Object Retrieval and Access Management in Electronic Commerce

Published

September 1, 1999

Author(s)

S A. Wakid, John Barkley, Mark Skall

Abstract

Electronic commerce over the Internet is now tens of billions of dollars per year and growing. This article describes how objects used in EC can be located and protected from unauthorized access. It discusses the three kinds of EC: customer interactions with a business, business interactions with other businesses, and interactions within a business. It characterizes the object retrieval and access management required to support the types of EC. It describes how metadata expressed in XML can be used to locate objects for retrieval and how a public key infrastructure along with role-based access control can be used to implement the distributed authentication and access control necessary to support complex access policies. In addition, the article describes activities within the Information Technology Laboratory at the National Institute of Standards and Technology which contribute to the development of related standards and tests.

Citation

IEEE Communications Magazine

Volume

37

Issue

9

Pub Type

Journals

Download Paper

https://doi.org/10.1109/35.790905

Local Download

Keywords

access control, electronic commerce, Internet, object retrieval, RBAC, Role-Based Access Control, World Wide Web, XML

Citation

Wakid, S. , Barkley, J. and Skall, M. (1999), Object Retrieval and Access Management in Electronic Commerce, IEEE Communications Magazine, [online], https://doi.org/10.1109/35.790905, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=151656 (Accessed October 16, 2025)