E-COMMERCE

Comprehensive Study Guide

Units Covered Unit I – Unit V

Subject Electronic Commerce (E-Commerce)
Topics 5 Units | 50+ Key Concepts
UNIT I — Introduction to E-Commerce

Overview
E-Commerce (Electronic Commerce) refers to commercial transactions—buying, selling, transferring, or
exchanging products, services, or information—conducted via computer networks, primarily the Internet. It
encompasses every aspect of business conducted electronically, from marketing and ordering to payment and
delivery.

1.1 The Scope of Electronic Commerce

E-Commerce is much broader than simply buying and selling online. Its scope includes:

• Business-to-Consumer (B2C): Retailers selling directly to individual customers (e.g., Amazon, Flipkart).
• Business-to-Business (B2B): Transactions between companies (e.g., manufacturer to wholesaler).
• Consumer-to-Consumer (C2C): Individuals selling to other individuals (e.g., eBay, OLX).
• Government-to-Citizen (G2C): Government services delivered electronically (e.g., tax filing portals).
• Intrabusiness EC: Internal company processes conducted electronically (e.g., employee self-service
portals).
• Mobile Commerce (M-Commerce): EC conducted via smartphones and mobile devices.
• Social Commerce: Buying/selling facilitated via social media platforms.

1.2 Definition of Electronic Commerce

Multiple definitions exist reflecting different perspectives:

• Communication perspective: EC is the delivery of information, products/services, or payments via

telephone lines, computer networks, or any other electronic means.
• Business process perspective: EC is the application of technology toward the automation of business
transactions and workflows.
• Service perspective: EC is a tool that addresses the desire of firms, consumers, and management to cut
service costs while improving quality and increasing the speed of service delivery.
• Online perspective: EC provides the capability of buying and selling products and information on the
Internet and other online services.

1.3 Electronic E-Commerce and the Trade Cycle

The Trade Cycle represents the stages of a commercial transaction. EC automates many of these stages:

Stage Description EC Application

Pre-Sales Awareness, searching, negotiation Online catalogs, search engines, auctions

Execution Order placement and confirmation E-ordering systems, EDI

Settlement Payment and invoicing Online banking, e-payment gateways

After-Sales Support, returns, feedback CRM systems, chatbots, email support

1.4 Electronic Markets
An Electronic Market (e-market) is a virtual marketplace where buyers and sellers meet to exchange goods,
services, information, and payments. Key characteristics:

• Reduced transaction costs through automation and elimination of intermediaries.

• Increased market transparency — prices and product information are more accessible.
• Global reach — buyers and sellers can transact across geographical boundaries.
• Dynamic pricing — auctions and reverse auctions are common.
• Types of e-markets: Private (one company), public (open to all), consortia (industry group).

1.5 Electronic Data Interchange (EDI)

EDI is the structured computer-to-computer exchange of standard business documents (purchase orders,
invoices, shipping notices) between organizations in electronic format, replacing paper-based processes.

Key features of EDI:

• Uses standardized formats (ANSI X12, UN/EDIFACT) for universal compatibility.
• Enables straight-through processing (STP) — no human intervention needed.
• Reduces errors caused by manual data entry.
• Speeds up the order-to-payment cycle significantly.
• Originally transmitted via Value-Added Networks (VANs); now also over the Internet (Internet EDI).

1.6 Internet Commerce

Internet Commerce leverages the World Wide Web and Internet protocols to conduct commercial transactions.
It differs from traditional EDI in being more accessible (lower cost, open standards) and supports richer
multimedia interactions.

Key components:
• Web storefronts: Online catalogs and shopping carts for B2C sales.
• Search engines & portals: Help consumers find products.
• Payment gateways: Securely process credit/debit card and digital wallet transactions.
• Logistics integration: Real-time order tracking and fulfillment systems.

1.7 E-Commerce in Perspective

E-Commerce has evolved through several phases and continues to reshape entire industries:

• Phase 1 (1994–2000): Dot-com boom — mass experimentation with online business models.
• Phase 2 (2001–2006): Consolidation — profitable models survive, infrastructure matures.
• Phase 3 (2007–present): Social/Mobile era — smartphones, social networks, cloud computing.
• Benefits: 24/7 availability, global market access, personalization, lower prices.
• Challenges: Security threats, digital divide, trust issues, regulatory complexity.
• Future trends: AI-driven personalization, voice commerce, AR/VR shopping, blockchain payments.
■ Key Takeaway: E-Commerce is not just about transactions—it is a complete transformation of how businesses
operate, interact with customers, and create value.
UNIT II — Business-to-Business Electronic Commerce

Overview
B2B EC involves commercial transactions conducted electronically between businesses. It is the largest
segment of EC by volume, encompassing supply chain management, procurement, collaborative
manufacturing, and more. B2B EC focuses on process efficiency and cost reduction across organizational
boundaries.

