Secure Electronic Commerce

Traditional business users will learn how e-commerce transactions differ from paper-based commerce, and how to minimize the risks while maximizing the benefits. Technical users will appreciate the extensive coverage of the latest security technologies and how they are applied in the business environment.

Internet and security topics:

• Digital signatures for secure transactions
• Public-key infrastructure and certification policies
• Firewalls, virtual private networks, Web and e-mail security

Legal and business topics:

• Legal principles and practices to achieve enforceability
• Regulations and guidelines in the U.S. and internationally
• Non-repudiation and the role of trusted third-parties

Newcomers will appreciate the clear explanations of the origins and development of secure e-commerce. More experienced developers can move straight to the detailed technical material. Anyone who is involved in e-commerce design, management, or operation needs Secure Electronic Commerce.

Contents

• 1. Introduction.
• 2. The Internet.
• 3. Business and Legal Principles.
• 4. Information Security Technologies.
• 5. Internet Security.
• 6. Certificates.
• 7. Public-Key Infrastructure.
• 8. Legislation, Regulation, and Guidelines.
• 9. Non-repudiation.
• 10. Certification Policies and Practices.
• 11. Public-Key Infrastructure Assessment and Accreditation.
• Appendix A: Forms of Agreement.
• Appendix B: The U.S. Federal E-Sign Act.
• Appendix C: ASN.1 Notation.
• Appendix D: X.509 in ASN.1 Notation.
• Appendix E: United Nations Model Law on Electronic Commerce.
• Appendix F: How to Obtain Referenced Documents.
• Appendix G: Legacy Application Security Standards.
• Appendix H: PKI Disclosure Statement.
• Appendix I: Repudiation In Law.
• Appendix J: Public-Key Cryptosystems.
• Appendix K: European Signature Directive.
• Index.