Transaction Security Broker (TSB)

Today's financial and digital asset applications demand the ability to implement fine-grained policies that govern various actions on transactions. These policies may involve keys based on groups, quorums, time restrictions, or any combination of these factors. The challenge lies in ensuring robust security measures while accommodating such intricate requirements.

Solution

The Securosys HSM offers a solution by granting precise control over key usage through sophisticated authorizations. The integration of Securosys Smart Key Attributes (SKA) facilitates the enforcement of these policies and rules seamlessly.

To streamline the implementation of SKA's functionalities, the Securosys Transaction Security Broker (TSB) steps in. This standalone engine provides a REST-API and internal state management, simplifying the process. It connects to an external database instance and integrates with SKA-enabled Securosys HSM, ensuring uncompromised security as all security-relevant operations occur within the HSM.

The TSB, coupled with SKA-enabled Securosys HSM, offers unparalleled granularity in controlling key actions and operations. Finance organizations can establish highly customizable policies for authorizing operations and transactions, as well as manage key blocking/unblocking and policy adjustments with ease.

Integration is simplified via REST API, allowing for seamless incorporation into existing systems and workflows. It is also available in a Docker container, providing flexible deployment options, whether on-premises or in the cloud (e.g., MS Azure).

Hardware-accelerated digital signing capability supports up to 4000 RSA signatures at 2048 bits per second, ensuring high-speed cryptographic operations. Capable of handling larger key sizes without significant performance loss, ensuring scalability and efficiency in cryptographic processes.

Because your keys are securely stored within the HSM, TSB meet the highest security requirements. Tamper protection throughout transport, storage, and operation, cryptographic integrity is guaranteed, while continuous operations ensure consistent service delivery.

Advantages of TSB compared to Multi-signature:

Algorithm independent - the same process can be used for all supported crypto assets and currencies regardless whether they support multi-signature or not
Lower fees and better privacy because the addresses are single signature type
Regulatory and customer flexibility thanks to decoupling of ownership and control of the keys
Customizable compliance from simple to highly complex policies including time-restrictions

Step 1

Request Approval

Approval for a key usage in a transaction payload is requested.

Step 2

Policy Retrieval

The HSM verifies key attributes and returns policies with a signed payload and timestamp to the TSB.

Step 3

Broadcast Request

The business application retrieves the request from the TSB and broadcasts it to the approval clients.

Step 4

Collect Approvals

The TSB gathers approvals until the policy is met, then sends the payload and approval data to the HSM.

Step 5

Authorization Check

The HSM validates authorization data against key attributes (SKA), the payload, and optionally the signed timestamp.

Step 6

Sign Payload

If all criteria are met, the HSM signs the payload and returns the signature

Enable high-value financial transactions that require multi-quorum (m-of-n) approvals, ensuring secure and transparent processing through blockchain integration for immutable recording.

Implement security protocols that activate based on time-lock settings, automatically invalidating requests if approvals are not received within a specified timeout period.

Deploy a hybrid approval system that leverages HSMs for secure key management and cryptographic operations, integrating with various devices and supporting customizable approval policies.

Ensure transactions adhere to predefined time constraints by enforcing time-based approval restrictions, providing an additional layer of operational security.

Utilize TSB to manage and enforce complex approval policies, integrating with HSMs to ensure key usage and transaction approvals comply with complex policies and strict time-based restrictions.

Challenge

Solution

Key Benefits

Use Cases

Transaction Security Broker (TSB)

Challenge

Solution

Key Benefits

Use Cases

Related Products