Glossary for Next Gen API App ATMs VERSION 1 - PUB · The ATM Industry Association (ATMIA)...

A Glossary of Terms forNext Gen API App ATMs

Produced by the ATM Industry Association

VERSION 1.0

Copyright © 2018 ATMIA | All Rights Reserved | www.atmia.com

2018-04 FOR ATMIA MEMBERS ONLY of 17

Copyright Information

Copyright © 2018 ATMIA, All Rights Reserved. For ATMIA members only.

e-mail Mike Lee, ATMIA's CEO, at [email protected]

Disclaimer

The ATM Industry Association (ATMIA) publishes this Glossary of Terms for Next Gen API App ATMs infurtherance of its non-profit and tax-exempt purposes to promote education related to next generation ATMs.ATMIA has taken reasonable measures to provide objective information and recommendations to the industrybut cannot guarantee the accuracy, completeness, efficacy, timeliness or other aspects of this publication.ATMIA cannot ensure compliance with the laws or regulations of any country and does not represent that theinformation in this publication is consistent with any particular principles, standards, or guidance of anycountry or entity. There is no effort or intention to create standards for any business activities. These bestpractices are intended to be read as recommendations only and the responsibility rests with those wishing toimplement them to ensure they do so after their own independent relevant risk assessments and in accordancewith their own regulatory frameworks. Further, neither ATMIA nor its officers, directors, members, employeesor agents shall be liable for any loss, damage or claim with respect to any activity or practice arising from anyreading of this discussion paper; all such liabilities, including direct, special, indirect or inconsequentialdamages, are expressly disclaimed. Information provided in this publication is "as is" without warranty of anykind, either express or implied, including but not limited to the implied warranties of merchantability, fitnessfor a particular purpose, or freedom from infringement. The name and marks ATM Industry Association, ATMIAand related trademarks are the property of ATMIA.

Please note this discussion paper contains confidential information and should not be leftlying around or freely copied without due care for its distribution and safekeeping.



Foreword

The Consortium for Next Generation ATMs is a global future-proofingproject aimed at implementing a ten-step plan to bring about a new APIApp model for ATMs. This process will create a new ATM ecosystem,along with some new technologies and terms. The idea of this Glossary isto standardize these “next gen” terms. At the same time, it provides anopportunity to update industry language.

The ATM industry is very diverse, made up of a wide range of advancedand emerging markets. It is beneficial to be united behind a common set ofindustry terms to prevent misunderstandings or misinterpretations. Thisstandard set of terms will also help the industry to comprehend how theAPI App model will work in practice.

Just as the acronym ATM has itself become universal and recognizablearound the world, so it is our hope that we will all use a common, clearlyunderstood set of terms when talking about next generation ATMs. Sincethis new era is just around the corner for our industry, the Glossary istimely.

Warmest regards,

Mike Lee, CEO ATMIA

April 2018



A Glossary of Next Gen Terms

A

Alerts management Rules for alerts in an Operations ManagementSystem. Alerts can indicate an error state or amore critical issue.

API Application Programming Interface. A set offunctions and procedures that enableapplications to access the features or data ofan operating system, application, or otherservice.

API management The process of overseeing applicationprogramming interfaces (APIs) in a secure,scalable environment.

API security Authenticates programs or users who areinvoking a web API. With ease of APIintegrations comes the difficult part ofensuring proper authentication (AUTHN) andauthorization (AUTHZ).

App An application, especially one which isdownloadable by a user to a mobile device. Amobile app is a computer program designedto run on a mobile device, such as aphone/tablet or watch. Mobile applicationsmay be contrasted with desktop applications,which run on desktop computers, and withweb applications, which run in mobile webbrowsers rather than directly on the mobiledevice.

App analytics Assess user engagement metrics, includingnumber of sessions, active devices, andretention. With these metrics, changes can bemade to improve engagement with the app.

