Chapter 3

Electronic Data Interchange

Electronic Data Interchange,

Features, Components, Benefits
Electronic Data Interchange (EDI) is a standardized
communication method that allows businesses to exchange
documents and information electronically, bypassing the need for
paper-based communication. It enables the automated transfer of
data, such as purchase orders, invoices, shipping notices, and
other business documents, between the computer systems of
trading partners with minimal human intervention. EDI streamlines
business processes, reduces errors, improves transaction speed,
and enhances operational efficiency by using a set of agreed-upon
standards to ensure that the information exchanged is
understandable and processable across different systems and
organizations.
Electronic Data Interchange Features:

 Standardization

EDI relies on standardized formats for documents such as invoices,

purchase orders, and shipping notices. These standards ensure
that companies using different IT systems can still communicate
effectively. Common standards include EDIFACT, X12, and
TRADACOMS, depending on the region and industry.

 Automation

EDI automates the process of sending and receiving business

documents, reducing the need for manual data entry. This
automation leads to fewer errors, faster processing times, and
increased operational efficiency.

 Speed

Transactions via EDI are completed in a matter of minutes,

compared to days with traditional postal mail. This rapid exchange
enables quicker decision-making, faster fulfillment, and improved
business cycles.
  Cost Savings

By automating document processing, EDI significantly reduces the

costs associated with paper-based communication, including
printing, postage, storage, and document retrieval expenses.

 Accuracy

EDI reduces the likelihood of errors commonly associated with

manual data entry. The use of standardized formats and automated
processing ensures high levels of accuracy in business
transactions.

 Security

EDI transmissions are secure, employing encryption and secure

protocols to protect sensitive information during transmission. This
security is crucial for compliance with regulations and maintaining
trust in business relationships.
 Traceability and Auditability
EDI systems keep detailed logs of all transactions, providing an
audit trail that can be used for troubleshooting, compliance, and
analysis. This traceability is essential for managing disputes,
monitoring supply chain activity, and improving business
processes.

 Integration

EDI can be integrated with internal business systems, such as

Enterprise Resource Planning (ERP) systems, accounting software,
and inventory management systems. This integration allows for
seamless data flow within an organization, further enhancing
operational efficiency.

 Global Reach
EDI enables businesses to communicate electronically with trading
partners around the world, overcoming barriers associated with
international trade, such as differences in language and business
practices.
  Environmental Impact
By reducing the need for paper-based documents, EDI contributes
to environmental sustainability efforts, aligning with the goals of
many organizations to reduce their carbon footprint.
Electronic Data Interchange Components:
 EDI Software or Service Provider
This is the application or service that translates business
documents into EDI standard formats and vice versa. Businesses
can use in-house EDI software or subscribe to an EDI service
provider (also known as a VAN – Value Added Network) that handles
the translation and transmission of EDI messages.
 EDI Standards
EDI standards are agreed-upon formats for documents to ensure
consistency and interoperability between different systems and
organizations. Examples include ANSI X12 (widely used in North
America), EDIFACT (used internationally), and TRADACOMS (used
in the UK). These standards specify the exact format and sequence
of data in an EDI document.
 Transmission Protocols
These are the methods used to securely send and receive EDI
documents over a network. Common protocols include AS2
(Applicability Statement 2), FTP (File Transfer Protocol), sFTP
(Secure File Transfer Protocol), and HTTPS (Hypertext Transfer
Protocol Secure). The choice of protocol depends on factors like
security requirements, speed, and cost.
 Integration Tools and Middleware
Integration tools and middleware enable the flow of EDI data to and
from internal systems, such as ERP (Enterprise Resource Planning),
WMS (Warehouse Management System), and accounting software.
This integration is crucial for automating processes like order
fulfillment, invoicing, and inventory management.
 Document Management and Mapping Tools
These tools assist in converting business documents from their
native format (e.g., a purchase order in an ERP system) into an EDI-
compliant format and vice versa. Mapping is a critical process
because it ensures that each piece of information is correctly placed
in the EDI document according to the relevant standards.
  Communication Network
The network over which EDI documents are exchanged, which can
be a direct connection between trading partners or through a VAN.
VANs offer additional services like message encryption, secure
mailboxes, and transaction tracking, facilitating reliable and secure
communication.
 Trading Partner Agreements
These are agreements between companies that specify the technical
and business requirements for EDI exchanges, including standards,
protocols, document types, and security measures. These
agreements ensure that all parties have a clear understanding of
their roles and responsibilities in the EDI process.

