rfc2801.txt

RFC 的详细文档！

   Figure 18 Authentication Document Exchange                       190
   Figure 19 Brand Dependent Offer Document Exchange                196
   Figure 20 Brand Independent Offer Exchange                       198
   Figure 21 Payment Document Exchange                              204
   Figure 22 Delivery Document Exchange                             210
   Figure 23 Payment and Delivery Document Exchange                 214
   Figure 24 Baseline Authentication IOTP Transaction               217
   Figure 25 Baseline Deposit IOTP Transaction                      219
   Figure 26 Baseline Purchase IOTP Transaction                     221
   Figure 27 Baseline Refund IOTP Transaction                       223
   Figure 28 Baseline Withdrawal IOTP Transaction                   225
   Figure 29 Baseline Value Exchange IOTP Transaction               228
   Figure 30 Baseline Value Exchange Signatures                     230
   Figure 31 Valid Combinations of Document Exchanges               231
   Figure 32 Baseline Transaction Status Inquiry                    238
   Figure 33 Baseline Ping Messages                                 242
















Burdett                      Informational                      [Page 6]

RFC 2801                       IOTP/1.0                       April 2000


1. Background

   The Internet Open Trading Protocol (IOTP) provides an interoperable
   framework for Internet commerce. It is payment system independent and
   encapsulates payment systems such as SET, Mondex, CyberCash,
   DigiCash, GeldKarte, etc. IOTP is able to handle cases where such
   merchant roles as the shopping site, the Payment Handler, the
   Delivery Handler of goods or services, and the provider of customer
   support are performed by different parties or by one party.

   The developers of IOTP seek to provide a virtual capability that
   safely replicates the real world, the paper based, traditional,
   understood, accepted methods of trading, buying, selling, value
   exchanging that has existed for many hundreds of years.  The
   negotiation of who will be the parties to the trade, how it will be
   conducted, the presentment of an offer, the method of payment, the
   provision of a payment receipt, the delivery of goods and the receipt
   of goods. These are events that are taken for granted in the course
   of real world trade. IOTP has been produced to provide the same for
   the virtual world, and to prepare and provide for the introduction of
   new models of trading made possible by the expanding presence of the
   virtual world.

   The other fundamental ideal of the IOTP effort is to produce a
   definition of these trading events in such a way that no matter where
   produced, two unfamiliar parties using electronic commerce
   capabilities to buy and sell that conform to the IOTP specifications
   will be able to complete the business safely and successfully.

   In summary, IOTP supports:

   o Familiar trading models

   o New trading models

   o Global interoperability

   The remainder of this section provides background to why IOTP was
   developed. The specification itself starts in the next chapter.

1.1 Commerce on the Internet, a Different Model

   The growth of the Internet and the advent of electronic commerce are
   bringing about enormous changes around the world in society, politics
   and government, and in business. The ways in which trading partners
   communicate, conduct commerce, are governed have been enriched and
   changed forever.




Burdett                      Informational                      [Page 7]

RFC 2801                       IOTP/1.0                       April 2000


   One of the very fundamental changes about which IOTP is concerned is
   taking place in the way consumers and merchants trade.
   Characteristics of trading that have changed markedly include:

   o  Presence: Face-to-face transactions become the exception, not the
      rule.  Already with the rise of mail order and telephone order
      placement this change has been felt in western commerce.
      Electronic commerce over the Internet will further expand the
      scope and volume of transactions conducted without ever seeing the
      people who are a part of the enterprise with whom one does
      business.

   o  Authentication: An important part of personal presence is the
      ability of the parties to use familiar objects and dialogue to
      confirm they are who they claim to be. The seller displays one or
      several well known financial logos that declaim his ability to
      accept widely used credit and debit instruments in the payment
      part of a purchase. The buyer brings government or financial
      institution identification that assures the seller she will be
      paid. People use intangibles such as personal appearance and
      conduct, location of the store, apparent quality and familiarity
      with brands of merchandise, and a good clear look in the eye to
      reinforce formal means of authentication.

   o  Payment Instruments: Despite the enormous size of bank card
      financial payments associations and their members, most of the
      world's trade still takes place using the coin of the realm or
      barter. The present infrastructure of the payments business cannot
      economically support low value transactions and could not survive
      under the consequent volumes of transactions if it did accept low
      value transactions.

   o  Transaction Values: New meaning for low value transactions arises
      in the Internet where sellers may wish to offer for example, pages
      of information for fractions of currency that do not exist in the
      real world.

   o  Delivery: New modes of delivery must be accommodated such as
      direct electronic delivery. The means by which receipt is
      confirmed and the execution of payment change dramatically where
      the goods or services have extremely low delivery cost but may in
      fact have very high value.  Or, maybe the value is not high, but
      once delivery occurs the value is irretrievably delivered so
      payment must be final and non-refundable but delivery nonetheless
      must still be confirmed before payment.  Incremental delivery such
      as listening or viewing time or playing time are other models that
      operate somewhat differently in the virtual world.




