E-Commerce 2018 Board Question Paper

Model Solutions for Sub-Questions (i to x)

i. Advantages of Digital Signature:

• Authentication & Identity Verification: Cryptographically validates the genuine identity of the sender/signatory.
• Data Integrity: Guarantees that the digital document or transaction payload has not been altered or tampered with in transit.
• Non-Repudiation: Prevents the sender from falsely denying having sent or authorized the transaction in legal proceedings.

ii. Definition of Digital Wallet:

• A digital wallet (e-wallet) is a secure software application or online service (e.g., eSewa, Khalti, Apple Pay) that stores an individual’s financial information (linked bank accounts, debit/credit cards, cash balances) to facilitate seamless, cashless electronic commerce transactions and P2P transfers.

iii. Definition of Networking Switch:

• A network switch is a Layer 2 (Data Link Layer) telecommunications hardware device that connects multiple computers and peripherals within a Local Area Network (LAN), using MAC addresses to forward data packets specifically to their intended destination device rather than broadcasting to all ports.

iv. Advantages of Credit Cards:

• Revolving Credit Line: Enables consumers to make immediate purchases without holding immediate cash, repaying within a grace period.
• Global Acceptance & Fraud Protection: Universally accepted across international e-commerce platforms with built-in chargeback dispute mechanisms against fraudulent merchants.

v. Definition of Simple Mail Transfer Protocol (SMTP):

• SMTP is an application-layer Internet protocol operating on TCP port 25 or 587 used by mail servers to transmit, route, and deliver outgoing electronic mail messages across IP networks.

vi. How Value Proposition Helps Online Business:

• A value proposition explicitly communicates why a customer should buy from a specific e-commerce website over competitors. It articulates unique benefits—such as lowest price guarantee, free express shipping, 24/7 customer support, or curated premium quality—converting casual website visitors into paying customers.

vii. How Marketing is Done Through the Web:

• Web marketing leverages digital channels including Search Engine Optimization (SEO), pay-per-click search ads (Google Ads), social media campaigns (Facebook, Instagram, TikTok), personalized email newsletters, influencer endorsements, and affiliate referral links to attract, engage, and retain online consumers.

viii. Meaning of Public Key Encryption (Asymmetric Cryptography):

• A cryptographic system that uses a mathematically linked pair of keys: a Public Key (distributed openly to anyone for encrypting messages) and a corresponding Private Key (kept strictly secret by the owner for decrypting incoming ciphertexts).

ix. Meaning of Electronic Cheque (e-Cheque):

• An e-Cheque is the digital equivalent of a paper bank cheque that uses digital signatures, routing transit numbers, and account numbers transmitted electronically through Automated Clearing House (ACH) networks (e.g., NCHL’s Electronic Cheque Clearing - ECC in Nepal) to transfer funds between bank accounts.

x. Definition of Search Engine Optimization (SEO):

• SEO is the continuous process of optimizing a website’s technical architecture, on-page content, keywords, and external backlink profile to improve its organic (non-paid) visibility and rank higher on Search Engine Results Pages (SERPs) like Google.

Generic Framework of E-Commerce (Kalakota and Whinston Model)

The generic e-commerce framework conceptualizes electronic commerce as a multi-layered structure supported by two foundational pillars and built upon an overarching technical infrastructure:

---

Structural Layers of the Generic E-Commerce Framework

1. Foundational Supporting Pillars:

• Public Policy, Legal, and Privacy Frameworks:
  • Government legislation governing electronic transactions (e.g., Electronic Transactions Act, 2063 in Nepal), digital contract enforceability, consumer protection laws, cross-border digital taxation, and digital data privacy regulations.
• Technical Standards and Protocols:
  • Globally accepted technological conventions ensuring seamless interoperability across heterogeneous systems (HTTP/HTTPS, TCP/IP, XML, JSON, SSL/TLS, EDIFACT).

---

2. The Four Application & Service Layers:

• Layer 1: Network & Physical Infrastructure:
  • The telecommunications backbone enabling connectivity: fiber-optic cables, 4G/5G mobile networks, satellite links, web servers, routers, and switches.
• Layer 2: Multimedia Content and Network Publishing Services:
  • Technologies used to author, format, and present interactive digital product catalogs (HTML5, CSS3, streaming audio/video, web content management systems).
• Layer 3: Messaging and Information Distribution Services:
  • Middleware protocols delivering structured transactional data between businesses and consumers (SMTP, EDI, SOAP, RESTful APIs, Instant Messaging).
• Layer 4: Common Business Services (Enabling Infrastructure):
  • Core digital business utilities: electronic payment gateways (credit cards, digital wallets), user authentication, digital certificate authorities (CA), and search engines.

---

3. E-Commerce Applications (The Apex):

• The actual commercial business models: B2C online retail stores (Daraz), B2B wholesale portals, C2C marketplaces (Hamrobazar), internet banking, e-governance services, and digital entertainment streaming.

Concept of Firewall in E-Commerce Security

A firewall is a dedicated network security barrier (implemented via hardware, software, or a combination of both) that monitors, inspects, and filters incoming and outgoing network traffic based on predetermined organizational security rules. It acts as a protective shield separating an enterprise’s trusted internal private network from untrusted public networks (the Internet).

---

Major Types of Firewalls

1. Packet-Filtering Firewall:

• Mechanism: Operates at the Network and Transport layers (Layers 3 and 4 of OSI model). Inspects individual packets in isolation, checking source and destination IP addresses, port numbers, and protocols.
• Pros & Cons: Extremely fast and transparent to users, but cannot inspect packet payload content and is vulnerable to IP spoofing.

