FACULTY NAME : RIYA YADAV

SUBJECT NAME : E-COMMERCE

1
 SYLLABUS
Unit-I
Electronic Commerce: Overview of Electronic Commerce, Scope of Electronic Commerce,
Traditional Commerce vs. Electronic Commerce, Impact of E-Commerce, Electronic Markets,
Internet Commerce, e-commerce in perspective, Application of E Commerce in Direct
Marketing and Selling, Obstacles in adopting E-Commerce Applications; Future of E-
Commerce.

Unit-II
Value Chains in electronic Commerce, Supply chain, Porter’s value chain Model, Inter
Organizational value chains, Strategic Business unit chains, Industry value chains.
Security Threats to E-commerce: Security Overview, Computer Security Classification,
Copyright and Intellectual Property, security Policy and Integrated Security, Intellectual
Property Threats, electronic Commerce Threats, Clients Threats, Communication Channel
Threats, server Threats.

Unit-III
Implementing security for E-Commerce: Protecting E-Commerce Assets, Protecting
Intellectual Property, Protecting Client Computers, Protecting E-commerce Channels,
Insuring Transaction Integrity, Protecting the Commerce Server. Electronic Payment System:
Electronic Cash, Electronic Wallets, Smart Card, Credit and Change Card.

Unit–IV
Business to Business E-Commerce: Inter-organizational Transitions, Credit Transaction
Trade Cycle, a variety of transactions. Electronic Data Interchange (EDI): Introduction to
EDI, Benefits of EDI, EDI Technology, EDI standards, EDI Communication, EDI
Implementation, EDI agreement, EDI security.

Suggested Readings:
1. [Link] and [Link],Readingsin Electronic Commerce, Addison Wesley,
2 David Kosiur, Understanding E- Commerce, Microsoft Press, 1997. 3) Soka,
From EDI to Electronic Commerce , McGraw Hill, 1995.
3 David whitely, E-commerce Strategy, Technology and application, Tata McGraw Hill.
4 Gary P. Schneider and Jame Perry, Electronic Commerce Thomson Publication. 5 Doing
Business on the Internet E-COMMERCE S. Jaiswal;Galgotia Publications.
6 E-Commerce An Indian Perspective; [Link]; S.J.; PHI.
7 E-Commerce; [Link] – Glgotia.
8 E-Commerce; Efrain Turbon; Jae Lee; David King; [Link] Chang.

2
Commerce refers to the exchange of goods and services between buyers and sellers. Over
time, this exchange has evolved from physical, face-to-face transactions (Traditional
Commerce) to digital, internet-based transactions (Electronic Commerce or E-Commerce).
Traditional commerce dominated business for centuries, but with the growth of the Internet
and digital technologies, E-Commerce has transformed how businesses operate globally.

Features of Traditional Commerce

Traditional commerce involves buying and selling goods through physical markets, shops,
and offices.
Main Features:
Physical Presence
Buyers and sellers must meet in person. Transactions occur in shops, malls, or offices.
Limited Market Reach
Business is mostly confined to local or regional areas.
Manual Operations
Processes such as billing, inventory, and record-keeping are largely manual or semi-
automated.
Fixed Business Hours
Transactions take place only during working hours.
Personal Interaction
Direct communication between customer and seller helps build trust and relationships.
Cash-Based or Traditional Payments
Payments mainly through cash, cheque, or card at physical counters.
High Operational Costs
Includes rent, utilities, staff salaries, and inventory storage.

Comparison: Traditional Commerce vs E-Commerce

Basis Traditional Commerce Electronic Commerce
Mode of Operation Physical stores Online platforms
Market Reach Local / Regional Global
Business Hours Limited 24×7 availability
Customer Interaction Face-to-face Virtual
Transaction Speed Slow Fast
Cost Structure High overheads Lower operating costs
Payment Methods Cash, cheque, card UPI, cards, net banking, wallets
Documentation Paper-based Digital

3
Basis Traditional Commerce Electronic Commerce
Product Inspection Possible physically Only virtual viewing
Delivery Immediate Requires shipping

Advantages of E-Commerce
E-Commerce offers several benefits to both businesses and customers:
1. Global Reach
Businesses can sell products worldwide without physical expansion.
2. 24×7 Availability
Customers can shop anytime, increasing convenience and sales opportunities.
3. Lower Operating Costs
No need for expensive retail space; reduced manpower and inventory costs.
4. Easy Data Collection & Analysis
Customer behavior can be tracked for better marketing and decision-making.
5. Wide Product Choice
Customers can compare prices and products across multiple platforms instantly.
6. Faster Transactions
Online payments and automated order processing save time.
7. Better Supply Chain Management
Digital systems improve inventory control and logistics.
8. Personalized Marketing
Platforms recommend products based on customer preferences.

Limitations of E-Commerce
Despite its advantages, E-Commerce also faces several challenges:
1. Security Risks
Online fraud, hacking, and data theft are major concerns.
2. Lack of Physical Inspection
Customers cannot touch or test products before purchase.
3. Delivery Issues
Delays, damages, or lost shipments can affect customer satisfaction.
4. Technology Dependence
Requires internet access and digital literacy.
5. Return & Refund Problems
Return processes may be time-consuming.
6. Reduced Personal Touch
No face-to-face interaction, which may affect trust.
7. Legal and Regulatory Issues
Different countries have different e-commerce laws.

4
Key Features of E-Commerce
Electronic Commerce (E-Commerce) refers to buying and selling goods and services over
electronic networks, mainly the Internet. It has several unique characteristics that
distinguish it from traditional commerce.

1. Ubiquity (Anywhere, Anytime Access)

E-Commerce is available 24×7 and from any location with internet access. Customers can
shop from home, office, or even while travelling.
2. Global Reach
Unlike traditional commerce which is limited geographically, E-Commerce connects buyers
and sellers across national and international boundaries, expanding market size
dramatically.
3. Universal Standards
E-Commerce uses common Internet standards worldwide, reducing entry barriers and
simplifying transactions between different countries.
4. Richness of Information
Websites can provide detailed product descriptions, images, videos, and reviews, helping
customers make informed decisions.
5. Interactivity
Customers can interact with sellers through chat, email, feedback forms, and reviews,
making communication two-way.
6. High Information Density
Large volumes of accurate information are available at low cost, improving price
transparency and market efficiency.
7. Personalization and Customization
Platforms analyze user behavior to offer personalized recommendations, ads, and
customized services.
8. Speed of Transactions
Ordering, payment, and confirmation happen instantly, reducing transaction time
significantly.
9. Digital Documentation
Invoices, receipts, and records are maintained electronically, saving paper and storage space.
10. Multiple Payment Options
Supports UPI, debit/credit cards, net banking, wallets, and cash on delivery.
11. Automation
Order processing, inventory updates, and customer communication are largely automated.
12. Scalability
Businesses can easily expand operations without major physical infrastructure.

5
Impact of E-Commerce on Business Organizations
E-Commerce has transformed traditional business models and operational strategies.
Global Market Access
Businesses can reach international customers without opening physical stores, expanding
revenue opportunities.
Reduced Operational Costs
Lower expenses on rent, manpower, and physical infrastructure increase profit margins.
Improved Supply Chain Management
Real-time inventory tracking and automated logistics improve efficiency and reduce wastage.
Data-Driven Decision Making
Companies analyze customer data to forecast demand, personalize marketing, and optimize
pricing.
Faster Business Processes
Ordering, billing, and payments are automated, reducing processing time.
Increased Competition
Small businesses can compete with large firms, leading to innovation and better services.
New Business Models
Models like dropshipping, subscription services, and digital marketplaces have emerged.

Impact of E-Commerce on Consumers

Consumers are among the biggest beneficiaries of E-Commerce.
Convenience and Time Saving
Shopping is possible anytime from anywhere.
Greater Product Variety
Consumers can choose from thousands of products worldwide.
Price Transparency
Easy price comparison leads to informed purchasing decisions.
Personalized Shopping Experience
Recommendations based on browsing history enhance customer satisfaction.
Access to Reviews and Ratings
Customers can evaluate products before buying.
Doorstep Delivery
Goods are delivered directly to homes.
Empowered Consumers
Return policies and customer feedback systems give more power to buyers.

Impact of E-Commerce on Society and Economy

E-Commerce also plays a major role in shaping social and economic development.

6
Economic Impact
Growth of Digital Economy
Boosts online payments, fintech, logistics, and IT services.
Employment Generation
Creates jobs in delivery, warehousing, customer support, digital marketing, and tech
development.
Encouragement to Start-ups
Low entry barriers promote entrepreneurship.
Increased GDP Contribution
Digital trade adds significantly to national income.
Financial Inclusion
Digital payments bring more people into formal banking systems.

Social Impact
Improved Standard of Living
Easy access to goods and services improves quality of life.
Urban–Rural Connectivity
Rural consumers gain access to urban markets.
Women and Youth Empowerment
Home-based online businesses create opportunities for marginalized groups.
Digital Literacy
Promotes use of technology and Internet awareness.

Challenges to Society
Despite benefits, E-Commerce also creates concerns:
• Cybercrime and data privacy issues
• Job losses in traditional retail
• Environmental impact due to packaging and deliveries
• Digital divide between connected and non-connected populations

7
Meaning of Direct Marketing and Selling in E-Commerce
Direct marketing and selling through e-commerce refers to the practice where businesses
sell products or services directly to customers online, using websites, mobile apps, email,
and social media—without relying on traditional retail channels.
Examples include Amazon, Flipkart, company websites, and Instagram shops.

Major Applications of E-Commerce in Direct Marketing and Selling

1. Online Product Catalogues

Companies display detailed product information online including:
• Images
• Prices
• Specifications
• Reviews
• Availability
Customers can browse and compare products easily.
Example: Amazon product pages.

2. Personalized Marketing
E-commerce platforms use customer data to provide:
• Personalized recommendations
• Targeted advertisements
• Customized offers
This increases customer engagement and sales.
Example: Netflix or Amazon recommendations.

3. Email Marketing
Businesses send promotional emails directly to customers, such as:
• Discount offers
• New product launches
• Abandoned cart reminders
It is low-cost and measurable.

4. Social Media Marketing and Selling

Platforms like Facebook, Instagram, and WhatsApp are used to:
• Promote products
• Communicate with customers
• Accept orders
This is called social commerce.

5. Direct Online Sales (B2C Platforms)

8
Businesses sell products directly through:
• Their own websites
• Online marketplaces
Customers can place orders instantly.
Examples: Flipkart, Myntra, Nykaa.

6. Digital Advertising
E-commerce uses:
• Google Ads
• Social media ads
• Banner ads
to reach targeted audiences.

7. Online Payment Systems

E-commerce enables instant payments through:
• UPI
• Debit/credit cards
• Wallets
• Net banking
This speeds up the selling process.

8. Customer Relationship Management (CRM)

Companies maintain customer databases to:
• Track purchases
• Analyze behavior
• Improve service
This helps in repeat sales and loyalty building.

9. 24×7 Selling Capability

Unlike physical stores, e-commerce platforms operate round the clock, allowing customers
to shop anytime.

10. Direct Feedback and Reviews

Customers can give feedback and ratings which helps:
• Improve products
• Build trust
• Influence new buyers

Advantages of E-Commerce in Direct Marketing and Selling

✔ Eliminates middlemen
✔ Reduces marketing cost
9
✔ Wider market reach
✔ Faster transactions
✔ Better customer insights
✔ Improved customer satisfaction

Major Obstacles in Adapting E-Commerce Applications

1. Lack of Technical Infrastructure

Many regions suffer from:
• Poor internet connectivity
• Low bandwidth
• Unreliable electricity
This limits smooth online transactions, especially in rural and semi-urban areas.

2. Security and Privacy Concerns

Customers fear:
• Online fraud
• Data theft
• Hacking
• Identity misuse
Businesses also worry about cyberattacks, which reduces trust in e-commerce platforms.

3. High Initial Investment

Setting up e-commerce requires:
• Website/app development
• Payment gateways
• Cybersecurity systems
• Logistics setup
Small businesses often find these costs difficult to afford.

4. Lack of Skilled Manpower

E-commerce needs professionals in:
• IT
• Digital marketing
• Data analytics
• Cybersecurity
Shortage of trained staff slows adoption.

5. Resistance to Change

10
Traditional businesses and customers may prefer offline transactions due to habit or fear of
technology, leading to slow acceptance.

6. Legal and Regulatory Issues

Unclear or complex laws regarding:
• Digital contracts
• Taxation
• Consumer protection
• Data privacy
create uncertainty for businesses.

