公开(公告)号：US10445746B2

公开(公告)日：2019-10-15

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06K5/00 ,  G06Q30/00 ,  G06F21/50 ,  H04L29/06 ,  G06F21/53 ,  G06F9/455 ,  G06Q20/10 ,  H04L12/26 ,  H04L29/08 ,  H04M15/00 ,  H04M17/00

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

公开(公告)号：US20160283949A1

公开(公告)日：2016-09-29

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06Q30/00 ,  H04L12/26 ,  H04L29/08 ,  G06Q20/10 ,  G06F9/455

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

Abstract translation: 本发明提供了在虚拟化环境中的支付应用的合规性检测方法，并且涉及支付应用的安全技术领域。 该检测方法用于符合PCI DSS隔离要求的检测。 检测方法可以通过分析当前虚拟机域及其与数据流的连接来确定其是否符合要求状态，还可以通过分析虚拟机网络流量的纯度来确定其是否为合规状态。 该检测方法适用于虚拟化环境，使得虚拟化环境中的一致性检测准确，从而有利于保证支付应用的安全性。

公开(公告)号：US10528378B2

公开(公告)日：2020-01-07

申请号：US15512191

申请日：2015-09-02

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Jinzhi Hua ,  Zhenfang Wang ,  Yang Yang ,  Jun Zhang

IPC: G06F9/50 ,  G06F9/455 ,  G06F9/46

Abstract: The application discloses a load evaluation system for virtual machines in a cloud environment, comprising: a monitored data collecting module which is configured to collect monitored data from one or more virtual machines in a cloud data center; a monitored data processing module which is coupled with the monitored data collecting module and is configured to: perform aggregated grouping on the monitored data by using a first KMeans algorithm for each of the one or more virtual machines, each group having a center point coordinate, and calculate a performance characteristic of each virtual machine of the one or more virtual machines according to the grouping and the center point coordinates of individual groups, i.e., a first characteristic value; perform aggregated grouping on the one or more virtual machines using a second KMeans algorithm based on the first characteristic value of each virtual machine, thus determining the characteristic type and performance load value of each virtual machine of the one or more virtual machines. The application also discloses a load evaluation method for virtual machines in a cloud environment as well as a service node.

公开(公告)号：US10120672B2

公开(公告)日：2018-11-06

申请号：US15036862

申请日：2014-11-21

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Mingbo Wang ,  Zhihui Lv

IPC: G06F9/44 ,  G06F8/65 ,  G06F9/455 ,  H04L29/08

Abstract: The present invention proposes a method for offline upgrading virtual machine mirror images. The method comprises: an mirror image security server collecting virtual machine mirror images, and extracting and storing the information of the collected virtual machine mirror images; and the mirror image security server executing an upgrade operation of virtual machine mirror images in an offline way based on the information of the collected virtual machine mirror images. The method for offline upgrading virtual machine mirror images disclosed in the present invention has higher upgrade efficiency and is capable of upgrading the virtual machine mirror images in an offline way.

公开(公告)号：US20160378456A1

公开(公告)日：2016-12-29

申请号：US15036862

申请日：2014-11-21

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng CHAI ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Mingbo Wang ,  Zhihui Lv

IPC: G06F9/445 ,  H04L29/08 ,  G06F9/455

CPC classification number: G06F8/65 ,  G06F9/45558 ,  G06F2009/45562 ,  G06F2009/45595 ,  H04L67/1095 ,  H04L67/34

Abstract: The present invention proposes a method for offline upgrading virtual machine mirror images. The method comprises: an mirror image security server collecting virtual machine mirror images, and extracting and storing the information of the collected virtual machine mirror images; and the mirror image security server executing an upgrade operation of virtual machine mirror images in an offline way based on the information of the collected virtual machine mirror images. The method for offline upgrading virtual machine mirror images disclosed in the present invention has higher upgrade efficiency and is capable of upgrading the virtual machine mirror images in an offline way.

Abstract translation: 本发明提出了一种用于离线升级虚拟机镜像的方法。 该方法包括：收集虚拟机镜像的镜像安全服务器，提取并存储所收集的虚拟机镜像信息; 并且所述镜像安全服务器基于所收集的虚拟机镜像的信息以离线方式执行虚拟机镜像的升级操作。 本发明公开的离线升级虚拟机镜像的方法具有较高的升级效率，能够以离线方式升级虚拟机镜像。