ALYA HSM

PRODUCT OVERVIEW

ALYA HSM complies with FIPS 140-2 Level 3 security. It could be adapted to various kinds of cryptographic security systems to ensure the confidentiality, integrity, and effectiveness of the transmitted information through its digital signature and encryption functions. These functions are achieved by high-speed and multi-task parallel processing cryptographic operations.

PRODUCT FEATURES

Cryptographic Algorithms

Asymmetric algorithms: RSA, DSA, ECDSA, and EdDSA

Symmetric algorithms: DES/3DES

HASH algorithms: SHA1/SHA2, and MD5

High Availability

Support cluster load-balancing, which is transparent to the upper applications and simple to deploy

Support redundant power supply

Support network bonding mode

Support Standard Interface

Support International interface standards such as PKCS#11,JCE, etc.

Support a rich set of command

High Maintainability

Rich audit logs

Support SNMP, syslog and NTP

Physical Security

Tamper resistant and responsive design Sensitive data erased immediately in the event of any tamper attack EFP features for voltage and temperature The case design prevents visibility on the internals and probe into the module

Logical Security

Three-layer key protection All keys and sensitive data are stored in ciphertext Access control methods such as IP white-list, connection password, etc. Supports TLS secure channel Two-factor authentication of crypto officers using USB tokens

COMMON USE CASES

• Card issuing, such as payment cards and other smart card applications

• Card payment authorization

• Secure key management

• PBOC cryptogram validation

• EMV cryptogram validation

• PIN Assurance

• PIN, KEY and Data Transmission Encryption

• Data encryption and decryption

• Signature and verification

• Data integrality protection

SECURITY & SAFETY COMPLIANCES

• FIPS140-2 Level 3

• CE,CB,VOC,FCC, KC, RoHS,IPv6

• ISO/IEC 19790:2012