Encapsulation of payment information

1. A method, comprising:

receiving, by a financial institution computing system, a digitally signed cross-border payment message comprising a trusted time stamp, the digitally signed cross-border payment message generated by digitally signing a first hash of a cross-border payment message with a first financial institution private key;

verifying, by the computing system, that the trusted time stamp was generated using the first hash;

retrieving, by the computing system, a first financial institution public key, the first financial institution public key of a public/private key pair that includes the first financial institution private key;

verifying, by the computing system, that the first financial institution public key is associated with a first financial institution;

generating, by the computing system, a second hash of the cross-border payment message;

digitally signing, by the computing system, the second hash with the first financial institution public key to generate a verification cross-border payment message, wherein data integrity of the cross-border payment message can be verified if the verification cross-border payment message matches the digitally signed cross-border payment message;

retrieving, by the computing system and in response to the verification that the first financial institution public key is associated with the first financial institution, a second financial institution private key; and

encapsulating, by the computing system, the digitally signed cross-border payment message by digitally signing the digitally signed cross-border payment message with the second financial institution private key to generate an encapsulated cross-border payment message,

wherein the encapsulated cross-border payment message is alterable only by a second financial institution associated with the second financial institution private key.

2. The method of claim 1 , wherein the digitally signed cross-border payment message is a first digitally signed cross-border payment message, further comprising:

generating, by the computing system, a third hash of the first digitally signed cross-border payment message; and

digitally signing, by the computing system, the third hash of the first digitally signed cross-border payment message using the second financial institution private key to generate a second digitally signed cross-border payment message,

wherein authenticity and data integrity of the second digitally signed cross-border payment message can be determined based on each of the second digitally signed cross-border payment message and a second financial institution public key of a public/private key pair including the second financial institution private key.

3. The method of claim 2 , further comprising:

generating, by the computing system, a digital signing event journal entry, the digital signing event journal entry comprising:

the second digitally signed cross-border payment message; and

storing, by the computing system, the digital signing event journal entry in a distributed repository.

4. The method of claim 1 , further comprising:

retrieving, by the computing system, a second financial institution public key, the second financial institution public key of a public/private key pair that includes the second financial institution private key;

verifying, by the computing system, that the second financial institution public key is associated with the second financial institution;

generating, by the computing system, a third hash of the cross-border payment request; and

digitally signing, by the computing system, the third hash with the second financial institution public key to generate a encapsulated verification cross-border payment request, wherein data integrity of the cross-border payment request can be verified if the verification cross-border payment request matches the digitally signed cross-border payment request.

5. The method of claim 4 , further comprising:

generating, by the computing system, a verification event journal entry, the verification event journal entry comprising:

the verification cross-border payment request; and

the digitally signed cross-border payment request; and

storing, by the computing system, the verification event journal entry in a distributed repository.

6. The method of claim 1 , wherein the digitally signed cross-border payment message generated by digitally signing a first hash of a cross-border payment message with the first financial institution private key uses a SignedData cryptographic message syntax to generate a SignedData message.

7. The method of claim 6 , wherein a bundled certificate extension includes a signed attribute bound to the SignedData message, the bundled certificate extension including a certificate issuer and a certificate identifier.

8. The method of claim 1 , wherein the digitally signed cross-border payment message generated by digitally signing a first hash of a cross-border payment message with the first financial institution private key uses a detached SignedData cryptographic message syntax to generate a detached SignedData message and a detached content, further comprising:

generating, by the computing system, a third hash of the detached content;

matching, by the computing system, the third hash of the detached content and the first hash.

9. The method of claim 1 , wherein verifying that the first financial institution public key is associated with a first financial institution comprises:

validating, by the computing system, a certificate of the first financial institution public key back to a trust anchor.

10. The method of claim 1 , wherein the first financial institution public key includes a certificate validation associated with the first financial institution.

11. The method of claim 1 , further comprising:

generating, by the computing system, a verification event journal entry, the verification event journal entry comprising:

the verification cross-border payment message; and

the digitally signed cross-border payment message; and

storing, by the computing system, the verification event journal entry in a distributed repository.

