Introduction to PSD2 Account Information

PSD2 Account Information module (PZ) provides functionality that assists the Account Information Service flows under the Berlin Group.

It consists of the following:

  • Parameter table
  • Account Consent Framework using AA
  • Account Information Service Provider (AISP) APIs and workflows

A high-level summary of the facilitated Berlin Group flow is shown below.

  1. A customer signs up to a Third Party Provider (TPP), which is an AISP that offers Account Aggregation services.
    The TPP outlines the terms and conditions of their service, including the details they will be requesting from the customer’s bank. The customer then accepts the T&Cs.
  2. In the TPP, the customer chooses the bank they want to aggregate their accounts from.
  3. The TPP sends a consent request to the customer’s chosen bank, which contains the details of the customer’s accounts and services that TPP requires access to.
  4. The bank receives the request and the following are validated:
    • eIDAS check by the API gateway
    • TPP Validation by the Payment Hub or Temenos Transact (depending on the architecture)
    The request is accepted only if all validations are successful.
  5. Based on a successful request, the bank creates a consent resource. The consent ID is used throughout the consent lifecycle.
  6. The bank provides a response to the TPP, including the consent ID and a redirect link. This is used to redirect the customers to authenticate themselves.
  7. The TPP redirects the customer to a given landing page.
  8. The customer performs Strong Customer Authentication (SCA) to prove the request is genuine (by authenticating the requesting customer). The SCA process is handled by the bank’s identity provider (IDP).
  9. After authentication, a check is done to identify whether the customer has access to the requested accounts through an online channel and whether they are PSD2 eligible.
  10. After the list of accounts is generated, the customer reviews the request at the bank, including the details of what the TPP is requesting access to. The customer can then authorise or cancel the request.
  11. Depending on the customer’s decision, a response is provided to the TPP.
    • If the customer authorises the request, the TPP can make subsequent requests for certain account information.
    • If the customer cancels the request, the TPP cannot access any customer data.
  12. The TPP uses the consent ID to request account information from the customer’s accounts.
  13. The customer can withdraw consent at any time at the TPP or their bank directly.

Configuring PSD2 Account Information

This section helps the user configure the PZ module.

Illustrating Model Parameters

Covers the high-level specifications required for the PZ module.

Parameter Description
PZ.PARAMETER
  • This application captures the categories of the accounts that are considered as available for Payment Services Directive (PSD2).
  • Category range, that is, accounts that falls under a specific category range are considered as the available account for a specific customer. The category details are captured in the AVAIL.CATEG.START and AVAIL.CATEG.END fields.
  • All the accounts can be considered as available accounts irrespective of the category and it can be defined in the DEFAULT.AVAILABLE field by marking as YES.
  • The Permissions.Check field manages the ‘channels permissions’ validations.
  • The AVAIL.AA.PROD.MODE field defines the rules for fields DEFAULT and SPECIFIC. These in-turn defines the list of products that are considered to be available for PSD2.
  • The AVAIL.AA.PROD.GRP field defines the Product Group to be considered as available under PSD2. Allows valid AA.PRODUCT.GROUP from the ACCOUNT Product Line.
  • The AVAIL.AA.PROD.ECXPT field allows valid AA.PRODUCT from the ACCOUNT Product Line (and applicable to the AA.PRODUCT.GROUP). This field can be left null to identify that no exceptions are defined.

Illustrating Model Products

PSD2 of the European Union and the Open Banking Implementation Entity (OBIE) have introduced the Third Party Provider services and as a result the customers can able to sign-up for account aggregation services from regulated TPPs. TPP can act as Account Information Service Provider (AISP), Payment Initiation Service Provider (PISP) and Payment Instrument Issuing Service Providers (PIISP).

Copyright © 2020- Temenos Headquarters SA

Published on :
Wednesday, October 20, 2021 12:33:39 PM IST

Feedback
x