公开(公告)号：US10445746B2

公开(公告)日：2019-10-15

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06K5/00 ,  G06Q30/00 ,  G06F21/50 ,  H04L29/06 ,  G06F21/53 ,  G06F9/455 ,  G06Q20/10 ,  H04L12/26 ,  H04L29/08 ,  H04M15/00 ,  H04M17/00

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

公开(公告)号：US10120672B2

公开(公告)日：2018-11-06

申请号：US15036862

申请日：2014-11-21

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Mingbo Wang ,  Zhihui Lv

IPC: G06F9/44 ,  G06F8/65 ,  G06F9/455 ,  H04L29/08

Abstract: The present invention proposes a method for offline upgrading virtual machine mirror images. The method comprises: an mirror image security server collecting virtual machine mirror images, and extracting and storing the information of the collected virtual machine mirror images; and the mirror image security server executing an upgrade operation of virtual machine mirror images in an offline way based on the information of the collected virtual machine mirror images. The method for offline upgrading virtual machine mirror images disclosed in the present invention has higher upgrade efficiency and is capable of upgrading the virtual machine mirror images in an offline way.

公开(公告)号：US20160378456A1

公开(公告)日：2016-12-29

申请号：US15036862

申请日：2014-11-21

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng CHAI ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Mingbo Wang ,  Zhihui Lv

IPC: G06F9/445 ,  H04L29/08 ,  G06F9/455

CPC classification number: G06F8/65 ,  G06F9/45558 ,  G06F2009/45562 ,  G06F2009/45595 ,  H04L67/1095 ,  H04L67/34

Abstract: The present invention proposes a method for offline upgrading virtual machine mirror images. The method comprises: an mirror image security server collecting virtual machine mirror images, and extracting and storing the information of the collected virtual machine mirror images; and the mirror image security server executing an upgrade operation of virtual machine mirror images in an offline way based on the information of the collected virtual machine mirror images. The method for offline upgrading virtual machine mirror images disclosed in the present invention has higher upgrade efficiency and is capable of upgrading the virtual machine mirror images in an offline way.

Abstract translation: 本发明提出了一种用于离线升级虚拟机镜像的方法。 该方法包括：收集虚拟机镜像的镜像安全服务器，提取并存储所收集的虚拟机镜像信息; 并且所述镜像安全服务器基于所收集的虚拟机镜像的信息以离线方式执行虚拟机镜像的升级操作。 本发明公开的离线升级虚拟机镜像的方法具有较高的升级效率，能够以离线方式升级虚拟机镜像。

公开(公告)号：US20160283949A1

公开(公告)日：2016-09-29

申请号：US15030657

申请日：2014-10-20

Applicant: CHINA UNIONPAY CO., LTD.

Inventor： Hongfeng Chai ,  Chengrong Wu ,  Zhijun Lu ,  Jie Wu ,  Dongjie He ,  Jianping Zeng

IPC: G06Q30/00 ,  H04L12/26 ,  H04L29/08 ,  G06Q20/10 ,  G06F9/455

Abstract: The invention provides a compliance detecting method of payment applications in a virtualized environment, and pertains to the field of security technology of payment applications. The detecting method is used for compliance detection for PCI DSS isolation demands. The detecting method can determine whether it is a compliance state by analyzing the current virtual machine domain and its connection from data stream, and can also determine whether it is a compliance state by analyzing the purity of network flow of virtual machines. The detecting method is suitable for a virtualized environment and makes the detection of compliance accurate in the virtualized environment, thus being advantageous for guaranteeing the security of payment applications.

Abstract translation: 本发明提供了在虚拟化环境中的支付应用的合规性检测方法，并且涉及支付应用的安全技术领域。 该检测方法用于符合PCI DSS隔离要求的检测。 检测方法可以通过分析当前虚拟机域及其与数据流的连接来确定其是否符合要求状态，还可以通过分析虚拟机网络流量的纯度来确定其是否为合规状态。 该检测方法适用于虚拟化环境，使得虚拟化环境中的一致性检测准确，从而有利于保证支付应用的安全性。