Journal Of Internet Banking And Commerce
Vol. 1, no. 1, January 19, 1996


=================
TABLE OF CONTENTS
=================

JIBC Announcement
Editorial
Administrative Notice
Referred Articles and Columns:
1. The Legal Report (by Rich Field)
2. The Citibank Affair: A Purely Russian Crime? (by Nahum
Goldmann)

Articles placed on the JIBC Web site
(http://www.arraydev.com/commerce/JIBC)
1. Security: Contributing Editor Robert Hettinga (by David Murray)
2. Asia Pacific: (Column by Jo-Anne Fisher)
3. United Kingdom Report: (Column by Dave Birch)
4. European Report: (Column by Mauro Cipparone)
5. Innovation Report: (Column by John Gehl)


=================
JIBC ANNOUNCEMENT
=================

Journal of Internet Banking and Commerce

The goal of this publication is to inform executives, professionals,
entrepreneurs, government personnel and other key players on
principal developments and trends in the rapidly evolving electronic
commerce area all over the World. This free online Journal is a way
to keep in touch, to share information, and to establish business
contacts in the area of electronic commerce and banking
on the Internet.

The Journal of Internet Banking and Commerce (JIBC) is primarily
devoted to important announcements, refereed original articles, guest
columns, significant feature presentations from other publications,
as well as survey, reviews, and letters to the editor. We will
try to keep away from technical discussions and leave them to other
specialized lists.

Our Journal will be issued monthly and will limit material to the
absolute minimum. We are definitely looking for quality, not
quantity. We will be editing, filtering and summarizing, to provide
our busy readers only with the substantial information. We will do
this by selecting key items to include into the email portion of the
Journal. Larger articles and columns, as well as background
information, will be placed on our Web site
(http://www.arraydev.com/commerce/JIBC/) with the appropriate
notification in the email part.

Join our Journal and learn about the trends in electronic commerce.
We promise not to get too" techie". Not too many fights but lots of
good discussion. We need your articles, your email, your
contributions and discussion. We would like your feedback either to
Gordon Jenkins, the Editor, or Nahum Goldmann. You can email us
directly or use the Questionnaire that we keep on the JIBC Web site.


=========
EDITORIAL
=========

The purpose of this Journal is to be THE Journal for developments in
Electronic Commerce and Banking. We will keep the Journal focused on
the key issues and will select as our lead articles what we consider
the issues each month. Your comments, feedback, by way of filling
out the Questionnaire, or Letters to Editor, would be appreciated.

We would also like your contribution if you have an interesting
article, or if you come across one that you would like to share with
us, please send it to me. We plan on printing the "cream of the
crop". Most of our contributing editors have columns and newsletters
of their own and are selecting for you in this Journal what they
consider the most important article they've run across during the
last month in their Journal. For example, Mr. Gehl and Mr. Hettinga
have sent along their pick of the month.

Other areas to be published are "hot topics" that you should be aware
of by way of trend or recent development. That is why I have chosen
Richard Field's and Nahum Goldmann's two articles this month for the
email's portion of the Journal. I consider the Legal and Security
aspects of Internet banking and commerce to be the two most important
issues that must be addressed right now.

The developments in other regions and other areas can be found in the
Web portion of this month's edition of the Journal. For example,
Jo-anne Fisher has an excellent article on developments in the
Australian area that deal with Legal. There are also interesting
articles on the U.K. by Mr. Birch and Europe by Mauro Cipparone.

In the following months Journals, we plan on adding more areas, both
geographic and subject. Please read and enjoy and give us your
feedback. We want to, and will, make this the best electronic
commerce journal available on the Net and the one you will look for
every month.

The next issue will feature highlights from two recent World Bank
reports concerned with the technologies and procedures which,
together, are reshaping the way the world does business, especially
in international trade. Generally referred to as "trade facilitation" these
practices are
being applied and developed in many countries and industries. Their application
is
broadly agreed to lead to benefits which significantly outweigh investments; one
country claims annual benefits in excess of 1% of GDP.

The reports offer essential information for decision makers promoting
better trade practices and examine the costs, benefits and best
practices in applying information technology in trade facilitation.
Article will be written by Robert Schware, Senior Informatics
Specialist, Telecommunications & Informatics Division, Industry &
Energy Department, World Bank.

