Document Sample
INCOGNITO TSM410-PCI Powered By Docstoc

        FIPS 140-2 Secure Module for EFT and mCommerce

   Affordable, high-security solution for banks and switches

Prism's TSM410 was the joint winner of the 2005 Technology Top 100 (TT100) award in the category
Leader in Research and Development.

Physical Security
The TSM410 is a Tamper-Responsive Security Module (TRSM) that meets FIPS 140-2 level 4 physical
security requirements. This is the highest level possible and offers a significantly better protection than
competing products certified to level 3 physical security.

Excellent Price and Performance Value
Available in a range of models up to 600 TPS offering the best value combination of physical security,
performance and price in the industry.

All TSM410-PCI models are performance upgradeable at the customer’s premises. Customers can purchase
a crypto solution that is suited to their existing processing needs, and later when necessary they can
upgrade their modules performance via a licensed firmware upgrade.

Ease of use and Integration
With the tools and comprehensive documentation supplied, commissioning and managing the TSM410-PCI
is a straightforward process.

TSM410-PCI is certified plug-in compatible with Postilion™ Software.

Service and Support
Prism provides a 1 year hardware warranty with the option of an extended hardware warranty or SLA.

     Performance                                           Cryptographic Support
       Available in various models from 20 to 600 TPS         Triple TDES (TDES) and legacy DES algorithms
       Performance measured as the number of Triple           RSA algorithm (key lengths of up to 2048 bits)
       DES PIN translations/verifications per second.         PIN translation
                                                                 o Schemes: DUKPT and Master/Session
     Access Control                                              o Standard formats: ISO-0, ISO-1 and ISO-3
       Built-in access control enforces dual control for      PIN verification IBM-3624 PIN Offset, Visa PVV
       sensitive operations, such as, key loading             Generation and validation of CVV, CVV2, CVC
       Appointed     security   officers   enter   their      MAC generation and verification
       passwords using the Key Component Entry                   o ANSI double-key retail MAC
       Device to authorise such operations                       o ISO 9797-1 Algorithm 3
                                                              Mobile security extensions for SMS and
     Audit Compliance                                         mCommerce security
       FIPS 140-2 level 3 overall with level 4 physical       Data encryption/decryption support for PCI DSS
       security (Cert#476)                                    NEW! Online EMV authentication and secure
       NOTE: Level 4 physical security is significantly       messaging support (Postilion tested, currently as
       superior to level 3 physical security                  a standalone component)
       Complies     with    PCI   PIN    security 2008        Key block format for interoperability
       reformatting rules (ISO-0, ISO-1 and ISO-3)               o AKB, TR31 (ISKE) & GISKE are supported

     Key Management                                        Platforms
       The TSM410 stores only a Storage Master Key            Microsoft Windows Server 2008/2003/2000
       (SMK) internally                                       (x86 - 32 bit) - device driver is WHQL certified
       All other keys are encrypted under the SMK                o Designed for use with Stratus ftServer®
       using a variant scheme that is stored by               Linux x86 platform for the following 32 bit
       application software                                   distributions
       Encrypted keys can be managed using                       o CentOS 2.3 (kernel 2.6.9)
       commands compatible with ANSI X9.17, X9.24                o Fedora Core 4 (kernel 2.6.11)
       and ISO-11568                                             o Novell SuSE 10.1 (kernel 2.6.16)
       Key components are entered directly into the           Solaris 10 (Sparc 64 bit) platform
       TSM410 via a Key Component Entry Device
                                                           TCP/IP connectivity
     Software Development Kits (SDKs)                        Provided by a network service called Conductor
       SDKs are available for EFT and Mobile                 Conductor provides a consistent interface across
       Commerce applications. Please contact your            the product range
       local representative for further information.
     Custom Firmware Development                              32-bit 33MHz universal PCI card (compatible
       Prism can develop firmware to meet your                with PCI-X, 3.3V PCI and 5V PCI slots)
       requirements.    Please     contact  your local        Primary serial port for Key Component Entry
       representative for further information.                Device
                                                              Secondary serial port (e.g. for serial printers)
     External hardware requirements
        Prism Key Component Entry Device for access        Physical Characteristics
        control and loading key components                   Operating temperature: 0 – 50 oC
                                                             Relative humidity: 5 – 95%
                                                             Dimensions – Full length PCI card
     Included in sales package
                                                                o Length 312mm x Height 107mm
        TSM410-PCI hardware
        TSM410-PCI Installation Guide
        Support CD containing:
          o Conductor software
          o Comprehensive documentation pack

Document PR-D2-0654, last updated April 2010                                                                     3.1

Shared By: