SafeGuard CryptoServer

S-Series

符合一般商用企業安控標準需求

designed in accordancewith

FIPS 140-2 Level 3

CS-Series

符合高標準安全需求

certified in accordance with

FIPS 140-2 Level 3, with Level

 4 for “Physical Security”

TM:A Certification Markof NIST,which does not imply product endorsement by NIST, the U.S. or Canadian Governments.

高彈性的安全解決方案

Timestamp Server

 Hardware

SafeGuard CryptoServer PCI

PCI card, PCI local bus interfaceTwo serial RS232 interfaces(e.g. for connecting a PIN pad or printer) 

SafeGuard CryptoServer LAN

19" network appliance, 2 height units10/100/1000 MBit/s Ethernet10/100 MBit/s Ethernet(e.g. for separate administration network)Two serial RS232 interfaces(e.g. for connecting a PIN pad or printer)

Cryptographic algorithms

RSA up to a key length of 16,384 bitsDSA, ECDSAAESDES, Triple DESTriple DES MAC, Retail MAC, AES MACHash algorithms SHA-1, SHA-2 family, RIPEMD-160 IDEA SaferAdditional algorithms on request

Random Number GenerationPhysical random number generation in accordance with AIS 31 (highest possible class P2)Deterministic random number generation in accordance with FIPS 186-2 or AIS 20 (highest possible class K4)

Key management

Key generation, import / export, backup / restoreSecure internal storage of more than 2,500 RSA keys (key length 1024 bit) or more than 50,000 Triple-DES keys

  Interfaces and Protocols

 Security Server

 Microsoft Crypto APIPKCS#11Java Cryptography Extension (JCE) 

 OpenSSLUtimaco’s Cryptographic Services Interface (CSI)

Timestamp Server

 Timestamp Requests and Responses according to RFC 3161

  CryptoServer  Timestamp API (CTS)

 Payment Server

 EMV (CVV, PVV, PIN generation and check, etc.)ISO 8583 message

 processingISO PIN block formatsPAC / MAC calculation and verification

 ZKA formats

 Software Development Kit (SDK)