Methods and systems for performing security risk assessments of internet merchant entities

US7930753B2 · kind B2 · utility

Assignee

• FIRST DATA CORPORATION · US

Inventors

• Philip Mellinger · Ellicott City, US
• Robert Degen · Marietta, US

Key dates

• Filing date: Jun 30, 2003
• Grant date: Apr 19, 2011
• Expiry date: Nov 16, 2029

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/1433
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Methods and systems are provided for assessing a security risk for a merchant entity having connectivity to a shared network. Information describing characteristics of the merchant entity are received from the merchant entity. A determination is made which test requirements of a security test scheme are to be used in assessing the security risk for the merchant entity. The security test scheme includes a set of test requirements whose satisfaction by the merchant entity is sufficient to ensure compliance with a multiple sets of security requirements defined by multiple payment-processing organizations. The security test scheme is executed with a security compliance authority server in accordance with the determined test requirements.