A review and future research directions of secure and trustworthy mobile agent‐based e‐marketplace systems
---
paper_title: Secure and auditable agent-based e-marketplace framework for mobile users

paper_content:

Mobile agent based e-marketplace auction trading requires a secure and auditable system with a solid framework to support it. In investigating the requirements, it transpired that there is a lack of such a standardised framework. While mobility helps in avoiding network latency, particularly in increasing fairness in applications with bounded response times such as trading of auctions, it nevertheless raises issues concerning security, privacy and trust in protecting personal confidential information, managing and regulating legitimate trading and payment processing. These issues are of paramount importance and must be taken into consideration when designing a framework for modelling an auditable e-marketplace for mobile users. This also implies that there is also an underlying need to provide mobile users with simple, transparent and unobtrusive user interface. This paper proposes a framework that accommodates these requirements through protocol scenarios and highlight further research work that need to be performed.
---
paper_title: Secure and auditable agent-based e-marketplace framework for mobile users

paper_content:

Mobile agent based e-marketplace auction trading requires a secure and auditable system with a solid framework to support it. In investigating the requirements, it transpired that there is a lack of such a standardised framework. While mobility helps in avoiding network latency, particularly in increasing fairness in applications with bounded response times such as trading of auctions, it nevertheless raises issues concerning security, privacy and trust in protecting personal confidential information, managing and regulating legitimate trading and payment processing. These issues are of paramount importance and must be taken into consideration when designing a framework for modelling an auditable e-marketplace for mobile users. This also implies that there is also an underlying need to provide mobile users with simple, transparent and unobtrusive user interface. This paper proposes a framework that accommodates these requirements through protocol scenarios and highlight further research work that need to be performed.
---
paper_title: Security model of mobile agent in e-commerce

paper_content:

Having analyzed some security problems in e-commerce, a kind of security model of mobile agent in e-commerce was presented. In this security model, different access patterns, security policies and reputation management were used by mobile agent to reduce the risk in e-commerce as much as possible and the transactions of e-commerce more efficient was made.
---
paper_title: Research on Applied Technology of Mobile Agent in Electronic Business

paper_content:

With the development of Software Agent Technology, Electronic Commerce Technology in which Agent takes the role of medium is becoming more popular recently。Mobile Agent integrates artificial intelligence with network technology to solve the complex、dynamic、distributed intelligent problem。 Mobile Agent provides the technology support for resource discovery and automatic trade with its intelligent 、dynamic and mobile property。 This paper discusses the principle of mobile Agent and focuses on the technology of application to electronic business of mobile agent,and elaborates how to analysis and design the Research-Agent, Negotiate-Agent and Agent Communication Language.
---
paper_title: Secure and auditable agent-based e-marketplace framework for mobile users

paper_content:

Mobile agent based e-marketplace auction trading requires a secure and auditable system with a solid framework to support it. In investigating the requirements, it transpired that there is a lack of such a standardised framework. While mobility helps in avoiding network latency, particularly in increasing fairness in applications with bounded response times such as trading of auctions, it nevertheless raises issues concerning security, privacy and trust in protecting personal confidential information, managing and regulating legitimate trading and payment processing. These issues are of paramount importance and must be taken into consideration when designing a framework for modelling an auditable e-marketplace for mobile users. This also implies that there is also an underlying need to provide mobile users with simple, transparent and unobtrusive user interface. This paper proposes a framework that accommodates these requirements through protocol scenarios and highlight further research work that need to be performed.
---
paper_title: Research of Mobile Agent-based Security in the E-commerce

paper_content:

This paper briefly introduces mobile agent in e-commerce and it's security threatens,presents the secure authentication infrastructure using PKI,and introduces an integrity protection and confidentiality protection solution's basing on MH integrity protection regard to PKI limit.
---
paper_title: The emerging role of electronic marketplaces on the Internet

paper_content:

Markets play a central role in the economy, facilitating the exchange of information, goods, services and payments. In the process, they create economic value for buyers, sellers, market intermediaries and for society at large. Recent years have seen a dramatic increase in the role of information technology in markets, both in traditional markets, and in the emergence of electronic marketplaces, such as the multitude of Internet-based online auctions.
---
paper_title: Secure and auditable agent-based e-marketplace framework for mobile users

paper_content:

