On The Design Of Secure Electronic Payment Schemes For Internet

This paper considers the design of secure electronic credit card based payment schemes for Internet and reveals some of the issues that have not been adequately addressed in the proposed protocols todate. It proposes additional mechanisms that need to be incorporated as part of the design phase of the scheme to deal eeciently with the disputes that can arise. The design methods described in this paper are applicable to a range of protocols including iKP, STT, and SEPP. Based on this discussion, the paper goes on to propose an improved payment scheme and protocol. The new protocol provides a fair treatment of both the Client and the Merchant involved in the transaction. It se parates the purchase request phase from the payment phase thereby increasing the ability to handle certain class of disputes more eeciently. It removes the need to store the secret private key at the Client's machine or the need for a smartcard device. This is important as one cannot assume that all the clients connected to the Internet have or will have smartcard readers attached to them. The new protocol makes simpler assumptions about the environment , thereby making the scheme practical for securing commercial electronic credit card transactions.