the US, sources say that Stanford Credit Union was
the first financial institution to offer online internet
banking service to its members late in 1994.
Some worldwide surveys mention a number of
122 million users worldwide in 2004, with Western
Europe dominating that with almost 58 million
users, with US and Japan having 23 and 22 million
respectively. Estimates today claim that 50% or
more of internet users are customers of one or more
e-banking services, in developed countries where
such services exist on a large scale.
In most of the developed countries, e-banking is
more widely accepted to manage and access
individuals' bank accounts, while the companies use
them more sparingly. Croatia is an example of just
the opposite, where more than half of the companies
use actively e-banking services.
3 TECHNOLOGY
A common usage of user identification and a
password which is used to access many online sites,
offering either diverse services or internet commerce
is not considered to be secure enough for e-banking.
Therefore, two different security methods were
developed. One is combination of PIN and TAN
(Personal Identification Number and Transaction
Access Number). PIN is, in fact, a password to login
a financial institution's internet site and TAN is a
one-time password used to authenticate transactions.
E-banking client usually receives a list of TANs by
mail and uses them in order. A more secure way of
using TANs is to generate them whenever needed
using a security token which a bank gives to each
customer. Web browser used to access e-banking
site normally uses SSL secured connections so there
is no need to additional encryption.
The second, more advanced security method is
digital signature. To use this technology, a user must
have a smart card and a card reader connected to his
computer. Then, on a smartcard a bank's certificate
is downloaded through appropriate procedure, so it
can be used when digitally signing transactions or
other documents. This technology is more
expensive, so in many cases it is used only for
company customers, while individuals are more
likely to use the PIN/TAN technology. If an
individual would prefer a smart card and a reader, he
would be assessed a fee.
4 SITUATION IN CROATIA
Croatia had a rather particular situation. Coming
from a socialist system where there was an
overwhelming state control of the entire economy,
more than a decade after getting rid of such a system
the entire payment systems for companies were still
handled by a state-owned agency. Other countries
coming from the same provenience managed to
convert the system in one way or the other, while
Croatia, in spite of the plans made in 1994, waited
until 2002 to finally “move” the company payment
services to where they belong – to banks.
So, until 2002, while individuals and small,
mainly personal businesses would go to banks for
services like in the rest of Europe, all companies'
accounts were held in one agency (at the time it had
the name Institute for Payment Systems) and only
nominally they were on a bank's books (the amounts
were counted into a bank's assets or liabilities at the
end of a day, but the money was never moved). That
means all payments between companies were
processed within this agency, giving state full
control of all money flowing between companies
because payments were executed according to
unique rules providing for situations when there
were insufficient funds. It was easy to devise
procedures for different situations because money
was practically never leaving the agency. The same
agency also handled all cash in the country.
One “problem” with this agency was that the
service was extremely efficient and cheap. It was a
monopoly, with no fears of competition and priced
not according to business requirements, but decided
by the head of agency and approved by the central
bank. Therefore there was no big motivation to close
such a service and go into something more costly
and with questionable efficiency. However, it was
obvious that banks as a service companies had to
offer full set of services to their corporate clients,
rounding the offer and making it similar to other
countries. Even with the plan from 1994 delayed, the
agency had developed a National Clearing System
(NCS) which it was using exclusively, performing
transactions on behalf of banks – in fact on behalf of
those bank's clients. The intention was to have a
system whose doors would open some day to direct
access by the banks and allow them to finally
perform payment services and other transactions
directly with other banks through NCS, without the
need to go to the agency counters or computers.
In mid-2001 the new Law on Payment Traffic
was enacted providing for the necessary basis to take
over payments from the agency. April 2002 was
ICSOFT 2008 - International Conference on Software and Data Technologies
370