Security broker
An attempted transaction is identified involving a customer device and the first customer device is redirected to a security broker. A security report for the first customer device is received from the security broker. The security report is based on security data transmitted from the customer device to the security broker. An action can be performed in association with the attempted transaction based at least in part on the received security report. In some aspects, the security broker receives security data describing security conditions on the customer device in connection with the transaction between the customer device and a transaction partner. A risk tolerance policy is identified that corresponds to the transaction partner, such as an ecommerce provider. A security report is generated based on a comparison of the risk tolerance policy and the security data and the security report.
1. A method, comprising:
receiving security data describing a configuration attribute of a customer device in association with a commerce transaction between the customer device and a commerce provider;
specifying a customer device attribute, at least in part based on an extension of credit for the commerce transaction; and
generating a report at least in part based on a comparison of the customer device attribute and the security data, wherein the report further is at least in part based on an addition of an application or a patch on the customer device, and the commerce transaction is allowed or denied, at least in part based on the report.
2. The method of claim 1 , further comprising:
receiving, from the customer device, transaction data, wherein the transaction data includes an identifier of the commerce provider.
3. The method of claim 1 , wherein the configuration attribute is defined by software installed on the customer device.
4. The method of claim 1 , wherein the customer device attribute further is at least in part based on a dollar amount of the commerce transaction, relative to a predetermined dollar amount.
5. The method of claim 1 , further comprising:
sending the report to the commerce provider.
6. The method of claim 1 , wherein the security data identifies a user of the customer device.
7. A non-transitory, device-readable storage medium having instructions stored thereon, the instructions, when executed on a device, causing the device to perform operations comprising:
receiving security data describing a configuration attribute of a customer device in association with a commerce transaction between the customer device and a commerce provider;
specifying a customer device attribute, at least in part based on an extension of credit for the commerce transaction; and
generating a report at least in part based on a comparison of the customer device attribute and the security data, wherein the report further is at least in part based on an addition of an application or a patch on the customer device, and the commerce transaction is allowed or denied, at least in part based on the report.
8. The medium of claim 7 , the operations further comprising:
receiving, from the customer device, transaction data, wherein the transaction data includes an identifier of the commerce provider.
9. The medium of claim 7 , wherein the configuration attribute is defined by software installed on the customer device.
10. The medium of claim 7 , wherein the customer device attribute further is at least in part based on a dollar amount of the commerce transaction, relative to a predetermined dollar amount.
11. The medium of claim 7 , the operations further comprising:
sending the report to the commerce provider.
12. The medium of claim 7 , wherein the security data identifies a user of the customer device.
13. A system, comprising:
at least one processor device;
at least one memory element; and
a security broker, when executed by the at least one processor device, to
receive security data describing a configuration attribute of a customer device in association with a commerce transaction between the customer device and a commerce provider;
specify a customer device attribute, at least in part based on an extension of credit for the commerce transaction; and
generate a report at least in part based on a comparison of the customer device attribute and the security data, wherein the report further is at least in part based on an addition of an application or a patch on the customer device, and the commerce transaction is allowed or denied, at least in part based on the report.
14. The system of claim 13 , wherein the security broker, when executed by the at least one processor device, further is to receive, from the customer device, transaction data, and the transaction data includes an identifier of the commerce provider.
15. The system of claim 13 , wherein the configuration attribute is defined by software installed on the customer device.
16. The system of claim 13 , wherein the customer device attribute further is at least in part based on a dollar amount of the commerce transaction, relative to a predetermined dollar amount.
17. The system of claim 13 , wherein the security broker, when executed by the at least one processor device, further is to send the report to the commerce provider.