Electronic Data Interchange Benefits:

1. Improved Efficiency

EDI automates the transfer of data between organizations, reducing

the need for manual processing. This automation streamlines
business processes, such as order fulfillment, invoicing, and
payments, leading to significant improvements in operational
efficiency.
2. Cost Savings

By eliminating paper-based processes, businesses can save on

printing, postage, and document storage costs. Additionally, the
automation of data exchange reduces the need for manual data
entry and the associated labor costs.
3. Enhanced Accuracy

EDI minimizes human errors such as typos or lost documents that

can occur with manual processing. The use of standardized formats
ensures that data is consistent and correctly formatted, reducing
the likelihood of errors and the need for corrections.
4. Faster Transaction Processing

EDI allows for the almost instantaneous transmission of business

documents, significantly speeding up transaction cycles. This rapid
exchange can improve cash flow, reduce inventory levels, and
enable faster response to market demands.
 5. Stronger Partner Relationships

The efficiency and reliability of EDI transactions contribute to

stronger relationships with trading partners. Consistent and timely
exchanges of information can improve trust and collaboration
between businesses.
6. Competitive Advantage

Businesses that implement EDI can respond more quickly to

customer demands and market changes, giving them a competitive
edge. The ability to process transactions efficiently can also lead to
better customer service and satisfaction.
7. Better Data Quality and Management

EDI provides a structured format for data that enhances the quality
and consistency of information exchanged. This structure facilitates
better data management and analysis, enabling businesses to make
more informed decisions.
8. Regulatory Compliance

Many industries have regulatory requirements regarding the

handling of documents and data. EDI can help ensure compliance
with these regulations by providing a secure and traceable method
of data exchange, complete with audit trails.

9. Scalability

EDI systems can be scaled to handle increased volumes of

transactions without a corresponding increase in costs or
processing time. This scalability supports business growth and
expansion into new markets.
[Link] Benefits

By reducing the need for paper and physical document storage, EDI
contributes to environmental sustainability efforts. Digital
transactions reduce waste and the carbon footprint associated with
paper production and transportation.
EDI Technology, EDI Standards, EDI
Communications, EDI Implementation,
EDI Agreements, EDI Security
Electronic Data Interchange (EDI) technology is a standardized
method for exchanging business information between organizations
electronically. It replaces traditional paper-based documents like
purchase orders, invoices, and shipping notices with electronic
equivalents, enabling faster, more accurate, and efficient
communication. EDI technology is widely used across various
industries, including retail, manufacturing, healthcare, and
logistics, facilitating seamless B2B transactions and supply chain
management.
EDI Technology:
1. EDI Standards:

These are predefined formats for documents that ensure

consistency and compatibility between different systems and
organizations. Common standards include ANSI X12 (used
primarily in North America) and EDIFACT (used internationally).
2. Translation Software:

This software converts the company’s internal data format into the
EDI standard format and vice versa. It ensures that the data
exchanged can be easily integrated into the organization’s internal
systems, such as ERP (Enterprise Resource Planning) or SCM
(Supply Chain Management) systems.
3. Communication Network:

EDI documents can be exchanged through various networks. The

Value-Added Network (VAN) is a private, hosted service that acts as
an intermediary to receive, store, and forward EDI messages.
Alternatively, organizations might use direct connections (point-to-
point), AS2, FTP/FTPS, or even blockchain-based networks for
secure and direct document exchange.
4. EDI Software and Services:

Beyond translation, EDI software can offer features for document

tracking, error checking, and workflow management. Managed EDI
services provide companies with the expertise and infrastructure to
implement and maintain their EDI environment without significant
in-house investment.
EDI Standards:
 ANSI X12
Developed by the American National Standards Institute (ANSI), the
X12 standard is widely used in North America across various
industries, including retail, healthcare, and transportation. It
provides a framework for exchanging a wide range of business
documents, such as purchase orders, invoices, and shipment
notifications.
 EDIFACT (Electronic Data Interchange For
Administration, Commerce, and Transport)
EDIFACT is an international standard developed under the United
Nations. Unlike ANSI X12, which is primarily used in North
America, EDIFACT is used globally, supporting international trade
with a wider set of messages and covering more industries. It’s
particularly popular in Europe and Asia.

 TRADACOMS

An older standard primarily used in the UK retail sector,

TRADACOMS was developed before EDIFACT and is still in use by
some organizations within the UK. However, many are transitioning
to more modern standards like EDIFACT for international
compatibility.

 GS1 EANCOM

GS1 EANCOM is a subset of EDIFACT developed by GS1, focusing

on the retail industry and goods movement. It leverages GS1
identification numbers, like barcodes, to standardize product and
shipment information globally, facilitating supply chain and
inventory management.
 UBL (Universal Business Language)
UBL is based on XML (Extensible Markup Language) and is
designed to standardize the way that electronic documents are
exchanged. Developed by OASIS (Organization for the Advancement
of Structured Information Standards), UBL is used for a variety of
business documents, including those related to procurement and
transportation.
  ebXML (Electronic Business using eXtensible Markup
Language)
Developed jointly by the United Nations and OASIS, ebXML is a
suite of specifications that allows enterprises of any size and in any
geographical location to conduct business over the Internet. It
encompasses a wider range of business processes and messaging
standards, aiming to make global e-commerce easier and more
accessible.
 HL7 (Health Level Seven International)
Specific to the healthcare industry, HL7 focuses on the exchange of
clinical and administrative data. It addresses the need for a
standardized format for health-related information, such as patient
records, laboratory results, and billing information, to be shared
across different healthcare systems.
EDI Communications:
1. Value-Added Network (VAN)

