中文RFC文档(Request For Comments)

Network Working Group D. Burdett Request for Comments: 2801 Commerce One Category: Informational April 2000 Internet Open Trading Protocol - IOTP Version 1.0 Status of this Memo This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. Copyright Notice Copyright (C) The Internet Society (2000). All Rights Reserved. Abstract The Internet Open Trading Protocol (IOTP) provides an interoperable framework for Internet commerce. It is payment system independent and encapsulates payment systems such as SET, Secure Channel Credit/Debit, Mondex, CyberCoin, GeldKarte, etc. IOTP is able to handle cases where such merchant roles as the shopping site, the Payment Handler, the Delivery Handler of goods or services, and the provider of customer support are performed by different parties or by one party. Table of Contents 1. Background .....................................................7 1.1 Commerce on the Internet, a Different Model .................7 1.2 Benefits of IOTP ............................................9 1.3 Baseline IOTP ..............................................10 1.4 Objectives of Document .....................................10 1.5 Scope of Document ..........................................11 1.6 Document Structure .........................................11 1.7 Intended Readership ........................................13 1.7.1 Reading Guidelines ...................................13 2. Introduction ..................................................14 2.1 Trading Roles ..............................................16 2.2 Trading Exchanges ..........................................18 2.2.1 Offer Exchange .......................................19 2.2.2 Payment Exchange .....................................21 2.2.3 Delivery Exchange ....................................24 2.2.4 Authentication Exchange ..............................26 2.3 Scope of Baseline IOTP .....................................28 Burdett Informational [Page 1]  RFC 2801 IOTP/1.0 April 2000 3. Protocol Structure ............................................31 3.1 Overview ...................................................32 3.1.1 IOTP Message Structure ...............................32 3.1.2 IOTP Transactions ....................................34 3.2 IOTP Message ...............................................35 3.2.1 XML Document Prolog ..................................37 3.3 Transaction Reference Block ................................37 3.3.1 Transaction Id Component .............................38 3.3.2 Message Id Component .................................39 3.3.3 Related To Component .................................41 3.4 ID Attributes ..............................................42 3.4.1 IOTP Message ID Attribute Definition .................43 3.4.2 Block and Component ID Attribute Definitions .........44 3.4.3 Example of use of ID Attributes ......................46 3.5 Element References .........................................46 3.6 Extending IOTP .............................................48 3.6.1 Extra XML Elements ...................................49 3.6.2 Opaque Embedded Data .................................50 3.7 Packaged Content Element ...................................50 3.7.1 Packaging HTML .......................................52 3.7.2 Packaging XML ........................................53 3.8 Identifying Languages ......................................54 3.9 Secure and Insecure Net Locations ..........................54 3.10 Cancelled Transactions .....................................55 3.10.1 Cancelling Transactions ..............................55 3.10.2 Handling Cancelled Transactions ......................56 4. IOTP Error Handling ...........................................56 4.1 Technical Errors ...........................................57 4.2 Business Errors ............................................57 4.3 Error Depth ................................................58 4.3.1 Transport Level ......................................58 4.3.2 Message Level ........................................58 4.3.3 Block Level ..........................................59 4.4 Idempotency, Processing Sequence, and Message Flow .........61 4.5 Server Role Processing Sequence ............................62 4.5.1 Initiating Transactions ..............................62 4.5.2 Processing Input Messages ............................63 4.5.3 Cancelling a Transaction .............................70 4.5.4 Retransmitting Messages ..............................70 4.6 Client Role Processing Sequence ............................71 4.6.1 Initiating Transactions ..............................71 4.6.2 Processing Input Messages ............................72 4.6.3 Cancelling a Transaction .............................74 4.6.4 Retransmitting Messages ..............................74 5. Security Considerations .......................................74 5.1 Determining whether to use digital signatures ..............74 5.2 Symmetric and Asymmetric Cryptography ......................76 5.3 Data Privacy ...............................................77 Burdett Informational [Page 2]  RFC 2801 IOTP/1.0 April 2000 5.4 Payment Protocol Security ..................................77 6. Digital Signatures and IOTP ...................................77 6.1 How IOTP uses Digital Signatures ...........................77 6.1.1 IOTP Signature Example ...............................80 6.1.2 OriginatorInfo and RecipientInfo Elements ............82 6.1.3 Using signatures to Prove Actions Complete Successfully .........................................83 6.2 Checking a Signature is Correctly Calculated ...............84 6.3 Checking a Payment or Delivery can occur ...................85 6.3.1 Check Request Block sent Correct Organisation ........86 6.3.2 Check Correct Components present in Request Block ....91 6.3.3 Check an Action is Authorised ........................91 7. Trading Components ............................................93 7.1 Protocol Options Component .................................96 7.2 Authentication Request Component ...........................97 7.3 Authentication Response Component ..........................98 7.4 Trading Role Information Request Component .................99 7.5 Order Component ...........................................100 7.5.1 Order Description Content ...........................101 7.5.2 OkFrom and OkTo Timestamps ..........................101 7.6 Organisation Component ....................................102 7.6.1 Organisation IDs ....................................104 7.6.2 Trading Role Element ................................105 7.6.3 Contact Information Element .........................108 7.6.4 Person Name Element .................................109 7