【国外标准】 Financial Services - Secure Customer Authentication for Internet Payments

Whereas the Internet offers a ubiquitous but insecure channel that is susceptible to eavesdropping, phishing, man-in-the-middle, counterfeit web sites, and system intrusions including malware, spyware, screen scraping, key stroke loggers, mouse monitors, and man-in-the-browser attacks, this standard defines requirements for secure authentication methods for Internet-based payment transactions.?Where applicable, this standard also provides guidance for using other industry standards on the Internet.