T2S Connectivity SIA-Colt value proposition

Transcription

1 T2S Connectivity SIA-Colt value proposition T2S Info Session Malta, 18 April Colt Telecom Group Limited. All rights reserved.

2 T2S fosters changes in the Financial Messaging Market The European Central Bank have awarded two licenses for the design, creation and management of the new messaging infrastructure for connectivity to T2S This decision opens European financial messaging market to competition SIA-Colt have been awarded one of the licences as a T2S Value Added Network Service Provider (VANSP)

3 Powerful and cost effective solution SIA-Colt provides a powerful cost effective value proposition for the benefit of the whole financial community: Cost reductions Quality improvements Risk mitigation

4 Agenda SIA-Colt partnership SIA-COLT value Proposition Differentiators Systems architecture: High Level Overview T2S Standard Functionality Pricing and Timing SIX-SIS Zuerich April 4th 2012

5 A strategic partnership SIA-Colt Value Added Network Service Provider for T2S Fully complementary capabilities without overlap network connectivity Network traffic and associated security secure messaging Data handling and associated security Strong relationship

6 SIA in figures SIA GROUP is a leading European ICT solutions and services company in the areas of card processing, payment systems, securities markets and network services. SIA Group focus is European market with customers in other 20 countries 340 M turnover 1500 skilled staff 65 million card processed 30 billion transactions processed, of which 22.2 billion trading instructions Over 11 trillions bytes exchanged through 600 SIAnet connections Banks owned Under Central Bank oversight Strong record in building and managing mission critical infrastructures: RTGS, MTS, post-trading, RNI, CBI, EBA STEP2, Italian ACH, card processing

7 SIA is expert in Securities Processing value chain Execution Post - trade Surveillance and risk management London Stock Exchange Group MTS London Stock Exchange Group Monte Titoli Other Extra-EU CSDs SIA Eagle for Regulators & Markets Intermediaries Network services (connectivity and secure messaging) 14 major trading venues low latency access through SIAnet Financial Ring Post-trade secure messaging SWIFT Service Bureau RNI - Italian Interbank Network

8 Colt in figures 21-country, 35,000km network connecting 100 cities, with metropolitan area networks in 39 cities 18,000 buildings directly connected 19 ISO compliant integrated data centres 35,000 Customers 1.6 Billion Turnover 6000 skilled staff Managed Networking (including Ultra Low Latency, SWIFTNet) Managed IT services (including Cloud, Grid, Storage) Unified Communications and Collaboration Leading footprint in Financial Community

9 Agenda SIA-Colt partnership SIA-COLT value Proposition Differentiators Systems architecture: High Level Overview T2S Standard Functionality Pricing and Timing SIX-SIS Zuerich April 4th 2012

10 SIA-Colt value proposition strong differentiators(1/3) Highest resilience Cross border multiple high bandwidth circuits Metropolitan meshes-multiple alternative routes Automatic and instantaneous network fail-over Proximity to T2S data centers SIA-Colt DCs are located in T2S countries Milan Italy - production Milan Italy in-country backup Frankfurt Germany out-of-country backup Duplicated circuits between all data centres Each individual circuit can handle all T2S traffic

11 SIA-Colt value proposition strong differentiators(2/3) Peer2Peer messaging system Confidentiality: your data is not stored Seamless transit: lowest latency End to End contractual SLA Contractual end-to-end SLA Comprehensive % service availability E2E remote management Proactive problem resolution 24/7 Multilingual help desk Proactive scalability

12 SIA-Colt value proposition strong differentiators(3/3) Leading File Transfer System 42 Million files exchanged in 2010 High speed and wide bandwidth Peace of mind One stop shop turn-key solution All components provided and installed by SIA-Colt Lowest total cost of ownership All inclusive Flexible and transparent pricing schemes Highly competitive prices

13 Agenda SIA-Colt partnership SIA-COLT value Proposition Differentiators Systems architecture: High Level Overview T2S Standard Functionality Pricing and Timing SIX-SIS Zuerich April 4th 2012

14 SIA-Colt solution is based on a decoupled interface Data Exchange Protocol (DEP) the messaging protocol defined by T2S, to communicate with the T2S platform Actors will use the SIAnet.DOM protocols and infrastructure Application to Application (A2A) T2S Actors Region 1 Site 1 Site 2 DEP SIAnet.DOM Protocols CSD 1 CSD 2 SIA-Colt Region 2 Site 1 Site 2 Browsing User to Application (U2A) Browsing Bank 1 Bank 2 Authentication, access control and dynamic addressing End-to-End session

