Ultra AEP - Cryptosec Banking Data Sheet

Security & Cyber
Features and Benefits

Cryptosec Banking
Security Features
Network-attached cryptographic server for banking and payment cards
■■ Two-factor Authentication of security
officers using optional smart cards
Overview
■■ Physical lock and/or smart cards Cryptosec Banking is a high-performance Cryptosec Banking is the only HSM designed
control authorisation levels network-attached financial cryptographic for the financial sector offering full
server equipped with full functionality to functionality based on standards without
■■ Tamper-resistant & Tamper-responsive any future costs for the addition of new
ensure transaction security and key storage.
(e.g. Detection of cover removal, cryptographic functions or commands. Thanks
The server integrates all the standard
unauthorised access attempt, memory
commands and functions of the banking and to the continuous updates, our customers are
erase)
security sectors, including EMV. not required to replace their servers every
■■ Device Function’s Access Customisation few years due to standard or functionality
- Disable functions not required by the The Cryptosec Banking solution is a reliable obsolescence.
application to minimise potential risks
HSM and is used extensively by numerous
banks across the world. It complies with All these features when combined with the
■■ Audit Logs
the latest EMV standards applicable to superior performance (up to 15000 t.p.s.) and
Operational Features smart cards, contactless cards and mobile excellent cost-benefit ratio to maximize ROI,
transactions, and is compatible with the make Cryptosec Banking the smartest choice
■■ Industry leading performance. main Payment Card software applications HSM for the banking sector.
Achive up to 15000 t.p.s(1) using a single
e.g. Card Verification, ATM Interchange, Cash
Cryptosec Banking(2)
Card Reloading, Data Integrity, Chip Card
■■ Remote HSM Manager eliminates the Transaction Processing, etc.
requirement of security admin travels
thereby reducing costs.
■■ Robust features in the form of dual

power supplies and dual Giga-Ethernet Payment Systems
ports to maximise uptime. • PIN and smart card verification functions for VISA/MasterCard/American Express.
• EMV 3.X and 4.X transactions and messaging, including encryption command sequences
■■ Software-updates. Stay up to date and digital signatures: DAC and IDN calculation/validation, ARQC verification and ARPC
with periodical updates. Standards and
generation.
regulatory changes require frequent
• PIN functions: PIN calculation and verification (DUKPT), PIN management, offset calculation
system updates. Obtain peace of mind
with all-included update service. and PIN translation, Printing of PINs in blind envelops.
• Validation codes: code calculation and verification, CVC calculation and verification.
■■ Detailed documentation and dedicated
support to ease the deployment process.
Security & Cyber
Specifications
Key Management
• RSA Remote Key Transport Applications Supported(3)
• DUKPT for PIN and Data Encryption
• Master/Session Key Scheme ACI: BASE24, Postilion
Aconite: Affina Enterprise, Mobile Application Manager
Cryptographic Algorithms BPC: SmartVista
• Symmetric: Clear2Pay: Open card System
o DES & Triple-DES (Key lengths 112 or 168 bit) CompassPlus: TranzWare Online, TranzWare Card Factory
• Asymmetric CR2: BankWorld, CardWorld
o RSA (up to 2048 bit) CreditCall: CardEase Mobile
• Hashing & MAC CSFi: SWITCHWARE
o SHA-1 Euronet: Integrated Transaction Management
o SHA-2 (224, 256, 384, 512) First Data: VisionPlus
o MD5 FIS: Connex, Cortex
o 3DES X9, 3DES X9.19 (Retail-MAC) Gemalto: Ezio on Mobile
o HMAC-SHA-1, HMAC-SHA-2 Jack Henry Banking: jhaPassPort
Lusis: Tango
Certifications OpenWay: Way4, Way4 Data Preparation and Card Personalisation
• FIPS 140-2 Level 3 crypto module Prime Factors: Bank Card Security System
• Meets FIPS 46, 81, 180-3, 186-3 and 198 standards Royal Gate: Paygate
• ISO 9564, 10118, 11568, 13491, 16609 RS2: Bankworks, Bankworks Issuing
• ANSI X3.92, X9.8, X9.9, X9.17, X9.19, X9.24, X9.31, Tieto: Payment Suite, Card Suite
X9.52, X9.97, X9 TR-31, X9 TG-3/TR-39 TII Smart Solutions: TranServer
• NIST SP800-20, SP800-90(A) TPS: IRIS Enterprise Switch
• Support of FIPS 198-1 HMAC TSYS: Prime, Prime Issuer
Wincor Nixdorf: ProcClassic/Enterprise
Host Connectivity
• TCP/IP (Dual Gigabit Interface)
• Asynchronous (VT-100 Terminal)
Electrical and Physical Characteristics

• Networking: Dual Gig-E (100/1000 Mbps)
• Power: Dual Power supply for resilience
• Dimension: 2U 19” rack
• Operating Temperature: 10°C to 35°C
• Operating Humidity: 10 % to 90% non-condensing
• Environment Temperature: -20°C to 60°C
• Power Requirements: AC 100 to 240 V (50/60 Hz)
• Power Consumption: 100W
(1)
Performance may vary depending on type of transaction and external factors such as network connectivity.
(2)
Realsec recommends deployment of minimum 2 units to avoid data loss and reduce recovery times in case of unexpected disaster.
(3)
Crytosec Banking is compatible with most applications offering support for Thales payShield 9000.
Ultra Electronics
AEP
Knaves Beech Business Centre
Loudwater
High Wycombe
Buckinghamshire, HP10 9UT
Main Switchboard: +44 (0)1628 642 600
Email: [email protected]
www.ultra-aep.com ISO 27001
ISO 9001
www.ultra-electronics.com Ultra Electronics reserves the right to vary these specifications without notice. © Ultra Electronics Limited 2015
V1.1

Ultra AEP - Cryptosec Banking Data Sheet

Uploaded by

Copyright:

Available Formats

Ultra AEP - Cryptosec Banking Data Sheet

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Ultra AEP - Cryptosec Banking Data Sheet

Uploaded by

Copyright:

Available Formats

Security & Cyber

Features and Benefits

■■ Robust features in the form of dual

Electrical and Physical Characteristics

You might also like