Preliminary Syllabus

(Spring 2001)Last Modified : March 8, 2001 By Kwangjo Kim

1. Course Title	Computer Security and Electronic Payment System
2. Course Number	ICE525
3. Professor	Kwangjo Kim
4. *Lec:Exp:Cre	3 : 0 : 3
5. Lecture Times	Wed. 15:00~18:00
6. Others	Tel. 042 - 866 - 6118, E-mail: kkj@icu.ac.kr

Lec : Lecture, Exp: Experiment, Cre: Credit

7. Course Objecitves

This course offers how to design electronic payment system and its building blocks. After introducing the concepts of money and the basic knowledge of information security techniques such as block cipher, public key cryptosystems, digital signature scheme and hash function, we deal with SET, SSL, micropayment system, smart card, electronic cash, and electronic banking. The students will be capable of understanding secure payment system and its significance and vulnerablilites and evaluating various primitives for secure electronic commerce.

8. Textbook

Required Textbook :

Mostafa H. Sheriff, Protocols for Secure Electronic Commerce, CRC Press, 2000, ISBN 0-8493-9597-6

Recommended Reading Material :

- W. Ford and M.S.Baum, Secure Electronic Commerce, Prentice Hall, 1997, ISBN0-13-476342-4
- Menezes et al, Handbook of Applied Cryptography, CRC Press, 1997, ISBN 0-8493-8523-7
- Donal O'Mahony et al, Electronic Payment Systems, Artech House, 1997, ISBN 0-89006-925-5
- 이 만영외 5인, 전자상거래 보안기술, 생능출판사, 1999
- Handouts, etc

9. Evaluation

Classification	Midterm Exam	Quiz	Final Exam	Home work	Term Project	Term Paper	Attendance	Total
Percentage	15%	5%	25%	15%	15%	20%	5%	100%

10. Course Schedule

Week	Contents	Remark
1st week	Introduction(Types of money and payment systems)
2nd week	Epayment Security(I) (Cryptography)	TP Report #1
3rd week	Epayment Security(II)(Digital Signature)	Homework#1
4th week	Credit Cards(I) (SSL/TLS)
5th week	Credit Cards(II) (SET)	Homework#2
6th week	TP Contest #1	TP Report #2
7th week	Mid-term Exam
8th week	Micropayment(I)
9th week	Micropayment(II)	Homework#3
10th week	Electronic Cash(I)
11th week	Electronic Cash(II)	Homework#4
12th week	Smart Card(I)	Quiz#2
13th week	Smart Card(II)	TP Report #3
14th week	TP Contest #2	TP Paper
15th week	Final Exam

Above 'Course Schedule' is supposed to be changed depending on circumstances

· Download Syllabus File

· Bulletin Board

· Go to Cyber ICU and find ICE525

· TA
   Manho Lee                  Byoungcheon Lee
   Tel. 042 - 866 - 6168     042 - 866 - 6236
   E_mail: lmh@icu.ac.kr E_mail: lmh@icu.ac.kr

11. Lecture Notes & Term Projects

Term Project of Electronic Commerce (Summer, 1998)

1. 서문석, 허원근, 류희정, 김 경환, 인증기관의 구축 기술 조사 연구, 중간보고, 최종보고

2. 안소연, 정영근, 박종봉, 박지윤, 전자 상거래 용 Web site 구축 기술연구, 제안, 최종보고

3. 김만두, 정규화, 이상우, 김보연, 김희선,국내외 전자 쇼핑몰 구축 현황 및 발전 방향, 최종보고, 최종 논문

4. 이승용,백종현,김은미,황규범, 전자상거래 기본법 등의 현황 및 문제점, 최종 보고(zipped hwp), 최종논문(zipped hwp)

5.김규백,김성회,장영근, 전서문서화 기술 동향 및 분석과 현실감 있는 가상 상거래
지원을 위한 VRML 기술 조사, 최종발표, 최종논문

USEFUL REFERENCE CITES

1. GENERAL

http://www.nic.fr : Contains data on Internet usage in Europe
http://www.ustreas.gov/press/releases : U.S. Department of Treasury
http://www.bis.org : Site of the Bank of International Settlements, which contains data on transactions with the various scriptual means of payments for the G-10 countries.

http://www.disa.org/apps/acroglos : Glossary of acronyms of EDI
http://www.r3.ch/standards/edifact/faqs/htm : Contains frequently asked questions (FAQ) on EDIFACT
http://www-elf.stanford.edu/biblio.html : Site that Pamela Bluh maintains with bibliographic references on EDI (periodical, books, Web sites, articles)

2. STANDARDS

http://web.ansi.org : ANSI (American National Standards Institute)
http://www.iata.org : IATA (International Air Transport Association)
http://www.cenorm.be/ebes : EDIFACT
http://www.ietf.org/home.html : IETF
ftp://ftp.rsa.com/pub/pkcs : Information on the PKCS industry standards
http://www.w3.org : W3C standards for electronic payment
http://www2.echo.lu/oii : Site of the Directorate General DGXIII/E of the European Commission - gives a detailed and annotated list of the standards of electronic commerce and the organization that are responsible for their development.

