1. General
1.1 These rules are formulated to ensure that terminals connected to China UnionPay Co., Ltd. (hereinafter referred to as “China UnionPayâ€) network strictly implement uniform technical standards, ensure product quality and safety, and maintain the brand image of UnionPay.
1.2 The UnionPay card acceptance terminal equipment referred to in these Rules refers to the acceptance equipment and its security components that can complete UnionPay card transactions, including but not limited to point-of-sale POS terminals, telephone payment terminals, mPOS terminal hardware devices, and intelligent point-of-sale terminals. Terminal security components such as financial self-service terminals, personal payment terminals, other new terminal terminals, and PIN input devices. among them:
POS terminal products refer to point-of-sale terminal devices that can accept magnetic stripe card and IC card information and complete financial transactions;
The telephone payment terminal product refers to a new type of terminal equipment developed on the basis of the traditional telephone equipment. The telephone payment terminal performs various information exchange functions with the telephone payment center and customizes transactions by the background to complete various business functions based on the bank card. It is divided into type I terminal and type II terminal according to its applicable environment and function.
Type I terminals are used in private places such as homes; Type II terminals are used for manned residential properties and convenience points, office units and commodity wholesale markets without centralized cashiers;
The mPOS terminal hardware device refers to the hardware part of the dedicated receiving terminal in the form of the mPOS terminal. The mPOS terminal is a holistic concept, specifically, the merchant cash register operation is carried out through the mobile communication device (the payment application software carried), and the collection and encryption of the UnionPay card related information is completed by the external dedicated receiving terminal, through the mobile communication device and the background processing system. The transaction is completed interactively, and the external dedicated receiving terminal involved in this process is the mPOS terminal hardware device.
The intelligent point-of-sale terminal refers to a smart terminal device used by merchants in the process of UnionPay card transaction. The device is equipped with a smart operating system to support UnionPay card transaction processing, which can realize encryption protection of card sensitive information and support multi-application management. Through the Internet access to the intelligent point-of-sale terminal back-end system, and the back-end system to complete the UnionPay card transaction acceptance.
The financial self-service product referred to as “self-service terminal†refers to a device or device operated by a cardholder, which reads, captures and transmits information in the card in an unattended environment, and provides self-service functions;
The personal payment terminal refers to a terminal device used by the cardholder in the process of payment and identity authentication. The device can be connected to the background through a personal device such as a personal computer or a mobile phone, and has the ability to read bank card data and can be encrypted and protected. Card data and PIN information.
Other new terminal products refer to other terminal devices that can complete the financial transactions of UnionPay cards in addition to the terminal products listed above.
A PIN input device is a device that encrypts a cardholder's PIN and has explicit physical and logical definitions that are resistant to attack or attack.
1.3 In accordance with these rules, China UnionPay carries out safety certification for the UnionPay card acceptance terminal equipment, and issues safety certificates for products such as certified terminals and PIN input devices. The UnionPay card acceptance terminal equipment safety certification is a proof that China UnionPay has the technical ability and management level of the certification application enterprise to continuously produce the terminal equipment that meets the requirements of the UnionPay standard, but does not provide guarantee for the specific terminal products produced by the enterprise. Responsible for the safety and quality of their products after certification.
1.4 The qualification certification is open, fair and just.
2. Management organization
China UnionPay is the management organization for the acceptance of terminal equipment safety certification for UnionPay cards, and exercises the responsibility for quality supervision and management of UnionPay card acceptance terminal equipment. China UnionPay authorized the UnionPay Logo Product Certification Office (hereinafter referred to as the “Certification Officeâ€, located in China UnionPay Technical Management Department) to organize specific certification work; China UnionPay commissioned a professional testing agency as the implementation unit for terminal equipment safety testing.
3. Application conditions
3.1 Enterprises and equipment that apply for terminal equipment certification should have the following conditions:
(1) Hold the business license issued by the administrative department for industry and commerce to allow the production and sale of financial terminal equipment. The name, business scope, production site, and registered capital of the applicant company must be consistent with the business license held by the enterprise (the overseas enterprise can provide the legal qualification certificate of the corresponding qualification recognized by the local government).
(2) With perfect quality assurance system, strong application development capability and good after-sales technical support ability, it can guarantee the quality of equipment and after-sales service.
(3) The registered capital (paid-in capital) of the enterprise shall not be less than 10 million yuan; it has a good financial status (no loss in the financial situation in the past two years), which can guarantee the normal operation of the enterprise.
(4) It has a certain scale of production and popularity, with five years (inclusive) of experience in the development, production and sales of financial terminal products, or experience in the development and operation of financial related products.
