bb discovery report-updated

BANGLADESH BANK NATIONAL PAYMENT SWITCH PROJECT

DISCOVERY REPORT - Updated

11TH DECEMBER 2012

SHARED BY

PROJECT MANAGEMENT OFFICE

NATIONAL PAYMENT SWITCH PROJECT BANGLADESH BANK

HEAD OFFICE, DHAKA www.bb.org.bd

National Payment Switch Bangladesh (NPSB)

2 Private and Confidential

Confidentiality Agreement

This document has been prepared for the use of Commercial Banks in Bangladesh which are providing Card

Services and intended to join in the National Payment Switch project run by the Bangladesh Bank.



Contents Introduction ............................................................................................................................................... 9

Scope ...................................................................................................................................................... 9

Interfaces ................................................................................................................................................... 9

Licensed Modules ...................................................................................................................................... 9

Fields Notation ........................................................................................................................................ 11

Requirements Notation ....................................................................................................................................... 11

Configuration ........................................................................................................................................... 12

REQC0001 - Country ............................................................................................................................................ 12

REQC0002 - Language .......................................................................................................................................... 12

REQC0003 Currency (for settlement) ................................................................................................................ 12

REQC0004 -Business Calendar ............................................................................................................................. 12

REQC0005 -Time Zone ......................................................................................................................................... 13

REQC0006.1 BANKS CHANNEL .......................................................................................................................... 13

REQC0006.2 PAD CHANNEL .............................................................................................................................. 13

REQC0006.3 VISA CHANNEL ............................................................................................................................. 14

REQC0006.4 MASTERCARD CHANNEL .............................................................................................................. 14

REQC0006.5 AMEX CHANNEL ........................................................................................................................... 14

Transaction types .................................................................................................................................... 15

REQC0007 TRANSACTION TYPES ...................................................................................................................... 15

Transaction Flow Diagrams ..................................................................................................................... 17

Over the Counter Funds Transfer ..................................................................................................................... 17

ATM Funds Transfer (ATMFT01) ....................................................................................................................... 19



ATM Cash Withdrawal ...................................................................................................................................... 25

ATM Cash Deposit ............................................................................................................................................. 27



ATM Mini Statement ........................................................................................................................................ 29

ATM Balance Inquiry ......................................................................................................................................... 31

ATM Bill Payment (ATMBP01) .......................................................................................................................... 33

ATM Bill Payment (ATMBP02) .......................................................................................................................... 35

POS Cash Advance ............................................................................................................................................ 37

POS Bill Payment ............................................................................................................................................... 39

POS Retail Purchase .......................................................................................................................................... 41

Kiosk Funds Transfer (KIOSKFT01) .................................................................................................................... 43



Kiosk Mini Statement ........................................................................................................................................ 49

Kiosk Balance Inquiry ........................................................................................................................................ 51

Kiosk Bill Payment (KIOSKBP01) ........................................................................................................................ 53


Mobile Banking Funds Transfer ........................................................................................................................ 57

Mobile Banking Bill Payment ............................................................................................................................ 59

Mobile Banking Retail Purchase ....................................................................................................................... 61

eCommerce Bill Payment .................................................................................................................................. 63

eCommerce Retail Purchase ............................................................................................................................. 64

Internet Banking Funds Transfer ...................................................................................................................... 66

Internet Banking Bill Payment .......................................................................................................................... 68

PAD Payment ....................................................................................................................................................... 70

ISO8583 REVERSAL ADVICE MESSAGE FOR NPSB .................................................................................. 72

ATM Funds Transfer (ATMFT01) Reversal ........................................................................................................... 72

ATM Bill Payment (ATMBP02) Reversal ............................................................................................................... 74

POS Cash Advance Reversal ................................................................................................................................. 75

POS Bill Payment Reversal ................................................................................................................................... 76



POS Retail Purchase Reversal .............................................................................................................................. 77

Kiosk Funds Transfer (KIOSKFT01) Reversal......................................................................................................... 78