Also in the February edition we will have a very interesting article
from Steve Rollwage of the Canadian Government on "What to consider
before embarking on your electronic commerce adventure".

Enjoy!

Gord Jenkins
Editor


=============================
REFEREED ARTICLES AND COLUMNS
=============================

----------------
The Legal Report
----------------

Richard L. Field, Esq.
field@...

---------------------------------------------------------------------
Mr. Field is an attorney and legal consultant in Cliffside Park,
New Jersey, U.S.A. He is a member of the ABA Science and
Technology and Business Law Sections. He participated in the
drafting of the ABA Digital Signature Guidelines discussed in
this report, and co-chairs its Electronic Commerce Payment
Committee.
---------------------------------------------------------------------

It is fitting that I am writing this first report on legal and
Internet banking and commerce issues on Christmas day. For
some, this day is about new beginnings. The Journal of
Internet Banking and Commerce, and the information era, are
also standing at the cusp of something fundamentally new, but
not yet quite defined.

Others have long seen this season for its commercial
possibilities. Financial reports on our collective shopping
purchases this month will be used to diagnose the economic
health of entire countries, and serve as the basis for legislative
and fiscal policy agendas throughout the upcoming year.

So I thought I would start with another mainstay of the season,
the year-end recap. In particular, this report will review some
of the past year's activities within the American Bar
Association (ABA) to study and promote electronic commerce.
It will be a good starting-off point for future legal discussion.

For those of you who are unfamiliar with it, the ABA is a
private, voluntary membership association of U.S. attorneys.
Others can join as associate members. Despite its
unincorporated status, it takes a leadership position on many of
the legal issues of the day. Its reports and views have long
been used by legislators, attorney practitioners and others.

The ABA is huge and bureaucratic. Most of its membership
comes from attorneys in the fifty state bar associations. But,
separately, it is also composed of numerous special interest
committees, sections and divisions. Among these sub-groups,
the Section of Science and Technology and the Business Law
Section have taken notable leadership positions in developing
the law of electronic commerce.

The Business Law Section has been studying the current U.S.
commercial law, much of which is embodied in the Uniform
Commercial Code (UCC) and the laws of evidence, and
recommending changes necessary to enable electronic
commerce. Some of these efforts include:

(i) a rewrite of Article 2, the law of sales, to cover software
licensing;
(ii) the possible elimination of the 300-year-old Statute of Frauds,
which requires certain contracts to be "in writing"; and
(iii) a model bank-customer agreement for commercial electronic funds
transfers, which follows the basic structure of the 1991 U.S.
statute in this area, Article 4A.

The Section of Science and Technology has been looking at
the technical side of electronic commerce law. Its Information
Security Committee has recently released draft Digital
Signature Guidelines. A three-year collaboration of leading
legal, cryptography, business and government experts, the 101-
page Guidelines are available for download from the Electronic
Commerce and Information Technology Division's webpage at
"http://www.intermarket.com/ecl". Bound paper copies are
available for US$15 from the Section of Science and
Technology of the American Bar Association, 750 North Lake
Shore Drive, Chicago, Illinois 60611, U.S.A. Telephone:
(312) 988-5599; electronic mail: sciencetech@....
The Information Security Committee worked closely with the
State of Utah, which in May 1995 enacted the world's first
Digital Signature statute.

The Division has also worked to develop a new U.S. legal
specialty, which it calls the "cybernotary". Based on
European/Canadian/Mexican notary models, the cybernotary
would assume the risks of party identity in an international
electronic commerce transaction, while certifying the validity
and enforceability of the transaction. There has been
substantial collaboration in this endeavor with the International
Union of Latin Notaries (UINL). The U.S. Council for
International Business (USCIB), which is the U.S. arm of the
ICC, has recently created a Cybernotary Association to carry
out these efforts. Both the Guidelines and the Cybernotary are
based on X.500 and X.509 standards for Public Key
Infrastructure and certification authority certificate and key
management.