A Value-Added Network (VAN) is a private, hosted service that

provides secure and reliable EDI transmission services. VANs act as
intermediaries that receive, store, and forward EDI messages
between trading partners. They offer additional services such as
message tracking, delivery confirmation, and translation services.
VANs simplify connectivity but can be more costly than other
options.
2. AS2 (Applicability Statement 2)

AS2 is a widely used protocol for transmitting EDI data over the
Internet. It supports secure and reliable data transmission by using
digital certificates and encryption. AS2 sends data over HTTP or
HTTPS, thereby ensuring that the data exchange occurs in real-
time, which is a significant advantage over some other methods.
AS2 has gained popularity for its ability to provide confirmation of
data delivery (Message Disposition Notification – MDN).
3. FTP/FTPS (File Transfer Protocol/Secure File Transfer
Protocol)
FTP is a standard network protocol used for the transfer of
computer files from a server to a client on a network. FTPS is an
extension of FTP that adds support for the Transport Layer Security
(TLS) and the Secure Sockets Layer (SSL) cryptographic protocols.
These protocols are used for exchanging files over a network
securely but do not provide real-time confirmation of file delivery.
 4. SFTP (SSH File Transfer Protocol)

SFTP, also known as Secure File Transfer Protocol, is a method of

transferring files securely over a private and secure channel. Unlike
FTPS, SFTP uses the Secure Shell (SSH) protocol to provide
encryption and secure file transfers. SFTP ensures that data is
securely transferred using a private and encrypted connection.
5. Direct EDI (Point-to-Point)

Direct EDI or point-to-point EDI involves establishing a direct

connection between two trading partners, typically using internet
protocols like AS2, FTPS, or SFTP. This method allows companies to
exchange EDI documents directly without the need for an
intermediary, such as a VAN, potentially reducing transaction costs
and increasing data transmission speed.
6. Web EDI

Web EDI refers to web-based applications that allow businesses to

exchange EDI documents via a standard web browser. This method
is particularly useful for small to medium-sized businesses that
may not have the resources to invest in traditional EDI software
and infrastructure. Web EDI provides a cost-effective way for
smaller companies to comply with EDI requirements and participate
in electronic data exchanges.
7. API (Application Programming Interface)

While not traditional EDI, APIs are increasingly being used for real-
time data exchange between systems, applications, and platforms.
APIs allow for more flexible, web-service-based integration, enabling
businesses to automate and streamline their operations beyond
traditional EDI documents.
EDI Implementation:
Implementing Electronic Data Interchange (EDI) involves setting up
the necessary software, hardware, and protocols to enable the
electronic exchange of business documents between companies.
This process can significantly streamline operations, improve
efficiency, and reduce costs associated with manual processes.
 1. Assessment and Planning

 Identify Business Needs:

Understand the specific business processes that will benefit from

EDI, such as procurement, invoicing, or shipping.

 Select EDI Documents:

Determine which types of documents (e.g., purchase orders,

invoices, shipping notices) will be exchanged electronically.

 Choose EDI Standards:

Decide on the EDI standards (e.g., ANSI X12, EDIFACT) that will be
used based on industry norms and partner requirements.

2. Selecting EDI Partners and Providers

 EDI Service Provider:

For many businesses, especially those without extensive IT

resources, partnering with an EDI service provider can simplify the
implementation process. These providers offer software, network
services, and support.

 Software and Hardware:

Based on the volume of transactions and existing IT infrastructure,

decide whether to host EDI solutions on-premises or to use cloud-
based EDI services.

3. Legal and Security Considerations

 Agreements:

Establish agreements with trading partners that outline the terms

of EDI exchanges, including confidentiality, data formats, and
processing times.

 Security Measures:

Implement security measures such as encryption, authentication,

and non-repudiation to protect the data being exchanged.
 4. Developing and Testing

 Integration:

Develop or configure EDI software to integrate with existing

business systems (e.g., ERP, WMS) to automate data flows.

 Mapping:

Create EDI document mappings that convert business documents

from the company’s internal format to the agreed-upon EDI format
and vice versa.

 Testing:

Conduct thorough testing with EDI partners to ensure that

documents are accurately sent, received, and integrated into
business systems. This often involves sending test transactions and
verifying their accuracy.

5. Implementation and Training

 Rollout:

Begin exchanging documents with partners. Start with a pilot

program involving a limited number of transactions or partners
before fully scaling up.

 Training:

Train relevant staff on new processes, software, and handling

exceptions. Ensure that there is a clear understanding of how EDI
transactions are managed.

6. Monitoring and Maintenance

 Monitoring:

Regularly monitor EDI transactions for errors or issues. Establish

protocols for resolving any problems that arise.

 Updates:
Keep the EDI system up to date with changes in standards,
regulations, or business needs. Periodically review agreements and
processes with partners.

7. Evaluation and Expansion

 Review Benefits:

Evaluate the impact of EDI on business efficiency, cost savings, and

partner relationships.

