OptiSol FinTech Platforms

Transcription

1 OptiSol FinTech Platforms Payment Solutions Cloud enabled Web & Mobile Platform for Fund Transfer OPTISOL BUSINESS SOLUTIONS PRIVATE LIMITED #87/4, Arcot Road, Vadapalani, Chennai , Tamil Nadu. India Phone: (India) , (USA) Website:

2 2017 OptiSol Business Solutions Private Limited. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose without the written permission of OptiSol Business Solutions. Any hard copies of this document are to be regarded as temporary reference copies only.

3 Our payment solutions is a secured PCI compliant platform for executing Domestic and International payments on a peer to peer card transfer mechanism. The cloud enabled platform helps financial service companies with the digital tools (Web and Mobile) to increase customer engagement for money transfers. The solution allows the users to make transfer from their Visa/MasterCard linked credit/debit card to another card irrespective of location. The process of fund transfer from one card to another is seamless with excellent user experience. The solution is integrated with Visa and Mastercard API for safe and secure payment transfer environment. The solution follows all the Payment Card Industry Data Security Standards (PCI DSS) and Money Service Business Regulations.

4 Key Business Features KYC Process Easy onboarding process with integrated options for scanning documents required for Know your Customer compliance. Documents Management Store and retrieve KYC documents with ease on a secure cloud storage. Easy and secure Payments Single click payments with pre-stored details of beneficiary. Record once and use multiple times with secure authentications like mobile OTP (One Time Password) and Finger Print. Multiple options like Face Detection, QR Code & mobile payments. Fees and Charges Configure various fees/charges including Transaction Fees and Markup fees applicable across agents. Fees can be fixed fees, percentage fees and also be based on currency pairs. Easy Settlements Generate reports for reconciliation and settlements with detailed calculations. Apply differential rates for settlements based on agent contracts and generate settlement reports. Limits Tracking Enforce Limits based on User limits, Agent limits, currency limits etc. Configurable workflow to review and approve limit requests from users and agents. Mobile Ready Get your customers engaged through native mobile apps on ios and Android. Mobile friendly web application and a progressive web application can also augment your mobile strategy. Compliance Reports Generate compliance reports based on the country of origin. Robust Backoffice Manage your money transfer business at ease with robust back office to manage users, transactions and every aspect of your business. Rule based Fraud Prevention Detect and prevent fraudulent transactions with configurable fraud prevention rules. Agents Management Onboard and manage agents/sub agents who bring business to you. With multiple users under each agent, operate with ease. Cloud Enabled PCI Secure Deploy the application on PCI compliant and highly secure AWS cloud. API Integration Integrate with various providers VISA API and MasterCard API for card to card payment and Quickbooks/Xero for accounting integration. The platform provides secure API access for sharing transaction details via JSON API.

5 Functional Architecture

6 Solution Architecture Browser Access CLIENT Rich Internet Application (RIA)/UX Web and Mobile Apache HTTPS Server WEB BACKEND/SERVER AWS KMS ENCRYPTION REST API Controller for Business Logic Security OAuth ORM Reporting Security Framework Application Layer user and Admin functionalities Content Editors External Interfaces MVC and Programming Languages Apache Logging Secure Transaction DATABASE

7 AWS Services for Payment Security We are using Amazon web services (AWS) security works as shared Responsibility model. AWS is responsible for protecting the infrastructure that runs all of the services offered in AWS Cloud. This infrastructure comprises of hardware, software, networking and facilities that run AWS Cloud services. AWS PCI DSS Certified AWS has been PCI DSS Certified since As of July 11, 2016, an external Qualified Security Assessor Company (QSAC), Coalfire Systems Inc. has validated that Amazon Web Services (AWS) successfully completed PCI Data Security Standards 3.2 Level 1 Service Provider assessment and were found to be compliant for all services. AWS Listed Service Providers AWS is listed on both Visa Global Registry of Service Providers and MasterCard Compliant Service Provider List. Service Provider listings further demonstrate that AWS successfully validated PCI DSS compliance and has met all applicable Visa and MasterCard program requirements AWS PCI DSS Service Provider AWS being PCI DSS Compliant Service Provider means that customers who use AWS products and services to store, process or transmit cardholder data can rely on our technology infrastructure as they manage their own PCI DSS compliance certification. Application hosted in AWS Account and contained in Single Virtual private network.

