Connectivity – InfoConnect Connectivity - InfoConnect 24 January 2012 Page 1 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 1. What is Infoconnect The InfoConnect service was designed to seamlessly provide connectivity from any of our corporate customers to the service providers with whom they have, or wish to have, a working relationship. InfoConnect links customers to 3 rd party service providers through the IS network in a secure, reliable and resilient way. With just a single link into the IS MPLS network, customers are able to access multiple service providers across a diverse range of industries, which provide business critical services and applications. 2. Service Description To understand the InfoConnect product it’s best to first define a scenario. Let’s say we have a Company Head office with various users on their network. Their business critical functions require a connection to multiple servic e providers like a mobile operator for the usage of Bulk SMS services. Card authorizations, travel solutions, vehicle tracking and business online banking are also required for their daily operations. From the scenario illustrated below are costly independent links, which are put into place to each of these Service Providers to gain a close, working relationship and this could be difficult to maintain due to the range of Service Providers required. They will also be susceptible to a loss in connectivity unless costly redundant links are put in place to all Service Providers, which will be difficult to manage. This scenario also illustrates the alternative means of connectivity which could be through the Internet for certain services, but this produces a solu tion which may not be as secure and reliable with no traffic prioritization and hence a service with no guarantees. Page 2 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services Figure 1: Inefficient Connectivity The InfoConnect product provides a solution to this by providing a single link to the Customer between their network and multiple Service Providers thorough the IS MPLS network. Figure 2: Customer accessing multiple InfoConnect Service Providers Page 3 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 3. Services Currently there is a total of 22 SP’s on the IS network providing multiple services. IS is able to take on service providers across any industry with any service or application they wish to offer. The range of services currently offered by each Service Provider is detailed below. 3.1. Cellular Providers 3.1.1. MTN Services offered MMS - MMS provides consumers with a combination of text, sound, pictures and video, all in one message. EBB - Event Billing allows WASPs to bill MTN customers for products and services by creating a billing event, which is independent of any MTN network bearer services. SMS - These are SMSes that go to customers that have subscribed to or requested such information. Bulk SMSes are used to send one message to a large group of people. For example: announcing a clothing sale at a retail store. USSD - USSD is a menu-application technology that is used to initiate a session that sends a message (similar to SMS) between a mobile phone and an application menu in the network. IVR - Interactive Voice Response. Also known as a “Voice Menu system”, IVR is the system responsible for playing automated messages that prompts customers who call a specified telephone number. (To be confirmed) 3.1.2. Vodacom Services offered Billing - This is an online billing service that allows a WASP to bill on an event basis for any amounts up to R50. It provides greater flexibility than premium rated SMS or USSD as the WASP can determine when and how much the billing ticket should be. 3.1.3. Bulk SMS - Bulk SMSes are used to send one message to a large group of people. CellC - Bulk SMS Page 4 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 3.2. Banking Providers 3.2.1. Standard Bank Services Offered Business Online (Domestic) - It is a Windows driven electronic system, delivered through Cats, that uses Internet technology to provide a range of business banking services and financial information through its account management, funds transfer and messaging modules. Host–to–host - It is an automated delivery solution that creates a secure link between your financial applications and the Bank's mainframe system. It allows for the exchange of information between your business and the bank with little or no manual intervention. The client needs to contact Standard Bank and finalised the necessary commercial agreements. 