Kiosk Bill Payment (KIOSKBP02) Reversal ............................................................................................................ 79

e-Commerce Bill Payment Reversal ..................................................................................................................... 80

e-Commerce Retail Purchase Reversal ................................................................................................................ 81

REQC0008 PCI DSS Compliance ........................................................................................................................ 82

REQC0009 Security ........................................................................................................................................... 83

Enhancements ......................................................................................................................................... 85

REQE0001 Fee Calculation (for Settlement Report) .......................................................................................... 85

Interfaces ................................................................................................................................................. 87

ISO 8583 common requirements: ........................................................................................................... 87

REQ10001 Banks Host to Host ........................................................................................................................... 89

REQ10002IPS Host to Host ................................................................................................................................ 89

REQ10003PAD Host to Host .............................................................................................................................. 89

REQ10004Core Banking System Batch .............................................................................................................. 90

Reports .................................................................................................................................................... 91

REQR0001 Core Banking Settlement Report ..................................................................................................... 91

REQR0002Member Bank Settlement Report .................................................................................................... 91

Dispute Management .............................................................................................................................. 93

File Layout ............................................................................................................................................................ 95

File Header Message Layout ................................................................................................................................ 95

Document Message Layout ................................................................................................................................. 95

File Trailer Message ............................................................................................................................................. 98

Dispute Message Codes ....................................................................................................................................... 98

FIELD CONDITION ISO8583 MESSAGE FOR NPSB .................................................................................. 103

Internal Bank (OTC) Funds Transfer ................................................................................................................... 103

ATM Funds Transfer (ATMFT01) ........................................................................................................................ 105



ATM Funds Transfer (ATMFT01) Reversal ......................................................................................................... 107


ATM Mini Statement ......................................................................................................................................... 114

ATM Balance Inquiry .......................................................................................................................................... 115

ATM Bill Payment (ATMBP01) ........................................................................................................................... 117


ATM Bill Payment (ATMBP02) Reversal ............................................................................................................. 120

POS Cash Advance ............................................................................................................................................. 121

POS Cash Advance Reversal ............................................................................................................................... 122

POS Bill Payment................................................................................................................................................ 123

POS Bill Payment Reversal ................................................................................................................................. 125

POS Retail Purchase ........................................................................................................................................... 126

POS Retail Purchase Reversal ............................................................................................................................ 128

Kiosk Funds Transfer (KIOSKFT01) ..................................................................................................................... 129

Kiosk Funds Transfer (KIOSKFT01) Reversal....................................................................................................... 131



Kiosk Mini Statement ......................................................................................................................................... 135

Kiosk Balance Inquiry ......................................................................................................................................... 136



Kiosk Bill Payment (KIOSKBP02) Reversal .......................................................................................................... 141

Mobile Banking Funds Transfer ......................................................................................................................... 142

Mobile Banking Bill Payment ............................................................................................................................. 143

Mobile Banking Retail Purchase ........................................................................................................................ 144

e-Commerce Bill Payment ................................................................................................................................. 145

e-Commerce Bill Payment Reversal ................................................................................................................... 147



e-Commerce Retail Purchase ............................................................................................................................. 148

e-Commerce Retail Purchase Reversal .............................................................................................................. 150

Internet Banking Funds Transfer ....................................................................................................................... 151

Internet Banking Bill Payment ........................................................................................................................... 152

DETAILED ISO8583 MESSAGE SPECIFICATIONS FOR NPSB .................................................................... 153

Internal Bank (OTC) Funds Transfer ................................................................................................................... 153




ATM Cash Withdrawal ....................................................................................................................................... 158

ATM Cash Deposit.............................................................................................................................................. 159

ATM Mini Statement ......................................................................................................................................... 160

DE125 Supporting Information .......................................................................................................................... 161

ATM Balance Inquiry .......................................................................................................................................... 162



POS Cash Advance ............................................................................................................................................. 165

