Integrate - Security Summit

La PSD2: a new world nella
digitalizzazione dell’economia
Oracle Cloud Services all’opera per implementare la PSD2
Prototipo funzionante
Alessandro Vallega
Security Business Development Director, Oracle
Clusit Board of Directors
Oracle Community for Security Chairman
Founder of EuroPrivacy.info
Oracle Cloud
SaaS
Social
Marketing
Sales
Social Engage Social
and Monitor Network
Commerce Conf Price
Human
Planning Accounting Procurement Project Project Fin. Inventory Supply Chain Product
and Quote Resources Budgeting Hub Report.
Management Mgmt
Cost Mgmt Planning Master Data
Marketing
Service
Talent Enterp. Perf. Financials Risk Mgmt Revenue
Manufac
Management Reporting
Management turing
Logistics
App. Perf.
Cloud
Compliance Monit.
Sites
Product
Order
Management Lifecycle
PaaS
IOT
API
Mobile
BI
IDCS
CASB
GoldenGate
Data
Visualiz.
Java
SOA
Database
SMA
Elastic
Compute
Block
Storage
No SQL
Big Data
Integration
Messaging Developer
SOA
Process
Documents
Log
IT Analytics App. Builder
Analytics
IaaS
Bare
Metal
Exadata
Dedicated
Compute
SERVICES USED TO BUILD PSD2 PROTOTYPE
Archive
Storage
Network
2
2
PSD2/OpenBank
Cloud Enabled Architecture
Unpredictable
Workloads – Peaks
THIRD PARTIES
THEIR CUSTOMERS
FINTECH
Protecting Legacy
Systems and
Traditional Channels
From Unpredictable
Workloads
DevOps
MultiChannel
Mobile
AISP
Identity
Propagation
Identity
Identity
Traditional
Channels
PISP
SOC
Reporting
CASB/LOG/SE
C Monitoring
API Mgmt
Integration
Legacy
Programs
API Security
Transactional
Integration
Big Data
Analytics
In Memory
Cache
Reporting
Discovery
Analytics
High Speed
Encrypted Database
ORACLE CLOUD
Data
•Channel Profitability
•Client Profitability
•Partner Effectiveness
•Payment Mix
•Rejected Payments
Near Real Time
Replication
3
Oracle’s PSD2 XS2A Solution
• Security, Privacy
and Control is
front and center
• Cloud-based
FinTech-friendly
API enablement
• Immediate,
always-on
delivery of API
call results
• Built-in revenue
management
and billing
Consumer
Security
Fintech
Perimeter
Security
Integrate
API Enablement
Discover
Curate and Plans
Publish
Hval Payments
API Management
Mobile
Developer
Synchronous
Mass Payments
Adaptive
Access
Metrics / Audit
Corporates
Backend
Governance
Revenue
Asynchronous
Real-time
payments
Server-Driven
Virtual
Authentication
API Delivery
DDA
Privacy
Execution
Service
Delivery Data
4
4
Framework UseCases: PISP and AISP
Account Information Service
Provider (AISP)
Payment Initiation Service
Provider (PISP)
Cliente
Venditore
Cliente
AISP
API
PISP
API
API
API
Banca del
cliente
Banca del
venditore
Banca del
cliente 1
Banca del
cliente 2
5
Banca del
cliente 3
Environment
• A421508 Domain
• EDZM-TEST Domain
6
6
PISP Direct Pay: flow details
15
1
2
Venditore
15
8
Authority
9
Selezione di Direct Pay come metodo di pagamento
2.
Chiamata all’interfaccia Direct Pay
3.
Richiesta dati per la selezione banca
13
4.
Selezione conto IBAN pagatore
15
5.
Richiesta dati per l’autenticazione utente
6.
Inserimento codice utente e PIN
7.
Invio dati utente
8.
Verifica dell’accredito PISP presso Authority
9.
Conferma accredito PISP
7
10
ESB banca compratore
12
PISP
11
1.
PSD2 APIs
5
6
Direct Pay
Compratore
3
4
10. Conferma autenticazione utente + TOKEN
11. Richiesta dati per conferma transazione
12. Inserimento password dispositiva (OTP via mail)
13. Passaggio password dispositiva e dati destinatario
Banca
venditore
14
14. Transazione FI2FI
15
15. Conferma transazione
7
PSD2Framework – PISP
IDCS
PISP online on JavaCloud
8
Java
PSD2Framework – AISP
IDCS
AISP mobile Customer Details
9
Mobile
Mobile Accelerator
PSD2Framework – API Security/Management
API Platform
API Security
Bank API Admin
10
PSD2Framework – API Developer Portal
API Platform
API Developer
Developer tools
11
PSD2Framework – Integration&Cache
SOA
Database Compute
Storage
Integration & Cache
Base Service Exposure of Backend (DB/2 and Mainframe transactions)
Rest API exposure
Existing Service Adaptation to PSD2: (eg: checking balance before doing payment transaction)
Results Caching
12
12
PSD2Framework – Payment Analytics
BI
Payment Analytics
Payment Details
Account transaction Details
Payments by Category
Margins by Category
Payments by Channel
Top 10 Customers
Top 10 Partners
Payments Details
Rejected Transactions
.......
13
13
Contact me
CHIEDETE UNA DEMO IN AREA ESPOSITIVA
Alessandro Vallega
LinkedIn
Twitter U3L4
[email protected]