Systems and methods for electronic certification of e-commerce security badges
A method for managing secure processing of electronic payment transactions includes receiving a request submitted by a merchant computing system for a security verifier. The security verifier is to be displayed on an electronic display associated with the merchant computing system. A set of security credentials received from a security service provider is measured against a security threshold. When the set of security credentials meets the security threshold, a uniform resource locator (“URL”) is transmitted to the merchant computing system. The URL identifies the security verifier to be retrieved and displayed at the electronic display associated with the merchant computing system.
1. A method for managing secure processing of electronic payment transactions, comprising:
receiving, by a server, a request from a merchant computing system for a security verifier to be displayed on an electronic display of the merchant computing system;
transmitting, by the server, a request for security credentials associated with the merchant computing system to each security service provider among a plurality of security service providers;
receiving, by the server, a plurality of security credentials from a subset of security service providers among the plurality of security service providers;
upon determining, by the server, that at least one set of security credentials among the plurality of security credentials meets a network security threshold, generating and transmitting a uniform resource locator (“URL”) to the merchant computing system;
transmitting, by the server, a renewed request for the set of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold;
receiving, in response to the renewed request, the set of security credentials from the at least one security service provider among the subset of security service providers;
determining, by the server, whether the set of security credentials meets the network security threshold; and
proceeding, by the server and based on the set of security credentials not meeting the network security threshold, to i) revoke access to the generated URL and ii) deny display of the security verifier on the electronic display of the merchant computing system.
2. The method of claim 1 , wherein the server is a security badge arbitrator.
3. The method of claim 1 , wherein the electronic display is associated with an e-commerce website.
4. The method of claim 1 , wherein the network security threshold includes global security standards established by at least one of EMVco, W3C, and OWASP.
5. The method of claim 1 , wherein the at least one security service provider provides the set of security credentials to the server via a web service application programming interface (“API”).
6. The method of claim 1 , wherein the
renewed request for the set of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold is transmitted at periodic intervals.
7. The method of claim 1 , further comprising:
transmitting at periodic intervals, by the server, a validation request to the merchant computing system;
receiving, in response to the validation request, from the merchant computing system, a security policy as installed on the merchant computing system;
determining, by the server, whether the security policy matches a security solution provided by the security service provider; and
proceeding, by the server and based on the security policy not matching the security solution provided by the security service provider, to i) revoke access to the generated URL and ii) deny display of the security verifier on the electronic display of the merchant computing system.
8. A non-transitory computer readable medium storing a program causing a computer to execute a method for managing secure processing of electronic payment transactions, the method comprising:
receiving, by a server, a request from a merchant computing system for a security verifier to be displayed on an electronic display of the merchant computing system;
transmitting, by the server, a request for security credentials associated with the merchant computing system to each security service provider among a plurality of security service providers;
receiving a plurality of security credentials from a subset of security service providers among the plurality of security service providers;
upon determining, by the server, that at least one set of security credentials among the plurality of security credentials meets a network security threshold, generating and transmitting a uniform resource locator (“URL”) to the merchant computing system;
transmitting, by the server, a renewed request for the set of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold;
in response to the renewed request, receiving the set of security credentials from the at least one security service provider among the subset of security service providers;
determining, by the server, whether the set of security credentials meets the network security threshold; and
based on the set of security credentials not meeting the network security threshold, proceeding, by the server, to i) revoke access to the generated URL and ii) deny display of the security verifier on the electronic display of the merchant computing system.
9. The non-transitory computer readable medium of claim 8 , wherein the server is a security badge arbitrator.
10. The non-transitory computer readable medium of claim 8 , wherein the electronic display is associated with an e-commerce website.
11. The non-transitory computer readable medium of claim 8 , wherein the network security threshold includes global security standards established by at least one of EMVco, W3C, and OWASP.
12. The non-transitory computer readable medium of claim 8 , wherein the at least one security service provider provides the set of security credentials to the server via a web service application programming interface (“API”).
13. The non-transitory computer readable medium of claim 8 , wherein the
renewed request for the set of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold is transmitted at periodic intervals.
14. The non-transitory computer readable medium of claim 8 , the method further comprising:
transmitting at periodic intervals, by the server, a validation request to the merchant computing system;
in response to the validation request, receiving from the merchant computing system, a security policy as installed on the merchant computing system;
determining, by the server, whether the security policy matches a security solution provided by the security service provider; and
based on the security policy not matching the security solution provided by the security service provider, proceeding, by the server, to i) revoke access to the generated URL and ii) deny display of the security verifier on the electronic display of the merchant computing system.
15. A computing system for managing secure processing of electronic payment transactions, the computing system comprising:
a memory having processor-readable instructions stored therein; and
a processor configured to access the memory and execute the processor-readable instructions, which when executed by a processor cause the processor to perform a plurality of functions, including functions to:
receive, by a server, a request from a merchant computing system for a security verifier to be displayed on an electronic display of the merchant computing system;
transmit, by the server, a request for security credentials associated with the merchant computing system to each security service provider among a plurality of security service providers;
receive a plurality of security credentials from a subset of security service providers among the plurality of security service providers;
upon determining, by the server, that at least one set of security credentials among the plurality of security credentials meets a network security threshold, generating and transmitting a uniform resource locator (“URL”) to the merchant computing system;
transmit, by the server, a renewed request for the set of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold;
in response to the renewed request, receive the set of security credentials from the at least one security service provider among the subset of security service providers;
determine, by the server, whether the set of security credentials meets the network security threshold; and
based on the set of security credentials not meeting the network security threshold, proceed to i) revoke access to the generated URL and ii) deny display of the security verifier on the electronic display of the merchant computing system.
16. The system of claim 15 , wherein the server is a security badge arbitrator.
17. The system of claim 15 , wherein the electronic display is associated with an e-commerce website.
18. The system of claim 15 , wherein the network security threshold includes global security standards established by at least one of EMVco, W3C, and OWASP.
19. The system of claim 15 , wherein the at least one security service provider provides the set of security credentials to the server via a web service application programming interface (“API”).
20. The system of claim 15 , wherein the renewed request for the set of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold is transmitted at periodic intervals.