Our experience with API economy and PSD2 challenges.

1. © 2018 IBM Corporation
Think 2019 - Session
7921
How DSK Bank and
Gazprombank Solved their Open
Banking Digital Transformations
with IBM API Connect
Goran Angelov
CEO, IBS Bulgaria Ltd.
Dmitriy A Bulychkov
Head of Technology Innovation

2. © 2018 IBM Corporation
PSD2 challenge
for open API
Economy
What we learned from PSD2 project
in DSK Bank (OTP Group)
Goran Angelov
CEO, IBS Bulgaria Ltd.

3. IBM Platinum BP
Experts in Power,
Storage & Cloud
Integration
Specialists in
30M Turnover in
2018Team
of 80+
Established in 2003
Who we are?
© 2018 IBM Corporation

4. PSD2 project in DSK Bank
(OTP Group)
© 2018 IBM Corporation
4
Project goal:
Provide fully functional sandbox and
production developer portal compliant with
PSD2 and RTS

5. IBM Integration portfolio
© 2018 IBM Corporation
5

6. Intelligent
Counter Fraud
and SCA
SLA and fall-
back interface
TPP Register
and TPP
certificates
(eIDAS)
Customer
Consents
management
PSD2 Challenges
6

7. Open Banking APIs need
standards
7
However, there are always local specifics!

8. How we approached RTS?
8

9. API Applications
9
• Swagger API according to Berlin
Group NextGenPSD2 X2A standard
and local interpretation BISTRA

10. Consent Management for
PSD2
10
• Open application for managing
PSD consents
• REST and SOAP API for
integration to internet/mobile
banking or separate application

11. Orchestration
11
• All services are orchestrated through IBM
App Connect Enterprise (aka IIB)
• Internal services are transformed to REST
in IIB and match those in IBM API Connect

12. Validation Policies
12
Custom validation policies are defined for
IBM API Connect

13. AAA Security
13
• All outbound/inbound services
pass through DataPower - for
security and governance

14. API Portal customization
14
Custom improvements in API
Connect portal for better
communication to TPP’s and
support team custom notification
messages

15. Simulated test
environment
15
• TPP Test Application
• Test EIDAS TPP certificates
• Test SCA application
• Fully functional SandBox
with simulated real
operations

16. Current state
Think 2019 / DOC ID /
Month XX, 2019 / © 2019
IBM Corporation 16
• Fully functional
Sanbox from
September 2018
• Production planed
for the end of
February (6
months ahead)

17. Lessons learned
17
1. It is not an IT project
2. Inflicted change is comparable to
the first internet banking solution
3. Involvement and continuous
education of the business
stakeholders is essential for
further development

18. © 2018 IBM Corporation
API Connect as
vehicle for our
digital
transformation
journey
Dmitriy A Bulychkov
Head of Technology Innovation

19. Gazprombank
• Tomorrow
–2nd largest Bank in country
–Industrial & retail bank
–Digital style
–New product fast track
• Today
–3rd largest Bank in Russia
–Industrial focused bank
–Boutique style bank, brick &
mortar offices
–Long time2market

20. Main challenges
• More than 200 backend systems
• Peer2peer and host2host
integrations
• Different protocols
• Different SLA
• Not unified processes
• Security
• Statistics
• And more…
Growing strategy is partner ship

21. API for us is …

22. • Do it ourselves
• APIgee
• IBM API Connect
• Mulesoft
Decision for API Connect
We evaluated….

23. Why API Connect
• We use full stack of IBM technologies
• Enterprise ready solution
• Flexible
• Fast time2market, we have launch production in 6
month

24. • Now almost modern digital services and partners running
over API Platform.
• Time2Market is reducing dramatically
• API platform become fintech and startup HUB for the Bank
• API platform as a point internal integration. Too many old
system in bank and reintegration via API adapters is much
faster and easy. Also much safety to replacement old
system
Up to now

25. Questions
Peter Brabec
API & DataPower
Business Unit Leader
IBM Europe
Mobile: +43 664 618 67 06
Brabec.peter@at.ibm.com

26. Thank you!
© 2018 IBM Corporation