2.1 Characteristics of B2B EC

• High transaction volume and value: B2B transactions often involve bulk orders worth millions.
• Long-term relationships: Trading partners establish ongoing contracts rather than one-time buys.
• Complex negotiations: Pricing, delivery, and terms are often negotiated, not fixed.
• Integration with back-end systems: ERP, SCM, and CRM systems are tightly linked.
• Multiple decision-makers: Purchasing involves approval workflows and procurement teams.
• Custom catalogs and pricing: Sellers offer different pricing to different buyer organizations.

2.2 Models of B2B EC

Model Description Example

Supplier-Oriented Marketplace Supplier hosts marketplace; many buyers come

Cisco's
to one
online
seller
ordering

Buyer-Oriented Marketplace Large buyer hosts marketplace to attract suppliers

Walmart's
(reverse
supplier
auctions)
portal

Intermediary-Oriented (Exchange)
Third-party neutral marketplace for many buyers
ChemConnect,
& sellers Covisint

Collaborative Commerce Partners collaborate on design, planning & forecasting

Automotive supply chains

2.3 Procurement Management Using the Buyer's Internal Marketplace

A Buyer's Internal Marketplace (also called a corporate portal or e-procurement hub) is a private platform where
employees can browse approved supplier catalogs, requisition items, and trigger automated approvals without
leaving the company's intranet.

Benefits:
• Enforces purchasing policies and approved vendor lists.
• Reduces maverick buying (unauthorized purchases from unapproved suppliers).
• Consolidates spending data for better negotiation leverage.
• Automates approval workflows (straight-through processing).
• Integrates with ERP (SAP, Oracle) for automatic budget checking.

2.4 Just-in-Time (JIT) Delivery

JIT is a supply chain strategy where materials and components arrive exactly when needed in the production
process — minimizing inventory holding costs. EC enables JIT by providing real-time demand signals,
automated ordering, and tight supplier integration.

• Kanban systems: Electronic signals trigger replenishment orders when stock hits reorder point.
• Vendor Managed Inventory (VMI): Supplier monitors buyer's stock levels and ships proactively.
• Risk: Supply chain disruptions (e.g., pandemics, transport delays) can halt production.

2.5 Other B2B Models

• E-Distributors: Online intermediaries stocking goods from many manufacturers and selling to
businesses.
• E-Procurement: Web-based systems automating all procurement activities.
• Exchanges: Online hubs (vertical/horizontal) for spot purchases in commodity markets.
• Industry Consortia: Industry-owned exchanges created by competing companies to pool buying power.
• Collaborative Platforms: Shared portals for joint product design, demand forecasting, and planning.

2.6 Auctions and Services — Traditional to Internet-Based EDI

B2B auctions have transitioned from physical settings to electronic platforms, allowing real-time bidding
globally:

• Forward auctions: One seller, many buyers; highest bid wins (used for surplus assets).
• Reverse auctions: One buyer, many sellers; lowest bid wins (used in procurement).
• Dutch auctions: Price drops until a buyer accepts.
• Internet-based EDI: Replacing costly VANs, companies now send EDI documents over the Internet
using HTTPS, AS2 protocols — lower cost, broader reach.

2.7 Integration with Back-End Information Systems

For B2B EC to be effective, the front-end electronic marketplace must be tightly integrated with back-end
systems:

• ERP (Enterprise Resource Planning): SAP, Oracle — manages finance, HR, manufacturing.
• SCM (Supply Chain Management): Coordinates supplier relationships and logistics.
• CRM (Customer Relationship Management): Manages customer data and interaction history.
• Middleware/APIs: Connect disparate systems (e.g., REST APIs, Enterprise Service Bus).
• Data warehouses: Aggregate transaction data for analytics and decision-making.

2.8 The Role of Software Agents for B2B EC

Software agents are autonomous programs that perform tasks on behalf of users or other programs. In B2B EC
they perform:

• Price comparison: Scanning multiple supplier catalogs to find best price.