7. Trust Deficit Among Consumers

Customers hesitate because of:
• Fake products
• Delivery delays
• Return problems
• Poor after-sales service
Trust is critical for e-commerce success.

8. Logistics and Delivery Challenges

Problems include:
• Poor transport networks
• High delivery costs
• Last-mile delivery issues
especially in remote areas.

9. Limited Digital Literacy

Many users lack knowledge of:
• Online payments
• Apps/websites
• Cyber safety
This restricts e-commerce usage.

10. Cultural and Language Barriers

Content mostly in English and urban-centric design makes platforms less accessible to local
populations.

11
Meaning of Value Chain
The concept of the value chain was introduced by Michael Porter.
A value chain refers to the series of activities performed by an organization to design,
produce, market, deliver, and support its products or services, with each activity adding
value to the final offering.
Traditional Value Chain Activities
Porter divided activities into:
A. Primary Activities
1. Inbound Logistics – Receiving and storing raw materials
2. Operations – Transforming inputs into finished goods
3. Outbound Logistics – Distribution to customers
4. Marketing & Sales – Promoting and selling products
5. Service – After-sales support
B. Support Activities
1. Firm Infrastructure
2. Human Resource Management
3. Technology Development
4. Procurement
Each activity contributes to customer value and organizational profit.

3Value Chain in E-Commerce

E-commerce digitizes many value chain activities, creating a virtual value chain.
Key Changes Introduced by E-Commerce
Traditional Activity E-Commerce Transformation
Physical stores Online platforms
Manual order processing Automated systems
Paper documentation Digital records
Limited reach Global reach
Mass marketing Personalized marketing

Electronic (Virtual) Value Chain

Proposed by Rayport and Sviokla, the virtual value chain focuses on information-based
activities:
1. Information Gathering – Customer data, browsing patterns
2. Information Organization – Databases, CRM systems
3. Information Selection – Analytics and reporting
4. Information Synthesis – Personalized recommendations
5. Information Distribution – Websites, apps, email marketing

12
Role of Value Chains in E-Commerce
1. Cost Reduction
Automation reduces operational and transaction costs.
2. Faster Processes
Online ordering, digital payments, and automated inventory speed up business cycles.
3. Customer Value Enhancement
Personalized recommendations, faster delivery, and 24/7 availability improve satisfaction.
4. Disintermediation
Removal of middlemen allows manufacturers to sell directly to consumers.
5. New Revenue Models
Subscription services, digital products, and online advertising become possible.

6. Example: Amazon’s Value Chain

• Inbound Logistics: Supplier integration and warehouses
• Operations: Automated fulfillment centers
• Outbound Logistics: Same-day/next-day delivery
• Marketing: AI-driven recommendations
• Service: Easy returns and customer support
Technology integrates every step.

13
Supply Chain in E-Commerce

1. Concept of Supply Chain

A supply chain refers to the network of organizations, people, activities, information, and
resources involved in moving a product from supplier to customer.
It includes:
• Raw material suppliers
• Manufacturers
• Warehouses
• Distributors
• Retailers
• End consumers

2. Basic Supply Chain Flow

Supplier → Manufacturer → Wholesaler → Retailer → Customer
In e-commerce:
Supplier → Warehouse → Online Platform → Customer

3. Objectives of Supply Chain

1. Right product
2. Right quantity
3. Right place
4. Right time
5. Minimum cost

4. Supply Chain vs Value Chain

Basis Supply Chain Value Chain
Focus Product flow Value creation
Orientation Operational Strategic
Main Goal Cost efficiency Customer satisfaction
Scope Logistics & production Entire business activities
Ends with Delivery Customer value
Nature Linear Integrated

5. Supply Chain in E-Commerce Environment

E-commerce introduces:
• Real-time order processing
• Online tracking
• Digital payments

14
 • Automated inventory
• Third-party logistics (3PL)
Key components:
1. E-procurement
2. Online inventory systems
3. Order management
4. Digital warehousing
5. Last-mile delivery

6. E-Supply Chain Management (E-SCM)

Meaning
E-Supply Chain Management refers to the use of internet technologies and digital tools to
integrate and manage supply chain activities electronically.
It connects suppliers, manufacturers, distributors, and customers on a single digital platform.

7. Features of E-SCM
1. Real-time data sharing
2. Cloud-based systems
3. Automated workflows
4. Vendor portals
5. Customer order visibility
6. AI-based demand forecasting

8. Components of E-SCM
A. E-Procurement
Online purchasing of raw materials.
B. E-Inventory Management
Automatic stock updates.
C. E-Logistics
Tracking shipments digitally.
D. E-Order Processing
Instant confirmation and billing.
E. Customer Relationship Management (CRM)
Customer feedback and service integration.

9. Benefits of E-SCM
1. Reduced inventory costs
2. Faster order fulfillment
3. Improved coordination
4. Increased transparency
5. Better forecasting

15
 6. Enhanced customer satisfaction

10. Challenges in E-SCM

1. Cybersecurity risks
2. Integration with legacy systems
3. High implementation cost
4. Dependence on internet infrastructure
5. Data privacy issues

11. Example: Flipkart Supply Chain

• Vendor integration
• Automated warehouses
• AI-based demand prediction
• Third-party delivery partners
• Real-time order tracking

12. Relationship Between Value Chain and Supply Chain

Supply chain focuses on movement of goods, while value chain focuses on value creation at
each step.
E-commerce integrates both into a digital ecosystem.

16
Meaning of Inter-Organizational Value Chain (10 minutes)
Definition:
An Inter-Organizational Value Chain refers to a network of two or more independent
organizations that work together electronically to perform business activities such as
procurement, production, logistics, marketing, and customer service in order to deliver value
to the final customer.
In simple words:
It is a digitally connected chain of different companies that jointly create products or
services.

Comparison with Traditional Value Chain:

Traditional Value Chain Inter-Organizational Value Chain
Operates within one firm Spans multiple firms
Limited data sharing Extensive electronic data sharing
Manual coordination Automated coordination
Slower processes Faster, real-time processes

Example:
Amazon works with:
• Manufacturers
• Warehouses
• Delivery partners
• Payment gateways
All these organizations are digitally linked, forming an inter-organizational value chain.

Structure of Inter-Organizational Value Chains

The structure consists of several connected participants using electronic systems.
Main Components:

1. Suppliers
Provide raw materials or products.
Examples:
• Electronics manufacturers
• Packaging suppliers
They connect using:
• EDI (Electronic Data Interchange)
• Supplier portals

2. Producers / Manufacturers

17
Convert raw materials into finished goods.
They use:
• ERP systems
• Inventory management software
• Production planning tools

3. Distributors / Logistics Providers

Handle storage and transportation.
Examples:
• DHL
• FedEx
• Delhivery
They track shipments digitally using GPS and cloud platforms.

4. Retailers / Online Platforms

Sell products to customers.
Examples:
• Amazon
• Flipkart
• Myntra
They manage:
• Online catalogs
• Orders
• Payments

5. Customers
End users who place orders and provide feedback.
Supplier → Manufacturer → Distributor → Online Retailer → Customer
All connected electronically.

Supporting Technologies:
• Internet & cloud computing
• EDI
• APIs
• ERP systems
• SCM software
• CRM systems

18
Role of E-Commerce in Inter-Organizational Value Chains
E-commerce acts as the backbone of IOVC by enabling:
• Real-time communication
• Online ordering
• Digital payments
• Electronic contracts
• Automated inventory updates
Without e-commerce technologies, such coordination would be slow and inefficient.

Benefits of Inter-Organizational Value Chains in E-Commerce Environment

Let us now discuss the major advantages:
1. Cost Reduction
• Eliminates paperwork
• Reduces manual labor
• Minimizes inventory holding costs
Example: Just-in-time inventory.

2. Faster Business Processes

Orders, invoices, and deliveries are processed instantly.
This improves speed to market.

3. Improved Coordination and Collaboration

All partners share information in real time.
This prevents:
• Overproduction
• Stock shortages
• Delays

4. Enhanced Customer Satisfaction

Customers receive:
• Faster delivery
• Accurate order tracking
• Better service
Leading to higher loyalty.

5. Increased Transparency
Each organization can monitor:
• Inventory levels
• Shipment status
• Sales data
This builds trust among partners.

19
6. Greater Competitive Advantage
Companies become:
• More flexible
• More responsive
• More innovative
They can adapt quickly to market changes.

7. Scalability
Businesses can easily add new suppliers or partners through digital platforms.

8. Global Reach
Companies can collaborate internationally without physical presence.

Real-World Examples
Amazon Ecosystem
Links sellers, warehouses, couriers, banks, and customers.
Walmart Supply Chain
Uses RFID and cloud systems for supplier integration.
Flipkart
Connects Indian vendors, logistics partners, and payment services.

Challenges
• Data security issues
• Dependency on partners
• System compatibility
• Trust among organizations

Real-Life Examples of Inter-Organizational Value Chains

1. Amazon (Global Example)

How the value chain works:
Seller → Amazon Platform → Warehouse → Delivery Partner → Customer
Organizations involved:
• Third-party sellers / manufacturers
• Amazon (marketplace + IT systems)
• Warehouses (Fulfillment Centers)
• Logistics partners (Blue Dart, Delhivery, Amazon Logistics)
• Banks / payment gateways
• Customers
Digital integration:

20
 • Sellers upload products online
• Inventory updated automatically
• Orders processed instantly
• Couriers receive shipping instructions digitally
• Customers track deliveries in real time

2. Flipkart (Indian Example)

Flow:
Vendor → Flipkart App → Ekart Logistics → Customer
Organizations connected:
• Indian manufacturers
• Flipkart platform
• Ekart (logistics arm)
• Payment gateways (PhonePe, UPI, banks)
Benefit:
• Small vendors reach national customers
• Automated order processing
• Digital payments
• Real-time shipment tracking

3. Swiggy / Zomato (Food Delivery)

Flow:
Restaurant → Swiggy/Zomato App → Delivery Partner → Customer
Participants:
• Restaurants
• Swiggy/Zomato platform
• Delivery riders
• Payment systems
Digital coordination:
• Orders sent instantly to restaurants
• Riders assigned automatically
• Live tracking for customers
Result:
Entire supply chain operates electronically.

4. Walmart Supply Chain

Flow:
Supplier → Walmart ERP → Distribution Center → Store / Online Customer
Uses:
• RFID tracking

21
 • Cloud systems
• Supplier portals
Suppliers can directly see Walmart’s inventory levels and plan production.

5. MakeMyTrip (Travel E-Commerce)

Flow:
Airlines/Hotels → MakeMyTrip → Payment Gateway → Customer
Connected partners:
• Airlines
• Hotels
• Cab services
• Banks
Customer books everything on one platform.

6. Apple (Manufacturing + E-Commerce)

Flow:
Component Suppliers → Foxconn → Apple Store → Courier → Customer
Countries involved:
• Chips from Taiwan
• Displays from Korea
• Assembly in China/India
• Sales worldwide
All coordinated digitally.

22
Meaning of Strategic Business Unit

A Strategic Business Unit (SBU) is an independent division or segment of a company that:

• Has its own mission and objectives
• Serves a specific market or customer group
• Faces its own competitors
• Can be planned and managed separately
• Has control over key business functions

Simple Explanation:
An SBU is a “mini company” within a large organization.
Each SBU behaves almost like a separate business while remaining under the same
corporate umbrella.

Why SBUs Exist:

Large organizations often operate in:
• Multiple industries
• Different geographic markets
• Diverse product categories
Managing everything centrally becomes inefficient. SBUs provide focus, accountability, and
strategic clarity.

Characteristics of Strategic Business Units

An SBU generally has the following features:

1. Independent Strategy
Each SBU develops its own business strategy based on its market conditions.
2. Separate Objectives
Every SBU has specific goals such as revenue growth, market share, or innovation.
3. Distinct Competitors
An SBU competes with different rivals compared to other units of the same company.
4. Dedicated Resources
SBUs often have their own:
• Budget
• Workforce
• Marketing plans
• Operations
5. Performance Measurement
Each SBU is evaluated individually for profitability and growth.

Structure of Strategic Business Units

23
Typical Organizational Structure:
Corporate Headquarters
↓
SBU A
SBU B
SBU C
Each SBU contains:
• Marketing
• Operations
• Finance
• HR
This decentralized structure allows faster decision-making.

