Where are we going? NET has passed payment card industry data security standards

Where are you going? Network CTO Yongjiang said: "To where the network as early as December 2012 has been successfully passed the PCI certification, indicating where the network system in the security management, network system structure, software design and so on, can comprehensively protect the user's transaction security." Yongjiang points out that many companies are unwilling to invest too much in this project because most of the certification consumers are not aware of it.

Yongjiang stressed, where to go the network has been increasing technology and capital investment in this project. According to the introduction, to where the network from 2011 launched the "Guarantee Pass" security system, PCI compliance is one of the important link.

The recent Ctrip vulnerability incident, causing the industry to pay security concerns, including PCI qualification and other aspects of the query. PCI in the financial industry usually refers to the payment card Industry data security standards, namely DSS. The purpose of the PCI is to optimize the security of credit cards, debit cards and cash card transactions, and to protect the cardholder's personal information from being exploited by other people.

It is reported that the company providing PCI certification services will often be in many areas of the carpet scan, will identify various types of vulnerabilities, but also the applicant to strictly state that it can not save the information should not be stored, and can not use SSL encrypted data transmission.