Video by FINOS via YouTube
Rob Moffat (Chief Architect at FINOS), Japnit Kaur (Engineer at BlackRock), and Brian Belman (Product Manager at RBC Capital Markets) demonstrate how the FDC3 3.0 standard introduces zero-trust security primitives to financial trading desktops. They detail why desktop interoperability between internal systems (e.g., BlackRock Aladdin) and third-party bank single-dealer platforms requires explicit application identity, asymmetric payload signing, symmetric encrypted private channels, and JWT-based user identity intents to protect sensitive prices and order executions.
🗽 Catch Us in New York! Ready to secure trading desktops, standardize cross-firm interoperability, and deploy production FDC3 workflows?
Join global technology leaders at OSFF New York on November 4–5, 2026.
🎟️ Register Now: https://hubs.ly/Q04n_bZL0
🔥 20% OFF DISCOUNT CODE: 26YTOSFFNY20C
🕒 Timestamps:
0:00 Introduction & Speaker Overview (FINOS, BlackRock, RBC)
1:07 What is FDC3? Desktop Interoperability & Trade Blotter Contexts
3:53 The Evolution of FDC3 Security: From Symphony & Wellington to FDC3 3.0
6:49 BlackRock Aladdin Use Case: Extending FDC3 to Third-Party & Vendor Apps
8:23 The Low-Trust Desktop Problem: Why Implicit Trust Fails
11:01 The 5 Pillars of FDC3 Security: Identity, Encrypted Channels & Integrity
13:06 Layered Security Architecture: Whitelisting, Asymmetric Keys & Symmetric Channel Encryption
16:59 Flow #1: Passing User Identity & JWT Tokens via FDC3 Intents
20:22 Flow #2: Secure App-to-App Pricing & Algo Execution
23:42 RBC Demo: Single-Dealer Platform & Algo Order Execution
26:35 Live FDC3 SAIL Web Demo: Signed Broadcasts & Identity Intents
30:42 FDC3 3.0 Roadmap & Standardization
📊 The Problem: The Low-Trust Desktop & Interoperability GapsThe Low-Trust Desktop Environment: While FDC3 context-sharing excels inside single-firm boundary walls, modern trading desktops run a heterogeneous mix of internal applications, third-party vendor platforms, and single-dealer bank tools. The local desktop environment cannot be implicitly trusted. Data Leakage Risks: Exchanging sensitive context (such as live pricing feeds, trade blotter context, or order parameters) over an unencrypted, open desktop message bus allows unauthorized third-party apps or host desktop agents to inspect or tamper with plaintext payloads. Single Sign-On Integration Friction: Requiring every external vendor tool to build bespoke OAuth/SSO integrations for every client firm creates massive integration overhead.
🏗️ The Solution: The FDC3 3.0 Zero-Trust Security Layer
FINOS, BlackRock, RBC, Morgan Stanley, NatWest, and Wellington established an open security standard layered directly under FDC3: Explicit Whitelisting & Circles of Trust: Applications control their own trust boundaries by whitelisting trusted public key endpoints, independent of host desktop agent assumptions. Asymmetric Payload Signing: Outbound context messages are signed using the originating app’s private key and validated with public keys by receiving applications, guaranteeing sender identity and payload data integrity. Symmetric Encrypted Private Channels: App-to-app handshakes exchange symmetric keys over asymmetric encrypted channels. Subsequent streaming data (such as live FX pricing or algo orders) moves across private channels fully encrypted, preventing desktop eavesdropping. User Identity Intents via Signed JWTs: Applications request user identities via standard FDC3 intents. Configured Identity Providers (e.g., Symphony, Entra) handle login and return audience-scoped, signed JWT tokens directly across the FDC3 bus with zero integration friction.
⚙️ Why This Matters for Financial EngineeringZero-Fuss Vendor Integration:
Application developers can ship FDC3-compliant tools that inherit multi-firm security and SSO capabilities out of the box without building bespoke client-by-client login integrations. Cross-Firm Desktop Collaboration: Enables buy-side institutions (such as BlackRock Aladdin users) to trigger automated algo order executions or price requests directly on sell-side single-dealer platforms (such as RBC Capital Markets) with complete data privacy and auditability.
🌐 More about FINOS: https://www.finos.org/
📧 Join our newsletter: https://www.finos.org/sign-up
🎙️ Listen to our Open Source in Finance Podcast: https://www.youtube.com/@FINOS/podcasts
LinkedIn: https://www.linkedin.com/company/finosfoundation
#FINOS #OSFFNewYork #FDC3 #BlackRock #Aladdin #RBC #TradingDesktop #CyberSecurity #ZeroTrust #FinTech #OpenSource