Dual Signature in SET Protocol

1. What is a Dual Signature?

A dual signature is a special cryptographic mechanism used in the Secure Electronic Transaction (SET) protocol to link two separate messages intended for two different recipients, in such a way that:

• The merchant can verify the customer's order information without seeing the payment/card details.
• The bank can verify the payment information without seeing the actual order details.
• Yet both messages are cryptographically linked, so neither party can be deceived about what the other received.

It protects the privacy of the cardholder while ensuring integrity and authenticity of both the order and payment messages.

2. Dual Signature Operations

The dual signature involves the following steps and components:

Parties Involved:

• Customer (Cardholder)
• Merchant
• Bank (Payment Gateway / Issuer)

Messages Involved:

• OI = Order Information (sent to Merchant)
• PI = Payment Information (sent to Bank)

Step-by-Step Construction of Dual Signature:

Step 1: Hash the two messages separately

H(OI) = Message Digest of Order Information
H(PI) = Message Digest of Payment Information

Step 2: Concatenate the two hashes

POMD = H(PI) || H(OI)
(Payment Order Message Digest)

Step 3: Hash the concatenated result

POMD_Hash = H(POMD) = H( H(PI) || H(OI) )

Step 4: Encrypt with Customer's Private Key (Sign)

Dual Signature (DS) = E_Kc_private ( POMD_Hash )

This DS is the dual signature that the customer attaches to both messages.

Diagram of Dual Signature Construction:

OI -----> H(OI) ---|
                   |--> Concatenate --> H(H(PI)||H(OI)) --> Encrypt with --> DS
PI -----> H(PI) ---|                                        Customer's
                                                            Private Key

3. Verification of Dual Signature

By the Merchant:

The merchant receives OI and DS, and also receives H(PI) (hash of payment info, not PI itself).

Verification steps:

1. Compute H(OI) from the received OI.
2. Concatenate received H(PI) || H(OI).
3. Hash the result: H( H(PI) || H(OI) ).
4. Decrypt DS using customer's public key: D_Kc_public(DS).
5. Compare the two values. If equal, signature is valid.

The merchant verifies the order but never sees PI (actual card/payment data).

By the Bank:

The bank receives PI and DS, and also receives H(OI) (hash of order info, not OI itself).

Verification steps:

1. Compute H(PI) from the received PI.
2. Concatenate H(PI) || H(OI).
3. Hash the result: H( H(PI) || H(OI) ).
4. Decrypt DS using customer's public key: D_Kc_public(DS).
5. Compare the two values. If equal, signature is valid.

The bank verifies the payment but never sees OI (actual order details).

4. Use of Dual Signature in SET Purchase Request Operation

The Purchase Request is the first major transaction phase in SET. The following describes how dual signature is used:

Participants:

• Customer, Merchant, Payment Gateway (Bank)

Process:

Step 1: Customer prepares two messages

• OI (Order Information): items, price, merchant ID
• PI (Payment Information): card number, amount, bank details

Step 2: Customer creates the Dual Signature

• Computes H(OI) and H(PI)
• Computes DS = E_Kc_private( H( H(PI) || H(OI) ) )

Step 3: Customer sends to Merchant

To Merchant:  OI + H(PI) + DS

• Merchant sees the order details.
• Merchant gets H(PI) but cannot see actual payment info.

Step 4: Merchant forwards to Payment Gateway (Bank)

To Bank:  PI + H(OI) + DS

• Bank sees the payment details.
• Bank gets H(OI) but cannot see actual order details.

Step 5: Verification

• Merchant verifies DS using H(OI) (computed locally) and received H(PI).
• Bank verifies DS using H(PI) (computed locally) and received H(OI).
• Both use the customer's public key to decrypt DS and compare.

Summary Table:

5. Advantages of Dual Signature in SET

• Privacy: Card details are hidden from merchant; order details are hidden from bank.
• Integrity: Any tampering with OI or PI will invalidate the dual signature.
• Non-repudiation: Customer cannot deny having sent both OI and PI since DS is signed with their private key.
• Linkage: Both messages are cryptographically bound together, preventing substitution attacks.

Note: The above explanation is based on the SET protocol concepts covered in the curriculum. The dual signature is a core security feature that makes SET a robust protocol for e-commerce transactions.

Digital Marketing, Its Role in E-Commerce, and Email Marketing Metrics

1. What is Digital Marketing?

Digital marketing refers to the use of digital channels, platforms, and technologies to promote products, services, and brands to target audiences. It encompasses all marketing efforts that use the internet or electronic devices to connect businesses with potential customers.

