INSTRUCTIONS ON TECHNICAL SUPPORT AND BACKUP FOR THE ELECTRONIC INTERBANK CLEARING SYSTEM

Size: px

Start display at page:

Download "INSTRUCTIONS ON TECHNICAL SUPPORT AND BACKUP FOR THE ELECTRONIC INTERBANK CLEARING SYSTEM"

Sharlene Aileen Melton
6 years ago
Views:

1 INSTRUCTIONS ON TECHNICAL SUPPORT AND BACKUP FOR THE ELECTRONIC INTERBANK CLEARING SYSTEM In accordance with UNMIK Regulation Nr. 2001/26 on Payments Transactions and based on Section 9 of Rule XVIII on clearing and settlement, and based on rules and procedures on the Electronic Interbank Clearing System and in accordance with Article 4, is issued this document for the technical support of Electronic Interbank Clearing System. Part 1 General Information on Electronic Interbank Clearing System (EICS) a. The EICS is an electronic system for interbank payments clearing, developed and managed by the CBK. a) The CBK is a participant in SEKN for payment arising from its operational activity and for revenues and expenditures of the institutions of the Government of Kosovo on behalf of the MEF / Treasure b. EICS is an application based on web technology: 1. Technology - ASP.Net. 2. Programming language - C #, Java 3. Database SQL Server 2005 RDBMS.

2 d. Network infrastructure on which the EICS system operates is supported by Kosovo telecommunications companies through physical dedicated connections (lease lines) as a pair technology of telephone and optical fiber. e. EICS technical infrastructure is supported by IPSD - CBK in cooperation with relevant CBK directorates and external contracting companies. 1. IPSD within the CBK directly coordinates with external contracting companies in administrating database and EICS application. 2. Administration of network infrastructure and operating system is carried out by Information Technology Directorate (ITD) of CBK. 3. Support in communication lines for EICS network is carried out by Telecommunication Unit in CBK and externally contracted telecommunication companies (PTK, etc.). f. Costs for the development, implementation and maintenance of EICS are covered by the CBK. g. Participants in EICS cover cost for monthly maintenance of the network's infrastructure, and service fees of the system ("EICS Fee" - published in the CBK official website). Part 2 The functioning and organization of the EICS System a. In order to easily organize EICS application, the system is divided into several modules, such as Transaction, Administration, and Reporting. b. EICS participants through transactions module are enabled of: 1. Importing electronic payment order from their Core Systems in EICS. 2. Control and execution of outgoing payment orders. 3. Receive of incoming payment orders. 4. Download and preparation of payment orders from EICS to their Core Systems. 5. Registration of "average weekly deposit" and the registration of "50% of cash in the bank. c. EICS is adapted to allow the execution of payment orders for all payment schemes developed by the CBK, IPSD: normal, priority, mass, "Kos Giro" and "Direct Debit.

3 d. Through the Administration module each EICS participant has possibility for: 1. Adapting the EICS system parameters to the needs of each participating bank. 2. Administration, determination of roles and creation of users in the application to be used by operators. Each user or group of users created belongs to the respective bank from which it is created. 3. Monitoring of log, in which are registered all users actions of relevant participants. e. Through EICS system, respectively "Electronic Report", participants can monitor at any moment their liquidity situation and pending payments. f. Reports of "incoming and outgoing transfers" are used for reconciliation with their core systems for all daily transfers and for browsing history of sent / received payments. g. Communications between EICS and "core systems" of the participants is performed through electronic messages integrated in text file which is based on the standard structure of unique file. h. Into the standard structure of "file" are integrated all payments schemes: normal, priority, mass, "Kos Giro" and "Direct Debit. Part 3 Operational / Technical Administration of EICS by the IPSD in BKQ a. CBK IPSD in process of administration and operation of EICS system keeps the system operational by enabling participants to have a continuous, safe and equal access, in accordance with the system s working hours. The system is designed in such way that part of the system that is published to participant is separated from the part dealing with the payments clearing and settlement site. b. Performs the settlement process in participants' accounts for all transfers, and monitors their liquidity. c. In the accounts of participants in EICS, registers non-eics transfers such as international transfers, cash movements, liquidity transfers and different provisions. d. Performs daily procedures of opening-closure of the day, and archiving and backup of the system. e. Specifies the operating hours of the system, regulates the time of operation of clearing sessions and in case of changes immediately notifies participants. In that case, participants are informed by , explaining changes in operating hours.