App enumeration A process which tracks the use of a webbrowser and interface by an end user, fromthe input of user credentials to the domaincontroller and Local Host Cache (LHC) and thereturn of the user’s worker group preferencepolicy to the Web interface, which returns theWeb page to the Web browser.

Glossary for Next Gen API App ATMs



App loading When content is loading, informs the user thatthe app is being downloaded to the CustomerOwned Device (COD), as a blank or staticscreen may cause the user to interrupt theloading due to uncertainty about what ishappening.

App/Appliance management Manages updates to, and monitoring of,mobile apps.

App server/Appliance server A software framework that provides bothfacilities to create web applications and aserver environment to run them.

App store A digital distribution platform which allowsusers to browse and download apps.

Appliance/App update Provides the latest features or versions for thecustomer using the app.

ATM customer/ATM user A person who uses an ATM for a financialtransaction.

ATM driving ATM terminal driving for a range of processingof ATM cash and non-cash transactions. Itincludes transaction support, PIN changecapabilities, custom text and graphics, foreignlanguage screens, voice-enabled support,software distribution, and transactionreporting provided by an ATM software vendoror ATM-as-a-Service supplier. ATM drivingdoes not include first and second-line ATMmaintenance, cash replenishment,environmental control management, physicalsecurity or power related to the deployment,installation and operation of ATMs.

ATM ecosystem The complete software and hardware next genarchitecture, including the Customer OwnedDevices used to perform transactions at ATMs.

ATM ecosystem security Secures all components of the ATM ecosystemas well as the processes of transactions in theecosystem.

ATM end point The software on the ATM itself, with the lowlevel software provided by the hardwarevendor and the rest of the software stackprovided by the next gen architecture andinfrastructure.

Audio jack point The socket into which the headphones of anATM user (usually visually-challenged) mustbe inserted, so they can receive audioinstructions assisting their completion of thetransaction.

Authentication Proof of identity. Proving or showingsomething to be true, genuine or valid.Verifying the identity of a user or process.




B

Big data analysis Big data refers to data sets that are sovoluminous and complex that traditional data-processing application software is inadequateto deal with them. Big data analytics examinelarge amounts of data to uncover hiddenpatterns, correlations, and other insights. Byanalyzing large amounts of information – bothstructured and unstructured – quickly, thediagnostic capacity of a system is significantlyincreased.

Biometric identification Use of unique physical and behavioralcharacteristics, such as finger prints, irisscans, voice, etc., to identify individuals foraccess to a secure system. Various types ofbiometric identification, including finger vein,palm, face, retina, and voice, are being usedat ATMs. These tools often supplement cardand/or PIN entry rather than replace the PIN.The Fujitsu PalmSecure is particularly popularin Brazil. PalmSecure is a biometricauthentication system based on palm veinpattern recognition technology.

Business rules Rules that define or constrain some aspect ofbusiness and always resolve to either true orfalse. Business rules are intended to assertbusiness structure or to control or influencethe behavior of the business.

BVPs Business Value Propositions. A valueproposition states why a consumer should buya product or use a service. This statementconvinces a potential consumer that oneparticular product or service will add morevalue or better solve a problem than othersimilar offerings.




C

Cached apps Cached means stored. Data can bestored in the computer memory,including data and disk operations.Sometimes there is a "Clear cache"button which can wipe a cache and anysettings for an app.

Cardless A cardless ATM transaction typicallyuses a mobile phone instead of a card.The transaction is initiated andauthorized without any card beinginserted into the ATM.

Card networks Control where issued cards can beaccepted and facilitate transactionsbetween merchants and card issuers.The issuer is the bank or credit unionthat backs the card financially. Cardorganizations are sometimes alsoreferred to as payment systemsorganizations – reflecting theirincreasing interest/influence in thewider payment methods/issues. Themajor credit card networks areUnionPay, Visa, MasterCard, AmericanExpress and Discover.