Digital marketing includes a wide range of activities such as:

• Search Engine Marketing (SEM): Using search engines like Google to build and sustain brands and support direct sales to online consumers.
• Display Ad Marketing: Delivering promotional video or visual content through interactive media such as websites (banner ads, rich media ads, video ads, interstitial ads).
• Social Media Marketing: Using social media platforms with customized advertisements to attract users.
• Email Marketing: Sending promotional messages directly to a targeted list of email recipients.
• Content Marketing and Sponsorships: Creating and distributing valuable content to attract and retain customers.
• Ad Targeting (Targeted Advertising): Placing advertisements in specific areas on specific platforms based on audience behaviours and interests to increase visibility and engagement.

Rather than placing a general ad anywhere on the web, targeted advertisements are strategically placed to reach a clearly defined audience based on past customer behaviour and other data.

2. Why is Digital Marketing Essential in E-Commerce?

Digital marketing is a core pillar of the e-commerce framework. Its importance can be understood through the following points:

a) Web Presence and Visibility

In modern e-commerce, having a strong web presence is the major strategy for vendors. Digital marketing ensures that an e-commerce business is visible to potential customers through search engines, social media, and online advertisements.

b) Attracting and Retaining Customers

Through customized advertisements, promotions, and content marketing, digital marketing helps attract users to an e-commerce platform and retain them through personalized experiences. Consumers increasingly look for personalized messages, products, and services relevant to their wants and needs.

c) Supports the Marketing and Advertisement Pillar of E-Commerce

The e-commerce framework is built on five pillars: People, Public Policy, Marketing and Advertisement, Support Services, and Business Partnership. Digital marketing directly supports the Marketing and Advertisement pillar through market research, promotions, content marketing, and digital advertising.

d) Cost-Effective Compared to Traditional Marketing

The gross revenue of online advertisement is rapidly increasing in comparison to declining traditional marketing. Online advertising (display ads, search ads, email campaigns) offers measurable and cost-effective alternatives.

e) Enables Ad Targeting

Digital marketing allows businesses to place ads based on customer behaviour and interests, ensuring that the right message reaches the right audience at the right time, increasing conversion rates.

f) Measurable Results

Digital marketing provides measurable metrics (impressions, click-through rates, conversion rates, etc.) that allow e-commerce businesses to evaluate campaign performance and optimize strategies.

g) Supports B2C and Other E-Commerce Models

In B2C e-commerce, where online businesses attempt to reach individual consumers, digital marketing is the primary tool to communicate offers, build brand awareness, and drive purchases.

3. How Marketing Metrics Influence Email Marketing

Email marketing is one of the most direct and effective forms of digital marketing. Its performance is measured using specific email metrics. The three key metrics asked are:

a) Click-Through Rate (CTR)

Definition: Click-through rate is the percentage of email recipients who clicked through the offers (links, buttons, or promotions) contained within the email.

Formula: $$\text{CTR} = \frac{\text{Number of Recipients Who Clicked}}{\text{Total Emails Delivered}} \times 100%$$

Influence on Email Marketing:

• CTR directly measures the effectiveness and relevance of the email content and call-to-action (CTA).
• A high CTR indicates that the email content is engaging, the offer is attractive, and the CTA is compelling.
• A low CTR signals that the email content needs improvement, the offer is not appealing, or the CTA is unclear.
• Marketers use CTR to A/B test different subject lines, content layouts, and offers to optimize future campaigns.
• It helps determine which audience segments are most responsive, enabling better ad targeting in future campaigns.

b) Bounce-Back Rate

Definition: Bounce-back rate is the percentage of emails that could not be delivered to the recipient's inbox.

Types of Bounces:

• Hard Bounce: Permanent delivery failure (e.g., invalid or non-existent email address).
• Soft Bounce: Temporary delivery failure (e.g., recipient's mailbox is full or server is temporarily unavailable).

Formula: $$\text{Bounce-Back Rate} = \frac{\text{Number of Undelivered Emails}}{\text{Total Emails Sent}} \times 100%$$

Influence on Email Marketing:

• A high bounce-back rate indicates a poor quality or outdated email list, which wastes marketing resources and reduces campaign effectiveness.
• It negatively affects the sender's reputation with email service providers (ESPs), potentially causing future emails to be flagged as spam.
• Marketers must regularly clean and update their email lists to remove invalid addresses and reduce bounce-back rates.
• Monitoring bounce-back rate helps maintain a healthy delivery rate, which is the percentage of emails that are successfully received.
• Reducing bounce-back rate ensures that marketing messages actually reach the intended audience, improving overall campaign ROI.

c) Conversion Rate

Definition: Conversion rate is the percentage of email recipients who actually buy (or complete a desired action such as signing up, downloading, or purchasing) after receiving the email.

