Pioneering work in the financial sector: How Finnova and Cyberlink delivered the SSFN connectivity of the future

Project data

• Solution / services: SSFN connectivity, SCION on cloudscale's Sovereign Cloud, appliances and licences, consulting and architecture, 24/7 managed service
• Provider: Cyberlink AG
• Technology: SCION (developed at ETH Zurich), cloudscale's Sovereign Cloud
• Industry: Financial sector / core banking
• Customer: Finnova – one of Switzerland's leading core banking providers
• Company size: 500+ employees
• Platforms: Omega (containerised applications based on Kubernetes) and Gamma (core banking and other Windows-based systems), distributed across four data centres
• Project status: operational

The challenge

In summer 2023, Finnova faced several demands at once. Its customers had asked it to introduce Instant Payment and provide the platform for it. At the same time, the shutdown of Finance IPNet, announced by SIX for September 2024, was drawing closer. Finnova therefore needed a secure, compliant and highly available connection to the Secure Swiss Finance Network (SSFN) – under considerable time pressure. In-house SSFN expertise was still limited, and only a few providers were able to offer the necessary services at all. The architecture added further complexity: Finnova runs two operating platforms, Omega and Gamma, which needed dedicated, redundant connections across four data centres. It was also unclear at the outset whether Finnova, as a non-bank, would be allowed to participate in the SSFN at all. Finnova was therefore looking for more than a connectivity provider: it needed a partner that brought the right expertise, took an active part in the design and could guide the company through unfamiliar territory.

The approach

After approaching several providers, Finnova chose Cyberlink. The deciding factor was Cyberlink's willingness to run joint architecture workshops and develop the solution together from the ground up. Cyberlink supported the project at every stage – from concept, solution design and the delivery of appliances and licences through to implementation and 24/7 operations, always with the same team. The project took an unexpected turn when cloudscale, the data centre partner, decided not to integrate physical devices into its own data centres. Together, Cyberlink and cloudscale then developed an alternative architecture based on SCION, running on cloudscale's Sovereign Cloud. Finnova became the first production customer of this combination – SCION Cloud was born. Compared with the original approach, the new architecture offers greater resilience and reliable 24/7 availability, at the same price. It can also be replicated: additional instances or data centres can be added with little technical effort. SIX was persuaded that Finnova, as a core banking operator, could apply for admission as an SSFN solution provider. For the audit this required, Cyberlink provided support with evidence down to network level, including firewall rules and routing configurations. SSFN certification is now a clear market requirement for Finnova.

Current status

The solution is operational and runs reliably. Monitoring is set up so that Cyberlink often detects anomalies before they become noticeable internally. Compared with traditional VPN connections, SSFN connectivity via SCION offers much greater transparency: traffic flows, communicating endpoints and routing information are all visible. The scope has grown steadily over the course of the project – to include replacing existing MPLS connections, connecting new financial market service providers and service bureaus, and enabling Finnova customers to obtain services directly via the SSFN, without traditional VPN connections. The difference is most noticeable with new partners: where a VPN or MPLS connection used to take one to two weeks, connecting via the SSFN is now a matter of hours. Finnova's security and compliance team also values the fact that risks at the network perimeter are reduced from the outset, without additional control mechanisms.

Roles in the project

Cyberlink AG

• Concept, architecture workshops and solution design
• Delivery of appliances and licences
• SSFN connectivity and technical implementation across four data centres
• Support with SSFN certification and the audit, down to network level
• 24/7 managed service, operations and proactive monitoring
• Dedicated contacts: Stephan Ulrich (Chief Sales Officer) and Matthias Schwarzenbach (Lead Engineer Network & Security)

Finnova

• Project management and requirements for the Omega and Gamma operating platforms
• Application for admission as an SSFN solution provider
• Completion of the certification audit
• Connection of financial market partners and provision of services to Finnova customers

cloudscale

• Sovereign Cloud as the operating environment for SCION
• Co-development of the alternative architecture