptive in nature and thematically analyzed. The paper anchors on routine activity theory and broken windows theory. Findings revealed that cloud activities are under internal security threats of the cloud service providers and external threats of other users of cloud services. The chapter recommends proper background checks for the staff of the cloud service providers, public enlightenment on cloud security protocols. This chapter will be useful to individuals, cloud services providers, NGOs and researchers in the field of online crimes.

Secure Electronic Commerce Transactions Using Pythagorean Triple-based Cryptography and Audio Steganography

The rapidly increasing utilization of Information Technology (IT) in electronic commerce and other aspects of human existence has led to a rise in worries about the privacy and safe-ty/security of those involved. Due to the alarmingly high frequency with which data or user privacy breaches occur today, conducting online transactions can represent a major threat to buyers (and even business owners') privacy. Existing solutions to these security issues are still vulnerable to classic phishing scams. As a result, the construction of a robust and effi-cient audio steganography system for secure electronic commerce transactions is presented in this work. The developed system first encrypts sensitive financial data using the Pythagorean Triple-based Cryptographic (PTC) algorithm, then compresses the resulting cipher-text using the Lempel Ziv Welch (LZW) and Huffman's Compression Algorithms, and finally embeds the compressed file (using one-dimensional Discrete Cosine Transform (DCT)) in a suitable audio-file cover to produce an output (stego file) that is indistinguishable from the cover file. This output can then be exchanged between communicating entities across open networks. The new system has a little or no alteration in its outputs, as evidenced by the Signal-to-Noise Ratio (SNR), in the experimental results gotten.

E-BANKING SECURITY DILEMMAS OF USERS LIVING IN RURAL AREAS – THE CASE OF KONIN COUNTY IN WIELKOPOLSKA

The aim of the study was to identify selected threats to e-banking security in the opinion of rural residents, on the case of Konin County. Available e-banking services were analysed against the background of cybercrime threats. The research was conducted in the year 2019. In the spatial scope, it concerned Wielkopolska and the territory of the Konin County, which consists of 14 municipalities, including 5 urban-rural municipalities and 9 rural municipalities. Using the method of diagnostic survey, on a sample of almost 400 people invited to the study, the results were collected. The majority of respondents were rural residents. The survey questionnaire consisted of 22 closed questions and information data. Suggested answers were programmed according to a five-point Likert scale. The study used Pearson’s chi-square statistical test of independence, comparative and descriptive analysis. Calculations were performed in MS Excel. As a result, a relatively high level of interest in e-banking among the residents of Konin county was indicated. More than 90% of respondents, primarily rural residents, use online banking. This is especially applicable to retail payments, as well as successive control of the household budget. E-banking’s usability is mostly determined by: time saving, a widespread availability of services and convenience. Despite the awareness of risks, the level of security of online banking inspires confidence among respondents. Therefore, social and legal responsibility of the banking sector for electronic transaction security is recommended. This is justified by the majority of respondent opinions that traditional banking will be eliminated in the future by e-commerce tools, including e-banking.

Secure E-Commerce Scheme

E-commerce security has recently been an emerging topic due to the escalation in credit card fraud and stolen user accounts. In general, the security bridge and privacy leakage occur on the side of e-commerce companies due to various factors such as flaws in the design of their storage systems. The stored information of users increases the risk on privacy bridge and to remedy such risks e-commerce companies are forced to make costly investments. The security threats also enforce the development of robust security protocols and methods in digital commerce systems. The current protocols and methods generally bring extra communication and computation costs to all parties involving in the e-commerce system and the security risk on the side of e-commerce companies still remains. In this paper, we propose a Secure E-commerce Scheme (SES) which alleviates the security threats on the side of e-commerce companies and reduces communication costs for all parties. The proposed secure e-commerce protocol, SES, is implemented, analyzed and compared to two well-known schemes; Secure Electronic Transaction (SET) and 3D Secure.