Cash management Refers to a broad area of financeinvolving the collection, handling, anduse of cash.

Cash recycler ATMs which accept and recycle cash.

Consumer analysis A process by which data from customerbehavior is used to help make keybusiness decisions via marketsegmentation and predictive analytics.This information is used by businessesfor direct marketing, site selection, andcustomer relationship management.

Contactless Transactions using technologies thatallow a smart card, mobile phone, andother devices to connect wirelessly toan electronic reader, usually to effect apayment. Contactless cash withdrawalsmay use a bank card, but the card isnot inserted into a card reader.Normally, the communication betweenthe card and the ATM is made usingNear Field Communications (NFC).

Controllability “A dialogue is controllable when theuser is able to initiate and control thedirection and pace of the interactionuntil the point at which the goal hasbeen met.” [ISO 9241-110:2006]




Core platform Any hardware or software used to hostan application or service. Anapplication platform, for example,consists of hardware, an operatingsystem and coordinating programs.The platform creates a foundation thatensures object code will executesuccessfully.

CRM Customer Relationship Management.

Customer Owned Devices (CODs)* Customer devices, such assmartphones, tablets and laptops,which can be used for transactions infinancial services.

*Also known as Consumer OperatedDevices (CODs).

D

DCC Dynamic Currency Conversion at ATMs.A process whereby the amount of acard transaction is converted at anATM to another foreign currency.

Deployer Owner or operator of ATMs, whether abank or independent ATM operator.

Deployer custom interface The front-facing, visual part of acomputer application or operatingsystem through which a user interactswith a computer or software. Theinterface determines how commandsare given to the computer or theprogram and how information isdisplayed on the screen.

Device firmware A software program permanentlyetched into a hardware device, such askeyboards, hard drive, BIOS, or videocards. Firmware is typically stored inthe flash ROM (read only memory) of ahardware device.

Device hardware All the physical components of acomputer or electronic system ortechnology, including the computercase, monitor, keyboard, and mouse.It also includes all the parts inside thecomputer case, such as the hard diskdrive, motherboard, video card, andothers.

Device monitoring A system for displaying indicators ofperformance to assist with managing adevice.




E

End User Customer/consumer using an ATM.

EPP Encrypting PIN pad (See also PIN pad).

F

Fascia Front panel of the ATM, includingmonitor.

FDKs Function Definition Keys; functionkeys.

Financial institution (FI) Banks, credit unions, and othercompanies engaged in the business ofdealing with monetary transactions,such as deposits, loans, investments,and currency exchange.

Flash Adobe multimedia software.

Fleet management and inventory Fleet management software enablessupervision of specific tasks in themanagement of any or all aspectsrelating to a fleet of vehicles,machines, devices, etc. Inventorymanagement is the supervision ofassets (inventory) and stock items. Acomponent of supply chainmanagement, inventory managementsupervises the flow of goods frommanufacturers to warehouses and fromthese facilities to point of sale.

G

GUI Graphical User Interface.

H

Haptic The creation of physical sensations orfeedback when using a touchscreenthat assists navigation of thetransaction by the visually-challenged.

Hardware-specific software components Software components withdependencies on the devices they helpto operate and which require specifichardware configurations.

HTML Hyper Text Markup Language.




I

IAD Independent ATM Deployer. Non-bankoperators/owners of ATMs deployingATMs as a business.

Identification Proof of identity (see Authentication).

Infrastructure The physical and organizationalstructures, facilities and technologiesneeded for the operation of anenterprise or a system.

Infrastructure monitoring Systems and processes which providemanagement the data on the status ofthe infrastructure and have thecapability to quantify progress towardsorganizational objectives.

Infrastructure management (IM) The management of essentialoperational components, from policiesand processes to equipment, data,human resources, and externalcontacts. Its purpose is to maintainoverall effectiveness.

Intelligent deposit ATM function and capability ofaccepting and recognizing cash orchecks.