• Automatic ordering: Triggering purchase orders when inventory falls below threshold.
• Negotiation agents: Conducting price/term negotiations with supplier agents.
• Monitoring agents: Tracking order status, shipment, and alerting on exceptions.
2.9 EDI — The Nuts and Bolts & EDI & Business
How EDI works technically:
• Transaction sets: Standard document types (850=Purchase Order, 810=Invoice, 856=Ship Notice).
• Segments & data elements: Each transaction set contains segments (lines) with specific data fields.
• Envelopes: ISA (interchange), GS (group), ST (transaction) envelopes wrap document data.
• Translation software: Converts internal formats to/from EDI standard format.
• Business benefits: 70–90% reduction in document processing time; fewer errors; lower cost per
transaction.
• Limitation: High implementation cost; complex standards; requires both trading partners to adopt.
■ Key Takeaway: B2B EC is about automating and optimizing inter-organizational business processes. EDI,
procurement portals, e-markets, and software agents together create a seamless digital supply chain.
UNIT III — Internet & Extranet + Electronic Payment
Systems

PART A: Internet and Extranet

3.1 Automotive Network Exchange (ANX)

ANX is a prime example of a large-scale industry extranet. Established by the automotive industry (GM, Ford,
Chrysler and their suppliers), ANX provides a shared, secure TCP/IP network for exchanging engineering,
design, and supply chain data among thousands of automotive trading partners.

• Replaced multiple incompatible proprietary networks with a single standard IP-based network.
• Reduced EDI costs and improved data exchange speed across the supply chain.
• Enables collaborative design, just-in-time delivery coordination, and quality tracking.
• Uses Internet protocols but operates as a private, managed network for the industry.

3.2 Architecture of the Internet

The Internet is a global network of networks using standardized protocols. Key architectural layers:

Layer Protocols/Components Function

Application HTTP, HTTPS, FTP, SMTP, DNS User-facing services (web, email, file transfer)

Transport TCP, UDP Reliable (TCP) or fast (UDP) data delivery

Network/Internet IP (IPv4/IPv6), ICMP, BGP Routing packets across networks

Link/Physical Ethernet, Wi-Fi, fiber optics Physical transmission of data

3.3 Intranet and Extranet

Feature Intranet Extranet Internet

Accessibility Internal employees only Authorized external partners Public — anyone

Security High (behind firewall) Medium (VPN/controlled access) Low (public)

Purpose Internal communication & collaboration

B2B partner collaboration Public information & commerce

Technology TCP/IP, web technologies TCP/IP, VPN, tunneling TCP/IP, HTTP/HTTPS

Examples HR portal, internal wiki Supplier portals, ANX Amazon, Google

3.4 Intranet Software and Applications

• Intranet software: Web servers (Apache, IIS), content management systems (SharePoint), collaboration
tools (Confluence, Slack).
• Knowledge management: Internal wikis and document repositories.
• HR applications: Employee self-service portals for payroll, leave, and benefits.
• Project management: Internal project tracking tools (Jira, Asana) on intranet.
 • Corporate communications: Internal newsletters, announcements, and video conferencing.
• Application case studies: Boeing uses intranet to coordinate engineering documentation; banks use it
for compliance training.
• Intranet deployment considerations: Security (authentication, authorization), scalability, content
governance, user adoption, and mobile access.

3.5 The Extranets — Structure, Products & Applications

An extranet extends an organization's intranet to authorized external users (suppliers, customers, partners)
over the Internet, using security mechanisms like VPNs.

Structure of Extranets:
• Hub-and-spoke: One central company connects to many partners (most common in B2B).
• Peer-to-peer: Multiple equal organizations share a network (consortia model).
• Pass-through: Data passes through intermediaries to reach final destination.

Extranet products & services:

• Supplier portals — vendors check POs, submit invoices, view inventory.
• Customer portals — buyers track orders, view account history.
• Partner portals — joint marketing resources, price lists, technical documents.
• Applications: collaborative design (CAD sharing), joint demand forecasting, real-time logistics visibility.

Business models of Extranet Applications:

• Information sharing model: Share catalogs, technical specs, manuals.
• Transaction model: Process orders, invoices electronically.
• Collaborative model: Joint product development, shared planning tools.
• Community model: Industry-wide knowledge base and standards body.