Research on Smart City Smart City E-commerce Security Technology Based on SET Protocol

Secure Electronic Transaction (SET) has always been regarded as an international security standard followed by smart city e-commerce. It generally uses public key cryptography and digital certificates and other related technologies, which can help solve a series of security problems in the development of smart city e-commerce. The above security issues are designed to include the confidentiality of shopping and payment information, the completeness of transactions, the exactness of identity and non-cheating. The completeness and integrity of information are guaranteed in the link of electronic transactions. However, this agreement has its shortcomings in that it is costly and operational review. Based on this background, the paper reviews the application of SET protocol in e-commerce, and hopes to provide relevant suggestions for its development and improvement.

Design and Implementation of an IoT-based Transactional System for Quality Management

The spread of Coronavirus has forced populations around the globe to adopt strict measures such as lockdown, home quarantine, and home office. Moreover, in the current development of network communications, people can exploit internet and intranet features in many systems that need to be faster, more efficient, and available on time. Furthermore, with the benefits of using internet-of-things (IoT), through which things are generated, gained, discovered, and proposed without interference, the user could receive the last status without exertion and direct contact (i.e., in a contactless manner). These specifications can be used in a transaction system. This paper proposes an electronic transaction system (ETS) as a replacement for the current paper transaction used in most organizations’ environments. The progress includes the signing privilege, access right for each position, delivery reports, transaction tracking, and transaction storage safety. Transactions will be stored in an encrypted way at the database to keep them safe from illegal changes. For that, a secure electronic transaction is created with digital signature services. The negligence can be identified in the workflow by tracking the operations and receiving exceptional cases’ alerts. Finally, this paper compared the proposed system against state-of-the-art systems.

A Blockchain Secured Electronic Transaction Document Interchange Architecture (DIA): A Public Sector Analysis from Thailand

Thailand like many other nations and governments has been plagued with countless incidents of corruption and inefficiency. However, even though the primary causes of these problems remain uncertain, there are methods available today to reduce the ongoing systemic problems. One of the potential solutions lies in using secure document interchange architecture (DIA) with blockchain technology. Using a quantitative research design and cluster sampling across 20 Thai ministries and related agencies, 500 individuals eventually participated in the study. A five-level scale questionnaire was used as the research instrument. The structural equation model (SEM) was analysed to validate the consistency of the empirical data. The results of the research indicated that after adjusting the SEM by increasing the relationship between the errors, the consistency with the empirical data of the model was very good. Of the eight hypotheses examined, all were found to be positive. However, social and cultural aspects (SCA) had the greatest positive influence on strategy/policies/legal approaches (SPL) (r = 0.72*). This was closely followed by SPL’s influence on secure electronic transaction DIA (SET) (r = 0.68*), and technology (TEC) on security semantics (SEC) (r = 0.62*). However, SEC was deemed to have the least influence on secure electronic transaction DIA (SET) (r = 0.31*). Overall, there was a high level of satisfaction with the prototype system, with the architectural efficiency showing networked integrity while verifying and authenticating with the accuracy of the electronic documents. Also from the use of electronic signatures, electronic documents could be verified and authenticated as well. Networked integrity was also proven as the DIA system could validate the accuracy and authenticity of electronic documents.

Improving The Electronic Commerce Development In The Republic Of Uzbekistan

The article there consideredforeign experience in the development of electronic commerce on the basis ofthe study of scientific and methodological aspects of the organization and functioning of e-commerce system and revealed possibilities of its application in the Republic of Uzbekistan. There also studied factors affecting development of e-commerce and correlation-regression model of predicting the improvement of trade in virtual environment. There identified main directions of increasing the efficiency of e-commerce development in the country and additional information on identified subjects or objects of information exchange in order to differentiate the access to the resources and detect the level of privileges of the subject. Reliability service implements maintenance of indisputability of the subject from participation of evidence or facts on the basis of cryptographic verification. And the article were shows the modern requirements of business there proposed to implement such measures of government regulation as licensing activities, standardization and certification of funds and insurance of electronic commerce entities (elements of unification of state regulation) besides the measures of fiscal, money-and-credit, and international trade policy. It’s essential to pay particular attention to the security of electronic transactions. In work we discuss about the issues of structural transformations and development of the sphere of information and communication technologies have been investigated in the Republic of Uzbekistan.

