Systems and methods for electronic certification of e-commerce security badges
A method for managing secure processing of electronic payment transactions includes receiving a request submitted by a merchant computing system for a security verifier. The security verifier is to be displayed on an electronic display associated with the merchant computing system. A set of security credentials received from a security service provider is measured against a security threshold. When the set of security credentials meets the security threshold, a uniform resource locator (“URL”) is transmitted to the merchant computing system. The URL identifies the security verifier to be retrieved and displayed at the electronic display associated with the merchant computing system.
1. A method for managing secure processing of electronic payment transactions, comprising:
receiving, by a server, a request for a security verifier to be displayed on an electronic display of a merchant computing system;
transmitting, by the server, a request for security credentials associated with the merchant computing system to one or more security service providers;
receiving, by the server, a plurality of security credentials from a subset of security service providers among the one or more security service providers;
determining, by the server in real-time, that at least one subset of security credentials among the plurality of security credentials meets a network security threshold;
generating and transmitting a uniform resource locator (“URL”) to the merchant computing system associated with the at least one subset of security credentials;
determining, by the server, whether the subset of security credentials meets the network security threshold; and
transmitting, by the server, a notification to the one or more security service providers based on the determination of whether the subset of security credentials meets the network security threshold.
2. The method of claim 1 , wherein the server is a security badge arbitrator.
3. The method of claim 1 , wherein the electronic display is associated with an e-commerce website.
4. The method of claim 1 , wherein the network security threshold includes global security standards established by at least one of EMVco, W3C, and OWASP.
5. The method of claim 1 , wherein the one or more security service providers provide the subset of security credentials to the server via a web service application programming interface (“API”).
6. The method of claim 1 , further comprising:
transmitting, by the server, a renewed request for the subset of security credentials from at least one security service provider among the subset of security service providers to measure against the network security threshold; and
receiving, in response to the renewed request, the subset of security credentials from the at least one security service provider among the subset of security service providers,
wherein the renewed request for the subset of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold is transmitted at periodic intervals.
7. The method of claim 1 , further comprising:
transmitting at periodic intervals, by the server, a validation request to the merchant computing system;
receiving, in response to the validation request, from the merchant computing system, a security policy as installed on the merchant computing system;
determining, by the server, whether the security policy matches a security solution provided by the one or more security service providers; and
proceeding, by the server and based on the security policy not matching the security solution provided by the security service provider, to i) revoke access to the generated URL and ii) deny display of the security verifier on the electronic display of the merchant computing system.
8. A non-transitory computer readable medium storing a program causing a computer to execute a method for managing secure processing of electronic payment transactions, the method comprising:
receiving, by a server, a request for a security verifier to be displayed on an electronic display of a merchant computing system;
transmitting, by the server, a request for security credentials associated with the merchant computing system to one or more security service providers;
receiving, by the server, a plurality of security credentials from a subset of security service providers among the one or more security service providers;
determining, by the server in real-time, that at least one subset of security credentials among the plurality of security credentials meets a network security threshold;
generating and transmitting a uniform resource locator (“URL”) to the merchant computing system associated with the at least one subset of security credentials;
determining, by the server, whether the subset of security credentials meets the network security threshold; and
transmitting, by the server, a notification to the one or more security service providers based on the determination of whether the subset of security credentials meets the network security threshold.
9. The non-transitory computer readable medium of claim 8 , wherein the server is a security badge arbitrator.
10. The non-transitory computer readable medium of claim 8 , wherein the electronic display is associated with an e-commerce website.
11. The non-transitory computer readable medium of claim 8 , wherein the network security threshold includes global security standards established by at least one of EMVco, W3C, and OWASP.
12. The non-transitory computer readable medium of claim 8 , wherein the one or more security service providers provide the subset of security credentials to the server via a web service application programming interface (“API”).
13. The non-transitory computer readable medium of claim 8 , the method further comprising:
transmitting, by the server, a renewed request for the subset of security credentials from at least one security service provider among the subset of security service providers to measure against the network security threshold; and
receiving, in response to the renewed request, the subset of security credentials from the at least one security service provider among the subset of security service providers,
wherein the renewed request for the subset of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold is transmitted at periodic intervals.
14. The non-transitory computer readable medium of claim 8 , the method further comprising:
transmitting at periodic intervals, by the server, a validation request to the merchant computing system;
in response to the validation request, receiving from the merchant computing system, a security policy as installed on the merchant computing system;
determining, by the server, whether the security policy matches a security solution provided by the one or more security service providers; and
based on the security policy not matching the security solution provided by the security service provider, proceeding, by the server, to i) revoke access to the generated URL and ii) deny display of the security verifier on the electronic display of the merchant computing system.
15. A computing system for managing secure processing of electronic payment transactions, the computing system comprising:
a memory having processor-readable instructions stored therein; and
a processor configured to access the memory and execute the processor-readable instructions, which when executed by a processor cause the processor to perform a plurality of functions, including functions to:
receive, by a server, a request for a security verifier to be displayed on an electronic display of a merchant computing system;
transmit, by the server, a request for security credentials associated with the merchant computing system to one or more security service providers;
receive, by the server, a plurality of security credentials from a subset of security service providers among the one or more security service providers;
determine, by the server in real-time, that at least one subset of security credentials among the plurality of security credentials meets a network security threshold;
generate and transmit a uniform resource locator (“URL”) to the merchant computing system associated with the at least one subset of security credentials;
determine, by the server, whether the subset of security credentials meets the network security threshold; and
transmit, by the server, a notification to the one or more security service providers based on the determination of whether the subset of security credentials meets the network security threshold.
16. The system of claim 15 , wherein the server is a security badge arbitrator.
17. The system of claim 15 , wherein the electronic display is associated with an e-commerce website.
18. The system of claim 15 , wherein the network security threshold includes global security standards established by at least one of EMVco, W3C, and OWASP.
19. The system of claim 15 , wherein the one or more security service providers provide the subset of security credentials to the server via a web service application programming interface (“API”).
20. The system of claim 15 , the functions further comprising:
transmitting, by the server, a renewed request for the subset of security credentials from at least one security service provider among the subset of security service providers to measure against the network security threshold; and
receiving, in response to the renewed request, the subset of security credentials from the at least one security service provider among the subset of security service providers,
wherein the renewed request for the subset of security credentials from the at least one security service provider among the subset of security service providers to measure against the network security threshold is transmitted at periodic intervals.