earticle

영어

POS system using a POS terminal having a credit settlement functions. According to the tendency of the card settlement use has increased, the spread of the POS terminal are expanding. Also, financial and personal information that are traded in the POS system environment has increased and then Security threats aimed at sensitive personal information and credit information has increased. But stakeholders such as pos merchants, pos system developer, management could not established a proper security measures because of unclear standards of management and supervision about current situation of financial information security, the lack of regulation and powerful control of regulatory agencies, undefined role and obligations of stakeholders in response to these threats. In this paper, we analysis security functions and testing requirements of ‘security standards of POS terminal’that announced in credit finance association. Also, we propose the construction plan of POS security system in order to solve these problems. As a result, we derive and define latest secuirty threats that can occur in operating environment of POS system, security requirements for dealing with this security threats, role of stakeholders. Since the construction plan of POS security system define role and obligations of stakeholders and propose practical construction method, we could make effective response to POS system attack and latest threats.