(5) The copyright or patent for applying for certification of the terminal equipment must be owned by the applicant company.
(6) Products within the scope of China's national compulsory product certification catalogue must pass 3C certification (the terminal deployed in the overseas market does not need to provide 3C certification, but the corresponding materials should be provided according to the provisions of the national product area of ​​the terminal product).
3.2 For enterprises that apply for terminal equipment certification for the first time, in addition to 3.1, the following conditions should also be met:
(1) The registered capital of the enterprise (paid-in capital) shall not be less than 20 million yuan; it has a good financial position (no loss in the financial situation in the past two years), which can guarantee the normal operation of the enterprise. (provided a financial report issued by a legally qualified accounting firm)
(2) The enterprise needs to have the technical capabilities and related qualifications related to terminal research and development. (including but not limited to patent certificates, high-tech enterprise qualifications, etc.)
(3) The company needs to have a full-time R&D team of more than 20 people, and provide a corresponding developer list and resume information form. The terminal products for certification must be independently developed by the enterprise.
(4) The enterprise shall provide a letter of recommendation from the cooperative payment institution with the qualification for offline receipt.
3.3 If the enterprise applying for certification for the first time is a start-up enterprise, the establishment period or experience of the enterprise does not meet the fourth requirement in 3.1, and the product submitted by the enterprise for certification application is an innovative terminal product. To support the market innovation demand, the enterprise shall provide the whole country. The recommendation letter of the main commercial bank or the main acquiring institution and the relevant information related to the cooperation, as the supplementary basis for the establishment time of the enterprise does not meet the application conditions, the certification office will comprehensively evaluate whether the qualifications meet the qualification application conditions according to the submitted materials.
4. Certification process
The certification process includes application, material review, on-site evaluation, product testing, certification and announcement. For other new terminal products, due to their particularity, the certification office will adjust the certification process according to the actual situation.
4.1 Application
The company that submits the application for equipment safety certification must submit all the following materials to the certification office. The materials must be written in simplified Chinese. The materials submitted by the certification office to the company are only used for equipment certification and are kept confidential.
(1) Certification related forms, including the certification application form (Annex 1), the certification information summary table (Annex 2), and the terminal technical indicator table (Annex 3);
(2) A copy of the business license and the organization code certificate (the overseas company can provide a valid license for its branch in China);
(3) Comprehensive report of the company (including basic information, registered capital, product range, personnel organization, annual production capacity, product quality assurance and after-sales service system, etc., in which the after-sales service system should include service outlets, service methods, and service personnel qualifications. And service commitments, etc.);
(4) The annual financial report of the enterprise for the first two years of the audit by a legally qualified accounting firm;
(5) Quality certification certificate or certification materials of the company with a sound quality assurance system;
(6) Relevant explanatory materials for applying for certification equipment, including but not limited to technical solutions, application scenarios, business architecture, etc.;
(7) China National Compulsory Product Certification for applying for certification equipment (personal payment terminal products are not required, other new terminals are determined according to actual conditions); equipment with wireless communication function should have telecommunication equipment network access license; IC card Payment function equipment should be tested by PBOC 3.0;
(8) Enterprises applying for certification of other new terminal products are required to provide detailed technical solutions, pilot or application plans for their products, and their main developer lists and resumes;
(9) An entity prototype for applying for certification equipment;
(10) A letter of recommendation from a cooperative payment institution with an offline acquiring license (initial application);
(11) Other materials submitted by the certification office.
4.2 Material review
4.2.1 The certification office is responsible for reviewing the application materials.
4.2.2 The content of the review includes the completeness, authenticity and compliance of the application materials. Integrity refers to whether the materials specified in this rule have been provided; authenticity refers to whether the materials provided by the applicant enterprise are true and effective; compliance refers to whether the content of the materials provided by the enterprise meets the requirements. The certification office decides whether to go to the applicant company for on-site evaluation (assessing the enterprise quality assurance system, application development capability and after-sales technical support capability) according to the situation to confirm the authenticity of the materials provided.
4.2.3 The certification office comprehensively considers the qualifications of the applicant enterprise and the national and industry policy guidance, and decides whether to accept the application for certification according to the actual situation, and informs the applicant enterprise of the result.
4.2.4 The certification office shall complete the review of the application materials within one month from the date of receipt of the complete certification materials, issue the audit conclusions, and use the “Notice of the Auditing Results of the UnionPay Card Acceptance Terminal Equipment Safety Certification Materials†(Annex 4). The form informs the applicant company. Due to its particularity, other new terminal equipments are not subject to this material review time.
4.2.5 If it is necessary to apply for an enterprise to replenish or resubmit the application materials, the applicant company must submit the supplementary materials as required within one month of receiving the notice. If it is overdue, it cannot be submitted without any explanation.