Example:
In Tata Group, different SBUs include:
• IT services
• Automobiles
• Steel
• Consumer products
Each operates independently while reporting to the central corporate office.

Similarly, Reliance Industries manages:

• Energy
• Retail
• Telecommunications
• Digital services
as separate strategic units.

Objectives of Creating SBUs

Organizations form SBUs to:

1. Improve Strategic Focus

Each unit concentrates on its own market.
2. Enhance Accountability
Managers are responsible for SBU performance.
3. Allocate Resources Efficiently
High-performing SBUs receive more investment.
4. Encourage Innovation
Independent units experiment and innovate faster.
5. Simplify Management Control

24
Role of SBUs in Strategic Planning
SBUs play a central role in corporate strategy.
Corporate headquarters:
• Reviews performance of each SBU
• Decides expansion or closure
• Approves budgets
• Sets long-term direction
This approach was strongly influenced by strategic thinking frameworks developed by
experts like Michael Porter, who emphasized competitive advantage and focused strategies.

Common Strategic Decisions at SBU Level:

• Market entry
• Product development
• Pricing strategy
• Technology adoption

Advantages of Strategic Business Units

1. Better Decision Making

Local managers understand their markets better.
2. Increased Flexibility
Each SBU responds quickly to market changes.
3. Improved Performance Measurement
Profitability of each unit becomes clear.
4. Stronger Competitive Position
Focused strategy leads to better customer targeting.
5. Leadership Development
SBUs act as training grounds for future leaders.
6. Risk Diversification
Poor performance in one SBU does not collapse the entire organization.

Real-Life Example of SBU Working

Let us take a practical view:
In Reliance:
• Retail SBU focuses on customer experience
• Telecom SBU focuses on network expansion
• Energy SBU focuses on production efficiency
Each SBU has:
• Separate strategies
• Separate targets
• Separate management teams

25
Yet all contribute to overall corporate success.

Challenges of Strategic Business Units (Brief)

Despite advantages, SBUs also face challenges:
• Internal competition for resources
• Duplication of activities
• Coordination difficulties
• Conflict between SBU goals and corporate goals
Proper leadership is required to balance autonomy with integration.

26
An Industry Value Chain refers to the complete sequence of activities performed by
different organizations in an industry — starting from raw material suppliers and ending with
the final customer — where each participant adds value to the product or service.

Simple Explanation:
Industry Value Chain = Value creation by many companies together, not just one company.

This concept is closely associated with strategic management thinking popularized by

Michael Porter, who emphasized analyzing how competitive advantage is built across
interconnected activities.

Why this concept is important:

Because no company is self-sufficient. Every organization depends on an ecosystem of
partners.

Basic Structure of Industry Value Chain

Let us understand the general structure.
Typical Industry Value Chain Flow:
Raw Material Suppliers
↓
Manufacturers / Producers
↓
Distributors / Wholesalers
↓
Retailers / Digital Platforms
↓
Customers

Supporting Participants (Side Chain):

• Logistics companies
• Banks & payment gateways
• IT service providers
• Marketing agencies
• Cloud platforms
Each participant contributes to creating customer value.

Key Point for Students:

Unlike SBU chains (internal), the Industry Value Chain connects independent organizations.

Key Components Explained

Let’s briefly explain each stage:

27
1. Suppliers
Provide raw materials or components.
Example: chip makers, packaging suppliers.

2. Manufacturers
Convert inputs into finished goods.
They focus on:
• Production efficiency
• Quality control

3. Distributors / Logistics Providers

Store and transport products.
They ensure:
• Timely delivery
• Inventory availability

4. Retailers / Platforms
Sell products to customers.
In e-commerce, these are online marketplaces.

5. Customers
End users who consume the product and provide feedback.

Each stage adds time, place, form, or service utility.

Real-Life Industry Value Chain Examples

Let us now see practical examples students can easily relate to.

Example 1: E-Commerce Industry – Amazon

Using Amazon
Value Chain:
Component Suppliers
↓
Manufacturers / Sellers
↓
Amazon Marketplace
↓
Warehouses
↓
Delivery Partners

28
 ↓
Customers
Additional partners:
• Payment gateways
• Cloud services
• Third-party logistics
Here, Amazon does not manufacture most products. It coordinates the entire industry
network digitally.

Example 2: Indian E-Commerce – Flipkart

Using Flipkart
Flow:
Vendor
↓
Flipkart Platform
↓
Ekart Logistics
↓
Customer
↓
Bank / UPI System
Small Indian sellers become part of a national value chain through Flipkart.

Example 3: Retail Industry – Reliance

Using Reliance Industries
Industry Chain:
Petrochemical Suppliers
↓
Manufacturing Units
↓
Reliance Retail Stores / Online Platforms
↓
Customers
Supported by:
• Jio digital services
• Logistics networks

Importance of Industry Value Chain

1. Identifies Where Value Is Created

29
Helps firms understand which stage generates maximum profit.
2. Improves Collaboration
Encourages partnerships between suppliers, producers, and distributors.
3. Enhances Customer Satisfaction
Better coordination leads to:
• Faster delivery
• Lower prices
• Better service
4. Builds Competitive Advantage
Companies compete as networks, not individually.
5. Supports Digital Transformation
Cloud systems, ERP, APIs, and e-commerce platforms integrate the chain.
6. Enables Global Reach
Organizations can participate internationally without physical presence.

Difference from Company Value Chain

Company Value Chain Industry Value Chain
Inside one firm Across many firms
Controlled internally Influenced by market
Limited scope Industry-wide scope
Focus on operations Focus on ecosystem

Challenges in Industry Value Chains

• Coordination complexity
• Data security risks
• Dependence on partners
• Technology compatibility
• Trust issues

30
Security Overview in E-Commerce
Meaning of Security
Security in e-commerce refers to the protection of:
• Information systems
• Networks
• Applications
• Digital transactions
• User identities
from unauthorized access, modification, destruction, or disclosure.
The primary objective is to maintain the CIA Triad:

Confidentiality
Ensures that sensitive information is accessible only to authorized users.
Example: Encrypting credit card numbers during online payments.

Integrity
Ensures data is accurate and not altered during storage or transmission.

Availability
Ensures systems and services are available whenever required by legitimate users.

Failure of any one of these principles can disrupt business operations and destroy customer
trust.

Security Threats to E-Commerce

E-commerce faces both technical and human-based threats.

1. Malware Attacks
Malware includes viruses, worms, spyware, trojans, and ransomware.
Effects:
• Steals passwords
• Corrupts databases
• Locks systems for ransom
• Tracks user activities
Ransomware is especially dangerous because it encrypts company data and demands
payment to restore access.

2. Phishing Attacks
Attackers send fake emails or SMS pretending to be banks or shopping sites.
Victims unknowingly share:
• Login credentials

31
 • OTPs
• Card numbers
This leads to financial fraud and identity theft.

3. Hacking and Unauthorized Access

Hackers exploit weak passwords or software vulnerabilities to gain illegal access.
Consequences:
• Website defacement
• Database theft
• Customer data exposure

4. Identity Theft
Personal information is stolen and used to make fake purchases or open fraudulent
accounts.

5. Denial of Service (DoS / DDoS)

Attackers overload servers with traffic, making websites unavailable.
Impact:
• Business downtime
• Loss of sales
• Customer dissatisfaction

6. Man-in-the-Middle Attack
An attacker secretly intercepts communication between buyer and seller, capturing
confidential data during transmission.

7. SQL Injection
Malicious SQL code is inserted into website forms to access backend databases.
Results:
• Leakage of customer records
• Modification of product prices
• Deletion of tables

8. Insider Threats
Employees misuse system access either intentionally or accidentally.
Examples:
• Sharing passwords
• Downloading sensitive data
• Misconfiguring servers

9. Online Payment Fraud

32
Stolen card details or fake wallets are used for unauthorized purchases on payment
platforms like PayPal.

Organizations follow security guidelines published by OWASP to protect web applications

from common vulnerabilities.

Computer Security Classification

Computer security is divided into multiple layers to provide defense in depth.

1 Physical Security
Protects physical assets such as servers, computers, and networking devices.
Includes:
• CCTV surveillance
• Biometric access control
• Fire safety systems
• Locked data centers
Purpose: Prevent theft, vandalism, and environmental damage.

2 Network Security
Protects data flowing across networks.
Tools:
• Firewalls
• Intrusion Detection Systems (IDS)
• VPNs
• Secure routers
Purpose: Block unauthorized network access and cyber intrusions.

3 Application Security
Protects software applications from vulnerabilities.
Methods:
• Secure coding
• Regular updates and patches
• Web Application Firewalls
• Penetration testing
Purpose: Prevent attacks such as SQL injection and cross-site scripting.

4 Data Security
Protects stored and transmitted information.
Techniques:
• Encryption
• Backup systems

33
 • Access permissions
• Data masking
Purpose: Maintain confidentiality and integrity.

5 Identity and Access Management (IAM)

Controls user authentication and authorization.
Includes:
• Username/password
• OTP verification
• Multi-factor authentication
• Role-based access
Purpose: Ensure only legitimate users access systems.

6 Operational Security
Defines organizational policies and procedures.
Includes:
• Employee awareness training
• Password policies
• Incident response plans
• Regular security audits
Purpose: Reduce human error and improve preparedness.

Importance of Security in E-Commerce

• Protects customer data
• Prevents financial loss
• Builds trust and loyalty
• Ensures legal compliance
• Maintains business reputation
• Supports long-term growth
Security is not optional—it is essential.

34
In today’s digital age, ideas, software, designs, music, books, and inventions are valuable
assets. With rapid growth of information technology and e-commerce, protecting creative
and intellectual work has become extremely important. This protection is provided through
Intellectual Property Rights (IPR).
Intellectual Property Rights give legal recognition to creators and innovators, ensuring they
receive credit and financial benefits for their work while preventing unauthorized copying or
misuse.
Internationally, intellectual property protection is promoted by organizations such as World
Intellectual Property Organization, which helps countries develop laws and standards for
safeguarding creative works.

Meaning of Intellectual Property

Intellectual Property (IP) refers to creations of the human mind. These creations may
include:
• Software programs
• Literary and artistic works
• Inventions
• Logos and brand names
• Databases and digital content
Unlike physical property, intellectual property is intangible but holds enormous commercial
value.
Meaning of Intellectual Property Rights (IPR)
Intellectual Property Rights are legal rights granted to creators, inventors, and organizations
over their intellectual creations. These rights allow owners to:
• Use their work commercially
• Prevent unauthorized copying
• License or sell their creations
• Take legal action against infringement
The main objective of IPR is to encourage innovation and creativity by providing economic
rewards and legal protection.

Types of Intellectual Property Rights

IPR is broadly classified into the following categories:

1 Copyright
Copyright protects original creative works such as:
• Books and articles
• Computer software
• Music and films
• Paintings and photographs
• Websites and digital content

35
Copyright gives the creator exclusive rights to reproduce, distribute, display, and adapt their
work.
For BCA students, copyright is especially important in:
• Software development
• Website design
• Multimedia projects
• Digital documentation
Unauthorized copying of software or online content is considered copyright infringement.

2 Patents
A patent protects new inventions or technical solutions.
It grants the inventor exclusive rights to manufacture, sell, or use the invention for a specific
period.
Examples include:
• New algorithms
• Hardware designs
• Innovative technical processes

3 Trademarks
A trademark protects brand identity such as:
• Logos
• Symbols
• Business names
• Taglines
Trademarks help customers identify genuine products and services.

4 Industrial Designs
Industrial design protection applies to the visual appearance of products, such as shape,
pattern, or color.

5 Trade Secrets
Trade secrets include confidential business information like formulas, strategies, or customer
databases. Protection exists as long as secrecy is maintained.

Copyright
Definition
Copyright is a legal right that protects original literary, artistic, musical, and software works
from unauthorized reproduction.

Key Features of Copyright

1. Protects expression, not ideas

36
 2. Automatically applies once work is created
3. Gives exclusive rights to the creator
4. Has limited duration
5. Can be transferred or licensed

Rights Provided Under Copyright

• Right to reproduce
• Right to distribute
• Right to perform or display
• Right to create derivative works

Copyright in Software
For BCA students, software copyright is critical:
• Source code is treated as literary work
• Unauthorized copying of programs is illegal
• Selling pirated software violates copyright law
• Even partial code reuse without permission may be infringement

Copyright Infringement
Copyright infringement occurs when protected material is used without permission.
Common examples:
• Pirated software
• Downloading movies illegally
• Copying project code from the internet
• Using images without attribution
Consequences include:
• Legal penalties
• Financial compensation
• Damage to professional reputation

Intellectual Property in E-Commerce and IT

In digital environments, IP violations are common due to easy copying.
Major challenges include:
• Online piracy
• Plagiarism
• Software theft
• Unauthorized content sharing
E-commerce platforms must protect:
• Website content
• Product designs
• Brand identity

37
 • Customer databases
Strong IPR enforcement builds trust and encourages digital business growth.

