Keys
A key is the short name under which a certified organisation exchanges on the Velocity Interoperability Network. It is proposed by the organisation, checked by the Registry against the rules below and reserved on certification. The key of every listed organisation appears on the register.
A key is not a password and it is not a secret. It is a public name, and it is meant to be quoted, printed and looked up. What gives it its force is not that it is hard to guess but that it is reserved: exactly one organisation may present it, that organisation is identified on a public register, and no other organisation will ever be allowed to present it, even long after the first has gone.
- One key per organisation
- Each certified organisation holds exactly one key. A key is reserved for the organisation for as long as it is listed and is retired when the organisation is removed.
- Keys are not transferable
- A key may not be sold, lent or assigned. An organisation that reorganises must apply to the Registry before exchanging under a successor's name.
- Keys identify the organisation in every exchange
- Every exchange on the Network carries the key of the organisation that made it. A member may rely on the key as the identity of its counterpart.
- A key covers only assessed systems
- An organisation may exchange under its key only from systems that were assessed and named in its certificate. Adding a system is an occasion for assessment, not a matter of configuration.
- The organisation answers for every use of its key
- Where an exchange carries an organisation's key, the organisation is answerable for it, whether it was made by the organisation itself, by a person it authorised or by a person who should not have had access. Loss of control over a key must be reported to the Registry at once.
- Retired keys are not reissued
- A key that has been retired is not allocated to another organisation. A removed organisation that is certified afresh is offered its former key if it remains free.
A listed organisation may apply to change its key. The new key is checked against the same rules, the former key is retired and the change is recorded by notice; systems on the Network accept the new key from the date given in the notice. A fee for a change of key applies from 1 January 2027; see Fees. Every key reserved or retired is recorded in the register of keys, described on the Registers page.
Form of a key
| Rule | Requirement | Example |
|---|---|---|
| Characters | Lower-case letters, digits and hyphens | meridian-transit |
| Length | Between 3 and 32 characters | defence |
| Start and end | Must begin and end with a letter or digit | central-data |
| Hyphens | Single hyphens only; no run of two or more | harbour-exchange |
| Reserved words | Names of Network institutions and of the Network itself | ministry |
Why a proposed key is refused
The Registry refuses a proposed key on one of the six grounds below and on no other. It states which ground it has applied, and an organisation whose key is refused may propose another at once, without making a fresh application. An applicant may give a second choice of key when it applies, which the Registry considers if the first is refused.
- The key is already reserved
- The key belongs to a listed organisation. No two organisations may hold the same key at the same time, and the Registry does not ask a listed organisation to give up a key so that another may have it.
- The key has been retired
- The key belonged to an organisation that has been removed or that has changed its key. Retired keys are not reissued, so that a record of an old exchange can never be read as the act of a different organisation.
- The key is a reserved word
- The names of the institutions of the Network, and of the Network itself, are reserved. So are the words used by the Network's own systems for their internal purposes. The list is not published in full, but the Registry states which word was objected to whenever it refuses on this ground.
- The key is liable to be confused with another
- The key differs from a reserved or retired key only by a hyphen, by the substitution of a digit for a letter of similar appearance, or by transposition. The purpose of a key is to be unmistakable, and a key that invites a mistake defeats it.
- The key is misleading
- The key suggests a function the organisation does not perform, a status it does not hold or a connection with another member that does not exist.
- The key does not take the required form
- The key uses characters that are not permitted, is shorter than three characters or longer than thirty-two, begins or ends with a hyphen, or contains a run of two or more hyphens.
Register of keys
| Key | Organisation | Reserved | Retired |
|---|---|---|---|
| ministry | Ministry of the Velocity Interoperability Network | 6 September 2026 | — |
| defence | Defence Department | 6 September 2026 | — |
| immigration | Immigration Department | 6 September 2026 | — |
| careers | Careers Office | 6 September 2026 | — |
| northern-relay | Northern Relay Cooperative | 6 September 2026 | — |
| harbour-exchange | Harbour Exchange Authority | 6 September 2026 | — |
| central-data | Central Data Trust | 6 September 2026 | — |
| meridian-transit | Meridian Transit Board | 6 September 2026 | — |
Changing a key
Step 1: Application to change
The organisation applies in writing, giving its present key, the key it proposes, the reason for the change and the date from which it wishes the change to take effect. That date must be at least twenty-eight days after the application.
Step 2: Check of the proposed key
The Registry checks the proposed key against the rules on form and against the register of keys, in the same way as on a first application. A key that would be refused to a new applicant is refused here.
Step 3: Notice of the change
The change is published in a numbered notice at least fourteen days before it takes effect. The notice gives the former key, the new key and the date, so that members can prepare their systems.
Step 4: The change takes effect
On the date given in the notice the register is amended and the new key is reserved. For twenty-eight days from that date, systems on the Network accept the former key alongside the new one, so that an exchange in progress is not broken.
Step 5: Retirement of the former key
At the end of the twenty-eight days the former key is retired and refused. It is recorded in the register of keys with the date of retirement and is never reissued. A certificate bearing the new key is issued in place of the old one, without further charge.
Keys in figures
- 8
- Keys reserved at 6 September 2026
- 0
- Keys retired since the register of keys was opened
- 32
- Maximum length of a key in characters
- 28
- Days for which a former key is accepted after a change
Keys on the Network
Systems on the Network accept an exchange only if the key it carries belongs to an organisation listed with the status Active. A key that is suspended or retired is refused on the day the register is changed.
The handling of keys is one of the eight criteria of assessment, and a failure of it is treated as critical in every case. A system that can be made to present a key other than its own, or that accepts an exchange from a key it has not checked, is not certified until the fault is put right.

Loss of control and misuse
An organisation that has reason to believe that its key has been used without its authority, or that a person who should no longer have access to its systems may still be able to cause an exchange, must report the matter to the Registry at once and in any event within one working day. The Registry may suspend the listing while the matter is examined, so that the key is refused on the Network until the organisation can account for its use.
Suspension in these circumstances is a protection, not a penalty, and it is lifted as soon as the Registry is satisfied. Persistent misuse of a key, or the use of a key by a system that has not been assessed, is a ground for removal, as set out under Certification.
Reports may be sent to contact@registry.gov.vin. For guidance on checking a counterpart's key before exchanging, see Using the register.