Table of Contents

• Title and Copyright Information
• 1 Preface
  • 1.1 Purpose
  • 1.2 Audience
  • 1.3 Documentation Accessibility
  • 1.4 Critical Patches
  • 1.5 Diversity and Inclusion
  • 1.6 Conventions
  • 1.7 Related Resources
  • 1.8 Screenshot Disclaimer
  • 1.9 Acronyms and Abbreviations
  • 1.10 Basic Actions
  • 1.11 Symbols, Definitions and Abbreviations
• 2 About this Manual
  • 2.1 Introduction
  • 2.2 Scope
    • 2.2.1 Read Sections Completely
    • 2.2.2 Understand the Purpose of this Guidance
    • 2.2.3 Limitations
    • 2.2.4 Test in Non-Production Environment
• 3 Prerequisite
  • 3.1 Operating Environment Security
  • 3.2 Network Security
  • 3.3 Oracle Database Security
    • 3.3.1 Oracle BANKING Payments Recommended Configuration
  • 3.4 Application Server Security
  • 3.5 Third-party Applications
  • 3.6 Choice of the SSL Cipher Suite
• 4 Configuring Oracle Banking Payments
  • 4.1 Securing the Oracle Banking Payments Application
    • 4.1.1 Setting up Secure Flag for Cookies
    • 4.1.2 Credential Over Mail
    • 4.1.3 Session Time Out and Token Management
    • 4.1.4 Two-way SSL Connection
    • 4.1.5 Securely Store the Credentials in CSF
  • 4.2 Securing the Gateway Services
    • 4.2.1 Overview
    • 4.2.2 External System Maintenance
    • 4.2.3 Accessing Services and Operations
    • 4.2.4 Gateway Password Generation Logic for External System Authentication
• 5 Securing Oracle Banking Payments
  • 5.1 Desktop Security
  • 5.2 Oracle Banking Payments Controls
    • 5.2.1 Overview
    • 5.2.2 Disable Logging
    • 5.2.3 Audit Trail Report
    • 5.2.4 Security Violation Report
      • 5.2.4.1 Sign-on Messages
    • 5.2.5 Display/Print User Profile
    • 5.2.6 Clear User Profile
    • 5.2.7 Change User Password
    • 5.2.8 List of Logged-in Users
    • 5.2.9 Change Time Level
    • 5.2.10 Authentication & Authorization
    • 5.2.11 Role Based Access Controls
    • 5.2.12 Access Controls like Branch Level
    • 5.2.13 Maker – Checker
    • 5.2.14 User Management
    • 5.2.15 Access Enforcement
    • 5.2.16 Privacy Controls
    • 5.2.17 Password Management
      • 5.2.17.1 Invalid Logins
      • 5.2.17.2 Specifying Parameter
      • 5.2.17.3 Specifying Parameters for User Passwords
      • 5.2.17.4 Placing Restrictions on User Passwords
      • 5.2.17.5 Password Restrictions
• 6 General Information
  • 6.1 Cryptography
  • 6.2 Security Patch
  • 6.3 Oracle Database Security Suggestions
  • 6.4 Oracle Software Security Assurance - Standards
  • 6.5 References
    • 6.5.1 Datacenter Security Considerations
    • 6.5.2 Database Security Considerations
    • 6.5.3 Security Recommendations / Practices followed for Database Environment
    • 6.5.4 Common Security Considerations