 Expand EDI Use:

Consider expanding the use of EDI to additional documents,

partners, or business areas based on the initial implementation’s
success.
Key Considerations:

 Cost:

Understand all costs involved, including software, service providers,

and potential transaction fees.

 Scalability:

Ensure the chosen solution can scale with your business needs.

 Compliance:

Be aware of any industry-specific compliance requirements that

must be met through the EDI implementation.
EDI Agreements:
EDI (Electronic Data Interchange) agreements are formal contracts
between trading partners that specify the rules and standards for
the electronic exchange of business documents. These agreements
play a crucial role in ensuring a smooth, efficient, and legally
compliant EDI relationship between companies.
Key Components of EDI Agreements:
 Scope and Purpose:
Defines the objectives of the EDI relationship and specifies the
types of documents (e.g., purchase orders, invoices) to be
exchanged.
  Standards and Specifications:
Details the EDI standards (e.g., ANSI X12, EDIFACT) and versions
to be used, including any customizations or subsets.
 Confidentiality and Data Protection:
Outlines measures to protect sensitive data and ensure compliance
with data protection laws (e.g., GDPR, HIPAA).
 Technical Requirements and Procedures:
Specifies the technical setup, including communication protocols
(e.g., AS2, FTP), encryption, and data formats. It also includes
procedures for testing and validating the EDI exchange.
 Operational Procedures:
Describes the processes for transmitting, receiving, and processing
EDI documents, including timing, frequency, and handling of errors
or exceptions.
 Compliance and Legal Requirements:
Addresses compliance with relevant laws and regulations, including
any industry-specific standards.
 Liability and Dispute Resolution:
Outlines each party’s liabilities in case of data errors or transaction
failures and establishes a mechanism for resolving disputes.
 Change Management:
Describes the process for making changes to the agreement,
including modifications to EDI standards, document types, or
technical requirements.
 Termination Conditions:
Specifies the conditions under which the agreement can be
terminated and the procedures for termination.
Considerations for EDI Agreements:
 Flexibility vs. Standardization:
While standardization is one of the main benefits of EDI,
agreements must also allow for a certain degree of flexibility to
accommodate changes in technology, business practices, or
regulations.
  Security and Compliance:
Given the sensitive nature of many EDI transactions, it’s vital to
ensure that agreements have strong provisions for data security
and privacy, aligning with both partners’ security policies and legal
requirements.
 Partner Capabilities:
The agreement should consider the technical and operational
capabilities of both partners to ensure realistic expectations. For
smaller partners, for example, more straightforward, web-based EDI
solutions might be necessary.
 Costs and Responsibilities:
Clearly define who bears the costs for EDI implementation,
operation, and maintenance. This includes software, hardware, and
any services from third-party providers.
 Monitoring and Reporting:
Establish guidelines for monitoring EDI transactions and reporting
requirements to ensure that both parties have visibility into the EDI
exchange’s performance.
Benefits of EDI Agreements:

 Clarity and Predictability:

Well-defined agreements provide a clear framework for EDI

exchanges, reducing the risk of misunderstandings or disputes.

 Legal Protection:

Formal agreements offer legal protection by clearly outlining each

party’s rights and obligations.

 Operational Efficiency:

By setting clear standards and procedures, EDI agreements help

streamline operations and improve efficiency.

 Stronger Partnerships:

Clear agreements can strengthen business relationships by

ensuring that both parties are aligned in their expectations and
commitments.
EDI Security:
Security in Electronic Data Interchange (EDI) is paramount due to
the sensitive nature of the data being exchanged between
businesses. EDI security measures are designed to protect data
integrity, ensure data confidentiality, and authenticate trading
partners. Implementing robust security practices helps prevent
unauthorized access, data breaches, and fraud.

 Authentication

Ensure that the entities exchanging data are who they claim to be.
This can be achieved through digital certificates and the use of
secure communication protocols like AS2 (Applicability Statement
2) which incorporates digital certificates for authentication.

 Authorization

Implement strict access control measures to ensure that only

authorized personnel can access EDI data. This involves defining
roles and permissions within the organizations involved.
Confidentiality

 Encryption: Encrypt data both at rest and in transit to

prevent unauthorized access. Standard encryption protocols,
such as TLS (Transport Layer Security) for data in transit and
AES (Advanced Encryption Standard) for data at rest, should
be used.
 Secure File Transfer Protocols: Use secure file transfer
protocols such as SFTP (Secure File Transfer Protocol) or FTPS
(FTP Secure) which provide an additional layer of security
through encryption.

Integrity

 Data Integrity Checks: Implement mechanisms to ensure the

integrity of the data being exchanged. This can include the use
of checksums or hash functions to verify that the data has not
been altered during transmission.
 Non-repudiation: Utilize digital signatures to ensure non-
repudiation, providing proof of the origin and integrity of the
data, ensuring that senders cannot deny their actions.

Audit and Compliance

  Audit Trails: Maintain comprehensive logs and audit trails of
all EDI transactions. This not only helps in troubleshooting
and monitoring but also ensures compliance with relevant
regulations and standards.
 Compliance: Adhere to industry standards and government
regulations relevant to EDI security. This may include
standards set by the Payment Card Industry Data Security
Standard (PCI DSS) for financial transactions, Health
Insurance Portability and Accountability Act (HIPAA) for
healthcare data, or the General Data Protection Regulation
(GDPR) for data protection and privacy in the European
Union.

Continuity and Recovery

Have robust disaster recovery and business continuity plans in
place. This ensures that EDI operations can be quickly restored in
case of an incident, minimizing downtime and data loss.
Regular Updates and Training

 Software Updates: Regularly update EDI software and

infrastructure to protect against known vulnerabilities. This
includes applying patches and updates to EDI applications,
operating systems, and network devices.
 Employee Training: Conduct regular training sessions for
employees involved in EDI processes to raise awareness about
security best practices and the importance of following
established protocols.

Monitoring and Detection

 Intrusion Detection Systems (IDS): Deploy IDS to monitor

network and system activities for malicious activities or policy
violations.
 Regular Security Assessments: Perform regular security
assessments, including vulnerability scanning and penetration
testing, to identify and mitigate potential security risks.

Electronic Payment Systems, Need,

Use, Protocols Used:
Electronic Payment Systems refer to the frameworks and
methodologies that enable individuals and businesses to exchange
money for goods and services through electronic and digital means,
bypassing the need for physical currency exchanges. These systems
encompass a wide range of technologies and platforms, including
credit and debit cards, electronic funds transfers (EFT), digital
wallets, mobile payment solutions, online banking, and crypto
currencies. They rely on secure digital networks to process
transactions, authenticate users, and ensure the integrity and
confidentiality of financial data. The backbone of electronic payment
systems involves sophisticated encryption technologies,
authentication protocols, and compliance with financial regulations
to protect against fraud and unauthorized access. These systems
are integral to modern e-commerce, facilitating seamless, efficient,
and instant financial transactions globally. They enable businesses
to expand their market reach, provide consumers with convenient
payment options, and enhance transaction efficiency by minimizing
the processing time and costs associated with traditional payment
methods. As the digital economy grows, electronic payment systems
continue to evolve, incorporating advanced technologies like block
chain and artificial intelligence to further enhance security, reduce
fraud, and improve user experience.
Need of Electronic Payment System:
 Convenience and Speed
Electronic payment systems offer unmatched convenience and
speed for both consumers and merchants. Transactions can be
completed in seconds from anywhere in the world, without the need
for physical currency exchange or in-person visits to financial
institutions.
 Enhanced Security
With advanced encryption and security protocols, electronic
payment systems provide a safer alternative to cash and checks,
reducing the risk of theft, loss, or fraud. Features like two-factor
authentication, tokenization, and biometric verification add layers
of security to transactions.
 Global Commerce
They enable businesses to reach a global customer base by
facilitating cross-border transactions in multiple currencies, thus
expanding their market reach beyond geographical limitations.
  Reduced Costs and Increased Efficiency
By automating transaction processes, electronic payment systems
reduce manual handling, processing time, and associated costs.
This efficiency is beneficial for both businesses, in terms of lower
operational costs, and consumers, through potentially lower prices.
 Financial Inclusion
Electronic payment systems play a crucial role in promoting
financial inclusion by providing unbanked or underbanked
populations access to financial services through mobile technologies
and digital wallets, thus integrating them into the formal economy.
 Real-time Processing
They offer the advantage of real-time processing, enabling
immediate validation and settlement of transactions. This is
particularly beneficial for online retailers and service providers who
rely on instant payments.
 Reduced Error and Fraud
Electronic payments reduce the likelihood of errors and fraud
compared to traditional payment methods. Automated systems can
detect suspicious activities, validate transactions, and enforce
compliance with anti-money laundering (AML) and know your
customer (KYC) regulations.
 Record Keeping and Transparency
Electronic payment systems facilitate better record-keeping and
transparency for both individuals and businesses. Transactions are
logged digitally, making it easier to track spending, manage
finances, and comply with tax obligations.
 Support for Modern Business Models
They are essential for supporting modern business models,
including e-commerce, subscription services, and on-demand
economies, which rely on the ability to process payments
electronically and on a recurring basis.
 Environmental Impact
By reducing the need for physical currency production and the
associated environmental impact, electronic payment systems offer
a more sustainable alternative to traditional payment methods.
Energize and Prepare

