Acc
680 Research Seminar in Accounting: Electronic Commerce
[Welcome] [Administrivia] [Objectives]
[Description] [Readings]
[Requirements] [Grading] [Schedule]
Welcome to Acc 680, and
to the world of Electronic Commerce. During the course of this semester you
will have ample opportunity to gain an understanding of the technologies
enabling electronic commerce over the internet. This course is not
comprehensive. For example, it does not cover some important issues concerning
electronic commerce, such as pricing of internet services and on-line corporate
reporting.
We start with a basic
study of the communications infrastructure that supports electronic commerce,
including networking, protocols, electronic data interchange mechanisms, etc.
Next we study certain advanced aspects of java that facilitate electronic
commerce, including Enterprise Java Beans (EJB), deployment techniques,
servelets, and distributed computing protocols. This is followed by a study of
the Extensible Markup Language (XML) in relation to electronic commerce and the
role of java in providing an interface between web-based GUIs and back-end
database processing. A comprehensive study of secure transaction processing
(including encryption, authentication, firewalls, public-key infrastructures,
certificates, and the support for these features in java) completes the topics
covered in this course.
You will find this
course quite demanding and challenging, but hopefully amply rewarding. This
course is for self-learners, and I will be a mere facilitator. You should plan
on spending considerable time reading and writing programs for this
course.
[Welcome] [Top]
Semester: Spring, 1999
Time: TBA
Room: TBA
Instructor: Jagdish S. Gangolly
Office:BA 365A
Phone: (518) 442-4949
Fax: (518) 442-3944
Office Hours: TBA
Instructor Homepage:
https://www.albany.edu/acc/gangolly
Newsgroup:
sunya.class.acc680
Announcements Page:
https://www.albany.edu/faculty/gangolly/acc680/spring99/announce.html
Prerequisites:
This course is
intended to be taken concurrently with Acc 683. You are also expected to be
familiar with the unix operating system, the Emacs editor, the Java programming
language (or some other higher level language with object-oriented features
such as C++), and the Oracle database management system (including SQLPLUS) to
the extent covered in Acc 681 and Acc 682. Materials on topics such as data
structures, discrete mathematics, or algorithms, to the extent covered in those
courses will also be assumed. You are also expected to have background in
accounting at least at the level of Intermediate accounting, and be quite
familiar with the fundamentals of controls in accounting systems.
Handouts:
This will be
the only web handout you will get during the semester. All future handouts will
be postscript. Therefore it is important that you learn to print postscript
documents in the Lab, or, if you have computers at home, to download
Ghostscript/Ghostview from ftp://ftp.cs.wisc.edu and install it so you can print them
on non-postscript printers. You will need to download and install Ghostscript
interpreter and the fonts from
ftp://ftp.cs.wisc.edu/ghost/aladdin/gs510/, Ghostview browser from
ftp://ftp.cs.wisc.edu/ghost/rjl, and the Ghostscript manual in .pdf form
from ftp://ftp.cs.wisc.edu/ghost/.
[Administrivia] [Top]
The main objectives of
the course are:
[Objectives] [Top]
Intensive reading and
research on an approved topic of special interest in the student's field of
concentration; a comprehensive report and an oral presentation required.
An Honest
Description
A study of
the hardware and software infrastructure supporting electronic commerce,
including network topologies, hardware, protocols, site hosting, domain naming,
etc. Integration of back-end and front-end processing to support electronic
commerce including a study of XML, JDBC/ODBC, servelets, etc. Security and
integrity aspects of electronic commerce including a study of digital
certificates, encryption, real-time on-line credit payment processing,
etc.
[Description] [Top]
The main textbooks for
the course are:
Since the theme of the
course is evolving rapidly, a number of readings from recent materials is
anchored to the schedule below. You are expected to read them before they are
discussed in the class.
[Readings]
[Top]
The classes will
consist of discussion of reading materials assigned, occasional programming
exercises, and the student presentation of assigned readings. The requirements
will include short papers on specific topics assigned as well as a full-length
term paper and its presentation in the class.
[Requirements] [Top]
The final course grade
is dependent on the following factors:
[Grading] [Top]
[Jan 28] [ Feb 4] [ Feb 11] [Feb
18] [Feb 25] [Mar 4] [Mar 11] [Mar 18] [Mar
25] [Apr 1] [Apr 8] [Apr 15] [Apr 22] [Apr 29] [May 6]
[Schedule]
[Top]
Week 5
February 25,
1999
Topic:
Communication
Infrastructure for Electronic Commerce V. Electronic Data Interchange I
Read:
FB: Ch.1 - 2.
Additional
Readings:
What is EDI?