Motivations to regulate cryptocurrencies: a systematic literature review of stakeholders and drivers

A cryptocurrency is a digital currency that can be used via peer-to-peer networks to execute secure electronic transactions without the need for a central control authority. The goals of this review are to identify how blockchain-based cryptocurrency is affecting the financial system, and to analyse the motivation for establishing cryptocurrency regulation, legislation, law and standards. The research methodology used to conduct this research was the systematic literature review. We conclude that the regulation of cryptocurrency requires the interaction of multiple stakeholders in order to incorporate financial, legal, technological and civil society dimensions. Coordination between several dimensions is necessary since each dimension has specific requirements associated with cryptocurrency usage, and each also has drivers that could involve different stakeholders with potentially competing interests. Most of these drivers are related to the financial, social, legal and technological aspects of regulation, and vice-versa.

The optimization effect of fuzzy factional-order ordinary differential equation in block chain financial cross-border E-commerce payment mode

To solve the problems of low execution efficiency and insufficient security of traditional electronic payment mode, in this study, an improved mode of cross-border e-commerce payment based on fuzzy fractional-order ordinary differential equation and secure electronic transaction protocol is proposed. Firstly, the competition model of cross-border e-commerce payment platform is constructed using fuzzy fractional order ordinary differential equation. Based on the theory of Hopf bifurcation, the stability of the model is analyzed. Then, the cross-border e-commerce improved payment mode is built based on the secure electronic transaction protocol. Finally, the efficiency and security performance of the improved payment mode are compared with that of the traditional payment mode with face through simulation experiments. The results show that the improved mode takes less time in encryption and decryption than the traditional mode; the time spent on the security payment of the improved mode remains around 1.2 s, while that of the traditional mode is around 2.7 s; the improved mode security payment takes significantly less time than the traditional mode, which indicates that the payment mode proposed in this research based on fuzzy fractional order ordinary differential equation is not only more secure than the traditional payment mode, but also can effectively improve the payment speed of users and greatly enhance their shopping experience.

Optimized Authentication Model for Online Transaction Payments

The rapid growth of the internet across the globe has gained attention in the world of business. The internet has become the major driver for business growth in the world; due to several security lapses online; it is necessary to implement measures and standards on the internet to protect transactions online. These security lapses have led to the development of various online payment protocols to ensure the safety of online transactions such as Secure Electronic Transaction (SET), internet Keyed Payment (iKP) and The Secure Socket Layer (SSL). There are several methods of paying for online transactions; these include direct payment with bank accounts and the use of electronic card. The payments are subjected to the verification system, which ensures no one uses someone’s card to transact business online. Each card has a security feature known as the Card Verification Value (CVV) number, which is used as authentication for online business. The key feature of the card which validates the card owner as the user is the CVV number, which is found at the back of the card. The problem is that when the card gets lost or falls into the hands of another person, it is likely the person might use the card for a fraudulent activity online. This is because all the information required for e-payment is on the card. In this paper, we propose an optimized conceptual model which ensures the removal of the CVV number from the all-electronic card, the paper also recommended a framework that deployed Unstructured Supplementary Services Data (USSD) technology in the online transaction and payment process. In a real-world implementation, the proposed optimized model shall enhance e-commerce payments, card user participation, reduce threats, improves the security of conducting online business and then offer the card user the opportunity to deny or accepts payment.

Disruptive innovation of cryptocurrencies in consumer acceptance and trust

Cryptocurrencies have the potential to become a disruptive innovation because they define a new paradigm: the decentralization of trust in secure electronic transactions without the need for a central control authority. Cryptocurrencies arouse interest in society because they reformulate the generation and transference of money. The aim of this paper is to investigate the role of the disruptive innovation of cryptocurrencies in the acceptance and trust perceived by users with regard to the monetary transactions generated in e-commerce. This paper defines a model using constructs from the technology acceptance model, trust and perceived risk. This model is evaluated using partial least squares analysis. The findings affirm that perceived trust, perceived risk, and perceived ease of use are not strong predictors of the intention to use cryptocurrencies and that the strength of their effects on the intention to use is determined by the perceived usefulness of adopting the mentioned disruptive innovation. This preliminary study makes a significant contribution to consumer behaviour research by analysing a cryptocurrency acceptance model for C2C e-commerce. The theoretical and practical contributions are detailed in the final section of the paper.

