JCIM
JCIM led
- Nested access architecture
- Controlled virtual endpoints
- Specialised environment integration
Proof unit 04 · Bosch Building Technologies · EffiLink — restricted network environments
Extending remote service through centrally managed banking networks
Some customer sites could not be reached as independent locations. Access had to pass through a centrally controlled banking network with a single formal entry point and its own internal routing logic.
EFFILINK SERVICE
CENTRAL PERIMETER
Formal entrycontrolled
EFFILINK / INSIDE
internal sites
JCIM / INDUSTRIAL SYSTEM EVIDENCEREF 04–A
01One controlled perimeter
02Nested access
03Reusable model
Evidence typeMECHANISM EVIDENCEEvidence strength: MODERATE
The challenge
- Individual branches were managed through a central network rather than exposed as separate customer endpoints.
- The existing EffiLink access model therefore could not simply be repeated at every site.
- The solution had to preserve central control while still reaching the correct internal installation securely.
What JCIM did
- 01
JCIM adapted the proven EffiLink architecture to a nested access model — effectively ‘EffiLink inside EffiLink’.
- 02
JCIM created controlled virtual clients that acted as formal endpoints for EffiLink and translated approved sessions into the internal network logic.
- 03
JCIM reused the existing security and service principles rather than creating an unrelated special system.
- 04
JCIM designed the overall architecture and invested the implementation effort needed to understand the specialised network environment.
Responsibility boundary
BOSCH
Bosch / partners brought
- Central perimeter and routing policy
- Service and site context
- Approval of the operating boundary
DEPENDENCIES
Partners / external dependencies
- Access to routing and perimeter logic
- Cooperation by the network owner
- Formally approvable virtual endpoints
Buyer contribution
- Central perimeter and routing policy
- Service and site context
- Approval of the operating boundary
What changed
Remote maintenance became possible across a centrally managed network that could not be treated as a collection of normal standalone sites.
Bosch could extend the EffiLink service proposition into an important customer environment without bypassing the network operator’s control model.
The implementation created reusable knowledge for further restricted or centrally routed networks.
Evidence
Before state → After state
Before state
→Branches were reachable only through a centrally controlled banking network.
After state
Remote maintenance became possible behind one central perimeter.
Before state
→The standard EffiLink model could not be repeated at every site.
After state
The network operator's control model remained intact.
Before state
→The network operator had to preserve one controlled perimeter.
After state
Knowledge for further centrally routed environments was created.
- One controlled perimeter
- Nested access
- Reused security model
06
Human Logic
The network operator needed to retain one controlled perimeter. Bosch needed service reach beyond that perimeter. The solution worked because it translated between both operating models instead of forcing either side to abandon its control logic.
Transfer conditions
Transferable when …
- One central perimeter must retain formal control.
- Approved sessions can be translated into internal routing logic.
- The existing service and security model can be reused.
Not directly transferable when …
- The internal network design is inaccessible or cannot be formally approved.
- The new environment requires a fundamentally different trust or identity model.
08
What this proves
The case demonstrates JCIM’s ability to adapt a proven service platform to a structurally different customer environment without breaking the original security and operating model.
- A controlled service model can be adapted to a structurally different network boundary.
- Restricted environments do not automatically require an unrelated special system.
09
What this does not prove
- The case is not an outcome, timeline or scale guarantee for another programme.
- The case identifies neither the network operator nor a universally approved network architecture.
NEXT PROOF
Map which perimeter must retain control in your customer environment and what minimum translation is possible behind it.
We will identify the smallest real proof that can turn uncertainty into a controlled management decision.