Inscreva-se no nosso blog

Open banking is rapidly changing how banks make information available to their customers. It is also accelerating the adoption of application programming interface (API) management tools to industrialize the deployment of public-facing APIs. My colleague Cheryl Chiodi recently wrote about the challenges and opportunities on meeting the directive by member financial organizations (you can read it here: Open Banking - How to Leverage Open APIs for Competitive Advantage in Financial Services). My post extends that discussion, focusing specifically on API security, and in particular the importance of open identity.

Let's take a concrete example: A third-party mobile application has been built that aggregates account balances from three banks into a single view for the customer. Surely the customer does not wish to authenticate themselves three times in order to access their information.

This problem can be addressed by establishing open identity standards so that APIs can be accessed in a federated fashion.  Importantly, this allows a customer to authenticate once through an established identity provider (IP). Once the customer is authenticated, relying parties (RPs), such as individual banks, are able to validate the identity without the customer logging in again.

The OpenID Foundation has created OpenID Connect, an interoperable authentication protocol, and the foundation is supported by the open banking directive Cheryl writes about in her recent post, and there is a shared objective by these two organizations to realize a secure mechanism to access bank information across API providers. It is another example where open communities and governance are allowing banks to participate in the wider Digital ecosystem.

Red Hat's 3Scale API management platform supports OpenID Connect as a security policy out of the box. This is an important capability so that a bank can allow its customers to have access to data openly and more securely.

Leading financial organizations that are seeking to maximize their reach with APIs will find that OpenID support can be a critical capability as they adapt their API platforms to support open banking.

Sobre o autor

Eric Marts is a financial services leader at Red Hat. Prior to joining Red Hat, Eric shaped solutions globally in the Retail Banking and Wealth Management business at HSBC. He has more than 20 years of professional experience across both startups and incumbents. He is particularly interested in unlocking new market opportunities and making financial services simpler and more inclusive for customers with cloud technology.

Read full bio

Navegue por canal

automation icon


Últimas novidades em automação de TI para empresas de tecnologia, equipes e ambientes

AI icon

Inteligência artificial

Descubra as atualizações nas plataformas que proporcionam aos clientes executar suas cargas de trabalho de IA em qualquer ambiente

open hybrid cloud icon

Nuvem híbrida aberta

Veja como construímos um futuro mais flexível com a nuvem híbrida

security icon


Veja as últimas novidades sobre como reduzimos riscos em ambientes e tecnologias

edge icon

Edge computing

Saiba quais são as atualizações nas plataformas que simplificam as operações na borda

Infrastructure icon


Saiba o que há de mais recente na plataforma Linux empresarial líder mundial

application development icon


Conheça nossas soluções desenvolvidas para ajudar você a superar os desafios mais complexos de aplicações

Original series icon

Programas originais

Veja as histórias divertidas de criadores e líderes em tecnologia empresarial