|
 |
|
E-commerce:
General background and local issues
|
The Program in Distance Phrenology
(PDP) advertises through its web site. It makes sure the major
search engines will link net surfers to their site and it keeps
current, former and potential students up to date with an optional
email notification service that redirects them to the web site
for details on new services, changes in certification guidelines,
etc. They admit students, handle all academic services, offer
courses and certification processes online. They accept credit
card transactions over the web as a means of payment for all
business transactions. They recruit staff via online job search
channels. Some of their employees are salaried and/or given
commissions, others are contract faculty, signing on for a particular
course or curriculum development effort, doing their work remotely
and getting paid via electronic funds transfer.
There is no physical corporate headquarters, the PDP director
has signed a contract with another company to host their virtual
home office, providing all staff, students and employees with
email boxes, fax, telephony, file space, and video and audio
conferencing capability from their home office desktop or notebook
computers. They track their class rosters, certification files
and student administration files via a web browser interface
to a database at the virtual home office server, and students
are able to download courseware, syllabuses, required materials
and assignments over the Internet. What follows is a quick survey
of what would have to be in place to make all this possible:
3.1 Distributed
services and browsers
The Program in Distance Phrenology lives and dies by the web.
The browser is the gateway to any and all of the PDP offerings
outlined above. But the browsers depend on full-function web
servers to host the behind-the-scenes work. Those web servers
have to be linked to databases, mail servers, and telephony
and fax servers. There is a business-to-business aspect to these
distributed services as well since PDP has contracted with a
third party to host their virtual offices. Taken together these
components make up the server side of the equation for distributed
services.
PDP staff count on the fact that their students, staff and employees
have what they need on their desktop or notebook computers alreadythat
is, 1) a recent browser (not too many releases behind the latest
and greatest), with Javalanguage capability for some of the
more sophisticated interactive services, and 2) an account with
a local Internet Service Provider (ISP) so they have the means
to get online. The directors of PDP must assure themselves that
they are not cutting off significant numbers of potential students
because of unwarranted assumptions about client IT capabilities.
3.2 Security and directory
PDP provides access to valuable goods and services over the
Internet. They are exchanging proprietary and sensitive information
in innumerable electronic messages. Both they and their students
must trust that this information is not falling into the hands
of third parties and that they are really communicating with
each other and not with an online imposter. In particular, the
Family Educational Rights and Privacy Act (FERPA) guidelines
set federal policies governing the privacy of electronic records
for students and their families. All this means the company
needs a solid security infrastructure that manages accounts
for faculty and staff and for current and potential students.
The security service must authenticate users (determines if
they are who they claim to be) when they connect to the servers,
and then authorize those authenticated users to access the resources
(and only the resources) to which they are entitled.
The security system must also provide for encryption of all
sensitive or valuable information being transmitted over the
Internet and for digital signatures to messages so the recipient
can be assured that the message is genuine. The security services
in turn depend on a general directory service to maintain and
make available information about individuals (employees, customers,
business partners and others) and their roles and privileges.
The directory service will also need to support globally accessible
online white and yellow page lookup services and internally
accessible contact information for students.
3.3 Shopping and registering via online catalogs
Students can search the online academic catalog. It doubles
as a timetable, specifying when particular courses are offered
(Courses, for example, that include a videoconference component
require a group of students to take the course at the same time).
If a student has gone through e-admissions, and is eligible
to register, they can make selections from the catalog, accumulating
ashopping basket of courses for a given term and
then they can proceed to thecheck-out counter where
their electronic invoice is generated and their online payment
accepted. This is how PDP handles registration online.
3.4 Transactions over the network
Because electronic payments are made by students and dispersed
to faculty, staff
and other business partners, the infrastructure will need to
support secure
transactions. For example, participants in the transactions
must trust that if their
account is debited, the credit will show on PDPs books
and vice versa. This
requires PDP to have a solid infrastructure for distributed
transaction processing.
However, products that support this key enabling technology
are only recently
beginning to mature.
3.5 Automated workflow
There are a number of multi-step business processes in the PDP
program office.To be a true e-business, PDP needs to automate
these workflow processes so that, for example, an e-document
get routed to the appropriate business officers, getsthe necessary
reviews and approvals, and gets copied to all the relevant parties.
3.6 Audit and archive
Requirements for accreditation, licensing and certification
specify which recordsmust be archived and available for audit.
Concerns over potential litigation alsodictate that there be
a complete electronic record of past business and academictransactions.
An infrastructure to capture and maintain such records must
be inplace.
3.7 Internet standards
None of this would work without the general adherence by all
participants to a common set of standards and protocols. Even
the most basic functions such as searching the online catalog
and participating in an email discussion group rely on TCP/IP
for internet transmission of data, HTTP for web server to browser
links, HTML for web browser content and formatting, DNS for
resolving computer host names into IP addresses and SMTP for
interoperable exchange of email.
In addition to these well-established standards, there is a
second set that would be required in order to provide interoperable
and widely accessible directory and security services of the
kind described above. To give student the ability to search
a faculty directory, an LDAP or X.500 server would have to be
in place. This directory would also likely contain the business
to business contact information and student demographic data
as well. Security needs have been mentioned above. Privacy,
authenticity and integrity are the goals of such Internet-related
standards and protocols as Secure Sockets Layer (SSL), IPsec
and Public Key Infrastructure (PKI) |
|
 |
|
|
 |
|
|