La PSD2: a new world nella digitalizzazione dell’economia Oracle Cloud Services all’opera per implementare la PSD2 Prototipo funzionante Alessandro Vallega Security Business Development Director, Oracle Clusit Board of Directors Oracle Community for Security Chairman Founder of EuroPrivacy.info Oracle Cloud SaaS Social Marketing Sales Social Engage Social and Monitor Network Commerce Conf Price Human Planning Accounting Procurement Project Project Fin. Inventory Supply Chain Product and Quote Resources Budgeting Hub Report. Management Mgmt Cost Mgmt Planning Master Data Marketing Service Talent Enterp. Perf. Financials Risk Mgmt Revenue Manufac Management Reporting Management turing Logistics App. Perf. Cloud Compliance Monit. Sites Product Order Management Lifecycle PaaS IOT API Mobile BI IDCS CASB GoldenGate Data Visualiz. Java SOA Database SMA Elastic Compute Block Storage No SQL Big Data Integration Messaging Developer SOA Process Documents Log IT Analytics App. Builder Analytics IaaS Bare Metal Exadata Dedicated Compute SERVICES USED TO BUILD PSD2 PROTOTYPE Archive Storage Network 2 2 PSD2/OpenBank Cloud Enabled Architecture Unpredictable Workloads – Peaks THIRD PARTIES THEIR CUSTOMERS FINTECH Protecting Legacy Systems and Traditional Channels From Unpredictable Workloads DevOps MultiChannel Mobile AISP Identity Propagation Identity Identity Traditional Channels PISP SOC Reporting CASB/LOG/SE C Monitoring API Mgmt Integration Legacy Programs API Security Transactional Integration Big Data Analytics In Memory Cache Reporting Discovery Analytics High Speed Encrypted Database ORACLE CLOUD Data •Channel Profitability •Client Profitability •Partner Effectiveness •Payment Mix •Rejected Payments Near Real Time Replication 3 Oracle’s PSD2 XS2A Solution • Security, Privacy and Control is front and center • Cloud-based FinTech-friendly API enablement • Immediate, always-on delivery of API call results • Built-in revenue management and billing Consumer Security Fintech Perimeter Security Integrate API Enablement Discover Curate and Plans Publish Hval Payments API Management Mobile Developer Synchronous Mass Payments Adaptive Access Metrics / Audit Corporates Backend Governance Revenue Asynchronous Real-time payments Server-Driven Virtual Authentication API Delivery DDA Privacy Execution Service Delivery Data 4 4 Framework UseCases: PISP and AISP Account Information Service Provider (AISP) Payment Initiation Service Provider (PISP) Cliente Venditore Cliente AISP API PISP API API API Banca del cliente Banca del venditore Banca del cliente 1 Banca del cliente 2 5 Banca del cliente 3 Environment • A421508 Domain • EDZM-TEST Domain 6 6 PISP Direct Pay: flow details 15 1 2 Venditore 15 8 Authority 9 Selezione di Direct Pay come metodo di pagamento 2. Chiamata all’interfaccia Direct Pay 3. Richiesta dati per la selezione banca 13 4. Selezione conto IBAN pagatore 15 5. Richiesta dati per l’autenticazione utente 6. Inserimento codice utente e PIN 7. Invio dati utente 8. Verifica dell’accredito PISP presso Authority 9. Conferma accredito PISP 7 10 ESB banca compratore 12 PISP 11 1. PSD2 APIs 5 6 Direct Pay Compratore 3 4 10. Conferma autenticazione utente + TOKEN 11. Richiesta dati per conferma transazione 12. Inserimento password dispositiva (OTP via mail) 13. Passaggio password dispositiva e dati destinatario Banca venditore 14 14. Transazione FI2FI 15 15. Conferma transazione 7 PSD2Framework – PISP IDCS PISP online on JavaCloud 8 Java PSD2Framework – AISP IDCS AISP mobile Customer Details 9 Mobile Mobile Accelerator PSD2Framework – API Security/Management API Platform API Security Bank API Admin 10 PSD2Framework – API Developer Portal API Platform API Developer Developer tools 11 PSD2Framework – Integration&Cache SOA Database Compute Storage Integration & Cache Base Service Exposure of Backend (DB/2 and Mainframe transactions) Rest API exposure Existing Service Adaptation to PSD2: (eg: checking balance before doing payment transaction) Results Caching 12 12 PSD2Framework – Payment Analytics BI Payment Analytics Payment Details Account transaction Details Payments by Category Margins by Category Payments by Channel Top 10 Customers Top 10 Partners Payments Details Rejected Transactions ....... 13 13 Contact me CHIEDETE UNA DEMO IN AREA ESPOSITIVA Alessandro Vallega LinkedIn Twitter U3L4 [email protected]