Integrated corporate remote banking system

Centralized and distributed modes

Multi browser support

Remote system administration

Unicode support

About DBO BS-Client x64 System

Functionality

Business Opportunities

System Architecture

Supported Platforms and Decisions

System Performance and Reliability

Security and Data Protection

Integration into Bank Infrastructure

User Training and Support

The integrated RBS BS-Client x64 system is intended to organise corporative remote bank servicing. RBS BS-Client x64 consists of the following main sub-systems providing diverse access modes to clients: Bank-Client is a subsystem that operates in a way

that a rich client does. In the first place, it is de-signed for middle-sized and large enterprises, espe-

cially conservative ones, as well as businesses situated in zones with unstable Internet connec-tion or without any Internet connection. The client side of the subsystem can be deployed even on individual flash drives for the convenience of end users.

Internet-Client is a fully functional and the most demanded subsystem oriented towards a wide range of clients and providing complex bank ser-vicing via Internet.

On-Line Statement is a subsystem intended for informational servicing of clients of credit institu-tions in segments of small and midsize busi-nesses.

Mobile Bank Client is a subsystem for remote control of client finances using tablets designed on iOS and Android platforms.

Any of the subsystems can either operate as an inde-pendent product or in cooperation with each other, thus providing each organization or employee with the most convenient access. Thanks to Office – Mobile Manager technology enabling combined usage of the subsystems, the document can be prepared by a responsible official with Bank-Client subsystem and finally approved and sent to the bank by the first per-son of the company with Internet-Client or Mobile Business Client subsystems.

Classical and Web-interface for Bank Employees Similarly to the client part, the bank part of RBS BS-Client x64 as also provides several modes of access for bank employees via the following main subsys-tems: RBS Server is a «classical» and fully functional

way of access using specialized Windows applica-tions.

Web-administrator and Web-operator are subsystems providing the opportunity for bank

About the System

CLIENT BANK

Bank-Client

Internet-Client

Mobile Business Client

On-Line Statement

Classical Interface

Web-interface

RBS Control Centre

RBS BS-Client x64

Integrated Service for Bank

Clients

FRAUD-AnalysisEnterprise

Clearing Centre(ECC)

BSSe-Government

Gate

Notification Server

INTEGRATION WITH THE BSS GROUP SOLUTIONS

RBS Control Centre

employees to work with the system using a web-browser. Only main and the most wanted functions are accessible via this interface.

The aggregate of these ways of access, among other things, ensures a clear demarcation of system administrator privileges, separating functions of the main administrator from those of administrators respon-sible for system usage in particular bank branches.

RBS Control Centre RBS Control Centre subsystem introduces a new level of opportunities of central monitoring and control of RBS BS-Client x64 system components. An administrator can track in real time system performance indices using both special system status representation tools and the standard Windows monitoring tool – Windows Perform-ance Monitor. When a server malfunction or server in-teraction errors occur, the administrator is immediately notified. Such centralized control reduces the cost of owning the system due to the access to all the neces-sary system tools from the single subsystem.

Integration with BSS Systems Maximum functionality of RBS BS-Client x64 is attained in combination with the BSS Company’s solutions: FRAUD-Analysis is a solution aimed at distance

banking fraud prevention. Integrated Service for Bank Clients is a cloud

service complex facilitating provision of additional services: Electronic book-keeping, Electronic report-ing, Electronic circulation of documents and Access to governmental and municipal services.

Enterprise Clearing Centre (ECC) is a fully func-tional solution in the domain of centralized auto-mated real-time control of corporate finances of en-terprises with territorial and organizational structure of any complexity.

BSS e-Government Gate is a single informational gate used to organize legally significant electronic

document interchange with the RF Federal bodies of executive authority via the Unified System of Interdepartmental Electronic Interaction (USIEI).

Notification Server is an autonomous techno-logical service providing automatic notification of bank’s clients – both legal and physical persons – using diverse communication channels.

RBS BS-Client x64 system can be integrated with other bank systems establishing all the necessary informa-tion flows. The system can exchange information with client accounting systems, governmental informational systems, such as The Governmental Informational System of Governmental and Municipal Payments (GIS GMP), Automated Banking Systems (ABS), currency control systems.

Multi-year development of RBS BS-Client x64 system based on market tendencies and client needs analysis supplemented the system with a number of useful fea-tures that withstood the test of time.