4 f. Administers system s security and contributes in coordination of all technical support activities for stable and secure functioning of the system. g. Provides training and presentations relevant to the use of the application and development of new modules of EICS. h. Prepares and delivers all necessary instructions and materials related to operational and technical procedures of EICS use. i. Monitors and archives, in certain period of time, log-files and checks system performance. j. Analyzes requests for digital certificates and releases them for users of the system participants. Part 4 Access and use of EICS by participants a. After signing the agreement and other procedures for participation in Inter-bank Payment Systems in the CBK, participants make an official request ( , letter) to access the EICS. b. Each participant, for common cases must determine a location from where wants to access the EICS system. c. Install a physical connection (establishment of the network connection) between the CBK and the object, determined by the participants in the system. d. Participants provide personal computers (PC) with appropriate settings, and network configurations are made for access to EICS network. e. Minimum configuration for PC to connect EICS: Operating Sistem- Windows XP, Microsoft Office 2003, Adobe Reader 7.0 Internet Explorer (IE 6.0 or higher), Enable Active X controls, Ueb aplication Trusted Side f. Participating banks are obliged to take care and cover the cost of installation and maintenance of computers for EICS system. g. Participants nominate at least one operational / technical administrator for EICS who should be responsible and have the necessary knowledge on the logic of the system operation, as well as technical knowledge of system operation. These administrators must provide first operational/ technical support to their operators regarding the EICS. h. Participants nominate at least one network administrator for network integration of EICS network in participants internal network.

5 i. IPSD within the CBK will organize training for administrators and operators if necessary, regarding the operation of EICS. j. Participators in the system are provided with the necessary documentation and instructions for using the system. k. For new participants, initially is installed test system of EICS for one month period. l. Participants should adapt their "core systems" for the use of the standard structure of "unique file, as a interface between EICS and their core system ". m. Administrators of the system participants perform: 1. Adaptation of EICS parametric options 2. Based on the options offered by the EICS, user groups are created and roles assigned to these groups. 3. Registration of users of the relevant participating bank / institution. 4. Monitoring of the log-in the EICS, where all users actions of the relevant participant are recorded. 5. Request to the DSNP, CBK for digital certificate and its installation for each user. m. Participants in the EICS must archive send and received transactions files. n. Participants should implement rules and procedures of EICS system. o. Participants in the system must provide qualified personnel for operation with the EICS. p. To not allow temporary or external staff operate with the EICS system q. To inform the CBK in the case of EICS operation by unauthorized persons in cancelation of the digital certificate. r. To develop internal procedures for security and protection of the system, including the organizational procedures (human resources) and technical (hardware and software). s. To report the CBK on every violation observed or suspected regarding the security of EICS system. Part 5 Adjustment and administration of EICS in line with new needs and developments a. Changes in payment systems may come as a result of: 1. New developments in payment systems 2. New modules added to the existing EICS system. 3. Promotions and technical improvements of EICS.

6 b. Development of new systems and upgrade of the existing system are implemented in accordance with the strategy of payment systems development and according to the needs and requirements prescribed by IPSD and participants. c. Technical performance by CBK (IPSD and other directorates for technical issues) in coordination with technical groups for EICS in participating banks. d. Any change is tested in the test system before implementation in the EICS main system. e. Regarding the EICS changes that affect the participant, all participants are informed in advance, giving them needed time to prepare. f. The CBK is not obliged to coordinate with participants in cases where the need for intervention in EICS system is urgent and any delay could cause difficulties and problems for the system and its participants. g. When necessary participants receive additional instructions containing relevant changes. h. The cost of new developments and changes are covered by the CBK. Part 6 EICS access by users - Digital Certificates a. Each user in order to have an access to the EICS system must obtain a digital certificate. b. Digital certificate is linked to "Windows user", computer hardware, and should be connected with the EICS application user so that for any change in these elements a new certificate must be issued. c. From each participant, the request for certificate is published in web address for this purpose, while the announcement is made by in IPSD official address at the CBK. d. The request and notice for digital certificates must contain detailed description of the user to whom the certificate is issued. e. Details on the way of implementation of the application and installment of the digital certificate are provided in the relevant instruction. f. The application and information are done by the administrator of EICS in the participating bank and the director of payment of the relevant bank must be informed (CC) g. The IPSD-CBK shall response to the request for the new digital certificate for the user within five working days. h. Creation of the new users, the determination of their roles in the application and link of users with digital certificates is performed by the administrator of EICS of the participating bank.