Mobile agent based e-marketplace auction trading requires a secure and auditable system with a solid framework to support it. In investigating the requirements, it transpired that there is a lack of such a standardised framework. While mobility helps in avoiding network latency, particularly in increasing fairness in applications with bounded response times such as trading of auctions, it nevertheless raises issues concerning security, privacy and trust in protecting personal confidential information, managing and regulating legitimate trading and payment processing. These issues are of paramount importance and must be taken into consideration when designing a framework for modelling an auditable e-marketplace for mobile users. This also implies that there is also an underlying need to provide mobile users with simple, transparent and unobtrusive user interface. This paper proposes a framework that accommodates these requirements through protocol scenarios and highlight further research work that need to be performed.
---
paper_title: An Agent-Based Micropayment System for E-Commerce

paper_content:

Recently, electronic commerce has become the focus of Information Technology development. Many electronic payment protocols and systems have been launched onto the Internet, but most of them induce complex cryptography and authentication mechanisms that incur relatively high processing costs and are therefore not feasible for micropayment transactions. For this reason, the mobile agent semantic is integrated to cope with the concerned difficulty. An agent-based transaction model is developed for processing micropayment transactions in a distributed environment and the corresponding system is built upon an OMG MASIF compliant agent platform. The novel agent-based transaction protocols are blends of the existing SET card payment and MilliCent micropayment protocols coupled with mobile agent characteristics respectively. As mobile agents can migrate to the desired communication peer and utilize the advantage of local interactions, goals like reduction of network traffic and simplification of communication protocol are readily attainable through such agent-based transaction protocols.
---
paper_title: NetCash: a design for practical electronic currency on the Internet

paper_content:

Licensing is a topic of increasing importance for software publishers and users. More and more, the magnitude of financial transfers between these two partners are determined by some electronic licensing service being part of the system on which the licensed software is running. In order to ease the use and management of such licensing schemes and to enable economic software usage in enterprise-wide computer systems through flexible and fair billing structures, various organizations are working on formulating requirements, defining architectures, and building standard interfaces for so called license brokerage systems. The trustworthiness of these services is essential because large amounts of money can depend on them. Most of these licensing services are currently operating independently of access control and rely on proprietary and unpublished security algorithms. This paper proposes an extension of access control to integrate licensing called Stateful Access Control and it addresses some aspects of virus protection.
---
paper_title: Security model of mobile agent in e-commerce

paper_content:

Having analyzed some security problems in e-commerce, a kind of security model of mobile agent in e-commerce was presented. In this security model, different access patterns, security policies and reputation management were used by mobile agent to reduce the risk in e-commerce as much as possible and the transactions of e-commerce more efficient was made.
---
paper_title: Using Set for Secure Electronic Commerce

paper_content:

