Customer Own accounts, transactions, loans, cards & complaints | Bank Admin All customers, analytics, reports, operations & branches |
Login Username / ID, Password, MFA | → | JWT Token Access & Refresh tokens | → | RBAC Engine Roles mapped to permissions |
**Auth Service**
Login, MFA, tokens | **User Service**
Profile, roles | **Account Service**
Balances, summaries | **Transaction Service**
Transactions, payments |
**Loan Service**
Loans, EMIs, dues | **Card Service**
Cards, limits | **Complaint Service**
Register, track, resolve | **Analytics Service**
Reports, insights |
**Intent Detection** | **Prompt Management** | **Function Calling** |
**Context & Memory** | **Plugin Invocation** | **Response Generation** |
PLUGINS (BANKING CAPABILITIES) Account, Transaction, Loan, Card, Complaint, Analytics, Customer & Payment. Typed operations mapped to application services. | KNOWLEDGE & SEARCH (RAG) Azure AI Search (vector) over policy docs, FAQs, statements & guidelines. Grounds answers in the bank's own content. | AZURE OPENAI SERVICE GPT-4o / GPT-4.1 with embeddings: chat completion, function calling & response generation. |
MYSQL DATABASE (CORE DATA STORE) users, roles, customers, accounts, transactions, loans, credit_cards, complaints, branches. | AZURE BLOB STORAGE Statements, KYC files, loan agreements, policies & forms. | EXTERNAL INTEGRATIONS Payment Gateway, SMS / Email, KYC / AML, Credit Bureau & Core Banking. |
| Layer | Component(s) | Role |
|---|---|---|
| Users / Access | Role-Based Dashboards | Separate Customer & Bank Admin experiences, enforced by RBAC |
| Authentication | JWT + MFA + RBAC Engine | Verify identity, issue tokens, map roles to permissions |
| Application Layer | FastAPI Services | Auth, User, Account, Transaction, Loan, Card, Complaint, Analytics, Chat APIs |
| Orchestration | Semantic Kernel | Intent, prompts, function calling, memory, response generation |
| AI Reasoning | Azure OpenAI (GPT-4o / 4.1) | Language understanding, function-calling decisions, replies |
| Knowledge | Azure AI Search (RAG) | Grounds answers in policy docs, FAQs, statements, guidelines |
| Plugins | Banking Capability Plugins | Typed banking operations mapped to application services |
| Core Data | MySQL Database | System of record for users, accounts, transactions, loans |
| Documents | Azure Blob Storage | Statements, KYC files, loan agreements, policies, forms |
| Integrations | External Services | Payment, SMS/Email, KYC/AML, Credit Bureau, Core Banking |
| Observability | OpenTelemetry + Azure Monitor | Traces, metrics, logs, alerts, audit & security logging |
| Principle | What it means |
|---|---|
| Conversational | A chat assistant replaces complex navigation for everyday banking tasks. |
| Role-aware | Distinct experiences for Customers and Bank Admins, enforced by RBAC. |
| Grounded | Answers are based on the bank's own data and documents, not guesswork. |
| Secure | JWT authentication, MFA, and least-privilege permissions throughout. |
| Observable | OpenTelemetry traces, metrics, and logs feed Azure monitoring and alerting. |
| Role | Scope of Access |
|---|---|
| Customer | Own accounts, transactions, loans, cards, and complaints (self-service only). |
| Bank Admin | All customers, analytics, reports, operations, and branch data (organization-wide). |
| Stage | Purpose |
|---|---|
| Login | Username or ID, password, and multi-factor authentication (MFA) for identity assurance. |
| JWT Token | Issues a short-lived access token and a refresh token for stateless, scalable sessions. |
| RBAC Engine | Maps roles (Customer and Admin) to a granular set of least-privilege permissions. |
| Customer Dashboard | Bank Admin Dashboard |
|---|---|
| Account summary & balances | Customer & account management |
| Transactions history | Transactions & analytics |
| Loan details and EMIs | Loan & credit card management |
| Credit cards and limits | Complaint management |
| Complaints register & tracking | Branch performance |
| AI Banking Assistant: chat with the bank | Reports & operational analytics |
| Profile management | AI Banking Assistant: ask, analyze, act |
| Service | Responsibility |
|---|---|
| Auth Service | Login, MFA, and token issuance & validation. |
| User Service | Profile, preferences, and role management. |
| Account Service | Accounts, balances, and summaries. |
