Q18E-Commerce and ERP
Question
(a) Discuss in detail the framework of E-commerce. (b) Explain how public key cryptography provides security in E-commerce transactions. Include a diagram.
Answer
A massive architectural exposition on the E-Commerce Framework and Public Key Cryptography. Violently details the network, messaging, and interface layers, and rigorously executes the RSA cryptographic mathematics providing absolute transaction security.
E-Commerce is not a single technology; it is a massive, highly stratified architectural framework composed of interconnected technological layers. To successfully execute a digital transaction, data must violently traverse from the physical network cables all the way up to the human UI.
The Four Pillars of the Framework
- 1. The Network Infrastructure (The Highway): The absolute physical foundation. This includes the fiber-optic cables, routers, 5G towers, and the core TCP/IP protocols that mathematically physically move the electrons across the globe (e.g., The Internet, Intranets, Extranets).
- 2. The Multimedia Content & Publishing Layer: The architecture that creates the digital storefront. It includes HTML, CSS, JavaScript, and massive Content Management Systems (CMS) that violently render product images and descriptions on the user's screen.
- 3. The Messaging & Information Distribution Layer: The mathematical protocols for sending the data. This includes HTTP for web traffic, SMTP for order confirmation emails, and EDI for B2B data exchange.
- 4. The Common Business Services Infrastructure: The critical background architecture. This includes the Cryptographic Payment Gateways (Stripe, PayPal), Authentication databases, and Digital Certificate Authorities that mathematically guarantee the transaction is secure and financially valid.
If a customer sends their credit card over the internet, a hacker can easily intercept the packet. Symmetric cryptography (using one password) fails because you cannot securely send the password to Amazon. The absolute solution is Asymmetric Public Key Cryptography (RSA).
The Mathematical Mechanics
RSA generates TWO mathematically linked keys: a Public Key (given to the entire world) and a Private Key (kept in absolute, paranoid secrecy by Amazon).
- The Encryption Lock: If you mathematically encrypt data with the Public Key, it can ONLY be decrypted by the Private Key. It is a one-way mathematical trapdoor.
- The Transaction Execution: 1. The customer's browser requests Amazon's Public Key. 2. The browser mathematically scrambles the Credit Card number using this Public Key. 3. The scrambled ciphertext is blasted across the chaotic internet. Even if a hacker intercepts it, it is mathematically impossible to decrypt it without the Private Key. 4. The packet hits Amazon's secure server. Amazon uses its highly guarded Private Key to violently unlock the ciphertext, retrieving the raw Credit Card number.
Digital Signatures (Non-Repudiation)
The keys also work in reverse. If Amazon encrypts a receipt with its Private Key, anyone in the world can decrypt it using Amazon's Public Key. Because ONLY Amazon possesses the Private Key, this mathematically PROVES with absolute certainty that Amazon generated the receipt. This is a Digital Signature.