On assurance structures for WWW commerce