For Clients RBS BS-Client x64 system provides a solid complex of necessary services for end customers – bank clients. Clients have an opportunity to create and send different documents to the bank using document templates or creating them from existent ones, request bank state-ments, work with document archives, etc. All the neces-sary dictionaries, navigation, filtration and printing mechanisms are always close at hand. Furthermore, all the above mentioned is accessible using diverse access methods and diverse document circulation schemes.

For Bank Employees Usability of the system is of no small importance. This is where the up-to-date RBS BS-Client x64 system offers new opportunities. First of all, bank employees can work with the system using both the classical OS Win-dows interface and web-browser interface, just exactly like bank clients do.

For Bank Administrators RBS BS-Client x64 provides wide opportunities for ad-ministration. Now a system administrator has access to centralized control over the functioning system and cen-tralized management via RBS Control Centre subsystem. This makes it possible to perform 24/7 stability and effi-ciency monitoring of all system components on all serv-ers and reduce the cost of system ownership. RBS BS-Client x64 informs interested persons about all impor-tant system events and logs them. Similar to bank employees, administrators also have access to two system interfaces: «classical» through Windows applications and web-interface through web-browser.

In order to distribute responsibilities among adminis-trators effectively, there is an opportunity to distin-guish between the role of administrators of the whole system (RBS administrators) and the role of adminis-trators in charge of system functioning control in sepa-rate bank branches. It helps optimize the workload of RBS BS-Client x64 administrators. An RBS Administrator can update client workstations distantly. An administrator can also perform forced update if an important patch should be installed. Dur-ing the update the check of compliance between the versions of the patch and workstation takes place eliminating the possibility of incorrect procedure exe-cution. Also, the administrator can check the version of the client workstation remotely. In order to mini-mize the size of client update packages thereby reduc-ing the burden on bank Internet traffic, there is an opportunity to download the main part of the pack-ages from the developer company website. The useful option for the RBS Administrator is the op-portunity of fine tuning of data storage in a DBMS with no need of any corrections after updating the bank part of the system. This helps increase the system performance and organize the optimal data storage on servers.

Functionality

RBS BS-Client x64 gives rich possibilities for conducting business and supporting of client loyalty: starting with setting up the turnkey document circulation and ending with client informing and providing special services.

All Types of Financial Documents RBS BS-Client x64 implements the exchange of wide spectrum of documents regulated by legislation be-tween clients and bank to meet the needs of majority of clients. Among the documents: payment documents in rubles and foreign currency

(payment orders, payrolls, orders for currency transfer, etc.);

exchange control documents (contract deal pass-ports, currency deal inquiries, etc.);

informational documents (statements, free format documents, etc.)

If this set is not enough, there is an opportunity to put a new type of documents into operation using the spe-cial constructor. Besides, bank can always exchange free format documents with clients. Bank is capable of adjusting the rules of filling document properties for some kinds of documents. Apart from that, the criteria of document correctness are being set up according to bank requirements. In general, the system provides an opportunity to build the circulation of documents in a flexible manner in accordance to bank’s regulations.

Multichannel Support A client is free to choose a convenient method of opera-tion. RBS BS-Client x64 supports different methods of access to the system starting with classical Bank Client and ending with the solutions based on up-to-date mo-bile technologies. A particular access method is chosen reasoning from the client’s technical foundation, neces-sary services package and required document circula-tion scheme.

Implementation of Distributed Document Circulation Schemes Under the modern conditions of conducting of busi-ness, diverse schemes of document preparation and signing for the following execution by bank are in use. Documents can circulate within a single organisation as well as within a corporate structure. RBS BS-Client x64 is implemented with urgent client needs taken into account and allows organising operation in any man-ner that follows: accounting by a regular accountant possessing the

right of signature; accounting by a standalone branch of an organisa-

tion; accounting by a third-party specialist not possess-

ing the right of signature; circulation within a corporate structure under the

control of a managing organisation. There is a simplified support of corporate structures included in the standard delivery which has its ulti-mate development in the expanded system release with Budget adaptation module installed. Expanded delivery allows the system to interact with the sepa-rate BSS company’s product – Enterprise Clearing Cen-tre (ECC) – the solution in a realm of automation of centralised corporate finance management.

Client Informing RBS BS-Client x64 allows a credit institution to take advantage of a new specialised service to transfer messages from bank to clients. A guaranteed notifica-tion delivery option makes a client always aware of important information.