POS Bill Payment................................................................................................................................................ 166

POS Retail Purchase ........................................................................................................................................... 168



Kiosk Mini Statement ......................................................................................................................................... 172

Kiosk Balance Inquiry ......................................................................................................................................... 174



Mobile Banking Funds Transfer ......................................................................................................................... 178

Mobile Banking Bill Payment ............................................................................................................................. 179



Mobile Banking Retail Purchase ........................................................................................................................ 180

e-Commerce Retail Purchase ............................................................................................................................. 183

Internet Banking Funds Transfer ....................................................................................................................... 185

Internet Banking Bill Payment ........................................................................................................................... 186



Introduction As the part of Central Bank Strengthening Project, National Payment Switch (NPSB) will be implemented for

Bangladesh Bank to monitor all inter-bank transactions and in order to connect all local commercial banks.

Scope Infotech has chosen a payment switch system to be implemented at Bangladesh Bank to meet the requirements of

Bangladesh Bank.These requirements were finalized in a series of meetings with Bangladesh Bank and

representatives from the Commercial Banks in Bangladesh such as

Dutch-Bangla Bank Limited (DBBL) BRAC Bank Limited Islami Bank Bangladesh

Standard Chartered Bank The City Bank AB Bank

Q-Cash (ITCL) Cash-Link Rupali Bank

Standard Bank Limited

These meetings spanned from May 2012 to September 2012. This document contains the finalized version of the

NPSB requirements based on input from all the stakeholders involved and represents the requirements locked

down for implementation in NPSB. For the purpose of this project, a Standard Host to Host module will be

configured based on the requirements defined by Bangladesh Bank. All required configuration and enhancements

required for the deployment of this product are outlined within this report.

Any subsequent changes to the system will be handled through the Change Request process. The associated time

and effort involved to accommodate the Change Request will be estimated and submitted to Bangladesh Bank for

approval prior to being incorporated into the system.

Interfaces Within the scope of this project, the WAY4 system will interface directly with the following systems:

Fifteen local commercial banks and two local switches (Q-Cash and CashLink) configured to seventeen (17) financial institutions

Core banking system PAD ePayment Gateway VISA MasterCard American Express

Licensed Modules The following modules will be included in the delivery of the proposed system:



WAY4TM Core

WAY4TM Accounting

WAY4TM Job Scheduler

WAY4TM specific job types

WAY4TM Housekeeping

archiving rules specific to WAY4 DB schema

WAY4TM Multiple Financial Institutions

15 participating banks, 2 local switches ( QCash and CashLink), are configured into 17 financial institution.

WAY4TM Core Banking Batch Interface

WAY4 TM Standard CBS Batch File Format

2 WAY4TM Host to Host Online Interfaces

with e-Payment Gateway of Public Accounts Department (WAY4 Standard ISO8583,

Bidirectional, TCP/IP, basic message set)

to seventeen (17) financial institutions (WAY4 Standard ISO8583, Bidirectional, TCP/IP, basic

message set)

2 WAY4TM Third Party Batch Interfaces (FTP Reconciliation Processing)

with e-payment Gateway of Public Accounts Department (WAY4 Standard XML)

to seventeen (17)financial institutions (WAY4 Standard XML)

WAY4TM VISA Interface

includes Authorization (VIP), Clearing & Settlement (BASE II)

WAY4TM MasterCard Interface

includes Authorization (BankNet), Clearing & Settlement (IPM)

WAY4TM American Express Interface

includes Authorization (GNS), Clearing & Settlement (GNS)



Fields Notation Ref Description

N Numeric digits 0 through 9

AN Alphabetic and Special Characters

DT Date + Format in field description

B Binary representation of data

NVAR Variable length data up to nn characters. There will be two or three character length (depending upon whether maximum data length is 99 or 999) at the beginning of the element to identify the number of positions following to the end of the data element

M Mandatory

O Optional

C Conditional

MR Copy from request

CR Copy if present in request

Requirements Notation The following notation is used for identifying the requirements:

REQI000X Interface

REQC000X Configuration

REQE000X Enhancement

REQR000X Report

REQHS Hardware/Software



Configuration

COUNTRY

REQC0001 - Country

Introduction & Business Requirements The country is Bangladesh.

