Implementacija PSD2 poslužitelja

master's thesis

• Title (english): PSD2 server implementation
• Author: Antonio Špoljar
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Dejan Škvorc (član povjerenstva)
• Committee member: Leonardo Jelenković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2022-07-12, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Cilj ovog rada je gradnja poslužitelja za posredničku sigurnosnu stijenu koja štiti PSD2 sučelja banaka. Prvi korak rada je proučavanje direktive PSD2 te standarda NextGenPSD2 koji je prihvaćen u hrvatskim bankama. Nakon opisa funkcionalnosti, arhitekture i pojedinih dijelova sigurnosne stijene, počinje se s konstrukcijom samog poslužitelja. Najprije se ulazi u detalje vezane uz funkcionalnosti i komponente poslužitelja. Prikazuje se rukovanje bazom podataka u koju poslužitelj sprema zahtjeve kako bi kasnije, nakon daljnje obrade zahtjeva u sigurnosnoj stijeni, mogao poslati odgovor. Implementira se prihvaćanje zahtjeva i slanje odgovora, što su dva glavna zadatka poslužitelja. Naposlijetku se putem skripte provodi testiranje poslužitelja, a time i cijele sigurnosne stijene, kako bi se potvrdilo da rade kako je zamišljeno.

Abstract (english)

The aim of this study is to build a server for PSD2 proxy firewall, which protects bank APIs. The first step is to study the PSD2 directive, as well as the NextGenPSD2 standard, which is an accepted standard in Croatian banks. After the description of functionalities, architecture and certain parts of firewall, the study follows the construction of the server itself. Firstly, the details on server functionality and components are fleshed out. The study then explains the usage of server's request database, which is needed for storing the requests while the rest of the firewall processes them and prepares the response. The two main jobs of the server - accepting the requests and sending the responses - are implemented as well. In the end, the server and firewall are tested with a script to verify their functionalities.

• Keywords: sigurnosna stijena; NextGenPSD2; RabbitMQ; sigurnost; Docker; Node.js
• Keywords (english): firewall; NextGenPSD2; RabbitMQ; security; Docker; Node.js
• Language: croatian
• URN:NBN: urn:nbn:hr:168:813294
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 10:06:03