Special VIP-services An ability to provide services for VIP-clients using RBS BS-Client x64 is anticipated. The instance is the rapid issue of statements from VIP-accounts.

Business Opportunities

It is the principles of reliability, performance, scalability, data safety and operations and maximal comfort for end users that lie in the core of architecture of RBS BS-Client x64.

Centralised and Distributed System Modes RBS BS-Client x64 is capable of functioning in two modes:

Centralised mode – the control under the system, data storage, client accounting and document cir-culation are concentrated in the head office of multi-branch bank while working in this mode. All data transfer between clients and branches is car-ried out through the servers situated at the head office of the financial institution.

Distributed mode – a decentralised mode of RBS BS-Client x64 by which data storage, client ac-counting and document circulation are carried out

System Architecture

Branch 1Clients of the Head Branch

Clients of the Branch

#1

Clients of the Branch

#nBranch n

Centralised mode

in every branch of the credit institution separately and independently.

The centralised mode suits to multi-branch banks hav-ing centralised accounting whereas the distributed mode may be an optimal decision for banks with inde-pendently functioning and maintaining branches.

64-bit Architecture Thanks to the transfer of RBS BS-Client x64 to a new 64-bit platform it is managed to achieve a fundamen-tally new level of performance and scalability. Now banks have an opportunity to exploit servers with large volume of RAM and more productive computing power thereby providing the possibility of simultaneous serving a larger amount of clients per every exploitable server.

Scalability of Architecture Apart from an obvious method of scalability of RBS BS-Client x64 by increasing the server performance, the system architecture orffers different variants of scalabil-ity based on the distrubution of load among servers. Servers’ functions can be diversified in a number of ways: starting with components installation on several servers and ending with an option of a complex net of highly specialised servers (transport servers, authorisa-tion agent servers, servers of autoprocedures, ABS communication servers, etc.) Along with this, the load distribution among the servers of the same type may take place within the particular server classes. More-over, 64-bit architecture permits to build up the hard-ware power freely having the invariable bank’s Intranet topology to increase the system performance.

An Opportunity of Further Development by Bank Regardless of the extent the system architecture is elaborated, banks may need a special functionality which is not included in the standard delivery. The nec-essary tools and developer guide are intended to let

bank specialists develop an additional functionality. The special courses are provided for bank employees with the same purpose. Bank is capable of modifying both bank and client sub-systems and in this case (with the moderate amount of changes) the compatibility retains with updates from the developer company.

Branch 1

Branch 2

Branch n

Clients of the Branch #1

Clients of the Branch #2

Clients of the Branch #n

RBS BS-Client x64 is compatible with a number of mod-ern platforms and solutions; moreover, the list of sup-ported software keeps expanding.

Up-to-date Operating Systems RBS BS-Client x64 operates on the basis of modern op-erating systems. The majority of servers can operate under control of OS Windows of appropriate versions; web-servers can also operate under control of Unix sys-tems. Mobile applications operate on iOS and Android platforms.

Production DBMS RBS BS-Client x64 supports the most common produc-tion DBMS Oracle and MS SQL Server thereby obtaining its high level of reliability and performance hereby pro-viding the possibility of fine tuning of phisical data allo-cation for administrator. The usage of production DBMS is as well accessible for major clients using the «classi-cal» method of access by Bank Client subsystem if they need to organise collaboration for large amount of us-ers.

Production Web Servers On the basis of infrastructure and preferences of a credit institution, web servers of RBS BS-Client x64 can be deployed under control of either Internet Informa-tion Services (IIS) web server or freely distributing Apache Server. Both provide necessary reliability, per-formance and safety for the system Internet applica-tions.

Support of Wide Range of ABS Successful embedding of the previous generation of RBS BS-Client x64 system – RBS BS-Client v.3 – in more than 300 of banks became possible partly because of the support of a large amount of Automated Banking Systems (ABS) of various vendors. Among them are Diasoft 5NT, Inversion XXI, IBSO, RS-Bank, Bankier,

Quorum and others. Data exchange with ABS can be organised in different ways: file exchange, exchange based on usage of stored procedures and tables in database, COM objects included in ABS, MSMQ ser-vice, etc. The presence of XML file exchange ensures theoretical compatibility with any data source. The exchange processes are set up flexibly. The sys-tem leaves possibility to run processes with specific sets of parameters, for instance, in order to get statements for VIP-accounts.