LANGUAGE

REQC0002 - Language

Introduction & Business Requirements All WAY4 standard forms and applications are in English.

CURRENCY

REQC0003 Currency (for settlement)

Introduction & Business Requirements Required currency is Bangladeshi Taka.

ISO4217 currency codes are:

Description: Bangladeshi Taka.

Alphabet: BDT.

Numeric: 050.

Local currency code is BDT, which represents Taka.

BUSINESS CALENDAR

REQC0004 -Business Calendar

Introduction & Business Requirements Online availability:

On 24 hours by 7 days a week basis.



End of Day Batch processing:

Every calendar day.

The above requirements are for supporting:

the 24 by 7 business operations hours, and

Online transactions, of ATM, POS, Internet Banking, e-commerce, and Mobile Banking.

TIME ZONE

REQC0005 -Time Zone

Introduction & Business Requirements Bangladesh time (GMT +6 hours).

CHANNELS

REQC0006.1 BANKS CHANNEL

Business Requirement To support inter-bank transactions through National Payment System and have the ability to forward

authorizations which will be routed to the issuer bank.

Technical Details The online transaction message will be using ISO 8583 version 1987. The specification of the transaction message

will be referred to WAY4 standard basic host to host documentation Basic_Host_To_Host_1_15.pdfand in the

Section Detailed IS0 8583 Message Specifications for NPSB of this document.

The transaction flow diagramsare listed below in this document.

REQC0006.2 PAD CHANNEL

Business Requirement To support all government e-payment transactions based on government account codes from PAD system through

National Payment System and to have the ability to forward authorizations to the issuer bank.




will be referred to WAY4 standard basic host to host documentation Basic_Host_To_Host_1_15.pdfand in the

Section Detailed IS0 8583 Message Specifications for NPSB of this document.

REQC0006.3 VISA CHANNEL

Business Requirement WAY4 needs to be able to support International transactions that coming or going to VISA network.


will be referred to WAY4 standard basic host to host documentation Basic_Host_To_Host_1_15.pdf

REQC0006.4 MASTERCARD CHANNEL

Business Requirement WAY4 needs to be able to support International transactions that coming or going to MasterCard network.



REQC0006.5 AMEX CHANNEL

Business Requirement WAY4 needs to be able to support International transactions that coming or going to AMEX network.





Transaction types

REQC0007 TRANSACTION TYPES

Business Requirement Bangladesh Bank NPS will be acting as the forwarder institution for domestic and international (through IPS)

transaction. Communication between the Banks will be performed using ISO 8583 version 1987 and all of the

transactions flows will use Single Message format.

Technical Specifications The following transaction types are allowed for any card of commercial banks in Bangladesh Bank NPS:

Inte

rban

k Fu

nds T

rans

fer

Inte

rban

k Ca

sh W

ithdr

awal

Inte

rban

k Ca

sh D

epos

it

Min

i sta

tem

ent

Bala

nce

Enqu

iry

Bill

Paym

ent

Reta

il Pu

rcha

se (M

erch

ant P

aym

ent)

Bank internal (over the counter,

standing order)

ATM

POS **

Kiosk

m-Commerce * * *

e-Commerce (Thru Merchant

Website)

^

e-Commerce (Thru own Banks

web-site (of Banks offering web-

banking))

# #

** This is for the scenario where a customer goes to a Billing Companys Agent, pays their bill via cash, and the Agent then makes the payment via their own card via POS terminal



^ Payment at Merchants Web-site could be via Card or Bank Account number. *The host has to fill the F2 (PAN) in the ISO8583 message. The F2 value can be using related real card number or combination of given BIN from Bangladesh Bank and mobile account number. #The host has to fill the F2 (PAN) in the ISO8583 message. The F2 value will be using the real card number or virtual card number with the same BIN given by the Bank owner.