PART B: Electronic Payment Systems

3.6 Is SET a Failure?

SET (Secure Electronic Transaction) was a standard developed by Visa and Mastercard in 1996 to secure
credit card transactions on the Internet. Despite strong backing, SET failed to achieve widespread adoption.

• Why SET failed: Complex implementation requiring digital certificates for each cardholder; high cost;
slow transaction speed; poor user experience.
• What replaced it: SSL/TLS (now TLS 1.3) with 3D Secure (Verified by Visa, Mastercard SecureCode)
became the dominant standard due to simplicity.
• Lesson: Security standards must balance security with usability to gain adoption.

3.7 Electronic Payments & Protocols

Electronic payment systems rely on various protocols to ensure security, authenticity, and integrity:
 • SSL/TLS: Encrypts data in transit between browser and server (HTTPS).
• 3D Secure (3DS): Adds an authentication step (OTP/biometric) for card-not-present transactions.
• PCI-DSS: Payment Card Industry Data Security Standard — rules for storing/transmitting card data.
• Tokenization: Card numbers replaced with random tokens, reducing breach risk.
• EMV: Chip-and-PIN standard for physical card transactions (also used in NFC/contactless).

3.8 Security Schemes in Electronic Payment Systems

Multiple security layers protect electronic payments:

• Encryption: Symmetric (AES) and asymmetric (RSA) encryption protect data confidentiality.
• Digital signatures: Ensure data integrity and authenticate sender identity.
• Digital certificates (PKI): Issued by Certificate Authorities (CAs) to verify website identity.
• Firewalls & IDS/IPS: Prevent unauthorized access and detect intrusion attempts.
• Two-factor authentication (2FA): Password + OTP/biometric for stronger user verification.
• Fraud detection AI: Machine learning models flag unusual transaction patterns in real time.

3.9 Electronic Credit Cards, Fund Transfer, Stored-Value Cards & E-Cash
Payment Type How it Works Examples

Electronic Credit Card Card data encrypted and transmitted; bank authorizes;
Visa, Mastercard
merchant settled
online

Electronic Fund Transfer (EFT)Funds moved between bank accounts electronically;

NEFT, used
RTGS,
for payroll,
ACH, SWIFT
bill pay

Debit Cards Online Linked to bank account; real-time debit on purchase

Visa Debit, Maestro

Stored-Value Cards Prepaid amount stored on card chip or server; no

Gift
bank
cards,
account
transitneeded
cards

E-Cash / Digital Wallets Software stores value/credentials; pays via app or

PayPal,
browser
Google Pay, Apple Pay

Electronic Checks (e-checks) Digital version of paper check; uses ACH network
Online
for bank-to-bank
bill payment transfer

3.10 Prospect of Electronic Payment Systems & Managerial Issues

Future Prospects:
• Central Bank Digital Currencies (CBDCs) — government-backed digital money.
• Cryptocurrency payments (Bitcoin, stablecoins) gaining merchant acceptance.
• Biometric payment authorization (fingerprint, facial recognition).
• Invisible payments — automatic billing without checkout friction (e.g., Amazon Go).
• Real-time payment rails (UPI in India, FedNow in USA) enabling instant settlement.

Managerial Issues:
• Choosing the right payment mix to maximize conversion and minimize fraud.
• Complying with regulations (PCI-DSS, GDPR, PSD2/Open Banking).
• Managing cross-border payments and currency conversion costs.
• Balancing security with user experience (frictionless checkout vs. authentication).
■ Key Takeaway: Intranets/Extranets are the private infrastructure of modern B2B collaboration; secure,
versatile electronic payment systems are the lifeblood of all EC transactions.
UNIT IV — Public Policy: From Legal Issues to Privacy

Overview
As E-Commerce grows, so do the legal, ethical, and public policy challenges it raises. This unit examines how
governments, courts, and businesses navigate issues of privacy, intellectual property, free speech, taxation,
and consumer protection in the digital economy.

4.1 EC-Related Legal Incidents

• Cybercrime: Online fraud, phishing, identity theft, ransomware attacks on businesses.
• Defamation: False statements published online causing reputational damage.
• Trademark infringement: Unauthorized use of brand names in domain names (cybersquatting).
• Data breaches: Unauthorized access to customer databases (Target 2013, Yahoo 2016, etc.).
• Contract disputes: Disputes over online contracts, terms of service, and click-wrap agreements.