| Transaction Service | Transactions and payments. |
| Loan Service | Loans, EMIs, and dues. |
| Card Service | Cards, limits, and payments. |
| Complaint Service | Register, track, and resolve complaints. |
| Analytics Service | Reports, insights, and dashboards. |
| Chat Assistant API | Send/receive messages and maintain conversation session state. |
| Table | Key Fields | Purpose |
|---|---|---|
| users | user\_id (PK), username, password\_hash, role\_id (FK) | Authentication identities. |
| roles | role\_id (PK), role\_name, description | RBAC role definitions. |
| customers | customer\_id (PK), name, email, phone, address | Customer master data. |
| accounts | account\_id (PK), customer\_id (FK), account\_type, balance | Bank accounts & balances. |
| transactions | transaction\_id (PK), account\_id (FK), amount, status | Money movement records. |
| loans | loan\_id (PK), customer\_id (FK), loan\_amount, emi\_amount | Loan lifecycle & dues. |
| credit\_cards | card\_id (PK), customer\_id (FK), credit\_limit, available\_limit | Card limits & usage. |
| complaints | complaint\_id (PK), customer\_id (FK), type, status | Complaint tracking. |
| branches | branch\_id (PK), branch\_name, location, manager\_id | Branch & operations data. |
| Kernel Stage | What it does |
|---|---|
| Intent Detection | Interprets what the user actually wants from natural language. |
| Prompt Management | Builds and templates the prompts that guide the model's reasoning. |
| Function Calling | Selects and invokes the right banking function for the intent. |
| Context & Memory | Maintains conversation context so multi-turn dialogue stays coherent. |
| Plugin Invocation | Routes the request to the correct banking capability plugin. |
| Response Generation | Composes a clear, grounded answer to return to the user. |
**Intent Detection**
Understands what the user is asking for | **Prompt Management**
Builds templated prompts + system instructions | **Function Calling / Planner**
Chooses which plugin function(s) to run |
**Context & Memory**
Keeps multi-turn chat history & state | **Plugin Invocation**
Executes the function with typed arguments | **Response Generation**
Composes grounded, natural-language reply |
PLUGINS (BANKING CAPABILITIES) 5 Account · Transaction · Loan · Card · Complaint · Analytics · Customer · Payment. Typed functions call FastAPI services, which query / update the **MySQL Database**. | KNOWLEDGE & SEARCH (RAG) 4 Azure AI Search · vector search over policy docs, FAQs, statements & guidelines. Grounds answers in the bank's own content. | AZURE OPENAI SERVICE 6 GPT-4o / GPT-4.1 · embeddings. Chat completion & function-calling decisions, reasoning over context + retrieved knowledge. |
| Capability | Role in the assistant |
|---|---|
| Plugins (Banking Capabilities) | Safe, typed operations the assistant can call: Account, Transaction, Loan, Card, Complaint, Analytics, Customer, and Payment. Each maps to an application-layer service. |
| Knowledge & Search (RAG) | Retrieval-Augmented Generation over Azure AI Search (vector search) across policy documents, FAQs, statements, and guidelines, grounding responses in the bank's own content. |
| Azure OpenAI Service | GPT-4o / GPT-4.1 with an embeddings model provide chat completion, function calling, and response generation: the linguistic engine behind every conversation. |
| Component | Purpose |
|---|---|
| Payment Gateway | Processes payments and settlements. |
| SMS / Email Service | Delivers alerts, OTPs, and notifications. |
| KYC / AML Service | Identity verification and anti-money-laundering checks. |
| Credit Bureau API | Credit scores and history for lending decisions. |
| Core Banking System | Authoritative ledger and account operations. |
| Azure Blob Storage | Statements, documents, KYC files, loan agreements, policies, and forms. |
| Stage | What it captures |
|---|---|
| Instrumentation | Request/response traces, DB query performance, API latency, and AI token usage. |
| Collectors | The OTel Collector gathers and forwards telemetry to backends. |
| Azure Monitoring | Application Insights dashboards, workbooks, alerts, and performance views. |
| Audit & Security Logging | Login attempts, RBAC changes, data-access logs, and compliance trails. |
| Alerting & Notifications | Email, Teams/Slack, SMS alerts, and incident escalation. |