Secure Swiss Finance Network (SSFN)

Secure Swiss Finance Network (SSFN)

For secure, flexible and resilient data communication

Enabling Secure and Flexible Data Exchange in the Swiss Financial Center

Secure access to infrastructure services is essential for a smoothly functioning Swiss financial center. Data exchange among participants has to meet the very highest requirements regarding security and availability in the fight against cyber risks. The Secure Swiss Finance Network (SSFN) is a controlled and secure network launched by the Swiss National Bank and SIX.

The SSFN allows connected users in the Swiss financial center to communicate securely with SIX, other financial market infrastructures and also with each other. The network is based on the SCION technology developed by ETH Zürich, thanks to which a new level of security, performance and functionality in data exchange processes is achieved.

Connection to SSFN

Do you need more information or do you have any questions about how to connect to SSFN? We will be happy to support you

Get in Touch

Initiate the Switchover to SSFN Now

At the end of September 2024, SSFN will replace the current communication network Finance IPNet (see news dated 20.12.2022). Please note that some services such as SIC or SECOM have defined end of June 2024 as the end-date for access via Finance IPNet.

All infrastructure services of SIX that currently use Finance IPNet as a gateway have been prepared for the connection via SSFN. SIC, euroSIC, SECOM (through the webMAX and CCLink interfaces) and ATM Monitoring are already being accessed via SSFN. Please contact your service support for further details.

We advise all customers of SIX with a Finance IPNet connection to initiate all the necessary steps for switching over to SSFN or any other possible connection service (e.g. internet) as soon as possible. 

Customers currently using other connection services to SIX (e.g. internet, P2P) do not need to change anything.

How You Will Benefit

Protected Data Exchange

SSFN allows a precisely defined group of users to exchange data with each other in a controlled manner and separately from the internet

Resilient Data Traffic

Collaboration with multiple SSFN communication providers ensures redundant connections among all the connected parties. The temporary loss of one provider can be compensated for within seconds, normally without any disruption to the application session

Controlled Access

Certificates created on the basis of the SSFN regulations ensure controlled access to the network

About This Service

How Does SSFN Work?

The SSFN is based on the SCION technology developed by ETH Zürich and, as a network, acts as a standalone isolation domain (ISD) with its own trust root configuration (TRC) used exclusively by the Swiss financial sector.

The cooperation of the telecommunications providers (providers of SCION connections) enables data communication within SSFN. SIX issues the certificates required for participation. SSFN allows a precisely defined group of users (network participants) to exchange data with each other.

Isolation domains like SSFN combine the benefits of private and public networks. The cooperation and networking of several telecommunications providers increase robustness against failures and attacks. This is because the status of every possible connection is known at all times. If the connection in use fails, the next best is automatically activated based on the rules, and data exchange continues on this connection – normally without any disruption to the application session.

Fact: SSFN was invented in Switzerland, but is not limited to Switzerland. An SSFN connection can be established worldwide, depending on the offering of a provider of SCION connections for SSFN.

Fact: SSFN was invented in Switzerland, but is not limited to Switzerland. An SSFN connection can be established worldwide, depending on the offering of a provider of SCION connections for SSFN.

Criteria to Establish an SSFN Connection

Currently, SIX customers of the following services fulfil the criteria (i.e. are eligible) to establish an SSFN connection are SIC, euroSIC, SECOM.

  • It is irrelevant whether the eligible SIX customer already uses Finance IPNet for one of the above services or which service the eligible SIX customer plans to access via SSFN.
  • Customers of SIC, euroSIC and SECOM using a service bureau are advised to check with them directly whether SSFN can be used for communication with the service bureau (see list of SIC/euroSIC providers).
  • Customers of SIC, euroSIC and SECOM using SWIFT as access option are advised to contact their respective service support at SIX for further information.

Note: All parties using SSFN are required to adhere to the "SSFN Regulations" (which can be downloaded here).

Questions regarding eligibility or the "SSFN Regulations" should be sent to PM-SSFN@six-group.com

Download SSFN Documents

To download our password-protected documents ("SSFN Regulations", "Connectivity Guide for SSFN", "Guidelines to Apply for an SSFN Certificate", "Agreement Regarding SSFN Certificates", "Introduction to SSFN") from our webpage, please use the contact form below to request login details.

Request access

How to Use SSFN

The minimum requirements for using SSFN are a SCION connection, a SCION gateway and the SSFN certificate. For reasons of redundancy, SIX recommends connecting via two different telecommunications providers.

SIX has prepared guides for SSFN to support eligible customers (which can be downloaded here).

Note: Experience shows that responsibility for setting up and operating an SSFN connection lies primarily with network specialists.

Step What needs to be done? Who can offer support?
(see also the list of SSFN service providers)
1

Analyze the existing connections;
define the configuration of the SSFN connection;
define the SIX services to be accessed via the SSFN

 - Provider of SCION gateway
- Provider of SCION connections
- SIX carrier management
2 Obtain and install the SCION connection(s) and gateway(s) - Provider of SCION gateway
- Provider of SCION connections
3 Apply for an SSFN certificate Provider of SSFN certificates
4 Install the SSFN certificate;
test the SSFN connection		 - Provider of SCION gateway
- Provider of SCION connections
5 Create test instances of the required SIX service and perform
connection tests		 Support of the respective service at SIX
6 Connection of the production instance of the required SIX service and
use the SSFN for productive data exchange		 Support of the respective service at SIX

SSFN Service Providers

 

SIX carrier management can help with basic questions about connecting to SSFN.

Contact us

All the necessary work involved in establishing a connection to SSFN is performed by the SSFN service providers. The following currently approved companies can support SIX customers who are interested:

The aforementioned information is intended solely for information purposes and does not constitute a recommendation regarding the conclusion of a contract. Any questions about connecting to the SSFN shall be addressed to the relevant service providers. Furthermore, SIX shall assume no responsibility for the completeness, accuracy or topicality of the aforementioned information.

Are you interested in becoming an SSFN service provider, e.g. as a telecommunications provider or service office?

Get in touch with us

FAQ

Find out more