Home

Security Product

Hardware Security Module(HSM)

Atalla Payment

Atalla Payment

The Fastest Hardware Security Module in the Payment Industry

Atalla AT1000 is a FIPS 140-2 Level 3 & PCI PTS v3 certified payment Hardware Security Module (HSM) used to protect sensitive data and associated keys for non-cash retail payment transactions, cardholder authentication, and cryptographic keys.

Atalla AT1000 is used by all the leading players in the payment ecosystem — issuers, acquirers, payment processors and payment networks across the globe — supporting the following use cases.

Height: 1.69 inches (4.3 cm) / Width: 19.01 inches (48.3 cm)

Depth: 30.87 inches (78.4 cm) / Weight: 36.3 pounds (16.5 kg)

Controls:Power on/off switch, unit ID switch, LCD control panel

Product advantages

Logical Security

Dual control
Industry-standard Atalla Key Block (AKB) key management technology for AES and TDEA or 3DES key management
Advanced security architecture that prevents retrieval of PINs, keys, and other sensitive data in clear text form
Automated and manual key management options
Encrypted, convenient configuration, management, and key loading via Atalla Secure Configuration Assistant (no clear text passing of keys or key components)
ATM key initialization and remote key loading (RKL)
PIN security and key management implemented within a tamper-resistant hardware security module perimeter for protection against manipulation

Physical Security

Rack-mountable (1U), physically fortified form factor with doublelocking bezel and Medeco pick-resistant locks
Dual redundant power supplies
Out-of-range temperature and voltage detection
Low-battery voltage detection

Security Certificates

PCI - PTS - HSM v3.0 certified (certificate #4-70041)
FIPS 140-2 Level 3 certified (certificate #3059)

Performance

Rated at 10,000, 1080, 280, and 80 TPS (PIN translations per second)

17 features

PIN Processing

3-D Secure

Card / User Verification

ATM Interchange

Data Integrity

Processing Transaction Data

Initialize Remote Payment Devices

PIN Translations

Electronic Funds Interchange (EFTPOS, ATM)

Cash-Card Reloading

EMV Transaction Processing

Key Generation and Injection

ATM Remote Key Loading

Payment Card Verification, Production and Personalization

End-to-End Encryption (E2E) of credentials for Internet and Mobile Banking

ProductApplication18

Data Encryption / Decryption

Features

The unique flexible approach to HSM configuration and key management that enables a remote workflow-based model meeting the PCI Dual Control Requirement without the need to have all of the individual officers physically present
Robust backup/ restore capability with a user-configurable policy to specify M of N smartcards required for a restore
Full multi-domain key and policy enforcement enables enterprises to create and manage multiple segregated digital keys per business need while applying policy enforcement to govern the key on the HSM
In-field scalable perfor- mance, highly scalable with more than 10,000 TPS in a single device
Integrates with all major payment and switching applications for easy integration into your existing infrastructure (managed as an IT Security device)
Integrated with Micro Focus Voltage SecureData product portfolio to protect the data encryption keys
Close integration with HPE NonStop Systems to provide a fully fault- tolerant and redundant payment solution
Backwards compatible with the previous generation Atalla HSMs
Multiple MFK Support – up to 10 partitions per HSM
4x1Gbps NIC – Supports Teaming
TLS protected and authenticated sessions with host application – no performance impact
Optional customization

HSM Function

Symmetric Key management

TR-31, X9.24(incl. AES 和 TDES DUKPT), X9.17, APACS 40/70

Data Encryption

AES, RSA OAEP, DES/TDES (X3.92,ISO10126-2, X9.52)

Digital signatures

RSA PKCS#1 v1.5 和ISO 9796-2

Asymmetric Key management

TR-34, RSA key agreement protocol, including for Diebold and NCR ATMs.

PIN verification

IBM 3624, PVV, Atalla Bi-Level DES, Diebold, NCR

PIN management and security

ANSI X9.8/ISO 9564 PIN blocks 0 to 4, , plus legacy techniques

Message authentication

CMAC (AES and TDES), HMAC (SHA1 and SHA256), CBC MAC (ANSI X9.9, ANS1 X9.19, ISO 9797-1, ISO 16609,ISO 9807

End-to-End Encryption (E2E)

Supports Internet and Mobile Banking credentials generation/ verification/reset operations

Payment Card Processing

MasterCard CVC, Visa CVV,American Express CSC,MasterCard CVC3, Visa dCVV,Discover DCVV, American Express Expresspay, Visa Cloud based payments EMV-based smart card support

Improve operational efficiency and productivity.

Highest performing HSM on the market at 10,000 TPS

10,000

More flexibility, greater partitioning power！

Access seamless, real-time upgrades while remaining operational and secure.

1,080

No business disruptions; always remain online！

Ramp up performance during high volume intervals like Black Friday!

280

Only use what you need, when you need it!！

Buy AT1000, complete with out-of-the-box commands

NO more having to decide between hardware models！