Secure Online Transactions Research Articles

The impact of perceived ease of use on Internet service adoption: The moderating effects of temporal distance and perceived risk

Perceived ease of use is found to affect consumer’s intention toward using an Internet-based service. However, to protect online transaction security, more security verification mechanisms are established which in turn increase the complexity and difficulty of using online services. This study proposed that the importance of perceived ease of use is depending on short- vs. long-term transaction expectation, product type, and whether security concern information is presented. In certain situations buyers or sellers of an Internet service may tolerate the inconvenience of using the Internet-based service. A 2 (verification requirement) × 2 (network externality) × 2 (short vs. long term) between-subject design was conducted on sellers of an auction site and a 2 (verification requirement) × 2 (product type) × 2 (with vs. without security concern information) between-subject design was conducted on buyers of an auction site. The results of two studies suggest that perceived ease of use increases the intention toward using online service when sellers expect that the Internet service usage is only for a short-term transaction or when buyers have no access of the security concern information on the website. In contrast, sellers prefer using an online service which requires a relatively high verification requirement when the purpose of using Internet service is for long-term transaction or when buyers have access of security concern information. The results also showed that perceived network externality positively affect sellers’ intention toward using an auction website.

A framework towards enhancing trust and authorisation for e-commerce service

Traditional access control a.k.a. authorisation for e commerce systems is not flexible and efficient enough to combat the new emerging security challenges and public remains concerned about the security of online transactions as can be seen from http://www.security-survey.gov.uk. Challenges like changes in consumer's behaviour, advances in broadband technology, industrial maturity and entropy converging to usher in a new era of e-commerce security. The authors' proposed framework provides trust transformation rules which have associated conditions for authorisations to control access. The introduction of trust method formalises the conditions within logical perspective. The authors aim to build the architecture and trust model for trust and authorisation within an e-commerce service system. The architecture will help to build a secure e-commerce service system. The underlying framework will not only inform researchers of a better design for secure e-commerce service, but also assist e-commerce systems developers in the understanding of intricate constructions within trust and authorisation. This includes protecting transactions records of customers in terms of information privacy and access. The authors also propose rigorous logical foundation for trust and authorisation in e-commerce service environments based on ABLP.

The Impact of Knowledge and Trust on E-Consumers’ Online Shopping Activities: An Empirical Study

Lack of consumer trust is a critical obstacle to the success of online retailing. Knowledge is one important factor influencing the level of trust. However, there is no consensus on the relationship between knowledge and trust. Some studies argued a negative relationship between knowledge and trust while the others argued positive. This study discussed the relationship among knowledge, trust in online shopping, and the intention to go shopping online. The results revealed that knowledge is positively associated with trust and online shopping activities. In other words, people who know more about online shopping will trust and go shopping more online. Online retailing practice should make the public knowledgeable about online transaction security mechanisms to build users’ trust in online shopping.

Empirical Analysis of Internet Banking Adoption in Poland

This paper seeks to identify empirically the factors underlying the decision to adopt online banking in Poland. The sample used in this study is based on 3519 interactive questionnaires completed by Internet users. The decision of whether to adopt Internet banking services is linked, via Binomial Logistic Regression, to numerous explanatory variables, such as perceived security of online transactions, Internet experience, marketing exposure, use of other banking products and socio-demographic characteristics. The results presented here can be of assistance to banks and provide useful insights with regard to market segmentation, security and strategies fostering the acceptance of online banking.

Authentication and disclosure of online business entities: the foundation of online transaction security

E-commerce is becoming main business models nowadays. The security is the most key issues that challenge e-commerce, which comes down to entity identification. In this paper, online trading entity is divided into two categories: business entity and individual entity. For the entity registered as business entity, identity can verified over the internet by checking the business registration database in the Bureau; for individual entity, the best resolution is apparent anonymity, namely individual is allowed registered as online entity based on their identity authentication and then do business under user's name (virtual entity). It is an arrangement that balances the security of e-commerce and privacy protection of individual business.

The security of knowing nothing

'Zero-knowledge' proofs are all about knowing more, while knowing nothing. When married to cryptographic techniques, they are one avenue being explored towards improving the security of online transactions.

Digital signature legislation: The first 10 years

Malaysia is one of the first countries in the world to blaze the trail for having a prescriptive legislation of governing the digital signature technology. Whilst the Digital Signature Act 1997 has always been acknowledged as one of the pioneers of a technology-specific legislative approach, the Act nevertheless, has been greatly exposed to numerous critiques, suggesting its inability to secure online transactions, including Internet banking. Moreover, the lack of any of its provisions being tested in the Malaysian courts has in turn, suggested that the law has an inconsequential application in securing Internet banking transactions. Drawn from an ongoing doctoral research, this paper will highlight a methodological process and a preliminary finding of eight multiple-case studies amongst banks offering Internet banking services in Malaysia. The research, at the onset revealed that in ‘the real life situation’, the digital signature technology is hardly being adopted in securing Internet banking transactions, which has consequently shaped the extent of the application of the digital signature law in Malaysia.