Importance of IPR for IT Professionals and BCA Students

Understanding IPR helps students:
• Respect others’ creative work
• Protect their own projects
• Avoid legal issues
• Build ethical software practices
• Support innovation
For future programmers and system designers, knowledge of copyright ensures responsible
use of open-source and proprietary software.

Role of IPR in National Development

IPR contributes to:
• Technological advancement
• Economic growth
• Startup culture
• Research and development
• Global competitiveness
Countries with strong IP laws attract more foreign investment and innovation.

38
In today’s digital environment, organizations depend heavily on computer systems,
networks, and online platforms. Sensitive data such as customer records, financial
information, and intellectual property must be protected from cyber threats.
Technology alone cannot ensure protection. A well-defined Security Policy combined with
an Integrated Security approach is essential to safeguard information assets and maintain
business continuity.

Security Policy
Meaning of Security Policy
A Security Policy is a formal written document that defines:
• Rules for using IT resources
• Responsibilities of users and administrators
• Security standards and procedures
• Actions to be taken during security incidents
It acts as a blueprint for organizational security.

Objectives of a Security Policy

The main objectives are:
• Protect organizational data
• Prevent unauthorized access
• Ensure system availability
• Reduce security risks
• Define acceptable user behavior
• Support legal and regulatory compliance
• Provide guidelines for incident response

Components of a Security Policy

A comprehensive security policy generally includes:

1 Access Control Policy

Defines:
• Who can access systems
• What level of access is allowed
• Password rules
• Multi-factor authentication requirements

2 Data Protection Policy

Covers:
• Data classification (confidential, public, internal)
• Encryption rules
• Backup procedures

39
 • Data sharing guidelines

3 Acceptable Use Policy (AUP)

Specifies how employees and students can use:
• Computers
• Internet
• Email
• Software
It prevents misuse of organizational resources.

4 Network Security Policy

Includes:
• Firewall configuration
• VPN usage
• Wi-Fi security
• Monitoring network traffic

5 Incident Response Policy

Explains steps to follow during:
• Malware attacks
• Data breaches
• System failures
This ensures quick recovery and minimal damage.

6 Physical Security Policy

Protects hardware and infrastructure:
• Server room access
• CCTV
• Biometric systems
• Environmental controls

7 Compliance Policy
Ensures the organization follows legal and international standards such as ISO frameworks
developed by International Organization for Standardization (for example, ISO 27001 for
information security management).

Importance of Security Policy

Security policies help organizations:
• Maintain consistency in security practices
• Reduce human errors
• Improve accountability

40
 • Build customer trust
• Meet legal requirements
• Handle cyber incidents effectively
For BCA students, understanding security policy is crucial because future roles may involve
system administration, software development, or IT management.

41
Integrated Security

Meaning of Integrated Security

Integrated Security refers to a unified approach where multiple security controls work
together as a single system.
Instead of isolated protection methods, integrated security combines:
• Physical security
• Network security
• Application security
• Data security
• User authentication
This creates layered protection, also known as Defense in Depth.

Need for Integrated Security

Modern cyber threats are complex and multi-dimensional. A single security solution cannot
protect everything.
Integrated security is required because:
• Attacks target multiple system layers
• Users access systems from different locations
• Cloud and mobile technologies increase exposure
• Business operations must remain uninterrupted

Components of Integrated Security

1 Physical Layer
• CCTV
• Access cards
• Locked server rooms
Prevents physical theft or damage.
2 Network Layer
• Firewalls
• Intrusion Detection Systems
• Secure routers
Protects communication channels.
3 Application Layer
• Secure coding
• Patch management
• Web application firewalls
Protects software from vulnerabilities.
4 Data Layer
• Encryption

42
 • Backups
• Access permissions
Protects stored and transmitted information.
5 Identity Management
• User authentication
• Role-based access
• Multi-factor login
Ensures only authorized users enter the system.
6 Monitoring and Auditing
• Log analysis
• Security alerts
• Regular audits
Helps detect threats early.

Security Policy vs Integrated Security

Security Policy Integrated Security
Defines rules and guidelines Implements technical protection
Administrative in nature Technical and operational
Explains “what to do” Explains “how it is done”
Focuses on procedures Focuses on systems + procedures
Guides human behavior Protects digital infrastructure
Both must work together for effective cybersecurity.

Real-Life Organizational Example

Large technology organizations like Microsoft use integrated security models combining
identity management, cloud security, endpoint protection, and monitoring tools — all
governed by strict internal security policies.

43
E-commerce systems operate through internet-based platforms involving customers,
businesses, payment gateways, servers, and communication networks. Because transactions
happen digitally, they face multiple security threats.

1. Intellectual Property (IP) Threats

Meaning
Intellectual Property refers to creations of the mind such as:
• Software
• Website design
• Logos and trademarks
• Databases
• Digital content (music, videos, e-books)
IP threats occur when unauthorized users copy, steal, or misuse digital assets.

Types of Intellectual Property Threats

1. Copyright Violation
Unauthorized copying of:
• Software applications
• Digital books
• Images or videos
Example:
Pirated software downloads from illegal websites.
2. Trademark Infringement
Using fake brand names or logos to deceive customers.
Example:
Fake websites imitating brands like Amazon or Flipkart.
3. Patent Theft
Stealing innovative business or technical processes.
4. Trade Secret Theft
Unauthorized access to:
• Customer databases
• Pricing strategies
• Algorithms
Impact
• Financial loss
• Loss of brand reputation
• Legal disputes
• Competitive disadvantage
Prevention Measures
• Copyright laws
• Digital Rights Management (DRM)

44
 • Encryption
• Licensing agreements
• Watermarking digital content

2. Electronic Commerce (E-Commerce) Threats

Meaning
Threats that directly affect online buying and selling activities.

Major E-Commerce Threats

1. Online Fraud
Fake transactions using stolen cards.
2. Identity Theft
Attackers steal user personal information.
3. Payment Fraud
Unauthorized payment processing.
4. Fake Online Stores
Fraudulent websites collecting money without delivering products.

Common Attack Methods

• Phishing emails
• Malware
• Fake payment gateways
• Social engineering attacks

Effects
• Customer distrust
• Financial loss
• Business shutdown risk

Prevention
• Secure payment gateways
• Multi-factor authentication
• HTTPS encryption
• Fraud detection systems

3. Client Threats
Meaning
Threats originating from the customer’s device (mobile, laptop, tablet).

Types of Client Threats

1. Malware Infection

45
Viruses or spyware installed on user devices.
2. Trojan Horse
Malicious programs disguised as genuine applications.
3. Phishing Attacks
Fake login pages stealing credentials.
4. Keyloggers
Software recording keyboard inputs including passwords.

Example Scenario
A customer logs into an online banking portal while malware captures login details.

Consequences
• Account takeover
• Unauthorized purchases
• Data theft

Protection Measures
• Antivirus software
• Secure browsers
• Avoid suspicious downloads
• Regular updates

4. Communication Channel Threats

Meaning
Threats occurring during data transmission between client and server over the internet.

Types of Communication Threats

1. Eavesdropping
Attackers secretly listen to data transmission.
2. Man-in-the-Middle (MITM) Attack
Attacker intercepts communication between user and website.
3. Data Modification
Information altered while in transit.
4. Session Hijacking
Attacker steals active login session.

Real-Life Example
Using public Wi-Fi without encryption exposes login credentials.

Security Controls
• SSL/TLS encryption

46
 • VPN usage
• HTTPS protocols
• Secure cookies
• Network firewalls

5. Server Threats
Meaning
Threats targeting the web server where e-commerce applications and databases are stored.

Types of Server Threats

1. Denial of Service (DoS/DDoS)
Flooding server with traffic to make website unavailable.
2. SQL Injection Attack
Malicious queries accessing database information.
3. Unauthorized Access
Hackers gaining administrative control.
4. Website Defacement
Changing website content illegally.
5. Data Breaches
Mass theft of customer information.

Impact
• Website downtime
• Loss of confidential data
• Legal penalties
• Revenue loss

Prevention Techniques
• Firewall protection
• Intrusion Detection Systems (IDS)
• Regular security patches
• Access control management
• Backup and disaster recovery plans

47
Future of E-Commerce

Introduction
E-Commerce refers to buying and selling goods and services through electronic networks,
mainly the internet. With rapid technological advancements, digital payments, and changing
consumer behavior, e-commerce is becoming the dominant form of global trade.
The future of e-commerce is driven by:
• Technology innovation
• Digital transformation
• Artificial Intelligence
• Mobile commerce
• Global connectivity

Major Trends Shaping the Future of E-Commerce

1. Artificial Intelligence (AI) and Automation

AI is transforming online shopping experiences.
Applications
• Personalized product recommendations
• Chatbots for customer service
• Predictive analytics
• Demand forecasting
• Automated warehouses
Example:
Companies like Amazon use AI to recommend products based on user behavior.
Benefits
• Better customer experience
• Faster decision making
• Reduced operational cost

2. Mobile Commerce (M-Commerce)

Shopping through smartphones is increasing rapidly.
Key Features
• Mobile payment apps
• One-click checkout
• App-based shopping
• Location-based marketing
Indian platforms such as Flipkart and Meesho rely heavily on mobile users.
Future Impact
• Mobile-first businesses
• Growth in rural digital markets

48
 • Voice-assisted shopping

3. Social Commerce
Social media platforms are becoming shopping platforms.
Examples
• Shopping via Instagram and Facebook
• Influencer marketing
• Live shopping events
Customers discover and buy products without leaving social apps.
Advantages
• Direct customer engagement
• Faster purchase decisions
• Personalized marketing

4. Augmented Reality (AR) and Virtual Reality (VR)

AR/VR helps customers experience products virtually.
Applications
• Virtual try-on for clothes and glasses
• Furniture visualization at home
• Virtual showrooms
Future shopping may replicate physical store experiences digitally.

5. Voice Commerce
Voice assistants enable hands-free shopping.
Examples
• Voice search
• Smart speaker purchases
• AI assistants placing orders automatically
Growing use of smart devices will increase voice-based transactions.

6. Faster and Smarter Logistics

Delivery speed is becoming a competitive advantage.
Future Innovations
• Same-day delivery
• Drone delivery
• Autonomous delivery vehicles
• Smart warehouses
Companies aim for instant commerce (Quick Commerce) models.

7. Secure Digital Payments

Digital payment systems continue to evolve.

49
Developments
• UPI payments
• Digital wallets
• Biometric authentication
• Blockchain-based payments
India’s digital payment ecosystem is growing rapidly due to fintech innovations.

8. Globalization of Small Businesses

E-commerce allows small businesses to sell globally.
Opportunities
• Cross-border trade
• Online marketplaces
• Dropshipping models
Even small entrepreneurs can access international customers.

9. Personalization and Customer Experience

Future e-commerce focuses on customer-centric shopping.
Personalization Techniques
• Customized recommendations
• Dynamic pricing
• AI-based marketing
• Behavioral analytics
Result:
Higher customer satisfaction and loyalty.

10. Sustainability and Green E-Commerce

Consumers prefer environmentally responsible businesses.
Trends
• Eco-friendly packaging
• Carbon-neutral delivery
• Ethical sourcing
• Circular economy models
Businesses adopting sustainability gain competitive advantage.

11. Omnichannel Retailing

Integration of online and offline shopping.
Examples
• Buy online, pick up in store
• Unified inventory systems
• Seamless customer experience
Traditional retailers are transforming into hybrid models.

50
12. Blockchain Technology
Blockchain increases transparency and trust.
Uses
• Secure payments
• Supply chain tracking
• Fraud prevention
• Smart contracts

Challenges in the Future of E-Commerce

• Cybersecurity threats
• Data privacy concerns
• Logistics complexity
• High competition
• Regulatory issues

Opportunities
• Expansion into rural markets
• Growth of digital entrepreneurship
• New job opportunities
• AI-driven business models
• Global digital economy

Future Scope of E-Commerce

The future indicates:
• Cashless economy
• Hyper-personalized shopping
• Automated supply chains
• Metaverse shopping environments
• AI-powered virtual assistants
E-commerce is expected to become the primary mode of retail commerce worldwide.

