← Back
Home › Systems › Finance and trading

interbank-messaging

secure financial messaging between banks: store-and-forward network, PKI/HSM, MT-to-MX translation, gpi end-to-end tracking, sanctions pre-screening

SWIFT FIN/ISO 20022, SWIFT gpi

SystemTechniques · 14Primitives · 52 interbank-messaging Durable job queuedistributed · medium: Persisted tasks that workers lease for a visibility timeout, ack on success and retry with backoff; at-least-once execution that survives worker and queue crashes.›Exactly once processingdistributed · medium: Idempotent producers plus transactional offset+output commits for effectively-once resultsPartitioned commit logdistributed · medium: A topic split into replicated append-only partitions: key hash keeps per-key order, offsets give position, and a high watermark limits readers to fully replicated records.›Transactional outboxdistributed · medium: Write the event as a row in the same local transaction as the state change; a relay publishes it later at-least-once, so state and events never diverge.›Hardware security module (HSM)security · medium: A tamper-resistant device or service that generates keys, signs, decrypts and wraps with them internally, and releases a key only as ciphertext.›Tamper-evident audit logsecurity · medium: An append-only log whose Merkle root, signed per batch, lets anyone verify an entry is present and history was never rewritten, with log-size proofs.›Distributed tracingsystems · medium: Give each request a 128-bit id, record timed spans linked by parent ids, pass the ids in a header across every hop, and join the spans back into a tree afterwards.›Idempotency keysfinance · low: Client-chosen unique key per logical operation, stored with a request fingerprint and the final response, so retries replay the first result instead of acting twice.›Dual control approvalsecurity · low: Four-eyes / maker-checker approval with quorum policies for sensitive operationsMessage sequence numbersdistributed · low: A per-stream counter on every message lets the receiver detect loss, duplicates and reordering, ack cheaply and resume after reconnect with "send from N".›Event sourcingfinance · low: Persist state changes as an append-only stream of immutable events per entity; current state is a fold over them, guarded by expected-version appends.›Iso 20022 messagesfinance · low: ISO 20022 XML payment and securities messages (pacs, pain, camt, sese): structure and validationTdl message translationnetworking · low: Translate between bit-packed tactical data link messages (Link 16 J-series, VMF) via field-level mapping, scaling and unit conversionAho-Corasick multi-pattern matchingsearch-sort · low: Find all occurrences of many fixed patterns in one pass over the text, in time independent of the pattern count, using a trie with failure links.›Fuzzy string matchingsearch-sort · low: Edit distance, Jaro-Winkler and trigram indexes for approximate name and address matchingName transliterationsearch-sort · low: Convert personal names between scripts (Cyrillic, Arabic, CJK to Latin) with rule tables and variant generation for matchingPhonetic name matchingsearch-sort · low: Reduce names to phonetic keys (Soundex, Metaphone, Double Metaphone) so differently spelled but similar-sounding names collideECDSA signaturessecurity · low: The elliptic-curve signature standardised in FIPS 186-5 (P-256) and used by secp256k1 ledgers; 64-byte signatures, but a repeated or biased nonce leaks the private key.›JSON Schema validationsecurity · low: Compile a JSON Schema once, then check every untrusted document against it, within hard size and depth limits, and report failures as JSON Pointers.›Message authentication codes (HMAC,…security · low: A keyed short tag proving a message is unmodified and came from a key holder; pick HMAC, CMAC, KMAC or a one-time polynomial MAC by what primitive you already have.›Mutual TLSsecurity · low: TLS where the client also proves a certificate key, so every connection carries a verified, rotatable machine identity.›Rsa cryptosystemsecurity · low: RSA key generation, OAEP encryption and PSS/PKCS#1 v1.5 signatures, key sizes and padding pitfallsX509 certificatessecurity · low: Certificate chains, path validation, SANs, revocation and short-lived issuance+ 7 more techniques+ 36 more primitives

Similar systems

Share the most building blocks with this one.