=Sissejuhatus=
Majutatud turvaserveri kasutamine sobib klientidele, kellel on oma infosüsteem ja selle haldamise võimekus, aga puudub vajadus või võimekus hallata X-tee turvaserverit. Majutatud turvaserver annab kliendile võimalust kasutada andmekogude (teenuse pakkujate) teenuseid X-tee kaudu.

=Terminid=
'''Andmekogu''' - X-tee liikme alamsüsteem, mis pakub X-teel teenuseid

'''Andmeteenus''' - X-tee liikme poolt defineeritud ja realiseeritud teenus, mille kaudu saab teiste X-tee liikmetega andmeid vahetada.

'''X-tee alamsüsteem''' - tehnoloogiliselt ja organisatoorselt piiritletud X-tee liikme infosüsteemi osa andmeteenuse osutamiseks või kasutamiseks. X-tee alamsüsteemidena registreeritakse X-tee liikme infosüsteemi ja turvaserveri liidestuskohad, mida on võimalik andmeteenuse osutaja või kasutajana kindlaks määrata.

=Osapooled=
'''Klient''' - X-tee liige, kes tarbib teenuse osutaja poolt loodud teenust. Selleks sõlmib ta teenuse osutajaga kokkuleppe.

'''Teenuse pakkuja (osutaja)''' - X-tee liige, kes defineerib, realiseerib ja kirjeldab RIHAs enda teenuse. Teenuse tarbija sõlmib osutaja poolt loodud teenuse tarbimiseks kokkuleppe.

'''Creditinfo''' - X-tee liige, kes on ka andmeteenuse vahendaja, kes pakub teenusena turvaserveri majutust ja haldust. See tähendab, et teenuse osutaja ja kasutaja vaheline andmeliiklus läbib tema kontrolli all olevat infrastruktuuri. Andmeteenuse vahendaja kasutamisel tuleb kokku leppida teenuse vahendamise poliitika.

=Andmeteenuse kasutamise protsessi skeem=

[[File:xroad_requests.PNG]]

=Ettevalmistusprotsess andmeteenuse kasutamiseks=
[[File:Ettevalmistustegevused X-tee turvaserveri majutamiseks.jpg|1030x1030px]]

==Kliendi ja Creditinfo vahel vahetatavate andmete koosseis==

===Teenuse tarbija andmed===

*Asutuse registrikood
*Alamsüsteemi nimi
*Teenuse kasutaja isikukood

===Teenuse pakkuja (X-tee keskuses registreeritud) andmed===

*Teenuse pakkuja andmekogu nimi
*Teenuse nimi
*Teenuse versioon
*Teenus on X-tee test- või toodangkeskkonnas
*Teenuse sisendparameetrid X-tee testkeskkonnas

=Juhendid=

[https://www.ria.ee/ee/x-tee-liitumine.html RIA X-Teega liitumise juhend]

==Andmeteenuse tarbija registreerimine RIHA's==

Eeldus: ettevõtte registreerimiseks RIHA's vajalik Eesti Äriregistris registreeritud ettevõte.

RIHA koduleht https://riha.eesti.ee/

[https://moodle.ria.ee/course/view.php?id=3 Asutuse registreerimise juhend]

[https://moodle.ria.ee/mod/page/view.php?id=79 Alamsüsteemi registreerimise juhend]

Liitumistaotlus vaadatakse läbi paari-kolme tööpäeva jooksul ning otsus saadetakse liitumistaotluse esitanud isikule taotlusel näidatud e-posti aadressile.

==Turvalise allkirjastamise mooduli (HSM) sertifikaatide hankimine==

*Testkeskkonna sertifikaate tellides vajad Creditinfolt testkeskonna jaoks mõeldud CSR-faili, minge lehele https://sk.ee/teenused/digitempli-teenus/ , valige '''Telli e-tempel''' ning lisa "linnuke" kasti "Tellin testsertifikaadi". Edasi tuleb täita kõik kohustuslikud väljad. Seal küsitakse küll HSM-i kohta infot, aga sinna võib kirjutada "HSM/turvamoodul vms", keegi seda ei kontrolli. Allkirjastada võib ükskõik kes, kuna tegemist on testiga.
*Toodangukeskkonna sertifikaadi tellimiseks minge Sertifitseerimiskeskuse kodulehele https://sk.ee/teenused/teenused-x-tee-liikmele/ ja valige „Telli turvaserveri kliendina“. Toodangukeskkonna jaoks sertifikaati tellides on vaja Creditinfolt selleks mõeldud CSR-faili, lisaks infot HSM-i kohta:
<nowiki>
Krüptograafilise mooduli/seadme nimi: Luna PCI-E Cryptographic Module for Luna SA

Seerianumber: 1507267162

Firmware versioon: 6.10.9
</nowiki>
ja FIPS sertifikaati, mille saad siit: [[Media:FIPS140ConsolidatedCertDec2015.pdf]].

