Secure Swiss Finance Network (SSFN)

Secure Swiss Finance Network (SSFN)

For secure, flexible and resilient data communication

Enabling Secure and Flexible Data Exchange in the Swiss Financial Center

Secure access to infrastructure services is essential for a smoothly functioning Swiss financial center. Data exchange among participants has to meet the very highest requirements regarding security and availability in the fight against cyber risks. The Secure Swiss Finance Network (SSFN) is a controlled and secure network launched by the Swiss National Bank and SIX.

The SSFN allows connected users in the Swiss financial center to communicate securely with SIX, other financial market infrastructures and also with each other. The network is based on the SCION technology developed by ETH Zürich, thanks to which a new level of security, performance and functionality in data exchange processes is achieved.

How You Will Benefit

About This Service

How Does SSFN Work?

The SSFN is based on the SCION technology developed by ETH Zürich and, as a network, acts as a standalone isolation domain (ISD) with its own trust root configuration (TRC) used exclusively by the Swiss financial sector.

The cooperation of the telecommunications providers (providers of SCION connections) enables data communication within SSFN. SIX issues the certificates required for participation. SSFN allows a precisely defined group of users (network participants) to exchange data with each other.

Isolation domains like SSFN combine the benefits of private and public networks. The cooperation and networking of several telecommunications providers increase robustness against failures and attacks. This is because the status of every possible connection is known at all times. If the connection in use fails, the next best is automatically activated based on the rules, and data exchange continues on this connection – normally without any disruption to the application session.

Fact: SSFN was invented in Switzerland, but is not limited to Switzerland. An SSFN connection can be established worldwide, depending on the offering of a provider of SCION connections for SSFN.

Fact: SSFN was invented in Switzerland, but is not limited to Switzerland. An SSFN connection can be established worldwide, depending on the offering of a provider of SCION connections for SSFN.

Criteria to Establish an SSFN Connection

Currently, SIX customers of the following services fulfil the criteria (i.e. are eligible) to establish an SSFN connection are SIC, euroSIC, SECOM.

  • It is irrelevant whether the eligible SIX customer already uses Finance IPNet for one of the above services or which service the eligible SIX customer plans to access via SSFN.
  • Customers of SIC, euroSIC and SECOM using a service bureau are advised to check with them directly whether SSFN can be used for communication with the service bureau (see list of SIC/euroSIC providers).
  • Customers of SIC, euroSIC and SECOM using SWIFT as access option are advised to contact their respective service support at SIX for further information.

Note: All parties using SSFN are required to adhere to the "SSFN Regulations" (which can be downloaded here).

Questions regarding eligibility or the "SSFN Regulations" should be sent to PM-SSFN@six-group.com

Download SSFN Documents

How to Use SSFN

The minimum requirements for using SSFN are a SCION connection, a SCION gateway and the SSFN certificate. For reasons of redundancy, SIX recommends connecting via two different telecommunications providers.

SIX has prepared guides for SSFN to support eligible customers (which can be downloaded here).

Note: Experience shows that responsibility for setting up and operating an SSFN connection lies primarily with network specialists.

Step What needs to be done? Who can offer support?
(see also the list of SSFN service providers)
1

Analyze the existing connections;
define the configuration of the SSFN connection;
define the SIX services to be accessed via the SSFN

- Provider of SCION gateway
- Provider of SCION connections
- SIX carrier management
2 Obtain and install the SCION connection(s) and gateway(s) - Provider of SCION gateway
- Provider of SCION connections
3 Apply for an SSFN certificate Provider of SSFN certificates
4 Install the SSFN certificate;
test the SSFN connection
- Provider of SCION gateway
- Provider of SCION connections
5 Create test instances of the required SIX service and perform
connection tests
Support of the respective service at SIX
6 Connection of the production instance of the required SIX service and
use the SSFN for productive data exchange
Support of the respective service at SIX

SSFN Service Providers

 

SIX carrier management can help with basic questions about connecting to SSFN.

All the necessary work involved in establishing a connection to SSFN is performed by the SSFN service providers. The following currently approved companies can support SIX customers who are interested:

The aforementioned information is intended solely for information purposes and does not constitute a recommendation regarding the conclusion of a contract. Any questions about connecting to the SSFN shall be addressed to the relevant service providers. Furthermore, SIX shall assume no responsibility for the completeness, accuracy or topicality of the aforementioned information.


FAQ