4.2 Ethical & Other Public Policy Issues

EC raises significant ethical dilemmas around fairness, access, and responsibility:

• Digital divide: Unequal access to technology and EC opportunities across socioeconomic groups.
• Algorithmic bias: AI-driven pricing, recommendation, and hiring systems that may discriminate.
• Platform power: Dominance of a few large platforms raising antitrust concerns.
• Environmental impact: Energy consumption of data centers and logistics of e-commerce delivery.
• Worker rights: Gig economy and platform workers lacking traditional labor protections.

4.3 Protecting Privacy

Privacy in EC concerns the right of individuals to control information about themselves. Key concepts:

• Information privacy: Right to control collection, use, and disclosure of personal data.
• Cookies & tracking: Web cookies enable user tracking; regulations require consent (GDPR).
• GDPR (EU): General Data Protection Regulation — right to access, correct, delete data; strict penalties.
• CCPA (California): Consumers can opt out of data sale; businesses must disclose data practices.
• Privacy policies: Websites must clearly state what data is collected and how it is used.
• P3P (Platform for Privacy Preferences): Technical standard for machine-readable privacy policies.
• Data minimization: Collect only what is necessary for stated purpose.
• Anonymization & pseudonymization: Techniques to protect identity in datasets.

4.4 Protecting Intellectual Property

IP Type What it Protects Duration EC Relevance

Copyright Creative works (code, text, music, images)

Life + 70 years Protecting website content, software

Trademark Brand names, logos, slogans Renewable indefinitely Domain names, brand identity online
 Patent Inventions, processes, algorithms 20 years Business method patents in EC

Trade Secret Confidential business info As long as secret Algorithms, pricing models, customer data

4.5 Free Speech, Internet Indecency & Censorship

The Internet creates a global platform for expression, raising conflicts between free speech and protection from
harmful content:

• CDA (Communications Decency Act, USA): Early attempt to regulate indecency online; largely struck
down as unconstitutional.
• COPPA (Children's Online Privacy Protection Act): Restricts data collection from children under 13.
• Section 230 (USA): Platforms not liable for third-party content — under increasing scrutiny.
• Country-specific censorship: China's 'Great Firewall', EU's 'Right to be Forgotten' under GDPR.
• Hate speech vs. free speech: Platforms grapple with content moderation policies.
• Fake news and misinformation: Major policy challenge for social media platforms.

4.6 Taxation & Encryption Policies

Taxation issues in EC:
• Sales tax complexity: Online retailers may sell to customers in jurisdictions where they have no physical
presence.
• South Dakota v. Wayfair (2018, USA): Supreme Court allowed states to require out-of-state sellers to
collect sales tax.
• VAT/GST on digital services: EU, India, and many countries now require foreign digital service
providers to collect VAT.
• Transfer pricing: Multinational EC companies minimize tax via profit-shifting to low-tax jurisdictions.
• OECD BEPS: Global initiative to ensure companies pay tax where economic activity occurs.

Encryption policy issues:

• Government access debate: Law enforcement wants 'backdoors' into encrypted communications;
privacy advocates strongly oppose.
• Export controls: Strong encryption was historically restricted from export (now largely relaxed).
• End-to-end encryption (E2EE): Protects user privacy but complicates lawful interception requests.

4.7 Other Legal Issues: Contracts, Gambling & Consumer Protection

Online Contracts:
• Click-wrap agreements: User clicks 'I Agree' — enforceable in most jurisdictions.
• Browse-wrap: Posting T&C; on website without explicit agreement — less certain enforceability.
• E-signatures: ESIGN Act (USA) and eIDAS (EU) give legal validity to electronic signatures.
• Jurisdiction issues: Which country's law governs a dispute between parties in different countries?

Online Gambling:
• Heavily regulated or banned in many jurisdictions; operators must obtain licenses.
 • UIGEA (2006, USA): Prohibited financial institutions from processing online gambling payments.
• Age verification and responsible gambling tools are mandatory in licensed jurisdictions.

