SET Requirements – Book 1

• Provide confidentiality of payment & ordering – encryption

• Ensure integrity of data – digital signatures

• Verify cardholder is legitimate user of a valid account – signatures and certificates

• Ensure use of best security practices – well tested specification

• Protocol is independent of transport security mechanisms – “raw” TCP/IP, IPSec, or SSL

• Interoperability among software & network providers – independent of platforms & OS