Safe depo­sit box system

goNet sca­les from a small stan­da­lo­ne locker room to mut­li-branch insti­tu­te solus­ti­on with 100'000 lockers. The­re are various deploy­ment sce­na­ri­os pos­si­ble, but the fol­lo­wing 3 sce­na­ri­os are the most typical:

Sin­gle Site Deployment
Most easy instal­la­ti­on for sin­gle site stan­da­lo­ne instal­la­ti­on in a bank branch. The ser­ver soft­ware and data­ba­se is pre- instal­led on an indus­tri­al x64 appli­ance. Admi­nis­tra­tors can log­in from remo­te for site admi­nis­tra­ti­on. Mini­mal inter­ac­tions with the bank IT is required.

Cen­tral Deployment
All ser­ver logic and data­ba­se is instal­led on a cen­tral ser­ver. Mul­ti­ple ins­tances of bank bran­ches can resi­de on the same cen­tral ser­ver. The cli­ent user inter­face acces­ses the ser­ver over secu­re HTTPS. Site local actua­tors and sen­sors are atta­ched to the cen­tral ser­ver via IoT pro­to­col. All sen­si­ti­ve data is held on one cen­tral loca­ti­on and other ser­vices of the bank may be inte­gra­ted, such as LDAP or back­up ser­vices. In this con­fi­gu­ra­ti­on goNet may be instal­led as a self-hos­ted application.

Any action in the goNet sys­tem is jour­na­li­zed in the data­ba­se: who has done what and when. Cur­rent events are shown as live-ticker in the dash­board screen, colo­red accor­ding to the seve­ri­ty degree of the event.

In later rese­arch by the bank staff, the events can be fil­te­red in the jour­nal data­ba­se and expor­ted for documentation.

To keep the pri­va­cy of the banks cus­to­mer and to unbur­den bank employees, goNet can be ope­ra­ted with the self-legi­ti­ma­ti­on sys­tems goNet -Iden­ti­fi­ca­ti­on with tokens such as smart-card and PIN com­bi­na­ti­on or 2-fac­tor authen­ti­ca­ti­on over mobi­le pho­ne. In such a con­fi­gu­ra­ti­on, the cus­to­mer iden­ti­fies hims­elf at the sys­tem by means of a tech­ni­cal sys­tem with no assis­tance from staff. Then goNet gives aut­ho­riza­ti­on to open the door to the vault room and unlocks the cus­to­mers locker.

The goNet solu­ti­on is desi­gned with secu­ri­ty in mind. All par­ti­ci­pan­ts of the sys­tem, ope­ra­tors as remo­te devices, must authen­ti­ca­te them­sel­ves at the sys­tem by a secu­re log­in. Wired mes­sa­ges on the mes­sa­ge bus are secu­red by SSL encryp­ti­on and certificates.

Cri­ti­cal data in the data­ba­se such as names, pass­word, PIN’s are encrypt­ed and tied to the hard­ware such, that an atta­cker sta­ling the data­ba­se can­not gain any infor­ma­ti­on about bank cus­to­mers or their secrets. Default secu­ri­ty encryp­ti­on is AES-256, but may be adapt­ed in the future for new requirements.

goNet is easi­ly instal­led in exis­ting safe depo­sit locker sites. goNet sup­ports almost all types of lockers (plea­se see sec­tion locks). We also sup­port mixed locker sites, whe­re locks of dif­fe­rent brands and gene­ra­ti­ons are to be controlled.

During migra­ti­on to the new goNet - Locker solu­ti­on, all lockers are ful­ly acces­si­ble for cus­to­mers. No lockers have to be moved, ope­ned or ren­ted out.

We pro­vi­de importers for cus­to­mer data and ren­tal sta­tus for seam­less migra­ti­on from your old system.

goNet inte­gra­tes its­elf seam­less­ly into your IT land­scape. goNet will com­mu­ni­ca­te with your LDAP authen­ti­ca­ti­on ser­ver, SQL Ser­ver or even your Fin­no­va core ban­king ERP if required.