Transaction Processing Gateway Segmentation for PCI DSS Compliance

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Entities handling high volumes of transactions face significant burdens due to rigorous audits and compliance requirements with security standards like PCI DSS, which can be resource-intensive and costly, especially for small entities.

Innovation Solution

The implementation of systems and methods for routing transactions through different gateways and performing real-time risk assessments, while isolating sensitive data handling to reduce the attack surface and improve security and efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If entities handle high volume transactions directly, then transaction processing capacity increases, but compliance audit burden and security costs increase significantly

Engineering Contradiction:

Improvetransaction processing capacityVSAvoidcompliance audit burden

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The patent segments the transaction processing system into multiple components: a secure environment that handles only sensitive data, a gateway that routes transactions, and a merchant system that processes non-sensitive transactions. This segmentation allows the merchant system to operate with reduced compliance burden while the secure environment maintains security standards.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent extracts sensitive data handling operations from the merchant system and places them in a separate secure environment. By taking out only the necessary sensitive data processing from the CDE, the merchant system's compliance burden is reduced while transaction processing capacity is maintained.

Inventive Principle:

Principle #2Taking out (Extraction)

2Ease of operation

If sensitive data is handled throughout the entire transaction processing system, then transaction processing functionality is complete, but security risk and attack surface increase

Engineering Contradiction:

Improvetransaction processing functionalityVSAvoidsecurity risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts sensitive data from the transaction processing flow and confines it to a secure environment. Only non-sensitive transaction data remains in the merchant system, reducing the attack surface while maintaining complete transaction processing functionality through coordinated interaction between systems.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a gateway as an intermediary between the merchant system and the secure environment. The gateway routes transactions and coordinates data exchange, allowing complete transaction processing while minimizing direct exposure of sensitive data to potential security threats.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If code review and security audits are performed on all transaction processing code, then security compliance is ensured, but development time and costs increase

Engineering Contradiction:

Improvesecurity complianceVSAvoiddevelopment time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the codebase into security-critical code in the secure environment and non-critical code in the merchant system. Only the minimal security-critical code handling sensitive data requires rigorous PCI DSS compliance review, while the majority of transaction processing code can be developed and deployed with standard review processes.

Inventive Principle:

Principle #1Segmentation

4Device complexity

If a single transaction gateway is used, then system complexity is reduced, but transaction processing reliability and efficiency decrease

Engineering Contradiction:

Improvesystem complexityVSAvoidtransaction processing reliability

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent designs the gateway as a universal routing component that can direct transactions to multiple different secure environments or processing systems. This multi-functional gateway maintains relatively low complexity while enabling flexible routing to achieve high transaction processing reliability and efficiency.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250173717A1Systems and methods for transaction processing

Publication Date: 2025.05.29 GRATIFY PAYMENTS INC

AI summary

Systems and methods for routing, operating on sensitive data, performing risk assessments with respect to, and/or otherwise securely processing transactions. In some embodiments, an execution module executing in a secure environment may receive a data structure associated with a proposed transaction, the data structure comprising at least one non-sensitive expression representing sensitive data regarding the proposed transaction. The execution module may evaluate the at least one non-sensitive expression to obtain the sensitive data, and may use the sensitive data to construct an application programming interface (API) message to be submitted to a transaction processing gateway to request processing of the proposed transaction.