15 SIA-Colt takes care of T2S connectivity complexity Data Exchange Protocol development and maintenance Physical connectivity topology, resilience and security Support to T2S Business Continuity Business Continuity for NSP own connectivity services infrastructure (physical and messaging) EU Trusted CA services and PKI solution, with provisioning of HSM (T2S) and tokens/hsm (Actors) Sharing/delegation of NSP infrastructure internal management with Eurosystem for control and governance duties Risk management certifications and ISAE 3402 reporting

16 End-to-End Solution T2S Platforms Italy T2S SIA-Colt perimeter SIA-Colt performs the complete service management of software & hardware infrastructure components Real end-to-end contractual SLA SIA-Colt (SW provisioning) T2S Actor T2S Actor BA Germany DEP Gateway DB Data & NR Log HSM Network Gateway DB SIA-Colt network Network Gateway DB HSM T2S Smart Integrator DB Data & NR Log NOC Demarcation line for traditional secure messaging model

17 T2S data centre connectivity The T2S datacentres will be connected to SIA-Colt datacentres using a dedicated Ethernet based network: Point to point native Ethernet circuits in the same region (strong line in blue and green) Cross regions point to point Ethernet circuits Guaranteed and dedicated bandwidth provisioned Low, deterministic and steady latency Support of multicast and broadcast Service presentation based on Gigabit interfaces towards T2S Local Area network Every circuit will be capable to support the whole traffic The Ethernet circuits will be terminated on layer 3 equipment Two routers will be installed per datacentre (HSRP Enabled) Encryption will be enabled in order to ensure confidentiality and integrity of the business flows on the network Authentication will be based on digital certificates

18 T2S Actor Connectivity Actors network Based on IPVPN network (MPLS based network) Wide range of access methods and resilience features Colt-SIA datacentres are a middle-tier between the actors and T2S Communication between T2S and the Actors is screened by Intrusion Prevention Systems Mitigation of malicious traffic and proactive reaction to well-known attacks T2S IT-2 T2S DE-1 T2S IT-1 NSP Ethernet T2S DE-2 PKI Backup NSP Milan 1 NSP Milan 2 NSP Frankfurt NSP IPVPN PKI Actor-1 Actor-2 Actor-N Highly secure network connectivity between the T2S Actors and the NSP Hub and spoke topology and access control Full segregation between the T2S Actors Enabled network encryption to ensure confidentiality and integrity Enforced security using Digital certificates based authentication for the network devices

19 A2A - Messaging Services protocol The Messaging Interfaces, the DEP Gateway and the DEP Integrator, are the entities involved in the A2A orchestration The DEP Integrator at the T2S Actors site will offer interaction with the Business Applications on the T2S Actors based on WMQ middleware and XML primitives for easy integration All interactions are performed in push mode, i.e. it is always the sender that starts the communication

20 User to Application (U2A) U2A interaction will be supported using: IP connectivity between T2S Actors end users and the T2S web platform SSL VPN gateways hosted in SIA-Colt datacentres to control the end users access to the network Resilient architecture based on a cluster of GWs in each region Control will be based on the IP address of the access point and on the digital certificates, before they are allowed to get access to the T2S web platform

21 T2S Smart Integrator simplifies integration with actor s business application Message content validation Format translation from proprietary or into T2S ISO Bulk and Unbulk Message copy functionality Multi NSP Switch T2S Smart Integrator Makes core business independent from any network constraint Enables an effective multi-nsp Disaster Recovery and Business Continuity, eliminating any single point of failure SIA-Colt Network Actor BA Actor protocol (ad hoc implementation based on T2S Actor s requirements) T2S Smart Integrator Other Network

22 Sample network gateway configurations NSP perimeter VPN DB All-in-one Production, Test, Training & Development All running in one environment FEMS OR.separate Production Test Training Development

23 Sample network gateway configurations Production site NSP perimeter DB VPN VPN FEMS Multiple options for connectivity and server resilience Connectivity options include: Standby site NSP perimeter DB Dualling Protected circuits Diverse routing Diverse carrier VPN FEMS

24 Sample network gateway configurations NSP perimeter DB VPN FEMS Clustered server for scalability and resilience

25 Network Non-Repudiation process T2S SIA-Colt T2S Actor T2S Platform Copy ACK Copy T2S Actor BA DEP Gateway HSM ACK Network Gateway SIA-Colt network Copy HSM Network Gateway Smart Integrator DB Data & NR Log DB DB DB Data & NR Log Receiver DEP Sender 9. DEP Sender T2S Gateway FEMS Integrator Gateway Actor DEP Sender Receiver FEMS DEP Sender verifies 1. Gateway stores signs BA Business FEMS Integrator verifies stores generates sends makes the FEMS signature received deletes sends message the received signs Application signature a copy sends the message the of copy of the and ACK received the of the of generates to makes ACK and message, DEP all and, sends all a Integrator signature to copy sends the to if it (no receiver for ok, back it Sender message to for longer sends it sender T2S resending related (actor:request) receiver FEMS DEP Platform needed) it FEMS Integrator information if DEP if FEMS needed Gateway

