eCommerce systems are increasingly gaining importance in modern digital markets. Since most electronic transactions occur on a range of platforms, securing e-commerce transactions using Mobile Agents in dynamic environments is a concern for enterprise, stakeholders and users. My question relates to which how online transactions may achieve privacy, integrity, authentication, non-repudiation from the perspective of both data security (ciphers) and transaction security that affects how digital products may be exported to other countries. Previous discussions about security for online transactions include e-Banking, fraud prevention and credit cards.Although some aspects of security have been covered, what are the following aspects fully secure against cryptanalysis?
Privacy and confidentiality
Encryption algorithms such as Triple-DES,AES,SHA and Saville(voice encryption) partly explain how privacy and confidentiality can be used to secure enterprises but how do these systems assist in the context of unauthorized dissemination of sensitive data in dynamically changing mobile environments?
Authentication
In different environments, different best effort strategies are used for continuous authentication. Ideally, only the intended information is provided to the appropriate party at the desired moment. Unlike traditional known environments, it can sometimes be difficult to handle multitude of electronic identities or manage their relationships (i.e. among users, service providers) efficiently.
Non-repudiation
In the context of mobile payments via smartphones, NFCs etc, financial transactions currently derives security from the SIM cards. In the future, biometrics instead of digital signatures is likely to be employed. This opens up another level of discussion which would not be explored on this thread.
