快速支付系统背景下的开源技术（英）

OPEN-SOURCE TECHNOLOGIESIN THE CONTEXT OFFAST PAYMENT SYSTEMSPublic Disclosure Authorized FEBRUARY 2025 FINANCE, COMPETITIVENESS & INNOVATION GLOBAL PRACTICEPayment Systems Development Group © 2025 International Bank for Reconstruction and Development / The World Bank1818 H Street NWWashington DC 20433Telephone: 202-473-1000Internet: www.worldbank.org This volume is a product of the staff of the World Bank. The findings, interpretations, and conclusions expressed in thisvolume do not necessarily reflect the views of the Executive Directors of the World Bank or the governments they represent. The World Bank does not guarantee the accuracy of the data included in this work. The boundaries, colors, denominations,and other information shown on any map in this work do not imply any judgment on the part of the World Bankconcerning the legal status of any territory or the endorsement or acceptance of such boundaries. RIGHTS AND PERMISSIONSThe material in this publication is subject to copyright. Because the World Bank encourages dissemination of theirknowledge, this work may be reproduced, in whole or in part, for noncommercial purposes as long as full attributionis given. CONTENTS 1.EXECUTIVE SUMMARY1 2.INTRODUCTION4Components of FPS5What Is Open-Source Technology, and How Does It Differ from Proprietary Technology?5 3.OPEN SOURCE IN THE CONTEXT OF FPS5Components of FPS5What Is Open-Source Technology, and How Does It Differ from Proprietary Technology?5 4.A TAXONOMY OF OPEN-SOURCE TECHNOLOGY FOR FPS8Ground-Up Open Source8Proprietary, with Open-Source Elements8Proprietary Software9 5.RISKS AND BENEFITS OF OPEN-SOURCE TECHNOLOGIES11Design and Conceptualization11Implementation13Operation14Cost Implications across the Life Cycle of an FPS16Maturity of an Organization to Leverage Open Source18 6.LESSONS LEARNED19Open source in payments is still a growing space.19Consider the following key factors before leveraging open source for FPS.19Choosing open-source technologies requires embracing a long-term vision and clearlyassessing the capacity of the organization to adopt them.20Operators and regulators must assess the potential risks of open-source technologiesnot only for the FPS but for the broader payments ecosystem.20 7.CONCLUSIONS23 8.ACKNOWLEDGMENTS24 APPENDIX A: SPECIFIC COMPONENTS OF AN FPS25APPENDIX B: COMPONENTS OF AN OPEN-SOURCE SOLUTION AND ECOSYSTEM26APPENDIX C: SECURE DESIGN PRINCIPLES28 EXECUTIVE SUMMARY Open-source software has gained significant popularity due to its zero ini-tial cost and widespread adoption across industries. Recent studies show thatopen-source software appears in nearly 97 percent of codebases across differentsectors. A Harvard University study estimates that re-creating widely used open-source software would cost about $4.5 billion, and up to $8.8 trillion if every firmleveraging open-source software re-created the software. These figures highlightthe significant economic impact and importance of open-source software acrossthe global software landscape.1 In the context of a fast payment system (FPS), the use of open-source softwarefor core components is still at an early stage. Our research identified only onelive FPS using open-source software for core functionalities. Despite the limitedadoption of open-source software in FPS, interest is growing among paymentsystem operators, particularly in initiatives such as Mojaloop. Moreover, some FPSoperators may choose to use open-source software for non-core components,making it crucial for both operators and regulators to be aware of the poten-tial impacts that open-source software may have, both positive and negative,on the overall efficiency and resilience of FPS. This note, given rising interest inopen-source software for FPS, examines its use as well as relevant implementa-tion models, risks, benefits, and costs. The World Bank remains neutral on the useof open-source software in FPS, neither endorsing nor discouraging its adop-tion. However, it encourages countries and FPS operators to evaluate their insti-tutional capacity to implement open-source software aptly and manage its risks,the level of support from the open-source community, and the full cost implica-tions beyond initial deployment. While open-source software offers advantages,such as cost savings from reduced licensing fees and the flexibility to customizesystems, it also presents challenges. Institutions need significant in-house exper-tise for customization, maintenance, and operation and must align their long-term FPS goals with the chosen open-source solutions to ensure adaptability andscalability. Thorough cost-benefit analyses are essential to weigh the immediatebenefits against potential long-term challenges, particularly around operationalcapacity and system enhancements. Moreover, adopting open-source software for FPS intro-duces specific risks, particularly around cybersecurity andintegration with existing systems. Vulnerabilities in open-sou