O BACEN requer que os bancos brasileiros cumpram seus primeiros prazos de Open Banking até o final deste ano. Surgem naturalmente então questões sobre como você pode criar uma vantagem competitiva com sua estratégia de Open Banking. As respostas para isso são encontradas em como a tecnologia e as operações podem ser configuradas para promover mais colaboração com as fintechs e fornecer com eficiência novos produtos escaláveis centrados no consumidor. Isso exige que os líderes de projeto olhem para além de somente conformidade e abordem o sistema bancário aberto como uma oportunidade para acelerar a transformação digital. O WSO2 Open Banking oferece uma solução única para publicar APIs compatíveis com os padrões técnicos regulamentares e possibilitar extensos casos de uso de negócios de Open Banking centrados no consumidor. Assista a uma demonstração completa de nossa solução que é implantada globalmente neste webinar para saber como o conjunto poderoso de tecnologia WSO2 pode otimizar e acelerar sua jornada de Open Banking. Durante o webinar, abordaremos: Uma introdução ao sistema open banking e seus casos de uso Uma demonstração da solução WSO2 Open Banking e como ela é mapeada para a experiência do usuário de bancos, fintechs e consumidores finais O fluxo de usuário através da integração de fornecedores terceirizados (fintech) (ou registro do cliente), autenticação forte do cliente, gerenciamento de consentimento e portal do desenvolvedor. Escalabilidade e extensibilidade da solução WSO2 Open Banking Arquiteturas de referência e lições aprendidas com implantações de open banking globais no Reino Unido, UE e Austrália Quem deve comparecer: Arquitetos de soluções e empresariais. Líderes de projetos Open Banking CxOs envolvidos com estratégia de Open Banking Qualquer pessoa interessada em entender como uma implantação de Open Banking é mapeada para a experiência do usuário e possíveis casos de uso de negócios On-demand webinar: https://wso2.com/library/webinars/uma-demo-da-solucao-wso2-open-banking/

1. WSO2 Open Banking
Conformidade & Muito mais - Uma Demo da solução
23 July, 2020

2. Hello!
Roberto Monteiro
roberto@wso2.com

3. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Agenda
● Open Banking in Brazil—Timelines & Tech
● What Makes a Complete Open Banking Solution?
● WSO2 Solution Demo
● Journey of an Open Banking Project
3

4. Open Banking in Brazil

5. The Open Banking Concept
“ … a standardized sharing of
data and services through
the opening and integration
of systems … ”
Joint Resolution on Open Banking Regulation by BCB & CMN

6. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
What are the Drivers?
● Reduce friction
● Fair competition
● Collaboration
● Improved consumer experience
6

7. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Open Banking Expertise from Across the World
7
The Open
Banking
Standard (UK)
UK Standards
implementations in the
Gulf
Mexico Fintech Law
Open Banking for Brazil
Banco Central do Brasil
Smart Nation Singapore
Finance-as-a-Service Initiative
POC Standard
Consumer Data Right (CDR)
that covers multiple
industry verticals (banking,
telco, energy)
European Union
(PSD2)

8. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Technology Timelines for Open Banking Brazil
8
2020 2021
Joint Resolution
published
Service channels,
products & service
data APIs due
Customer registration &
transaction data APIs
(first subset) due
Payment initiation &
loan proposal
forwarding service
APIs due
Products & service data &
Customer transaction data
APIs (second subset) due
● API management
● Interactive documentation support
● API & API resource versioning
● API throttling
● API Statistics
● Core banking integration (incl.
SOAP, REST & JMS support + XML
& JSON support)
Additional requirements
● API Security
● OAuth2 framework support with OpenID Connect Hybrid
Flow support & MTLS based transport security,
● Consumer authentication with LoA3 assurance
● TPP lifecycle management
● Consent management
Public-Access API Phase Authorized-Access API Phase

9. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Key Components for Open Banking Success
9
COMPLIANCE
REQUIREMENTS

10. Open Banking in Real Life—A Demo

11. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
11
● Ensures that TPPs/ADRs are trusted before consuming the banking APIs as banking APIs
contain customer information.
Client Registration
Using the workflows
Dynamic Client Registration Manual Client RegistrationSignup workflow
TPPs/Clients registering via a regulatory directory
UK Australia UKBerlinUK
Client Registration

12. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
12
Rate Throttling

13. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Fraud Detection & TRA
13
● Rule-based fraud detection
● Score-based fraud detection

14. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Beyond Compliance
14
Monetization GraphQL APIs API Products

15. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Key Components for Open Banking Success
15
COMPLIANCE
REQUIREMENTS

16. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
High-Level Platform Architecture
16
Digital Banking
Core Banking
Payments
Risk & Fraud
Audit & Disputes
API Gateway
Developer Portal
API Analytics
Monetization
Identity & Access
Management
“Strong Customer
Authentication”
Client Registry
Metadata
Management
Consent
Sandbox
Integration
&
Messaging
security / Reporting
TPP
Developer
Engagement
Regulator

17. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Non-Functional Requirements
17
● Decoupled architecture
● Scalability
● Performance
● Integration capabilities (extensibility)
● Connectors
● Integrations to machine learning

18. Reference Architecture

19. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
A Reference Architecture
19
: OTP, Multifactor Auth
: Identity Federation
: Consent
(ODC 1.0 Hybrid flow, FAPI-RW,
public_key_jwt)
: Throttling
: Structural Conformance
: API Security
: Caching
: API Usage Events
DCR API
Banking
API
Common
API
AdminAPI
Data
LakeTPP
API
Sandbox
API
Marketplace
API
Analytics
Dashboard
Infosec
API
Certificate Store
TPP Registry
SSA Validation
API Token
Lifecycle
Management
JWKS Cache
Consent
Admin
Consent
Selfcare
ConsentAPI
: Mediation
: Protocol Switching
: Payload Transformation
(All EIP Supported)
Fraud
Dispute
Resolution
Data
Services
Notification
Proxy
TPP Registration
Token / Revoke
CDS Datasets
Common Datasets
Regulator
Get Metrics
Metadata Update
getStatus
JWKS
Endpoint
Metadata Cache Update
Digital Banking System
SMS Endpoint
SMTP Endpoint

20. The Journey (Not a Destination)

21. WSO2 Inc. Copyright © 2020 All rights reserved. This document or any portion thereof may not be reproduced or used in any manner whatsoever without the express written permission of WSO2.
Navigation Path and Waypoints
21
1
2
3
4
5 6 7 n
Contract
Negotiation
Design
Workshop
Implementation
Test Go Live!
Beyond
Compliance
Digitally
Enabled Bank
b
Regulator
Alignment
Internal
Culture Shift
a
Partner
Alignment
c
Partner
Update
Agile
2
3
4
Reciprocal Collaboration
c
Compliance Date

22. 22
bit.ly/monetizeOB

23. Question Time!
23

24. Thanks!