Data And Money Exchange

January 15, 2009 10:38 AM

I need my customers to send me confidential data with a payment. I work for a regulatory agency that currently collects applications in paper based form with a physical signature including a check for payment. We would like to implement a industrial strength 'e-filing' solution. Where do I start? My Google-Fu and Delicious-Fu are failing me. I need to find information on 2009 best practices for capturing data ( e-forms, rest, edi ), identity management, security ( digital certs, etc ), and payment gateways ( direct debit, credit cards ). I also need to know what vendors are leading in these spaces. I am not really looking for a 'e-commerce' solution. I am looking for a 'secure electronic forms submission with payments and non-repudiation' solution. My company would need to host this in our data center. I would like to offer my customers multiple ways to submit and pay.
posted by kaizen to Computers & Internet (2 answers total)

This is a pretty tall order. Sounds like it's worth spending a few bucks + hours on an independent consultant who has implemented several of these systems before. Can you ask staff at any sister agencies with similar needs how they have implemented their solutions?
posted by benzenedream at 11:36 AM on January 15, 2009

Yeah, this is tough to do by yourself. It would be best to bring in a consultant who knows the best practices for doing this. Case in point: My state implemented a web page to renew your car's license tabs and pay with a credit card. It operated for a couple of years until an insecurity was noticed and the page was taken down. Big stories in the news, big public awareness. So the question you have to ask yourself is, do you want to be responsible for building web page that isn't as secure as it's supposed to be, and have to face the damage that does to your career?
posted by exphysicist345 at 9:56 PM on January 15, 2009