SanmigGRC · National FRM ConnectorTenant: XYZ Bank LtdPI-ID XYZB0001Smart Registry — simulated
--:--:-- IST

API & integration

The six DPIP APIs, all hosted centrally (screening and feedback optionally at the Edge Node) and invoked by the participating institution.

DPIP API inventorycontract

APIHosted byCalled byPurposeMode
/reportDPIPParticipating InstitutionsSubmit suspected entities to the Smart Registry. Status alert or suspect.Async, batched
/checkDPIP or EdgeParticipating InstitutionsScreening the registry — onboarding, profile change, beneficiary addition, transaction.Sync, real time
/feedbackDPIP or EdgeParticipating InstitutionsCommunicates the outcome of a screening back to the registry.Async
/revokeDPIPParticipating InstitutionsWithdraw a previously submitted report or linked identifier.Async
/disputeDPIPParticipating InstitutionsContest a report that pertains to a genuine customer of the disputing institution.Async
/augmentDPIPDPIPInvokes an augmentation request from all PIs when an identifier is reported.Async

Not yet callable. Base URLs, client certificates, the salt-management scheme and the PI-ID are issued by IDPIC at onboarding. This console runs against a local simulation of the contract so the bank-side build and UAT can proceed before credentials land. Nothing here is a live registry connection.

Transport & authentication§7

Salting

Institution-held salt, rotated on a published schedule.

SHA-256

Every identifier hashed before it leaves the bank perimeter.

JWS

Payload signed with the institution key; kid carries the PI-ID.

mTLS

Mutual TLS on every call, client certificate issued at onboarding.

Onboarding milestones13 weeks to go-live

MilestoneTarget periodOutcome
Kick-off and requirements alignmentWeek 1 to 4Team alignment · internal approvals · infrastructure readiness · SRS finalisation
API and environment setupWeek 5 to 10UAT setup · bank-side development against the Smart Registry · test run for ingestion and screening
UAT and go-liveWeek 11 to 13Pre-live clearances and audit · go-live sign-off · production deployment
In productionWeek 14 onwardsPost go-live tuning · maintenance and support

Event logthis session

no calls yet…