Design and development of one of CoCoNet’s flagship online banking products
Executive Summary
Challenge: CoCoNet’s solution caused some problems for users without company phones, and the client needed a desktop version too. Also, due to new legal requirements and small development capacities with specific expertise, CoCoNet needed a quick and flexible tech partner.
Approach: Design and development of the desktop version starting from a rough requirements specification. We worked out the specific requirements, designed system architecture, proposed technologies and security, and conducted development work and testing. The process took 5 months.
Result: CoCoNet’s bank clients can now offer their corporate customers a convenient and secure token solution to authenticate and authorise financial operations through desktops.
Services we used:
Table of Contents
About the client
The CoCoNet group develops next-generation digital banking solutions.
They develop highly-usable, innovative products that help clients stand out from the crowd.
The products empower banks and financial service providers to accelerate their digital transformation and compete in today’s rapidly changing world. The product portfolio includes solutions for digital experience and integration platforms and corporate banking. They provide a rich, interactive customer experience.
5 months
necessary to complete the project
1984
successfully operating on the market since 1984
What the client needed
CoCoNet already had developed an app-based security token to enable secure authentication and authorisation of financial transactions with a smartphone. The white-label software product is called MULTIVERSA Token for Mobile. It is available for iOS and Android smartphone.
While the easiness of the use of the mobile token solution was well-received on the market, the handling with an additional device caused problems for corporate users without company phones.
CoCoNet invented the idea of the desktop version of the MULTIVERSA Token.
New legal requirements – a two-factor authentication for all electronic payments coming into force as part of the European Commission’s Second Payment Services Directive – caused a short development time for the new product. Due to small development capacities with specific expertise, CoCoNet needed a quick and flexible partner. The project was completed in five months.
Scope of work
Our role was to design and develop the desktop version of the MULTIVERSA Token. We started with a rough requirements specification prepared by CoCoNet. We worked out specific requirements, designed the architecture of the system, proposed technologies and security measures, and did the development work and testing.
To guarantee user's safety
The token supports secure user authentication and authorisation of payments and other financial operations without any additional devices. The application for Microsoft Windows and Apple macOS fulfils the strong security requirements of PSD2 and complies with the EBICS standard. The obligatory RSA keys are safely stored on the user’s computer.
The need for other devices and security tokens, such as smartcards or RSA tokens becomes superfluous. For the bank, this means a significant simplification of logistics, and savings in terms of support and maintenance.
The application’s technical and security side has been extremely complex and demanding. The technologies we chose included Electron (the app was written using React with TypeScript) and a number of cryptographic algorithms.
We have had the pleasure to work with an excellent team that helped us implement the security solution along our product suite. Future Processing was able to help us on a technical field where we lack experience and we can recommend such a collaboration for companies in a similar situation.
Main benefits of our partnership
We served as software development partners and technical experts who reacted quickly and flexibly to the short timeline and the strong requirements.
CoCoNet’s bank clients can now offer their corporate customers a convenient and secure token solution to authenticate and authorise financial operations through desktops.
The solution was developed in accordance with the latest security requirements.
Technologies used in the project
