You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,15 +20,15 @@ The Open API for FSP Interoperability Specification includes the following docum
20
20
*[Encryption](#encryption)
21
21
22
22
## Glossary
23
-
This document provides the glossary for the Open API (Application Programming Interface) for FSP (Financial Service Provider) Interoperability (hereafter cited as **"the API"**). Terms have been compiled from three sources:
23
+
[This document](https://github.com/mojaloop/mojaloop-specification/blob/master/documents/supporting-documentation/Glossary.pdf) provides the glossary for the Open API (Application Programming Interface) for FSP (Financial Service Provider) Interoperability (hereafter cited as **"the API"**). Terms have been compiled from three sources:
24
24
- ITU-T Digital Financial Services Focus Group Glossary (ITU-T),
25
25
- Feedback from Technology Service Providers (TSPs) in the PDP work groups (PDP) and
26
26
- Feedback from the L1P IST Reference Implementation team (RI).
27
27
28
28
Information is shared in accordance with **Creative Commons Licensing**.
29
29
30
30
## Logical Data Model
31
-
This document introduces the four generic transaction patterns that are supported in a logical version of the API. Additionally, all logical services that are part of the API are presented on a high-level.
31
+
[This document](https://github.com/mojaloop/mojaloop-specification/blob/master/documents/supporting-documentation/Logical%20Data%20Model.pdf) introduces the four generic transaction patterns that are supported in a logical version of the API. Additionally, all logical services that are part of the API are presented on a high-level.
32
32
33
33
## Generic Transaction Patterns
34
34
[This document](https://github.com/mojaloop/mojaloop-specification/blob/master/documents/supporting-documentation/Generic%20Transaction%20Patterns.pdf) specifies the logical data model used by the API. Section 2 in the document lists elements used by each service. Section 3 in the document describes the data model in terms of basic elements, simple data types and complex data types.
@@ -76,7 +76,7 @@ The types used in the PDP API fall primarily into three categories:
76
76
The various types used in API Definition, Data Model and the Open API Specification, as well as the JSON transformation rules to which their instances must adhere, are identified in the following sections.
77
77
78
78
## Scheme Rules
79
-
This document defines scheme rules for Open API for FSP Interoperability (hereafter cited as the API) in three categories.
79
+
[This document](https://github.com/mojaloop/mojaloop-specification/blob/master/documents/supporting-documentation/Scheme%20Rules.pdf) defines scheme rules for Open API for FSP Interoperability (hereafter cited as the API) in three categories.
80
80
1. **Business** Scheme Rules:
81
81
a. These business rules should be governed by FSPs and an optional regulatory authority implementing the API within a scheme.
82
82
b. The regulatory authority or implementing authority should identify valid values for these business scheme rules in their API policy document.
@@ -95,7 +95,7 @@ The API should be implemented in an environment that consists of either:
95
95
For more information about the environment, see Chapter 3, Network Topology. Chapters 4 and 5 identify management strategies for the CA and for the platform. Communication between platforms is performed using a REST (REpresentational State Transfer)-based HTTP protocol (for more information, see API Definition). Because this protocol does not provide a means for ensuring either integrity or confidentiality between platforms, extra security layers must be added to protect sensitive information from alteration or exposure to unauthorized parties.
96
96
97
97
## Signature
98
-
This document details security methods to be implemented for **the API** to ensure confidentiality of API messages between an API client and the API server.
98
+
[This document](https://github.com/mojaloop/mojaloop-specification/blob/master/documents/supporting-documentation/Signature.pdf) details security methods to be implemented for **the API** to ensure confidentiality of API messages between an API client and the API server.
99
99
100
100
In information security, confidentiality means that information is not made available or disclosed to unauthorized individuals, entities, or processes (Excerpt [ISO27000](http://www.27000.org/) ). For the API, confidentiality means that some sensitive fields in the payload of an API message cannot be accessed or identified in an unauthorized or undetected manner by the intermediaries involved in the API communication. That is, if some fields of an API message are encrypted by the API client, then only the expected API recipient can decrypt those fields.
101
101
@@ -104,7 +104,7 @@ JSON Web Encryption (JWE [RFC7516](https://tools.ietf.org/html/rfc7516) )must be
104
104
To support encryption for multiple fields of an API message, JWE is extended in this document to adapt to the requirements of the API.
105
105
106
106
## Encryption
107
-
This document details the security methods to be implemented for **the API** to ensure integrity and non-repudiation between the API client and the API server.
107
+
[This document](https://github.com/mojaloop/mojaloop-specification/blob/master/documents/supporting-documentation/Encryption.pdf) details the security methods to be implemented for **the API** to ensure integrity and non-repudiation between the API client and the API server.
108
108
109
109
In information security, data integrity means maintaining and assuring the accuracy and completeness of data over its entire life-cycle. For the API, data integrity means that an API message cannot be modified in an unauthorized or undetected manner by parties involved in the API communication.
0 commit comments