公开(公告)号：US20160283949A1

公开(公告)日：2016-09-29

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06Q30/00 ,  H04L12/26 ,  H04L29/08 ,  G06Q20/10 ,  G06F9/455

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

Abstract translation: 本发明提供了在虚拟化环境中的支付应用的合规性检测方法，并且涉及支付应用的安全技术领域。 该检测方法用于符合PCI DSS隔离要求的检测。 检测方法可以通过分析当前虚拟机域及其与数据流的连接来确定其是否符合要求状态，还可以通过分析虚拟机网络流量的纯度来确定其是否为合规状态。 该检测方法适用于虚拟化环境，使得虚拟化环境中的一致性检测准确，从而有利于保证支付应用的安全性。

公开(公告)号：US10445746B2

公开(公告)日：2019-10-15

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06K5/00 ,  G06Q30/00 ,  G06F21/50 ,  H04L29/06 ,  G06F21/53 ,  G06F9/455 ,  G06Q20/10 ,  H04L12/26 ,  H04L29/08 ,  H04M15/00 ,  H04M17/00

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.