Burdett                      Informational                      [Page 8]

RFC 2801                       IOTP/1.0                       April 2000


1.2 Benefits of IOTP

   ELECTRONIC COMMERCE SOFTWARE VENDORS

   Electronic Commerce Software Vendors will be able to develop e-
   commerce products which are more attractive as they will inter-
   operate with any other vendors' software. However, since IOTP focuses
   on how these solutions communicate, there is still plenty of
   opportunity for product differentiation.

   PAYMENT BRANDS

   IOTP provides a standard framework for encapsulating payment
   protocols.  This means that it is easier for payment products to be
   incorporated into IOTP solutions. As a result the payment brands will
   be more widely distributed and available on a wider variety of
   platforms.

   MERCHANTS

   There are several benefits for Merchants:

   o  they will be able to offer a wider variety of payment brands,

   o  they can be more certain that the customer will have the software
      needed to complete the purchase

   o  through receiving payment and delivery receipts from their
      customers, they will be able to provide customer care knowing that
      they are dealing with the individual or organisation with which
      they originally traded

   o  new merchants will be able to enter this new (Internet) market-
      place with new products and services, using the new trading
      opportunities which IOTP presents

   BANKS AND FINANCIAL INSTITUTIONS

   There are also several benefits for Banks and Financial Institutions:

   o  they will be able to provide IOTP support for merchants

   o  they will find new opportunities for IOTP related services:

      -  providing customer care for merchants
      -  fees from processing new payments and deposits





Burdett                      Informational                      [Page 9]

RFC 2801                       IOTP/1.0                       April 2000


   o  they have an opportunity to build relationships with new types of
      merchants

   CUSTOMERS

   For Customers there are several benefits:

   o  they will have a larger selection of merchants with whom they can
      trade

   o  there is a more consistent interface when making the purchase

   o  there are ways in which they can get their problems fixed through
      the merchant (rather than the bank!)

   o  there is a record of their transaction which can be used, for
      example, to feed into accounting systems or, potentially, to
      present to the tax authorities

1.3 Baseline IOTP

   This specification is Baseline IOTP. It is a Baseline in that it
   contains ways of doing trades on the Internet which are the most
   common, for example purchases and refunds.

   The group that has worked on the IOTP see an extended version being
   developed over time but feel a need to focus on a limited function
   but completely usable specification in order that implementers can
   develop solutions that work now.

   During this period it is anticipated that there will be no changes to
   the scope of this specification with the only changes made being
   limited to corrections where problems are found. Software solutions
   have been developed based on earlier versions of this specification
   (for example version 0.9 published in early 1998 and earlier
   revisions of version 1.0 published during 1999) which prove that the
   IOTP works.

1.4 Objectives of Document

   The objectives of this document are to provide a specification of
   version 1.0 of the Internet Open Trading Protocols which can be used
   to design and implement systems which support electronic trading on
   the Internet using the Internet Open Trading Protocols.







Burdett                      Informational                     [Page 10]

RFC 2801                       IOTP/1.0                       April 2000


   The purpose of the document is:

   o  to allow potential developers of products based on the protocol to
      develop software/hardware solutions which use the protocol

   o  to allow the financial services industry to understand a
      developing electronic commerce trading protocol that encapsulates
      (without modification) any of the current or developing payment
      schemes now being used or considered by their merchant customer
      base

1.5 Scope of Document

   The protocol describes the content, format and sequences of messages
   that pass among the participants in an electronic trade - consumers,
   merchants and banks or other financial institutions, and customer
   care providers.  These are required to support the electronic
   commerce transactions outlined in the objectives above.

   The protocol is designed to be applicable to any electronic payment
   scheme since it targets the complete purchase process where the
   movement of electronic value from the payer to the payee is only one,
   but important, step of many that may be involved to complete the
   trade.

   Payment Scheme which IOTP could support include MasterCard Credit,
   Visa Credit, Mondex Cash, Visa Cash, GeldKarte, eCash, CyberCoin,
   Millicent, Proton, etc.

   Each payment scheme contains some message flows which are specific to
   that scheme. These scheme-specific parts of the protocol are
   contained in a set of payment scheme supplements to this
   specification.

   The document does not prescribe the software and processes that will
   need to be implemented by each participant. It does describe the
   framework necessary for trading to take place.

   This document also does not address any legal or regulatory issues
   surrounding the implementation of the protocol or the information
   systems which use them.

1.6 Document Structure