Enhancing E-Commerce Processes with Alerts and Web Services: A case study on Online Credit Card Payment Notification Winnie N.Y.Yan Dept. of Computer Science, HKUST Dickson K. W. CHIU Senior Member, IEEE Dickson Computer Systems Hong Kong

e-NotificationICMLC Introduction Increase credit card payment security with double confirmation (on alternative channels) Notified Credit Card Payment System (NCCPS) Support online payment as well as traditional usage Complements / augments services like: “Verify by VISA” / “MasterCard SecureCode”

e-NotificationICMLC Solution Overview Web services Information and process integration among different parties Shielding the communication and process complexity Alert Management Manage messaging, resending, routing, logging, etc. Different urgency policy, e.g., credit limit, lost card report, etc.

e-NotificationICMLC Case Study: Credit Card Payment

e-NotificationICMLC Case Study: Security Notification / Confirmation CustomerMerchant Bank Mobile Content Provider Internet SMS to/from client Purchase product provided by Merchant Request credit card payment by customer‘s information Perform the credit card transaction Double Confirmation by SMS CustomerMerchant Bank Mobile Content Provider Internet SMS to/from client Purchase product provided by Merchant Request credit card payment by customer‘s information Perform the credit card transaction Double Confirmation by SMS

e-NotificationICMLC Alert Conceptual Model

e-NotificationICMLC The role of Alerts in Confirmation Systems Confirmation Systems and Workflows Event/Exception Handling Process Requirements Alerts Managed by AMS Web Services and Mobile Devices

e-NotificationICMLC System Architecture Customer Bank Mobile Service Provider Merchant Customer Service Call center Bank search Bank Database Mobile Number Request Notified Credit Card Payment System (NCCPS) Confirmation request Alert Monitor Log Database Mobile Service Provider Search Mobile Database Alert sent request Confirmation Response Payment request /reject Payment response Alert Management System (AMS)

e-NotificationICMLC AMS Mechanism Urgencies Strategy Definition Modules Service Provider Monitoring Module Incoming Alert Monitor Outgoing Alert Monitor Database Process Execute Module Process / Alert Definition Module System Workflow and Application Logic Alert Management System (AMS) Execute Alerts Handlers Create Alerts Outgoing Alerts Outgoing Alert Response Incoming Alerts Incoming Alerts Response

e-NotificationICMLC Sample Alert Confirmation User Interface

e-NotificationICMLC Typical Lifecycle of a Confirmation Alert

e-NotificationICMLC Web Service Design Service Name: requestPaymentAgent Input: MerchantID, CustomerID, CustomerCreditCardInfo, ProductInfo, AmountPayment, ResponseRequired (YES|NO)) Response: MerchantID, CustomeID, TracsactionResult (Completed | Incompleted), ResponseMessage Service Name: requestMobileNo Input: MerchantID, CustomerID, CustomerCreditCardInfo, AmountPayment, ResponseRequired (YES|NO)) Response: MerchantID, CustomerID, CustomerMobileNumber Service Name: completeTransaction Input: MerchantID, CustomerID, ConfirmationResult (Confirmed| Rejected), ResponseRequired (YES|NO)) Response: MerchantID, CustomerID, TracsactionResult (Completed| Incompleted), ResponseMessage

e-NotificationICMLC Exception Handling Services Service Name: reportLost Input: LostID, CustomerID, CustomerInfo, ResponseRequired (YES|NO)) Response: LostID, CustomerID, AccountLock (Yes | No) Service Name: reportAction Input: CrimeID, CrimeMessage, CustomerInfo, ResponseRequired (YES|NO)) Response: CrimeID, Received(Yes | No) Service Name: creditLimit …

e-NotificationICMLC Web Services Based Integration Interfaces different process enactment systems, enforcement system, and exception handling Offers a unified platform for both manual and programmatic interfaces Automates the data and process integration with partners’ systems

e-NotificationICMLC Conclusion Effectively enhances and manages the confirmation / notification procedures Application of alert mechanism and Web services Integrates processes and data among different parties Effective and timely exception handling can be achieved

e-NotificationICMLC Future Work More integration: Link up / alert for other financial systems Elevation of urgency and routing Data mining for security analysis, CRM, etc. Detailed performance evaluation of the system Use questionnaires to evaluate the satisfaction of various stakeholders Security and privacy issues

e-NotificationICMLC Question and Answer Thank you! Contact: