FINACLE SERVICES: API MANAGEMENT USING CA API GATEWAY

Transcription

1 FINACLE SERVICES: API MANAGEMENT USING CA API GATEWAY

2 Executive Summary Banks embarking on a digital transformation in today s connected world need to thrive, compete and evolve. To accelerate this transformation, Banks need to bring systems together, innovate, provide better customer experiences and optimize cost. To optimize cost, increase revenues and to improve customer connect, Banks can unlock value of data and drive innovation by exposing their internal services to internal teams and external partners in a seamless and secured manner. API management enables Banks to leverage existing IT systems and investments by exposing business services as APIs. As an integral part of API management solutions, API gateways offer flexibility, performance and security. By utilizing the features offered by API gateway, banks can selectively expose core banking services offered by Finacle. CA API Gateway is one such offering, built on the foundation of SOA for exposing, securing and managing backend applications, network systems or infrastructure via APIs. CA API Gateway can integrate with existing IAM solutions in a plug and play manner and is the best available solution for enterprises looking to open up data and services to partners, developers, mobile apps, cloud services and smart devices. CA API Gateway includes protocol bridging, providing full translation between a variety of protocols from legacy to REST and JSON providing the bridge from legacy to mobile, cloud, and social. CA API Gateway can be configured to be PCI-DSS compliant, and includes a built-in PKI engine, FIPS level encryption, a robust RBAC system, and SAML support.. Integration approach The Finacle core banking services are exposed as APIs through the Finacle Integration platform. When banks want to expose these APIs to internal and external teams, security validations and access control checks needs to be taken care of, in-addition to the validation of the messages. CA API Gateway helps with the Finacle and CA API management - Integration approach CASA Mobile banking App RESTful API GET PUT POST DELETEE Financial institutions, B2B, etc. $ RESTful l API GET PUT POST DELETE DELETE DMZ Central policy enforcement on outgoing/ incoming traffic Threat protection and security Transformations API monitoring/ management API analytics ESB-like web service mediation Finacle integrator Loans CIF External Document 2016 EdgeVerve Systems Limited

3 complete API lifecycle and management, including security, API design, publishing, versioning, usage and performance. If we consider the scenario of a bank launching a new mobile app, the bank can expose internal data assets and business services as APIs, and then allow mobile app developers access in order to build apps at their own pace; a bank can expose APIs to partners such as e-commerce websites in order to process the online payments with ease; or banks can potentially outsource the data collection to third party vendors with CA API Gateway to perform validations and enforce security, thereby focusing on the core aspects of its banking operations. Integration methodology & approach Finacle exposes several financial and non-financial business services through Finacle Integration platform. These are XML based web services and can be consumed using endpoints such as SOAP and HTTP/S CA API management solution is deployed on top of Finacle and services are exposed to external world in various modes such as SOAP services or JSON/REST APIs. CRUD operations (create, read, update and delete) on the data are supported through REST APIs exposed in the CA API Gateway. In case of requests sent by consumers, JSON message is accepted from the clients and JSON to Finacle XML message format conversion happens in the API management layer. In case of responses sent to consumers, the APIM layer converts Finacle XML message to JSON output. Deployment options CA API gateway deploys in a variety of form factors - hardware appliance, virtual appliance, software & an Amazon machine instance; easily scales and can be deployed in a failover environment for high availability. Architecture diagram Outside Partners / Divisions APIs/Web Services Data Identities External Developers Mobile Apps Cloud Services Internet of Things External Document 2016 EdgeVerve Systems Limited

4 Key benefits Banks can adapt this approach without any changes to Finacle APIM platform provides detailed analytics and operational metrics, which helps in analyzing how services are utilized, how APIs are performing and how APIs are being used by developers. These metrics can provide further insight and help in identifying new revenue opportunities. Provides a foundation for introducing new and innovative services by aggregating existing business services Various aspects of API management like governance, monetization, metering, security, etc. can be well managed using the API management layer without impacting the data, security and availability of the underlying Finacle core banking system. API related operations are taken care by the CA API management solution and the Finacle system focusses only on providing the banking data, thereby offering a clean and optimal solution for the bank s operations. Adaptability to widely used forms like REST services and JSON message formats can be addressed without worrying about the backend systems. Using API management solution, we can maintain backward compatibility by maintaining multiple versions of API for each service version. CA API Gateway can act as a trusted partner to Finacle for authenticating the incoming requests against LDAP / IAM systems. Functional overview Transformation Routing Traffic Control Composition Authentication Entitlements API Keys Social SSO Throttling Prioritization Caching API Enable The Data And Services Security Token Service Secure Access to the API OAuth 1.x OAuth 2.0 OpenID Connect Health Tracking Performance Global Staging Config Migration Developer Enrollment Plans API Explorer API Docs Workflow Patch Management Policy Migration Reporting Quotas Rankings Analytics Forums Manage the API Lifecycle Manage the Developer Community External Document 2016 EdgeVerve Systems Limited

5 Key Features Security: Passed rigorous vulnerability tests, and integrates with popular IAM systems with support for OAuth, SAML and RADIUS. Performance and Scale: Clustered architecture allows application level throttling, prioritization and linear scalability across multiple gateways with automatic failover. Manageability: Handles migrations across development, test & production with global management tools, integrations with enterprise BI, analytics and reporting tools. Flexibility: Multiple form factors/ deployment models with support for a wide range of platforms. Provides protocol bridging across legacy & new systems, and includes content-based routing. Extensibility: Plug-in framework to add new transports and identity providers, and deep integration with enterprise management and BI products.

6 About Infosys Finacle Finacle is the industry-leading universal banking solution from EdgeVerve Systems, a wholly owned subsidiary of Infosys. The solution helps financial institutions develop deeper connections with stakeholders, power continuous innovation and accelerate growth in the digital world. Today, Finacle is the choice of banks across 84 countries and serves over 547 million customers nearly 16.5 percent of the world s adult banked population. Finacle solutions address the core banking, e-banking, mobile banking, CRM, payments, treasury, origination, liquidity management, Islamic banking, wealth management, and analytics needs of financial institutions worldwide. Assessment of the top 1000 world banks reveals that banks powered by Finacle enjoy 50 percent higher returns on assets, 30 percent higher returns on capital, and 8.1 percent points lesser costs to income than others. About CA CA Technologies (NASDAQ: CA) creates software that fuels transformation for companies and enables them to seize the opportunities of the application economy. Software is at the heart of every business, in every industry. From planning to development to management and security, CA is working with companies worldwide to change the way we live, transact and communicate. CA software and solutions help our customers drive enterprise-wide productivity, offer differentiated user experiences and open new growth opportunities. And we are able to deliver this value across multiple environments mobile, private and public cloud, distributed and mainframe. Our goal is to be recognized by our customers as their critical partner in the new application economy. CA Technologies has been recognized as a value leader by industry analysts and has been hailed as one of the World s 100 Most Innovative Companies by Forbes, as well as one of the greenest companies in the United States by Newsweek. For more information, contact finacle@edgeverve.com EdgeVerve Systems Limited, a wholly owned subsidiary of Infosys, Bangalore, India. All Rights Reserved. This documentation is the sole property of EdgeVerve Systems Limited ( EdgeVerve ). EdgeVerve believes the information in this document or page is accurate as of its publication date; such information is subject to change without notice. EdgeVerve acknowledges the proprietary rights of other companies to the trademarks, product names and such other intellectual property rights mentioned in this document. This document is not for general distribution and is meant for use solely by the person or entity that it has been specifically issued to and can be used for the sole purpose it is intended to be used for as communicated by EdgeVerve in writing. Except as expressly permitted by EdgeVerve in writing, neither this documentation nor any part of it may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, printing, photocopying, recording or otherwise, without the prior written permission of EdgeVerve and/ or any named intellectual property rights holders under this document.