1.Introduction

The Fisherman High Performance Signature & Verification Server is a high-speed signature verification device based on the PKI architecture for mission-critical systems. The product supports the digital signature/verification by using national SM2 algorithm or the international standard RSA algorithm. It supports the digital envelope creation and decapsulation by using the national SM2 algorithm. It also supports querying, verifying and analyzing digital certificates, and can provide identity verification, data confidentiality checking, data integrity checking, and operational behavior non-repudiation checking services for the application system.

2.Features and functions:

Universal cryptographic service

digital signature/verification

key generation, storage, recovery

digital envelope encryption

digital envelope with signature

Digital certificate management and verification

support CRL certificate verification

support manual and automatic download of CRL

Support certificate analyzation.

Support PKCS function

Support PKCS#7 data signature and signature verification

Support PKCS#7 digital envelope encryption and envelope decryption

Other functions:

support multiple operation systems

support log auditing

support backup and recovery

support hot standby

Support system configuration management

Support server initialization configuration

Support user management

Support application configuration management

3.Superiority

Standardization

The certificate format is standardized and conforms to the X509.3v3 standard

the signature results are standardized, and the signature and envelope conform to the PKCS#7 standard

Support a variety of algorithms

National cryptographic algorithms: SM1, SM2, SM3, SM4

International cryptographic algorithms: RSA2048, RSA4096, SHA256, SHA512, 3DES

High reliability

By using Epoll communication mode, the efficiency and stability of hardware can be brought out.

Support multi-machine parallelism, which can improve processing efficiency and service reliability.

Secure key management system

strictly adopts three-level key structure, which consists of master key, key protection key and application key.

enhanced key backup and recovery mechanism

High system security level, flexible configuration

strict permission control mechanism

server self-monitoring

support multiple API interfaces. Support JAVA, C and ActiveX interfaces.

4.Use case:

Our products can be widely used in government e-procurement, online tax filing, electronic medical records, online banking, electronic insurance and other e-government, e-commerce fields with broad application prospects.

5. certificate