-The introduction of online payment systems for tuition and other fees in institutions across the globe is a great breakthrough of Information and Communication Technology. However, the attendant security risk has become a serious concern to Information Technology experts and the individual institution implementing the system. Of particular concern is the limited knowledge of parents and guardians about the status of their children or wards due to payment issues. This paper seeks to solve this problem by integrating payment transactions alert algorithm into an existing online payment algorithm in order to provide feedback information from the institution authority to parents or guardians by way of a Short Message Service for all payments made or not by their children or wards. By the codified SMS algorithm into the existing payment system, it is able to deliver feedback messages to parents.
INTRODUCTION
Internet technology has rapidly made the world a global
village in videos, pictures and audios communications.
Exchange of ideas, goods and services are done in a matter
of seconds with the application of online systems. The
competitive nature of business transactions has forced any
company or business outfits to embrace online transactions if
a company or an organization wants to continue to be
relevant in today’s Information Technology world. [
Thus, Companies and organizations either private or
government engaging in online transactions should be
seriously concerned about the security implications of such
transactions, security implications consist of the efficiency,
confidentiality, reliability, availability. Doing business online
is no longer an oddity, but the norm and companies desiring
to remain competitive have to maintain some form of online
presence. Doing business online is not limited to commercial
businesses only, institutions across the globe today engages
and rely on online systems for almost their activities
including advertisements, application, registrations ,
academic activities and most importantly, all their payment
schedules. The attendant security risk that goes along such
payment has become an evolving problem to many
institutions world over, it is important to ensure security of
payment system in terms of reliability of hardware, software,
internet network, power supplies and personnel [
There are some essential elements that must be in place
before an online payment system can be established. These
are PCI compliance, A payment gateway, A merchant
account, ACH payments, and A payment processor. The
payment gateway and the merchant account operators must
set their operations be in total compliance with Payment
Card Industry Data Security Standard (PCI DSS). This
PCIDSS was established the Payment Card Industry Security
Standards Council to in order to ensure that security
information of the card holder is not compromise by
cybercriminals. The payment gateway act as the bridge
between the merchant and the payment processor and also
between customer and the merchant, it ensures that the credit
card information is securely passed through. The merchant
account is a particular account maintained by a bank through
which payments are received from a debit or credit card. The
ACH is the Automated Clearing House payments are credit
and debit transfers where customers pays for services from
their bank accounts. Payment Processor is engaged by
merchant to handle all debit and credit transactions on their
behalf [
It is the right of every parent or guardian to have
adequate information about their children or wards [
This means that parent should be in possession of their children information or data recorded in any medium, including but not limited to handwriting, email, print, etc. that is directly related to a student and maintained by the institution. This may be the students’ grades, test scores, evaluations, courses taken, advising records, disciplinary actions, courses, exams and financial records and status. Behavioural attitudes of students as observed by the institution authority can also form part of the information due for the parent’s knowledge.
Imbibing the culture of information Security is very critical in parent and institution relationship as regards children and wards in the institution
If there exist some gaps in identifying factors that have
significant influence on information security culture
adoption. Current information security culture existing
literatures have not agreed on principle on what factors needs
to be presented to create such environment that promotes the
creation of security culture. [
The author identifies top critical factors that are necessary for information security culture existence. These factors are: top management support for information security, establishing an effective information security policy, information security awareness, information security training, education, information security risk analysis and assessment, information security compliance, ethical conduct policies, and organization culture.
Knowing the status of students in an institution cannot be overemphasized. When parents and guardians do not have adequate information of their children or wards from the institution’s authority, students would have field day in all manners of deceitful acts, cheatings, truancy, absenteeism, examination malpractice and other vices on the campus that may have made them to be suspended, rusticated or outright withdrawer from school. Such students may not disclose their situation to their parents are often involved in.