0:00 / 1:07
Use of Electronic Payment System:
 E-Commerce Transactions
Electronic payment systems are the backbone of e-commerce,
enabling consumers to purchase goods and services online. They
facilitate secure and instant payment to merchants from customers
worldwide.
 Bill Payments
Utility bills, credit card bills, loans, and other recurring payments
can be automated through electronic payment systems, offering
convenience to consumers and ensuring timely payments to service
providers.
 Peer-to-Peer (P2P) Transfers
Individuals can use electronic payment systems to transfer money
to friends, family, or others instantly, often with just a few clicks on
a mobile app or a website.
 Subscription Services
For services that require recurring payments, such as streaming
platforms, software subscriptions, and membership fees, electronic
payment systems automate the billing process, ensuring seamless
access for users.
 Government Payments
Taxes, fines, and other government-related payments can be made
electronically, streamlining the process for both the public and the
authorities, and reducing the need for in-person transactions.
 Digital Wallets
Digital wallets store payment information on a mobile device,
allowing users to make contactless payments in stores or online.
This technology supports a quick, secure, and convenient checkout
process.
 International Remittances
Electronic payment systems facilitate the transfer of funds across
borders more efficiently and at lower costs than traditional banking
methods, supporting families, businesses, and economies globally.
  Business-to-Business (B2B) Transactions
They streamline procurement and supply chain operations by
enabling businesses to make and receive payments more efficiently,
manage cash flow, and automate invoicing and reconciliation
processes.
 Mobile Payments
With the widespread adoption of smartphones, mobile payment
solutions have become increasingly popular, allowing users to pay
for goods and services directly from their mobile devices.
 Crypto currency Transactions
Electronic payment systems also include the use of crypto
currencies for buying goods and services or as an investment
vehicle. Crypto currencies operate on decentralized block chain
technology, offering a new form of digital currency exchange.
 Point of Sale (POS) Systems
Modern POS systems at retail outlets, restaurants, and other
businesses use electronic payment systems to process debit and
credit card transactions, enhancing the customer experience with
quick and secure payments.
 Online Booking and Reservations
Whether for travel, accommodation, events, or services, electronic
payment systems enable consumers to make bookings and
reservations online, providing immediate confirmation and
efficiency.

 Micro transactions

In gaming, media, and online services, electronic payment systems

allow for micro transactions, facilitating small payments for digital
goods, content, or enhancements.

 Financial Services

Electronic payment systems are integral to modern financial

services, including online banking, investment platforms, and
lending services, offering users access to a range of financial
products and services.
Protocols used in Electronic Payment System:
 Secure Sockets Layer (SSL) and Transport Layer Security
(TLS)
SSL and its successor, TLS, are cryptographic protocols that
provide secure communications over a computer network. They are
widely used to secure web transactions between browsers and web
servers by encrypting data in transit, thus preventing
eavesdropping and tampering. Most online payment gateways use
TLS to secure credit card transactions and other sensitive payment
data.
 Secure Electronic Transaction (SET)
Developed by Visa and MasterCard in collaboration with technology
companies, SET is a protocol designed to secure credit card
transactions over the internet. It ensures the confidentiality of
payment and personal information, the authentication of all parties
involved in a transaction, and the integrity of all transmitted data.
Although not widely adopted, SET paved the way for the
development of more robust payment security standards.
 Payment Card Industry Data Security Standard (PCI DSS)
While not a communication protocol, PCI DSS is a critical security
standard for organizations that handle branded credit cards from
major card schemes. It prescribes measures for the protection of
payment card information, including the use of secure network
architectures, encryption, and access control measures.
Compliance with PCI DSS is mandatory for merchants and service
providers that process, store, or transmit credit card data.
 3-D Secure (3DS)
3-D Secure is an authentication protocol used by credit card
companies to enhance online transaction security. It adds an
additional layer of security by requiring cardholders to complete an
additional verification step with the card issuer during online
purchases. Versions include Verified by Visa, MasterCard
SecureCode, and American Express SafeKey. The protocol helps to
reduce fraudulent transactions and chargebacks.
 Electronic Funds Transfer (EFT) Protocols
EFT protocols facilitate the electronic transfer of money between
banks or bank accounts. Automated Clearing House (ACH)
transactions, wire transfers, and direct deposits are examples of
EFTs, governed by various standards and regulations depending on
the country, such as the Federal Reserve’s Regulation E in the
United States.
 ISO 8583
ISO 8583 is an international standard for systems that exchange
electronic transactions made by cardholders using payment cards.
It defines a messaging format and communication flow for
transactions including, but not limited to, sales, withdrawals,
deposits, and refunds. It is widely used in ATM and Point Of Sale
(POS) terminal transactions.
 Financial Transaction Message Exchange (ISO 20022)
ISO 20022 is a global standard for the messaging between financial
institutions. It covers a broad range of financial business areas and
transactions, including payments, securities, trade services, cards,
and foreign exchange. It aims to provide a universal standard that
can be implemented across all financial institutions, improving the
efficiency and compatibility of systems globally.
 Cryptographic Protocols for Crypto currencies
Transactions in crypto currencies like Bitcoin, Ethereum, and
others, use cryptographic protocols to secure transactions on their
respective block chains. These include the use of public and private
key encryption for wallet security, cryptographic hashing for
transaction integrity, and consensus algorithms like Proof of Work
(PoW) or Proof of Stake (PoS) for transaction verification and
network security.

