VoP Account Data Management
This API specification is a draft, pending the publication of the EPC rulebook first definitive version in September to incorporate minor necessary changes.
This API based service is provided to responding PSPs participating in the Worldline VoP Hub ecosystem. It allows responding PSPs to manage account holder identification data via the Worldline VoP Hub. It allows the Hub to use this locally stored data to provide answers to requesting PSPs, verifying the identity of payee for their payer user (Requester).
The data of the responding PSP is maintained and secured by Worldline on a mutualized infrastructure in the public cloud. Logical segregation and at rest data encryption is in place.
Features
The service, offers a CRUD real time interface to manage account holder identification data for the responding PSP.
The API supports storing multiple names, as well as additional identifiers when supported by the responding bank.
File based account data management
For clients wanting to avoid API integration, Worldline can put in place file based daily upload and updates of account holder identification data via CSV or JSON formats (see API format for bulk creation), transferred via dedicated SFTP channels, and via manual upload in our Backoffice in the future.
API Security
- Authentication: The Worldline VoP Hub uses an authentication service that adheres to the OIDC standard protocol.
For enhanced security, the client must present a (qualified) SSL certificate to authenticate and sign token requests with a (qualified) seal certificate. - Secure Communication: All communications utilize MTLS with TLS 1.2 or higher, ensuring that data in transit is secure.
- Data Integrity: Each API request and response is signed using a detached JWS signature, ensuring the integrity and authenticity of the data exchanged.