Transaction Flow Diagrams

Over the Counter Funds Transfer

Specific ISO Field Message DE03 Processing Code

Format FIXED Value n Length 6 Coding BCD

Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '28' Cardholder Payment Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account



Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account DE122 Additional Record Data

Format HLLVAR n Length 0..99 Coding ASCII Value OTCFT



ATM Funds Transfer (ATMFT01)



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '10'Card-holder Account Transfer Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account

Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to which an account transfer is made).



Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account DE122 Additional Record Data

Format HLLVAR n Length 0..99 Coding ASCII Value ATMFT01






Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '28' Card-holder Account Transfer Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to which an account transfer is made).



Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account

DE122 Additional Record Data







Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '10' Card-holder Account Transfer Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type towhichan account transfer is made).




DE100 Receiving Institution Identification Code

Format HLVAR n Length ..11 Coding BCD Value Beneficiary banks code (numeric)

DE103 Account Identification Code-2 (to-account)

Format HLVAR n Length 0..99 Coding ASCII Value Target of the transferred account (numeric)





ATM Cash Withdrawal



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '01' Cash Withdrawal Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to whichan account transfer is made). Possible values are:



'00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account DE122 Additional Record Data

Format HLLVAR n Length 0..99 Coding ASCII Value ATMCW



ATM Cash Deposit

Specific ISO Field Message

DE03 Processing Code


Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '28' Cash Deposit Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhich an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account typetowhich an account transfer is made).




Format HLLVAR n Length 0..99 Coding ASCII Value ATMCD



ATM Mini Statement

Specific ISO Field Message

DE03 Processing Code


Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '30' Mini Statement Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhich an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account typetowhich an account transfer is made).




Format HLLVAR n Length 0..99 Coding ASCII Value ATMMS



ATM Balance Inquiry



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '30' Balance Inquiry Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to whichan account transfer is made).



ATM Bill Payment (ATMBP01)



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '00' Retail goods and service Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For



domestic account transfers, a two-digit code identifying the account type to whichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account

DE100 Receiving Institution Identification Code

Format HLVAR n Length ..11 Coding BCD Value Biller banks code (numeric)


Format HLVAR n Length 0..99 Coding ASCII Value Target of the billing account (numeric)


Format HLLVAR n Length 0..99 Coding ASCII Value ATMBP01



ATM Bill Payment (ATMBP02)



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '00' Retail goods and service Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to whichan account transfer is made). Possible values are:



'00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account


Format HLLVAR n Length 0..99 Coding ASCII Value ATMBP02



POS Cash Advance



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '01' Cash Advance Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to whichan account transfer is made). Possible values are:



'00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account DE122 Additional Record Data

Format HLLVAR n Length 0..99 Coding ASCII Value POSCA



POS Bill Payment



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '00' Retail goods and service Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to whichan account transfer is made). Possible values are: '00' Default Account



'10' Savings Account '20' Checking Account '30' Credit Card Account DE122 Additional Record Data

Format HLLVAR n Length 0..99 Coding ASCII Value POSBP



POS Retail Purchase



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '00' Retail goods and service Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account fromwhichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account



Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to whichan account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account DE122 Additional Record Data

Format HLLVAR n Length 0..99 Coding ASCII Value POSBR



Kiosk Funds Transfer (KIOSKFT01)



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '10' Card-holder Debit Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to which an account transfer is made).





