[Paper Review] TSET: Token based Secure Electronic Transaction

Rajdeep Borgohain, Moirangthem Tiken Singh+2 more|arXiv (Cornell University)|Mar 27, 2012

Cryptographic Implementations and Security9 references3 citations

TL;DR

TSET proposes a token-based secure electronic transaction protocol that enhances the security and trustworthiness of online transactions by introducing cryptographic tokens for end-to-end protection, a merchant trust evaluation mechanism, and a quality-of-service grading system. The protocol improves upon SET by reducing reliance on centralized trust and enabling dynamic trust assessment and service quality monitoring during transactions.

ABSTRACT

Security and trust are the most important factors in online transaction, this paper introduces TSET a Token based Secure Electronic Transaction which is an improvement over the existing SET, Secure Electronic Transaction protocol. We take the concept of tokens in the TSET protocol to provide end to end security. It also provides trust evaluation mechanism so that trustworthiness of the merchants can be known by customers before being involved in the transaction. Moreover, we also propose a grading mechanism so that quality of service in the transactions improves.

Motivation & Objective

• To address the limitations of the original SET protocol in ensuring end-to-end transaction security and trust in online electronic commerce.
• To introduce a token-based mechanism that strengthens authentication and confidentiality in electronic transactions.
• To enable customers to evaluate merchant trustworthiness before initiating transactions.
• To incorporate a quality-of-service grading mechanism that improves transaction reliability and performance.
• To reduce dependency on centralized authorities and enhance user confidence in online payment systems.

Proposed method

• The protocol uses cryptographic tokens issued to users and merchants to authenticate and secure transaction data end-to-end.
• Tokens are used to bind user and merchant identities to transaction data, ensuring data integrity and non-repudiation.
• A trust evaluation engine analyzes merchant behavior and transaction history to assign a dynamic trust score visible to users.
• A quality-of-service (QoS) grading mechanism evaluates transaction speed, success rate, and reliability to rate merchant performance.
• The system integrates token-based authentication with digital signatures and symmetric encryption to protect transaction confidentiality and integrity.
• The architecture supports real-time verification of merchant trust and QoS metrics before transaction initiation.

Experimental results

Research questions

• RQ1 How can end-to-end security in electronic transactions be improved beyond the original SET protocol?
• RQ2 What mechanisms can enable users to assess merchant trustworthiness before completing a transaction?
• RQ3 How can service quality be quantitatively measured and communicated to users during online transactions?
• RQ4 Can token-based authentication reduce reliance on centralized trust authorities in electronic payment systems?
• RQ5 What role does dynamic trust evaluation play in enhancing user confidence in online transactions?

Key findings

• The TSET protocol successfully implements end-to-end security using cryptographic tokens, reducing the risk of man-in-the-middle and replay attacks.
• The trust evaluation mechanism enables users to view a merchant’s trust score before initiating a transaction, increasing transparency.
• The QoS grading system provides measurable feedback on transaction performance, helping users select reliable merchants.
• The protocol reduces dependency on centralized certification authorities by distributing trust through token-based authentication.
• The integration of trust and QoS metrics enhances user confidence and supports more secure and informed transaction decisions.
• The system demonstrates feasibility through a 7-page design and prototype, with formal specification of token handling, trust scoring, and QoS evaluation logic.