1. Project Name A Secure Shopping Mall Date: 2001. 4. 11 Course Name: Computer Security & Electronic Payment System Team Members:Jung Yong Duk Kim Jung Young Jo Eun Young Jun Jin Sun

2. 2 목차 1. Introduction 2. Implementation 2.1 Client Interface 2.2 Business Logic & Back-end Logic 2.3 SSL Based Security 3. Java Security 4. n-tier Shopping Mall 5. Prototype Application Flow 6. Future Plan

3. 3 1. Introduction Book Store implementation Security Services provide customers with Trust(peace of mind) no security service -> no trust Java & XML Technology open platform standard Early Prototyping & Incremental Implementation

4. 4 2. Implementation Security & eCommerce SSL2 & SSL3 Java Technology & eCommerce JSP & Servlet(Tomcat) XML & eCommerce XML Schema & XSLT Apache Web Server

5. 5 3. Java Security (SSL) Public Key Encryption(PKE) SSL Handshake Protocol Client Server Client Server Request Public Key E(Master key) Master Key

6. 6 4. N-Tirer Shopping mall Presentation Logic Business Logic Data Access Objects JSP Engine JSP Engine Client DB JSP,Servlet, XML,images JSP,Servlet, XML,images Java Beans Web Server

7. 7 5. Prototype Application Flow Login Screen for Registered Customers Login Screen for Registered Customers Payment Option Credit card Payment Credit card Payment Accept Credit Card Details Accept Credit Card Details Payment Gateway Thank you Note to Customer Thank you Note to Customer YES Approved Choose Another book Choose Another book Choose a Book Select Quantity Shipping Option Display Order Form YES NO Welcome Screen

8. 8 6. Future Plan Technical Upgrade Business Logic : EJB Data Engine : SQL Server, Oracle, Informix Commercial Service Electronic Payment System Credit Card, Smart Card Support for Legacy System Support for eBusiness