Financial HSM

Financial HSM

 
 

■ Product Introduction and Features

Financial HSM is a specific cryptographic equipment developed by Sansec. It mainly provides cryptography-based protection for IC, like social security card and especially for ATM / POS networking information system of inter-bank transactions in the financial system. It can reliably and safely protect the pin (personal identification number) in the financial network and effectively prevent the fraud of fake card. It has a perfect key management system, which can effectively prevent active attacks on the communication channel.

■ Application Scenario

Cryptographic Algorithm Support

Chinese cryptographic algorithm: SM1, SM2, SM3 and SM4
International cryptographic algorithm: RSA, 3DES, AES, SHA1, SHA256 and SHA 512

Key Management

Key generation (Level 2 and 3 commercial cryptographic modules by State Cryptography Administration), storage, backup, and restoration.

Message Integrity Assurance

MAC calculation and verification

Transaction Validity Assurance

TAC calculation and verification

Personal PIN Assurance

PINBLOCK encryption, conversion, verification, etc.

Personal Validity verification

PW calculation and verification

Card Validity Vedification

CW calculation and verification

Financial Parameter Verification

ARQC generation, ARPC verification, etc.

PIN, Key and Data Encryption

Encrypted Envelope Printing

■ Product Functions

System security

Financial HSMs protect the system through the authorization and authentication provided by the HSMs to the application server based on the whitelist and cryptography.

Key Security

Adopt the three-layer key structure: "System Protection Key-User Key-Session Key", fully guarantee the security of keys and application systems

High Availability

Cluster load mode to ensure business redundancy, Redundant power supply to ensure continuous equipment operation, multi-network port active and standby binding to ensure network redundancy

Compliance

Meet various financial parameter verification requirement and PBOC(China financial integrated circuit (IC) card specification).

■ Application Diagram

■ 产品规格

产品型号

SecHSM-Pay 310

SecHSM-Pay 510

SecHSM-Pay 710

外观规格

2U

2U

2U

SM2签名/验签(次/秒)

4500/2000

10000/3900

32000/29000

SM4算法加解密(Mbps)

850

850

2000

SM3杂凑算法(Mbps)

850

850

2000

SM4 PIN转换(次/秒)

25000

25000

40000

SM4 MAC计算(次/秒)128字节

50000

50000

90000

注:仅供参考,实际交付以合同为准

 

Protect the Digital World with Cryptography

All
  • All
  • Product Management
  • News
  • Introduction
  • Enterprise outlets
  • FAQ
  • Enterprise Video
  • Enterprise Atlas