rfc2801.txt

RFC 的详细文档！

   The document consists of the following sections:

   o  Section 1 - Background: This section gives a brief background on
      electronic commerce and the benefits IOTP offers.



Burdett                      Informational                     [Page 11]

RFC 2801                       IOTP/1.0                       April 2000


   o  Section 2 - Introduction: This section describes the various
      Trading Exchanges and shows how these trading exchanges are used
      to construct the IOTP Transactions. This section also explains
      various Trading Roles that would participate in electronic trade.

   o  Section 3 - Protocol Structure: This section summarises how
      various IOTP transactions are constructed using the Trading Blocks
      and Trading Components that are the fundamental building blocks
      for IOTP transactions. All IOTP transaction messages are well
      formed XML documents.

   o  Section 4 - IOTP Error Handling: This section describes how to
      process exceptions and errors during the protocol message exchange
      and trading exchange processing. This section provides a generic
      overview of the exception handling. This section should be read
      carefully.

   o  Section 5 - Security Considerations: This section considers from
      an IETF perspective, how IOTP addresses security. It includes: how
      to determine whether to use digital signatures with IOTP, how IOTP
      address data privacy, and how security built into payment
      protocols relate to IOTP security.

   o  Section 6 - Digital Signatures and IOTP: This section provides an
      overview of how IOTP uses digital signatures; how to check a
      signature is correctly calculated and how the various Trading
      Roles that participate in trade should check signatures when
      required.

   o  Section 7 - Trading Components: This section defines the XML
      elements required by Trading Components.

   o  Section 8 - Trading Blocks: This section describes how Trading
      Blocks are constructed from Trading Components.

   o  Section 9 - Internet Open Trading Protocol Transactions: This
      section describes all the IOTP Baseline transactions. It refers to
      Trading Blocks and Trading Components and Signatures. This section
      doesn't directly link error handling during the protocol
      exchanges, the reader is advised to understand Error Handling as
      defined in section before reading this section.

   o  Section 10 - Retrieving Logos: This section describes how IOTP
      specific logos can be retrieved.







Burdett                      Informational                     [Page 12]

RFC 2801                       IOTP/1.0                       April 2000


   o  Section 11 - Brands: This section provides: an overview of Brand
      Definitions and Brand Selection which describe how a Consumer can
      select a Brand from a list provided by the Merchant; as well as
      some examples of Brand Lists.

   o  Section 12 - IANA Considerations: This section describes how new
      values for codes used by IOTP are co-ordinated.

   o  Section 13 - Internet Open Trading Protocol Data Type Definition:
      This section contains the XML Data Type Definitions for IOTP.

   o  Section 14 - Glossary. This describes all the major terminology
      used by IOTP.

   o  Section 15 - A list of the other documents referenced by the IOTP
      specification.

   o  Section 16 - The Author's Address

   o  Section 17 - Full Copyright Statement

1.7 Intended Readership

   Software and hardware developers; development analysts; business and
   technical planners; industry analysts; merchants; bank and other
   payment handlers; owners, custodians, and users of payment protocols.

1.7.1 Reading Guidelines

   This IOTP specification is structured primarily in a sequence
   targeted at people who want to understand the principles of IOTP.
   However from practical implementation experience by implementers of
   earlier of versions of the protocol new readers who plan to implement
   IOTP may prefer to read the document in a different sequence as
   described below.

   Review the transport independent parts of the specification. This
   covers:

   o Section 14 - Glossary

   o Section 1 - Background

   o Section 2 - Introduction

   o Section 3 - Protocol Structure

   o Section 4 - IOTP Error Handling



Burdett                      Informational                     [Page 13]

RFC 2801                       IOTP/1.0                       April 2000


   o Section 5 - Security Considerations

   o Section 9 - Internet Open Trading Protocol Transactions

   o Section 11 - Brands

   o Section 12 - IANA Considerations

   o Section 10 - Retrieving Logos

   Review the detailed XML definitions:

   o Section 8 - Trading Blocks

   o Section 7 - Trading Components

   o Section 6 - Digital Signatures and IOTP

2. Introduction

   The Internet Open Trading Protocols (IOTP) define a number of
   different types of IOTP Transactions:

   o  Purchase. This supports a purchase involving an offer, a payment
      and optionally a delivery

   o  Refund. This supports the refund of a payment as a result of,
      typically, an earlier purchase

   o  Value Exchange. This involves two payments which result in the
      exchange of value from one combination of currency and payment
      method to another

   o  Authentication. This supports one organisation or individual to
      check that another organisation or individual are who they appear
      to be.

   o  Withdrawal. This supports the withdrawal of electronic cash from a
      financial institution

   o  Deposit. This supports the deposit of electronic cash at a
      financial institution

   o  Inquiry. This supports inquiries on the status of an IOTP
      transaction which is either in progress or is complete






Burdett                      Informational                     [Page 14]

RFC 2801                       IOTP/1.0                       April 2000


   o  Ping. This supports a simple query which enables one IOTP aware
      application to determine whether another IOTP application running
      elsewhere is working or not.

   These IOTP Transactions are "Baseline" transactions since they have
   been identified as a minimum useful set of transactions. Later
   versions of IOTP may include additional types of transactions.

   Each of the IOTP Transactions above involve:

   o  a number of organisations playing a Trading Role, and

   o  a set of Trading Exchanges. Each Trading Exchange involves the
      exchange of data, between Trading Roles, in the form of a set of
      Trading Components.

   Trading Roles, Trading Exchanges and Trading Components are described
   below.

































Burdett                      Informational                     [Page 15]

RFC 2801                       IOTP/1.0                       April 2000


2.1 Trading Roles

   The Trading Roles identify the different parts which organisations
   can take in a trade. The five Trading Roles used within IOTP are
   illustrated in the diagram below.

   *+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*

              Merchant Customer Care Provider resolves   ----------
         ---------------------------------------------->| Merchant |
        |          Consumer disputes and problems       |Cust.Care.|
        |                                               | Provider |
        |                                                ----------
        |
                   Payment Handler accepts or makes     ----------
        |    ------------------------------------------>| Payment  |
        |   |             Payment for Merchant          | Handler  |
        |   |                                            ----------
        v   v
    ----------    Consumer makes purchases or obtains    ----------
   | Consumer |<--------------------------------------->| Merchant |
    ----------             refund from Merchant          ----------
        ^
        |         Delivery Handler supplies goods or     ----------
        |---------------------------------------------->|Deliverer |
                       services for Merchant            | Handler  |
                                                         ----------

   *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

                    Figure 1 IOTP Trading Roles




















Burdett                      Informational                     [Page 16]

RFC 2801                       IOTP/1.0                       April 2000


   The roles are:

   o  Consumer. The person or organisation which is to receive and pay
      for the goods or services

   o  Merchant. The person or organisation from whom the purchase is
      being made and who is legally responsible for providing the goods
      or services and receives the benefit of the payment made

   o  Payment Handler. The entity that physically receives the payment
      from the Consumer on behalf of the Merchant

   o  Delivery Handler. The entity that physically delivers the goods or