4.3 On-site evaluation
4.3.1 On-site assessment is an on-site review process for the certification application materials submitted by the certification application enterprise. The assessment includes personnel management, R&D qualification, quality management, production R&D capability of production facility management, and management level to meet the mass production of UnionPay. Requirements for authenticating terminal equipment.
4.3.2 For the following enterprises, the certification office will receive on-site evaluation based on the information provided by the enterprise after receiving the certification application;
(1) Enterprises that apply for terminal security certification for the first time;
(2) Enterprises that have had violations and submitted the application for certification again after the completion of the rectification;
For enterprises that are not in the above range or those that have passed the on-site evaluation before, the certification office decides whether to conduct on-site evaluation according to the actual situation of the enterprise.
4.3.3 For the case where on-site evaluation is required, the certification office shall complete the assessment within two months from the date of submission of the certification application by the enterprise, and notify the enterprise of the evaluation results.
4.3.4 If the on-site evaluation is unqualified, the enterprise shall complete the rectification within the specified time according to the evaluation opinions of the certification office, and apply to the certification office for on-site assessment and review. If the rectification is not completed on time or the on-site assessment review is still not passed, the certification will not be passed.
4.4 Product Testing
4.4.1 The product testing standard shall be formulated, revised and released by the certification office in accordance with the specifications of the “Civil Union Card Acceptance Terminal Security Specificationâ€.
4.4.2 The applicant enterprise shall contact the designated testing organization to carry out equipment testing items within one month from the date of receiving the testing request. Other new terminal products shall provide prototypes for testing according to the actual conditions of the products. The specific testing content and testing methods are determined by China UnionPay and the commissioned professional testing agencies.
4.4.3 During the testing process, the applicant company shall arrange a special person to cooperate with the testing work.
4.4.4 The testing organization shall complete the test according to the equipment testing standard within two months from the date of receipt of the sample. If the equipment test result does not meet the requirements, the applicant enterprise may retest the test report within two months after receiving the test report. If the supplementary test still fails to meet the requirements, the certification will be cancelled.
4.4.5 After each test, the applicant company shall submit a test report to the certification office.
4.5 Certification review, issue of certificates and publication of information
4.5.1 After the certification application enterprise passes the previous link (product inspection) assessment, the certification office will organize the review of equipment certification within one month. After the deliberation, the final certification conclusion will be issued.
4.5.2 For the equipment that has passed the certification, the certification office will issue the “Notice of the results of the safety certification of the UnionPay card acceptance terminal equipment†to the enterprise (Annex 5).
4.5.3 After receiving the certification fee paid by the enterprise, the certification office will issue the “CiLian Card Acceptance Terminal Equipment Safety Certificate†to the certified enterprise and announce it to the public at the same time; the certified product list can be found on the UnionPay Certification Information website (http: //cert.unionpay.com) query.
4.6 Certification fee
The certification fee for each terminal product is 10,000 yuan; when the certificate expires, the renewal fee for certification is 10,000 yuan. The certification fee includes the cost of the manual service for the certification office during the certification process and the maintenance fee for the certificate for three years. The enterprise shall pay the application fee within the time specified by China UnionPay.
China UnionPay has the right to adjust the certification fee in the form of a written notice or a revised draft of the rules. The adjustment will take effect upon notification or release, but the fees already paid by the enterprise will not be affected.
4.7 Certificate validity period
The UnionPay Card Acceptance Terminal Equipment Safety Certificate is set to be valid for three years.
5. Supervision and management
5.1 Quality Supervision
The terminal enterprise that has passed the equipment safety certification shall provide the certification office with the stamp of the "Quality Supervision of UnionPay Card Acceptance Terminal Equipment" (Annex 6), and accept the supervision and inspection of the certification office at any time in accordance with the commitment.
5.2 Certificate renewal and renewal
5.2.1 Renewal application
Within six months before the expiration of the certificate, the enterprise shall submit an application for renewal of the certificate to the certification office; the enterprise that has not submitted the application for renewal of the certificate as of the expiration date of the certificate shall be deemed to be automatically waived the qualification for renewal of the certificate, and the certificate obtained Automatically lapse.
5.2.2 renewal detection
After the enterprise renews the certificate submitted to the certification office, the certification office will determine the test plan for the product based on the technical standards and the update of the test case. There are three cases:
(1) Complete test. That is, complete safety testing of the product. Usually the following conditions need to be fully tested: a) technical standards and test case updates are more, the original test report can not prove the current security of the product; b) the product itself has more improvements and upgrades, need to re-test the security to verify security Sex.