Formula: $$\text{Conversion Rate} = \frac{\text{Number of Recipients Who Purchased}}{\text{Total Emails Delivered}} \times 100%$$

Influence on Email Marketing:

• Conversion rate is the ultimate measure of email marketing success because it directly reflects revenue generation.
• A high conversion rate means the email effectively guided recipients through the purchase funnel, from awareness to action.
• A low conversion rate despite a high open rate or CTR may indicate issues with the landing page, pricing, or the overall purchase experience.
• Marketers use conversion rate data to personalize email content, segment audiences, and tailor offers to specific customer groups.
• It helps calculate the **Return on Investment (RO

B2B E-Commerce and Its Business Models

Definition of B2B E-Commerce

Business-to-Business (B2B) e-commerce is a type of e-commerce in which both transacting parties are businesses. In B2B e-commerce, commercial transactions, exchange of information, products, services, and payments take place electronically between two or more business organizations over the Internet or other electronic networks.

"In this type of e-commerce, both parties are businesses, e.g. motorcycle manufacturing company 'Hero' buys tyres from MRF company."

B2B e-commerce has significantly high growth potential and its size is potentially huge compared to other forms of e-commerce. It encompasses activities such as procurement, supply chain management, inventory management, and inter-organizational transactions conducted electronically.

Key Characteristics of B2B E-Commerce:

• Transactions occur between two businesses (manufacturer-supplier, wholesaler-retailer, etc.)
• Transaction volumes and values are typically much larger than B2C
• Relationships are long-term and contract-based
• Involves complex negotiation, ordering, and payment processes
• Reduces costs through automation and electronic data interchange (EDI)

B2B Business Models

The major B2B e-commerce business models are described below:

1. Supplier-Oriented Marketplace (Sell-Side Model)

In this model, a single supplier/seller sets up an online marketplace or storefront to sell products and services to multiple business buyers.

• The supplier controls the marketplace
• Buyers visit the supplier's website to browse catalogs and place orders
• The supplier manages pricing, inventory, and fulfillment

Example: A company like Cisco Systems selling networking equipment directly to other businesses through its own website.

Advantages:

• Supplier has full control over pricing and branding
• Reduces cost of sales and order processing
• Enables 24/7 ordering for business customers

2. Buyer-Oriented Marketplace (Buy-Side Model / E-Procurement)

In this model, a single large buyer sets up a private marketplace to invite multiple suppliers to bid and sell to them.

• The buyer (usually a large corporation) creates and controls the marketplace
• Suppliers register and submit bids or catalogs
• The buyer selects the best offer based on price, quality, and delivery

Example: A large automobile manufacturer setting up an online procurement portal where hundreds of parts suppliers submit their quotes.

Advantages:

• Buyer gains better pricing through competitive bidding
• Streamlines the procurement process
• Reduces purchasing costs and administrative overhead

3. Intermediary-Oriented Marketplace (E-Marketplace / Net Marketplace)

In this model, a third-party intermediary creates and manages an online marketplace that brings together multiple buyers and multiple sellers.

• The intermediary does not own the products
• It earns revenue through transaction fees, subscription fees, or commissions
• Both buyers and sellers benefit from a neutral, centralized platform

Example: Alibaba.com, IndiaMART, where many suppliers and buyers meet to conduct business.

Advantages:

• Provides a neutral platform for fair transactions
• Increases market reach for both buyers and sellers
• Reduces search costs for buyers and marketing costs for sellers

4. EDI-Based B2B Model (Electronic Data Interchange)

This is one of the oldest and most established B2B models. EDI enables the electronic exchange of structured business documents (purchase orders, invoices, shipping notices) between businesses using standardized formats.

The EDI architecture consists of:

Advantages:

• Reduces paperwork and manual data entry errors
• Speeds up business transactions
• Ensures standardized communication between different organizations

5. Industry Value Chain Model

This model focuses on how B2B e-commerce integrates the entire industry value chain -- from raw material suppliers to manufacturers, distributors, retailers, and finally customers.