*Saatke ostetud sertifikaadid Creditinfole, kes paigaldab sertifikaadid allkirjastamise turvamoodulisse (HSM)

==Klient sõlmib lepingu vajaliku andmebaasi haldajaga==

*Rahvastikuregister - https://www.smit.ee/rahvastikuregister

*Pensioniregister (haldaja Eesti väärtpaberikeskus) - https://www.e-register.ee/

2016-12-06T12:10:08Z

Paavo:

{| align="right"
| [[Image:Flag of Estonia.svg|border|30px]] [[Mhrlisamine|eesti keeles]]
|}

= Introduction =

Payment defaults can be updated by means of Creditinfo’s credit management service. To do that, Sale Ledger statements should be regularly sent to credit management, and an individual agreement as to when they should be sent is made with each customer.

You can send the Sales Ledger to credit management as an XML file of the format specified by the following schema: [http://www.krediidiinfo.ee/schemas/kh/debtors_info.xsd http://www.krediidiinfo.ee/schemas/kh/debtors_info.xsd].

NB! A separate XML schema has been created for banks: [http://www.krediidiinfo.ee/schemas/kh/bank_debtors_info_ver2.xsd http://www.krediidiinfo.ee/schemas/kh/debtors_info_ver2.xsd]

= Principles of synchronising the credit management data =

Only the information about outstanding payments needs to be sent to credit management. The overall receivables balance is what shows the debtor’s balance, and the debt age can be deduced from the payments. These are the key data on which credit management relies. The paid invoices do not affect the balance, so they are of no significance for credit management.

Depending on the type of credit management services the debtor data you send to credit management can be additionally restricted to the debt age. For example, if your agreement with credit management specifies that only the service of updating the information in the Credit register is used, you can only send credit management the information about the debtors whose payments have been outstanding for over 45 days. Credit management does not need the data about the debtors whose debt is not over 45 days old. As the data to be sent is restricted, the size of the file and the time it will take to import the data will be reduced.

When the data is imported to credit management, the balances of the debtor’s payments in the database are updated. The payments that were outstanding before the data import are considered to have been paid and the balance is set to zero if the input file contains no information about them. Thus you do not need to inform credit management that an invoice has been paid. You just need to export a statement about the current outstanding payments, including advance payments for the overall receivables balance to be calculated correctly. This approach is easier for the customer (who does not need to remember anything from the previous data export), and the latest input file always corrects all the data in credit management (the data do not go out of sync).

= The ''debtors_info'' format =

* [http://www.krediidiinfo.ee/schemas/kh/debtors_info.xsd XML schema]
* [[debtors_info_mhr_example.xml]] - sample debtor data file. 
* [[Debtors info.png | debtors info.png]] - diagram of the structure of the XML file containing debtors’ data.

The ''/debtors/debtor/additional_data'' tag value with the ''additional_data_name="contract_no"'' attribute is used to add a payment default to the Credit register. The Credit Register also requires the number of the contract that was breached by the outstanding payment to be entered.

If the amounts are stated in euros, the sums referring to the period before the moment the euro came into use will be replaced by Estonian kroons at the rate of 15.6466 kroons to euro. If amounts are still sent in Estonian kroons after the change to the euro, kroons will be substituted with euros at the same rate, so the customer can choose when to start sending the data in euros.

= The ''bank_debtors_payments_ver2'' format =

This format is meant to be used by banks to forward data to credit management. The difference between ''bank_debtors_payments_ver2'' and ''debtors_info'' lies in the fact that the former is not based on invoices.

* [http://www.krediidiinfo.ee/schemas/kh/bank_debtors_payments_ver2.xsd XML schema]
* [[bank_debtors_payments_ver2_mhr_example.xml]] - sample debtor data file. 
* [[Bank debtors payments ver2.png | bank debtors payments ver2.png]] - diagram of the structure of the XML file containing debtors’ data.

If the currency rate is not set in attributes of the ''/debtors/debtor/overdue_payments'' tag, the rate of 15.6466 kroons to euro is used and currency conversions are performed if necessary.

= Forwarding the files =

Files can be sent to Creditinfo by means of the [[KiDocExchange]] SOAP interface.

The format of the name of the file to be sent to Creditinfo must be the following:

<pre>
<initials>_krediidihaldus_<id>.<extension>
</pre>

* <initials> - the initials of the company, for example, ki for Creditinfo. ki.
* <id> - the unique ID of the file in the sender’s system by which the sent file can be identified, for example, the time when the file was generated.
* <extension> - the extension of the file to be sent (XML or ZIP). We recommend compressing the files to be sent.

