Online transaction security (an undergraduate independent study)

Online Transaction Security

An Undergraduate Independent Study

Online transactions security 2

Overview

Introduction

Importance

Presentation Content

Future directions

Conclusion


Introduction

What is an online transaction?

Risks involved

Challenge of providing security


Importance

Online stores and Sales increasing

Huge money flow

Vital part of the world economy

Maintain consumer trust


Presentation

Content The 3-D Secure protocol (3DS)

Extended Validation

SiteKey

SafePass

TLS - OBC


The 3-D Secure

protocol Developed by Visa as Verified by Visa, Licensed by

MasterCard and American Express

XML-based protocol

In 3-D Secure 3-D stands for three domains

Acquirer Domain (bank who received the money).

Issuer Domain (bank who issued the card).

Interoperability Domain (Infrastructure supported for the 3-

DS)


The 3-D Secure

protocolHow it works…


Extended

ValidationPhishing sites were black listed but no one can

make a prefect black list.

Extended Validation was Invented by CA/Browser

forum and Supported by all major browsers.

Used to identify the correct web domain by

positive safety indicators.

90% of the average users have no idea of how to

use Extended Validation


Extended

Validation


SiteKey and

SafePass Use by Bank of America

SiteKey is a Image that Helps customers to

verify this is the real web site before

proceed with the transaction.

SafePass feature lets customer to authorize

transactions using 6-digit Passcodes. Only

used in “Bigger” transactions.


SiteKey and

SafePass


TLS - OBC

Transport Layer Security – Origin Bound Certificates

Modified version of old TLS client certificates

Origin-Bound Certificates are self-signed, browsers

use them to implement TLS Client Authentication.

The initial user-authentication phase is largely

considered.

Stand Strong against Man in the Middle (MITM)

attacks.


TLS - OBC


Future directions

Researches are expected to be done more for

commercial usages rather than for educational

and knowledge graining purposes.

Main challenge here is to develop the average

user awareness.

To be meaningful Research outcomes should be

fair trade offs between user friendliness and

security tightness.


Thank You

Internet

Online transaction security (an undergraduate independent study)