Fortify your payment ecosystem with the AT1000 Payment HSM - unparalleled speed and global support
The AT1000 Payment HSM is designed for secure and compliant non-cash retail payment transactions and cardholder authentication.
The AT1000 Payment HSM is a NextGen FIPS 140-2 L3 certified, FIPS 140-2 L4 (physical design) compliant, and PCI PTS HSM v3 certified payment HSM. Specially designed to protect sensitive customer data, perform cardholder authentication, and manage cryptographic keys used in e-commerce retail payment transactions.
Product Type:
PlatformDelivery Time:
Key Benefits
Superior Performance
With a speed of 10,000 transactions per second, the AT1000 Payment HSM is the fastest multi-core HSM on the market. Specifically designed for retail use cases and cardholder authentication, providing unique speed for processes in the cashless payment transaction lifecycle.
The only Payment HSM on the Market supporting REST API
Provides unrivaled protection of an HSM in public, private, and hybrid cloud environments through Representational State Transfer Application Programming Interface (REST API). Flexible, stateless, easy to use and secure.
Provides Global Support for Banking
Supports all global card schemes such as Visa, MasterCard, Amex, UnionPay, Diners, and Discover. It also integrates with all major banking applications and hardware vendors such as ACI and HPE NonStop.
Available as Payment HSM as-a-Service
Connect seamlessly to a group of AT1000 Payment HSMs with Utimaco’s Payment HSM as-a-Service. As a fully managed, subscription-based PCI PIN compliant service, the Payment HSM-as-a-Service can be accessed globally, without having to invest in any on-premises devices.
Certified for the most demanding application profile
The AT1000 Payment HSM is PCI PTS HSM v3 certified, as well as compliant with:
FIPS 140-2 Level 3, FIPS 140-2 Level 4 (physical design), and TR-31 Key Block for AES and TDES
Multi-Tenant Architecture
The AT1000 Payment HSM comes with 10 partitions. This unique partitioning capability allows vendors to consolidate applications into fewer HSMs. Since each domain has its own MFK, you can isolate access, security policies and separate administrative access independent from other partitions.
Details
The AT1000 Payment HSM is designed for secure and compliant non-cash retail payment transactions and cardholder authentication.
Designed to facilitate interbanking operations,securing the payment ecosystem for payment service providers, acquirers, processors, and issuers worldwide. By providing superior hardware security, it delivers maximum privacy, integrity, and performance for host applications.
This advanced solution supports cryptographic operations and enables the user to perform PIN translation and verification, card validation, card production and personalization, electronic funds interchange (EFTPOS, ATM), cash-card reloading, EMV transaction processing, as well as key generation and injection.
The most compliant Payment HSM on the Market
The AT1000 Payment HSM is a NextGen FIPS 140-2 L3 certified, FIPS 140-2 L4 (physical design) compliant, and PCI PTS HSM v3 certified payment HSM. Specially designed to protect sensitive customer data, perform cardholder authentication, and manage cryptographic keys used in e-commerce retail payment transactions.
Atalla Key Block (AKB)
- ANSI standards community approved key block format
- Supports the interchange of symmetric keys in a secure manner
- Key attributes are included in the exchanged data
- Ensures that the cipher text is untouched by binding the key with the integrated attributes
Remote Management
- Remote workflow-based model
- Combines HSM configuration and key management
- Meets the PCI Dual Control Requirement without the need for physical presence
- Possibility to streamline software and license upgrades, HSM security policy management, key loading
Secure Configuration Assistant for Windows (SCA-W)
- Versatile tablet-based tool
- Implements intuitive remote and local management of the HSM
- Enables security administrators to easily configure commands, define parameters, calculate cryptograms, and inject cryptographic keys
- Easy-to-use GUI with a natural event and decision flow
- Improved user experience and productivity of the security administrator
- Reduced risks of errors
Robust Backup and Restore
- Robust backup and restore capability with a user configurable policy
- Initializing multiple HSMs to a pre-configured known state without Admin Smartcards or key components
SmartCard Authentication
- Uses preoperatory digitally signed smartcards for authentication
- Allows secure administration of smartcards
- Provides authentication via tamper-reactive device Secure Keypad (ASK)
- For security-critical data entry, for example, key components, and PINs
Multi-Domain Support
- Full multi-domain key and policy enforcement
- Create and manage up to 10 HSMs in a single 1U Hardware appliance
- Applying separate policy enforcements and Master File Keys (MFKs) to govern individuality of each HSM
Redundant Hardware
- Designed for high performance ecosystems that cannot afford downtime
- Every technical component is fully redundant including power supplies, hard drives, Network Interface Cards (NIC), etc.
- Protection from external failure through implemented NIC Teaming
Payment Emulator
- Emulate other Payment APIs in the industry to communicate with Atalla API and NextGen RESTful interface
- Gain easy access to all AT1000 features
Rest API Support
- Utilize the flexible, stateless, easy to use, and secure Representational State Transfer Application Programming Interface (REST API) to communicate with your AT1000 Payment HSM
- Harness the unrivaled protection of AT1000 Payment HSMs in public, private, and hybrid cloud environments
- Further enhance the security of additional HSMs by the support of TLS, ACL, multiple domains and mutual authentication additionally provided by REST API
- PIN Processing
- 3D Secure
- Card/User Verification
- ATM Interchange
- Data Integrity
- Processing Transaction Data
- Data Encryption/Decryption
- Initialize Remote Payment Devices
- PIN Translations and Authorization
- Payment Card Verification, Production, and Personalization
- Electronic Funds Interchange (EFTPOS, ATM)
- Cash-Card Reloading
- Card Issuance
- EMV Transaction Processing
- Key Generation and Injection
- ATM Remote Key Loading
- AS2805 Host-to-host
- Supports JSON Web Tokens
- Mobile and E-wallets
- Contactless payments
- Inter-banking, clearing and settlement
| Components | |
|---|---|
u.trust 360u.trust 360 is a hardware and software based management platform enabling centralized administration, monitoring and provisioning for Atalla AT1000 and CryptoServer LAN V5 HSMs. | MYHSMThe MYHSM service is compatible with all major payment applications, is multi-cloud and provides a unique and globally accessible service offering to the whole payment ecosystem. |
KeyBRIDGE UKMKeyBRIDGE UKM is a standalone platform solution that stores all keys and sensitive data for an entire organization. | Utimaco C3A PCI PTS Certified Key Loading Device.
|
