A framework towards enhancing trust and authorisation for e-commerce service. (19th March 2009)

• Record Type: Journal Article
• Authors: Oreku, George S.; Li, Jianzhong; Mtenzi, Fredrick J.
• Is Part Of: International journal of internet technology and secured transactions. Volume 1:Number 3/4(2009)
• Page Start: 173
• Page End: 202
• Publication Date: 2009-03-19
• Subjects: authorisation -- access control logic -- e-commerce services -- intermediates -- trust -- electronic commerce -- e-commerce security -- secure transaction; Internet -- Security measures -- Periodicals; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1748-569X

Abstract

Traditional access control a.k.a. authorisation for e commerce systems is not flexible and efficient enough to combat the new emerging security challenges and public remains concerned about the security of online transactions as can be seen from http://www.security-survey.gov.uk. Challenges like changes in consumer's behaviour, advances in broadband technology, industrial maturity and entropy converging to usher in a new era of e-commerce security. The authors' proposed framework provides trust transformation rules which have associated conditions for authorisations to control access. The introduction of trust method formalises the conditions within logical perspective. The authors aim to build the architecture and trust model for trust and authorisation within an e-commerce service system. The architecture will help to build a secure e-commerce service system. The underlying framework will not only inform researchers of a better design for secure e-commerce service, but also assist e-commerce systems developers in the understanding of intricate constructions within trust and authorisation. This includes protecting transactions records of customers in terms of information privacy and access. The authors also propose rigorous logical foundation for trust and authorisation in e-commerce service environments based on ABLP.