This Recommendation defines a security reference architecture for the lifecycle management of e-commerce business data. The reference architecture can be applied to various kinds of e-commerce service ecosystems where data security is of concern and independent of the network's underlying technology. This Recommendation defines data security-related architectural elements that are necessary for providing end-to-end security in e-commerce service ecosystems. The objective of this Recommendation is to serve as a foundation for developing the detailed recommendations to achieve security for the lifecycle management of e-commerce business data.