Design Process-USB-Shield Management

As a core authentication tool in fund settlement, corporate bank USB-Shields play an irreplaceable role in ensuring fund transaction security and enabling real-time monitoring, serving as the "last line of defense" for fund security. Currently, the financial institutions of subsidiaries of large group companies often hold hundreds of bank USB-Shields, typically managed by individual fund managers and stored in dedicated safes. This traditional management model presents multiple pain points:

• Significant security risks

  USB-Shields are susceptible to physical damage from frequent plugging and unplugging, are prone to loss when kept in personal custody, and suffer operational vulnerabilities associated with not signing out after use;

• Low management efficiency

  The handover process for USB-Shields and passwords is cumbersome, and physical inventory requires significant time and manpower, directly impacting fund settlement efficiency;

• Limited monitoring capabilities

  Non-USB-Shield custodians cannot directly access bank statements and receipts, making it difficult to achieve real-time online monitoring of fund movements at the group level, hindering the timeliness and transparency of fund management.

Business Background and Pain Points-Bank Transaction Data and Receipt Management

• 1. Inefficient Manual Management and Significant Security Risks

  Data Bias: Differences in bank interfaces and formats can easily lead to data inconsistencies.

  Difficult Management: Distributed data storage and a lack of consent management mechanisms.

  Weak Security: Inadequate security measures make it difficult to meet financial data security requirements.

• 2. Lack of Verification and Synchronization Mechanisms for Reimbursement Data

  Data accuracy is difficult to ensure, and consistency is difficult to maintain.

  Issue tracing is difficult, making it difficult to locate and correct errors.

  Severely impacts financial processing efficiency and overall compliance.

• 3. Manual Matching is Cumbersome and Low in Accuracy

  The need to individually check receipts against reimbursement documents is time-consuming and inefficient.

  Matching errors are frequent due to subjectivity and fatigue.

  This not only delays the reimbursement process but also increases review and correction costs.

Overall Architecture and Core Technologies-Overall Architecture Diagram

The U-Shield centralized security management platform and hardware devices, along with the online banking intelligent entity, form a collaborative closed loop of "basic security - functional extension" in the context of financial intelligence. The two support each other and progressively empower each other.

Overall Architecture and Core Technologies-Overall Architecture Introduction

From hardware to software, the integrated online banking management system has established a clear two-tier collaborative architecture. Its operational logic is as follows:

• 1. Hardware Layer: Physical Security Foundation

  With devices such as the online banking kiosk at the core, this system focuses on the physical security management of USB-Shields, primarily addressing the following issues:

  Centralized Control: Centralized storage and intelligent locking eliminate the risk of loss or damage caused by personal storage of USB-Shields.

  Full Traceability: Records and tracks every plug-in and unplug of the USB-Shield, providing traceability and audit support for physical operations.

  Data Support: Provides a reliable and authentic data source for hardware operations to support upper-layer intelligent applications.

• 2. Software Layer: Functional Expansion Engine

  The online banking intelligent entity leverages hardware data to expand automation and risk control capabilities, achieving extended functionality:

  Automatic Receipt Re-posting: Intelligently matches receipts with accounting vouchers, eliminating inefficiencies and errors in manual operations;

  Automated Bank-Enterprise Reconciliation: Executes reconciliation based on rules, identifies unreconciled accounts and abnormal items in real time, and automatically generates reconciliation statements;

  Full-Process Risk Control: Expands the scope of risk control from physical asset management to a closed-loop treasury business model, achieving continuous risk prevention and control.

Core Technology-AI Agent Overview

As the core authentication tool for fund settlement, corporate bank USB-Shields play an irreplaceable role in ensuring the security of fund transactions and enabling real-time monitoring, serving as the "last line of defense" for fund security. Currently, the financial institutions of subsidiaries of large conglomerates often hold hundreds of bank USB-Shields, often managed by individual fund managers and stored in dedicated safes. This traditional management model presents multiple pain points:

• What is an AI Agent?

  AI Agents are intelligent systems capable of autonomous action, environmental perception, and decision-making.

  They typically possess the capabilities of perception, planning, action, and learning, simulating human thought processes to solve complex problems.

• Where are AI Agents suitable?

  Highly Repeatable: Highly repetitive processes are suitable for agents, while low-frequency or one-off processes are unsuitable due to development costs.

  Clear Rules: Processes require clear rules and no subjective judgment. Those without rules or relying on subjective judgment are not suitable.

  Stable: The operating software interface and business processes must be stable. Frequent changes increase maintenance costs, making them unsuitable for agents.

• What are the advantages of Al Agent?

  It requires no open system interfaces; it interacts with various application systems simply through a user interface, completely simulating human operations and automating routine, labor-intensive, and repetitive tasks.

