硬件安全模块(hardware security module,缩写HSM)是一种用于保护和管理强认证系统所使用的密钥，并同时提供相关密码学操作的计算机硬件设备。硬件安全模块一般通过扩 展卡或外部设备的形式直接连接到电脑或网络服务器。HSM提供篡改留证(tamper evidence/proof)、篡改抵抗(tamper evidence)两种方式的防篡改功能，前者设计使得篡改行为会留下痕迹，后者设计使得篡改行为会令HSM销毁密钥-类的受保护信息。每种HSM都会包括一个或多 个安全协处理器，用于阻止篡改或总线探测。许多HSM系统提供可靠的密钥备份机制，使机密数据可以通过智能卡或其他设备安全地处理或转移。由于HSM通常是公钥基础设施(PKI) 或网上银行-类关键基础设施的一 部分，一般会同时使用多 个HSM以实现可用性。- 些HSM具备双电源、无需停机更换配件(如冷却风扇)等设计，以确保在数据中心等环境中的高可用性要求。少数HSM可以让用户在其内部处理器上运行专门开发的模块。
F8652E
F8652E
Hardware security module (HSM) is a computer hardware device used to protect and manage the keys used in strong authentication systems, while also providing relevant cryptographic operations. Hardware security modules are generally directly connected to computers or network servers through expansion cards or external devices. HSM provides anti tampering functions in two ways: tamper evidence/proof and tamper resistance. The former is designed to leave traces of tampering behavior, while the latter is designed to cause HSM to destroy protected information of key classes. Each HSM will include one or more security coprocessors to prevent tampering or bus detection. Many HSM systems provide reliable key backup mechanisms, allowing confidential data to be securely processed or transferred through smart cards or other devices. Due to the fact that HSMs are typically part of key infrastructure such as Public Key Infrastructure (PKI) or Online Banking, multiple HSMs are typically used simultaneously to achieve availability- Some HSMs are designed with dual power supplies and no need for downtime to replace accessories such as cooling fans, to ensure high availability requirements in environments such as data centers. A few HSMs allow users to run specially developed modules on their internal processors.
F8652E
F8652E
There are no reviews yet.