Multibrowser Support All the web applications included in RBS BS-Client x64 system are compatible with popular browsers such as Google Chrome, Mozilla Firefox, MS Internet Explorer, Opera.

Modern Certified CIPFs and Cryptographic Devices Information safety is one of the most important as-pects of banking. In order to ensure the safety of data the system supports the foremost FSTEK certified cryptographic information protection facilities (CIPF) and cryptographic devices.

Virtualization Support The RBS BS-Client x64 servers can be deployed in vir-tual environment. Up-to-date virtualization tools from such vendors as VMWare, Microsoft, Oracle, Parallels, Citrix are supported.

Compatibility with Up-to-date Accounting Systems RBS BS-Client x64 compliance with 1C: Enterprise pro-gram complex is certified. Besides, the operation with Parus accounting system and exchange with other systems using text format is supported.

Supported platforms and Solutions

The high performance of RBS BS-Client x64 system is credited to the embedding of a number of technological solutions aimed at process optimization and increasing of calculation power. The transition to 64-bit architec-ture of the system allows banks to exploit servers with high performance, large amount or RAM and wide op-portunities of hardware scalability which provides re-mote banking services to large amount of clients simul-taneously minimising the denials of service. The arrangement of distributed operation of servers and opportunity to control the state of the system opera-tively are the key factors providing the reliability of RBS BS-Client x64 system.

Reallocation of Load among Servers in Case of Failures The usage of several instances of servers of the same type allows quick reallocating of load among servers in case of failure of any of them. Thus, for instance, map-ping clients using Bank Client subsystem to different sectors of service allows administrator to redirect infor-

mational flows among transport servers merely by means of changing of mapping between the servers and sectors.

Operation of Servers While Temporary Unavailability of Other Ones Apart from increasing of performance, the diversifica-tion of servers results to relatively independent opera-tion of them. As an example, TCP-agent servers con-tinue to receive documents from clients of Bank Client subsystem during the temporary failure of transport server thereby preventing denial of service. Temporary unavailability of autoprocedure servers or ABS com-munication servers is also not a critical condition of the system – the document processing would be just suspended in the period of outage.

Key Components Monitoring The presence of RBS Control Centre subsystem pro-vides functions of centralised control and operational tracking the course of the system to administrator. Thanks to that the administrator is capable of rapidly estimate the situation during the transition of the sys-tem into a critical condition and retrieve the service-ability of the malfunctioning segment.

Prompt Notification of Administrators about Critical Situations There are different situations feasible during the ex-ploitation of RBS BS-Client x64 system which may need to draw attention of administrator: messages about invalid situations, attempts of unauthorized ac-cess, emergency situations while processing docu-ments, etc. The system notifies a responsible person about all similar cases using different communication channels including a separate product Notification Server.

Performance and Reliability

Safety of information is a cornerstone of architecture of RBS BS-Client x64 system. The impressive set of func-tionality is implemented in order to ensure data protec-tion in the system.

Signing of Transferring Data All financially meaningful documents are signed with electronic signature using asymmetric cryptographic algorithms certified and approved by the government.

Support of Certified CIPFs Electronic signature and data traffic encryption are pro-vided due to up-to-date certified cryptographic informa-tion protection facilities (CIPF).

Support of Modern Cryptographic Information Media RBS BS-Client x64 supports personal cryptographic in-formation media including models of USB tokens with unextractable keys of Active and Alladin R.D. vendors as well as SafeTouch devices for visual checking of signing data.

Internet Data Protection A set of efficient mechanisms for Internet traffic protec-tion is used in RBS BS-Client x64, among them: Data encryption. The data transferred by the

Internet Client subsystem is encrypted using SSL or TLS Internet protocols and those transferred by the Bank Client subsystem – using any of supported CIPFs.

Different levels of user authentication. Any levels of authentication – password, cryptographic, session key authentication – in any combinations may be used to protect from malicious attacks.

XSS attacks protection. Internet subsystems eliminate the possibility of site hacking using cross-site scripting.

User filtration by IP and MAC addresses. Administrator may impose filters on user ad-dresses closing access to identified offenders.

Security policies. Administrator has an opportu-nity to set up parameters of protection from guessing of passwords and session keys.

