- Product Overview
Cloud server cipher machine is a hardware cryptographic product designed and developed by Sanwei Xinan Technology Co., Ltd. for the special scenario of cloud computing environment. Each virtual cipher machine can provide data encryption/decryption, message source correctness verification, key management and other capabilities at the application layer of the host, give full play to the performance of hardware resources, and provide secure data encryption protection services for the application system in the cloud environment.
The CSM provides unified integrated O&M management capabilities, which can realize centralized management of resources, policies, and permissions, improve the deployment and delivery capabilities of cryptographic applications, and realize the rapid construction and flexible expansion of security capabilities in the construction of cryptographic application systems.
- Product features
2.1 Cryptographic Algorithm Support
State secret algorithm：SM1、SM2、SM3、SM4
International algorithm：RSA,DES,3DES,AES,SHA-1,SHA-256,SHA-384,SHA-512
2.2 Key Management
Full lifecycle management of keys such as secure key generation (secondary and tertiary modules), storage, backup, and recovery.
2.3 Security
It provides a variety of identity authentication mechanisms based on passwords, smart password keys, digital certificates, etc
Each VSM is securely isolated
Each VSM key is securely isolated
2.4 Business Scenario Support
It supports multi-industry business scenarios such as encryption and decryption, digital signature, identity authentication, finance, government affairs, energy, and healthcare
Complex business scenarios that support diverse cryptographic service requirements
2.5 Interface Support
A variety of standard cryptographic application interfaces, such as JCE, PKCS#11, CSP, and SM2 SDF, support the smooth migration of traditional applications and meet the requirements for cryptographic services after applications are migrated to the cloud environment
Supports OpenSSL, RESTFul API, CSP, .NET, SOAP, KMIP, EKM interfaces
2.6 Virtualization Functions
A single device can virtualize multiple HSM VSMs and provide cloud-based functions such as elastic allocation, VM migration, and computing speed allocation, improving the resource utilization of cryptographic devices.
- Product Advantages
3.1 Multi-password service template integration
Supports up to eight types of cryptographic service application templates to quickly build typical cryptographic application support scenarios
3.2 Key Management
It has key isolation between VSMs, massive key management, and a strong authentication mechanism based on Password keys and digital certificates
3.3 Horizontal elastic expansion
It supports automatic and rapid expansion and dynamic adjustment of virtual resources to achieve flexible use of resources
3.4 High availability
Active-active, multi-machine clustering, load balancing, and dynamic drift are supported
3.5 Centralized and unified operation and maintenance
Unified monitoring and early warning of equipment
It can provide standard interfaces to other cloud platforms to achieve rapid integration
3.6 Compliance
Adopt cryptographic equipment (Level 2 and Level 3) hardware approved by the State Cryptography Administration
- Product Specifications
| Product model |
SecHSM-Cloud(SJJ1601) |
| Exterior Specifications: |
2U |
| Number of VSMs |
8-96 |
| Support for algorithms |
SM 1/2/3/4、RSA,DES,3DES,AES,SHA-1,SHA256,SHA384,SHA512 |
| SM 2 Sign & Verify |
230,000 times /s & 180,000 times /s |
| SM 4 |
9000 Mbps |
