A new framework for the analysis of solutions for privacy- enhanced Internet commerce

Abstract-- In order to examine the emerging market for privacy-enhancing service in Internet commerce it is critical to examine the relationship between privacy, security, and commerce. In order to function, a privacy-protecting technology must have a coherent trust model, a sustainable business plan, and a solid design for security. Yet, the sustainability of business plans can vary across regulatory regimes and concepts of privacy vary between cultures. Furthermore, privacy can be understood as a right of property, autonomy or seclusion. This paper presents a new framework to assess the suitability and effectiveness of business approaches to privacy and tests it analyzing six well-known systems: Zero Knowledge, Incogno SafeZone, Privada Control, iPrivacy, Passport, and the Anonymizer. We have specifically chosen not to examine smart-card based approaches, such as the American Express Blue. Each system is examined based on its underlying conception of privacy (seclusion, autonomy, property); ACID characteristics (atomicity, consistency, isolation and durability); general business plan; consumer switching cost; availability or openness o