On-line payment system is the payment of money over the internet. Most researchers have come out with different payment protocols in recent times. And in order for smooth growth of ecommerce in the world the payment aspect must be secure, reliable and convenient. The security aspect must be able to produce good Authentication, privacy, integrity and non-repudiation. Most often there is always a trade- off between security and convenient. Always the end users in the ecommerce industry suffer a lot from the hands of fraudsters, and since these fraudsters are finding their ways to steal from end users especially the cardholders there is therefore a need to protect the interest of the cardholder in the areas of authentication, Confidentiality, replay attacks and also be flexible to implement in real world.This work produces an easy to implement online payment system known as online payment system using SSL (OPSS). It is designed to solve the most common security treats in the online payment environment. It produced sufficient security features such as Authentication, confidentiality and eliminates Replay attack with ease of implementation in the real world. The card holder or the customer is prevented from sending his/her detailed information to the merchant, since most merchants out there cannot be trusted with. Therefore the data flow from the User will mainly be in two parts, one to the merchant and the other to the issuer of the Card. And all data flow on the network is securely protected by secure socket layer (SSL) protocol to avoid spying by a third party. |