Nordea logotype

Printed by customer 2012.05.22

Web Services

Following the introduction of the Single Euro Payments Area (SEPA) the Finnish banks recommend that companies replace the current file transfer protocol FTP and the PATU security protocol with the international Web Services (WS) and Public Key Infrastructure (PKI) standards.

The Web Services protocol is a modern and safe data communication solution between corporate customers’s ERP-system and the banks.

Web Services

  • protocol is based on common global standards and complies with the definitions of the World Wide Web Consortium (W3C), www.w3.org. In the WS connection, data is SSL encrypted in the Internet TCP/IP network, so separate VPN encryption is not needed.
  • standard offers companies a data communication protocol, PKI identification and security specifications in line with the definitions of the Web Services Interoperability Organisation, www.ws-i.org
  • protocol is designed for the transmission of XML files such as ISO20022 and the currently used local domestic and international payment files of Nordea Finland, Norway and Sweden.

Files based on the XML standard are always transmitted through the Web Services connection.

The common technical description of the Finnish banks 'Security and Message Specification for Messages using Web Services' is available at the website of the Federation of Finnish Financial Services: fkl.fi.

Nordea specific instructions can be found in Web Services service description and instructions for software suppliers are available in 'Web Services Security and Communication' description.

Benefits to your business

  • With the same data communication it is possible to transmit the XML files and the current local Cash Management (CM) service files in Nordea Finland and Sweden.
  • Data communication is following global standard.
  • Security is built on PKI infrastructure standard.
  • Communication procedures follow global standards and Policies.
  • Message flow and connection can be automated.
  • No need for separate VPN connection since the connection is always encrypted.
  • Messages are secured by digital signatures to ensure message integrity.
  • Signatures of message/file are based on PKI certificates.
  • More flexible and user specific authorisation of various Cash Management services is possible.