3.2.2. FNB (First National Bank) Services Offered FNB Online (Previously knowns as BankIT) Corporate Access Management Systems (CAMS) - Medium to large corporate businesses will benefit from direct electronic access to FNB's mainframe, where statements can be viewed or downloaded and cash flow monitored on a real-time basis. All that is needed is a FNB Corporate Cheque Account. Payments and Collections Service (PACS) - This fully automated Windows-based system is suited to corporate clients that require high volumes of electronic funds transfers and collections. All thxat is needed is a FNB Corporate Cheque Account. Receipt It – is a product that delivers a realtime notification of messages of transactions that are processed against a clients account. The messages are sent via the Receipt It Server to an API (Developed by FNB) at the client site. The client uses these messages (Transactions) to update their LOB for logistical purposes intended for the effective “delivery of services” environment. MyGate/ eWallet – FNB Merchant acquiring. This service allows POS devices to link to the FNB Card acquiring systems. Page 5 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 3.2.3. Hyphen HYPHEN Online Credit Card Authorisation System - This system is designed specifically for the call centre environment and allows for credit card transactions to be pre-authorised online while the call centre agent is talking to the client. 3.2.4. ABSA Services Offered Cash Focus Remote.absa.co.za SSL VPN service 3.2.5. Nedbank Services Offered NedInform - NedInform is designed primarily for users with fairly complex or sophisticated transaction requirements. It permits controlled access to your accounts via your own PCs linked to Nedbank"s mainframe. Using the latest smartcard technology to guarantee security, NedInform allows you to carry out virtually all your company’s financial transactions digitally. You can even customise account lists according to each user’s access privileges. 3.2.6. ABSA Capital - FIX 3.2.7. Bankserv Services Offered InfoConnect xcom service for acb application 3.3. Financial Services 3.3.1. JSE (Johannesburg Securities Exchange) The JSE InfoConnect product provides a resilient and tailormade connectivity solution between customers and the JSE’s trading platform. Page 6 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services Systems Utilised Equity Market (Production,Test & Conformance Environments) IRI (Interactive Request Interface) – Multicast Data (Public Data) SII (Secure Interactive Data) – Unicast Data(Private Data) End of Day Files (Downloads/Uploads) – FTP/FTPS/HTTP/HTTPS BDA (Broker Dealer Accounting) – Backend Accounting Service (Mainframe System) ERD (Electronic Report Distribution) – FTP TMS (Trade Monitoring System) – Mainframe SAM (Swift Alliance Messenger) N.B – BDA is being replaced by the MSS system, which is a windows based system. Derivatives Market Equity & Commodities – All clients connect to the Nutron system which is a windows based system as well as the end of day files(FTP/FTPS/HTTP/HTTPS) Interest Rate Market Utilises the Nutron system as well as the end of day files(FTP/FTPS/HTTP/HTTPS) The bandwidth requirements for the services and applications provided by the JSE are listed in the table below. The only application that uses MC data is the Host to Host service, highlighted in red. Within this service there are 19 BDG’s (Multicas t Groups which can be subscribed to and should be confirmed on the Pre -Install). * The JSE InfoWiz is a separate MC service on its own and can be selected without JSE TradeElect. Page 7 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services Service Minimum Bandwidth Primary Secondar y Equities - Host to Host (Including TradeElect and 6 Mbps MPLS/ MPLS/ Fibre Fibre MPLS/ MPLS/ Fibre Fibre JSE InfoWiz) * Talx ASP 64k per user Equities Derivatives Market 180k per user per MPLS/ MPLS/ (EDM) market ** Fibre Fibre Commodities Derivatives 64k per user per MPLS/ MPLS/ Market (CDM) market ** Fibre Fibre Currency and Interest Rate 180k per user per MPLS/ MPLS/ Market (IRM) market ** Fibre Fibre 64k per user per MPLS/Fib MPLS/Fib market ** re re MPLS/ MPLS/ Fibre Fibre MPLS/ MPLS/ Fibre Fibre MPLS/ MPLS/ Fibre Fibre MPLS/ MPLS/ Fibre Fibre MPLS/ MPLS/ Fibre Fibre Global Market MSS System 70k per user *** BDA 15k per user Equity End of Day Dissemination Dissemination (EDM/CDM/IRM) 64k 64k Information Subscriber 512k per market (EDM/CDM/IRM) Page 8 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services The list of Multicast groups or BDG’s are detailed in the table below. Broadcast Service (Multicast Group) BDG Ref JSE Start of Day Public Order Book J01 Market Reference Data-Full Download (Includes JSE, NSX and LSE) B10 JSE Market Rules FULL Download J02 JSE Market Reference Data FULL Download (Segment based J03 includes NSX) Market Reference Data-CHANGES (Includes JSE, NSX and LSE) B11 JSE Market Rules-CHANGES (Includes NSX) J10 JSE Market Reference Data-CHANGES (Segment based includes J11 NSX) JSE Full Order Book Level 2 (JSE Orders) J20 JSE Best Bid and Ask Level 1 (JSE Intraday Prices) J21 JSE Trades J22 JSE Market Status Indicators J23 JSE VW AP J24 JSE Cumulative number and volume of Trades J25 JSE News Service (SENS) J50 FTSE/JSE Africa Index Series (JSE Indices) J51 NSX Start of Day Public Order Book N01 NSX Market Data, plus SENS N02 NSX Trades N03 FTSE/JSE Africa Index Series for NSX (NSX Indices) N04 Page 9 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 3.4. Credit Vetting Providers 3.4.1. Experian Scorex Services Offered Scorex - Experian assists credit-lenders through the development of statistical scorecards, data analysis, strategic consultancy, and software solutions that enable the most competitive, profitable customer acquisition strategies. 