Table of Contents Previous Article Next Article

[Graphic: Directions]
E-commerce: The Grad School's Experience


Rick Ells, Senior Computer Specialist, Computing & Communications

[Photo: Ann Bannerman.]

Financial Manager Ann Bannerman is enthusiastic about the Graduate School's online application and fee payment service.

A record 43 percent of the fourteen thousand graduate study applications received for Autumn Quarter 2000 were submitted to the University of Washington online. The Graduate School's Web-based application system, which provides for online payment of application fees, has grown more popular each quarter since it became available in December 1998.

Applicants first work through a nine-step process on the Web, filling out forms with such information as course of study and degree desired, biographical data, and past education. The last step is to pay the application fee online by using a MasterCard or Visa. (See screen below.)

"Our long-term goal is to have most of the applications submitted and paid for online," says Ann Bannerman, financial manager for the Graduate School. "The online process is generally faster and more convenient for the applicant."

Major benefits of this shift to online applications are a more automated workflow and less paper handling. Students find the online process to be faster and more convenient because much of the work can be done from their computer desktop without waiting for the registration packet to arrive in the mail and having to make trips to the copy center and post office.

 

[Web screen: The online UW Application for Admission to Graduate School main page.]

Prospective graduate students can work on their application online, log off, and come back later knowing what steps they have completed, and what to do next.

Online Payment

From the beginning, providing a method for online payment was a requirement for the Graduate School. CyberCash, one of many companies that provides payment services for online businesses, was chosen to handle the credit and debit card processing.

"CyberCash is one of the leaders in that industry," says John Drew, director of Computing and Information Resources at the Graduate School. "We signed up for their service and bought their software package. At first we thought we might need to hire an outside consultant—called a system integrator—to make their software work with ours, but it wasn't that difficult to do."

Security Safeguards

Security is a primary concern. Applicants must use an SSL-capable browser, which encrypts messages between the browser and the Graduate School's Web server. (Most version 4 or later browsers will work.) By means of special CyberCash software—with its own encryption and security mechanisms—credit and debit card information is passed directly to CyberCash.

"One of the fundamental rules of e-commerce is not to store credit card information on your server," says Drew. "With this system, we do not store any sensitive information—it passes straight through to CyberCash."

To associate their records with transactions in the CyberCash system, the Graduate School uses transaction identification numbers. Then if a payment question comes up, they use that ID number to request specifics from CyberCash.

Not for the Faint-hearted

"Online credit authorization is a wonderful thing, especially when you consider how much is done in so little time," says Drew. "Messages fly back and forth between our server, CyberCash, and the banks as the transaction is OK'd, posted, and confirmed. You become very aware of how dependent you are on the functionality of systems out there on the Internet."

[Photo: John Drew stand in front of UW's Drumheller Fountain.]

Students around the world who wish to attend the Graduate School at the University of Washington now apply and submit their fees online, says John Drew who manages the technical side of this Web-based service.

While the CyberCash online payment system has generally been very reliable, there have been problems. In one case, network disruptions back East prevented certain credit cards from working. Another time, recounts Drew, processing difficulties at CyberCash resulted in all transactions from Brazil failing.

To the customer, all this complexity is hidden. All he or she knows is that the credit card that worked elsewhere has been rejected by your site.

Good customer support helps deal with such problems. The Graduate School's Web site offers help texts and email addresses so applicants can find answers and ask questions. Equally important is careful monitoring of the transactions to catch problems as early as possible.

"We monitor all of the online transactions, and print out a daily report from CyberCash, which we send to Accounting," says Bannerman. "You have to be very methodical. What people see on screen when they use their credit card is just the tip of the iceberg."

Once a glitch at CyberCash resulted in transactions being processed but not fully settled. Because the Graduate School staff monitor everything, they noticed it before CyberCash did. Still, it took weeks to straighten out.

"Setting up a site to accept credit cards and debit cards is not for the faint of heart," warns Drew. "You have a tremendous responsibility. You are certainly at risk and you have to take the necessary steps to protect your customers and yourself."

A Question of Value

Online credit and debit transactions are not free. In addition to paying for the service, software, and consulting support, companies like CyberCash also charge a per transaction fee.

"Whether online transactions are for you comes down to a question of value," says Drew. "When you include staff, hardware, software, and fees, costs total up quickly. You want to reduce that to a per transaction cost and compare it with the alternatives."

In the Future

A lot of people around campus are interested in doing online credit or debit card transactions, according to Drew. "Some are enticed by e-commerce software that promises easy installation and operation, but I would certainly evaluate these products carefully. Grass-roots efforts could open the university to some real liabilities."

Drew says they have had a pretty positive experience getting everything up and running. In doing so, he talked with C&C, the Controller's office, and others to avoid most of the pitfalls. (See next article "Keeping Control of Your E-commerce.")

"I think that a central Web credit authorization service should be developed," concludes Drew. "When I develop a Web program on our Graduate School server, I would then simply register my server with this service and install a software component on our server. When my Web application needs to verify a credit transaction, it would query this central authorization service, which would handle the communication with the banks and credit card companies. The nice thing about this arrangement is that it lets us develop our applications without forcing C&C to be in the middle of each project, yet at the same time enforces the security and consistency of a central standard."

C&C is currently working on business-to-business e-commerce solutions—such as Web-based purchases for UW Central Stores orders—and actively investigating what it would take to set up a centralized university e-commerce service. In the meantime, those at the UW doing direct sales online are encouraged to follow the secure approaches outlined here and in the next article.

Table of Contents Previous Article Next Article


University of Washington Computing & Communications
Windows on Technology, No. 25, Autumn 2000
newsltr@cac.washington.edu