Digital Receipt

Onno W. Purbo
Onno@indo.net.id
Reference
 http://www.valicert.com/corporate/libra
ry/flash/digital_receipts.html
 Applied Digital Receipts Solution,
ValiCert
Gambaran Masalah
 Perlu bukti transaksi.
 Paper based evidence with handwritten
signature.
 50% komplain di VISA karena Internet
Commerce, yang hanya 2% dari
revenue.
Solusi yang dibutuhkan
 Non-repudiation for e-transaction.
 Capture transaction specific
information.
 Safeguard info in a tamper-evident
digital vault.
Internet Security Today
 Authentication
 Access Control
 Data privacy

 Comments
 Transaction integrity & authenticity must be
verifiable, even for complex transaction with
numerous trading partners.
Solusi
 Legal grade proof management.
 Digitally signed.
 Time stamped.
 Verified.
 Audited.
Contoh Digital Receipt
Solutions
Standar Based Digital Signing
 LDAP Directory.
 X.509 certificates.
 SSL Browser.
Digital Receipt Achieve
 Evidence Creation
 Evidence Storage
 Evidence Access
 Evidence Verification
 Non-repudiation
 Origin
 delivery
Non repudiation of origin
 Who initiated this transaction?
 Who was transacted?
 When was the transaction completed?
 Was the transaction tampered with
during transmission?
Non repudiation of delivery
 Was my transaction initiated?
 What was transacted?
 When was the transaction completed?
 Was the transaction tampered with
during transmission?
Digital Receipt Solution
Architecture
Receipt Notary
 XML based confirmation capture:
 various element of transaction
 Parties involved.
 Time of transaction.
 Generating Evidence for non-
repudiation of origin & delivery.
Receipt Notary
Receipt Notary at Multiple
Points of Transaction Flow
Receipt Vault
 Collating
 Reconciling.
 Storing.
 Analyzing.
 Querying.
 Validating digital receipts.
Contoh e-commerce
+ Digital Receipt
Monitor key e-commerce
transaction points
Transaction Confirmation
Format Overview
4 key sections
 <BaseReceipt>
 Signature of issuer
 Transaction info
 <Signatures>
 Non repudiation
 <Certificates>
 Non repudiation
 <Endorsements>
 Non repudiation
Simple
Puchase Transaction Flow
Multiple Invoice
Inter-related Purchase
Transaction Flow
Putting It All Together
Contoh Proses
 Purchase Order
 Invoice
 Delivery Notice
M-commerce