3.4.2. ITC (TransUnion) Services Offered: TransUnionCB - Bureau Enquiries (BCX Mainframe) TransUnion CB - Bureau Enquiries (BCX Web Services) TransunUnionCB– Bureau Enquiries Web Services (Hosted & IS) TransUnion CGS - Cheque Guarantee (BCX) 3.4.3. KreditInform Services Offered Discover - The Discover software placed KreditInform at the forefront of technological development in the credit information market. This package has enormous benefits for the user of online information in terms of ease of use, interpretation of data and system integration. KreditInform subsequently developed Discover-Net, a Discover version based on web browsers. This version is currently available to subscribers with dedicated access to KreditInform and will be released for full Int ernet access at a later stage. Page 10 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 3.4.4. XDS (Xpert Decision Systems) Services Offered Online Enquiry - The XDS Internet-based online system uses powerful search engine technology to provide customers with real-time access to consumer information. 3.5. Application Solution Providers 3.5.1. SAP OSS Services Offered Online Support System (OSS)- Companies in South Africa who have or will be deploying SAP may have the requirement to establish a secure connection with SAP Germany to facilitate SAP OSS remote support on their systems locally in South Africa. SAP OSS is a secure network connection that connect SAP's customer network to SAP support network in Germany to use "R/3 Online Services" 3.6. Travel Solution Providers 3.6.1. Galileo Galileo offers a complete suite of travel related software products designed to contribute to the growth and profitability of the travel agency. Galileo Southern Africa continually develops automation solutions to help travel agencies respond to the growing sophistication and demands of their clients — and stay on the leading edge of travel industry technology. Services Offered: 360° Fares, Agency Private Fares, Airline Private Fares, Airline Products CarMaster ClickPoint Custom Check, Custom Fares, Desktop, E-Agent, E-Commerce Products, ETicketing, E-Tracker, Fax-2-E-Mail, Focalpoint Relay, FocalpointNet, Front Page, Galileo Leisure, Host E-Mail, Inside Availability, Inside Link, Inside Shopper, Neat Agent, Queues, RoomMaster Sales & Reservations, Products Satellite Ticket Printing, Scriptwriter, SMS-eT, Travelbuy, Travelport, Travelscreen, Viewpoint, Viewtrip, Page 11 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 3.7. Vehicle Tracking 3.7.1. C-Track Services Offered C-track Solo: A full featured scaleable, remotely upgradeable mobile solution developed specifically for the Professional Hauler, Logistics & Supply Chain Management, Mobile Workforce Management & Emergency Services applications. C-Track Assist: Developed specifically to assist with the management of commercial fleets, sales vehicles, FML & Car Rental vehicle security applications. C-track Commute: is an advanced, user-friendly stolen vehicle recovery system which contributes to the success of your business by giving information about the actual use of your taxis. C-track Secure: When you fit C-track Secure vehicle tracking system to your car, you get more than just stolen vehicle recovery. You get control and complete peace of mind C-track Secure PLUS: has an internal movement sensor, allowing it to identify vehicle movement even when the ignition is off. C-track Secure PLUS allows you to create a Preferred Movement Area generating an alarm if the are is breached. 3.8. Card Switching 3.8.1. Altech Card Solutions Altech Card Solutions is an operating division of Altech Limited. Altech Limited is a multi-billion Rand technology and service provider company that operates from South Africa but with business interests in specific African countries. Altech Card Solution is a specific operating company in the group that focuses on the following: Supply, support and software development for the Gemalto Magic3 financial point of sale devices and PIN Entry Devices Supply and support of DataCard card printing and personlisation equipment Supply of services and products relating to data security and data encryption Offering secure and certified bank and private label card issuing and processing on behalf of our customers Page 12 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services Services Offered The services that Altech Card Solutions offers to customers and which customers can subscribe to are the secure electronic acquiring and processing of card and other card related financial transactions both destined to banks or other financial services providers such as Edcon. The services can be full end-to-end services or just routing services as per the customers’ requirements. 