TrusToken
TrusToken is the outcome of the collective efforts by CDAC Noida and IIT Bhilai. TrusToken enables PKI-based operations, with the additional support of ECC.
TrusToken offers strong authentication to achieve secure access control to applications storing and retrieving data and digital signature applications etc. TrusToken works on Indigenously developed Operating System (OS) which complies with the BIS standard known as IS-16695 part 1 and part2. The operating system provides a strong mechanism to enforce the "What you Know" and "What you have" constraints for authentication.
Some of the key features of our State of the Art, TrusToken are as follows,
- The TrusToken may use majorly for cryptographic Operations such Digital Signature and can also use to gain access to an electronically restricted resource.
- The developed Application Security Framework is developed around the TrusToken to enhance the usages of Token is various number of ways such as Secure Web Access, Secure Login and Heartbeat and many more.
- It can also bring 2-factor authentication to applications where security is critical.
- The TrusToken also support PKCS#11 andPKCS#7 interfaces for easy integration with supported application.
The main part of TrusToken is the private key generated in the token never leaves the container/token during the lifetime.
The TrusToken is based on the two leading chipset OEM and recently conducted meeting with the Indian Manufacturer for manufacturing the “TrusToken”.
Use Cases
- Document Signer
- VPN Establishment
- Secure App Frameworks: Secure Access Any Web Application.
- Data Rights Management: Securely Store and Access Data
- E-GOV Application Integration (In Progress)
Salient Features
- Compact & Lightweight – Plug and Play Device (USB)
- Indigenous Operating System based on IS 16695 (Part I and II)
- Multi-factor authentication
- PC/SC, CCID, PKCS#11, and PKCS#7 Compliance
- Supports both RSA (up to 4096) and ECC (Curve – P-256)
- Mobile Seva OTP service integration for secure login
Technical Specifications
S.No. |
Features |
Description |
1 |
CPU |
Secure CPU architecture* |
2 |
User Memory |
100 KB |
3 |
Crypto Library |
Certified crypto library |
4 |
Secure storage of PIN & Key |
Yes |
5 |
Standard USB interface |
USB type A, supports USB 2.0 |
6 |
API & Standard supported |
IS-16695 Part 1 & Part 2, ISO -7816, PKCS#11, PKCS#7 , X.509 , PKCS#15 ,PKCS#10 ,PKCS#1 |
7 |
Symmetric Cryptographic algorithm |
TDES, AES 128/192/256 bit |
8 |
Asymmetric Cryptographic algorithm |
RSA (up to 4096) and ECC-256 (supports NIST P-256) |
9 |
HASH Algorithm |
SHA-1, SHA-256, HMAC-SHA1, HMAC-SHA256 |
10 |
Supported OS |
Windows, Linux, MAC |
11 |
Machine Supported |
Both 32-bit and 64-bit machines |
12 |
Casing |
Tamper evident, protected by epoxy coating |
13 |
Data Retention |
10 years |
14 |
Others |
Plug and Play device |
15 |
TRNG** |
Yes |
* EAL 5+ Certified chipset **AIS31 conformant TRNG
Platform Required (if any)
- Windows, Linux, MAC
Contact Details for Techno Commercial Information
Embedded Systems (ES) Group
savitakashyap@cdac.in & manishverma@cdac.in