Consumer & Seller Protection:

• Consumer protections: Right to return goods (cooling-off periods), accurate product descriptions,
secure payment handling.
• Seller protections: Protection against fraudulent chargebacks, IP theft, and fake reviews.
• Dispute resolution: Online Dispute Resolution (ODR) platforms (e.g., eBay's Resolution Center, EU
ODR platform).
• Trust marks/seals: Verified badges (Norton Secured, BBB Accredited) signal trustworthiness.
■ Key Takeaway: The legal environment for E-Commerce is complex, multi-jurisdictional, and rapidly evolving.
Businesses must proactively address privacy, IP, taxation, and consumer protection to operate ethically and
legally.
UNIT V — Infrastructure for EC

Overview
E-Commerce requires a robust, secure, scalable technical infrastructure. This unit examines the foundational
technologies — networks, protocols, servers, security mechanisms, and web services — that make EC
possible. As the saying goes: 'It takes more than technology' — people, processes, and policies are equally
critical.

5.1 It Takes More Than Technology

Successful EC infrastructure requires alignment of:

• Technology: Servers, networks, software, security tools.

• People: IT professionals, business analysts, customer support, management.
• Processes: Well-designed workflows for ordering, fulfillment, returns, payments.
• Policies: Security policies, privacy policies, acceptable use policies.
• Partnerships: Payment processors, logistics providers, cloud vendors.

5.2 A Network of Networks

The Internet is often called a 'network of networks' — it consists of thousands of interconnected Autonomous
Systems (AS), each operated by ISPs, universities, corporations, and governments.

• Tier 1 ISPs: Backbone providers (AT&T;, CenturyLink) with global reach; exchange traffic via peering.
• Tier 2 ISPs: Regional providers who buy transit from Tier 1 and sell to Tier 3.
• Tier 3 ISPs/CDNs: Last-mile providers; CDNs (Akamai, Cloudflare) cache content close to users.
• IXPs (Internet Exchange Points): Physical locations where ISPs connect to exchange traffic efficiently.
• Redundancy: Multiple paths between any two points ensure resilience to failures.

5.3 Internet Protocols

Protocols define the rules for communication across the Internet:

Protocol Layer Purpose

IP (v4/v6) Network Addressing and routing packets across networks

TCP Transport Reliable, ordered, error-checked delivery of data streams

UDP Transport Fast, connectionless delivery (streaming, DNS, VoIP)

HTTP/HTTPS Application Web page requests and responses; HTTPS adds TLS encryption

FTP/SFTP Application File transfer between client and server

SMTP/IMAP/POP3 Application Email sending and retrieval

DNS Application Translates domain names to IP addresses

DHCP Application Dynamically assigns IP addresses to devices on a network

BGP Network Inter-domain routing between Autonomous Systems (ISPs)

5.4 Web-Based Client/Server Architecture
EC applications typically use a multi-tier client/server architecture:

• Client tier (Presentation): Web browser or mobile app renders the UI; uses HTML, CSS, JavaScript.
• Web/Application server tier (Logic): Processes business logic, handles user sessions, communicates
with database; uses [Link], Java EE, Python Django, PHP.
• Database tier (Data): Stores product catalogs, orders, customer data; MySQL, PostgreSQL, MongoDB.
• Microservices architecture: Modern EC platforms decompose into small, independently deployable
services (e.g., separate services for search, cart, payments, recommendations).
• Cloud deployment: AWS, Azure, Google Cloud provide scalable, pay-per-use infrastructure.
• Load balancers: Distribute incoming traffic across multiple servers for performance and availability.
• CDN (Content Delivery Network): Caches static assets (images, CSS, JS) at edge servers worldwide to
reduce latency.

5.5 Internet Security

Securing EC infrastructure is paramount. Key security domains:

Common threats:
• DDoS attacks: Overwhelming servers with traffic to disrupt service.
• SQL injection: Malicious SQL code inserted into input fields to access/manipulate database.
• Cross-site scripting (XSS): Injecting malicious scripts into web pages viewed by users.
• Man-in-the-Middle (MitM): Intercepting communications between client and server.
• Phishing: Fake websites/emails tricking users into revealing credentials.
• Ransomware: Encrypting business data and demanding payment for decryption key.

Security countermeasures:
• TLS/SSL certificates: Encrypt data in transit; validated by Certificate Authorities.
• WAF (Web Application Firewall): Filters malicious HTTP traffic (blocks SQLi, XSS).
• Multi-Factor Authentication (MFA): Adds extra verification step beyond password.
• Penetration testing: Ethical hackers simulate attacks to find vulnerabilities.
• Security audits & patch management: Regular updates to fix known vulnerabilities.
• Intrusion Detection Systems (IDS/IPS): Monitor network traffic for suspicious patterns.
• Data encryption at rest: AES-256 encryption for stored sensitive data.

