Open Banking Integration Flow

The Easy Cash Direct Debit (Open Banking) process consists of three stages: Authentication → Account Enrollment → Payment.


End-to-End Flow

Customer
Merchant Server
Hecto Financial
11. Payment request
22. ARS authentication request
33. ARS authentication call to customer
44. Authentication completion notification
55. ARS authentication confirmation → obtain trdNo
66. Account enrollment (for Open Banking)
77. Payment (for Open Banking)
88. Payment result response
NOTE

One-time enrollment

Account enrollment (step 6) is required only once. For subsequent payments using an already-enrolled account, you can call the payment API directly, skipping the authentication and enrollment steps.
NOTE

Adding Open Banking for existing firm banking customers

Customers already enrolled via firm banking can call the 'Open Banking Account Enrollment' API separately to add Open Banking service. For first-time enrollment, the 'Account Enrollment (for Open Banking)' API registers both firm banking and Open Banking simultaneously in a single call.

Step 1: ARS Account Ownership Verification

Verify account ownership via ARS phone authentication and obtain the transaction reference number (trdNo).

StepAPIURIDescription
1ARS authentication requestPOST /v1/api/auth/arsInitiate ARS authentication call to the customer
2ARS authentication confirmationPOST /v1/api/auth/arscheckRetrieve ARS authentication result and obtain trdNo
NOTE

trdNo must be retained

The transaction reference number (trdNo) returned in the ARS authentication confirmation response is a required parameter for the next step, account enrollment. Store it temporarily on the merchant server.
NOTE

ARS authentication API is a shared firm banking API

The ARS authentication request and confirmation APIs use the /v1/api/auth/ path, which is shared with the Easy Cash Direct Debit (firm banking) authentication service.

Step 2: Account Enrollment (for Open Banking)

Use the trdNo obtained from ARS authentication to enroll the account. A single API call registers both firm banking and Open Banking simultaneously.

APIURIDescription
Account enrollment (for Open Banking)POST /v2/api/acnt/regSimultaneous firm banking + Open Banking enrollment using ARS trdNo
Open Banking account enrollmentPOST /v2/api/acnt/obregAdd Open Banking for existing firm banking customers
Response fieldDescription
custAcntKeyCustomer account key of the enrolled account (used for payment)
svcDivCdEnrolled service type (1: Firm banking, 2: Open Banking, 3: Simultaneous enrollment)
fintechUseNoFintech usage number (fintechUseNo) — Open Banking user account identifier
obPayerNoOpen Banking payer number

Step 3: Payment (for Open Banking)

Execute payment using the enrolled account. Funds are transferred from the customer's account to the merchant's Open Banking master account.

APIURIDescription
Payment (for Open Banking)POST /v2/api/pay/confirmOpen Banking direct debit payment authorization
Void / RefundPOST /v1/api/pay/cancelPayment void and refund processing
RemittancePOST /v2/api/pay/rmtMerchant → customer account fund transfer

Full API List

The complete list of APIs provided by Easy Cash Direct Debit (Open Banking). All APIs use the POST method.

NOTE

v2 vs v1 path distinction

Open Banking-specific APIs use the /v2/api/... path. Void/refund and inquiry APIs share the /v1/api/... path with firm banking.

Account Management (2 APIs)

API NameURINotes
Account enrollment (for Open Banking)/v2/api/acnt/regRequires ARS trdNo, simultaneous firm banking + OB enrollment
Open Banking account enrollment/v2/api/acnt/obregAdd OB for existing firm banking customers

Transfer Services (3 APIs)

API NameURINotes
Payment (for Open Banking)/v2/api/pay/confirm
Void / Refund/v1/api/pay/cancelShared with firm banking
Remittance/v2/api/pay/rmt

Fund Return Claims (2 APIs)

API NameURI
Fund return claim request/v2/api/fundsReturn/req
Fund return claim check/v2/api/fundsReturn/check

Inquiry Services (3 APIs)

API NameURINotes
Transaction result inquiry/v1/api/pay/morwShared with firm banking
Transaction history inquiry/v1/api/pay/translistShared with firm banking
Account list inquiry/v1/api/acnt/listShared with firm banking

Account Administration (1 API)

API NameURI
Open Banking service withdrawal/v2/api/member/withdraw

Request/Response Basic Structure

All API requests and responses use JSON format.

Request Example

{
  "hdInfo": "SPAY_RP0W_1.0",
  "mchtId": "Merchant ID",
  "mchtTrdNo": "ORDER20240101100000",
  "reqDt": "20240101",
  "reqTm": "100000",
  "mchtCustId": "AES-encrypted customer ID",
  "trdAmt": "AES-encrypted payment amount",
  "pktHash": "SHA256 hash value"
}

Success/Failure Determination

FieldSuccessFailure
outStatCd00210031
outRsltCd0000Error code

Parameter validation failure response example

{
  "outStatCd": "0031",
  "outRsltCd": "ST09",
  "outRsltMsg": "Invalid request message"
}

Next Steps

💬

Need technical support?