SET for E-commerce Transactions

The Secure Electronic Transaction (SET) is a convention intended for ensuring Visa exchanges over the Internet. It is an industry-supported standard that was shaped by Master Card and Visa (going about as the administering body) in February 1996. To advance the SET standard all through the installments network, exhortation and help for its improvement have been given by IBM, GTE, Microsoft, Netscape, RSA, SAIC, Terisa and VeriSign. SET depends on cryptography and X.509 v3 computerized certificates to guarantee message confidentiality and security. SET is the main Internet exchange convention to give security through validation. It battles the danger of exchange data being changed in travel by keeping data safely encoded consistently and by utilizing computerized certificates to confirm the personality of those getting to installment points of interest. The specifications of and approaches to encourage secure installment card exchanges on the Internet are completely investigated in this paper.

E-COMMERCE SECURITY WITH SECURE ELECTRONIC TRANSACTION PROTOCOL : A SURVEY AND IMPLEMENTATION

This paper tells about electronic transaction on ecommerce website using Secure Electronic Transaction (SET) protocol. SET is a very comprehensive security protocol, which utilizes cryptography to provide confidentiality of information, ensure payment integrity, and enable identity authentication. It relies on cryptography, digital certificate and authentication by SMS to ensure message confidentiality and security. First the report introduces about ecommerce websites and how to build it. It then explains how SET works and the components involved in it. Then the report gives out a design and implementation of this protocol.

A peer-to-peer transaction authentication platform for mobile commerce with semi-offline architecture

Trusted third-party (TTP) based transaction authentication is traditionally applied to authenticate mobile commerce transactions. However, several issues can arise with this, including seller fraud, TTP performance bottlenecks, and the risk of operations being interrupted. A peer-to-peer mobile commerce transaction authentication platform (MCTAP) with a semi-offline transaction authentication mechanism is proposed in this work. In this, both buyer and seller mutually authenticate and sign the digital receipt for each other. The trusted transaction authentication center thus no longer needs to operate online transaction verification processes, and only has to deal with consumer disputes. MCTAP can raise the efficiency of transaction authentication and provide solutions for the one-way transaction notification systems adopted by most online shopping sites that may encounter seller fraud. The proposed solution is compared to other TTP-based and secure electronic transaction based transaction authentication mechanisms, and the results indicate that the MCTAP has the advantages of efficiency and a higher security level.

A game-theoretic model and analysis of data exchange protocols for Internet of Things in clouds

Big data, Internet of things (IoT), and cloud computing have been recognized a family of technologies for a connected world. Besides hailed hope for the future, there are also challenges to security due to complexity and unpredictability of the Internet, clouds, and data. One of the challenges is information and data exchange, for example, identifying untrustworthy cloud users and analyzing abnormal user behavior during information exchange. This paper addresses exchange mechanism, which is a useful theoretic basis to make secure electronic commerce and electronic business transactions possible. To ensure and verify the property of fairness, a crucial property of exchange mechanism, this paper proposes a specific model for behavior analysis based on the extensive game with imperfect information. Rationality and fairness properties are built in the corresponding game and the game tree. To verify the properties, a tree analysis method is proposed, and a linear time algorithm is given. As a case study, some flaws of the ASW protocol are found.

E-commerce Security through Elliptic Curve Cryptography

E-commerce is considered an excellent alternative, low transaction costs and more accessible business approach to all over world customers. We exemplify many asymmetric approaches which use in E-commerce secure electronic transaction and other cryptography algorithms (encryption/decryption) which are main attraction in working setup of E-commerce. In this paper, we propose a model of E-transaction based on PGP (Pretty Good Privacy) and ECC. It will portray that how much secure payment and customer order of information will be efficiently handled by PGP based on dual digital signature.