Finally, the Electronic Commerce Payment (formerly Financial
EDI) Committee has been discussing, through its committee
listserv, fundamental legal issues in electronic commerce
payment: from the creation of money, to privacy/anonymity,
money laundering, export of encryption, and escheatment of
abandoned property. It has published a model financial EDI
trading partner agreement (also available through the ABA),
and is working on an equivalent model agreement for the use
of debit transfers in EDI.

The ABA will continue to work at the forefront of these
evolving issues. Stay tuned for details. And have a good year,
everyone.


---------------------------------------------
The Citibank Affair: A Purely Russian Crime?
---------------------------------------------

Nahum Goldmann
ARRAY Development
Nahum.Goldmann@...>
http://www.ARRAYdev.com/

---------------------------------------------------------------------
Nahum Goldmann has been employed as a manager, scientist and lecturer
in leading industrial high-tech firms and academia. Mr. Goldmann has
published several critically acclaimed books that deal with knowledge
transfer issues.
---------------------------------------------------------------------

Novoye Russkoe Slovo (NRS), a NY-published newspaper which acclaims
itself as the largest Russian-language daily outside of the x-USSR,
published an engaging account of the so-called Citibank Affair in
September 1995. A fairly large article ("Purely Russian Crime..."
NRS, Sept. 15, 1995, pp. 13-14) was written by Vladimir Strizhevsky
but was actually based on the original investigative materials
submitted by several contributors from Moscow and St. Petersburg, as
well as from NY, London, Brussels and other world financial capitals.

Undoubtedly, NRS have done quite a good job in clarifying and
illuminating the background of the Citibank Affair. For whatever
reasons, the English-language media have not covered the background
of Russian participants that well. However, an expert in
electronic banking and commerce on Internet might find utterly
fascinating the very minute details of this complex crime scheme that
involved many people and spread across several continents.

The story at NRS starts at the end of August, 1994 in Tel-Aviv. A
certain Alexei Lachmanov, a Georgian national and a holder of a false
Greek passport to the name of Alexios Palmidis, had been arrested by
Israeli police when he tried to withdraw nearly US$1M. The funds in
question were electronically transferred to five Israeli banks from
Invest-capital, an Argentinean subsidiary of the Citibank. The
Israelis had been tipped by the Citibank through the FBI with the
information that all the money transfers had been done with the
illegal use of Invest-capital's own secret codes.

The subsequent multinational investigation has shown that it was a
leading St. Petersburg's, Russia computer expert Vladimir Levin who
was able to conduct numerous electronic transfers from several
Citibank's subsidiaries in Argentina and Indonesia to various
financial institutions in San Francisco, Tel-Aviv, Amsterdam, Germany
and Finland. According to NRS's speculations, Mr. Levin's succeeded
so well because, in addition to Citibank's own electronic cash-
management hub in NY, he was also able to crack down the electronic
defense of several SWIFT's branch offices in the third-world
countries. SWIFT, a secretive Belgium-based electronic
telecommunication consortia of World-leading banks, is primarily
involved in mutual settlement payments amongst its members.

On the other hand, in the interview with an NRS correspondent V.
Kaminsky, Citibank's spokesman rejected the newspaper's version of
SWIFT's penetration. Instead he claimed that Citibank knew all along
about Mr. Levin's infiltration, playing with him a sophisticated
multistep deception game. Of course, the Citibank's face-saving
version of events sounds not that convincing, taking into account a
large number of uncontrollable players, a sizable amount of real cash
involved, multicontinental reach of the overall crime scheme and the
fact that the bank was ultimately unable to recover a substantial
chunk of its own money.

Not your ordinary self-taught hacker, Mr. Levin, 31, an aloof man and
a graduate of a prestigious Department of Applied Mathematics, was
considered somewhat of a computer genius in the St. Petersburg's
University circles. The scheme started when Mr. Levin's
acquaintance, a Russian-American wholesale trader, asked him to
develop programming support for his international trading business.

According to Mr. Levin's university friends, the idea of breaking
into secure bank networks has been born somewhat spontaneously during
a purely technical discussion on the advantages and disadvantages of
different bank networking programs. The debaters were members of a
St. Petersburg's group of elite computer experts that could best be
described as a local response to the Internet's own Cypherpunk
community. I found it fascinating and somewhat ironic that the
infiltration plot had actually started as a low-key bet that the
Russian famous resourcefulness would triumph where the famed Yankee
ingenuity has already proven to be unsuccessful!

