公开(公告)号：US10445746B2

公开(公告)日：2019-10-15

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06K5/00 ,  G06Q30/00 ,  G06F21/50 ,  H04L29/06 ,  G06F21/53 ,  G06F9/455 ,  G06Q20/10 ,  H04L12/26 ,  H04L29/08 ,  H04M15/00 ,  H04M17/00

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

公开(公告)号：US11683316B2

公开(公告)日：2023-06-20

申请号：US17596420

申请日：2020-07-17

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Yongkai Zhou ,  Danni Jiang ,  Gaolei Zhang ,  Dongjie He

IPC: H04L9/40 ,  H04L67/10

CPC classification number: H04L63/101 ,  H04L63/20 ,  H04L67/10 ,  H04L9/40 ,  H04L63/10

Abstract: A method for communication between microservices, performed by a first host machine node, includes: obtaining a first microservice instance located on the first host machine node, determining a first microservice to which the first microservice instance belongs, and determining a list of triples corresponding to the first microservice according to the first microservice. The list of triples corresponding to the first microservice includes at least one triple, each triple of the at least one triple includes a visitor of the microservice, a visited party of the microservice, and an access port, and the visitor of the microservice of each triple included in the list of triples corresponding to the first microservice is the first microservice. The method also includes determining, by the first host machine node, an access policy of the first microservice instance according to the list of triples corresponding to the first microservice.

公开(公告)号：US11374878B2

公开(公告)日：2022-06-28

申请号：US17279413

申请日：2019-10-22

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Yongkai Zhou ,  Danni Jiang ,  Qi Wang ,  Dongjie He

IPC: H04L49/20 ,  H04L69/16 ,  H04L69/22

Abstract: The present disclosure provides a method and a device for data processing. The method includes acquiring at least two pathways of communication messages, where the at least two pathways of communication messages are messages intercepted in a bypass manner from messages transmitted by a service processing system to an external system; and the service processing system does not execute logic of record storage; processing the at least two pathways of communication messages, and determining communication messages to-be-stored from the at least two pathways of communication messages processed; and according to the at least two pathways of communication messages, storing the communication messages to-be-stored in a database.

公开(公告)号：US11222431B2

公开(公告)日：2022-01-11

申请号：US17258665

申请日：2019-07-03

Applicant: China UnionPay Co., Ltd.

Inventor： Danni Jiang ,  Dongjie He

IPC: G06K9/00 ,  G06T7/246 ,  G06T7/90

Abstract: A feature processing method and device for a motion trajectory, and a computer storage medium. The method may have a client device acquiring a motion trajectory generated by a user behavior to obtain an ordered point set, and each trajectory point in the ordered point set may have a position element and a time element. The method may further use information in the position element and the time element to convert the motion trajectory into an image. Furthermore, by performing image processing on the image, the method may obtain one or more feature vectors in the motion trajectory.

公开(公告)号：US20160283949A1

公开(公告)日：2016-09-29

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06Q30/00 ,  H04L12/26 ,  H04L29/08 ,  G06Q20/10 ,  G06F9/455

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

Abstract translation: 本发明提供了在虚拟化环境中的支付应用的合规性检测方法，并且涉及支付应用的安全技术领域。 该检测方法用于符合PCI DSS隔离要求的检测。 检测方法可以通过分析当前虚拟机域及其与数据流的连接来确定其是否符合要求状态，还可以通过分析虚拟机网络流量的纯度来确定其是否为合规状态。 该检测方法适用于虚拟化环境，使得虚拟化环境中的一致性检测准确，从而有利于保证支付应用的安全性。