5.6 Selling on the Web

Building an effective web-based selling platform requires:

• Product catalog management: Rich product descriptions, images, specifications, and pricing.
• Search and navigation: Faceted search, filters, and intuitive category navigation.
• Shopping cart & checkout: Smooth UX, guest checkout, multiple payment options.
• Order management system (OMS): Tracks orders from placement through fulfillment.
 • Inventory management: Real-time stock visibility; out-of-stock handling.
• Personalization engines: AI-driven product recommendations (Amazon's 'Customers also bought').
• A/B testing: Testing different page layouts, CTAs, and pricing to optimize conversion.
• SEO (Search Engine Optimization): Ensuring product pages rank highly in search results.

5.7 Chatting on the Web

Real-time communication tools enhance customer experience and EC support:

• Live chat: Real-time text chat between customer and support agent (Zendesk, Intercom).
• Chatbots: AI-powered bots handle common queries 24/7 without human agents.
• Co-browsing: Support agent shares customer's browser view to guide them.
• VoIP integration: Click-to-call buttons connect customers with agents over the Internet.
• WebRTC: Browser-based real-time video/audio communication (used in customer video support).
• Social messaging: EC customer service via WhatsApp Business, Facebook Messenger.

5.8 Multimedia Delivery

Rich multimedia content is central to modern EC — product videos, 360° views, AR try-ons:

• Streaming protocols: HLS (HTTP Live Streaming), DASH for adaptive bitrate video streaming.
• Image optimization: WebP format, lazy loading, responsive images for fast page loads.
• Video hosting: Product demo videos hosted on CDN or platforms (YouTube, Vimeo embeds).
• Augmented Reality (AR): IKEA Place, Sephora Virtual Artist — try products before buying.
• 360-degree product views: Interactive spinning product images reduce return rates.
• Progressive Web Apps (PWAs): App-like experiences delivered through the browser with offline
capability.

5.9 Analyzing Web Visits

Web analytics are essential for understanding user behavior and optimizing the EC site:

• Page views & sessions: Total and unique visits; bounce rate; average session duration.
• Traffic sources: Organic search, paid ads, social media, direct, referral.
• Conversion funnel: Tracking users from landing page → product page → cart → checkout → purchase.
• Heatmaps: Visual representation of where users click, scroll, and hover (Hotjar, Crazy Egg).
• A/B & multivariate testing: Data-driven optimization of page elements.
• Customer Lifetime Value (CLV): Total revenue expected from a customer relationship.
• Tools: Google Analytics 4, Adobe Analytics, Mixpanel, Segment.
• Privacy compliance: Cookie consent, IP anonymization, data retention policies.

5.10 Managerial Issues in EC Infrastructure

• Build vs. buy vs. SaaS: Should the EC platform be custom-built, purchased (Magento, Salesforce
Commerce), or SaaS (Shopify, BigCommerce)?
• Scalability planning: Infrastructure must handle seasonal traffic spikes (Black Friday, Diwali sales).
 • Total Cost of Ownership (TCO): Consider licensing, hosting, maintenance, and staff costs.
• Vendor lock-in: Over-dependence on a single cloud provider or platform creates risk.
• Business continuity & disaster recovery: Multi-region deployments; regular backup and restore
testing.
• IT governance: Policies for change management, access control, and compliance monitoring.
• Performance SLAs: Uptime guarantees (99.99% = ~52 min downtime/year) and response time targets.
■ Key Takeaway: EC infrastructure is a complex stack of networks, protocols, servers, and security systems.
Success requires not just the right technology, but the right architecture, security posture, analytics, and
management practices working together seamlessly.
Quick Revision Summary — All Units
Unit Topic Key Concepts to Remember

I Intro to EC Scope, Types (B2B/B2C/C2C), Trade Cycle, Electronic Markets, EDI, Internet Commerce

II B2B EC Characteristics, Models (supplier/buyer/exchange), Procurement, JIT, EDI nuts & bolts, Agents

III Internet/Extranet + Payments

Intranet vs Extranet, ANX, Internet architecture, SET failure, Payment types, Security protocols

IV Legal & Policy Privacy (GDPR), IP (copyright/patent/trademark), Free speech, Taxation, Online contracts, Consu

V EC Infrastructure Network of networks, TCP/IP, Client-server, Internet security, Selling online, Analytics

End of E-Commerce Study Guide | All 5 Units Covered