Figure 1 shows fake online payment information generated to defraud a prospective candidate seeking admission into a University (Anonymous) by some admission fraudsters. The candidate whose photograph appeared in figure 1 was assured that his admission was successful and therefore went ahead to release money to the fraudsters to pay the school fees. The student’s Identification number that the fraudsters claimed to be for the victim belongs to a genuine and bonafide student of the university whose particulars are shown in figure 2.
Figure 2 show the admission data of a genuine student of the anonymous University whose Identification number was used to defraud an unsuspecting candidate shown in figure 1.
The victim that was defrauded had thought that he was already a student and he started attending lectures until when the semester examination was approaching and he could not register on the school porter for continuous assessment tests. The Continuous Assessments (CAs) test in this particular University is being conducted by Computer Base Test (CBT). The porter rejected the student’s Identification number that the victim entered because, he was never admitted in the first place and so could not be found in the admission data base.
A careful look at figure 1 and 2 revealed some discrepancies in Student ID numbers and other features in the genuine payment receipt (figure 2) with those in the fake payment receipt (figure 1). In the end when the guardian discovered, he was very surprised to know that his ward was not even admitted in the university; this is largely because there was no feedback channel from the University to him to know the true status of his ward.
This is the motivation for this research and hence the author wants to solve this problem by codifying the Short Message Service (SMS) algorithm and integrating into existing institution online payment system.
Exchange of goods and services are mainly based and evaluated in terms of money all over the world today as civilization advances from the primitive era where trade by barter and other forms of methods were used in the exchange of goods and services.
Payment for goods and services is the only authentication that ensures that such exchange has occurred. Several payment methods or systems has been in use such as, Cash payment, payment through banks, payment through checks, payments by credit transfer, automated clearing house, wire transfer services payments cards.
Researchers have been extensively researching on general
e-payment systems [
[
[
The common process to purchase anything online is for
the prospective customer to visit the merchant’s site for the
products of interest and select the product [
The author observed that in these existing payment systems, information must go through a payment gateway which makes the system vulnerable to hackers and other cyber criminals. The authors therefore developed an approach for online payment which ensures that customer payment information is provided directly to the payment gateway instead of routing the financial information through a merchant. The author discovered some design issues arising from this approach which was also addressed the use of a trusted third party called identity provider, IP, and a commitment scheme called Pedersen commitment. An IP verifies the identity of a merchant before processing the payment. This Pedersen commitment helps to validate transactions.
According to [
The author submit that software are not save just like the
internet that was primarily designed for connection and not
necessarily designed for security, although, the author agreed
that some software based encryption can remedy the security
issue to some extent but cannot give a total guarantee. Like:.
AES (Advanced Encryption Standard) which is presently the
best encryption available. Hardware security and
implementing multi-criterion authentication in mobile
platform is also very important measure to be considered in
the security of online payment system, [
While the security measures suggested by the author has a far reaching effect on online payment systems, the challenge of feedback information to some stake holders who sometimes are the financier of the whole transaction is still posing a lot of challenges that we seek to solve with this paper. In our case, the stake holders are the parents that are providing the funds for their children’s school fees.
[
Figure 3 is the personal data interface where the student enters all his or her relevant Biodata. The students are required to fill in their own name, age, sex, permanent home address, state and local government of origin and most importantly, the name and telephone number of his parent or guardian.
Figure 4 is the admission data interface containing some of student’s data again like ; age, sex, state, local government area, student’s identification number, course of study, level and department.
Figure 5 is the interface showing the payment agent which generate payment voucher containing the amount of fees required of student to pay. The payment agent for this particular university is the inter-switch; there are several other online payment agents.
Figure 6 is the interface showing payment transactions. When student initiate payment, transaction details are shown whether payment is successful or unsuccessful. At this stage, the transaction details are being sent to the telephone number of the parent or guardian of the student automatically as Short Message Service (SMS). This is where the work of this research comes to function. III.