Adopting virtual private network for electronic commerce

PurposeTo identify the content of virtual private network, the suitability of virtual private network for e‐commerce transactions, and the economics issue of virtual private network.Design/methodology/approachA range of virtual private network concepts and technologies are identified and compared. The capability, suitability, and pros and cons of adopting virtual private network for electronic commerce are discussed. An economic analysis is used to compare the cost and benefit of adopting virtual private network in organizations.FindingsThis paper provides information about virtual private network technology. It also indicates the advantages and disadvantages of adopting virtual private network for electronic commerce practices. The economic analysis provides a real example of technology adoption decision making. Strategic implications of adopting virtual private network are detected.Practical implicationsThe economic analysis on adopting virtual private network provides an example of information technology selection decision for the electronic commerce community.Originality/valueThis paper provides an economic approach to analyzing the decision process for information technology adoption. It suggests that the integration of virtual private network into electronic commerce architecture would perform secure and inexpensive online transactions for adopters of this new technology.

Risk Management in Online Human Services Practice

SUMMARY The growing use of the Internet for human service practice has resulted in ethical and legal issues that have yet to be fully addressed by current professional codes of ethics and the courts. This paper describes issues and risk-management procedures related to online human service practice, including: use of novel and untested services, unclear jurisdiction, equivalence of face-to-face and online practice, duty to warn and to provide emergency services, privacy and security of online transactions, establishment of fiduciary relationships, online assessment, and fees for online services. In addition, risk-management issues related to human service agency Web sites including copyright, ownership of the Web site, posting of staff names, online fundraising, online threats and disruption of services, unsolicited e-mail, and agency e-mail policies are discussed.

Control and Assurance in E-Commerce: Privacy, Integrity, and Security at eBay

Concern about privacy, integrity, and security of online transactions hampers absorption of e-commerce technologies as a normal way of doing business. To gain acceptance and trust of their participants, all organizations must achieve control or expectations equilibrium- a state where participants choose to do what others expect of them. Establishing control in e-commerce requires us to expand the traditional view of internal control to encompass the activities of customers, suppliers, and other ”outside” users of their electronic platforms. We present a framework for analyzing control in online auctions. Privacy, authentication, and denial-of-service attacks are three classes of risk especially prevalent in e-commerce. Using the control practices of eBay as an illustrative example, we suggest possible ways of controlling these risks. Privacy, integrity, and security of online transactions demand new types of assurance services in e-commerce. We analyze assurance services available in 2002 and discuss challenges and opportunities facing existing services such as WebTrust. The merits of developing proprietary versus industry standards, and simple operational verification of client-specific policies for e-commerce assurance services are also discussed.

Control and Assurance in E-Commerce: Privacy, Integrity and Security at eBay

Growth of online auctions and other forms of e-commerce has been hampered by concerns about the privacy, integrity, and security of online transactions. To earn the trust of their participants, new e-commerce organizations, like traditional organizations, have to reach the state of expectations equilibrium or - a state where the actual behavior of participants corresponds to what others expect them to do. Since e-commerce companies provide electronic platforms where buyers and sellers interact directly with each other (as well as with the platform operator), establishing in e-commerce enterprises requires broadening of the traditional definition of internal control to encompass the activities of outsiders such as customers, and suppliers. This paper presents a framework for analyzing the environment of online auctions and identifies privacy and denial of service attacks as two new classes of risks faced by e-commerce companies. Using the policies and practices of a leading consumer online auction company (eBay) as an illustrative example, we suggest possible ways of controlling these risks. This analysis identifies the demand for new kinds of assurance services for e-commerce to support privacy, integrity and security of online transactions. E-commerce assurance services available at the end of year 2000 (e.g. WebTrust) fall short of what is needed to establish expectations equilibrium or in online auction firms. The merits of developing proprietary (e.g., PWC privacy standards) versus industry standards (e.g. WebTrust) for e-commerce assurance services are also discussed.

TRADECARD: Building A Global Trading Electronic Payment System

In an attempt to provide an on-line payment mechanism for large-dollar cross-border transactions, TradeCard Inc. developed the world's first and only "credit card" for international trade. This case study discusses the major issues surrounding the viability of such a B2B electronic payment architecture. How would TradeCard provide a seamless and secure on-line settlement transaction? Is its platform capable of synchronizing all the databases involved in international transactions yet allowing all companies to use their own tools, operating systems and hardware platforms? How would TradeCard aggregate the disparate services offered by the network of companies involved in international trade? Would it change the mindset of global traders so that they would use its services rather than the traditional off-line settlement methods? The case discusses the critical issues involved in creating an international electronic payment system for cross-border transactions; the impact of new on-line alternative payment mechanisms on international trade payment environment; the systems security requirements for safe electronic payments for B2B e-commerce; and TradeCard's business plan and marketing strategy in building a global e-commerce trading system.

Virtual manufacturing information system using JavaTM and JDBCTM

The programming language -- Java, from Sun Microsystems, promises to transform the internet into a medium of secure on-line and real-time business transactions, that are independent of operating systems. Also, with the development of Java Database Connectivity (JDBC) API, it is possible to create secure, three-tier, virtual database systems. This paper deals with the implementation of a three-tier database system, using Java and JDBC, and Creation of an innovative, intelligent “interactive ordering system” on the Internet. It goes a step further to prove the flexibility of the system, by using different database engines at different nodes.