Payment card industry (PCI) compliant architecture and associated methodology of managing a service infrastructure
AssigneeReliant Security
InventorRichard Newman
Life of this patent
Estimating the term…
Abstract
A system to ensure compliance with data security standards includes a security appliance to perform multiple security functions, with the security appliance including an initial configuration. The system further includes a display unit to provide information of compliance performance of the system on a secure basis. The system also includes a control unit to monitor compliance performance in real-time and to implement additional procedures required based on the monitored compliance to ensure compliance with data security standards.
Claims16
A system to ensure payment card industry (PCI) data security standards compliance, the system comprising:
- a security appliance to perform multiple security functions, the security appliance including an initial configuration separating a plurality of security appliance units into respective isolated virtual server containers of the security appliance, each unit having a security boundary surrounding the unit which prevents interactions or observations between units, each unit having a different set of authorized users;
- a display unit to provide information of (PCI) security standards compliance performance of the system via a Managed PCI compliance portal on a secure basis;
- and
- a control unit to monitor PCI data security standards compliance performance in real-time and to implement additional procedures required based on the monitored PCI data security standards compliance performance to ensure PCI data security standards compliance
- wherein each of the plurality of security appliance units include at least:
- a global unit to encompass and monitor the functions of the security appliance and other units of the security appliance,
- an integrity unit to construct maps of file systems of the network devices and to compare the constructed maps with previously constructed maps to detect differences between the constructed maps and the previously constructed maps, and
- a scanning unit to perform periodic network scans to ensure security of the network devices and to detect unrecognized devices on the network.
A security appliance to ensure payment card industry (PCI) data security standards compliance, comprising:
- a memory loaded with an initial configuration of the security appliance, the initial configuration including at least a global unit, an integrity unit, and a scanning unit and separating the global unit, integrity unit and scanning unit into respective isolated virtual server containers of the security appliance, each of the global unit, integrity unit and scanning unit having a surrounding security boundary which prevents interactions or observations among the global unit, integrity unit and scanning unit, each of the global unit, integrity unit and scanning unit having a different set of authorized users;
- the global unit to monitor the functions of the security appliance and other units of the security appliance via a Managed PCI compliance portal on a secure basis;
- the integrity unit to construct maps of file systems of the network devices and to compare the constructed maps with previously constructed maps to detect differences between the constructed maps and the previously constructed maps which are stored and retrieved from the memory, respectively;
- and
- the scanning unit to perform periodic network scans to ensure security of the network devices and to detect unrecognized devices on the network in order to ensure PCI data security standards compliance.
A non-transitory computer readable storage medium having computer executable instructions stored therein, which when executed by a processor in a security appliance to ensure payment card industry (PCI) data security standards compliance causes the processor to execute a method comprising:
- monitoring, by a global unit, the functions of the security appliance and other units of the security appliance via a Managed PCI compliance portal on a secure basis;
- constructing, by an integrity unit, maps of file systems of the network devices;
- comparing, by the integrity unit, the constructed maps with previously constructed maps to detect differences between the constructed maps and the previously constructed maps;
- and
- performing, by a scanning unit, periodic network scans to ensure security of the network devices and to detect unrecognized devices on the network in order to ensure the PCI data security standards compliance, the global unit, integrity unit, and scanning unit being separated into respective isolated virtual server containers of the security appliance, each of the global unit, integrity unit and scanning unit having a surrounding security boundary which prevents interactions or observations among the global unit, integrity unit and scanning unit, each of the global unit, integrity unit and scanning unit having a different set of authorized users.
Dependencies are inferred from the claim text.