MUMBAI, India, July 7 -- Intellectual Property India has published a patent application (202641076653 A) filed by Dr. S. Ganeshmoorthy; Karpagam College Of Engineering; Dr. Amrita Priya K; Naveen Kumar M; Abinash M; Mohamed Abdul Bashith A; Gayathri S; Sabithkumar S; and Abishek S on June 20, 2026, for Securing Electronic Product Transactions: A Hybrid Cryptographic And Multi-Layer Authentication Framework For E-Commerce Platforms.
Inventors include Dr. S. Ganeshmoorthy; Dr. Amrita Priya K; Naveen Kumar M; Abinash M; Mohamed Abdul Bashith A; Gayathri S; Sabithkumar S; and Abishek S.
The application for the patent was published on July 03, 2026, under issue no. 27/2026.
Abstract: Securing Electronic Product Transactions: A Hybrid Cryptographic and Multi-Layer Authentication Framework for E-Commerce Platforms Abstract: The rapid expansion of e-commerce platforms has transformed the global marketplace for electronic products, creating unprecedented opportunities alongside significant security vulnerabilities. As digital transactions involving high-value electronics, software licenses, and digital goods proliferate, conventional security measures have proven increasingly inadequate against sophisticated cyber threats. This paper proposes a comprehensive Hybrid Cryptographic and Multi-Layer Authentication Framework specifically designed to address the complex security demands of electronic product e-commerce transactions. The proposed framework integrates Advanced Encryption Standard with 256-bit keys (AES-256) for symmetric data encryption, Rivest–Shamir–Adleman (RSA) for secure key exchange, and Elliptic Curve Cryptography (ECC) to optimize computational efficiency without compromising cryptographic strength. Complementing the encryption layers, the framework incorporates multi-factor authentication (MFA) combining one-time password generation and biometric verification, payment tokenization to eliminate exposure of sensitive card data, and HMAC-SHA256-based session management for end-to-end transaction integrity. Security analysis demonstrates the framework's robust resistance to man-in-the-middle attacks, replay attacks, SQL injection, and cross-site scripting. Performance evaluation indicates that the multi-layer architecture achieves superior protection with manageable computational overhead, making it well-suited for real-world e-commerce deployments. The proposed solution provides a scalable and interoperable foundation for securing electronic product transactions in contemporary digital marketplaces. The global e-commerce industry has witnessed exponential growth over the past decade, fundamentally reshaping how consumers purchase electronic products. From smartphones and laptops to firmware updates and software subscriptions, the digital economy now accounts for trillions of dollars in annual commerce. According to recent industry analyses, the electronics segment consistently ranks among the highest-grossing categories in online retail, driven by consumer demand for convenience and competitive pricing. This trajectory, while commercially significant, exposes both merchants and consumers to a growing spectrum of cybersecurity threats. Electronic product transactions present security challenges that differ materially from conventional online purchases. High-value hardware items attract sophisticated fraud attempts, while the delivery of digital licenses and activation keys creates unique vectors for interception and unauthorized duplication. Unlike physical goods, digital deliverables offer no recourse once compromised; a stolen software key or intercepted activation credential cannot be retrieved after misuse. These characteristics demand security architectures that go beyond standard HTTPS transport encryption. Despite the availability of established cryptographic primitives, many e-commerce platforms implement security in a fragmented manner—relying on a single encryption algorithm, minimal authentication steps, or third-party payment gateways without validating end-to-end transaction integrity. Such fragmentation creates exploitable gaps at the boundaries between security layers. High-profile breaches of retail platforms in recent years underscore the insufficiency of these piecemeal approaches. This research addresses the identified deficiencies by proposing a unified, layered security framework that orchestrates multiple cryptographic techniques within a coherent architecture. The core objectives are: (1) to design a hybrid encryption scheme combining symmetric and asymmetric algorithms for optimal security and performance; (2) to implement multi-factor authentication capable of verifying user identity at transaction initiation; (3) to tokenize payment credentials to eliminate plaintext card data from the transaction lifecycle; and (4) to ensure session integrity through cryptographic message authentication codes. The scope encompasses the full transaction flow from user authentication to order confirmation, with particular consideration for the digital delivery of electronic products. The significance of this work lies in its holistic treatment of e-commerce security. Rather than optimizing a single component, the proposed framework treats security as a systemic property that emerges from the coordinated interaction of authentication, encryption, key management, and session control layers.
Disclaimer: Curated by HT Syndication.