3.8.2. Destiny Destiny is a wholly owned subsidiary of UCS (PTY) Ltd, a JSE listed company. www.ucs.co.za Destiny provides a payment switching functionality using software developed and maintained by Traderoot Africa (PTY) Ltd www.traderoot.com Destiny provides a multi-application, bank agnostic, fully vertically integrated service from point of sale to back office transactional and financial switching. Destiny strives to provide to its business partners a one-stop E commerce point of sale solution facilitating transactions that enhance their ability to satisfy their customers . Services Offered Integrated EFT Private Label Gift Card Solutions Integrated Airtime 3.9. Procurement 3.9.1. MyMarket MyMarket is an online e-marketplace company that hosts web applications for eprocurement and online travel booking tools. Services Offered 3.9.2. Market place and travel services ETC (Electronic Toll Collection) Page 13 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services 4. Product Components To conceptualise the product on a whole the components that make up the product from a high level are describe in Figure 3 below. For the service provider the two components relevant to the service is the Last mile connectivity into the IS environment which is the telco circuit as d escribed as well as the InfoConnect MPLS port. For the Customer the requirement is for both routers, and ports to be configured for the VPN service and subscription to the InfoConnect service. Bandwidth for both the products is relevant and the last mile connection from the customer into the IS environment. Finally from IS the product has the regular 24/7 support with statistics. Together with this there is also proactive monitoring. These components all tie together to form the InfoConnect product offering. Page 14 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services Figure 3: InfoConnect Product Components 5. Benefits to Service Providers and Customers Firstly Looking at the Service provider the benefits of the InfoConnect service is that the Services or Applications are provisioned securely to the customers adhering to all security procedures Service providers may have in place. Service providers are not able to access each others’ networks as well as inappropriate users who are not subscribed to the InfoConnect service with that particular service provider. The service providers have access to Internet Solutions exis ting customer base of which there are approximately 70% who are already MPLS enabled. So for the Service provider there is seamless connectivity to any of these customers with just a link into the IS network. To provide a resilient service, the only requirement is the redundant links into the Internet Solutions environment and the standard MPLS port. This means a minimised running and operational cost for the SP. Page 15 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services Lastly the connection between Service provider and Customer is maintained and handled by Internet solutions so there can be increased focus on the core applications or services for the service provider. Service/Applications are provisioned securely to clients Access to IS existing corporate customers Minimal operational and running costs Ability for increased focus on core applications for the SP For the Customer the benefit is a secure and seamless connection to multiple Service Providers via Internet Solutions network and not via Internet breakout so there is a close working relationship between Service provider and Customer There is only A single link into the IS MPLS environment required and the capability of multi-circuit redundancy if required. This also eliminates the requirement for a separate link to a corporate ISP. Across the same link used to provision InfoConnect services, IS can also accommodate internet breakout as well as access to any other IS services. e.g. Remote Access, Hosting, VPN services, Security services etc. Finally, The MPLS VPN product is a fully managed QoS solution that has a performance level unattainable over the Internet. Page 16 of 17 Confidential and subject to IS terms and conditions Connectivity – MPLS VPN Services Secure, Seamless connectivity to a range of SP’s Single connectivity link into the IS environment with the capability of multi-circuit redundancy Eliminates requirement for a separate link to the corporate ISP A fully managed End-to-End MPLS VPN solution with QoS aware traffic prioritisation Page 17 of 17 Confidential and subject to IS terms and conditions