Comprehensive Notes – Payment Systems for Electronic Commerce

Chapter Overview and Objectives

• Chapter $7$ focuses on Payment Systems for Electronic Commerce.
• Learning goals include:
• Understanding the basic functions of online payment systems.
• Mastering the use of payment cards (credit, debit, charge) in e-commerce.
• Exploring the history, mechanisms, and future of electronic cash.
• Explaining how electronic wallets work and their variants.
• Examining stored-value cards (magnetic-stripe, smart cards) in digital commerce.
• Assessing the impact of Internet technologies on the banking industry (e.g., Check $21$, phishing).

Malaysia E-Commerce Payment Landscape

• Malaysian market characterized by diverse options and mobile focus.
• Share of e-commerce payment volume (PCMI E-commerce Data Library):
• Credit card — $30\%$
• Digital wallet — $25\%$
• Debit card — $10\%$
• Bank transfers — $10\%$
• Cash on delivery — $10\%$
• Buy Now Pay Later (BNPL) — $8\%$
• Cash payments — $5\%$
• Other — $2\%$
• Malaysian online-shopper profile:
• Current shoppers ≈ $10$ million; projected $18.8$ million by $2029$.
• $8$ out of $10$ Malaysians made an online purchase in the past year.
• $61\%$ purchase at least one item/service online each week.

Payment Cards

Types of Payment Cards

• Payment card = any plastic card used for purchases.
• Credit card: spending limit tied to user’s credit history.
• Debit card: directly debits cardholder’s bank account; funds transferred to seller.
• Charge card: no preset spending limit; entire balance due at billing cycle end.

Advantages & Disadvantages

• Advantages
• Worldwide acceptance.
• Built-in security mechanisms benefiting merchants.
• Disadvantage
• Card service companies impose per-transaction & monthly processing fees on merchants.

Acceptance & Processing Workflow

• Steps after merchant receives card data:
• Authenticate the card.
• Check with issuer to verify available credit/funds.
• Place a hold (authorization) on required amount.
• Settlement: funds transferred through clearing/settlement networks.

Open vs Closed Loop Systems

• Closed loop: card issuer pays merchants directly; no intermediary (e.g., American Express, Discover models).
• Open loop: $\ge 3$ parties (issuer, acquirer, networks). Visa & Mastercard are classic examples.

Merchant Accounts & Online Processing Services

• Internet merchants must open a merchant account; new applicants submit:
• Business plan, bank-account details, business & personal credit histories.
• Popular processors/solutions:
• InternetSecure — secure card services.
• First Data — ICVerify & WebAuthorize gateways.
• Banks connect to ACH (Automated Clearing House) via secure leased lines to clear transactions (Fig. $11\text{-}3$).

Electronic Cash

• Electronic cash (e-cash): privately issued value-storage & exchange system; no paper/coins; substitutes government currency.
• Two sweet spots:
• Goods/services costing <!\$10.
• Customers without access to credit cards.

Micropayments & Small Payments

• Micropayments: $\approx$ a few cents – $1$ dollar.
• Small payments: <!\$10.

Privacy, Security, & Storage

• Key concerns: privacy, security, independence, portability, convenience.
• Online cash storage: third-party holds accounts; intervenes in every transfer.
• Offline cash storage: value kept on user device; no third party; risk of double spending (spending same token twice).

Advantages & Disadvantages

• Advantages
• More efficient vs. card processing; lower transfer cost.
• Disadvantages
• No inherent audit trail.
• Facilitates money laundering.
• Potential for forgery.

Security Techniques

• Cryptographic algorithms create tamper-proof tokens traceable to origin.
• Anonymous e-cash: cannot be traced to spender; requires issuing bank to embed serial numbers & blind signatures.
• Double-spending detection: merchants append locks/info; banks track serial #s (Fig. $11\text{-}4$).

Major Electronic Cash Systems

• CheckFree: world’s largest online bill processor; bill-pay services.
• Clickshare: targets magazine & newspaper publishers for paid content.
• PayPal (Fig. $11\text{-}6$):
• P2P clearing service, free for individuals.
• >86.6 million accounts (circa $2005$).
• Features: fraud protection, merchant tools, mass-pay, rewards.

Electronic Wallets

Functionality & Benefits

• Store credit-card data, e-cash, IDs, shipping/contact info.
• User enters info once; wallet supplies it at checkout.
• Houses multiple payment methods; streamlines shopping.

Variants

• Server-side wallet: info stored on remote server (merchant or wallet provider).
• Client-side wallet: info stored locally on user’s device.

Prominent Examples

• Microsoft .NET Passport: four services — Single Sign-In, Wallet, Kids Passport, Public Profiles.
• Yahoo! Wallet: server-side; stores multiple major cards; privacy advocates voice concerns.

Standards Activity

• W3C Micropayment Standards (ECIG)
• Develop common markup for per-fee links.
• Goal: extensible, interoperable embedding of payment info in Web pages, enabling developers to extend without breaking prior work.

Stored-Value Cards

Magnetic Strip vs Smart Cards

• Magnetic-stripe cards
• Cannot transmit/receive; value update requires physical reader.
• Unsuitable for dynamic Internet payments.
• Smart cards (elaborate stored-value cards)
• On-board microchip; can increment/decrement value.
• Store $\approx100$× more data than mag-stripe; hold private user data.
• Safer than traditional credit cards.

Real-World Illustration: Octopus Card (Hong Kong)

• “Touch and go” smart-card used across $\approx80$ providers (transport & retail).
• Benefits: no loose change; automatic fare deduction; discounts on designated routes (Fig. $11\text{-}7$).

Smart Card Alliance

• Industry body promoting multi-application smart-card tech & compatibility among cards, readers, and apps.
• Membership spans banking, finance, IT, healthcare.

Internet Technology & Banking Industry

• Paper checks remain highest dollar-volume payment instrument.
• Check Clearing for the $21^{st}$ Century Act (Check $21$)
• Allows banks to eliminate physical check transport; substitute electronic images (truncate & exchange).

Phishing Attacks

• Anatomy:
• Mass e-mail claims user account compromised; urges correction.
• Includes link to fake site; victim enters credentials that attacker harvests.
• Attacker obtains personal info & account access.
• Countermeasures:
• User education is paramount.
• Firms hire specialized anti-phishing consultants.
• Techniques include monitoring chat rooms where fraudsters trade data.

Summary & Key Takeaways

• Dominant Internet payment forms: digital/e-wallets, credit cards, debit cards.
• Electronic cash: portable, anonymous, ideal for small/international transactions, but U.S. adoption remains slow.
• Electronic wallets enhance convenience and reduce repetitive data entry.
• Smart cards aim to consolidate today’s multiple plastic cards into a single, multi-function, secure medium.
• Rising phishing episodes create critical threats to online financial institutions and consumers.