HSM (Hardware Security Module) of SafeNet company are dedicated to support the cryptographic operations in secure data flow systems.
They accelerate data processing ensuring a high level of protection for cryptographic keys. Due to the built-in extended library of supported cryptographic services are particularly relevant in the solutions that use PKI (Public Key Infrastructure) as well as in effective data encryption, disk resources, etc.
Functionality
- storing of the keys and execution of cryptographic operations performed in a safe hardware module environment,
- cryptographic services hardware acceleration using a dedicated cryptographic processor,
- protected and equipped with its own power supply memory for storing the keys (4 MB),
- secure user-updated module software,
- built-in independent real-time clock (timings to the nearest 1/100 second) and the hardware random number generator,
- tamper-resistant casing and mechanisms ensuring the deletion of the stored keys in case of unauthorized interference,
- flexible architecture enabling remote access to cryptographic services.
Benefits
- support for the construction of redundant solutions using mechanisms of secure keys transmission with electronic cards,
- scalability concerning efficiency and size of memory for keys storage using multiple modules in one application or one module for many applications,
- reducing the costs associated with maintaining a high level of security due to the protection of cryptographic device and not the whole server room,
- support for the extended set of algorithms of symmetrical and asymmetric cryptography
Technology
- SafeNet modules of ProtectServer are available as PCI cards or independent devices (appliance) plugged directly into the local network,
- modules have certificates of compliance with FIPS140-2 level 3,
- PKCS # 11, JCE / JCE, MS CSPs cryptographic interfaces supported enable to integrate easily with individual and standard solutions,
- range of supported hardware and system platforms includes all commonly used environments (Windows, Unix, AIX).