Some ideas abouth web payment architecture

Hi all,

I have some news of this project recently. Then, I have started to read 
the different documents you published.

I made some research on this topic and I have some ideas that I would 
like to share in case they could be useful.

They where published through two articles that you can find in:

[1] Payment frameworks for the purchase of electronic products and 
services. Computer Standards & Interfaces 34(1): 80-92 (2012)
A draft can be found in:
http://ants.inf.um.es/~arm/PayFrameworks.pdf

[2] “Design and implementation of a generic per-fee-link framework”. 
Internet Research, vol. 19, no. 3 (2009) 293-312.
A draft can be found in:
http://ants.inf.um.es/~arm/PaperEPP.pdf

To sum up the ideas (some of them I have seem that are already 
considered in the project) that we consider:

1) The access to a payment-based service/product should be based on a 
special URL. For example, instead of http://resource something like 
phttp://.... This URL should be annotated with semantic information that 
easy the payment process.

2) I think that the definition of a payment-indepedent API is 
fundamental. There are other models that we could use as inspiration. 
For example, the PKCS#11 interface hides the complexity of the 
cryptographic device we are using. In my case, I mean to model any 
payment protocol as a finite state machine. Another approach could be 
based on the kind of transaction (payment, refund, etc).

3) I think I good idea for making payments could be have a 
session-oriented protocol. This protocol would be used to negotiate 
payment mechanisms, make the payment, to exchange additional information 
such as receipts or loyalty information and to make additional 
(repeated) payments in the same way. Besides, following this idea the 
protocol could be used to make payments on the Web or any other 
environments not based on HTTP.

 From now on I would try to participate in the different documents you 
are working.

Just my two cents.

Best regards,
Antonio.



-- 
--------------------------------------------------------
Antonio Ruiz Martínez
Department of Information and Communications Engineering
Faculty of Computer Science-University of Murcia
30100 Murcia - Spain
http://ants.inf.um.es/~arm/ or http://webs.um.es/arm/
e-mail: arm@um.es or arm [at] um [dot] es
--------------------------------------------------------

Received on Wednesday, 14 January 2015 13:48:17 UTC