ISO9564 International standard for PINmanagement and security.

Issuers The banks or financial institutionswhich back a bank card financially,approving card applications, settingtheir terms, paying for transactions onbehalf of the cardholder, collectingpayments from the cardholder, etc.

J

JavaScript A high-level, leading programminglanguage (often abbreviated as JS).APIs can be written in JavaScript code(see API).

Journal collection Retrieving the ATM's electronic journal(EJ) history and log, usually remotely.Journals include customer transactionrecords and the internal record journalused to track daily ATM activity.




L

Legacy protocol A legacy network is the generic nameassigned to any old network, mostlyproprietary to individual vendors.Legacy protocol typically refers to anetwork protocol other than IP(TCP/IP). An important computerprotocol is Open SystemsInterconnection (OSI), a set ofguidelines for implementing networkingcommunications between computers.Among the most important sets ofInternet protocols are TCP/IP, HTTPS,SMTP, and DNS.

M

Machine learning Another term for artificial intelligence(AI). Machine learning is an applicationof AI that provides systems the abilityto automatically learn and improvefrom experience without beingexplicitly programmed. Machinelearning focuses on the development ofcomputer programs that can accessdata and use it to learn for themselves.

Manufacturers/Suppliers of ATMs Companies like NCR, Diebold-Nixdorf,GRG, Nautilus Hyosung, and others,which make or produce ATM machines,including producers of operatingsoftware.

Multi-touch Ability of touchscreen displays toregister three or more distinct positionsof input touches simultaneously.

Multi-vendor software ATM application which can run onseveral makes of ATM hardware (seeVendor-agnostic).




N

Networks Most ATMs are connected to interbanknetworks, enabling people to withdrawand deposit money from machines notbelonging to the bank where they havetheir accounts or in the countrieswhere their accounts are held, e.g.,NYCE, PULSE, PLUS, Cirrus, LINKInterchange Network, Interswitch, andSIBS.

Network gateway A node (router) in a computer network,a key stopping point for data on itsway to or from other networks. TheInternet depends on gateways for theexchange of data. A payment gatewayis a merchant service provided by ane-commerce application serviceprovider that authorizes card or directpayments processing.

Next Gen ATM ATMs operating within an architecturalecosystem based on an API App model.

NFC Near Field Communication. A short-range wireless connectivity standard(Ecma-340, ISO/IEC 18092) that usesmagnetic field induction to enablecommunication between devices whenthey're touched together or broughtwithin a few centimeters of each other.

NFC mobile devices Mobiles which are NFC-capable.




O

On us transaction A transaction destined for the bankthat owns that particular host. (Thehost determines whether the messageis an "on us" or "off us" transaction.)The host then checks the amount ofcash requested, confirms whether thecustomer has the money, and thenauthorizes or denies the transaction.An on us transaction is initiated by anown-bank customer.

Off us transaction A transaction which is possible whenthe acquirer and the issuer aredifferent but have interoperablesystems. An off us transaction isinitiated by a non-own-bank customer.

Operators Banks or independents who ownand/or deploy ATMs.

Operating environments for ATMs Range of locations used as sites forinstalling and operating ATMs.

OS Operating system, for example, W7,WinCE or W10.

OS kernel The central part of an operatingsystem. It manages the operations ofthe computer and the hardware - mostnotably memory and CPU time. Thereare two types of kernels: Amicrokernel, which only contains basicfunctionality, and a monolithic kernel,which contains many device drivers.

OTP One Time Password.




P

PCI Payments Cards Industry.

PIN pad Device for entering a user’s PIN (seeEPP).

PIN pad layout Arrangement or structure of the PINpad.

POS Point of Sale. The place/device atwhich a retail transaction is carriedout.

Pre-staging Setting up an ATM transaction on amobile phone or other device prior toreaching the ATM.