In the overall crime scheme, Levin was supported by as many as 30
collaborators, at least some of them computer experts. Several of
his partners-in-crime, arrested in the U.S., Russia, Israel and the
Netherlands, were primarily involved in cash retrieval and
laundering, ultimately the most vulnerable part in any grand scheme
of electronic theft. It is hardly a secret that most professional
bankers are routinely trained to contest, or at least report to
authorities, any suspicious withdrawal of large sums of cash. Some
of the U.S. arrests have been successfully kept in secret for many
months, for the fear of alerting the criminals back in Russia. Mr.
Levin himself was arrested in September 1995 in a UK airport, en-
route through that country.

Apparently, in the best tradition of this fledging industry, Citibank
have already used the lessons obtained from Mr. Levin's penetration
to beef up the security of its own electronic payment system.


========================================
JOURNAL OF INTERNET BANKING AND COMMERCE
========================================

Editor
Gordon Jenkins.
JENKINS AND ASSOCIATES INC.
Jenkins@...
http://www.infop.com/karoma,

Publisher
Nahum Goldmann
ARRAY Development
Ottawa, Canada
Nahum.Goldmann@...
http://www.ARRAYdev.com

Postmaster/Webmaster
Junhan Zhang
ARRAY Development
Junhan.Zhang@...


=====================
ADMINISTRATIVE NOTICE
=====================

This Journal is maintained and published courtesy of ARRAY
Developments of Ottawa, Canada (http://www.ARRAYdev.com/). The
Publisher, Nahum Goldmann may be reached at:
Nahum.Goldmann@....

Or you can reach the editor and moderator, Gord Jenkins of JENKINS
AND ASSOCIATES INC with any questions, comments or insights at:
Jenkins@...
http://www.infop.com/karoma,
Tel. 613-723-1581,
FAX 613-723-8938.

Please note that the mailing address for subscribe/unsubscribe is
JIBC-request@...
************

World Wide Web information about this mailing list is available via:
http://www.arraydev.com/commerce/JIBC/.
Please send any questions on its maintenance to the list owner :
<JIBC-admin@...>.
Note that ARRAY Development is neither responsible nor necessarily
shares opinions expressed on the list.

This message is sent monthly to the JIBC list. If mail sent to you
cannot be delivered successfully, your email address will be
ruthlessly removed from the mailing list to prevent bounces for
senders. If you believe you have been dropped, you can check your
subscription status by sending mail to:
majordomo@...
Write in the body of message (NOT Subject:)
JIBC Your_email_address
This command will confirm whether you are on the current list of
subscribers.

To subscribe:
Send email to JIBC-request@...
Body of message (NOT Subject:) subscribe
To unsubscribe:
Send mail to JIBC-request@...
Body of message (NOT Subject:) unsubscribe
To contribute to the mailing list:
Send mail to JIBC@...

Notice the difference between the two email addresses for subscribing
(JIBC-request) and posting (JIBC)!

Send other inquiries to owner JIBC-admin@....

To get a description of all valid commands:
Send mail to majordomo@...
Body of message (NOT Subject:) help

As our Journal is a moderated list, there is no "digest" facility.


=========
COPYRIGHT
=========

The Journal Of Internet Banking And Commerce is Copyright (C) 1996
by ARRAY Development, Ottawa, Canada. All Rights Reserved.

Copying is permitted for noncommercial, educational use by academic
computer centers, individual scholars, and libraries. This message
must appear on all copied material. All commercial use requires
permission.


===========
CIRCULATION
===========

422 subscribers in countries: 17 .ca; 200 .com; 33 .net; 23 .edu; 18 .uk;
16 .au; 4 .gov; 8 .org; 3 .jp; 8 .de; 1 .fr; 5 .nl; 8 .se; 1 .ch; 3 .it;
3 .us; 3 .fi; 5 .sg; ...


-------------------------------------------
End of JIBC Vol. 1, no. 1, January 19, 1996