8 AWS PCI Compliant Services covered in solution 1. Amazon EC2: Provides scalable computing capacity in Amazon Web Services (AWS) cloud. Amazon EC2 eliminates the need to invest in hardware up front, so development & deployment can be faster. We can use Amazon EC2 to launch as many or as few virtual servers as need, configure security/networking and manage storage. We are using EC2 instance with Redhat 7.4 OS Hardened with anti-virus. AWS WAF is needed to protect web applications from common web exploits that could affect application availability, compromise security or consume excessive resources. Allow or block web application by defining security rules (IP blocking) 2. Amazon RDS: Amazon Relational Database Service makes it easy to operate in cloud. It provides cost-efficient and resizable capacity database setup, patching and backups with security feature like volume encryption and firewall communication with web server, currently we are using MySQL database with other options like Oracle, MS-SQL. We have protected the card holder data environment by encryption enabled volume and we have can modify the default port no 3306 of MySQL to different port as part of security. 3. Amazon VPC: Lets you provision logically isolated section of AWS cloud where you can launch AWS resources in virtual network such as EC2, RDS. We have complete control over virtual networking environment including selection of own IP address, creation of subnets and configuration of route tables and network gateways. 4. Amazon S3: Cloud storage for Internet. We can upload your data (photos, videos, documents etc.). You can then upload any number of objects to the bucket. 5. Amazon CloudFront: is a web service that speeds up distribution of your static and dynamic web content. CloudFront delivers content through worldwide network of edge locations. When an end user requests content that you're serve with CloudFront, user is routed to edge location that provides lowest latency, so content is delivered with best possible performance. 6. Amazon CloudTrail: Service that enables governance, compliance, operational auditing and risk auditing of AWS account. With CloudTrail can log, continuously monitor and retain events related to API calls across AWS infrastructure. CloudTrail provides history of AWS API calls for account including API calls made through AWS Management Console 7. AWS IAM: Lets provision securely control access to AWS services and resources. Using IAM we create and manage AWS users and groups and use permissions to allow and deny access to AWS resources and have enabled multifactor authentication to account and we follow AWS IAM best practice to secure infrastructure. 8. AWS Key Management Service: is a managed service that makes it easy create and control the encryption keys used to encrypt your data, and uses Hardware Security Modules to protect the security of your keys. AWS Key Management Service is integrated with several other AWS services to help you protect the data you store with these services. We have enabled KMS to encrypt the card information in our application 9. Amazon Cloud Watch: We have implemented CloudWatch monitoring service for our resources and applications that we run on AWS. We have CloudWatch to collect and track metrics, collect and monitor log files, set alarms and automatically react to changes such as auto-scaling.

9 Interested to work with OptiSol? We are a reliable outsourcing services partner providing optimized digital solutions with delivery excellence for Startups and Small and Medium Enterprises. We believe Every Business is a Digital Business. We are experts in custom web and mobile application design and development, data solutions and package implementations. We have flexible engagement options on proven Onsite Offshore framework that suits need from all gamut of customers Startup, Independent Software Vendor (ISV), small or mid-size companies and Enterprises. We are equipped with creative engagement models and operations framework that suits outsourcing needs from all gamut of customers startup, Independent Software Vendor (ISV), small or mid-size companies and Enterprises. It has been serving its customer base across breadth and width of technology outsourcing needs that spans across Visit our Website for more details: GET IN TOUCH WITH US