支付系统安全控制研究

Security Control over Payment System

现代支付系统最主要特征之一就是充分利用现代化信息技术,实现支付信息的高效传输、处理和存储。随着科学技术的高速发展和信息技术的广泛运用,支付系统面临的运行风险也日益严重。近日美国信用卡个人数据信息泄露事件,为支付系统安全控制敲响了警钟。本文根据国际信息安全管理标准,分析和总结了我国支付系统存在的弱点与威胁,研究了对威胁进行评估的定量方法,并提出了我国支付系统安全控制方案。

One of the most important features of modern payment system is to fully utilize modern information technology to transfer, process and save payment information at high-speed. With the rapid advance of science and technology and extensive application of IT, payment system is becoming operationally riskier. The recent leakage of personal data on credit cards in USA serves as a warning to payment system security control. This paper, based on standards of international information security management, analyzes and sums up the loopholes in and potential threats to our payment system, discusses the quantitative method of evaluating threats and comes up with a plan for payment system security control in our country.