Transcript
AEP SureWare Financial Hardware for enhanced security and performance in the financial industry
In today’s global business environment, security and trust are of the utmost importance. This is particularly true for the financial industry where authenticity, confidentiality, integrity and non-repudiation provide trust to any financial transaction.
FEATURES AND BENEFITS
-
Supports: Europay PIN & CVC Validation Visa PIN & CVV Validation EMV (M/Chip and UKIS) Validation/Authorization CEPS Reload Authorization PIN and Magnetic Stripe (PVV, CVC, CVV) Generation EMV & CEPS card key issuing PIN translation (ANSI & ISO formats) MACing (full ISO9797 support) PIN security (ISO9564-1)
•
FIPS 140-1, Level 4 compliant
•
Hardware support for 3DES, DES, RSA, SHA-1 and other algorithms e.g. AES, if required
•
Secure software/algorithm download
SureWare Financial is certifiable to FIPS 140-1, Level 4, the highest level of security accreditation available. It has a number of tamper detection mechanisms to protect against environmental and physical attack, e.g. positive tamper response, temperature and voltage.
•
Small footprint allows desktop use, rack-mount option available
•
Integrated smart card reader, keypad and display
SureWare Financial combines a high-speed communications interface (10/100 Mbps Ethernet) with the ability to process multiple requests simultaneously, and achieves in excess of 250 PIN verifications per second. To increase performance and/or provide redundancy, multiple SureWare Financial modules can be connected to the same host. This combination will meet or exceed the demands of most high security, high performance transaction processing systems.
•
TCP/IP communications with 10/100 Mbps Ethernet Interface
AEP SureWare offers the highest level of security and performance in a range of environments: PKI, SSL, VPN and Financial. In all these, the management and storage of cryptographic keys is fundamental, the protection of data is critical and increased performance is a necessity. AEP SureWare Financial has been developed specifically for the financial industry and offers the highest level of security and performance for authorization of transactions, PIN translation, card issuing and key management. AEP SureWare Financial supports a range of functions: • Europay/MasterCard PIN and CVC validation • Visa PIN & CVV Validation • EMV (M/Chip and UKIS) authorization/validation • CEPS (Clip) reload authorization • Europay’s On-behalf services • Card/PIN issuing • PIN Translation at the acquirer
ACCE (Advanced Configurable Crypto Environment)
All AEP SureWare products incorporate ACCE technology - the most advanced crypto hardware environment available. AEP Systems' leading hardware and crypto engineers have combined over 100 years of experience to bring new levels of security, speed and manageability to a range of hardware security devices.
• -
All critical security functions are housed within the tamper detection envelope, which is accredited to FIPS 140-1 Level 4 and ITSEC E3. ACCE supports a range of Key Management options, with protected internal key store for over 1,000 keys, backed by secure key export and transport options.
All AEP SureWare modules can be upgraded with new software and algorithms, and configured remotely. Standard algorithms include 3-DES, RSA, DSA, Diffie-Hellman, MD5 and SHA-1. ACCE’s low power, highly integrated design leads to increased reliability and savings in overall lifecycle costs.
The SureWare Financial will initially be offered with manual key management functionality and menu controlled software/algorithm download and configuration. However, it has been designed to support centralised key management, which will allow for automated key updates and remote, secure software/ algorithm downloads, configuration of individual modules, unit testing, key retrieval/distribution and audit log collection.
The SureWare Financial is a fully integrated design, with a keypad, LCD display, smart card reader and physical key switch. This enables operators to input and backup key material, reconfigure security settings and enable or disable the cryptographic services. SureWare Financial is the latest in a comprehensive range of products built from AEP Systems' ACCE technology, a flexible cryptographic development environment capable of managing and supporting a range of customized applications
Who should use AEP SureWare Financial? AEP SureWare Financial is ideally suited to all financial institutions requiring additional levels of security and performance. It supports the full range of financial security services required by Card Acquirers, Card Issuers and in-service Issuers and Authorizers. It allows the issuing of magnetic stripe cards and PINs, and fully supports the issuing of EMV (Debit/Credit) and CEPS (Electronic Purse) chip cards.
TECHNICAL INFORMATION HW SUPPORT FOR: RSA: up to 2,048 bit key length DES/Triple DES: 56, 112, 168 bit key Hash: SHA-1
OPERATOR INTERFACE Key entry from smart cards is possible under dual control (four eye principle) using the key switch and access control via smart card
RANDOM NUMBER GENERATION Hardware random number generator with full entropy, FIPS 186-1 compliant.
KEY STORAGE
KEY MANAGEMENT Keys are generated (optional) and stored inside the SureWare Financial tamper resistant module or external, encrypted with a Storage Master Key. The use of the various keys is policed. Keys can be imported and exported (only top level) in clear text from the keypad in component form. Key Management hierarchy allows for secure exchange of keys between modules, between module and Key Management Center and between module and External Party.
USA AEP Systems Inc. 30 Rowes Wharf Boston, MA 02110
Tel: Fax: E-mail:
1.800.383.7716 (+1) 617.443.0160
[email protected]
RED KEY STORE: keys temporarily in clear text, actively erased when a suspected tamper is detected BLACK KEY STORE: HSM personality keys and application keys encrypted under a key from the Secure Key Store PERFORMANCE 250 PIN Verifications (PVV check) per second 300 CVC checks per second
Europe AEP Systems Ltd. Bray Business Park Southern Cross Route Bray, Co. Wicklow Ireland Tel: (+353 1) 204 1300 Fax: (+353 1) 204 1301 E-mail:
[email protected]
HOST INTERFACE The SureWare Financial commands are available directly on one or more TCP/IP sockets using GDS type message structures. AEP Systems can supply the SureWare Financial Adapter that enables multiple modules to be connected to a single or multiple applications using a simple API. The Adapter also adds load balancing and fault tolerance capability when using several Financial modules and is available for AIX, HP-UX, Solaris and Windows NT environments.
OPERATING ENVIRONMENT +5 degrees C to 40 degrees C OPERATING HUMIDITY RANGE 25% to 90% non-condensing POWER REQUIREMENTS 100-240 VAC, 47-63Hz PRODUCT DIMENSIONS 223 x 45 x 244 mm BATTERY LIFETIME 10 years
CONNECTIVITY TCP/IP over Ethernet at 10/100 Mbps half / full duplex, with auto-negotiation Up to 16 TCP/IP connections STANDARDS CERTIFICATION FCC part 15 Class B BSEN60950 Safety BSEN61000 Susceptibility, performance B BSEN55022 Level B Emissions
Asia-Pacific AEP Systems Co., Ltd. 2107 Tower 2, Lippo Centre 89 Queensway Hong Kong Tel: Fax: E-mail:
(+852) 2845 1118 (+852) 2845 9240
[email protected]
For more information, visit www.aepsystems.com
www.aepsystems.com
