NDLI: Using certified policies to regulate E-commerce transactions

Please wait, while we are loading the content...

Using certified policies to regulate E-commerce transactions

Content Provider	ACM Digital Library
Author	Ungureanu, Victoria
Copyright Year	2005
Abstract	E-commerce regulations are usually embedded in mutually agreed upon contracts. Generally, these contracts enumerate agents authorized to participate in transactions, and spell out such things like rights and obligations of each partner, and terms and conditions of the trade. An enterprise may be concurrently bound by a set of different contracts that regulate the trading relations with its various clients and suppliers. This set is dynamic because new contracts are constantly being established, and previously established contracts end, are annulled, or revised.We argue that existent access control mechanisms cannot adequately support the large number of regulations embedded in disparate, evolving contracts. To deal with this problem we propose to use certified policies. A certified policy (CP) is obtained by expressing contract terms regarding access and control regulations in a formal, interpretable language, and by having them digitally signed by a proper authority. In this framework, an agent making a request to a server presents to the server such a CP, together with other relevant credentials. A valid certified policy can then be used as the authorization policy for the request in question.It is the thesis of this article that this approach would make several aspects of contract enforcement more manageable and more efficient: (a) deployment---certified policies may be stored on certificate repositories from where they can be retrieved as needed, (b) annulment---if a contract is annulled, the corresponding CP should be invalidated; the latter can be conveniently supported by certificate revocation, and (c) revision---revision of contract terms can be done by publishing a new certified policy and by revoking the old one. The proposed approach is practical in that it does not require any modification of the current certificate infrastructure and only minor modifications to servers.In this article, we propose a language for stating contract terms and present several formal examples of certified policies. We describe the implementation of the enforcement mechanism and present experimental performance results.
Starting Page	129
Ending Page	153
Page Count	25
File Format	PDF
ISSN	15335399
e-ISSN	15576051
DOI	10.1145/1052934.1052939
Volume Number	5
Issue Number	1
Journal	ACM Transactions on Internet Technology (TOIT)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2005-02-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Contract terms Enforcement Scalability
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Using certified policies to regulate Ecommerce Transactions (2005)

Unenforced E-commerce transactions

Resource management policies for e-commerce servers

Using a fuzzy classification approach to assess e-commerce Web sites: An empirical investigation

A large-scale empirical study of P3P privacy policies: Stated actions vs. legal obligations

Achieving evenhandedness in certified email system for contract signing

Security policies enforcement using finite and pushdown edit automata

E-commerce transactions in a virtual environment: virtual transactions

Scalability of Web-based electronic commerce systems

Using certified policies to regulate E-commerce transactions

Similar Documents

Using certified policies to regulate Ecommerce Transactions (2005)

Unenforced E-commerce transactions

Resource management policies for e-commerce servers

Using a fuzzy classification approach to assess e-commerce Web sites: An empirical investigation

A large-scale empirical study of P3P privacy policies: Stated actions vs. legal obligations

Achieving evenhandedness in certified email system for contract signing

Security policies enforcement using finite and pushdown edit automata

E-commerce transactions in a virtual environment: virtual transactions

Scalability of Web-based electronic commerce systems

Using certified policies to regulate E-commerce transactions