IP Library Granted Patent US 8,346,636
Granted Patent B2
US 8,346,636 · App. 11/923,113 · Granted Jan 1, 2013

Processing system for acquiring and reporting compliance with data security requirements

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,346,636
App. No.
11/923,113
Filed
Oct 24, 2007
Granted
Jan 1, 2013
Kind
B2
Art Unit
3692
USPC
705/34
Abstract

Methods, systems, and machine-readable media are disclosed for tracking and reporting information related to compliance with a set of security requirements by one or more entities handling financial transaction information. According to one embodiment, a system can comprise one or more acquirer systems, each adapted to process information related to a plurality of financial transactions for entities involved in the transaction. A tracking and reporting system can be communicatively coupled with each of the acquirer systems. The tracking and reporting system can be adapted to collect at least a subset of the information related to the plurality of financial transactions, collect compliance information related to the entities involved in the transaction, the compliance information for each entity indicating that entity's compliance with the set of security requirements, and generate one or more reports based on the information related to the plurality of financial transactions and the compliance information.

Claims (39)

1. A system for tracking and reporting information related to compliance with a set of security requirements by one or more entities handling financial transaction information, the system comprising:

one or more acquirer systems, each of the acquirer systems comprising a computer system having at least one database for storing information and at least one processor configured to: process information related to a plurality of financial transactions for entities involved in the transaction, and execute an extraction process, wherein the extraction process:

monitors the information related to the plurality of financial transactions processed by the acquirer system,

determines a subset of information from the information is relevant to one or more entities' compliance with a set of security requirements imposed on those entities:

extracts the subset of information, and

sends the subset of information to a tracking and reporting system communicatively coupled with each of the acquirer systems; and

wherein the tracking and reporting system comprises a computer having a processor and a central data repository configured to maintain the information related to the plurality of financial transactions and the compliance information, and wherein the processor is configured to:

collect the subset of information,

collect compliance information from the entities involved in the transaction, the compliance information for each entity indicating that entity's compliance with the set of security requirements imposed on that entity for securing financial transaction information,

generate one or more reports based on the information related to the plurality of financial transactions and the compliance information,

determine whether the subset of information corresponds to an entity registered with the tracking and reporting system, and

write the subset of information to the central data repository in response to determining the subset of information corresponds to an entity registered with the tracking and reporting system.

2. The system of claim 1 , wherein the system further comprises a web server communicatively coupled with the tracking and reporting system.

3. The system of claim 2 , wherein the web server is adapted to receive the one or more reports from the tracking and reporting system and present the one or more reports as one or more web pages.

4. The system of claim 1 , wherein the tracking and reporting system generates the one or more reports based on the information related to the plurality of financial transactions and the compliance information stored in the central repository.

5. The system of claim 2 , wherein the web server is adapted to provide an interface for receiving the compliance information from a user.

6. The system of claim 5 , wherein the tracking and reporting system is adapted to receive the compliance information from the web server.

7. A method of tracking compliance with a set of security requirements by one or more entities handling financial transaction information, the method comprising:

with a tracking and reporting system, collecting information related to a financial transaction from at least one acquirer system processing the information related to the financial transaction, wherein collecting information related to the financial transaction from at least one acquirer system comprises:

receiving the information related to the financial transaction from the at least one acquirer system,

determining whether the information related to the financial transaction corresponds to a registered entity, and

in response to determining the information related to the financial transaction corresponds to a registered entity, writing the information related to the financial transaction in a central data repository;

collecting compliance information related to the entities involved in the transaction with the tracking and reporting system, the compliance information for each entity indicating that entity's compliance with the set of security requirements; and

generating with the tracking and reporting system, one or more reports based on the information related to the financial transaction and the compliance information, wherein the reports include information about an entity's compliance with security measures imposed on that entity.

8. The method of claim 7 , wherein generating the one or more reports comprises generating one or more web pages.

9. The method of claim 7 , wherein generating one or more reports based on the information related to the financial transaction and the compliance information is based on the information related to the financial transaction stored in the central data repository.

10. The method of claim 7 , further comprising receiving the compliance information related to the entities involved in the transaction via a web-based interface.

11. The method of claim 10 , further comprising storing the compliance information related to the entities involved in the transaction in a central data repository and wherein generating one or more reports based on the information related to the financial transaction and the compliance information is based on the compliance information stored in the central repository.

12. A machine-readable medium having stored thereon a series of instructions which, when executed by a processor, causes the processor to track compliance with a set of security requirements by:

collecting information related to a financial transaction from at least one acquirer system processing the information related to the financial transaction comprising:

receiving the information related to the financial transaction from the at least one acquirer system,

determining whether the information related to the financial transaction corresponds to a registered entity, and

in response to determining the information related to the financial transaction corresponds to a registered entity, writing the information related to the financial transaction in a central data repository;

collecting compliance information related to the entities involved in the transaction, the compliance information for each entity indicating that entity's compliance with the set of security requirements; and

generating one or more reports based on the information related to the financial transaction and the compliance information, wherein the reports include information about an entity's compliance with security measures imposed on that entity, and wherein the content of the reports is based on the requestor of the report.

13. The machine-readable medium of claim 12 , wherein generating the one or more reports comprises generating one or more web pages.

14. The machine-readable medium of claim 12 , wherein generating one or more reports based on the information related to the financial transaction and the compliance information is based on the information related to the financial transaction stored in the central data repository.

15. The machine-readable medium of claim 12 , further comprising receiving the compliance information related to the entities involved in the transaction via a web-based interface.

16. The machine-readable medium of claim 15 , further comprising storing the compliance information related to the entities involved in the transaction in a central data repository and wherein generating one or more reports based on the information related to the financial transaction and the compliance information is based on the compliance information stored in the central repository.