Chapter 1: Introduction to SET. Chapter Roadmap. SET Basics. Electronic Commerce. Announcement of SET. The Participants. Electronic Shopping vs. Traditional Shopping. Shopping With SET. SET Purchase Transaction. Interoperability. Interoperability Testing. SET Messages. Message Wrapper. Abstract Syntax Notation One (ASN.1) - Message Content. Distinguished Encoding Rules-Message Encoding. Object Identifiers. SET Error Processing. Chapter 2: Software Components. Chapter Roadmap. SET Software. The Wallet. How the Wallet Works. The Wallet's Core Functionality. Existing Wallets. The Merchant Server (POS). How The Merchant Server Works. The Merchant Server's Core Functionality. Existing Merchant Servers. The Certificate Authority. How The Certificate Authority Works. The Certificate Authority's Core Functionality. Existing Certificate Authorities. The Payment Gateway. The Gateway's Core Functionality. Existing Gateways. Chapter 3: Encryption and Cryptography. Chapter Roadmap. Important Terms. Encryption/Decryption Explained. Signing/Verification Explained. Who Performs the Actions?. Secret-Key Cryptography. Data Encryption Standard. Public-Key Cryptography. Encryption Key Pair. Signature Key Pair. Public-Key Cryptography Standards. OAEP. RSA. Signature and Encryption Keys in RSA. Security of RSA. Secure Hash Algorithm 1. Why Use a Combination of RSA and DES? Elliptic Curve Cryptography. SET's Signing and Encryption Process. Message Digest. Digital Signatures. Dual Signatures. Signed Message. Digital Envelopes. Encryption Process Overview. Chapter 4: Certificates and Certification. Chapter Roadmap. What Is a Certificate? Certificate Management Architecture. Root Certificate Authority (RCA). Brand Certificate Authority (BCA). Geo-Political Certificate Authority (GCA). Cardholder Certificate Authority (CCA). Merchant Certificate Authority (MCA). Payment Gateway Certificate Authority (PCA). Cardholder Certificates. Merchant Certificates. Hierarchy of Trust. Certificate Validation. Types of Certificates. Certificate Revocation Lists. CRL Format. CRL Distribution. Brand CRL Identifier. BCI Format. BCI Distribution. End Entity Certificate Cancellation/Revocation. Cardholder Certificate Cancellation. Merchant Certificate Cancellation. Payment Gateway Certificate Revocation. Certificate Format. X.509 Certificates. Cardholder Certificates. Merchant Certificates. Payment Gateway Certificates. Cardholder Certificate Authority (CCA) Certificates. Geo-Political Certificate Authority (GCA) Certificates. Brand Certificate Authority (BCA) Certificates. Root Certificate Authority (RCA) Certificates. Thumbprints. Issuing Certificates. Certificate Request Types. Initial Root Certificate Generation and Distribution. Issuing Certificate Authority Certificates. Issuing End Entity Certificates. Message Wrappers. Certificate Inquiry. Chapter 5: SET Payment Messaging. Chapter Roadmap. Common Business Scenarios. Authorize Now and Capture Later. Authorize and Capture Now. Authorize Now and Capture Later With Partial Reversal. Split Shipments. Installment or Recurring Payments. A Typical SET Purchase Transaction. Message Wrappers. Purchase Initialization Request/Response Messages (Optional). PInitReq. PInitRes. Purchase Order Request/Response Messages. Order Instruction (OI). Payment Instruction (PI). PReq. PRes. Cardholders without Certificates. Inquiry Request/Response Messages (Optional). InqReq. InqRes. Authorization Request/Response Messages. Split Shipments. AuthReq. Referral Processing. AuthRes. Authorization Reversal Request/Response (Optional). AuthRevReq. AuthRevRes. Capture Request/Response Messages (Optional). CapToken. CapReq. CapRes. Capture Reversal Request/Response and Credit. Request/Response Data. CapRevOrCredReqData. CapRevOrCredResData. Capture Reversal Request/Response Messages (Optional). CapRevReq. CapRevRes. Credit Request/Response (Optional). CredReq. CredRes. Credit Reversal Request/Response (Optional). CredRevReq. CredRevRes. Transaction Phases and Reversals. Batch Administration. Batch Administration Request Message. BatchAdminRes. Payment Gateway Certificate Request/Response. PCertReq. PCertRes. Chapter 6: SET Protocol Extensions and Additions. Chapter Roadmap. SET Debit Architecture. Private Environments. Public Environments. Personal Identification Number-Based (PIN) Debit. PIN Entry and Encryption. How PIN-Based Debit Works. Integrated Circuit Cards (Smart Cards) and Security Tokens. Integrated Circuit Cards Explained. ICC Proposed Architecture. Example ICC Transaction. Algorithm Independence. Elliptic Curve Enabled Secure Electronic Transactions (ECSET). Elliptic Curves Explained. Elliptic Curve Digital Signature Algorithm. Security of ECC. ECSET Pilots. Japanese Payment Options (JPO). Payment Modes. JPO Mode Parameters. SET 2.0 Proposed Additions. Functionality Enhancements. Encryption Alternatives. Certificate Enhancements. Order Enhancements. Payment Enhancements. Transaction Processing Enhancements. Chapter 7: SET Standards and Compliance. Chapter Roadmap. What is SETCo?. Membership in SETCo. SETCo Advisors Panels. The SETMark. Licensing the SETMark. SET Compliance Testing. SET Compliance Testing Enrollment. Compliance Testing. Tested Components. SET Checklist. SET Tests. Vendor Status Matrix. Tenth Mountain Systems, Inc. Appendix A: SET ASN.1 Code. Appendix B: JPO ASN.1 Code. Appendix C: PKCS #7 Formats. SignedData Type. EnvelopedData. EncryptedData. DigestedData. Index.
---
paper_title: Process Synchronization and Election Algorithms

paper_content:

Process synchronization is the set of techniques that are used to coordinate execution amongst processes. For example, a process may wish to run only to a certain point, at which it will stop and wait for another process to finish certain actions. A common resource (such as a device or a location in memory) may require exclusive access and processes have to coordinate amongst themselves to ensure that access is fair and exclusive. In centralized systems, it was common enforce exclusive access to shared code. Mutual exclusion was accomplished through mechanisms such as test and set locks in hardware and semaphores, messages, and condition variables in software. We will now revisit the topic of mutual exclusion in distributed systems. We assume that there is group agreement on how a critical section (or exclusive resource) is identified (e.g. name, number) and that this identifier is passed as a parameter with any requests.
---
paper_title: Internet Forensics: Legal and Technical Issues

paper_content:

