Preliminary Syllabus

(Spring 2001)Last Modified : March 8, 2001 By Kwangjo Kim

1. Course Title	Computer Security and Electronic Payment System
2. Course Number	ICE525
3. Professor	Kwangjo Kim
4. *Lec:Exp:Cre	3 : 0 : 3
5. Lecture Times	Wed. 15:00~18:00
6. Others	Tel. 042 - 866 - 6118, E-mail: kkj@icu.ac.kr

Lec : Lecture, Exp: Experiment, Cre: Credit

7. Course Objecitves

   This course offers how to design electronic payment system and its building blocks. After introducing the concepts of money and the basic knowledge of information security techniques such as block cipher, public key cryptosystems, digital signature scheme and hash function, we deal with SET, SSL, micropayment system, smart card, electronic cash, and electronic banking. The students will be capable of understanding secure payment system and its significance and vulnerablilites and evaluating various primitives for secure electronic commerce. 

8. Textbook

• Required Textbook : 

Mostafa H. Sheriff, Protocols for Secure Electronic Commerce, CRC Press, 2000, ISBN 0-8493-9597-6 

• Recommended Reading Material : 

- W. Ford and M.S.Baum, Secure Electronic Commerce, Prentice Hall, 1997, ISBN0-13-476342-4 
- Menezes et al, Handbook of Applied Cryptography, CRC Press, 1997, ISBN 0-8493-8523-7
- Donal O'Mahony et al, Electronic Payment Systems, Artech House, 1997, ISBN 0-89006-925-5
- 이 만영외 5인, 전자상거래 보안기술, 생능출판사, 1999
- Handouts, etc 

9. Evaluation

Classification	Midterm Exam	Quiz	Final Exam	Home work	Term Project	Term Paper	Attendance	Total
Percentage	15%	5%	25%	15%	15%	20%	5%	100%

10. Course Schedule

Week	Contents	Remark
1st week	Introduction(Types of money and payment systems)
2nd week	Epayment Security(I) (Cryptography)	TP Report #1
3rd week	Epayment Security(II)(Digital Signature)	Homework#1
4th week	Credit Cards(I) (SSL/TLS)
5th week	Credit Cards(II) (SET)	Homework#2
6th week	TP Contest #1	TP Report #2
7th week	Mid-term Exam
8th week	Micropayment(I)
9th week	Micropayment(II)	Homework#3
10th week	Electronic Cash(I)
11th week	Electronic Cash(II)	Homework#4
12th week	Smart Card(I)	Quiz#2
13th week	Smart Card(II)	TP Report #3
14th week	TP Contest #2	TP Paper
15th week	Final Exam

Above 'Course Schedule' is supposed to be changed depending on circumstances

· Download Syllabus File 

· Bulletin Board 

· Go to Cyber ICU and find ICE525 

· TA 
   Manho Lee                  Byoungcheon Lee
   Tel. 042 - 866 - 6168     042 - 866 - 6236
E_mail: lmh@icu.ac.kr E_mail: lmh@icu.ac.kr 

11. Lecture Notes & Term Projects

Term Project of Electronic Commerce (Summer, 1998)

1. 서문석, 허원근, 류희정, 김 경환, 인증기관의 구축 기술 조사 연구,  중간보고, 최종보고

2. 안소연, 정영근, 박종봉, 박지윤, 전자 상거래 용 Web site 구축 기술연구, 제안, 최종보고

3. 김만두, 정규화, 이상우, 김보연, 김희선,국내외 전자 쇼핑몰 구축 현황 및 발전 방향,  최종보고,  최종 논문

4. 이승용,백종현,김은미,황규범, 전자상거래 기본법 등의 현황 및 문제점, 최종 보고(zipped hwp),  최종논문(zipped hwp)

5.김규백,김성회,장영근, 전서문서화 기술 동향 및 분석과 현실감 있는 가상 상거래
   지원을 위한 VRML 기술 조사,     최종발표,  최종논문

USEFUL REFERENCE CITES

1. GENERAL

• http://www.nic.fr : Contains data on Internet usage in Europe
• http://www.ustreas.gov/press/releases : U.S. Department of Treasury
• http://www.bis.org : Site of the Bank of International Settlements, which  contains data on transactions with the various scriptual means of payments for the G-10 countries.

• http://www.disa.org/apps/acroglos : Glossary of acronyms of EDI
• http://www.r3.ch/standards/edifact/faqs/htm : Contains frequently asked questions (FAQ) on EDIFACT
• http://www-elf.stanford.edu/biblio.html : Site that Pamela Bluh maintains with bibliographic references on  EDI                                                              (periodical, books, Web sites, articles)

2. STANDARDS

• http://web.ansi.org : ANSI (American National Standards Institute)
• http://www.iata.org : IATA (International Air Transport Association)
• http://www.cenorm.be/ebes : EDIFACT
• http://www.ietf.org/home.html :  IETF
• ftp://ftp.rsa.com/pub/pkcs : Information on the PKCS industry standards
• http://www.w3.org : W3C standards for electronic payment
• http://www2.echo.lu/oii : Site of the Directorate General DGXIII/E of the European Commission - gives a detailed and annotated  list of  the standards of electronic commerce and the organization that are responsible for their development.

