Glossary
Technical terms, in simple language
This glossary is compiled from terms actively used across Payvala documentation and integration pages. Use it as a quick reference for security, messaging, identity, and operations terminology.
55+
Terms Available
5
Categories
Security
Focused
Dev
Friendly
| Term | Meaning | Category |
|---|---|---|
| API | Application Programming Interface used for system-to-system communication. | Architecture |
| REST | Web API style that uses HTTP methods like GET, POST, PATCH, and DELETE. | Architecture |
| JSON | Structured text format used to exchange request and response data. | Architecture |
| HTTPS | Secure HTTP protocol that encrypts web/API traffic using TLS. | Security |
| OAuth 2.0 | Standard authorization framework used to issue secure access tokens. | Identity |
| FAPI 2.0 | Financial-grade API security profile with stronger requirements for banking integrations. | Security |
| KYC | Know Your Customer verification process used to validate merchant or organization identity. | Identity |
| BVN | Bank Verification Number used for identity validation in onboarding and issuance flows. | Identity |
| OTP | One-Time Password used as a short-lived verification factor. | Security |
| USSD | Unstructured Supplementary Service Data channel used for mobile-based authorization flows. | Messaging |
| JWT | JSON Web Token format used to carry signed claims securely. | Identity |
| RBAC | Role-Based Access Control that limits actions based on assigned roles. | Identity |
| AuthCode | Authorization code used to classify or authorize specific operations. | Identity |
| AccessKey | Secret credential used for signing and authenticating API requests. | Identity |
| AccessKeyId | Public identifier that references the secret AccessKey. | Identity |
| HMAC | Hash-based signature mechanism used to verify request integrity and authenticity. | Security |
| JWS | JSON Web Signature format used to sign payloads. | Security |
| JWE | JSON Web Encryption format used to encrypt payload content. | Security |
| JWKS | JSON Web Key Set endpoint containing public keys for encryption or verification. | Security |
| TLS | Transport Layer Security protocol protecting data in transit. | Security |
| mTLS | Mutual TLS where both client and server verify each other using certificates. | Security |
| DNS | Domain Name System service that resolves domain names to network addresses. | Architecture |
| MPLS | Managed private network transport often used for reliable enterprise connectivity. | Architecture |
| Nonce | Unique one-time value used to prevent replay attacks. | Security |
| PII | Personally Identifiable Information that must be protected and minimized in logs. | Security |
| CIDR | IP range notation used for allowlisting network addresses. | Security |
| HSM | Hardware Security Module used for secure key storage and cryptographic operations. | Security |
| MQTT | Lightweight publish-subscribe messaging protocol used for device communication. | Messaging |
| payerRef | Opaque payer reference token provided by the bank without exposing real identity. | Messaging |
| NQR | National QR payment framework/flow used for merchant QR-based transactions. | Messaging |
| DDA | Demand Deposit Account domain/module used in account-linked partner operations. | Architecture |
| P2P | Peer-to-peer transaction channel between users. | Messaging |
| PBT | Pay-by-transfer style transaction channel used in payment routing. | Messaging |
| TT | Transaction transfer channel code used in payment message classifications. | Messaging |
| SIM | Subscriber Identity Module used by cellular-connected IoT devices. | Messaging |
| requestId | Unique identifier for each API request, used for tracing. | Operations |
| txnId | Unique transaction identifier used as an idempotency key. | Operations |
| UUID | Universally Unique Identifier used to generate collision-resistant IDs. | Operations |
| Idempotency | Property where repeated identical requests produce the same effect once. | Operations |
| NTP | Network Time Protocol used to synchronize system clocks for secure validation. | Operations |
| HA | High Availability design that reduces downtime through redundancy and failover. | Operations |
| DR | Disaster Recovery process for restoring systems after major failures. | Operations |
| VAT | Value Added Tax identifier used in legal and KYC organization records. | Operations |
| CAC | Corporate Affairs Commission registration identifier used for legal verification. | Operations |
| POEMS | Payvala Operations and Equipment Management System used for onboarding and configuration. | Architecture |
| FI | Financial Institution integrating with Payvala services and APIs. | Architecture |
| M2M | Machine-to-machine integration where systems communicate without manual UI actions. | Architecture |
| CBS | Core Banking System that originates transaction events. | Architecture |
| IoT | Internet of Things devices connected to network services for real-time operations. | Messaging |
| QR | Quick Response code used for scan-based payment and merchant interactions. | Messaging |
| NIP | Instant payment rail/channel used in transaction routing. | Messaging |
| DQR | Dynamic QR flow where QR payload changes per transaction. | Messaging |
| TPS | Transactions Per Second metric used for throughput and performance planning. | Operations |
| PAR | Pushed Authorization Requests where authorization payload is sent securely before redirect flow. | Identity |
| JAR | JWT-secured Authorization Request format for signed authorization parameters. | Identity |
Secure. Reliable. Scalable.
Payvala is built with enterprise-grade security, 99.9% uptime, and scalable infrastructure.