The basic security requirements of a secure e-commerce site are as follows:
- Authentication: Are parties in the transaction who claims to be?
- Privacy and confidentiality: Are transactions data protected? The consumer may want to make anonymous purchase. Are all non-essential traces of a transaction removed from the public network and all intermediary records eliminated?
- Integrity: Checks that the message sent is complete that is they are not corrupted.
- Non-repudiability: Ensures sender cannot deny sending message.
- Availability: How can threats to the community and performance of the system be eliminated?
- Besides the above mentioned points the concepts of Digital Certificates, Digital signatures, Public key infrastructure, certificate authorities etc. can be used.