HSM 8000
Enhance Keyblock security
Upgrading to ANSI TR-31 eliminates the risks associated with the older ANSI X9.17 standard.
Learn More »
Benefits
- Integrates with all leading transaction software
- Scalable performance options
- Wide range of protocols/connections to connect to all types of host system
Thales's host security module (HSM) technology has already been adopted by every major card scheme and is currently protecting 70 percent of the world's card transactions.
Easy to customize and capable of delivering unrivalled protection for ATM, POS, corporate banking, card issuing, funds transfer, and share trading technology, the HSM 8000 is a tamper-resistant device that provides the powerful cryptographic facilities that are needed to secure financial transactions.
Fully compliant with the financial industry's security audit requirements and incorporating a design certified to FIPS 140-2 Level 3, the HSM 8000 product range is ideal for acquirers, switches, and issuers for the processing of magnetic stripe and chip card transactions (EMV).
Protecting payment transactions. Designed specifically to meet the needs of the payment industry with cryptographic support for the issuance of payment cards and the switching and authorisation of transactions.
Widespread global integration. Comprehensive off-the-shelf support for all major payment applications in use globally.
Validated security. Highly secure tamper resistant hardware security module, certified to FIPS 140-2 Level 3, MEPS (France) and APCA (Australia)
Field upgradeable. Simple and secure method to update functionality and performance under customer control.
Wide range of host connectivity. Supports all common types of host interface (Async, TCP/IP and UDP) plus IBM proprietary, SNA and ESCON
Flexibility. Feature rich base functionality set, complemented with optional modules and a firmware customisation service.
Key Management
- Multiple Master Keys for secure storage and distribution of keys. Separation of different key types, applications or clients, and of development and production use
- ANSI TR-31 Key Block support
- RSA Public Key
- DUKPT (DES and Triple-DES)
- Master/Session Key
- Racal Transaction Key
- Australian Transaction Key (DES and Triple-DES)
Cryptographic Support
- DES and Triple-DES (two and three key)
- RSA
Performance
- Range of performance models up to 800 Triple-DES pin block translates/sec.
- Multi-threading to exploit full capacity
- Clustering capability
Host Connectivity
- Asynchronous (v.24, RS-232)
- TCP/IP & UDP (10/100 Base-T)
- SNA (v.24, RS-232)
- ESCON
Certifications
- Secure Generic Sub-System (SGSS) certified at FIPS 140-2 Level 3
- RoHS
- MEPS
- APCA
Financial Industry Standards
- VISA/MasterCard/American Express PIN and Card Verification functions
- EMV 3.1.1, 4.0, and 4.1 transactions and messaging (inc. PIN Change)
- Remote Key Loading to NCR, Diebold and Wincor Nixdorf ATMs
- Europay Security Platform
- VISA Cash, CLIP, and VCEPS electronic purse
- Integration with all major payment authorisation and transaction switching applications
Management facilites
- Console interface for “dumb” terminals
- Graphical User Interface option for standard PC hardware over Ethernet
- Host applications able to manage clusters of HSM 8000s
Security
- Two-Factor Authentication of operators using Smart Cards
- Dual physical locks control setting of modes
- Tamper-resistance certified to FIPS 140-2 Level 3
- Detection of removal of covers
- Disabling of functionality not required
Physical Characteristics