JR/T 0098.6-2012 in English

1 Scope

This part specifies the test contents and judgment criteria of mobile payment business system, including the test requirements, operation specifications and judgment criteria for seven test classes (function, performance, security, risk monitoring, document review, outsourcing management and organization networking) of business system.

This part is applicable to guiding the test organization to formulate test schemes about the conformance to the technical standards and the security of mobile payment business system and organization networking as well as to carry out tests and judge the conformance of test results.

2 Normative References

The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.

GB/T 22239 Information Security Technology - Baseline for Classified Protection of Information System Security
JR/T 0025.7 China Financial Integrated Circuit (IC) Card Specifications - Part 7: Debit/Credit Application Security Specification

3 Terms and Definitions

For the purposes of this document, the following terms and definitions apply.

3.1
user
user initiating mobile payment via mobile terminal

3.2
merchant
subject providing the user with commodities or service contents

3.3
user counts
total number of all valid users participating in remote payment transaction in the system (unit: person)

3.4
online user counts
number of session users in the system

3.5
concurrent user counts
Number of users who initiate business request at the same time in the system under the normal business condition (unit: person)

3.6
limit test
test process or verification process of the maximum processing capacity of the system

3.7
maximum concurrent user counts
maximum concurrent user counts which can be supported in the system in the case that there is no failure of business processing (unit: person)

3.8
transaction throughput
quantity of requests processed by the system in unit time (unit: transaction/s)

Foreword II
Introduction IV
1 Scope
2 Normative References
3 Terms and Definitions
4 General Provisions
5 Lists of Test Items
6 Function Test Items
7 Performance Test Items
8 Security Test Contents
9 Risk Monitoring Test Items
10 Document Review Items
11 Outsourcing Management Test Items
12 Test Items of Organization Networking
Annex A (Normative) Operation Specifications
Annex B (Normative) Judgment Criteria