Product Information

 
C-DAC Logo
 

TrusToken

TrusToken is the outcome of the collective efforts by CDAC Noida and IIT Bhilai. TrusToken enables PKI-based operations, with the additional support of ECC.

TrusToken offers strong authentication to achieve secure access control to applications storing and retrieving data and digital signature applications etc. TrusToken works on Indigenously developed Operating System (OS) which complies with the BIS standard known as IS-16695 part 1 and part2. The operating system provides a strong mechanism to enforce the "What you Know" and "What you have" constraints for authentication.

Some of the key features of our State of the Art, TrusToken are as follows,

  1. The TrusToken may use majorly for cryptographic Operations such Digital Signature and can also use to gain access to an electronically restricted resource.
  2. The developed Application Security Framework is developed around the TrusToken to enhance the usages of Token is various number of ways such as Secure Web Access, Secure Login and Heartbeat and many more.
  3. It can also bring 2-factor authentication to applications where security is critical.
  4. The TrusToken also support PKCS#11 andPKCS#7 interfaces for easy integration with supported application.

The main part of TrusToken is the private key generated in the token never leaves the container/token during the lifetime.

The TrusToken is based on the two leading chipset OEM and recently conducted meeting with the Indian Manufacturer for manufacturing the “TrusToken”.

Use Cases
  • Document Signer
  • VPN Establishment
  • Secure App Frameworks: Secure Access Any Web Application.
  • Data Rights Management: Securely Store and Access Data
  • E-GOV Application Integration (In Progress)
Salient Features
  • Compact & Lightweight – Plug and Play Device (USB)
  • Indigenous Operating System based on IS 16695 (Part I and II)
  • Multi-factor authentication
  • PC/SC, CCID, PKCS#11, and PKCS#7 Compliance
  • Supports both RSA (up to 4096) and ECC (Curve – P-256)
  • Mobile Seva OTP service integration for secure login
...

Technical Specifications

S.No.

  Features

      Description

1

CPU

Secure CPU architecture*

2

User Memory

100 KB

3

Crypto Library

Certified crypto library

4

Secure storage of PIN & Key

Yes

5

Standard USB interface

USB type A, supports USB 2.0

6

API & Standard supported

IS-16695 Part 1 & Part 2, ISO -7816, PKCS#11, PKCS#7 , X.509 , PKCS#15 ,PKCS#10 ,PKCS#1

7

Symmetric Cryptographic algorithm

TDES, AES 128/192/256 bit

8

Asymmetric Cryptographic algorithm

RSA (up to 4096) and ECC-256 (supports NIST P-256)

9

HASH Algorithm

SHA-1, SHA-256, HMAC-SHA1, HMAC-SHA256

10

Supported OS

Windows, Linux, MAC

11

Machine Supported

Both 32-bit and 64-bit machines

12

Casing

Tamper evident, protected by epoxy coating

13

Data Retention

10 years

14

Others

Plug and Play device

15

TRNG**

Yes

 

* EAL 5+ Certified chipset      **AIS31 conformant TRNG

 

 

Platform Required (if any)

  • Windows, Linux, MAC

 

Contact Details for Techno Commercial Information

Embedded Systems (ES) Group
savitakashyap@cdac.in  &  manishverma@cdac.in

Top