- Product Overview
The financial data cipher machine is a special cryptographic device independently developed by Sanwei Xinan Technology Co., Ltd. It mainly provides protection based on cryptography technology for gold card projects, city cards, bank card business, social security card business, bus card business, etc., especially for ATM/POS networking information system for inter-bank transactions in the financial system. It can reliably and securely protect the PIN (personal identification number) in the financial network, and effectively prevent the fraud of counterfeit cards; It has a complete key management system, which can effectively prevent active attacks on the communication channel.
- Product features
2.1 System Security
Through the support of connection password and whitelist, the authorization and authentication of the application server by the cipher machine is realized, which further improves the security of the system
2.2 Key Security
A strict three-layer key management system is adopted to realize the exclusive use of special keys and fully ensure the security of user keys and application systems
- High availability
It supports cluster load mode to ensure service redundancy, redundant power supply to ensure continuous device operation, and multi-network port primary/standby binding to ensure network redundancy.
- Compliance
It meets the verification requirements of various financial parameters and the PBOC specification of financial IC cards
- Product Specifications:
| Product model |
SecHSM-Pay 310 |
SecHSM-Pay 510 |
SecHSM-Pay 710 |
| Exterior Specifications |
2U |
2U |
2U |
| SM2 Signature/Verification (Times/Second) |
4500/2000 |
10000/3900 |
32000/29000 |
| SM4 Algorithm encryption and decryption (Mbps) |
850 |
850 |
2000 |
- Hash algorithm (Mbps)
|
850 |
850 |
2000 |
| SM4 PIN Conversion (times per second) |
25000 |
25000 |
40000 |
| SM4 MAC computing (times/second) 128 bytes |
50000 |
50000 |
90000 |
- Application scenarios
| Cryptographic algorithm support |
State secret algorithm：SM1、SM2. SM3、SM4
International algorithm：RSA、3DES、AES、SHA1、SHA256、SHA512 |
| Key management |
Secure key generation (secondary and tertiary modules), storage, backup, and recovery |
| Message integrity protection |
MAC calculation and validation |
| Transaction validity protection |
TAC calculation and validation |
| Personal PIN protection |
PINBLOCK'S ENCRYPTION, CONVERSION, VERIFICATION, ETC |
| Personal legitimacy check |
PW calculation and validation |
| Verification of financial parameters |
ARQC generation, ARPC verification, etc |
| Card legitimacy check |
CW calculation and validation |
