Security Thinking in the Process of Electronic Payment

2020-08-03 00:53:58 Author: easyya.com


Analyzing the case, the author found that due to the lack of clear electronic payment industry standards at the time, the responsibilities of all parties were not clear. However, subsequent national regulations on the network business of non-financial payment institutions have made provisions on the security of electronic payments. Clearly stipulated.

First, the account opening review. The payment institution that opens a payment account for the unit shall require the unit to provide relevant supporting documents, and verify the identity of the customer in a face-to-face manner on its own or entrust a partner institution, or conduct multiple cross-over of the fundamental information of the unit through at least three legal and secure external channels in a non-face-to-face manner Verification and strengthening of fund transaction monitoring and continuous customer management of operating activities using personal payment accounts. In addition, when a payment institution opens a payment account for an entity or individual, it shall sign an agreement with the entity and individual to agree on the daily cumulative transfer limit and the number of transactions between the payment account and the payment account, and the payment account and the bank account. If the number is counted, no further transfers shall be made.

Second, strengthen account monitoring. Payment institutions should strengthen the monitoring of bank accounts and payment accounts, and establish and improve suspicious transaction monitoring models. Accounts and transfers of funds that have the characteristics of centralized transfers and decentralized transfers should be included in suspicious transactions. For accounts listed as suspicious transactions, the payment institution shall verify the transaction status with relevant units or individuals; after verification, the payment institution still determines that the account is suspicious, the payment institution shall suspend all account operations and submit suspicious transaction reports or key suspicious transactions in accordance with regulations Transaction report; suspected crimes should be reported to the local public security agency in a timely manner.