04+-+SafeNet+HSM+Overview+for+Grid+Computing.pptVIP

SafeNet Confidential Information UNCLASSIFIED//FOUO SafeNet Confidential HSM Overview for Grid Computing The Foundation of Information Security PKI Overview What is a Digital ID? What is a PKI? What is an HSM? How are these used? What is a Hardware Security Module (HSM)? How are Digital IDs, PKI and HSMs Used? Types of HSMs Embedded HSMs Network HSMs Application Security Modules Embedded HSMs Network HSMs Application Security Modules What is a High Assurance HSM? Keys Always in Hardware True Trusted Path Authentication Premium Certifications SafeNet Advantage: 3 Layers of HW Security Luna Advantage:Multi-Person Authenticated Access PC Keyboard is not a Trusted Path HSM Certifications NIST FIPS Certificates, see: /cryptval/140-1/1401vend.htm Certificates include: 8, 29, 38, 39, 56, 57, 58, 168, 173, 214, 215, 216, 217, 218, 220, 270, 375, 436 Domus is our certification laboratory for FIPS certifications Common Criteria EAL 4+ Certificate, see: /cc-scheme/vpl/vpl_type.html or /public/expert/index.php?menu=9orderindex=1showcatagories=-33 Electronic Warfare Associates (EWA) Canada was the certification body for Common Criteria Digital Signature Law Validation How are HSMs Used for PKI? Protect Root keys Issue Keys to Sub CAs, Servers and Users Sign transactions Offload crypto operations A few real world examples… HSMs: High-Availability and Disaster Recovery Securing Banking Transactions Example - Manufacturing with PKI- IP Phones Toolkits What to look for in an HSM? Certified by Standards Bodies Performance Level of security Auditability Ease of integration Ease of management Flexibility in use Scalability (multiple partitions) High Availability Disaster Recovery Keys in always in hardware Best Practices for Hardware Security Modules SafeNet – Strongest HSM Offering Global and Stable organization: 25 years in security Broadest HSM product Suite from USB to Network Attached Best Toolkit offering featuring: Well documented API’s: OpenSSL, XML, PKCS#11, Java,