3. ENCRYPTION

http://www.rsasecurity.com/rsalabs : Excellent FAQ on the theory and practice of cryptographic systems.
http://www.valicert.com/resources : List various participants in the certification field (authorities, supplies, products, etc) and

contains a list of certification authorities in North America.

http://www.verisign.com : Site of certification authority Verisign, a subsidiary of RSA Data Security
http://www.counterpane.com : Gives information on the practice of cryptography
http://csrc.nist.gov/pki : Gives information on the PKI program of NIST

4. EDIFACT

http://lexmercatoria.org : Publishes UNCITAL Model Law on Electronic Commerce of 1996
http://www.ewos.be : Publications of EWOS (European Workshop for Open Systems), formed by the European industry with the support of the European Commission to encourage compatibility among software solutions and to guide the standardization work at the European and world-level levels. In 1997, EWOS became ISSS (Information Society Standardization System) within the European Committee for Standardizatoin (CEN) focusing on the integration of XML and EDI in Europe
http://www.permenos.com/klaus/security : Contains several EDIFACT documents

5. XML

http://www.oasis-open.org/cover : Contains daily updated information in XML
http://msdn.microsoft.com/xml : Microsoft proposed solutions for EDI/XML integration
http://www.geocities.com/WallStreet/Floor/5815/index.html Site of XML/EDI group working to integrate XML with EDI in purchasing applications, healthcare, project management, etc.There proposals are presented to the standardization body in collaboration with ISSS od CEN
http://www.commerce.net : CommerceNet, an industrial nonprofit consortium for the promotion of global solutions for electronic commerce
http://www.fstc.org/projects/sdml : FTSC (Financial Services Technology Consortium) site on the use of XML for banking applications and dematerialized checks.

6. SSLEAY

http://www.consensus.com/security/SSL-talk-faq.html
http://www.psy.uq.oz.au/~ftp/Crypto : Information on SSLeay

7. SET

http://www.mastercard.com/set
http://www.visa.com SET protocols can be downloaded from these two sites. Terisa maintains two mailing lists for SET developers. The first is free and the second requires a suscription fee of $25,000. Subscribe to the free list by sending an e-mail to Majordomo@terisa.com, containing the following message. subscribe set-dev <address e-mail> Responses to requests for subscription to the free list may never arrive.

8. PURSES

http://cfec.vub.ac.be/cfec/purses.htm Leo Van Hove, together with volunteer collaborators, maintains a free bibliographic site on the various electronic purses. The references cover the following purses : American Express, Avant, CAFE, Cash, CashCard, Chipknip, Chipper, Primeur Card, Clip, Danmont, ECARD, ESCA, Exact, Geldkarte, Button, MasterCard Cash, MEP, MINIpay, Mondex, Proton, Quick, Quicklink (ECARD), TIBC, Visa Cash, Visa Roskart.

9. MICROPAYMENTS

http://www.intertrader.com/library/DigitalMoneyOnline/dmo/dmo.htm Presents the following micropayment schemes : CAFE, CheckFree, CyberCash, Digicash, FSTC, First Virtual Internet Keyed Payment Protocol, JEPI, Millicent, Mondex, Netbill, NetCash, NetCheque, Secure Electronic Transanction (SET)
http://www.ecashtechnologies.com : DigiCash
http://www.ini.cmu.edu/netbill : NetBill
http://www.isi.edu : NetCash
http://www.isi.edu : NetCheque

10. SMART (MICROPROCESSOR) CARDS

http://www.cardeurope.demon.co.uk : Card Europe, an association to promote the application of smart cards.
http://www.geocities.com/ResearchTriangle/Lab/1578/smart.htm : Maintained by Bo Lavare on smart card securities. Contains information on GSM cards and TV cards for cable or satellite. The newsgroup alt.technologies.smartcards publishes a FAQ with the latest details.
http://www.visa.com or http://www.mastercard.com : Publishes the EMV'96 specification on the use of smart cards for payment system
http://www.opencard.org : Managed by the OpenCard Consortium. Contains technical details on the OpenCard Framework
http://www.pcscworkgroup.com : Contains the PC/SC specifications on the interoperability of smart cards and PCs under Windows.
http://java.sun.com : Gives the JavaCard specifications
http://www.seis.se : SEIS (Secured Electronic Information in Society), a nonprofit Swedish association, publishes the specifications of the electronic identity card that was later adopted as a Swedish Standard.

11. ELECTONIC AND VIRTUAL CHECKS

http://www.ftsc.org : Site of FSTC which gives information about the U.S. project on dematerialized checks.
http://www.echeck.org : Site that gives the BIPS specifications and contains a FAQ on the Echeck project
http://www.netcheque.org : Presents the prototype of the NetCheque system

12. SEMPER

http://www.semper.org : Publishes the SEMPER documents.