Proprietary Interface – Vendor Specific A proprietary application programminginterface (API). A software libraryinterface specific to one device or,more likely, to a number of deviceswithin a particular manufacturer'sproduct range.

PTS PIN Transaction Security.

R

Remote Key Loading The process of distributing the terminalmaster key from a centraladministration point to the EncryptedPIN Pad (EPP) or PIN Entry Device

(PED). Installs asymmetric encryption

keys into a remotely-located devicefrom a central administrative site. Afteran ATM is in operation, new keys canbe installed as needed by sendingthem enciphered under a KeyEncryption Key (KEK) installedpreviously.

Reporting An application or program whichgathers all the transaction data fromdifferent ATM machines, such as ATMavailability, transaction types andvolume, on-us and not on-ustransactions, and average withdrawalamounts, to allow management to viewthe information in a readily-availableformat. Much of the reportedinformation comes from data in thetransaction log.




S

Scroll To cause displayed text or graphics tomove up, down or across the screen.

Sidecar An additional piece of hardware ormachine, connected to and locatedalongside an ATM, offering additionalphysical capacity required by certainself-service functions, for example,coin handling.

Standard interface – vendor-agnostic An interface standard that may includeoperational characteristics andacceptable levels of performance. Itprovides for interoperability of a givensystem, which must meet thespecifications of the standard to whichall users subscribe and which allows fortechnology to be vendor-agnostic.

T

Tamper To compromise physical security.

Testing and certification services A product certification process thatinvolves product testing and, for manyprograms, ongoing assessment of themanufacturing site to ensure that theproduct continues to comply with anominal standard.

Touchpoint Customer point of contact, interface ofa service.

Touchscreen Monitor screen that can detect andrespond to a finger, stylus or otherinstrument pressing on it.

Transaction Transmission and processing of data;act of operating a function.

Transaction analytics System for gathering data on ATMcustomer transaction volumes andtypes in order to improve service andcustomer retention.

Transaction authorization Authorization by the issuer of acustomer transaction.

Transaction flow Transaction business process/blockdiagram/flowchart.




Transaction routing Routes followed by customertransactions and data on interbanknetworks as the transaction isprocessed from initiation toauthorization and dispensing. Thiswork may include switching androuting transaction information to andfrom the parties involved. It also mayinclude data processing, billing,account balancing, clearing andsettlement of ATM transactions. Theprocessor that accepts the transactionrequest from the ATM is called theacquirer, while the issuer authorizesthe transaction. A processor, orperhaps a network, also may be calleda "switch," an industry term thatmeans the entity that switches thetransaction in and out of the networksas necessary.

In next gen ATM architecture, cardlesstransactions interoperability is possiblethrough account aggregators, forexample, which can skip the cardnetworks.

TTW Through-the-Wall ATM.

U

UI User Interface.

V

Value-added banking services Value-added banking services canattract new customers and assist withcustomer retention by increasingcustomer value through addedconvenience and a wider range ofservices and products on offer.Examples include added functionalityon ATMs, such as bill and taxpayments, video banking services,personalized greetings, added securitymeasures, and other services.

Vendor-agnostic Not tied to the products of a specificmanufacturer. The vendor-agnosticsolution could be implemented withany off-the-shelf hardware (see Multi-vendor software).




W

Web service A service offered by one electronicdevice to another electronic device,communicating with each other via theWorld Wide Web. In a web service theWeb technology, such as HTTP, is usedfor machine-to-machinecommunication, more specifically fortransferring machine-readable fileformats, such as XML and JSON. Inpractice, a web service typicallyprovides an object-oriented, web-based interface to a database server,used, for example, by another webserver or by a mobile app that providesa user interface to the end user.

Glossary for Next Gen API App ATMs VERSION 1 - PUB · The ATM Industry Association (ATMIA)...

Documents

Transcript of Glossary for Next Gen API App ATMs VERSION 1 - PUB · The ATM Industry Association (ATMIA)...