12. A method, comprising:

receiving, by a financial institution computing system, a digitally signed cross-border payment message, the digitally signed cross-border payment message generated by digitally signing a first hash of a cross-border payment message with a first financial institution private key,

wherein the digitally signed cross-border payment message generated by digitally signing a first hash of a cross-border payment message with a first financial institution private key uses a detached SignedData cryptographic message syntax to generate a detached SignedData message and a detached content;

generating, by the computing system, a third hash of the detached content;

matching, by the computing system, the third hash of the detached content and the first hash;

retrieving, by the computing system, a first financial institution public key, the first financial institution public key of a public/private key pair that includes the first financial institution private key;

verifying, by the computing system, that the first financial institution public key is associated with a first financial institution;

generating, by the computing system, a second hash of the cross-border payment message; and

digitally signing, by the computing system, the second hash with the first financial institution public key to generate a verification cross-border payment message, wherein data integrity of the cross-border payment message can be verified if the verification cross-border payment message matches the digitally signed cross-border payment message;

retrieving, by the computing system and in response to the verification that the first financial institution public key is associated with a first financial institution, a second financial institution private key; and

encapsulating, by the computing system, the digitally signed cross-border payment message by digitally signing the digitally signed cross-border payment message with the second financial institution private key to generate an encapsulated cross-border payment message,

wherein the encapsulated cross-border payment message is alterable only by a second financial institution associated with the second financial institution private key.

13. The method of claim 12 , wherein the cross-border payment message is not included in the digitally signed cross-border payment message.

14. The method of claim 12 , wherein a bundled certificate extension includes a signed attribute bound to the digitally signed cross-border payment message, the bundled certificate extension including a certificate issuer and a certificate identifier.

15. The method of claim 12 , wherein verifying the first financial institution public key further comprises retrieving, by the computing system, the detached content from a repository.

16. A financial institution computing system comprising:

a memory;

a processor, the processor configured to:

receive a digitally signed cross-border payment message comprising a trusted time stamp, the digitally signed cross-border payment message generated by digitally signing a first hash of a cross-border payment message with a first financial institution private key;

verify that the trusted time stamp was generated using the first hash;

retrieve a first financial institution public key, the first financial institution public key of a public/private key pair that includes the first financial institution private key;

verify that the first financial institution public key is associated with a first financial institution;

generate a second hash of the cross-border payment message;

digitally sign the second hash with the first financial institution public key to generate a verification cross-border payment message, wherein data integrity of the cross-border payment message can be verified if the verification cross-border payment message matches the digitally signed cross-border payment message;

retrieve, in response to the verification that the first financial institution public key is associated with the first financial institution, a second financial institution private key; and

encapsulate the digitally signed cross-border payment message by digitally signing the digitally signed cross-border payment message with the second financial institution private key to generate an encapsulated cross-border payment message,

wherein the encapsulated cross-border payment message is alterable only by a second financial institution associated with the second financial institution private key.

17. The system of claim 16 , wherein the digitally signed cross-border payment message is a first digitally signed cross-border payment message, wherein the processor is further configured to:

generate a third hash of the first digitally signed cross-border payment message; and

digitally sing the third hash of the first digitally signed cross-border payment message using the second financial institution private key to generate a second digitally signed cross-border payment message,

wherein authenticity and data integrity of the second digitally signed cross-border payment message can be determined based on each of the second digitally signed cross-border payment message and a second financial institution public key of a public/private key pair including the second financial institution private key.

18. The system of claim 17 , wherein the processor is further configured to:

generate a digital signing event journal entry, the digital signing event journal entry comprising the second digitally signed cross-border payment message; and

store the digital signing event journal entry in a distributed repository.

19. The system of claim 16 , wherein the processor is further configured to:

retrieve a second financial institution public key, the second financial institution public key of a public/private key pair that includes the second financial institution private key;

verify that the second financial institution public key is associated with the second financial institution;

generate a third has of the cross-border payment request; and

digitally sign the third hash with the second financial institution public key to generate a encapsulated verification cross-border payment request, wherein data integrity of the cross-border payment request can be verified if the verification cross-border payment request matches the digitally signed cross-border payment request.

20. The system of claim 19 , wherein the processor is further configured to:

generate a verification event journal entry, the verification event journal entry comprising:

the verification cross-border payment request; and

the digitally signed cross-border payment request; and

store the verification event journal entry in a distributed repository.