United Nations
rules for Electronic Data Interchange For Administration, Commerce and
Transport (UN/EDIFACT)
Java Messaging Management
EDI FAQs
White Paper : Joint
Electronic Payment Initiative (JEPI) by Eui-Suk Chung and Daniel
Dardailler (with contribution from JEPI Team)
eCo System: CN's
Architectural Framework for Internet Commerce
X12 Transaction Set Index
Version 3040
Global EDI Standards for Retail
(GEDI)
EC/EDI
Jumpstation at harbinger.com
VICS EDI Business Examples -
Basic Set 004010
VICS EDI Business Examples
- Order Status Set 004010
VICS EDI Business Examples -
Financial Set 004010
VICS EDI Business Examples -
Replenishment Planning Set 004010
Additional
Resources:
Secretariat for Federal EDI
Henry's YellowUN/EDIFACT
Book: Introduction to UN/EDIFACT Messages
Electronic Commerce Resource
Guide
Thomson EC Resources Research Reports
Commerce.net
Open mailing lists
EDI mailing lists at
harbinger.com
Electronic Messaging Association
Journal of
Electronic Commerce
Computerworld Emmerce Webzine for Electronic Commerce
Strategists
A Clue to Internet Commerce, Published by
Dana Blankenhorn
Week 6
March 4,
1999
No Class
Spring Break
Week 7
March 11,
1999
Theme:
Document Object Model,
XML, Java, etc. I
Topics:
XML & SGML basics; XML
and Data-Driven Architecture, XML and documents, Information Interchange
standards, collaborative authoring, connecting databases; XML/SGML Tools:
Parsers, programming languages, browsers, search engines, document and
component management, DTD design tools, HyTime; XML data formats, Cascading
Stylesheets; Search tools in internet applications: sgrep Query language; XML
and Application Programming Interfaces (API): XML and Java, XML Parser
interfaces, Event callback interfaces, Object Model interfaces, W3C Document
Object Model and API, including a sample implementation.
Read:
LLF: Ch.1 - 3, 6, 7,
10.
Additional
Readings:
XML Resources at Arbortext
Introduction to Annotated
XML Specification
XML for Managers
What is XML (Graphic
Communications Association)
XML/EDI
Repository
The Whirlwind Guide to SGML &
XML Tools and Vendors
Document Object Model (DOM) Level 1 Specification
Week 8
March 18,
1999
Theme:
Document Object Model,
XML, Java, etc. II
Read:
See Previous week's
readings.
Week 9
March 25,
1999
Theme:
Secure Transaction
Processing I: Information Securities Technologies and the Internet
(Postscript Handout)(PDF)
Read:
FB: Ch.4 - 5.
A Survey of Public-Key Infrastructures by Marc Branchaud
PDF zip
Topics:
Cryptography: Symmetric
cryptosystems, Data Encryption Standard (DES), Integrity check-values, Public
cryptosystems, RSA Algorithm; Digital signatures: RSA digital signatures, U.S.
Digital signature standard, hash functions, Elliptic curve digital signature
systems; Key management: Distribution of symmetric keys using symmetric
techniques, RSA key transport, Diffie-Hellman key agreement, distribution of
public keys; Authentication: Passwords and PINs, authentication protocols,
kerberos, address-based authentication, personal tokens, biometrics; Network,
application & system security; Network protocol security: Authentication
header, packet encryption, key management; Firewalls: Firewall construction,
virtual private networks (VPN); Messaging security: Privacy Enhanced Mail
(PEM), MIME security, S/MIME, Pretty Good Privacy (PGP), X.400 security,
Message Security Protocol (MSP); Web security: Secure Socket Layer (SSL),
Secure HTTP, downloadable executable software; Security for E-Commerce
applications: EDI security, SET protocol.
Week 10
April 1,
1999
Theme:
Secure Transaction
Processing II: Internet security.
Topics:
Public key certificates;
Public-Private key-pair management; certificate issuance, distribution, and
revocation; X.509 certyificate format, certification authorisation information;
Certification authority interrelationship structures; X.509 certificate
policies; X.509 name constraints; certificate path discovery & validation;
certificate management protocols.
Read:
FB. Ch. 6, 7.
Week 11
April 8,
1999
Theme:
Secure Transaction
Processing III: Non-repudiation and Certification Practices.
Topics:
Types of non-repudiation;
activities & roles, mechanisms for non-repudiation of origin and delivery;
trusted third parties; dispute resolution; certification practices.
Read:
FB: Ch. 8 - 9.
Week 12
April 15,
1999
Theme:
Secure Transaction
Processing IV: Java and Electronic Commerce.
Topics:
Encryption algorithms
included with the Java APIs; Key management,; Secure Communication Protocols:
Secure Socket Layer (SSL), Transport Layer Security (TLS), implementing Secure
ORB connections and Secure RMI (Remote Method Invocation), passing through a
firewall; The Java security model; Java Commerce Client (JCC): Casssettes &
Commerce Beans, Gateway security model, Java Commerce Messages (JCM).
Read:
CB: Ch. 4.
Week 13
April 22,
1999
Theme:
Deployment &
Servelets
Topics:
Deployment: JAR files,
signing with JDK, executable JAR files, self updating deployment, servelets,
Read:
CB: Ch. 3.
Week 14
April 29,
1999
Theme:
Deployment &
Servelets
Topics:
Deployment: JAR files,
signing with JDK, executable JAR files, self updating deployment, servelets,
Read:
CB: Ch. 3.
Week 15
May 6,
1999
Theme:
Deployment &
Servelets
Topics:
Deployment: JAR files,
signing with JDK, executable JAR files, self updating deployment, servelets,
Read:
CB: Ch. 3.
Updated on January 8, 1999 by
Jagdish S.
Gangolly.