Architecture The Solution is designed and recommended to run on two servers. However, if required, the Transaction Processing Server and Data Base Server may be combined to give one-server implementation option excluding the host server. Some of the functions of servers are as follows.

Transaction Processing Server (TPS) is the core server and is designed to handle the customer requests via INTERNET. The security level selected by customer manages the login/access control to server.

Data Base Server (DBS) maintains complete data related to the solution, the transaction log etc. In order to enhance security, the servers are connected locally via a hard wire link and the data flow between the servers is encrypted.

Host Server(s) are bank's host servers, processing customer accounts and financial data as part of distributed or central database and network. The data transmission between servers is encrypted and authentication is as per bank's standards and requirement.

First-e-Bank places a lot of emphasis on security at various levels. The interest of the customer has been a major consideration at all stages of the system design and development. Some of the functionalities have been deliberately restricted/reduced to protect the interest of the customer. In a relatively more secure and reliable environment, some of these reduced functionalities can be re-introduced. First-e-Bank security implementation options are as follows:

• Windows NT running on NTFS partition, providing file level security
• Highest level of available data encryption through SSL (Secure Socket · Layer).
• Data encryption using SET and RSA standards.
• Restricted FTP and Gopher services for additional security.
• Disabling the directory browsing and using Virtual directory. All major Processes are executed on the TPS, therefore, the user do not access the Host server.
• The First-e-Bank solution's design and operational recommendations further minimize the risks. The system ensures that external access is within acceptable limits. Similarly, all sensitive requests by the customers may be configured for manual intervention within the Bank. (e.g. mailing of instruments on customer's address)
• Constant messaging between customer and Bank is available. Each transaction is reported to the customer, whether the transaction is accepted or rejected.
• Database security is available through RDBMS, such as MS SQL server.
• Pages are not stored in temporary area for later access.
• Time-out for login process.
• Multi-Level user login facility

 

< - P R E V I O U S P A G E