51
Implementing Security for E-Commerce
E-commerce involves online transactions between businesses and customers. Because
financial data, personal information, and business data are exchanged over the internet,
strong security mechanisms are essential. Implementing security in e-commerce ensures
that online transactions remain safe, private, and reliable.

1. Security Requirements in E-Commerce

Security requirements are the basic principles needed to protect online transactions and
data in an e-commerce system.

1. Confidentiality
Confidentiality means that sensitive information should only be accessible to authorized
users.
Examples of confidential information
• Credit card numbers
• Passwords
• Customer personal details
• Business transaction records
Methods to maintain confidentiality
• Data encryption
• Secure Socket Layer (SSL)
• HTTPS protocol
Example: Websites like Amazon protect user data using encrypted connections.

2. Integrity
Integrity ensures that data is not altered or modified during transmission or storage.
If data is modified by attackers, the transaction may become invalid or harmful.
Example
A hacker changing the price of a product or modifying payment details.
Techniques used
• Hash functions
• Digital signatures
• Secure databases

3. Authentication
Authentication verifies the identity of users involved in the transaction.
It confirms that the person accessing the system is genuine.
Common authentication methods
• Username and password
• Two-factor authentication (2FA)
• Biometric authentication

52
Example: Online marketplaces like Flipkart use OTP verification for login and payment
authentication.

4. Authorization
Authorization determines what actions a user is allowed to perform after authentication.
Example:
• Customers can place orders.
• Administrators can manage products and prices.
Authorization ensures controlled access to system resources.

5. Non-Repudiation
Non-repudiation means that a user cannot deny performing a transaction.
For example:
If a customer places an order, they cannot later claim they did not make the purchase.
Tools used
• Digital signatures
• Transaction logs
• Secure payment confirmations

6. Availability
Availability ensures that e-commerce services are accessible whenever customers need
them.
If a website crashes or is attacked, customers cannot complete transactions.
Measures to ensure availability
• Backup systems
• Cloud hosting
• Protection against DDoS attacks

53
Protecting E-Commerce Assets
E-commerce businesses operate through digital platforms where valuable resources such as
data, infrastructure, and business information are stored. These resources are called e-
commerce assets. Protecting these assets is important to ensure secure transactions,
business continuity, and customer trust.

1. Meaning of E-Commerce Assets

E-commerce assets are valuable resources owned or used by an online business that must
be protected from unauthorized access, theft, or damage.
These assets can be classified into two major categories:
• Physical Assets
• Digital Assets
Both types require proper protection through security policies, technology, and risk
management practices.

2. Physical Assets
Meaning
Physical assets refer to tangible resources that support e-commerce operations.
Even though e-commerce is mainly digital, physical infrastructure is essential for running the
system.

Examples of Physical Assets

1. Servers and Hardware
Computers and servers store databases, website files, and transaction data.
2. Data Centers
Facilities where servers and networking equipment are stored.
Example: Companies like Amazon operate large data centers to support their online services.
3. Networking Equipment
Includes routers, switches, cables, and firewalls used to maintain communication networks.
4. Office Infrastructure
Computers, office systems, and storage devices used by employees.
5. Warehouses and Logistics Systems
Physical storage for products sold online.
Example: Warehouses used by companies such as Flipkart store inventory before delivery.

Threats to Physical Assets

• Theft of equipment
• Natural disasters (fire, floods, earthquakes)
• Power failures
• Unauthorized physical access

54
Protection Measures
• CCTV surveillance
• Physical access control systems
• Backup power supply (UPS, generators)
• Disaster recovery plans
• Secure data center facilities

3. Digital Assets
Meaning
Digital assets refer to intangible electronic resources used in e-commerce operations.
These assets are the most valuable because they store customer information, financial
records, and business data.

Examples of Digital Assets

1. Customer Data
Includes names, addresses, phone numbers, and payment information.
2. Product Databases
Information about product details, pricing, and inventory.
3. Website and Application Software
The e-commerce website and mobile apps used by customers.
4. Transaction Records
Records of orders, payments, and shipping details.
5. Intellectual Property
Logos, brand names, website design, and proprietary algorithms.
Example: Brand value and digital platforms of companies like eBay are important digital
assets.

Threats to Digital Assets

• Hacking attacks
• Malware and viruses
• Data breaches
• Phishing attacks
• Unauthorized access

Protection Measures
• Encryption techniques
• Secure authentication systems
• Firewalls and intrusion detection systems
• Regular security updates
• Data backup and recovery systems

55
4. Risk Management in E-Commerce
Meaning
Risk management is the process of identifying, analyzing, and controlling risks that may
affect e-commerce assets and operations.
The goal is to reduce potential losses and ensure secure business operations.

Steps in Risk Management

1. Risk Identification
The first step is to identify possible threats and vulnerabilities.
Examples of risks:
• Cyber attacks
• System failures
• Data theft
• Fraudulent transactions

2. Risk Assessment
After identifying risks, businesses evaluate:
• Likelihood of the risk occurring
• Possible impact on the business
This helps in prioritizing critical risks.

3. Risk Control or Mitigation

Organizations implement security measures to reduce risks.
Examples:
• Installing firewalls
• Using encryption for payment data
• Implementing multi-factor authentication

4. Risk Monitoring
Risks must be continuously monitored and updated as technology and threats evolve.
Regular security audits help identify new vulnerabilities.

Importance of Protecting E-Commerce Assets

Protecting assets helps to:
• Maintain customer trust
• Prevent financial losses
• Ensure smooth business operations
• Protect confidential information
• Maintain brand reputation

56
Intellectual Property (IP) refers to creations of the mind such as inventions, designs, brand
names, software, digital content, and creative works. In e-commerce, businesses rely heavily
on digital assets like websites, software, product images, databases, and brand identity.
Because these assets exist online, they are vulnerable to copying, piracy, and unauthorized
use. Therefore, protecting intellectual property is essential to maintain competitive
advantage, business reputation, and financial security.
Major methods used to protect intellectual property include:
• Encryption
• Digital Watermarking
• Legal Protection

1. Encryption
Meaning
Encryption is a security technique that converts readable data (plaintext) into an
unreadable format (ciphertext). Only authorized users with a decryption key can convert it
back into its original form.
Encryption helps protect intellectual property such as digital documents, software code,
and confidential business data.

How Encryption Works

1. Data is converted into encrypted form using an encryption algorithm.
2. The encrypted data is stored or transmitted securely.
3. Only users with the correct key can decrypt and access the information.

Types of Encryption
1. Symmetric Encryption
• Uses the same key for encryption and decryption.
• Faster but requires secure key sharing.
2. Asymmetric Encryption
• Uses two keys: public key and private key.
• Public key encrypts the data.
• Private key decrypts the data.

Applications in E-Commerce
• Protecting website source code
• Securing product databases
• Protecting confidential business documents
• Secure transmission of digital content

Advantages
• Prevents unauthorized access

57
 • Protects confidential information
• Ensures secure communication

2. Digital Watermarking
Meaning
Digital watermarking is a technique used to embed hidden information into digital content
such as images, videos, audio files, or documents.
The watermark identifies the original owner of the content, helping prevent unauthorized
copying or distribution.

Types of Digital Watermarking

1. Visible Watermark
• Clearly visible logo or text on digital content.
Example: A brand logo placed on product images.
2. Invisible Watermark
• Hidden information embedded within the digital file.
• Not visible to users but detectable using special software.

Applications in E-Commerce
• Protecting product images on online marketplaces
• Securing digital artwork and photographs
• Protecting e-books and online media content
• Preventing content piracy
Example: Online marketplaces such as Amazon often protect digital content like e-books
through watermarking.

Advantages
• Helps identify the original owner
• Discourages piracy
• Maintains authenticity of digital content

3. Legal Protection
Meaning
Legal protection involves using laws and regulations to safeguard intellectual property
rights. Governments provide legal frameworks that protect creators from unauthorized use
of their work.

Types of Legal Protection

1. Copyright
Copyright protects creative works such as:
• Software programs

58
 • Digital content
• Books and articles
• Website content
• Images and videos
The creator gets exclusive rights to reproduce, distribute, and modify the work.

2. Trademark
A trademark protects brand identity, including:
• Brand names
• Logos
• Symbols
• Taglines
Example: Logos and brand names used by companies like Flipkart are protected under
trademark laws.

3. Patent
Patents protect new inventions or innovative technologies. The inventor receives exclusive
rights to use or sell the invention for a certain period.

4. Trade Secrets
Trade secrets protect confidential business information such as:
• Algorithms
• Business strategies
• Customer databases
• Marketing plans

Advantages of Legal Protection

• Provides legal ownership rights
• Prevents unauthorized copying
• Allows businesses to take legal action against infringement

Importance of Protecting Intellectual Property in E-Commerce

Protecting intellectual property helps:
• Maintain brand reputation
• Prevent financial losses
• Encourage innovation
• Protect creative works
• Build customer trust

59
Protecting Client Computers in E-Commerce
Introduction
In e-commerce systems, the client computer refers to the device used by customers to
access online services. These devices include personal computers, laptops, tablets, and
smartphones used for browsing websites, making online purchases, and performing digital
transactions.
Because client computers interact directly with e-commerce websites, they are vulnerable to
cyber attacks, malware, data theft, and fraud. Therefore, protecting client computers is an
important part of e-commerce security.

Common Threats to Client Computers

Before understanding protection methods, it is important to know the major threats faced
by client computers.
1. Malware Attacks
Malicious software designed to damage systems or steal data.
Types include:
• Viruses
• Worms
• Trojans
• Spyware
These programs may enter the computer through downloads, infected websites, or email
attachments.

2. Phishing Attacks
Phishing occurs when attackers create fake emails or websites that look like legitimate ones
in order to steal sensitive information such as passwords and credit card details.
Example: A fake login page resembling an e-commerce website like Amazon.

3. Keyloggers
Keyloggers are programs that record every keystroke typed by the user, including
usernames, passwords, and banking information.

4. Identity Theft
Attackers steal personal information such as:
• Name
• Address
• Credit card details
They then use this information to perform fraudulent transactions.

5. Browser Attacks
Web browsers may be exploited through:

60
 • Malicious scripts
• Insecure plugins
• Fake extensions
These vulnerabilities allow hackers to access sensitive data.

Methods for Protecting Client Computers

1. Installing Antivirus and Anti-Malware Software

Antivirus software detects and removes malicious programs.
Functions
• Scanning files and downloads
• Blocking infected websites
• Removing viruses and spyware
Regular updates ensure protection against new threats.

2. Using Secure Web Browsers

Users should access e-commerce websites through trusted browsers with security features.
Security features include:
• Pop-up blocking
• Phishing protection
• Secure browsing modes
Users should also ensure websites use HTTPS encryption.

3. Regular Software Updates

Operating systems, browsers, and applications should be updated regularly.
Updates include:
• Security patches
• Bug fixes
• Protection against newly discovered vulnerabilities

4. Strong Password Management

Users should create strong and unique passwords for online accounts.
Characteristics of strong passwords
• Combination of letters, numbers, and symbols
• Avoid personal information
• Regular password changes
Two-factor authentication (2FA) adds an extra layer of security.

5. Avoiding Suspicious Links and Downloads

Users should avoid:
• Opening unknown email attachments

61
 • Clicking suspicious links
• Downloading software from untrusted websites
Such actions often lead to malware infections.

6. Using Firewalls
A firewall monitors incoming and outgoing network traffic and blocks unauthorized access.
Firewalls help prevent hackers from accessing client computers remotely.

7. Secure Internet Connections

Public Wi-Fi networks may expose users to data interception attacks.
To reduce risk:
• Avoid online payments on public networks
• Use secure home networks
• Use VPN services when necessary

8. Data Backup
Important files should be backed up regularly.
Backup methods include:
• External hard drives
• Cloud storage services
This helps recover data in case of system failure or cyber attack.

Importance of Protecting Client Computers

Protecting client computers helps:
• Prevent identity theft
• Secure financial transactions
• Protect personal information
• Maintain trust in e-commerce platforms
• Reduce cybercrime risks

62
Protecting E-Commerce Communication Channels
Introduction
In an e-commerce system, communication channels are the networks and pathways
through which data is transmitted between the customer (client) and the server. These
channels include the internet, wireless networks, and communication protocols used for
online transactions.
Since sensitive information such as credit card numbers, passwords, and personal details
travels through these channels, they must be protected from unauthorized access and cyber
attacks. Protecting e-commerce channels ensures secure, reliable, and trustworthy online
transactions.