3. ENCRYPTION

• http://www.rsasecurity.com/rsalabs : Excellent FAQ on the theory and practice of cryptographic systems.
• http://www.valicert.com/resources : List various participants in the certification field (authorities, supplies, products, etc) and

contains a list of certification authorities in North America.

• http://www.verisign.com : Site of certification authority Verisign, a subsidiary of RSA Data Security
• http://www.counterpane.com : Gives information on the practice of cryptography
• http://csrc.nist.gov/pki : Gives information on the PKI program of NIST

4. EDIFACT

• http://lexmercatoria.org : Publishes UNCITAL Model Law on Electronic Commerce of 1996
• http://www.ewos.be : Publications of EWOS (European Workshop for Open Systems), formed by the European industry with the support of the European Commission to encourage compatibility among software solutions and to guide   the standardization work at the European and world-level levels. In 1997, EWOS became ISSS (Information  Society Standardization System) within the European Committee for Standardizatoin (CEN) focusing on the integration of XML and EDI in Europe
• http://www.permenos.com/klaus/security : Contains several EDIFACT documents

5. XML

• http://www.oasis-open.org/cover : Contains daily updated information in XML
• http://msdn.microsoft.com/xml : Microsoft proposed solutions for EDI/XML integration
• http://www.geocities.com/WallStreet/Floor/5815/index.html  Site of XML/EDI group working to integrate XML with EDI in purchasing applications, healthcare, project management, etc.There proposals are presented to the standardization body in collaboration with ISSS od CEN
• http://www.commerce.net : CommerceNet, an industrial nonprofit consortium for the promotion  of global solutions for electronic commerce
• http://www.fstc.org/projects/sdml : FTSC (Financial Services Technology Consortium) site on the use of XML for banking applications and dematerialized checks.

6. SSLEAY

• http://www.consensus.com/security/SSL-talk-faq.html
• http://www.psy.uq.oz.au/~ftp/Crypto : Information on SSLeay

7. SET

• http://www.mastercard.com/set
• http://www.visa.com  SET protocols can be downloaded from these two sites. Terisa maintains two mailing lists for SET developers. The first is free and the second requires a suscription fee of $25,000. Subscribe to the free list by sending an e-mail to Majordomo@terisa.com, containing the following message. subscribe set-dev <address e-mail> Responses to requests for subscription to the free list may never arrive.

8. PURSES

• http://cfec.vub.ac.be/cfec/purses.htm  Leo Van Hove, together with volunteer collaborators, maintains a free bibliographic site on the various electronic purses. The references cover the following purses : American Express, Avant, CAFE, Cash, CashCard, Chipknip, Chipper, Primeur Card, Clip, Danmont, ECARD, ESCA, Exact, Geldkarte, Button, MasterCard Cash, MEP, MINIpay, Mondex, Proton, Quick, Quicklink (ECARD), TIBC, Visa Cash, Visa Roskart.

9. MICROPAYMENTS

• http://www.intertrader.com/library/DigitalMoneyOnline/dmo/dmo.htm Presents the following micropayment schemes : CAFE, CheckFree, CyberCash, Digicash, FSTC, First Virtual Internet Keyed Payment Protocol, JEPI, Millicent, Mondex, Netbill, NetCash, NetCheque, Secure Electronic Transanction (SET)
• http://www.ecashtechnologies.com : DigiCash
• http://www.ini.cmu.edu/netbill    : NetBill
• http://www.isi.edu   : NetCash
• http://www.isi.edu   : NetCheque

10. SMART (MICROPROCESSOR) CARDS

• http://www.cardeurope.demon.co.uk : Card Europe, an association to promote the application of smart cards.
• http://www.geocities.com/ResearchTriangle/Lab/1578/smart.htm : Maintained by Bo Lavare on smart card securities. Contains information on GSM cards and TV cards for cable or satellite. The newsgroup alt.technologies.smartcards publishes a FAQ with the latest details.
• http://www.visa.com or http://www.mastercard.com : Publishes the EMV'96 specification on the use of smart cards for payment system
• http://www.opencard.org : Managed by the OpenCard Consortium. Contains technical details on the OpenCard Framework
• http://www.pcscworkgroup.com : Contains the PC/SC specifications on the interoperability of smart cards and PCs under Windows.
• http://java.sun.com : Gives the JavaCard specifications
• http://www.seis.se : SEIS (Secured Electronic Information in Society), a nonprofit Swedish association, publishes the specifications of the electronic identity card that was later adopted as a Swedish Standard.

11. ELECTONIC AND VIRTUAL CHECKS

• http://www.ftsc.org : Site of FSTC which gives information about the U.S. project on dematerialized checks.
• http://www.echeck.org : Site that gives the BIPS specifications and contains a FAQ on the Echeck project
• http://www.netcheque.org : Presents the prototype of the NetCheque system

12. SEMPER

http://www.semper.org : Publishes the SEMPER documents.