  Based on clear rules, operations are precise and eliminate human error to the greatest extent possible, resulting in a zero-error rate.

  It replaces repetitive tasks in financial processes, enabling non-stop, 24/7/365 operations.

  It helps free up human resources for higher-value work.

Core Technology-Online Banking Agent Advantages

• 
  Command-level execution with weak UI dependency

  Resistant to interface changes, far exceeding the vulnerability and maintenance costs of traditional RPA.
• 
  Built-in large-scale model algorithms

  Improves the efficiency and accuracy of multi-source data integration, supporting anomaly detection and intelligent annotation.
• 
  Multi-channel cluster expansion

  Meets peak collection needs at the end of the month and quarter, with elastic scalability and high-concurrency scheduling.
• 
  Enterprise-level security and compliance

  Strict data encryption and permission management, meeting bank security standards and audit requirements.

Core Technology-Shield Array

• 1. Minimalist and easy to use

  Pull-out rail design for easy deployment and maintenance.

  Supports 24 second-generation online banking USB-Shields with OK buttons.

  The RPA interface is simple and easy to use.

• 2. Secure and reliable

  Stable and reliable connection.

  Fully independent control of hardware and core drivers.

  Enterprise-grade security policies and control architecture.

• 3. Versatile and efficient

  Automatically downloads and reconciles online banking transactions for any RPA tool.

  Suitable for deployment in large financial shared centers as well as small and medium-sized finance departments.

Core Technology-U-Shield Centralized Security Management Platform

• Product Overview

  The U-Shield Centralized Security Management Platform is a comprehensive security management platform software developed based on USB Over IP technology. It provides centralized management of UKEY devices, remote secure connections, user authorization, security monitoring, and log tracking.

• Core Functions

  Provides unified USB device management, remote secure connection, and UKey authorization.

  Supports operation log tracking, online auditing, and real-time security monitoring.

• Typical Application Scenarios

  Centralized management of security devices such as corporate online banking USB-Shields, digital CA certificates, and encryption locks.

  Integrated with RPA robots to automate processes such as bank-enterprise reconciliation, tax filing, and online social security CA application.

• System Advantages

  High integration, strong scalability, and adaptability and scalability, supporting flexible configuration to meet the needs of applications of varying scales.

  The platform is manageable, maintainable, and configurable, providing a graphical management system interface that significantly improves system maintainability and ease of operation.

U-Shield Centralized Security Management Platform-Main Functions

• UKey Authorization and Usage Control

  UKeys can be authorized to individual or multiple users, and connection passwords can be set and modified. Ports can be authorized to designated IP addresses on a whitelist. Triple authentication—account and password, IP whitelist, and port password—significantly enhances UKey connection security.

• UKey Classification

  UKey types include handling, verification, query, and management.

• Detailed Log Monitoring and Auditing

  View every login and logout log, as well as every port edit and disconnection log, to meet regulatory requirements.

• UKey Cluster Management

  Multiple devices can be added to a single server for cluster management, with unlimited UKey management.

• UKey Batch Storage

  UKey information can be edited for each port, including UKey type, purpose, and name, making it easier for users to identify and manage various UKeys.

• Real-time UKey Usage Monitoring, Inventory, and Statistics

  View all UKeys online and offline, as well as the total number of devices, ports, UKeys, online UKeys, and connected UKeys, providing a clear overview of company-wide UKey management.

Value Outlook

• The U-Shield centralized security management platform and the online banking intelligent collaborative solution, through the deep integration of "hard defense + soft intelligence," will build a next-generation fund management system that is secure, efficient, and data-integrated.

• [Current Achievements] Security Upgrades and Efficiency Breakthroughs

  U-Shield physical security is comprehensively enhanced at the hardware level. The intelligent system automatically blocks operational vulnerabilities, completely eliminating the risks of loss, damage, and human error. Fund settlement efficiency has increased several-fold. Bank-to-enterprise reconciliation and receipt processing are fully automated, eliminating manual intervention. Real-time synchronization and full visibility of fund and data flows are achieved, supporting transparent monitoring and accurate decision-making.

• [Future Outlook] Proactive Risk Control and Strategic Upgrade

  Promoting the shift from a "post-event defense" model to a "proactive prevention and control" model, accumulating high-quality data to empower AI-powered risk control and forecasting, and building a closed-loop system of "security control, intelligent operations, and strategic support," enhancing the foresight and value creation of fund management.

• [Application Value] Group Coordination and Industry Leadership

  Strengthening the group headquarters' real-time control and intensive allocation of funds at all levels, promoting the transformation of the finance team to a strategic role, and establishing an industry benchmark for "hardware foundation + software intelligence." This provides a complete solution for enterprise fund intelligence and accelerates the transition from digital to intelligent finance.