Common Threats to E-Commerce Channels

Before discussing protection methods, it is important to understand the major threats to
communication channels.
1. Eavesdropping
Eavesdropping occurs when attackers secretly intercept data during transmission between
the user and the website.
Example: Hackers capturing credit card details on an unsecured network.

2. Man-in-the-Middle (MITM) Attack

In this attack, a hacker secretly intercepts communication between the client and the server
and may alter the transmitted data.
Example: Changing payment information during a transaction.

3. Data Modification
Attackers may alter the transmitted information, such as:
• Order details
• Payment amounts
• Shipping addresses
This leads to incorrect or fraudulent transactions.

4. Session Hijacking
Session hijacking occurs when attackers take control of a user's active login session,
allowing them to perform unauthorized actions.

Methods for Protecting E-Commerce Channels

1. Encryption
Encryption converts readable information into encoded data that cannot be understood by
unauthorized users.

63
During transmission, sensitive data is encrypted so that even if it is intercepted, it remains
unreadable.
Example
Secure websites use encryption protocols to protect online transactions.

2. SSL/TLS Protocols
Secure Socket Layer (SSL) and Transport Layer Security (TLS) are protocols that provide
secure communication between web browsers and servers.
These protocols:
• Encrypt transmitted data
• Authenticate websites
• Ensure secure connections
Websites using these protocols display HTTPS in the address bar.
Online marketplaces like Amazon use HTTPS connections to secure customer transactions.

3. Digital Certificates
Digital certificates verify the identity of a website or organization.
They are issued by trusted Certificate Authorities (CAs) and ensure that users are
communicating with legitimate websites.
Digital certificates prevent users from accessing fake or fraudulent websites.

4. Virtual Private Networks (VPNs)

A VPN creates a secure encrypted tunnel for transmitting data over the internet.
Benefits:
• Protects data from interception
• Ensures privacy on public networks
• Secures communication channels

5. Secure Communication Protocols

Using secure protocols ensures safe transmission of data.
Examples include:
• HTTPS (Secure Hypertext Transfer Protocol)
• SFTP (Secure File Transfer Protocol)
• Secure email protocols
These protocols reduce the risk of data theft or interception.

6. Firewalls and Network Security

Firewalls monitor network traffic and block suspicious activities.
They help protect communication channels from:
• Unauthorized access
• Malware attacks

64
 • Network intrusions

7. Authentication and Access Control

Authentication methods ensure that only authorized users can access the communication
channel.
Examples:
• Password-based authentication
• Two-factor authentication (2FA)
• Biometric verification

Importance of Protecting E-Commerce Channels

Protecting communication channels helps:
• Prevent data interception
• Ensure secure financial transactions
• Protect customer privacy
• Maintain business reputation
• Build customer trust in online platforms

65
Protecting the Commerce Server

Introduction

In an e-commerce system, the commerce server is the central computer that hosts the
online store and manages transactions between customers and the business. It stores
important data such as product information, customer records, payment details, and
transaction histories.

Because the commerce server handles critical business operations, it becomes a major
target for cyber attacks. Therefore, protecting the commerce server is essential to ensure
secure online transactions, data protection, and uninterrupted services.

Meaning of Commerce Server

A commerce server is a specialized server that manages e-commerce applications and

processes online transactions.

Functions of a commerce server include:

• Hosting the e-commerce website

• Managing customer accounts

• Processing orders and payments

• Maintaining product catalogs

• Handling databases and transaction records

Many global e-commerce platforms such as Amazon use highly secure server infrastructures
to support millions of transactions.

Threats to Commerce Servers

Commerce servers face several security threats.

1. Unauthorized Access

Hackers may attempt to gain access to the server to steal or modify data.

2. Denial of Service (DoS) and Distributed Denial of Service (DDoS)

Attackers flood the server with excessive requests, making it unavailable to legitimate users.

3. Malware Attacks

Malicious software can infect the server and damage files or steal sensitive information.

4. SQL Injection Attacks

66
Attackers insert malicious SQL commands into web forms to gain unauthorized access to
databases.

5. Data Breaches

Sensitive information such as customer data and payment details may be stolen.

Methods for Protecting the Commerce Server

1. Firewall Protection

A firewall acts as a security barrier between the server and the internet.

Functions:

• Monitors incoming and outgoing traffic

• Blocks unauthorized access

• Filters suspicious network activity

Firewalls help prevent external attacks on the server.

2. Secure Server Configuration

Servers must be configured properly to minimize vulnerabilities.

Security practices include:

• Disabling unnecessary services

• Using secure operating systems

• Restricting administrative access

3. Intrusion Detection Systems (IDS)

IDS monitor server activity to detect suspicious or malicious behavior.

When unusual activity is detected, the system alerts administrators.

4. Encryption and Secure Protocols

Sensitive data transmitted between clients and the server must be encrypted using SSL/TLS
protocols.

Secure connections protect information such as:

• Login credentials

• Payment details

• Personal data
67
5. Regular Software Updates

Server software and applications should be updated regularly.

Updates include:

• Security patches

• Bug fixes

• Protection against newly discovered vulnerabilities

6. Access Control Mechanisms

Access control ensures that only authorized users and administrators can access the server.

Examples:

• Strong passwords

• Multi-factor authentication

• Role-based access permissions

7. Data Backup and Disaster Recovery

Regular backups protect data from loss caused by cyber attacks, system failures, or natural
disasters.

Backup systems allow businesses to restore operations quickly.

8. Monitoring and Logging

Servers maintain logs of activities such as:

• User access

• Transactions

• System changes

Monitoring logs helps detect security incidents early.

Importance of Protecting Commerce Servers

Protecting the commerce server helps:

• Prevent cyber attacks

• Protect sensitive customer information

• Ensure uninterrupted online services

• Maintain business reputation

68
Ensuring (Insuring) Transaction Integrity in E-Commerce
Introduction
Transaction integrity in e-commerce refers to maintaining the accuracy, consistency, and
reliability of data during online transactions. It ensures that the information exchanged
between the customer and the business remains complete, correct, and unchanged during
transmission and processing.
If transaction integrity is compromised, attackers may modify payment details, product
prices, or order information. Therefore, maintaining transaction integrity is essential for
secure online business operations.

Meaning of Transaction Integrity

Transaction integrity means that:
• Data sent by the customer reaches the server without alteration.
• Payment information remains accurate and secure.
• Order details are processed correctly and completely.
• No unauthorized person can modify transaction data.
Example: When a customer places an order on an online platform like Amazon, the payment
amount, product details, and shipping information must remain unchanged throughout the
transaction.

Threats to Transaction Integrity

Several threats can compromise transaction integrity in e-commerce.
1. Data Modification Attacks
Hackers may alter data during transmission.
Example:
Changing payment amount or delivery address.
2. Man-in-the-Middle (MITM) Attacks
An attacker intercepts communication between the client and the server and may modify
transaction data.
3. Unauthorized Access
Hackers gaining access to systems may manipulate order or payment records.
4. Software Errors
Bugs or system failures may cause incorrect processing of transactions.

Methods for Ensuring Transaction Integrity

1. Encryption
Encryption protects transaction data during transmission.
• Converts readable information into coded form.
• Only authorized users can decode the data.
Encryption ensures that attackers cannot read or modify transaction information.

69
2. Digital Signatures
A digital signature verifies the authenticity and integrity of a transaction.
Functions
• Confirms the identity of the sender.
• Ensures that data has not been altered.
• Provides non-repudiation.
If data is modified after signing, the signature becomes invalid.

3. Hash Functions
A hash function converts data into a unique fixed-length code called a hash value.
If even a small change occurs in the data, the hash value changes completely.
This helps detect data tampering.

4. Secure Communication Protocols

Protocols such as HTTPS and SSL/TLS provide secure communication between the client and
server.
These protocols:
• Encrypt transmitted data
• Protect transaction information
• Prevent unauthorized access

5. Authentication Systems
Authentication ensures that only legitimate users can initiate transactions.
Methods include:
• Password authentication
• Two-factor authentication (2FA)
• Biometric verification

6. Transaction Logs and Monitoring

E-commerce systems maintain detailed transaction records.
These logs help:
• Track transaction history
• Detect suspicious activities
• Audit financial transactions

7. Database Security
Databases storing transaction data must be protected using:
• Access control mechanisms
• Encryption
• Regular backups
This prevents unauthorized modification of transaction records.

70
Importance of Transaction Integrity
Ensuring transaction integrity helps:
• Maintain accurate financial records
• Prevent fraud and cyber attacks
• Protect customer trust
• Ensure smooth business operations
• Avoid legal and financial losses

Conclusion
Transaction integrity is a fundamental requirement for secure e-commerce systems. By
using technologies such as encryption, digital signatures, hash functions, and secure
communication protocols, businesses can ensure that online transactions remain accurate,
reliable, and protected from unauthorized modifications.
Maintaining transaction integrity ultimately builds customer confidence and long-term
success in digital commerce.

71
Electronic Payment System (EPS)

1. Introduction
An Electronic Payment System (EPS) is a mechanism that enables cashless transactions
through electronic means such as the internet, mobile devices, and computer networks.
In modern e-commerce, EPS acts as the backbone of online business, allowing customers
and businesses to exchange money quickly, securely, and efficiently without physical cash.
The rapid growth of digital platforms, smartphones, and fintech innovations has made EPS
an essential component of the digital economy.

2. Definition
An Electronic Payment System can be defined as:
“A system that facilitates the transfer of money electronically between a buyer and a seller
using digital technologies and communication networks.”

3. Objectives of Electronic Payment Systems

• To provide fast and efficient transactions
• To ensure secure transfer of funds
• To reduce dependence on physical cash
• To support global e-commerce operations
• To improve customer convenience and experience

4. Components of Electronic Payment System

An EPS involves multiple entities working together:
1. Customer (Payer)
The individual who initiates the payment.
2. Merchant (Payee)
The business or seller receiving the payment.
3. Payment Gateway
A service that authorizes and processes payments securely between customer and
merchant.
4. Issuing Bank
The customer’s bank that provides payment instruments (card/UPI).
5. Acquiring Bank
The merchant’s bank that receives the payment.
6. Payment Processor / Network
Handles communication between banks and payment systems.

6. Working of Electronic Payment System (Detailed Flow)

1. Customer selects product/service online
2. Chooses payment method

72
 3. Enters payment details (card/UPI/wallet)
4. Payment gateway encrypts data
5. Request sent to issuing bank
6. Bank verifies user credentials
7. Transaction approved or declined
8. Confirmation sent to merchant and customer
9. Funds transferred to merchant account

7. Security Requirements in EPS

To ensure safe transactions, EPS must satisfy:
• Confidentiality – Data must be private
• Integrity – Data should not be altered
• Authentication – Identity verification
• Non-repudiation – No denial of transaction
• Availability – System should always be accessible

8. Security Technologies Used in EPS

• Encryption (SSL/TLS)
• Digital signatures
• Two-factor authentication (OTP)
• Tokenization (hiding card details)
• Firewalls and intrusion detection systems

9. Advantages of Electronic Payment Systems

• Quick and real-time transactions
• Convenience (24×7 access)
• Reduced cash handling
• Better record keeping
• Supports global trade
• Encourages digital economy

10. Disadvantages of Electronic Payment Systems

• Risk of cyber fraud
• Technical issues and system failures
• Dependence on internet
• Privacy concerns
• Lack of digital literacy in some areas

11. Challenges in Electronic Payment Systems

• Security threats (phishing, hacking)
• Regulatory and compliance issues

73
 • Fraud detection and prevention
• Infrastructure limitations in rural areas

12. Future of Electronic Payment Systems

• Growth of cashless economy
• Increased use of AI in fraud detection
• Rise of contactless payments
• Expansion of blockchain-based payments
• Greater adoption of biometric authentication
India is witnessing rapid growth in digital payments through UPI and mobile apps, making it
one of the leading digital payment ecosystems globally.

74
Electronic Wallets (E-Wallets)

1. Introduction
An Electronic Wallet (E-Wallet), also known as a Digital Wallet, is a software-based system
that allows users to store money and payment information electronically and perform
online or offline transactions.
E-wallets are widely used in e-commerce to make fast, secure, and cashless payments using
smartphones, computers, or other digital devices.

2. Meaning of Electronic Wallet

An electronic wallet can be defined as:
“A digital application that stores a user’s payment details and enables electronic transactions
for purchasing goods and services.”