(2) Difference test. That is, a special safety test for the difference in the product. Usually, the following conditions only need to be tested for difference: a) The technical standards and test cases are not changed much. The original test report can basically prove the current safety of the product, but it needs to use the latest test method for some projects to supplement the test; b) The hardware security architecture itself has not changed, only the security firmware/software has been improved, and the effects of these improvements need to be supplemented.
(3) Do not test. That is, there is no need to retest the product and directly approve the last test report. Renewed products are not allowed to be tested only in the following cases: a) no change in technical standards and test cases; b) no change in appearance, hardware, firmware, etc. of the product;
5.2.3 Renewal Product Model
When the enterprise renews the application certificate, if the appearance/hardware/firmware of the product changes, the renewed product model/hardware version number/firmware version number should be clearly distinguished from the original product.
5.3 Terminal sampling
5.3.1 For equipment that has passed safety certification, during the validity period of the certificate, the certification office will conduct random inspections on product quality, safety and after-sales service every year, and have the right to randomly sample the equipment for mass production.
5.3.2 The enterprise shall cooperate with the certification office to carry out the sampling inspection work; if the problems found in the random inspection are caused by the company's own violations, the enterprise shall carry out rectification according to the requirements of the certification office. If the situation is serious, the corresponding violation control measures shall be taken in accordance with 5.5.
5.3.3 For the sampling inspection process, the cost of repeated sampling inspection due to the company's own problems shall be borne by the enterprise.
5.4 Terminal sales information report
For terminals that have passed the safety certification, the company must submit the sales of the equipment to the certification office by month before the end of each month (Attachment 7). If the enterprise needs to make any changes to the equipment put into use according to the requirements of the user (without affecting the appearance, quality and safety), it must submit a written application to the certification office, and the certification can be approved by the certification office before entering the enterprise. The terminal manufacturer must clearly print the terminal manufacturer name and product model information. If it is not printed, the certification office will identify it as a product that has not passed the certification, and take corresponding violation control measures according to 5.5.
5.5 Penalties
Enterprises must abide by the provisions of this implementation rule, strictly control the quality of equipment that has passed product certification, and ensure the safety of all links. If the company violates the relevant content of the certification rules, the certification office will take violations of the rules according to the situation.
Violations include but are not limited to the following:
ü The product has general quality problems. The company has provided information in a timely manner and actively carried out rectification measures, which have not caused adverse effects or caused economic losses.
ü If the product has quality or safety problems, the company has provided information in a timely manner and actively carried out rectification measures with less impact or less loss.
ü Providing false materials during the certification process.
ü Does not cooperate with the daily management of the certification office, and will not correct it after the warning.
ü I found violations during the sampling process.
ü The terminal sales data is not provided on time as required, or the sales data provided does not match the actual data.
ü The products placed on the market are inconsistent with the appearance, version and structure of the certified products.
ü Other issues that violate the certification rules.
Penalties include, but are not limited to, the following:
ü Warning: By issuing a letter to the company, interviewing the relevant person in charge of the company, etc., it is applicable to the case that the company does not strictly abide by the relevant regulations of the certification, but the circumstances are minor and have not caused damage to the brand image of China UnionPay and its member institutions.
ü Announcement: Notifying the member institutions and the industry through the announcement or letter of China UnionPay certification official website, applicable to the serious quality and safety problems of the enterprise, or the changes in quality and safety of the enterprise can not fully meet the production and processing requirements. Case.
ü Upward certification fee: Applicable to enterprises with serious safety or quality problems. When accepting their new terminal certification application, increase the certification fee for product sampling and on-site review. The maximum floating rate does not exceed 500%. The standard is determined by the certification office.
ü Suspension of new product certification application: For corporate new product certification applications, the suspension time ranges from three months to one year. Applicable to the serious quality and safety problems of certified products, and the need to rectify within a time limit.
ü Cancel the certificate: the security certificate of the problem terminal is cancelled. The end products that are suitable for enterprises have serious quality and safety problems, which cause adverse effects.
6, attached
6.1 If the enterprise has any objection to the test and certification results, it may appeal to China UnionPay.
6.2 These rules are formulated, promulgated, interpreted and revised by China UnionPay.
6.3 These Rules shall be implemented as of the date of promulgation.
Familie doll has a blank face,you can draw eyes,lips,nose,eyebrows on the face and you can sew according to your drawing.You can also send us the picture of your drawing and we can sew for you.It likes a mystery box,you don't know what it is until you recieve Familie doll.
New Toys,New Toy Doll,New Barbies Toy,New Doll Set
Nantong Einsame Familie Toy Technology Co.,Ltd , https://www.nteinsamefamilies.com