On April 27th, the Bank Card Testing Center held the “2017 Payment Series Training – Bank Card Terminal Product Function and Safety Special Training Course†in Shenzhen. The relevant persons of UnionPay adopted the “CUP-Card Terminal Product Life Cycle Safety and Quality Management Guide and The Implementation Requirements is a speech on the subject, and the qualification certification for the company has received much attention.
Bank Card Testing Center Conference
In 2016, UnionPay sampled more than 1,000 POS terminals, mPOS and personal payment terminals, involving 178 terminal models, covering the major acquirers and mainstream terminal products in the market. Some terminal products have different security problems, and there are risk problems. In severe cases, 20 terminal certificates have been cancelled.
The most serious reason for the cancellation is to replace the security chip with a non-secure chip and the security mechanism fails. Secondly, the security function configuration is reduced or modified, and the terminal security level is lowered. In order to improve the user experience, the POS modification can be understood, but the premise is to ensure security and inform the relevant institutions in a timely manner. If the change involves terminal security, the terminal certificate will be cancelled.
It is also in this severe security situation that UnionPay issued the "Guideline for Life Cycle Safety and Quality Management of UnionPay Card Acceptance Terminal Products" (hereinafter referred to as "Guide") in January 2017, the design and production process of terminal products. Propose management requirements and release implementation from now on. related requirements:
1. For enterprises that apply for the approval of the UnionPay card acceptance terminal product for the first time, after passing the material review, they should first pass the on-site evaluation organized by the UnionPay Certification Office, and then carry out sample testing; enterprises that have passed the UnionPay certification should follow the guidelines. Check and improve, the certification office will organize on-site assessments in May 2017.
2. The on-site evaluation will be carried out by a third-party evaluation agency. The evaluation results will be displayed in a scoring manner. The full score is 100 points (percentage system), and the first evaluation must reach 80 points or more. Otherwise, the certification office will no longer accept the enterprise's certification application within one year. The list of third-party assessment agencies and the scoring requirements will be notified separately.
The conference introduced the main contents of the guide in detail, including enterprise qualification requirements, asset management, personnel management, environmental and access control security, product lifecycle management, quality audit, security incident emergency response, and terminal uniqueness management.
Of the 8 inspections throughout the guide, there were 69 checkpoints, 3 for each checkpoint, for a total of 207 points. Among them, the score must be 72 points, accounting for 35%. The percentage system has 35 points in 80 points.
Pasta Cooker,Pasta Boiler,Microwave Pasta Cooker,Pasta Cooker Pot
Jiangmen Junerte Stainless Steel Kitchenware Co.,Ltd , https://www.jmjetkitchenware.com