This paper provides a combined approach on the major issues pertaining to the investigation of cyber crimes and the deployment of Internet forensics techniques. It discusses major issues from a technical and legal perspective and provides general directions on how these issues can be tackled. The paper also discusses the implications of data mining techniques and the issue of privacy protection with regard to the use of forensics methods.
---
paper_title: Getting Physical with the Digital Investigation Process

paper_content:

In this paper, a process model for digital investigations is defined using the theories and techniques from the physical investigation world. While digital investigations have recently become more common, physical investigations have existed for thousands of years and the experience from them can be applied to the digital world. This paper introduces the notion of a digital crime scene with its own witnesses, evidence, and events that can be investigated using the same model as a physical crime scene. The proposed model integrates the physical crime scene investigation with the digital crime scene investigation to identify a person who is responsible for the digital activity. The proposed model applies to both law enforcement and corporate investigations.
---
paper_title: Secure and auditable agent-based e-marketplace framework for mobile users

paper_content:

Mobile agent based e-marketplace auction trading requires a secure and auditable system with a solid framework to support it. In investigating the requirements, it transpired that there is a lack of such a standardised framework. While mobility helps in avoiding network latency, particularly in increasing fairness in applications with bounded response times such as trading of auctions, it nevertheless raises issues concerning security, privacy and trust in protecting personal confidential information, managing and regulating legitimate trading and payment processing. These issues are of paramount importance and must be taken into consideration when designing a framework for modelling an auditable e-marketplace for mobile users. This also implies that there is also an underlying need to provide mobile users with simple, transparent and unobtrusive user interface. This paper proposes a framework that accommodates these requirements through protocol scenarios and highlight further research work that need to be performed.
---
paper_title: Secure and auditable agent-based e-marketplace framework for mobile users

paper_content:

Mobile agent based e-marketplace auction trading requires a secure and auditable system with a solid framework to support it. In investigating the requirements, it transpired that there is a lack of such a standardised framework. While mobility helps in avoiding network latency, particularly in increasing fairness in applications with bounded response times such as trading of auctions, it nevertheless raises issues concerning security, privacy and trust in protecting personal confidential information, managing and regulating legitimate trading and payment processing. These issues are of paramount importance and must be taken into consideration when designing a framework for modelling an auditable e-marketplace for mobile users. This also implies that there is also an underlying need to provide mobile users with simple, transparent and unobtrusive user interface. This paper proposes a framework that accommodates these requirements through protocol scenarios and highlight further research work that need to be performed.
---

Title: A review and future research directions of secure and trustworthy mobile agent-based e-marketplace systems

Section 1: Introduction
Description 1: Introduce the background, importance, and objectives of secure and trustworthy mobile agent-based e-marketplace systems.

Section 2: Problem Statement & Scenario
Description 2: Describe the architectural requirements and challenges in developing secure and trusted mobile agent-based e-marketplace systems.

Section 3: Review on Mobile Agent-based E-marketplace Frameworks and Systems
Description 3: Review existing mobile agent-based e-marketplace frameworks and systems, highlighting their key features and limitations.

Section 4: Current Status of Mobile Agent-based E-marketplace
Description 4: Discuss the current status of mobile agent-based e-marketplaces, including ongoing challenges and recent advancements.

Section 5: Infrastructure Service of Mobile Agent-based E-marketplace
Description 5: Describe the various infrastructure services provided by mobile agent-based e-marketplaces and their significance.

Section 6: E-payment Systems for E-marketplace
Description 6: Discuss the different types of e-payment systems applicable to mobile agent-based e-marketplaces.

Section 7: Review and Issues of Security, Privacy, Safety and Trustworthiness
Description 7: Review the critical issues relating to security, privacy, safety, and trustworthiness in mobile agent-based e-marketplaces.

Section 8: Review of Auditable and Forensic Services
Description 8: Present the importance and implementation of auditable and forensic services in e-marketplaces.

Section 9: Research Direction and Discussion
Description 9: Outline potential future research directions to address current limitations and enhance the security, trust, and forensics in mobile agent-based e-marketplace systems.

Section 10: Broader Research Challenges
Description 10: Discuss broader research challenges beyond technical requirements, including policy, privacy, security, e-payment norms, and management of mobile agent systems.