Electronic Fund Transfer and Secure

Electronic Transaction protocol for
Credit card payment
Electronic Fund Transfer (EFT) is a system of transferring money
from one bank account directly to another without any paper
money changing hands. One of the most widely known applications
of EFT is the direct deposit of paychecks into bank accounts. EFTs
are used both for single and recurring transactions, such as online
bill payments.
EFT transactions are processed through various networks that
allow banks to communicate financial transactions securely and
efficiently. These transactions include, but are not limited to, direct
deposits, direct debits, ATM withdrawals, point-of-sale (POS)
transactions, and online payments.
Technology used in Electronic Fund Transfer (EFT) for credit
card payment:

1. Encryption

Encryption is fundamental in securing electronic fund transfers,

ensuring that sensitive data such as credit card numbers and
personal information are converted into a secure code during
transmission. Technologies like Transport Layer Security (TLS)
encrypt data in transit, preventing unauthorized access or
interception.
2. Tokenization

Tokenization replaces sensitive card details with a unique identifier,

or token, that has no exploitable value. This token is used to
process transactions without exposing actual credit card details,
reducing the risk of data breaches. Tokenization is widely used in
mobile wallet transactions and online payments to enhance
security.
3. Authentication Protocols

Authentication protocols verify the identities of parties involved in a

transaction. For credit card payments, this often involves methods
such as 3-D Secure (e.g., Verified by Visa, Mastercard SecureCode),
which adds an additional layer of authentication by requiring the
cardholder to enter a password or a code sent to their mobile
device.
4. Payment Gateways

Payment gateways are e-commerce services that process credit card

payments for online and traditional brick-and-mortar stores. They
use SSL encryption to secure data and may employ additional
security measures such as fraud detection algorithms to protect
against unauthorized transactions.
5. EMV Technology

EMV (Europay, MasterCard, and Visa) technology is used for chip-

based credit and debit cards. It enhances security for in-person
transactions by generating a unique transaction code for each
payment, which cannot be reused. While EMV technology is
primarily associated with physical card transactions, it also impacts
EFT by setting high-security standards that reduce card fraud.
 6. Near Field Communication (NFC)

NFC technology allows two devices placed within a few centimeters

of each other to exchange data. In the context of EFT, NFC enables
contactless payments through mobile devices or credit cards,
making transactions faster and more secure without the need for
physical contact.

7. Banking Networks and Protocols

EFT transactions rely on banking networks and protocols such as

the Automated Clearing House (ACH) for processing electronic
payments and money transfers. These networks are regulated and
offer a secure infrastructure for executing a wide range of
transactions, including direct deposits and bill payments.
8. Financial Messaging Systems

Systems like SWIFT (Society for Worldwide Interbank Financial

Telecommunication) provide a network that enables financial
institutions worldwide to send and receive information about
financial transactions in a secure, standardized, and reliable
environment. While more relevant for international transfers and
bank-to-bank communications, they underpin the global
infrastructure for EFTs.
Secure Electronic Transaction (SET) Protocol
Secure Electronic Transaction (SET) protocol was developed to
secure electronic credit card transactions over the internet. It was
introduced in the mid-1990s by a consortium including Visa,
Mastercard, and several major technology companies. SET was
designed to ensure confidentiality, integrity, and authenticity in
online transactions. It utilizes a system of digital certificates that
authenticate the identity of each party involved in the transaction
— the cardholder, the merchant, and the bank.
Key Features of SET:
1. Authentication:

SET uses digital certificates, issued by trusted certificate authorities

(CAs), to authenticate the identities of all parties involved in a
transaction. This prevents fraud by ensuring that only legitimate
entities can participate in the transaction process.
 2. Encryption:

SET encrypts the credit card information during the transaction

process. This ensures that the card details are only accessible to
the issuing bank and not visible to the merchant or any other third
party, enhancing the security of sensitive information.

3. Integrity:

SET ensures that the data transmitted cannot be altered during

transmission. Digital signatures are used to verify that the message
received is exactly what was sent, ensuring the integrity of the
transaction data.

4. Non-repudiation:

SET provides mechanisms that prevent parties from denying their

involvement in a transaction. This is important for dispute
resolution and fraud prevention.
Technology used in Secure Electronic Transaction (SET)
Protocol for credit card payment:
1. Digital Certificates

SET used digital certificates to authenticate the identity of all

transaction participants, including the cardholder, the merchant,
and the payment gateway. These certificates were issued by trusted
Certificate Authorities (CAs), ensuring that each party in a
transaction was legitimate.
2. Public Key Infrastructure (PKI)

At the heart of SET was the Public Key Infrastructure (PKI), which
provided the framework for encryption and digital signatures used
in the protocol. PKI involves the use of a pair of keys (a public key
and a private key) for the encryption and decryption of messages.
Public keys are openly distributed, while private keys are kept
secret by the owner.
3. Dual Signature

The dual signature technology in SET was designed to protect the

privacy of the transaction while ensuring that both the merchant
and the bank could authenticate the transaction independently.
The cardholder’s order information was encrypted in such a way
that only the merchant could decrypt it, and the payment
information was encrypted so only the bank could access it. The
dual signature linked these two pieces of information for verification
purposes without allowing either party to access the other’s
encrypted information.
4. Encryption

SET used strong encryption methods to secure all communications

between the transaction participants. Data encryption ensured that
sensitive information, such as credit card numbers, was protected
during transmission over the internet.