3. Features of E-Wallets
• Cashless Transactions – No need for physical cash
• Convenience – Easy and quick payments
• Security – Protected by passwords, PIN, OTP, biometrics
• Portability – Accessible via mobile devices
• Transaction History – Records of all payments
• Multi-functionality – Bill payments, recharge, ticket booking

4. Types of Electronic Wallets

1. Closed Wallet
Meaning
A wallet issued by a specific company and used only within that company’s platform.
Example
Wallet balance usable only on a particular website.

2. Semi-Closed Wallet
Meaning
Can be used at multiple merchants but does not allow cash withdrawal.
Examples
Popular semi-closed wallets include Paytm and PhonePe.

3. Open Wallet
Meaning
Allows users to:
• Make payments
• Transfer funds

75
 • Withdraw cash
Usually issued by banks.

5. Components of an E-Wallet
• User Account – Stores user information
• Payment Information – Card details, bank account, UPI ID
• Digital Balance – Stored money
• Security Features – PIN, OTP, biometric authentication
• Transaction Records – History of payments

6. Working of Electronic Wallets

Step-by-Step Process
1. User downloads wallet app (e.g., Google Pay)
2. Registers using mobile number
3. Links bank account or adds money
4. Selects product/service
5. Chooses wallet as payment option
6. Authenticates payment (PIN/OTP)
7. Payment is processed and confirmed

7. Technologies Used in E-Wallets

• Encryption – Protects user data
• Near Field Communication (NFC) – Enables contactless payments
• QR Codes – Scan and pay feature
• Tokenization – Hides actual card details
• Biometric Authentication – Fingerprint/face recognition

8. Advantages of Electronic Wallets

• Fast and instant payments
• User-friendly interface
• Reduces need for cash
• Offers discounts and cashback
• Secure transactions
• Useful for small and large payments

9. Disadvantages of Electronic Wallets

• Dependence on internet and mobile devices
• Risk of hacking or fraud
• Limited acceptance in some areas
• Requires digital literacy
• Battery/device dependency

76
10. Security Issues in E-Wallets
• Unauthorized access
• Phishing attacks
• Malware threats
• Loss of mobile device

Security Measures
• Strong passwords and PIN
• Two-factor authentication (OTP)
• Biometric verification
• Regular app updates
• Avoiding public Wi-Fi for transactions

11. Role of E-Wallets in E-Commerce

E-wallets play a vital role in e-commerce by:
• Enabling quick checkout
• Improving customer experience
• Reducing transaction time
• Supporting cashless economy
• Increasing online sales
Platforms like Amazon integrate wallet options for seamless payments.

12. Future of Electronic Wallets

• Growth of contactless payments
• Integration with AI and analytics
• Expansion in rural markets
• Increased use of biometric security
• Integration with digital currencies (CBDCs)

77
These are important electronic payment instruments used in e-commerce and digital
transactions.

1. Smart Card
Meaning
A Smart Card is a plastic card embedded with a microchip that stores and processes data
securely. It is more advanced than traditional magnetic stripe cards.

Features of Smart Cards

• Embedded integrated circuit (chip)
• Secure data storage
• Can process data internally
• Supports encryption
• Can be contact or contactless

Types of Smart Cards

1. Contact Smart Card
• Requires insertion into a card reader
• Physical contact with device
2. Contactless Smart Card
• Uses NFC (Near Field Communication)
• Tap-and-pay functionality

Uses of Smart Cards

• Banking and payments
• Identity cards
• SIM cards
• Transportation cards
• Access control systems

Advantages of Smart Cards

• High security
• Resistant to fraud
• Multi-purpose usage
• Stores large amount of data

Disadvantages
• Costly compared to normal cards
• Requires compatible devices
• Risk of damage to chip

78
2. Credit Card
Meaning
A Credit Card is a payment card that allows users to borrow money from a bank or financial
institution to make purchases, with repayment at a later date.

Features of Credit Cards

• Credit limit provided by bank
• Interest charged on unpaid balance
• Accepted globally
• Offers rewards and cashback

Working of Credit Card

1. Customer uses credit card for payment
2. Merchant sends request to payment gateway
3. Bank verifies credit limit
4. Transaction is approved
5. Customer repays bank later

Advantages of Credit Cards

• Buy now, pay later
• Useful in emergencies
• Builds credit history
• Rewards and offers

Disadvantages
• High interest rates
• Risk of overspending
• Possibility of fraud
• Late payment penalties

3. Charge Card
Meaning
A Charge Card is similar to a credit card but requires the user to pay the full balance at the
end of each billing cycle.

Features of Charge Cards

• No predefined spending limit (in many cases)
• Full payment required monthly
• No interest if paid on time
• High annual fees

79
Working of Charge Card
1. User makes purchases
2. Bank records transactions
3. Monthly bill is generated
4. User must pay entire amount

Advantages of Charge Cards

• No interest charges
• Encourages financial discipline
• Higher spending flexibility
• Premium services and benefits

Disadvantages
• Full payment mandatory
• High penalties for non-payment
• Not widely accepted everywhere

4. Difference Between Smart Card, Credit Card and Charge Card

Basis Smart Card Credit Card Charge Card
Nature Technology-based card Borrowing card Pay-in-full card
Payment Stored value or data Credit-based Full payment required
Interest No interest Charged if unpaid No interest
Spending Limit Depends on stored value Fixed credit limit Often no preset limit
Usage Multi-purpose Purchases on credit High-value transactions

5. Importance in E-Commerce
These payment instruments:
• Enable secure online transactions
• Provide convenience to users
• Support global payments
• Reduce dependence on cash
• Improve customer experience

Difference Between Credit Card and Charge Card

Basis Credit Card Charge Card
Allows users to borrow money up Requires users to pay full amount
Meaning
to a fixed limit at the end of billing cycle

80
Basis Credit Card Charge Card
Minimum payment allowed; Full payment is compulsory every
Payment Option
balance can be carried forward month
Interest is charged on unpaid No interest (since full payment is
Interest Charges
balance required)
Usually no preset limit (depends
Spending Limit Predefined credit limit set by bank
on user profile)
Late payment leads to interest + Heavy penalties if full payment is
Penalty
penalties not made
More flexible due to partial Less flexible due to strict full
Usage Flexibility
payment option payment rule
Financial Encourages strict financial
May encourage overspending
Discipline discipline
Annual Fees Moderate or sometimes free Generally higher annual fees
Acceptance Widely accepted globally Less common than credit cards
Examples
Buy now, pay later with installments Buy now, pay fully at month end
(Conceptual)

81
1. Introduction
Business-to-Business (B2B) E-Commerce refers to the electronic exchange of goods,
services, and information between business organizations using digital platforms such as
the internet, intranet, and extranets.
It is the largest segment of e-commerce, as most commercial transactions occur between
businesses rather than between businesses and consumers.

2. Meaning of Inter-Organizational Transactions

Inter-organizational transactions are:
“Electronic transactions conducted between two or more independent organizations to
exchange goods, services, or business information.”
These transactions involve:
• Manufacturer ↔ Supplier
• Manufacturer ↔ Wholesaler
• Wholesaler ↔ Retailer
• Company ↔ Logistics provider
Types of B2B Inter-Organizational Models
In Business-to-Business (B2B) E-Commerce, inter-organizational models define how
businesses interact, trade, and exchange information electronically. These models differ
based on who controls the platform and how buyers and sellers connect.

1. Supplier-Oriented Model (Sell-Side Model)

Meaning
In this model, a single supplier sells products/services to multiple business buyers through
an online platform.
Key Features
• One seller, many buyers
• Supplier controls pricing and catalog
• Buyers place orders directly
Working
• Supplier creates an online catalog
• Buyers browse products
• Orders are placed electronically
• Payment and delivery follow
Advantages
• Strong control for supplier
• Efficient sales process
• Direct communication with buyers
Example
Manufacturers selling goods to wholesalers or retailers through their own portals.

82
2. Buyer-Oriented Model (Buy-Side Model)
Meaning
In this model, a large buyer invites multiple suppliers to bid for products or services.
Key Features
• One buyer, many suppliers
• Competitive bidding (reverse auction)
• Buyer controls the platform
Working
• Buyer posts requirements
• Suppliers submit quotations
• Buyer selects the best offer
Advantages
• Cost reduction through competition
• Better supplier selection
• Transparent pricing
Example
Large companies sourcing raw materials from multiple vendors.

3. Intermediary-Oriented Model (Marketplace/Exchange Model)

Meaning
A third-party platform acts as an intermediary, connecting multiple buyers and sellers.
Key Features
• Many buyers and many sellers
• Neutral platform
• Global reach
Working
• Businesses register on platform
• Buyers and sellers interact
• Transactions are facilitated by intermediary
Advantages
• Reduced search cost
• Increased market access
• Efficient matching of demand and supply
Example
Platforms like Alibaba Group enable global B2B transactions.

4. Industry Consortium Model

Meaning
A group of companies within the same industry jointly create a platform for B2B
transactions.
Key Features

83
 • Owned by multiple organizations
• Focus on specific industry
• Shared standards and processes
Working
• Industry players collaborate
• Platform used for procurement and supply chain
• Standardized transactions
Advantages
• Industry-wide efficiency
• Reduced transaction costs
• Better collaboration

5. Private Industrial Network (Private Exchange)

Meaning
A private network created by a large organization to connect with its suppliers and business
partners.
Key Features
• Owned by a single company
• Restricted access
• High security
Working
• Company invites selected partners
• Transactions occur within private network
• Integrated with internal systems (ERP, SCM)
Advantages
• Strong control and security
• Efficient supply chain management
• Long-term partnerships

6. E-Procurement Model
Meaning
An electronic system used by organizations to purchase goods and services online.
Key Features
• Automated procurement process
• Digital purchase orders and invoices
• Supplier management
Working
• Organization identifies need
• Sends request electronically
• Supplier fulfills order
Advantages

84
 • Reduced paperwork
• Faster procurement
• Cost savings

7. Collaborative Commerce Model (C-Commerce)

Meaning
Businesses collaborate digitally to share information and jointly manage operations.
Key Features
• Real-time data sharing
• Joint decision-making
• Integration of systems
Advantages
• Improved coordination
• Faster response to demand changes
• Better supply chain efficiency
8. Challenges and Limitations

1. High Initial Investment

• Cost of technology implementation
2. System Integration Issues
• Compatibility problems between systems
3. Security Risks
• Data breaches
• Unauthorized access
4. Legal and Regulatory Issues
• Different laws across countries

5. Dependence on Technology
• System failure can disrupt operations

85
.Introduction to EDI
Meaning
Electronic Data Interchange (EDI) is the computer-to-computer exchange of business
documents in a standardized electronic format between organizations without human
intervention.

Definition
“EDI is the structured transmission of business data between organizations electronically
using standard formats.”

Need for EDI

Traditional business communication involved:
• Paper documents
• Manual processing
• Postal delays
• Human errors
EDI eliminates these issues by enabling:
• Faster communication
• Automation
• Accur
Documents Exchanged via EDI
• Purchase Orders (PO)
• Invoices
• Shipping Notices
• Payment Records
• Inventory Reports

Example
A retailer sends a purchase order electronically to a supplier, and the supplier automatically
processes it without manual entry.

2. Features of EDI
• Standardized Format (e.g., EDIFACT, ANSI X12)
• Computer-to-Computer Communication
• No Paperwork
• High Speed and Accuracy
• Automation of Business Processes

3. Benefits of EDI

1. Speed and Efficiency

86
 • Transactions occur in seconds
• Faster order processing
• Reduced delays
2. Cost Reduction
• Eliminates paper, printing, and postage costs
• Reduces labor costs
• Minimizes administrative expenses
3. Accuracy and Reduced Errors
• No manual data entry
• Fewer human errors
• Improved data quality
4. Improved Business Relationships
• Faster communication
• Reliable transactions
• Better coordination with partners
5. Better Inventory Management
• Real-time updates
• Reduced stock shortages
• Efficient supply chain
6. Increased Productivity
• Automation of repetitive tasks
• Employees can focus on strategic work
7. Enhanced Security
• Secure data transmission
• Controlled access
• Reduced risk of data loss

4. Limitations of EDI
• High initial setup cost
• Requires technical expertise
• Compatibility issues between systems
• Dependence on standards

5. EDI Technology
EDI technology refers to the tools, systems, and processes used to exchange electronic
business documents.

