Ep2 - Metadata Gateway & 2FA Anti-Structuring

1. Overview: The Metadata Gateway
In alignment with NBE (National Bank of Ethiopia) Article 7, financial institutions must implement a "Metadata Gateway." This layer acts as a validator that ensures every transaction carries mandatory descriptive data (metadata) before it hits the core banking ledger.


2. AntiStructuring Logic (The 5,000 ETB Threshold)
"Structuring" is the practice of breaking down a large sum of money into smaller transactions to avoid detection.
Logic: Our system monitors the cumulative velocity of a user within a 24hour window.
Trigger: If the sum of transactions exceeds 5,000 ETB through multiple small transfers (e.g., 2,000 + 2,000 + 1,500), the Gateway intercepts the process.


3. 2FA Trigger Simulation
When the antistructuring logic is flagged:

1. The transaction is placed in a "Pending Compliance" state.

2. An automated 2FA (TwoFactor Authentication) request is pushed to the user’s registered device.

3. The transaction only proceeds if the 2FA is verified, ensuring the user is authorized and aware of the cumulative volume.


4. CI (Configuration Item) PreAudit Workflow
Before the transaction is finalized, the CI PreAudit ensures the system environment is compliant:
Version Check: Is the Metadata Gateway running the NBEapproved schema?
Encryption Audit: Is the TLS
1.3 tunnel active for metadata transmission?
Log Integrity: Is the audit trail being written to a writeoncereadmany (WORM) storage?

(የአማርኛ ክፍል)


1. አጠቃላይ እይታ፡ የሜታዳታ ጌትዌይ (Metadata Gateway)
በየኢትዮጵያ ብሔራዊ ባንክ አንቀጽ 7 መሠረት፣ የፋይናንስ ተቋማት "የሜታዳታ ጌትዌይ" መተግበር አለባቸው። ይህ ሲስተም ማንኛውም የገንዘብ ዝውውር ወደ ዋናው የሂሳብ መዝገብ ከመድረሱ በፊት አስፈላጊ የሆኑ መረጃዎች (Metadata) መያዙን የሚያረጋግጥ የግምገማ ንብርብር ነው።


2. የተዋቀሩ ዝውውሮች መከላከያ (AntiStructuring Logic)
"Structuring" ማለት አንድን ከፍተኛ መጠን ያለው ገንዘብ ክትትልን ለማምለጥ በትንንሽ ክፍሎች ከፋፍሎ መላክ ማለት ነው።
ሎጂክ (Logic): ሲስተማችን በአንድ ተጠቃሚ በ24 ሰዓት ውስጥ የሚደረጉ የገንዘብ ዝውውሮችን ድምር ይቆጣጠራል።
መቀስቀሻ (Trigger): በትንንሽ ዝውውሮች ድምሩ ከ 5,000 የኢትዮጵያ ብር (ETB) በላይ ከሆነ፣ ጌትዌዩ ዝውውሩን ለጊዜው ያቆመዋል።


3. የሁለትደረጃ ማረጋገጫ (2FA) ሲሙሌሽን
የተዋቀረ ዝውውር ጥርጣሬ ሲፈጠር፡

1. ዝውውሩ "compliance በመጠባበቅ ላይ" ወደሚል ሁኔታ ይሸጋገራል።

2. ወደ ተጠቃሚው ስልክ የሁለትደረጃ ማረጋገጫ (2FA) ኮድ ይላካል።

3. ዝውውሩ የሚፈጸመው ተጠቃሚው ኮዱን በትክክል ካስገባ ብቻ ነው፤ ይህም ተጠቃሚው ስለ አጠቃላይ የገንዘብ መጠኑ እውቅና እንዳለው ያረጋግጣል።


4. የCI (Configuration Item) የቅድመኦዲት የስራ ሂደት
ዝውውሩ ከመጠናቀቁ በፊት የሲስተሙ ዝግጁነት ይረጋገጣል፡
የስሪት ምርመራ: ሜታዳታ ጌትዌዩ በብሔራዊ ባንክ የተፈቀደውን መመሪያ እየተከተለ መሆኑን ማረጋገጥ።
የምስጠራ ኦዲት (Encryption): የመረጃ ልውውጡ በከፍተኛ ጥበቃ (TLS
1.3) እየተከናወነ መሆኑን ማረጋገጥ።
የመዝገብ ትክክለኛነት: የኦዲት መዝገቡ ሊሰረዝ በማይችል መልኩ እየተቀመጠ መሆኑን ማረጋገጥ።

Technical Simulation Workflow (Demo)

```python
Pseudocode Logic for NBE Article 7 Compliance
def process_transaction(user_id, amount, daily_total):
THRESHOLD = 5000 ETB


1. CI PreAudit Check
if not system_integrity_check():
return "ERROR: System Configuration NonCompliant"


2. AntiStructuring Logic
if (daily_total + amount) > THRESHOLD:
print(f"Triggering 2FA: Cumulative total {(daily_total + amount)} exceeds threshold.")


3. Simulate 2FA Trigger
if verify_2fa(user_id):
return finalize_metadata_gateway(amount)
else:
return "REJECTED: 2FA Verification Failed"

return finalize_metadata_gateway(amount)

def system_integrity_check():
CI PreAudit logic
return True Schema validated, Encryption Active
```

Status: `Ready for Integration`
Compliance Node: `NBEMETADATAv
1.2`
Security Protocol: `2FAASLTriggerEnabled`