Example 1: a file to be sent to Creditinfo Eesti AS

<pre>
ki_krediidihaldus_20100613.zip
</pre>

2016-12-06T11:37:14Z

Paavo:

{| align="right"
| [[Image:Flag of Estonia.svg|border|30px]] [[Positiivne_register:_funktsionaalne_spetsifikatsioon|eesti keeles]]
|}

= Overview =
The '''Positive Register''' (Positiivne Register) is the data exchange system, through which creditors that are members of the register are able to share information about person’s credit obligations with consent of the person in question. The Positive Register allows a creditor to fulfill statutory requirements of responsible lending and to ensure a person’s ability to fulfill his or her debt obligations. Loan applicants will no longer have to collect documents from other creditors. Customer will also be better protected from the problems associated with making emotional decisions about loans and excessive debts.

= Definitions =

* '''Data''' – information about existing obligations of a private person that allows the Member to assess creditworthiness of the individual, as described in “Data composition” chapter.
* '''Data exchange system''' – the IT solution used by the Member to exchange the Data;
* '''Administrator of the data exchange system''' – AS Creditinfo;
* '''Codebtor''' – a private person together with whom the Applicant applies for credit and who is taken into account while making the Credit decision;
* '''Credit decision''' – the decision made by the Member with regard to concluding the Consumer credit contract with the Applicant;
* '''Borrower''' – a private person to whom the Member issues the credit based on the Consumer credit contract;
* '''Applicant''' – a private person who turns to the Member with the wish to conclude the Consumer credit contract and provides his/her Agreement for using the Data possessed by the Members;
* '''Guarantor''' – a person who assumes the obligation before the Member to be liable for performance of the Consumer credit contract obligations of the Applicant;
* '''Agreement''' – consent of the Applicant for providing the Member making the inquiry with the Data of the Members being the recipients of the inquiry;
* '''Member''' – an Estonian or foreign company that joins the Data exchange system and shares the Data about the Applicant with other Members;
* '''Consumer credit contract''' – the contract on the basis of which the Member issues the credit to the Applicant;
* '''Subject''' – a party to the contract;
* '''Consumer credit''' – the credit issued to the Applicant by the Member.

= Commercial rules =

* Users of the system are the Members.
* A Member must join X-tee.
* In order to register a Member in the Data exchange system the company registration code, the company’s name and the name of the country where the company operates shall be provided.
* The Member inputs the Data to the database of Creditinfo or provides Creditinfo with an IT-based option to obtain the Data from its database.
* The Member updates the Data by sending to Creditinfo all current Data.
* The Member updates the Data every 24 hours. Where the Data is available on paper – the Member updates the Data every 7 days.
* The Member only shares the Data of the Applicant with prior agreement of the Applicant.
* It should be possible to control the Agreement retroactively.
* The Agreement can be a simple one or can be digitally signed.
* An answer for the Data request does not reflect information about the Member.
* Composition of the answer to the Data request is described in in “Data composition” chapter.
* An answer with regard to sharing and updating the Data contains the error code and description (http://services.krediidiinfo.ee/wiki/index.php/X-tee_liides_KRI6).
* The Members share the Data of the composition with other Members.
* The list of the Members of the Data exchange system together with the date of joining is available on Creditinfo website.

= Data composition=

# Date of updating;
# Personal ID code;
# Role of the person within the scope of the contract;
# Contract number (number of the Consumer credit contract concluded between the Member and the Applicant);
# Type of consumer credit;
# Effective date of credit agreement – date of commencement of the Consumer credit contract;
# End date of credit – the date of repayment of the Consumer credit;
# Consumer credit sum – the maximum sum of the Consumer credit contract paid or payable to the Applicant;
# Currency – currency of the Consumer credit contract;
# Payment schedule – the sum and the date of the next or the closest three payments;
# Balance – the amount of the obligation of the consumer before the Member;
# Overdue balance – the sum of payments overdue for more than 7 days;
# Requests – dates of requests made with regard to the Data of the Applicant made during the past three years.

= Use cases =

[[File:Krediidikohustuste register.jpg]]

== Administration of the Members ==

Administrator of the data exchange system registers information about the Member in the Data exchange system / removes such information from the Data exchange system.

== Sharing of the Data ==

The Member shares the data about the Applicant from the database of the Member through the Data exchange system.

== Administration of the Data ==

'''Prerequisite:''' The Member has concluded the authorization agreement with Creditinfo, under which the Member issues to Creditinfo the rights of authorized data processor with regard to the database held by the Member.

The Member forwards information from the database held by the Member to Creditinfo.

[[File:Andmete haldus.jpg]]

Scenarios

A) The Member forwards all current data on consumer credits to the administrator of the Data exchange system in XML format using [[X-road interface: subsystem POSR | x-road interface]].

B) The Member changes the consumer credit details in the Data exchange system using [[X-road interface: subsystem POSR | x-road interface]].

= Sequence diagram =

[[File:Krediidiotsuse tegemine.jpg]]

= Links =
[[X-road interface: subsystem POSR | X-road interface]]