7 i. Validity of digital certificates is one year and after that time new certificates should be installed for every user. j. Procedure for renewal of digital certificates is similar with the one for issue of new certificates; the only difference is that the issue from the CBK is accomplished within one day. k. In case of passivation of a user, the participating bank must inform the CBK for blocking of certificate for the concerned user. l. Every quarter, participants must send in IPSD-BKQ the list of active users (operators) and digital certificates. Part 7 Technical assistance to the EICS operators a. For each anomaly observed in the technical operation of EICS, or in application or the network, operators inform the EICS and network administrators at the participating bank. b. Depending on the nature of the problem and if impossible to resolve it, the administrators of the participating banks shall report the case to IPSD-CBK. Previously, administrators must analyze documents and technical guidelines on the operation of EICS. c. The case is reported by to the official IPSD address (paymentsystem@bqkkos.org ) within the CBK, with attached factual documents regarding the nature of the problem. d. Depending on the nature of the problem, the CBK IPSD supports and coordinates with the CBK Directorates and with contracting companies the maintenance of systems regarding each reported case. e. Response and recommendations on how to deal with the case presented, the IPSD must provide within 120 minutes. In the case that IPSD considers that the problem cannot be resolved within the day, the participating bank is recommended to use the backup communication format. Part 8 Archiving and backup storage for EICS a) For EICS system CBK provides action for normal conditions and those for extreme cases, in order to be ready to act and provide uninterrupted work of EICS in any situation.

8 b) EICS System shall have reserve copy (backup, mirroring system) of the system, which will activate in case of technical (hardware and software) damage of the real system. c) CBK provides technical instructions for actions needed to undertake in bringing back to function/restoring the system. d) Backup of database and elements of the application are held on external discs. e) On CBK is done the electronic archiving of transactions older than two (2) years, EICS allow participants to have access on browsing archived transactions through the application published for this purpose. f) CBK holds and archives copies of files with transactions of direct participants and other participants (MEF/Treasure and other clients). g) In EICS system are saved and archived. log of users actions and event log of the system. h) EICS does not allow the deletion of users who have operated on the system, it permits only their inactivation. i) Participants in EICS are obliged to achives files with transactions sent and accepted by EICS Part 9 Technical Infrastructure and procedures for Disaster Recovery for EICS system a) CBK and participating banks should provide locations and technical infrastructure for use of EICS in unexpected cases. b) Use of location in unexpected situations is made in cases of disability of access in EICS from predefined objects in normal conditions, that is in case of natural disaster or other cases that make access in EICS impossible for a long time. c) To access EICS from locations defined for unexpected situations, participants should have at least one user in the EICS application that should have digital certificate issued only for this purpose. d) EICS participants are responsible in preparing and submitting on CBK a copy of the procedures that should be followed in these cases. e) Participants cover all expenses for DRC location and technical infrastructure.