26 Agenda SIA-Colt partnership SIA-COLT value Proposition Differentiators Systems architecture: High Level Overview T2S Standard Functionality Pricing and Timing SIX-SIS Zuerich April 4th 2012

27 1- T2S Standard functions for secure messaging Guaranteed delivery Only-once delivery, no data duplication Delivery in the same order of acceptance Enhanced security features: authentication confidentiality integrity Native data compression Neutrality with respect to the format and content of data Decoupling of network layer and core business application Smooth integration of varied Customer technological environments Automatic suspension/reactivation of data transfer Automatic traffic resending Full scalability Digital signature supporting non repudiation functionality

28 2- Other T2S standard services and functionality Archiving Archival for data exchanged and all related security information supporting the non repudiation feature Logging Log Management System compliant with NIST (log integrity and confidentiality) LMS collects all logs generated by the network infrastructure (e.g. encryption/network devices, security devices, DEP gateways), supporting audit processes and dispute resolution Accounting All information relating to the data traffic exchanged (A2A and U2A) and other supporting services used by each T2S Actor (e.g. PKI) collected and sent to SIA-Colt s reporting & billing procedures Appropriate billing policy (reverse billing modality supported) Training On site training about operations management and application interfaces Remote assistance during the entire pilot period All relevant manuals (Installation, Operations, User Guides) On-site support at T2S Actor request Reporting Annual SAS70/ISAE 3402

29 3- Other standard T2S functionality: PKI services PKI service with associated ETSI compliant Certification Authority Fully-audited support processes for delegation of the Registration Authority (RA) to Actors as Delegated RA PKI service delegating a part of the enrolment and vetting process to local and trustworthy operators using a paperless electronic workflow, with customized forms per role and function web portal to upload the forms to keep traceability and auditability SIA-Colt Security Officers DiCoA 1 Security Officers for for DiCoA 1 Delegated Delegated RA RA 1 RA 2 End user End user community for for community for for DiCoA 1 DiCoA 1 SIA-Colt DiCoA 2 Security Officers for for DiCoA 2 Delegated RA RA 1 End user community for for DiCoA 2 U2A Two digital certificates on USB tokens for each Actors user one certificate for identification/authentication on the T2S web platform one certificate for signature USB tokens provided by the NSP together with the certificates A2A Two digital certificates for each Actors user one for authentication purposes (and for non repudiation in the scope of NSP messaging solution) one for signing the messages and files exchanged with T2S platform (end-to-end non repudiation) T2S and the Actors Register and enrol their own users, as DRA Collect, validate and transmit supporting documents (photo ID scans for instance) Eventually deliver (in a face to face meeting) the corresponding token or card to its final holder

30 Service Delivery and Help Desk Service delivery SIA-Colt NOC provides advanced Customer support and governance features to connectivity and messaging infrastructure, including monitoring and management for the entire service up to Customer sites NOC provides: first level support and single point of contact (ticket based) incident and problem management and escalation activation capacity monitoring of nodes and related access plants switching of active nodes within sites or across sites, on request, to support Customer side local faults or business continuity needs (e.g.: site DR) implementation/removal of logical paths within relevant circuits NOC has dedicated secondary sites for business continuity Help Desk Technical Service Desk - single point of contact for managing incidents on the monitored service, comprising event detection, trouble ticket (TT) creation and follow-up Trouble tickets can be logged reactively by T2S Actors by or by phone on a 24x7x365 basis Access to the SIA-Colt ticketing system by web browser 3 levels of fault management expertise: 1st Level Support: provides services 24x7, 365 days a year, incident ownership, 1st level of customer diagnostic, escalation management 2nd Level Support: rectifies the incident through diagnostics, tests and corrective actions 3rd Level Support: manages all technical escalations

31 Agenda SIA-Colt partnership SIA-COLT value Proposition Differentiators Systems architecture: High Level Overview T2S Standard Functionality Pricing and Timing SIX-SIS Zuerich April 4th 2012

32 Pricing model Price Policy: T2S require the publication a Price Policy for the minimum set of services to connect T2S Actors to the T2S Platform

33 A new paradigm 1. A credible alternative 2. with strong competitive differentiators providing an end-to-end solution removing integration barriers 3. Aiming to be the price leader

34 T2S Timetable NSP Development and Acceptance Phases PoC PHASE >February 2012 July 2012< IMPLEMENTATION PHASE >July2012 March 2013< ENAT PHASE >March 2013 September2013< SIA-Colt November 2013 Ready

35 Maurice Bousin Antonio Sorlini Hugh Cumberland (0) Andrew Young (0)