TopCSP Series Server Encryption Machine by Topsec Network Security uses domestic hardware and the Tongxin operating system, featuring certified secure components. It complies with the 'Server Encryption Machine Technical Specifications' and supports national encryption algorithms. It offers key management, data encryption/decryption, signing, and verification services, ensuring data confidentiality, integrity, and validity. It can also serve as a primary encryption device for identity authentication and key management systems. TopCSP features a self-designed cryptographic card certified by the National Cryptography Administration, ensuring high security, reliability, and performance. It uses a security chip certified by the National Cryptography Administration to store critical information and data, equipped with four random noise sources and a physical noise source generator chip approved for generating random numbers. TopCSP supports a three-layer key structure: management key, user/device key/encryption key, and session key. The management key serves as the root key to protect other keys and sensitive information, supporting full lifecycle management of keys including generation, storage, usage, backup, recovery, deletion, and destruction. TopCSP's API complies with GM/T 0018-2012 standards, supporting systems like Sco Unix, AIX, HP-UNIX, Linux, and Windows. It provides standard national and international cryptographic interfaces, ensuring high compatibility and ease of use. TopCSP allows multiple cryptographic servers to provide services simultaneously, enhancing cryptographic performance and reliability. If one server fails, it does not impact the user business system. Digital certificate authentication systems are foundational for PKI/CA applications, enabling functions like certificate application, issuance, updates, revocation, and queries. The cryptographic server in these systems manages the full lifecycle of keys, digital signatures, signature verification, secure storage of core keys, sensitive data encryption/decryption, and data integrity checks. It provides encryption/decryption, integrity checks, and key generation services to digital certificate authentication systems, effectively addressing data transmission security, data integrity, identity authentication, and non-repudiation of transactions.