9 f) If participants in EICS do not have DRC location for operations in EICS, it is necessary to contract agreement with at least one other participant for use of DRC location to access EICS in unexpected situations. In this occasion the participant in EICS is responsible for submitting on CBK a copy of the agreement. g) Participants in EICS are responsible, according to the drafted agreement with other participants for procedures of use of the location and technical infrastructure in unexpected situations. h) CBK in collaboration with participating,should test every 6 months procedures of system functioning in unexpected situations. Part 10 Network infrastructure and backup of communication. a) Network infrastructure of EICS system is divided in: 1. CBK s internal network on which servers of EICS and users for payment system operation and administration are set. 2. External network, that makes possible participants to access EICS b) Network infrastructure, that makes possible access in EICS for banks and participating institutions is a dedicated network (lease line) that works through DSL Modems provided by telecommunication companies in Kosovo. Though the infrastructure of EICS network is a direct physical network, from CBK to each participant on this network are configured the necessary equipments for network security. c) The costs for network installation carried by the CBK, and participants cover the monthly maintenance costs d) For continuity of work in EICS and in case of defects or any extraordinary situation on network infrastructure, CBK with undertake active actions in accordance with all EICS participants. e) Under active actions for continuity EICS works backup communication means are foreseen: 1. First mean Regularly mean of communication for access of participants in EICS. This network technology is made possible through DSL Modems on coupled telephonic links. dedicated lines. Such lines are functional during the entire working hours in EICS. Development of this firs means of communication with optic fibres is under process. 2. Second mean- Backup/reserve links through telephonic links (Dial-Up). This link is available for participants and can be used in situations when first mean of communication is not working because of technical changes. After firs mean develops

10 with optical fibres this telecommunication mean with be up graded in dedicated (lease) line with DSL Modem. 3. Third mean Physical transfer of transactions with (USB, CD) from participating bank on CBK. In this case, operators of participating banks that bring transactions on CBK, do access EICS system from internal network on CBK. This mean can be applied only in extreme cases, in case of unpredicted interruption of both previous means of communication. 4. Fourth mean: Transfer of transactions in physical (physical-paper copies) from the participating banks at the CBK. This form is used when its SEKN's system is not functioning. In this case, operators of banks bring to the CBK printed on paper and signed by the authorized commercial banks person up to 15 transactions (mainly transactions with priority) for each session. Transactions recorded by CBK operators directly to the general ledger accounts. f) In case of interruption of first mean of communication in EICS, operators of participating banks report the interruption to the network administrator on the participating bank that is responsible for linkages of EICS network with the core system network of the participating bank. This administrator analyses the interruption feature and in cases when is concluded that the problem is not on their side than the case is reported on the official s of CBK : (paymentsystem@bqk-kos.org, informationsystems@bqk-kos.org and telecommunications@bqk-kos.org). g) From IPSD and responsible directorates on CBK, in case of need, also in collaboration with contracted companies, the cases reported from participating banks are analyzed and participating bank gets a response in 120 min. In cases when first mean of communication because of technical problems could not be activated within the day, than CBK recommends to the participating bank to activate other back up means of communication. h) The third means of communication is used in cases when because of different technical problems the first two means could not be activated. In using the third mean of communication, representatives should have a user account on EICS application that could be used only on these occasions. i) CBK in collaboration with participating banks should any 6 month test the procedures of functioning of back up communication means. j) Participants in EICS are responsible in preparing and maintaining procedures and instructions that should be followed in cases of use of back up means of communication. Procedures as presented above are recognized and accepted by representatives of institutions/banks participating in EICS:

11 Participating Bank Authorized Person (for EICS within participants) 1. PCB ; 2. BpB ; 3. Beck ; 4. RBKO ; 5. NLB ; 6. BKT ; 7. TEB ; 8. Kombank ; INSTITUTIONS PARTICIPATING IN THE SYSTEM Authorized Person (for EICS to participants) 9. Treasury ; 10. KTA ; 11. Customs ; With signing of these procedures, institutions express that they are informed, consulted and also agreed with the procedures. In addition, all participating institutions express their compliance with the provisions of the Operating Rules of Clearing and Settlement, with appendixes, attachments, and the changes that may happen from time to time, following prior discussions with participants, but always approved / decided by the CBK only. Directorate of Interbank Payment Systems in the CBK Gjylfidane Kastrati - Kadrijaj, Director gjylfidanek@bqk-kos.org Tel & fax 038/ , ext paymentsystems@bqk-kos.org

INSTRUCTIONS ON TECHNICAL SUPPORT FOR THE ELECTRONIC INTERBANK CLEARING SYSTEM

Draft INSTRUCTIONS ON TECHNICAL SUPPORT FOR THE ELECTRONIC INTERBANK CLEARING SYSTEM In accordance with UNMIK Regulation Nr. 2001/26 on Payments Transactions and based on Section 9 of Rule XVIII on clearing