Format HLLVAR n Length 0..99 Coding ASCII Value KIOSKFT01






Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '28' Card-holder Payment Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account




Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account DE100 Receiving Institution Identification Code











Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '10' Card-holder Debit Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account




Kiosk Mini Statement



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '30'MiniStatement Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account





Format HLLVAR n Length 0..99 Coding ASCII Value KIOSKMS



Kiosk Balance Inquiry



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '30' Balance Inquiry Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account





Format HLLVAR n Length 0..99 Coding ASCII Value KIOSKBI



Kiosk Bill Payment (KIOSKBP01)



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '00' Retail goods and service Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account









Format HLLVAR n Length 0..99 Coding ASCII Value KIOSKBP01



Kiosk Bill Payment (KIOSKBP02)




Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For



domestic account transfers, a two-digit code identifying the account type to which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account


Format HLLVAR n Length 0..99 Coding ASCII Value KIOSKBP02



Mobile Banking Funds Transfer



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '28' Card-holder Account Transfer Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account









Format HLLVAR n Length 0..99 Coding ASCII Value MBFT



Mobile Banking Bill Payment












Format HLLVAR n Length 0..99 Coding ASCII Value MBBP



Mobile Banking Retail Purchase












Format HLLVAR n Length 0..99 Coding ASCII Value MBR



eCommerce Bill Payment



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '00' Retail Goods and Service Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account





DE47 WAY4 Proprietary Field

Format HLLVAR n Length 0..999 Coding ASCII Value 914003


Format HLLVAR n Length 0..99 Coding ASCII Value ECBP

eCommerce Retail Purchase






Positions 56, Account Type (To): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, a two-digit code identifying the account type to which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account




Format HLLVAR n Length 0..99 Coding ASCII Value ECR



Internet Banking Funds Transfer



Coding that identifies (1) the cardholder transaction type and (2) the cardholder account types, if any, affected by the transaction. This is a fixed-length field for three data elements, as follows. Positions 12, Transaction Type: A two-digit code identifying the cardholder transaction type or the processing center function being processed. Possible values are: '28' Card-holder Payment Positions 34, Account Type (From): A two-digit code identifying the account type affected by this transaction. (For domestic account transfers, the account from which an account transfer is made). Possible values are: '00' Default Account '10' Savings Account '20' Checking Account '30' Credit Card Account









Format HLLVAR n Length 0..99 Coding ASCII Value IBFT



Internet Banking Bill Payment












Format HLLVAR n Length 0..99 Coding ASCII Value IBBP



PAD Payment











Format HLLVAR n Length 0..99 Coding ASCII Value Government Account Code



ISO8583 REVERSAL ADVICE MESSAGE FOR NPSB

This section contains the flow diagram of ISO8583 Reversal Advice Message for some particular

transactions in NPSB.

ATM Funds Transfer (ATMFT01) Reversal



ATM Cash Withdrawal Reversal



ATM Bill Payment (ATMBP02) Reversal



POS Cash Advance Reversal



POS Bill Payment Reversal



POS Retail Purchase Reversal



Kiosk Funds Transfer (KIOSKFT01) Reversal



Kiosk Bill Payment (KIOSKBP02) Reversal



e-Commerce Bill Payment Reversal



e-Commerce Retail Purchase Reversal



PCI DSS COMPLIANCE

REQC0008 PCI DSS Compliance

Business Requirement Bangladesh Bank requires that the systemshould be fully compliant with the PCI-DSS security rules and

requirements standards.

Technical Details WAY4 is fully certified for PA-DSS Payment Application Data Security Standards. This certification will be helpful

when Bangladesh Bank will be passing their PCI DSS audit. PA-DSS consolidates the most effective and time-proven

security policies of the major international payment systems MasterCard, Visa, AMEX, Discover, and JCB. The

goal of PA-DSS is to help software vendors and others develop secure payment applications that do not store

prohibited data, such as full magnetic stripe, CVV2 or PIN data, and ensure their payment applications support

compliance with the PCI DSS. Payment applications that are sold, distributed or licensed to third parties are subject

to the PA-DSS requirements.



SECURITY

REQC0009 Security

Business Requirements Bangladesh Bank requires user management to be implemented in WAY4 Application to be able to manage and

track user activity.

Audit of the actions should be implemented and be accessible by the administrator for investigation if required.

According to PCI-DSS all sensitive data in the database should be encrypted.

All Keys stored in WAY4 should be encrypted with LMK of Security Devices.

