1 Three things about e-Business Chris Avram Computer Science and Software Engineering Monash University

1

Three things about e-Business

Chris AvramComputer Science and Software EngineeringMonash University

e-Business tech talk Chris Avram E-Bus 2

Agenda

Security - safe enough at this speed B2C - usability - the three Ss

– speed of transfer– speed of response– more speed

Mobile technologies - futures– wireless LAN, WAP, GPS


Security is

Confidentiality– only those authorised have access to data

Authentication– the identity claimed can be verified

Availability– access is available as and when required

Integrity– information is modified only as it should be


Security is needed for Legal and ethical need

– OECD privacy guidelines– Australian privacy act and commission– OECD guidelines for security of information

Technical need– e-Business– public networks– packet switched networks

Customer confidence


Internet strategy

Local area network Wide area network Internet - global network

– customer/client access– inter-organisation systems

Intranet– Internet technology for WAN


The networked organisation

LANLAN

Internet

customers LAN

SOHOSOHO

Legend

Anotherorganisation

Secure line

Insecure


Outdated security measures

Passwords to identify users/clients– access restricted to logged on users– Netware, NT encrypt passwords– eaves dropping on other P/Ws possible

Physical access controls– guarantees server identity– reduces electronic eaves dropping

Typical of EDI service providers services


Threats

Impersonation– of clients– of servers

Passive electronic eaves dropping Modification of information in transit Traffic analysis Denial of service


Current security measures

Public key crypto-systems– allow electronic signature and verification– allow confidential exchange of information

Certificates– signed by a certificate authority (CA)– proof of identity

» containing a public key

SSL (for WWW), pgp, s/mime (for Email)


Public key crypto-systems

Send message

Receivemessage

Secretkey

Publickey

Public key directory Make

Keys

Eavesdropper

#$@!&*^##%


Public key signature-systems

Signmessage

Checksignature

Secretkey

Publickey

Public key directoryMake

Keys

Fraudster

clear message:$@!*^##%


Certificates

Certificate Authority

ClientServer

Signed server certificate

#$%^@$%^&#

Signed server certificate

CA public key

Source http://www.x509.com/

Certificate request


Secure linksClient Server

Info. Request

Certificate

#@$%^$#@

#$%^&*%$@

eg. Visa number

time

eg. fee forservice info.


Certificate authorities - Public

Public CAs – Australia Post– RSADSI– AT&T

Customers will get browsers with CA certificates included

$US250 per server per annum


Certificate authorities - Private

Software from » Netscape» Microsoft» public domain

Organisation – chooses level of proof of identity – makes CA certificates available, manages

revocation list No ongoing fees


Recommendation If a large organisation plans to use the Internet for

more than the distribution of public information– eg. selling, collecting $ or personals, customer

confidential communications

Then it should consider running a private certificate authority:– 1. Create a secure version of your WWW server

– 2. Install CA software

– 3. Begin testing with selected mobile staff...

Small organisations should use a service provider


Reference RSA DSI http://www.rsa.com/ CA demo http://www.x509.com/ Secure servers

– Netscape http://home.netscape.com/

– Apache http://Bond.edu.au/External/Misc/apache/

– Microsoft http://www.microsoft.com/ SSL capable WWW client Netscape 2.02 or later; IE This file is

http://www.csse.monash.edu.au/~cavram/papers/lawtech/e-bus.ppt


B2C - usability - the three Ss The Internet delivers data Measured in bits, carried in files

– file format, coding– file compression

http://www.csse.monash.edu.au/~cavram/papers/lawtech/pics

– Netscape; View; Page Info shows details Data transfer time is a function of file size and

transfer speed (in bits per second) Response time?


Customer premises equipment PC to Modem to phone line 33,000 bits/s PC to Mobile phone 9,600 bps PC to “Broadband” 500,000 bps

– http://www.bigpond.com/broadband/– Cable modem to Cable TV network– ADSL to exchange– Satellite dish to S. & Modem to phone

PC to ISDN TA to exchange 64,000 bps WAP 9,600 bps


Speed of transfer & ResponseClient Server

Info. Request 1

File 1 sent

time

Server response time

Info. Request 2 Server response time

File 2 sent

Info. Request 3

WWW pagein 3 parts

File 1 transfer time


Usability - the three Ss

Time to display a page is the sum of the component transfer times (total information to be sent) PLUS one average response time per component

look at some poorly designed pages -– too many files, one image or clickable map

would be better» use Netscape; View; Page Info» http://www.csse.monash.edu.au/~cavram/papers/lawtech/pics


Internet at home and about

% of users Avail. To% of pop.

Fixed $/m. Var. $/hr. Bits/s.

Modem 97% 90% $20 $5.00 28,000 –56,000

CableADSLSatellite

~2 90% $65 $0 100,000 –500,000

Mobile Ph ~1 97% $20 $35 9,600

ISDN ~1 100% $65 $5 - $10 64,000 –128,000


Reference Telstra Bigpond Broadband http://www.bigpond.com/broadband/

Tesltra Bigpond Home Internet http://telstra.com/

Usability sources http://www.useit.com/alertbox/

– I like vodo usability http://www.useit.com/alertbox/991212.html

– I like why test 5 http://www.useit.com/alertbox/20000319.html

– I like the need for speed http://www.useit.com/alertbox/9703a.html

This file ishttp://www.csse.monash.edu.au/~cavram/papers/lawtech/e-bus.ppt


Mobile technologies - futures

Internet anywhere– wireless LAN– WAP– PDA– Mobile phone

Location based services– GPS


wireless LAN

Range 400 m, office floor Can be linked: “campus” wide mobility Like the move to mobile phones, lower

building operation costs, no fixed wires (well power still needed)

Little effect on e-Business


WAP Wireless Application Protocol Mobile phone small screen based Internet web

browsing, charged by the minute SMS short messages very popular for person to

person messages; pager function over SMS popular; usability testing shows WAP has a long way to go

Little short term effect on e-Bus, may be 3 years before it has any


PDA

Speculation is that PDAs will become phones (hands free), screen size still a problem, at least wont have the ear to eye flipping

Notebooks with built in phones, now that’s for me

Need the next generation of network to get the speed up look at phone Internet demo...


Mobile phone

Mobile phone connected to notebook, see the previous slide

Notebook/PDA/Phone convergence with the new networks over three years away in Australia

This is the state of the art in mobile Internet, plan for it at 9,600 bits/sec

A web page design/usability issue


GPS

$US 15,000,000,000 per year business Transport applications

– dynamic dispatch Precision Agriculture In 5 years, sub decimetre location in the

open


Reference GPS http://www.igeb.gov/

This file ishttp://www.csse.monash.edu.au/~cavram/papers/lawtech/e-bus.ppt

Documents

1 Three things about e-Business Chris Avram Computer Science and Software Engineering Monash University