5. Hash Functions

SET utilized hash functions to create a unique digital fingerprint of

the transaction data. This hash was then used to generate digital
signatures, ensuring data integrity by allowing parties to verify that
the data had not been altered in transit.

6. Digital Signatures

Digital signatures were used to provide non-repudiation and to

verify the integrity of the transmitted data. By using the private key
to sign transaction data, the sender could assure the receiver that
the data was sent by the claimed sender and had not been
tampered with.
7. Secure Sockets Layer (SSL)

While SET itself provided a comprehensive security framework, it

was often implemented in conjunction with Secure Sockets Layer
(SSL) encryption for added security during the transmission of data
over the internet. SSL provided an encrypted link between the web
server and browser, ensuring that all data passed between them
remained private.
8. Certificate Authorities (CAs)

CAs played a crucial role in the SET protocol by issuing and

managing digital certificates. They verified the identity of entities
requesting a certificate and provided the necessary infrastructure
for revoking certificates and managing the lifecycle of digital
identities.
Despite its robust security features, SET was not widely adopted
due to its complexity and the reluctance of consumers and
merchants to switch from simpler, albeit less secure, methods of
online payment. The protocol’s requirement for consumers to install
additional software and obtain digital certificates was seen as a
significant barrier to its widespread use. As a result, simpler
protocols, such as SSL/TLS with additional layers of security (like
3-D Secure technology), became the standard for securing online
credit card transactions.
Today’s online payment security has evolved with technologies like
EMVCo’s 3-D Secure (3DS), tokenization, and end-to-end
encryption, which provide secure transaction environments while
offering a more user-friendly experience. These technologies focus
on balancing security with convenience, addressing the limitations
that affected the adoption of the SET protocol.

Digital Economy: Identify the Methods

of payments on the net- Electronic
Cash, Cheque and Credit cards on the
Internet
Digital economy refers to an economic system that leverages
digital computing technologies, comprising various sectors such as
e-commerce, online services, digital content production, and
internet-driven marketplaces. It is characterized by the widespread
use of digital information and communication technologies to
facilitate the production, distribution, and consumption of goods,
services, and information. Unlike traditional economies, the digital
economy emphasizes the role of data as a critical asset, driving
innovation, competitive advantage, and economic growth. It
encompasses a broad range of activities, including but not limited
to online shopping, digital payments, cloud computing, mobile
applications, and social media platforms. The digital economy is
also marked by its global nature, enabling businesses and
individuals to interact and transact across borders with
unprecedented speed and efficiency. As it continues to evolve, the
digital economy is increasingly becoming integral to the overall
economic fabric, influencing how businesses operate, how jobs are
designed, and how consumers access products and services. It
offers opportunities for entrepreneurship, new business models,
and market expansion but also presents challenges related to
privacy, security, and digital divide issues.
In the digital economy, the methods of payment on the internet
have evolved to cater to the needs of online transactions, offering
convenience, speed, and security. The primary methods include
electronic cash, electronic checks (e-cheques), and credit cards.
Each of these payment methods has its own set of features that
make it suitable for different types of transactions:
Electronic Cash (e–Cash)
Electronic cash is a form of digital currency that is designed to
mimic the characteristics of physical cash. It enables users to
conduct transactions anonymously and instantaneously over the
internet. E-cash is stored in digital wallets and can be used for
peer-to-peer payments or purchasing goods and services online.

 Features:

Anonymity, immediate transfer, and the ability to use it for small

transactions (micropayments). It’s like having physical cash but in a
digital form.

 Use Cases:
Online retail purchases, peer-to-peer payments, and
micropayments for digital content.
Electronic Checks (e–Checks)
An electronic check is a digital version of a traditional paper check.
It uses the Automated Clearing House (ACH) network to transfer
funds from the payer’s checking account to the payee’s account
over the internet. It’s a popular method for transferring large sums
of money securely.

 Features:

Offers a secure and direct way of transferring money from one bank
account to another. It includes authentication, certification, and
encryption processes to ensure the security of the transactions.

 Use Cases:

Bill payments, business-to-business transactions, and any scenario

where traditional checks might be used but with the convenience
and speed of electronic processing.
Credit Cards
Credit cards remain one of the most popular and widely accepted
methods of payment on the internet. They allow consumers to
borrow funds from the card issuer up to a certain limit in order to
purchase goods or services. Credit card transactions on the internet
are secured through encryption and other security measures.

 Features:

Widely accepted, offers fraud protection and the ability to dispute

charges, and provides a convenient way to make purchases without
immediate deduction of funds from a user’s bank account.

 Use Cases:

Almost any online purchase, from e-commerce stores to

subscription services, including booking flights, hotels, and rental
services.
Security and Convenience:
While each of these payment methods offers unique advantages,
they also come with their own security considerations. Electronic
cash and e-checks require strong encryption and secure transaction
protocols to protect against theft and fraud. Credit card
transactions on the internet are secured through various encryption
technologies and verification methods, such as CVV codes and 3D
Secure authentication.