HSBC Bank - IPD (Infrastructure Profile Database)

CLIENT
HSBC

 
AREA
Finance

 
PROBLEM
Control access of customers to all their operations, through several electronic channels with a single login. Information on operations and users were already present on other systems, especially on mainframes, and should not be replicated but integrated with the required solution.

 
SOLUTION
Visionnaire has developed IPD, a system that maintains information about rights granted to customers, preventing access to unauthorized services.

 
RESULTS
In addition to the single login, which facilitates the use of the system and the client's relationship with the bank, the audit allows monitoring of users' actions in order to verify the problems reported by users and to identify attempts to breach the system. The IPD is flexible and meets the structural features of the bank with the least effort to adapt.

 
TECHNOLOGY
Java, HTML, XML, XSL, Servlets, EJB.

  

 
Detailed problem:
HSBC needed a secure access control solution that, in addition to providing customer security, was flexible and reliable. The solution should serve all electronic channels in a unified way, so that customers could access the bank consistently. The system would have to serve at least 1,200 concurrent users and should have fault tolerance, avoiding dependency on a single server.

 
Additionally, through a single login, users should have access to all their operations (current accounts, savings, investments, insurance, among others), but only allowed transactions (such as balance and transfer). Much information about operations and users was already present on other systems, especially on mainframes. This information should not be replicated but integrated with the required solution.

 
Detailed solution:
Building on its experience in developing access control applications, Visionnaire has developed a solution for financial institutions. In HSBC, this solution is called IPD (Infrastructure Profile Database). IPD maintains information about rights assigned to clients, preventing access to unauthorized services. For this purpose, all available services or business transactions are registered in advance, using the appropriate GUI, as well as the rights required to access them. The operations available to customers are retrieved from an existing system on the mainframe, maintaining the consistency of the information.