Technical Details Standard Oracle security solutions will be used, such as:

Oracle Advanced Security

All operations with security values and keys are performed using appropriated security devices certified by IPS.

User Management The system provides the capability to manage access to the WAY4 objects and information. It includes:

Users and User Groups of WAY4

Individual menu per User Group

Several levels of Users Group types (Clerk, Administrator, Auditor)

WAY4 uses Oracle mechanisms to grant access to the Users and Groups. Every User registered in WAY4 client

application is automatically registered as Oracle User in DB. All necessary grants are granted through Oracle Roles

and privileges.

Trace and Audit WAY4 provides the following capabilities for Trace and Auditing:

Amendment History every manual change of data to WAY4 tables including changes initiated through a batch interface or web service, is recorded with the following additional information:

o User who did the change o Timestamp the change was done o Workstation that was used to make the change

Process Log every process start and stop timestamps are recorded

Process Log for Screen Forms access every access to Screen Form can be recorded in Process Log

Login History every login of the users is recorded



Channel Monitor every channel status change (e.g. connected, disconnected, sign-on) is recorded

When the user changes any field value in the database, WAY4 saves the changed record in the database with a flag

indicating that it is the currently active record (amendment status 'Active'), while at the same time creating

another record in the database with the previous values of the record with a flag indicating that record is currently

not active (amendment status 'Inactive').

When user deletes a record from database, WAY4 does not physically delete the record from database, but marks

it with a flag indicating that this record has been deleted (amendment status 'Closed').

This gives the administrator full amendment history of particular record in database and helps in tracking who

changed a particular field, what was changed and when the change was done.

Connection Management WAY4 Manager Client application uses Oracle JDBC driver to connect to Oracle Database. In order to secure

connection itself Oracle Advanced Security is used.

WAY4 also provides a feature which allows users (who are also oracle users) to connect using WAY4 Manager

Application only, in this case the users will not be able to connect to the Oracle database using other tools. A

special parameter will be specified in WAY4 in order to keep password in a special format which does not allows

connection from other application like SQL+, TOAD, PL/SQL Developer etc.



Enhancements

FEE CALCULATION (FOR SETTLEMENT REPORT)

REQE0001 Fee Calculation (for Settlement Report)

Business Requirement Bangladesh Bank requires that WAY4 supports the fee calculation based on the source channel and transaction

type. WAY4 will calculate the fee each time the settlement report for the Core Banking System is being generated.

Technical Details

Fee Structure Below is the table of fee structure parameters for each of transactions on their respecting channel. The fees value

will be based on the transaction amount multiplied with the fee parameters value.

SN Transaction type Cardholder Merchant Beneficiary Issuer Acquirer Beneficiary NPSB

1 OTC, FT+BP (Iss+Acq) -1 - 0 0 0.8 0 0.2

2 ATM, FT (Acq+Ben) -1 - 0 0 0.8 0 0.2

3 ATM, FT (Iss+Acq) -1 - 0 0 0.8 0 0.2

4 ATM, FT (Iss+Ben) -1 - 0 0 0.8 0 0.2

5 ATM Cash Withdrawal -1 - - 0 0.8 - 0.2

6 ATM Cash Deposit -1 - - 0 0.8 - 0.2

7 ATM Mini-statement -1 - - 0 0.67 - 0.33

8 ATM Balance Enq 0 - - 0 0 - 0

9 ATM BP (Iss+Acq) -1 - 0 0 0.8 0 0.2

10 ATM BP (Acq) -1 - 0 0 0.8 0 0.2

11 ATM BP (Acq+Ben) -1 - 0 0 0.8 0 0.2

12 POS Cash Withdrawal -1 - - 0 0.8 - 0.2

13 POS Retail 0 2.00% - 0.50% 1.00% - 0.50%

14 Kiosk, FT (Acq+Ben) -1 - 0 0 0.8 0 0.2

15 Kiosk, FT (Iss+Acq) -1 - 0 0 0.8 0 0.2

16 Kiosk, FT (Iss+Ben) -1 - 0 0 0.8 0 0.2

17 Kiosk Mini-statement -1 - - 0 0.67 - 0.33

18 Kiosk Balance Enq 0 - - 0 0 - 0

19 Kiosk, BP (Iss+Acq) -1 - 0 0 0.8 0 0.2

20 Kiosk, BP (Acq) -1 - 0 0 0.8 0 0.2



SN Transaction type Cardholder Merchant Beneficiary Issuer Acquirer Beneficiary NPSB

