The ACOS6-SAM card securely stores cryptographic keys and uses these keys to compute cryptograms for other applications or smart cards. Using this, terminals need not know the master key(s) of an application, considering that the keys never leave the ACOS6-SAM.
The ACOS6 Secure Access Module (SAM) is designed as a general cryptogram computation module or as a security authentication module for ACOS contact client cards – ACOS3, ACOS6, ACOS7 and ACOS10, and common contactless client cards – DESFire, DESFire EV1, Ultralight-C and Mifare Plus.
The ACOS6-SAM card securely stores cryptographic keys and uses these keys to compute cryptograms for other applications or smart cards. Using this, terminals need not know the master key(s) of an application, considering that the keys never leave the ACOS6-SAM.
The ACOS6-SAM card can perform:
- Mutual Authentication: To guarantee the authenticity of the terminal and the client card
- Secure Messaging: To ensure that the data transmission between the card and terminal/server is secured and not susceptible to eavesdropping, replay attack and unauthorized modification
- Purse MAC Computation: To authenticate and ensure data integrity of data and commands that are transferred into the card and vice versa
- Key Diversification: To enable diversified entry of keys without exposing the master key
- Secure Key Injection: To ensure the key injection from SAM to client cards for contactless cards with protection of Encryption and Message Authentication Code, besides, key(s) may be changed after injection
- Full 64KB of EEPROM memory for application data
- Compliance with ISO 7816 Parts 1, 2, 3, and 4
- Supports high-speed transmission rate from 9.6 to 223.2 kbps
- Supports ISO 7816 Part 4 File Structures: Transparent, Linear Fixed, Linear Variable, Cyclic
- Supports DES/3DES/3K3DES
- Supports AES128/AES-192
- Supports hardware-based random number generator compliant to FIPS140-2
- Supports Mutual Authentication and Session Key generation
- Supports Secure Messaging function ensuring data transfers are confidential and authenticated
- Supports Access Module pairs with ACOS3, ACOS6, ACOS7, ACOS10, Mifare Ultralight C, DESFire, DESFire EV1, and Mifare Plus cards
- Stores and performs all key operations for mutual authentication, encrypted PIN submission, secure messaging, and e-Purse commands
- Supports multi-level secured access hierarchy
- Supports Anti-tearing function
- e-Government
- e-Banking and e-Payment
- e-Healthcare
- Transportation
- Network Security
- Access Control
- Loyalty Program
| Form Factor | |
|---|---|
| Contact | √ |
| Contactless | – |
| Card – Contact and Contactless | – |
| token – Contact Card and USB Full speed | – |
| Communication Speed | |
| Contact interface 9,600 – 223,200 bps | √ |
| Contactless interface 106,000 – 848,000 bps | – |
| Memory | |
| EEPROM Size | 64K |
| Protocol | |
| Contact Interface T=0 | √ |
| Contactless Interface T=CL | – |
| Certifications / Compaliance | |
| Contact Interface ISO 7816 -1/2/3 | √ |
| Contact Interface ISO 7816 – 4 | √ |
| Contact Interface ISO 7816 – 8/9 | – |
| Contactless Interface ISO 14443 Type A | – |
| Common Criteria EAL5+ | – |
| PBOC 2.0 e-Deposit/e-Purse(china) | – |
| Ministry of Construction (China) | – |
| File Systems | |
| Transparent/Binary File | √ |
| Linear Fixed Record | √ |
| Linear Variable Record | √ |
| Cyclic File | √ |
| Cryptographic Capabilities | |
| DES / 3DES | √ |
| 3K3DES | √ |
| AES – 128 bits | √ |
| AES – 192 bits | √ |
| AES – 256 bits | – |
| RSA – 512 to 4096 bits (in 256-bit step) | – |
| SHA-1, SHA-256 | – |
| Mutual Authentication | √ |
| Secure Messaging | √ |
| Random Number Generator (FIPS 140-2) | √ |
| EEPROM Endurance | |
| 100,000 Read / Write Cycles | – |
| 500,000 Read / Write Cycles | √ |
| Data Retention | |
| 10Years | √ |