Rased On Oauth Of E-Commerce And Third Party Payment Platform Integration And Implementation

Due to the e-commerce site and 3rd party payment system are in different intranet, and it is online payment interact, so we cannot use the traditional POS which rely on relative closed telecommunication network. Instead, they should do integration through the Internet. It is required that the authentication and authorization mechanism must be easy to use and efficient, at the same time, must be safe and reliable. The current popular implementation includes SSL, VPN, etc. Although these ways are safe, but the system integration is very troublesome, for example,1. The integration way is always different everytime and it needs development again and again which causes the high cost.2. Once it’s attacked, which will be global impact. In the situation of high online transaction traffic, it will impact the system performance much as well. And we also find the authentication and authorization can’t achieve a fine-grained, for example, one buyer cannot authorize his/her resource to a perticular seller.In this paper, I analized the current situation of integration between e-business and 3rd party parment. And it comes to a conclusion of 3rd party payment integration complexity, and bring up a new idea which is based on OAuth. Then based on my working experience, I designed a workable solution about how to use OAuth to integrate with payment platform for e-business site. It resolved the problem how to do the integration which needs not only security, but also flexibility and reliability. At the end, it also did some research about why it is a secure and extensible solution. And this solution meets the security and extensibility requirement of integration between eCommerce and 3rd party payment. And it also resolves not only the high cost problem of integration development, but also achieves a fine-grained authentication and authorization.