Software package “Corporate Internet banking”

Software package "Corporate Internet Banking" (hereinafter referred to as PC "CIB") - is intended for remote servicing of Clients - legal entities via the Internet. Bank clients are given the opportunity to manage their accounts in real time, make payments, receive statements of their accounts, information on the presence of unpaid payment documents (Card Index 1, 2), on the status of export and import contracts, on the presence of blocked accounts indicating the reason for blocking and other information. Advantages Bank corporate design In contrast to the similar PC “Client-Bank” existing within the IABS, the PC “Corporate Internet Banking” is a premium product. Premium software products for remote customer service are custom-made and differ from other products in their broader functionality, flexible multilingual user interface, individually adapted for each bank, based on the bank’s own corporate design. The bank also has the opportunity to give its name to PC “CIB”. The bank's presence of remote customer service systems with its own corporate design and name distinguishes it favorably from banks that do not have such systems, emphasizing the prestige and impeccable authority of this bank. Multilingual user interface Client modules of the PC "KIB" have a multilingual user interface. The client can independently choose the interface language that is convenient for him at any time. There are specialized modules for dealing with multilingual error messages and a troubleshooting assistant to make it easier to resolve problems when errors occur. Currently supported are Russian, Uzbek Cyrillic, Uzbek Latin and English languages. Corporate customer support PC "CIB" provides geographically distributed corporate clients with functions for management and monitoring, allowing them to manage the expenses of their departments, monitor transactions on their accounts, view Card Index 1.2, the status of export-import contracts, and other information, both in consolidated form and and in terms of subordinate units. Corporate clients may have a complex structure of subordinate departments. Corporate clients can be both small organizations with several geographically distant divisions that do not have the status of a legal entity, as well as national holdings with a complex structure, which may include tens or hundreds of organizations, including large multi-branch organizations. It is possible to provide access to employees of corporate clients both for the corporation as a whole and to a limited group of subordinate organizations. Thus, it is possible to assign curators to a specific group of subordinate units, which is very important for geographically distributed holdings with hundreds of subordinate units, where different curators can be assigned for different categories of units. Corporate clients can simultaneously be subordinate departments of other corporate clients. Electronic document management system PC "Corporate Internet Banking" is a qualitatively new product with an architecture based on a client-oriented electronic document management system. The electronic document management system PC "KIB" allows you to select the required document processing route for each client, depending on the complexity of the organizational structure and in accordance with the technology adopted for processing financial documents. Various officials of the client, as well as officials of higher organizations, may participate in the process of document processing. Providing service packages Since in the CIB PC access control to functions is carried out on the basis of roles, the bank has the opportunity to offer clients a wide variety of service packages by creating new roles with different groups of functions and including their combinations in service packages. By offering each client the most convenient set of services and a suitable method of accessing services for each of its employees (Internet or mobile phone), the bank can provide the most optimal price/volume ratio of services provided individually for each client. An acceptable cost of service and the constant availability of remote bank services, regardless of the business conditions of clients, increases their loyalty. Mobile client support There is a version of the client module for smartphones, which allows the bank to provide remote services to clients via mobile communication devices, thereby ensuring the availability of banking services regardless of the location and geographical remoteness of the client. The bank's ubiquitous presence in customers' mobile communication devices allows the bank toMaintain constant contact with mobile clients, increases the efficiency of their service, regardless of the conditions of their business. Ability to work in off-line mode There is a specialized “KIB” PC software module installed on the client’s equipment to support the work of clients in off-line mode with limited access to the Internet. This module automates the entry, printing and approval of payment orders off-line, saving the results in the client’s local database. Sending ready-made packages of payment orders to the bank can be done at any time convenient for the client, provided there is a connection with the bank on at least one client computer. Functional diagram of PC “KIB” Functional capabilities of PC "KIB"

• Built-in electronic document management system, flexibly customizable to the needs of each client;
• Possibility of simultaneous entry of several payment orders;
• Ability to create payment order templates based on previously entered or newly entered payment orders;
• Ability to quickly enter payment orders using a template;
• Payment order templates can be summary, i.e. may contain several payment Orders;
• Maintaining and sending to the bank a register of employee salaries for crediting to card accounts;
• Receiving information about payment documents, account balances and turnover, existing loans, deposit agreements, export and import contracts, viewing blocked accounts indicating the reason for blocking;
• Viewing routes for passing a payment document from the client to the bank;
• Functions for downloading a register of account transactions in various formats (as a file) for loading into the client’s automated accounting system and for downloading a package of client payment orders from files downloaded from the client’s automated accounting system;
• Built-in chat for organizing online correspondence between clients and service employees at the bank’s front office;
• Support for geographically distributed corporate clients with complex organizational structures;
• Support for off-line work for clients with limited access to the Internet.

Information security User Interface Virtualization In the CIB PC, the user is given access only to virtual functional modules generated by the system dynamically, based on the functions currently available to the user, determined by the roles assigned to him. Since the functions of the CIB PC are database objects, like data, the virtualization of functional modules is performed directly in the database, which ensures a high level of security.   Role-based access to functions and data Access to functions and data is controlled through roles. Each role can be assigned access to one or more functions and reports. In turn, each user can be assigned one or more roles. Depending on the bank's security policy, new user roles may be created in the system in addition to the predefined roles. The number of user roles in the system is practically unlimited. Cryptoprotection For cryptoprotection of information in the CIB PC, external systems are used that are authorized by the Central Bank of the Russian Federation for use in banking information systems, which involve the use of electronic keys for storing certificates and keys. When a payment document is approved by a user who has an electronic key, the electronic image of the document is automatically signed by him. If the user has an electronic key, then when logging into the system, in addition to authentication by username and password, additional authentication using the electronic key is used. Protection from insiders Client passwords are stored in the KIB PC database in encrypted form. Because password encryption uses the actual password being encrypted rather than the globally stored system password, there is no way to decrypt the password without knowing the password. A feature of the encryption algorithm is that when encrypting two identical passwords, the encryption result will be different, which eliminates the possibility of calculating user passwords based on the known passwords of other users.