21 Kiosk, BP (Acq+Ben) -1 - 0 0 0.8 0 0.2

22 m-Comm FT -1 - 0 0 0.7 0 0.3

23 m-Comm BP -1 - 0 0 0.7 0 0.3

24 m-Comm Retail 0 2.00% 0 0.50% 1.00% 0 0.50%

25 e-Comm BP -1 0 0 0 0 0.8 0.2

26 e-Comm Retail 0 3.00% - 0.75% 1.50% - 0.75%

27 IB-FT -1 0 0 0 0 0.8 0.2

28 IB-BP -1 0 0 0 0 0.8 0.2

29 PAD Payment -1 - - - - - 1

Impact Areas Core Banking Settlement Report Bank Settlement Report

Dependencies Transaction Document



Interfaces

ISO 8583 common requirements:

Message Structure The file structure is described in field structure as follow:

Message Header A 4-byte ASCII message header containing the length of the message has to be sent at the beginning of

the message. The message length would exclude the length of the header.

Message Type Identifier (MTID) Each message starts with a Message Type Identifier (MTID) which a four-digit numeric field is identifying

the message version, class, function and originator, as defined by ISO 8583. The MTID field consists of 4

ASCII coded bytes with MTID value. The online Way4 host-to-host interface uses the following values:

First digit Version Number: o 0 : ISO 8583: 1987 o 1 : ISO 8583: 1993 o 9 : Reserved for private use

Second digit Message Class: o 1 : Authorization o 2 : Financial o 3 : File Action o 4 : Reversal/Chargeback o 5 : Reconciliation o 6 : Administrative o 7 : Fee collection o 8 : Network Management

Third digit Message Function: o 0 : Request o 1 : Request Response o 2 : Advice o 3 : Advice Response o 4 : Notification

Fourth digit Transaction Originator: o 0 : Acquirer o 1 : Acquirer Repeat o 2 : Card Issuer o 3 : Card Issuer Repeat o 4 : Other o 5 : Other Repeat



Bit Maps The second component of a message is one, two or three 'bit maps' referred to as the 'Primary Bit Map',

'Secondary Bit Map' and 'Third Bit Map'. Each consists of 8 bytes and is interpreted as 64 individual bits.

For the Primary Bit Map, the bits are numbered from the left starting with 1, up to 64. Each bit signifies

the presence (1) or the absence (0) in the message of the data element associated with that particular bit,

according to its position (i.e. number) within the bit map. The Primary Bit Map must always be present.

The first bit of the bit map indicates the presence (1) or the absence (0) of the next bit map. For the

Secondary Bit Map, the bits are numbered starting with 65, up to 128. The Secondary Bit Map must be

present in a message if the message contains a data element numbered 65 or higher. For the Third Bit

Map, the bits are numbered starting with 129, up to 192. The Third Bit Map must be present in a

message if the message contains a data element numbered 129 or higher.

Data Elements

The final component of a message consists of a number of 'data elements'. Data elements may be of fixed

or variable length. No delimiters are used between data elements. Their order and presence is indexed by

the associated bit map(s). Variable length data starts with length specified, indicating the length of that

particular data element. Each data element is characterized by:

No is a running number Data Element Name is name of field Position is starting position of the field. Size is the length of the field. For example: Pos

bb discovery report-updated

Documents

banks channel

pad channel

visa channel

mastercard channel

amex channel

fields notation

requirements notation

use of commercial banks