HSM hardware security module PKCS #11 smart card
A token is a hardware or software device that performs cryptographic functions and stores public-key certificates, cryptographic keys, and other data. The Certificate System defines two types of tokens, internal and external, for storing key pairs and certificates that belong to the Certificate System subsystems.
An external token refers to an external hardware device, such as a smart card or hardware security module (HSM), that the Certificate System uses to generate and store its key pairs and certificates. The Certificate System supports any hardware tokens that are compliant with PKCS #11.
The PKCS #11 standard defines a platform-independent API to cryptographic tokens, such as hardware security modules (HSM) and smart cards, and names the API itself "Cryptoki" (from "cryptographic token interface" and pronounced as "crypto-key" - but "PKCS #11" is often used to refer to the API as well as the standard that defines it).
The API defines most commonly used cryptographic object types (RSA keys, X.509 Certificates, DES/Triple DES keys, etc.) and all the functions needed to use, create/generate, modify and delete those objects.
Usage
Созданный специально для платежных приложений модуль payShield 9000 от Thales e-Security — это испытанный аппаратный модуль безопасности (HSM), который выполняет такие задачи, как защита и проверка PIN-кода, обработка транзакции, выпуск платежной карты и управление ключами. Модуль payShield9000 — наиболее широко распространенный в мире модуль HSM для платежей, который используется приблизительно в 80% всех операций по платежным картам. Модуль payShield 9000 создан с учетом 25-летнего опыта компании Thales в области безопасности платежных систем
An external token refers to an external hardware device, such as a smart card or hardware security module (HSM), that the Certificate System uses to generate and store its key pairs and certificates. The Certificate System supports any hardware tokens that are compliant with PKCS #11.
The Public-Key Cryptographic Standards (PKCS) comprise a group of cryptographic standards that provide guidelines and application programming interfaces (APIs) for the usage of cryptographic methods. As the name PKCS suggests, these standards put an emphasis on the usage of public key (that is, asymmetric) cryptography.
PKCS #11 is a cryptographic token interface standard, which specifies an API, called Cryptoki.
The PKCS #11 standard defines a platform-independent API to cryptographic tokens, such as hardware security modules (HSM) and smart cards, and names the API itself "Cryptoki" (from "cryptographic token interface" and pronounced as "crypto-key" - but "PKCS #11" is often used to refer to the API as well as the standard that defines it).
The API defines most commonly used cryptographic object types (RSA keys, X.509 Certificates, DES/Triple DES keys, etc.) and all the functions needed to use, create/generate, modify and delete those objects.
Usage
Most commercial certificate authority software uses PKCS #11 to access the CA signing key or to enroll user certificates. Cross-platform software that needs to use smart cards uses PKCS #11, such as Mozilla Firefox and OpenSSL (using an extension). It is also used to access smart cards and HSMs. Software written for Microsoft Windows may use the platform specific MS-CAPI API instead. Both Oracle Solaris and Red Hat Linux contain implementations for use by applications, as well.
Созданный специально для платежных приложений модуль payShield 9000 от Thales e-Security — это испытанный аппаратный модуль безопасности (HSM), который выполняет такие задачи, как защита и проверка PIN-кода, обработка транзакции, выпуск платежной карты и управление ключами. Модуль payShield9000 — наиболее широко распространенный в мире модуль HSM для платежей, который используется приблизительно в 80% всех операций по платежным картам. Модуль payShield 9000 создан с учетом 25-летнего опыта компании Thales в области безопасности платежных систем
Comments
Post a Comment