A Semantically Rich Knowledge Representation of PCI DSS for Cloud Services

Abstract

Organizations often use Cloud based services to manage their financial transactions, like fees payment, invoice payment etc., with their end users. These services allow payment using credit cards and thus need to adhere to the Payment Card Industry Data Security Standard (PCI DSS) standard. To effectively manage this policy, educational institutions dealing with card transaction currently monitor their payment gateway flow manually in order to be compliant. We propose a novel approach to automate this process using semantic web technology and natural language processing. In this paper we describe our technical approach and the ontology that we have developed to automatically extract key terms and rules from various compliance documents and represent them in a machine processable knowledge graph. We used Semantic Web’s Web Ontology Language (OWL) to create this knowledge graph which is machine processable and so can contribute significantly in automating the continuous monitoring of credit card PII data operation, transfer and sharing.