JaCarta PKI

Software and hardware JaCarta Are USB tokens of new generation designed for strict two-factor authentication of users when accessing the protected information resources of the enterprise, secure key storage, key containers of software CZI. Work with In the products of the world's vendors is provided with standard means. Storage of key containers for almost all software CICs (CryptoPro CSP, VipNet CSP, etc.). Certified by FSTEC of Russia. Functionally, PKI tokens are identical, but they provide for different usage models, available options (expansion of functional or operational characteristics), and customization capabilities.

Main features of JaCarta PKI:

Authentication:

• Strict two- and three-factor authentication.
• Biometric identification.
• The inability of the token from its owner.
• Strong authentication for web portals and cloud environments.
• Electronic identity card of the employee (integration with ACS, visual identification of the owner).
• Regular work in the existing PKI-infrastructure.

Secure storage of key information:

• Storage of key containers of software CZI (CryptoPro CSP, VipNet CSP, etc.)
• Storage of licenses, digital certificates in the protected part of the token memory.
• The possibility of JaCarta with more than a hundred products from technology partners and software developers.

JaCarta PKI - basic, or basic, family model. Its functionality is usually sufficient for 60-70% of the executed projects.

Specifications:

• Microcontroller: Protected smart card chip (AT90SC25672RCT), which has special certified protection on both hardware and software (Secure by design), which allows successfully to resist all known security threats, methods of breaking and cloning.
• The size of the EEPROM on the chip: 72 KB
• The amount of available EEPROM memory For storing user data: ~ 46 KB
• When using JaCarta PKI with the option "Backward Compatibility": ~ 40 KB
• CCID compatibility: Installation of the device driver for modern operating systems (Microsoft Windows Vista and above, Linux, Mac OS X) is not required.
• The ability to embed a radio tag (RFID).

Supported cryptographic algorithms:

• AES (key lengths 128, 192, 256 bits);
• DES (56-bit key length);
• 3DES (key lengths 112 and 168 bits);
• RSA (key lengths 512, 1024, 2048);
• Cryptography on elliptical curves (key lengths 160, 192 bits);
• Hardware key generation for RSA and cryptography on elliptical curves;
• Key matching algorithms: Diffie-Hellman algorithm, Diffie-Hellman algorithm on elliptic curves;
• Hashing functions: SHA-1, SHA-224 (elliptical curves), SHA-256, SHA-384, SHA-512;
• Generator of sequences of random numbers.

Supported Operating Systems Microsoft Windows:

• Windows 8.1 (32/64-bit)
• Windows 8 (32/64-bit)
• Windows 7 SP1 (32/64-bit)
• Windows Vista SP2 (32/64-bit)
• Windows XP SP3 (32-bit)
• Windows Server 2012 (64-bit)
• Windows Server 2008 R2 SP1 (64-bit)
• Windows Server 2008 SP2 (32/64-bit)
• Windows Server 2003 SP2 (32/64-bit)

Linux

• Red Hat Linux Enterprise Linux 6.3 Desktop (32/64-bit)
• OpenSUSE 12.2 (32/64-bit)
• Ubuntu Desktop 12.04.1 LTS (32/64-bit)
• CentOS 6 (32/64-bit)
• Alt Linux Linux SPT 6.0 (32/64-bit)