- SECURITY: Transactions are performed securely through an IPSec VPN. Other VPN options or secured networks are also possible. SatADSL service for ATM has proved to seamlessly cope with end-to-end VPN set up including, in this case, several satellite hops.
- PRIORITISATION: SatADSL can offer the prioritisation of ATM transactions: a predefined amount of bandwidth is marked as high priority, which guarantees that these transactions will always go through whatever congestion the network experiences at any given moment.
- PRICE: This is an affordable solution on both CAPEX and OPEX, especially as compared to traditional radio local loop systems, which requires costly mast and radio systems.
- RELIABLE: Very high performance in terms of reliability, even during rain conditions thanks to ACM technology (Adaptive Code Modulation).
- SCALABLE: Once the solution has been successfully tested at one ATM location, it can be deployed rapidly across the country and continent for the same low CAPEX and OPEX cost (several hundreds installation per month).
- MANAGEMENT: SatADSL can offer the bank network manager full visibility over the satellite connections to the bank’s ATM terminals.
The African headquarters of EcoBank are located in the centre of Accra. The testing involved secured communications to be carried out from an ATM terminal located in a gas station in Accra to the headquarters in Accra, then further on to the bank headquarters in Paris and finally to the clearing server located in Cairo in Egypt.
The global transmission route was the following: Accra to Luxemburg over the ASTRA 4A satellite link, then from Luxemburg to Accra via optical fibre, then from Accra to Paris over a C-band NSS10 satellite link and finally from Paris to Cairo also over a C-band NSS10 satellite link.
The VPN used was IPSec based (Internet Protocol Security), with IPv4 Layer 3 Tunnelling Protocol. It covered the following security aspects: authentication, integrity and confidentiality. IPSec encrypts and encapsulates an IP packet inside an IPSec packet at the entrance of the tunnel, while de-encapsulation happens at the exit of the tunnel, where the original IP packet is encrypted and forwarded to its intended destination.
End-to-end security is therefore fully ensured by the bank’s own VPN network. Real-life testing with transactions carried out by actual customers started at the end 2012 and lasted for a full month. The test allowed SatADSL to design an optimised service package for the specific application, in terms of bandwidth, volumes and prioritised traffic.