INTEGRATION OF THE PARENTAL ALERT ALGORITHM INTO THE EXISTING ONLINE PAYMENT SYSTEM
The method used by the authors to solve this problem can be said to be straight forward and simple, but the complexity was in the coding and stringing of the parental SMS alert model into the main existing payment model.
Figure 7 and 8 shows the existing model and the implemented model with the parental alert system respectively.
In the usual online payment system, the focus of the authors which is institution online payment portal, candidates registered on the portal to have students’ Identification number(ID number), or user name and a passwaord, for a freash student, while a returning students who already has an ID or usaul name will have to login with the ID or user namee to access his or her page on the portal on the student’s page as were shown earlier by the interfaces of figurs 1 to 6 in the review chapter of this paper, the student then click and navigate to the payment Data link .the payment data interface is linked with any of the payment gateway that the instittution is in collaboration with for the financial transaction proper which in this case, is the paymayment of tuition or any other fees payable to the institution by the concerned student.
The student gets all transaction details from the payement gateway via the institution portal. Figure 8 is the institution online payment system integrated with the parental alert SMS algorithm. As proposed by this paper, the processes involved in the institution payments is the same as figure 7 but the parental alert system is introduced at the stage of transaction interactions between the student making the payment , the institution payment server and the payment gateway otherwise known as the third party.
ENTER STUDENT ID AND PASSWORD GOTO PAYMENT RECORDS IF FRESH STUDENT/RETUNING STUDENT CHECK STATUS GOTO PAYMENT
IF PAYMENT UNSUCCESSFUL
SEND UNSUCCESSFUL_ _FEEDBACK TRANSACTION_ _DETAILS
GOTO PAYMENT ENDIF IF PAYMENT SUCCESSFUL SEND SUCCESSFUL FEEDBACK_ _TRANSACTION DETAILS
SELECT TARGET FILE ENTER STUDENT ID AND PASSWORD GOTO PAYMENT RECORDS IF FRESH STUDENT/RETUNING STUDENT CHECK STATUS GOTO PAYMENT IF PAYMENT UNSUCCESSFUL
SEND UNSUCCESSFUL FEEDBACK_ _TRANSACTION DETAILS SEND UNSUCCESSFUL SMS/EMAIL TO_ _PARENT
GOTO PAYMENT ENDIF
IF PAYMENT SUCCESSFUL
SEND SUCCESSFUL FEEDBACK_ _TRANSACTION DETAILS SEND SUCCESSFUL SMS/EMAIL TO_ _PARENT
ENDIF
DISCUSSION
In the existing online payment systems, the actors that are acting on the system are; the candidate (student) making the payment, the university portal administrator, the merchant account bank and the payment processor as explained in figure 7. All transaction details and feedbacks are only to candidate, the parent is not among the actors interaction with the system directly. The normal payment algorithm as shown in (b), does not accommodate external actor. The integrated alert algorithm (c) has now extended some aspect of the transaction information to the parent or guardian in a way that when even the student make an unsuccessful attempt to pay any fees, the feedback will be sent to parent(s), when the payment is successful, the parent is also aware.
V.
CONCLUSION AND RECOMMENDATIONS
In this research, an automated instant alert message (SMS) into the online payment system was designed and tested. The payment portal delivers information to parent and guardians the very moment payments were made by their children or ward. This allows the parent or guardian to keep track of the status of their children or wards in the institution. The SMS alert algorithm that instantly provides payment information to parents was introduced to existing system as one of the contributions to the security features of students’ online payment. This paper utilized the integrated SMS codes as a metric to compare other reviewed papers that were not able to integrate parental automated feedback mechanism in their works
It is recommended that students’ examination result could also be sent to the parent or guardian through this integrated system. Also the institution authority should verify the data of the parents or guardian entered in the personal data page on the portal shown in figure 3. There are license software the institution’s authority can use to verify the authentic owner of telephone numbers supplied by the students.