Secure Swiss Finance Network (SSFN)

Secure Swiss Finance Network (SSFN)

For secure, flexible and resilient data communication

Enabling Secure and Flexible Data Exchange in the Swiss Financial Center

Secure access to infrastructure services is essential for a smoothly functioning Swiss financial center. Data exchange among participants has to meet the very highest requirements regarding security and availability in the fight against cyber risks. The Secure Swiss Finance Network (SSFN) is a controlled and secure network launched by the Swiss National Bank and SIX.

The SSFN allows over 100 connected users of the Swiss financial center to communicate securely with SIX, other financial market infrastructures and also with each other. The network is based on the SCION technology developed by ETH Zürich, thanks to which a new level of security, performance and functionality in data exchange processes is achieved.

Connection to SSFN

Do you need more information or do you have any questions about how to connect to SSFN? We will be happy to support you

Get in Touch

How You Will Benefit

Protected Data Exchange

SSFN allows a precisely defined group of users to exchange data with each other in a controlled manner and separately from the internet

Resilient Data Traffic

The collaboration with multiple SSFN communication providers ensures redundant connections among all the connected parties. The temporary loss of one provider can be compensated for within seconds, normally without any disruption to the application session

Controlled Access

Certificates created on the basis of the SSFN regulations ensure controlled access to the network

About This Service

How Does SSFN Work?

The SSFN is based on the SCION technology developed by ETH Zürich and, as a network, acts as a standalone isolation domain (ISD) with its own trust root configuration (TRC) used exclusively by the Swiss financial sector.

The cooperation of the telecommunications providers (providers of SCION connections) enables data communication within SSFN. SIX issues the certificates required for participation. SSFN allows a precisely defined group of users (network participants) to exchange data with each other.

Isolation domains like SSFN combine the benefits of private and public networks. The cooperation and networking of several telecommunications providers increase robustness against failures and attacks. This is because the status of every possible connection is known at all times. If the connection in use fails, the next best is automatically activated based on the rules, and data exchange continues on this connection – normally without any disruption to the application session.

Fact: SSFN was invented in Switzerland, but is not limited to Switzerland. An SSFN connection can be established worldwide, depending on the offering of a provider of SCION connections for SSFN.

Fact: SSFN was invented in Switzerland, but is not limited to Switzerland. An SSFN connection can be established worldwide, depending on the offering of a provider of SCION connections for SSFN.

Criteria to Establish an SSFN Connection

Currently, SIX customers of the following services fulfil the criteria (i.e. are eligible) to establish an SSFN connection are SIC, euroSIC, SECOM.

  • It is irrelevant which access method the eligible customer currently uses for one of the above-mentioned or other services, or which of them they want to access via SSFN.
  • Customers of SIC, euroSIC and SECOM using a service bureau are advised to check with them directly whether SSFN can be used for communication with the service bureau (see list of SIC/euroSIC providers). In addition, there are sometimes further requirements for individual services regarding the connection to a service bureau.
  • Customers of SIC, euroSIC and SECOM using SWIFT as access option are advised to contact their respective service support at SIX for further information.

Note: All parties using SSFN are required to adhere to the "SSFN Regulations" (which can be downloaded here).

Questions regarding eligibility or the "SSFN Regulations" should be sent to PM-SSFN@six-group.com

Download SSFN Documents

To download our password-protected documents from this website, please request the login details via the link to the contact form below.

Request access

How to Use SSFN

The minimum requirements for using SSFN are a SCION connection, a SCION gateway and the SSFN certificate. For reasons of redundancy, SIX recommends connecting via two different telecommunications providers.

SIX has prepared guides for SSFN to support eligible customers (which can be downloaded here).

Note: Experience shows that responsibility for setting up and operating an SSFN connection lies primarily with network specialists.

Step What needs to be done? Who can offer support?
(see also the list of SSFN service providers)
1

Analyze the existing connections;
define the configuration of the SSFN connection;
define services to be accessed via the SSFN

 - Provider of SCION gateway
- Provider of SCION connections
- SIX carrier management
2 Obtain and install the SCION connection(s) and gateway(s) - Provider of SCION gateway
- Provider of SCION connections
3 Apply to SIX for an SSFN certificate
 Provider of SSFN certificates
4 Install the SSFN certificate;
test the SSFN connection		 - Provider of SCION gateway
- Provider of SCION connections
5 Adjusting the target addresses of the service and performing
connection tests to test instances of the required service.
Note: This may require coordination between both parties (sender, receiver)
 Support of the respective service at SIX
6 Adjusting the target addresses of the productive instance of the
required service and using SSFN for productive data exchange.
Note: This may require coordination between both parties (sender, receiver)		 Support of the respective service at SIX

SSFN Service Providers

 

SIX carrier management can help with basic questions about connecting to SSFN.

Contact us

All the necessary work involved in establishing a connection to SSFN is performed by the SSFN service providers. The following currently approved companies can support SIX customers who are interested:

The aforementioned information is intended solely for information purposes and does not constitute a recommendation regarding the conclusion of a contract. Any questions about connecting to the SSFN shall be addressed to the relevant service providers. Furthermore, SIX shall assume no responsibility for the completeness, accuracy or topicality of the aforementioned information.

Are you interested in becoming an SSFN service provider, e.g. as a telecommunications provider or service office?

Get in touch with us

FAQ

Find out more