Components of EDI System

1. EDI Standards
Standard formats ensure uniform communication.

87
Common Standards:
• EDIFACT (International standard)
• ANSI X12 (Used in USA)
2. EDI Software
Software that converts business data into EDI format and vice versa.
Functions:
• Data translation
• Document processing
• Communication handling
3. Communication Network
EDI data is transmitted through:
Types:
• Value Added Network (VAN)
• Internet (Web-based EDI)
• Direct connections
4. EDI Translator
• Converts internal data into standard EDI format
• Converts received EDI data into readable format
5. Business Applications
ERP or accounting systems that:
• Generate documents
• Receive and process EDI data

6. Types of EDI

1. Direct EDI (Point-to-Point)

• Direct connection between two organizations
• High security
• Limited scalability
2. VAN-Based EDI
• Uses third-party network (VAN)
• Stores and forwards data
• Reliable but costly
3. Web-Based EDI
• Uses internet and cloud platforms
• Cost-effective
• Widely used today

7. Working of EDI

Step-by-Step Process:

88
 1. Business document is created (e.g., invoice)
2. EDI software converts it into standard format
3. Document is transmitted through network
4. Receiver’s system receives document
5. EDI translator converts it into readable format
6. Data is processed automatically

8. EDI in E-Commerce
EDI plays a major role in:
• B2B transactions
• Supply chain management
• Inventory control
• Logistics coordination
Example: Platforms like Alibaba Group use automated systems similar to EDI for large-scale
B2B transactions.

9. Advantages of EDI in E-Commerce

• Faster order processing
• Reduced transaction cost
• Improved accuracy
• Better supply chain integration
• Real-time communication

10. Future of EDI

• Integration with cloud computing
• Use of AI for automation
• Blockchain for secure transactions
• Expansion of API-based data exchange

Step-by-Step Explanation (Without EDI vs With EDI)

Without EDI (Traditional Method)
1. Store manager checks inventory manually
2. Writes order on paper/email
3. Sends it to supplier
4. Supplier manually enters data
5. Chances of:
o Errors
o Delays
o Miscommunication

With EDI (Modern Method)

89
1. System detects low stock automatically
2. Computer generates Purchase Order (PO)
3. PO is sent directly to supplier’s system (EDI)
4. Supplier’s system automatically:
o Receives order
o Processes it
o Generates invoice
5. Goods are shipped immediately

90
Meaning of EDI Technology
EDI Technology is the technical infrastructure that supports the creation, transmission,
translation, and processing of electronic business documents in a standardized format.

Objectives of EDI Technology

• Automate business transactions
• Reduce paperwork
• Improve accuracy and speed
• Enable real-time communication
• Enhance supply chain efficiency

Key Elements of EDI Technology

1. EDI Standards
Meaning
Standard formats used to structure electronic documents.
Common Standards
• EDIFACT (international)
• ANSI X12 (widely used in the USA)
Purpose
• Ensure uniform communication
• Avoid data misinterpretation

2. EDI Software (Translator)

Meaning
Software that converts data between:
• Internal format ↔ Standard EDI format
Functions
• Data translation
• Document formatting
• Error checking

3. Communication Technology
EDI requires a network to transmit data.
Types:
a) Value Added Network (VAN)
• Third-party service provider
• Provides secure transmission
• Stores and forwards messages

b) Internet-Based EDI

91
 • Uses internet protocols (HTTP, FTP)
• Cost-effective and widely used

c) Direct EDI (Point-to-Point)

• Direct connection between businesses
• High security
• Limited flexibility

4. Integration with Business Systems

EDI systems are integrated with:
• ERP (Enterprise Resource Planning)
• SCM (Supply Chain Management)
• Accounting systems
This ensures automatic processing of documents.

5. Security Technologies
EDI uses various security mechanisms:
• Encryption – Protects data
• Authentication – Verifies identity
• Digital Signatures – Ensures integrity
• Access Control – Restricts unauthorized users

6. Mapping and Interface Tool

• Map internal data fields to EDI formats
• Ensure compatibility between systems

92
1. Introduction
EDI Standards are predefined formats and rules used to structure electronic business
documents so that different organizations can communicate and exchange data accurately
and efficiently.
Without standards, each company would use different formats, making data exchange
difficult and error-prone.

2. Meaning of EDI Standards

EDI Standards are uniform guidelines that define the format, structure, and content of
electronic documents exchanged between organizations.

3. Need for EDI Standards

EDI standards are required because:
• Different companies use different systems
• Data must be understood uniformly
• Ensures compatibility and interoperability
• Reduces errors and miscommunication

4. Key Features of EDI Standards

• Standardized data format
• Structured message layout
• Use of codes and segments
• International acceptance
• Platform-independent

5. Components of EDI Standards

1. Data Elements
• Smallest unit of information
• Example: price, quantity, date
2. Data Segments
• Group of related data elements
• Example: customer details segment
3. Messages (Documents)
• Complete business document
• Example: invoice, purchase order
4. Codes and Identifiers
• Standard codes for countries, currencies, products

6. Major EDI Standards

93
1. EDIFACT (Electronic Data Interchange for Administration, Commerce and Transport)
Developed by: United Nations
Features
• International standard
• Widely used across the world
• Supports multiple industries
Uses
• Trade
• Shipping
• Logistics
2. ANSI X12
Developed by: American National Standards Institute
Features
• Commonly used in the USA
• Industry-specific standards
Uses
• Healthcare
• Retail
• Finance
3. TRADACOMS
Developed in: UK
Features
• Used mainly in retail sector
• Older standard
4. ODETTE
Used in: European automobile industry
Features
• Designed for automotive supply chains
5. RosettaNet
Used in: Electronics and IT industries
Features
• XML-based standard
• Supports modern web technologies

94
1. Introduction
EDI Communication refers to the electronic transmission of standardized business
documents between organizations through communication networks.
It is a crucial part of EDI because it ensures that data is transferred quickly, securely, and
accurately from one business system to another.

2. Meaning of EDI Communication

EDI Communication is the process of sending and receiving electronic business documents
in a standardized format through a communication network.

3. Objectives of EDI Communication

• Enable fast data transmission
• Ensure secure communication
• Reduce manual intervention
• Improve accuracy and reliability
• Support automated business processes

4. Components of EDI Communication

1. Sender (Originating System)

The organization that sends the EDI document.
2. EDI Translator
Converts internal data into standard EDI format.
3. Communication Network
Medium through which data is transmitted.
4. Receiver (Destination System)
The organization that receives the EDI document.
5. Acknowledgment System
Confirms that the message has been successfully received.

5. Methods of EDI Communication

1. Value Added Network (VAN)

Meaning
A third-party network provider that manages EDI communication.
Features
• Stores and forwards messages
• Provides security and reliability
• Offers tracking and audit features
Advantages
• High security

95
 • Reliable delivery
• Error handling
Disadvantages
• Expensive

2. Direct EDI (Point-to-Point)

Meaning
Direct communication between two organizations.
Features
• No intermediary
• Faster transmission
Advantages
• High security
• Cost-effective for large partners
Disadvantages
• Complex setup
• Not scalable

3. Internet-Based EDI (Web EDI)

Meaning
Uses the internet to exchange EDI documents.
Features
• Uses protocols like HTTP, FTP
• Cloud-based solutions
Advantages
• Low cost
• Easy to implement
• Widely used
Disadvantages
• Security concerns if not properly managed

6. Communication Protocols in EDI

Protocols define how data is transmitted.
Common Protocols:
• HTTP/HTTPS – Web-based communication
• FTP – File transfer
• AS2 (Applicability Statement 2) – Secure EDI over internet
• SMTP – Email-based transmission
• Sender → Translator → Communication Network → Receiver → Acknowledgment

96
1. Introduction

EDI Implementation refers to the process of planning, setting up, and integrating an EDI
system within an organization to enable electronic exchange of business documents with
trading partners.

It involves technical, organizational, and strategic steps to ensure smooth and secure data
exchange.

Steps in EDI Implementation

Step 1: Need Assessment

Activities:

• Identify business requirements

• Analyze current processes
• Determine documents to be exchanged (PO, invoice, etc.)

Step 2: Feasibility Study

Activities:

• Cost-benefit analysis
• Technical feasibility
• Organizational readiness

Step 3: Selection of EDI Solution

Options:

• VAN-based EDI
• Web-based EDI
• Cloud-based EDI

Decision Factors:

• Cost
• Security
• Scalability

Step 4: Choosing EDI Standards

Common Standards:

• EDIFACT

97
 • ANSI X12

Ensure compatibility with trading partners.

Step 5: Hardware and Software Setup

Requirements:

• Computers/servers
• EDI software (translator)
• Communication network

Step 6: Mapping and Integration

Meaning:

• Mapping internal data fields to EDI format

Activities:

• Data mapping
• Integration with ERP/SCM systems

Step 7: Partner Agreement

Activities:

• Agreement with trading partners on:

o Standards
o Communication method
o Security protocols

Step 8: Testing

Types of Testing:

• Internal testing
• Partner testing

Purpose:

• Ensure system accuracy and reliability

Step 9: Training

Activities:

• Train employees

98
 • Provide technical knowledge

Step 10: Implementation (Go-Live)

• Start using EDI system

• Replace manual processes

Step 11: Monitoring and Maintenance

Activities:

• System monitoring
• Error handling
• Regular updates

99
Introduction
An EDI Agreement is a formal contract between two or more trading partners that defines
the terms, conditions, and rules for exchanging electronic data using EDI systems.
It ensures that both parties clearly understand:
• How data will be exchanged
• What standards will be used
• How security and responsibilities are handled
. Types of EDI Agreements

1. Trading Partner Agreement (TPA)

• Most common type
• Defines technical and business rules
2. Legal Agreement
• Focuses on legal aspects
• Covers liability, compliance, and dispute resolution
3. Service Level Agreement (SLA)
• Defines performance standards
• Includes uptime, response time, and reliability
Key Elements of an EDI Agreement
1. Parties Involved
• Identification of trading partners
• Legal names and addresses
2. Scope of Agreement
• Types of documents exchanged (PO, invoice, etc.)
• Business processes covered
3. EDI Standards
• Agreed standards (e.g., EDIFACT, ANSI X12)
• Message formats and codes
4. Communication Method
• VAN, Internet, or direct connection
• Protocols used (AS2, FTP, etc.)
5. Security and Confidentiality
• Encryption methods
• Authentication procedures
• Access control
6. Acknowledgment Procedures
• Confirmation of receipt
• Error handling and retransmission
7. Data Integrity
• Ensuring data is not altered
• Use of digital signatures

100
8. Legal Validity
• Recognition of electronic documents as legal proof
• Compliance with laws and regulations
9. Liability and Dispute Resolution
• Responsibility for errors or delays
• Procedures for resolving disputes
10. Audit and Record Keeping
• Maintenance of transaction records
• Audit rights
11. Termination Clause
• Conditions under which agreement can be ended

101
EDI Security refers to the measures, techniques, and policies used to protect electronic
business data exchanged between organizations through EDI systems. It ensures that
sensitive information like invoices, purchase orders, and financial data remains safe,
accurate, and accessible only to authorized users.

Why EDI Security is Important

EDI systems handle critical business data, such as:
• Financial transactions
• Customer information
• Supply chain details
If security is weak, it can lead to:
• Data breaches
• Financial loss
• Legal penalties
• Loss of business trust

Key Elements of EDI Security

1. Data Encryption
• Converts data into unreadable format during transmission
• Ensures confidentiality
• Common protocols: SSL/TLS, SFTP, AS2
2. Authentication
• Verifies identity of sender and receiver
• Uses passwords, digital certificates, or keys
• Prevents unauthorized access
3. Data Integrity
• Ensures data is not altered during transmission
• Achieved using:
o Hash functions
o Digital signatures
4. Non-Repudiation
• Ensures that sender cannot deny sending the message
• Uses digital signatures and audit trails
5. Access Control
• Restricts system access to authorized users only
• Uses role-based permissions
6. Audit Trails & Monitoring
• Tracks all EDI transactions
• Helps detect suspicious activities and ensures compliance

Common Threats in EDI Security

102
 • Data breaches – Unauthorized access to sensitive data
• Man-in-the-middle attacks – Interception of communication
• Malware & ransomware – Disrupt operations and steal data

EDI Security Measures / Best Practices

• Use secure communication protocols (AS2, SFTP)
• Implement firewalls and intrusion detection systems
• Regular security audits and penetration testing
• Encrypt data at rest and in transit
• Maintain backup and disaster recovery plans
• Follow compliance standards like HIPAA, PCI-DSS

103