Supplement Authorisation To avoid stealing money authorisation of documents and users of Internet Client subsystem is imple-mented. Supplement authorisation can perform with session key sets, eToken PASS devices and sms-messages.

Flexible Separation of User Access to Data and Operations Diverse access separation mechanisms allow flexible setting up access of bank and client employees to RBS BS-Client x64 according to their priviledges. A mecha-nism of system roles and privileges separates the ac-cess to data and operations on a basic level; a mecha-nism of cryptographic profiles allows defining the rights on performing cryptographic operations; a mechanism of curators allows assigning responsible bank employees to separate groups of clients.

User Action Security Auditing The system logs meaningful actions of users. Adminis-trator can always look through actions performed by users which decreases the possibility of insider threats from employees of bank.

Bank’s Intranet Security All the servers which are connecting to a DBMS of the system are placed in bank’s Intranet. Web servers, mail and other servers are situated within DMZ and don’t establish connections. That allows protecting the bank’s Intranet maximally using firewalls.

Security and Data Protection

One of the most important requirements to a bank sys-tem of any kind is the presence of expanded opportuni-ties of integration the system into the existent intra-structure of a credit institution staring with interaction with other informational systems and ending with set-ting up the user interface. RBS BS-Client x64 system meets these requirements in full extent.

Exchange with Bank’s ABS First of all, a great amount of modules providing the tight integration between RBS BS-Client x64 and ABS systems of different suppliers – the «heart» of infra-structure of a credit institution – is included into a sys-

tem delivery. These linking modules fulfill all necessary informational flows: export to ABS, cancellation from ABS, statements formation, gaining the information about rests, etc.

Setting up Design of Internet Client Subsystem Interface There are simple yet effective tools for user interface customisation including an opportunity of changing a site’s style sheet (as well as using of own style sheet) and changing of placement of information on the main page of a site.

Integration into Bank Infrastructure

RBS BS-Client x64Automated

Banking System(ABS)

Financial documents

Cancellation requests

Information about the state of exported documents

Accounts state information

Statements

Dictionaries data

For ABS of all typesFor ABS of particular types

Defining the “About” Information in Mobile Business Client Subsystem Information about bank can be defined and is accessi-ble for online subsystem users. In particular, there is an opportunity to set up a card with details of the bank, a list of ATMs and credit institution’s branches within the Mobile Business Client subsystem.

RBS Server and Bank Client Subsystems Interface Customisation The possibility of changing the source code of RBS BS-Client x64 at the application level for bank’s IT-specialists implies, among other things, wide opportini-ties of user interface customisation. For instance, add-ing a bank’s logo on screen forms is easily provided by built-in tools for screen forms editing. There is a pos-sibility of setting up the system interface for both bank employees and Bank Client subsystem users using these tools.

Documents Print Forms Customisation Document print forms are visual information accessible to users along with sytem interface. RBS BS-Client x64 system give great opportunities of print forms setup including the output of necessary supplementary in-formation in the first place (last operation’s date in statement form, electronic signature, information for currency control, etc.) and stamps of bank brances (including bank’s logo, payment marks, operationist’s name and so on). In case of lack of standard facilities of print forms cus-tomisation, administrator is always capable of modify-ing of print form templates thereby performing the fine tuning with all bank needs taken into account.

BSS company makes its best endeavours to provide comprehensive support to users of RBS BS-Client x64 system and its other products.

Operational Updates BSS company’s analysts quickly respond to changes in legislation and market requirements to prepare system updates in advance. The system keeps improving all the time expanding its functionality. Improvements are de-livered to end users in the form of regularly issued up-dates. Specialists of the company do their best to en-sure maximally painless transition to new versions sup-porting users and furnishing well thought accompanying manuals.

Technical Support Customer support is our priority. Technical specialists perform professional two-level end user support in the course of the system operation. Our technical support includes hotline assistance and expert consulting to ad-

dress more complex system operation issues.

Training for Banking Specialists In BSS Training Centre specialists from banking insti-tutions have an opportunity to take training courses in RBS BS-Client x64 system operation, administration and development of required non-standard functional-ity. The training raises qualification of specialists to a high level, thereby increasing the quality of service and the level of customer satisfaction.

Documentation and References RBS BS-Client x64 system is supplied with well struc-tured, interrelated, consistent and user-oriented documentation by which clients always may find an-swers to most technical questions raising when using the system.

User Training and Support