Anonymous Whistleblower Protection Platform with Secure Evidence Submission for E-Commerce

Abstract

Business organizations have huge potential to increase their customer base by offering ecommerce services, especially in the postpandemic era. Ensuring secure e-commerce applications plays an important role in increasing the customer base. To develop appropriate policies and secure technological infrastructures, business organizations first need to establish an understanding of the reservations of their customers toward ecommerce, as well as their perception of security and privacy of e-commerce applications. This research presents a Flask web application designed to ensure confidentiality, integrity, and accountability in digital marketplaces. The system enables secure user authentication with role-based access control for Admin, Seller, and Customer roles, ensuring controlled access to platform functionalities. Sensitive files and confidential messages are encrypted using a 16-round Feistel cipher (FC) before storage, protecting data from unauthorized access or tampering. Encrypted files are securely stored in the server directory, while metadata, user information, encryption keys, and audit logs are maintained in Tiny Database (TinyDB). The platform also includes encryption key rotation, secure file decryption upon authorization, and detailed audit logging for traceability of system activities. By integrating encryption mechanisms, session security, and structured access control within a unified web framework, the proposed system enhances digital trust, supports ethical reporting, and strengthens governance in modern e-commerce environments.