A thesis submitted in partial fulfillment of the requirements for the degree of Master of Engineering, School of Advanced Technologies

Thesis (M.Eng.) - Asian Institute of Technology

Electronic commerce, in a broad sense, is the use of computer networks to improve organizational performance. Increasing profitability, gaining market share, improving customer service and delivering products faster are some of the organizational performance gains possible with electronic commerce. Electronic commerce based on Internet technologies is profitable for organizations. But the more Internet makes a organization easily reachable for the rest of the world, it also makes the rest of the world easily reachable for you, including for the bad guys. These guys will try to find vulnerabilities on Internet, and exploit those weak points for their benefits that usually contradict with the interest of that organization. Hence, a common question is "Is the Internet safe for commerce?" in a sense, this is the wrong question; a better one might be" Can the Internet be safe enough for my business?" Just as we use different locks for houses than for banks vaults, there are many different technical components used for security in Internet commerce, and they depend on such questions as the risks, costs, and the value of the information involved. This paper, attempts to review the role based access control model along with security requirements including the security mechanisms available in different aspects of Electronic commerce. In addition to a prototype of the model is analyzed, designed and implemented systematically to test its applicability in real world situations.