2. Stateful Inspection Firewall (Dynamic Packet Filtering):

• Mechanism: Tracks the state of active network connections in a state table. It verifies whether an incoming packet belongs to an established, legitimate outbound request before allowing it through.
• Pros & Cons: Far more secure than simple packet filters, preventing unauthorized unsolicited inbound connection attempts.

3. Application-Level Gateway (Proxy Firewall):

• Mechanism: Operates at the Application Layer (Layer 7). Establishes a complete proxy connection—clients connect to the proxy, which independently requests data from the target server, performing deep packet inspection (DPI) on specific application protocols (HTTP, FTP, SMTP).
• Pros & Cons: High security and content filtering (can block specific malicious SQL queries or scripts), but introduces noticeable processing latency.

4. Circuit-Level Gateway:

• Mechanism: Operates at the Session Layer (Layer 5). Validates TCP handshakes between trusted and untrusted hosts before establishing a virtual circuit without inspecting the actual packet contents.

5. Next-Generation Firewall (NGFW):

• Mechanism: Modern multi-layered defense systems combining stateful inspection with deep packet inspection, integrated Intrusion Prevention Systems (IPS), real-time antivirus scanning, and encrypted SSL/TLS decryption inspection.

Internet, Intranet, and Extranet in E-Commerce

Modern enterprise e-commerce relies on three interrelated network architectures that differ based on user access privileges, geographical scope, and security perimeters:

---

Differentiation: Business-to-Business (B2B) vs. Business-to-Government (B2G) E-Commerce

While both models involve non-consumer, high-value institutional transactions, they operate under fundamentally different commercial, legal, and operational environments:

---

Risks Associated with Electronic Payment Systems (EPS)

While Electronic Payment Systems (EPS) offer unparalleled convenience and speed, they introduce significant technical, operational, and financial risks:

---

Core Risk Dimensions

1. Cyber Fraud, Phishing, and Identity Theft:
   • Cybercriminals utilize fraudulent email links, fake website clones, and credential-harvesting malware to deceive users into divulging PINs, CVV codes, and OTPs, resulting in unauthorized fund drains.
2. Data Breaches and Man-in-the-Middle (MitM) Interception:
   • Unencrypted or weakly secured payment gateways allow hackers to intercept sensitive payment card numbers and customer identity records during transmission across public Wi-Fi networks.
3. Repudiation and Chargeback Fraud (Friendly Fraud):
   • A dishonest customer receives ordered goods and subsequently files a false fraudulent-charge dispute with their issuing bank, forcing the e-commerce merchant to suffer financial loss and administrative chargeback fees.
4. System Outages and Infrastructure Failure:
   • Unplanned cloud server crashes, fiber-optic cable cuts, or payment switch overloads (during peak sales events like 11.11) disrupt payment authorization, stranding shopping carts and causing revenue loss.
5. Regulatory and Anti-Money Laundering (AML) Non-Compliance:
   • Failure to maintain stringent Know-Your-Customer (KYC) records risks facilitating illegal financial flows, terrorism financing, and attracting heavy regulatory fines from central banks.

Electronic Data Interchange (EDI): Analysis & Comparison with Email

Electronic Data Interchange (EDI) is the computer-to-computer exchange of standardized, structured electronic business documents (purchase orders, invoices, shipping notices) between trading partners using globally agreed data formatting standards (ANSI X12, UN/EDIFACT) without human manual intervention.

---

1. Advantages of EDI

• Drastic Reduction in Processing Errors: Eliminates manual re-keying of paper documents, reducing data entry errors by over 95%.
• Accelerated Order Cycle Times: Transactions that previously took days via mail or manual processing execute in seconds, slashing inventory lead times.
• Cost Efficiency: Massive savings on paper printing, envelope mailing, physical filing storage, and manual data-entry clerk salaries.
• Lean Supply Chain Integration: Facilitates automated Just-In-Time (JIT) manufacturing and automated stock replenishment.

---

2. Disadvantages of EDI

• High Initial Capital & Setup Costs: Implementing dedicated EDI translation software, hardware servers, and Value-Added Networks (VANs) requires heavy capital investment.
• Rigid Data Formatting: Adhering strictly to standardized formatting templates leaves no room for informal narrative context or customized order deviations.
• Protracted Onboarding: Integrating EDI protocols with heterogeneous internal Enterprise Resource Planning (ERP) systems of diverse suppliers takes months of technical testing.

---

3. Why Organizations Prefer EDI over Email

While email allows digital transmission of documents, enterprises universally prefer EDI for B2B transactions because:

1. Machine-Processable vs. Human-Readable: An email body or PDF attachment is human-readable and requires manual human interpretation and manual data entry into the billing software. EDI data is machine-readable, flowing directly into the recipient’s ERP database automatically.
2. End-to-End Workflow Automation: When an EDI purchase order arrives, the supplier’s warehouse software automatically generates a packing slip, updates inventory, and issues an electronic invoice without a single human keystroke.
3. Guaranteed Delivery & Cryptographic Audit Trails: EDI utilizes standardized functional acknowledgments (e.g., EDI 997 FA), confirming that the message was received and parsed without corruption, whereas emails can bounce or land in spam folders.

Detailed Comparison: Traditional Commerce vs. Electronic Commerce