Verkkomaksamisen turvallisuus

Abstract

Opinnäytetyön tarkoituksena on selvittää verkossa asiointia sekä sen turvallisuutta käyttäjäystävällisesti. Tärkeimmät osa-alueet olivat tietoturva sekä tiedon salaus.

Opinnäytetyö on tutkimus ja siinä kerrotaan verkosta ostamisesta, yleisimmistä maksutavoista, tietoturvan peruskäsitteistä, tiedon salauksesta sekä verkkomaksamisen tietoturvasta. Tutkimuksen ohella tehtiin haastattelut lähipiirissä verkkokaupassa asioinnista.

Tutkimuksessa selviää, että tiedon salaus sekä tietoturva ovat erittäin tärkeä osa verkossa maksamista. SSL-protokolla (Secure Sockets Layer) kehitettiin suojaamaan verkkosivuja ja verkkokauppoja. SSL-protokollan lisäksi tarvitaan SSL-sertifikaatti, joka on sähköinen ”henkilöllisyystodistus”.

Verkkomaksamisen tietoturvaan liittyy luottokorttiyhtiöiden maksukorttialan turvallisuusstandardi PCI DSS (Payment Card Industry Data Security Standard). Tätä standardia kehitetään paremmaksi, jotta verkossa maksaminen luottokortilla on tulevaisuudessa turvallisempaa.

Online shopping is part of the present world. More and more products and services are purchased via online.

Buying from a domestic store is generally safe, however there are always parties and individuals who choose to intentionally cause problems. You should be careful when buying abroad. Whenever you buy something online, it would be good to find information about the company.

There are several methods of online payments. In this thesis the following are studied: credit card, banktransfer, money transmission systems and cash on delivery. The most common method of online payment is by credit card and bank transfer, of these two the credit card is more secure. If there occurs trouble with some company, you are more likely to have your money back.

When dealing online you must consider information security and data encryption. Without security, you are vulnerable to attacks, and for that your personal information may be stolen. Data encryption is also needed because without it all data would be available online. SSL (Secure Sockets Layer) was developed to protect web pages and online stores. SSL protocol also needs an SSL certificate. This certificate is an electronic "identity card", these certificates are issued by Certificate Authority or CA.

Security of online paymets is also linked to the payment card industry’s security standard PCI DSS (Payment Card Industry Data Security Standard) of the international credit card companies, international credit card companies. This standard applies to merchants, service providers, banks, and a variety of payment intermediaries. A merchant enters makes a contract on the fees for credit card payments with the receiving agency and agrees to comply with the standard and usually also undertakes to pay the damages if the card numbers are stolen.