Payment Hardware Security Module

Payment Hardware Security Module as a Service

Utimaco gives you access to fully managed, PCI PIN-certified HSMs, hosted in resilient data centers, for secure transactions, PIN translation, and key management.

Free 30-Day Trial
  • Overview
  • Key Features
  • Description
  • Specifications
  • Add Ons
  • Resources
The Payment HSM as a Service eliminating the need for hardware ownership or maintenance, ensuring compliance, scalability, and reduced TCO

The Payment HSM as a Service eliminating the need for hardware ownership or maintenance, ensuring compliance, scalability, and reduced TCO

Utimaco’s Payment HSM aaS is the true alternative to operating your own Payment HSMs, providing access to fully managed PCI PIN-certified Payment HSMs hosted by Utimaco, but under your sole control.

From testing to pilot to full roll-out, this service provides a unique offering to a wide spectrum of customers: fintech start-ups, acquirers, payment service providers (PSP), payment facilitators (PayFac), and issuers.

  • Key Features

  • Description

  • Specifications

  • Add Ons

Payment HSM as a Service provides access to PCI PIN-certified payment HSMs that are fully managed and hosted by Utimaco in secure, certified data centers. Customers no longer need to invest in hardware, secure facilities, or management resources, while reducing the burden of compliance, auditing, and support.

In addition to reducing the total cost of ownership (TCO), it offers flexible deployment and scalability and ensures the strongest possible security for organizations’ digital infrastructure.

Utimaco’s Payment as a Service is equipped with the Payment HSM Interface (PHI), which scales transaction volumes significantly without increasing per-command latency. Rather than following the traditional request-response model where each command is sent and processed individually, PHI distributes commands evenly and streams them continuously over persistent, secure mTLS connections. This architecture can support total throughput of over 10,000 commands per second while maintaining an individual response latency of approximately 100 ms.

image
Traditional and PHI model in blue and white

 

  • High-performing, modern payment infrastructure  
  • Reliably handling large transaction volumes  
  • Uncompromising security  
  • High availability with a 99.999% SLA 
image
Cryptographic Interfaces (APIs)
  • Certifications and Compliance

  • Service Benefits and Capabilities

  • Supported Cryptographic Interfaces

  • Payment Standards

  • Application Programming Interfaces and Communication Protocol

  • Supported Use Cases

  • PHI Load Balancing

Certifications and Compliance

  • FIPS 140-2 Level 3 certified HSM
  • PCI PTS HSM V3
  • PCI DSS
  • PCI PIN
  • PCI P2PE
  • TR-31 Key Block Support
  • GBIC/ DK (Deutsche Kreditwirtschaft)
  • ISO27001 compliant
image

Service Benefits and Capabilities

  • Low latency
  • High availability of 99,999%
  • Global coverage with two active-active DCs per availability zone
  • Scale as you grow
  • Fully Managed service, incl. FW updates, Key Management, Operations and Maintenance
  • Based on Utimaco’s leading Payment HSM products
  • Payment HSM Interface available in CSP marketplace (IBM, Azure, AWS) as load balancer towards Payment HSMaaS
image

Supported Cryptographic Interfaces

  • Symmetric algorithms: DES, 3DES, AES
  • Asymmetric algorithms: RSA 1024 to 4096
  • Hashing algorithms: SHA-1 to SHA512
  • MAC / sealing algorithms: MAC and HMAC, CMAC
image

Payment Standards

  • ANSI X3.92, X9.52, X9.97, X9.8, X9.24, X9.17, TR31, TR34, TR39
  • APACS 40 and 70
  • ISO 9797, ISO 10126, ISO 9807, ISO 16609, ISO 9564
  • NIST security standards SP800-90 (RBG), SP800-38A, SP800-67
  • DUKPT X9.24, (DUKPT 2018)
  • VISA, MASTERCARD, AMEX, CHINA UNION PAY, JCB, DISCOVER
image

Application Programming Interfaces and Communication Protocol

  • PTCP/IP sockets per device
  • TLS sockets
  • REST API
  • PayShield and Atalla APIs
image

Supported Use Cases

  • Transaction Processing
  • Payment Card Verification
  • PIN Translations and Authorization
  • Issuer and Acquirer Payments Processing
  • Data Encryption/Decryption
  • Card/User Verification
  • Realtime Payments Messaging
  • SoftPos Transaction Processing
image

PHI Load Balancing

Capabilities of the PHI

  • Streams commands through the open output connection to each HSM.
  • Handling thousands of open input sockets at any one time.
  • Spreads the commands across the available HSM connections.
  • Deployable in multiple cloud availability zones.
  • Automatically re-establishes connections to HSMs which become available again.
image
image

360 HSM Monitoring

image

Certifications and Compliance

All Payment HSM as a Service models are certified to:

image

Resources

Ready to Secure Your Digital Future?

Contact Sales

Related Products

How can we help you?

Talk to one of our specialists and find out how Utimaco can support you today.
You have selected two different types of downloads, so you need to submit different forms which you can select via the two tabs.

Your download request(s):

    By submitting below form you will receive links for your selected downloads.
    Loading...

    Your download request(s):

      For this type of documents, your e-mail address needs to be verified. You will receive the links for your selected downloads via e-mail after submitting below form.
      Loading...

      About Utimaco's Downloads

      Visit our Downloads section and select from resources such as brochures, data sheets, white papers and much more. You can view and save almost all of them directly (by clicking the download button).

      For some documents, your e-mail address needs to be verified. The button contains an e-mail icon.

      Download via e-mail

       

      A click on such a button opens an online form which we kindly ask you to fill and submit. You can collect several downloads of this type and receive the links via e-mail by simply submitting one form for all of them. Your current collection is empty.