"A value chain is an interconnected set of value-adding activities for a product from its raw inputs to final products and services."

Key players and their roles:

• Suppliers -- sell raw materials to manufacturers via B2B exchanges
• Manufacturers -- reduce costs by developing Internet-based B2B exchanges with suppliers
• Distributors -- develop highly efficient inventory management systems
• Retailers -- procure goods from distributors/manufacturers electronically
• Customers -- search for best quality, fastest delivery, and lowest prices

Example: A car manufacturer using B2B e-commerce to coordinate with steel suppliers, tire manufacturers, electronics component makers, and logistics companies simultaneously.

6. E-Distributor Model

In this model, a company acts as an online distributor that purchases goods from multiple manufacturers and sells them to business buyers.

• Maintains its own inventory
• Offers a wide catalog of products from various manufacturers
• Provides value-added services like consolidated shipping and credit

Example: A company that buys computer hardware from multiple manufacturers and sells to corporate clients.

7. B2B Service Provider Model

In this model, businesses provide specialized services to other businesses online, such as:

• Financial services (online banking, payment processing)
• Logistics and supply chain services
• Cloud computing and SaaS solutions
• Marketing and advertising services

Example: A payment gateway company like PayPal providing payment processing services to e-commerce businesses.

Summary Table

Conclusion

B2B e-commerce represents the largest and fastest-growing segment of e-commerce by transaction volume, since it covers the entire chain of supplier, manufacturer, distributor, and retailer transactions that ultimately support B2C sales. Depending on who controls the marketplace and how many buyers and sellers participate, a business can choose the supplier-oriented, buyer-oriented, intermediary-oriented, EDI-based, value-chain, e-distributor, or service-provider model that best fits its trading relationships.

E-Payment System and Online Credit Card Transactions

What is an E-Payment System? (2 marks)

An Electronic Payment System (EPS) is a way of paying for goods and services electronically instead of using direct cash or physical cheque. EPS simply means online transaction of values.

New types of purchasing relationships (such as between individuals online) and new technologies (such as mobile platforms) have created both a need and an opportunity for the development of new payment systems.

Examples of E-Payment Systems include:

• Online Credit Card Transactions
• Online Stored Value Payment System
• Digital and Mobile Wallet (E-wallet)
• E-Checks
• Virtual Currency
• Smart Cards, E-cash, P2P Payments

How Online Credit Card Transactions Work (3 marks)

Online credit card transactions are processed in much the same way as in-store purchases, with the major differences being:

• The merchant never sees the actual card being used
• No card impression is taken
• No signature is available

These transactions are also called Cardholder Not Present (CNP) transactions.

Key Participants

Step-by-Step Process (SET Protocol)

1. Customer browses the website and decides what to purchase.
2. Customer sends order and payment information (two parts: Purchase Order + Card Information).
3. Merchant forwards card information to their bank (acquirer).
4. Merchant's bank checks with the issuer for payment authorization.
5. Issuer sends authorization back to the merchant's bank.
6. Merchant's bank sends authorization to the merchant.
7. Merchant completes the order and sends confirmation to the customer.
8. Merchant captures the transaction from their bank.
9. Issuer prints the credit card bill to the customer.

Limitations of Online Credit Card Payments

• Security risks (no physical card verification)
• Merchant risk (CNP fraud)
• Administrative and transaction costs
• Social equity issues (not everyone has access to credit cards)

Basic Elements to Consider While Developing an E-Commerce Website

When developing an e-commerce website, proper planning and vision must come first. Planning involves defining a clear timeline and budget. Vision includes a problem statement and following the System Development Life Cycle (SDLC).

Once planning and vision are in place, the following six basic elements must be considered:

1. Management

• Refers to the organizational structure and decision-making process involved in overseeing the development and operation of the e-commerce website.
• Includes project management, team coordination, and business strategy alignment.

2. Software

• The e-commerce website requires appropriate software tools and platforms.
• This includes the core e-commerce software that supports features such as product catalog, shopping cart, payment processing, tax computation, order fulfillment, and transaction processing.

3. Hardware Architecture

• Refers to the physical computing infrastructure needed to host and run the e-commerce website.
• Includes servers, storage systems, and other hardware components that ensure reliability and performance.

4. Design

• Involves the user interface (UI) and user experience (UX) design of the website.
• A well-designed website improves customer engagement, trust, and ease of navigation, which are critical for online buying and selling.

5. Telecommunications

• Refers to the network and internet connectivity infrastructure required to keep the website accessible and operational.
• Includes bandwidth, network security, and communication protocols that support smooth data transmission between buyers, sellers, and payment systems.

6. Human Resources

• Refers to the skilled personnel required to build, maintain, and manage the e-commerce website.
• Includes web developers, designers, database administrators, security experts, and customer support staff.

Summary Table

Note: All six elements work together to ensure a functional, secure, and user-friendly e-commerce presence.

Adware and SSL Protocol in E-Commerce

Part 1: What is Adware? (2 marks)

Adware is unwanted software designed to throw advertisements on our web browsers. Some security professionals view it as a PUP (Potentially Unwanted Program).

Key Points:

• Adware mostly comes with cracked and free illegal versions of software.
• It operates without the user's full consent and disrupts normal browsing experience by displaying unwanted ads.

Prevention:

• Think twice before downloading and installing any new software, especially freeware.
• Avoid downloading software from unofficial or untrusted sources.

Part 2: How is SSL Protocol Used in E-Commerce? (3 marks)

SSL (Secure Sockets Layer) is a standard security protocol used in e-commerce to establish an encrypted link between a web server and a browser. This ensures that all data transmitted between them remains private and secure.

Role of SSL in E-Commerce:

How SSL Works in E-Commerce Transactions:

1. The customer visits an e-commerce website. The browser requests the server to identify itself.
2. The server sends a copy of its SSL certificate to the browser.
3. The browser checks whether the certificate is trusted. If trusted, it sends a message to the server.
4. The server sends back a digitally signed acknowledgment to start an SSL encrypted session.
5. All data exchanged between the browser and server (such as card details and order information) is now encrypted.

Significance in E-Commerce:

• SSL protects the communications pipeline, which is one of the three key points of vulnerability in e-commerce (along with client and server).
• It is used during transaction processing when customers pay online using credit/debit cards or mobile wallets, making the process secure and reliable.
• Websites using SSL display HTTPS in the URL and a padlock icon, building customer trust.

Note: SSL works alongside protocols like SET (Secure Electronic Transaction) in e-commerce. While SSL secures the communication channel, SET provides additional security for card-based payment transactions involving cardholders, merchants, acquirers, issuers, and payment gateways.

In summary, adware is a browser-disrupting unwanted program, while SSL secures e-commerce by encrypting data, authenticating parties, and protecting the communication pipeline during online transactions.

Working Mechanism of Search Engines

Search engines are powerful tools used to locate information on the internet and also serve as a major platform for digital marketing. Their working mechanism can be described through the following key components:

1. Crawling and Indexing

Search engines use automated programs called web crawlers (or spiders/bots) to browse the internet and collect information from web pages. The collected data is stored in a large index (database). When a user submits a query, the search engine scans this index to find relevant results.

2. Ranking of Results (Search Algorithms)

Once a query is entered, the search engine applies its search algorithm to rank pages based on relevance and quality. Key factors include:

• Content relevance to the search keyword
• Popularity of the page (number of links pointing to it)
• User behaviour signals such as click-through rates

Google and other search engine firms make frequent changes to their search algorithms in order to improve the search results and user experience.

3. Search Engine Optimization (SEO)

Websites try to appear higher in organic (unpaid) search results through SEO.

SEO is the process of improving the ranking of the pages with search engines by altering the content and design of the web pages and site.

This involves using relevant keywords, improving page structure, and enhancing user experience.

4. Paid Search Advertising (SEM and PPC)

Search engines also display paid advertisements alongside organic results. The primary mechanism is:

• Pay-Per-Click (PPC) / Keyword Advertising: Merchants bid on specific keywords. When a user searches for that keyword, the advertiser's ad appears on the page (usually at the top or right side).
• The higher the bid, the greater the visibility and ranking of the ad.
• Some search engines also consider ad popularity (number of clicks per unit time), so ranking depends on both money paid and click performance.

The average click-through rate for search engine advertising is approximately 2%.

5. Semantic Search

Modern search engines go beyond simple keyword matching. They attempt to understand user intent and context, which is referred to as semantic search. This helps deliver more accurate and meaningful results to users.

6. Insight for Marketers

Search engines also provide valuable marketing intelligence, including:

• Customer search patterns
• Top trending keywords
• Competitor keyword strategies and customer responses

Summary Table

In conclusion, search engines work by combining automated indexing, algorithmic ranking, optimization techniques, and paid advertising models to connect users with relevant information and help businesses reach their target audience effectively.