1 An icsa white Paper

3. Frameworks for Secure E-commerce 
E-commerce security is currently under rapid and uncoordinated development. Many 
manufacturers, industry associations and standards bodies have proposed an implemented 
different solutions for the problems of ensuring confidentiality, identification, authentication, 
and authorization for e-commerce. This section summarizes some of the key initiatives and 
provides pointers for further details. 
The frameworks discussed below emphasize various aspects of e-commerce security. Table 1 
shows how these frameworks fit together in meeting the needs of users and businesses seeking to 
establish secure business relations through the Internet and the Web. 
Framework Privacy 
Identification Authentication Authorization Single Sign- 
On 
P3 
Y
TRUSTe 
Y 
SSL 
Y Y Y
Tokens 
Y 
Y 
FIPS 196 
Y Y
vCard 
Y 
Digital certificates 
Y Y
X.509v3 
Y 
Y 
SESAME 
Y Y Y
Certification 
authorities 
Y 
Y 
Y 
SET 
Y Y Y
OFX 
Y 
Y 
Y 
Gold Standard 
Y Y Y
Kerberos 
Y 
Y 
Y 
Y 

---

IA&A on the WWW 
_____________________________________________________________________________________________ 
_____________________________________________________________________________________________ 
Copyright © 1997 M. E. Kabay & ICSA. All rights reserved. Page 12 of 33
OPS 
Y Y Y Y Y 
Table 1. Frameworks for Privacy, Identification, Authentication, Authorization and Single 
Sign-On.