ACOS5-EVO
Outline
1. Product Information
• Product Overview
• Product Features
• Technical Specifications
• Certifications/Compliance
2. Product Applications
3. Related Software Products
2
Product Information
Product Overview
ACOS5-EVO Series
PN: ACOS5-K1A PN: ACOS5-K1K PN: ACOS5-K1L PN: ACOS5T2-B1E1
ACOS5-EVO ACOS5-EVO ACOS5-EVO CryptoMate EVO
(Contact) (Combi) (Contactless)
4
Key Features of ACOS5-EVO
Speed and Memory
• 192 KB Memory
• Configurable ATR (Answer To Reset)
Cryptographic Algorithms • Anti-tearing Function
• ECC: Curves P-224/P-256/P-384/P-521
Certifications and Compliance
• RSA: up to 4096 bits
• AES: 128/192/256-bits (ECB, CBC) • Common Criteria EAL5+ (Chip Level)
• DES/3DES: 56/112/168-bits (ECB, CBC) • ISO 7816 Parts 1, 2, 3, 4, 8, and 9
• Hash: SHA1, SHA224, SHA256, • ISO 14443 Parts 1-4, Type A
SHA384, SHA512 • FIPS 140-2 Level 3 Compliant
• MAC: CBC-MAC (DES/3DES, AES),
CMAC (3DES, AES)
Security Functions
• Random Number Generator
• Provides multi-level secured access
hierarchy
• Supports Secure Messaging
• Supports Mutual Authentication and
Session Key Generation
5
Technical Specifications
Category ACOS5-EVO
ACOS5-K1AACSA4200 (Contact)
Product Code ACOS5-K1KACSA4200 (Combi)
ACOS5-K1LACSA4200 (Contactless)
User EEPROM Memory
User Memory 192 KB
Endurance (write/erase cycle) 500,000
Compliance to ISO Standards
ISO 7816 – 1/2/3/4 ✓
Contact ISO 7816 – 4 ✓
ISO 7816 – 8/9 ✓
ISO 14443 - 1/2/3/4 ✓
Contactless
Type A ✓
6
Technical Specifications
Category ACOS5-EVO
Communication Speed and Protocol: Contact Interface
T=0 ✓
Protocol ✓
T=1
(Default)
✓
Speed 9,600 bps – 446,400 bps
TA = 96 (223,200 bps) Default
Communication Speed and Protocol: Contactless Interface
Protocol T=CL ✓
Speed 106,000 – 424,000 kbps ✓
Operating Conditions
Temperature 0 C – 50 C
Humidity Max. 90% (non-condensing)
7
Technical Specifications
Category ACOS5-EVO
Cryptographic Capabilities
ECC P-224/P-256/P-384/P-521
RSA up to 4096 bits
DES/3DES 56/112/168-bits (ECB, CBC)
AES 128/192/256 bits (ECB, CBC)
Hash SHA1, SHA224, SHA256, SHA384, SHA512
MAC CBC-MAC (DES/3DES, AES), CMAC (3DES, AES)
Secure Messaging ✓
Mutual Authentication ✓
8
Product Applications
In what areas can we apply ACOS5-EVO?
Digital Signature Blockchain
e-Government Network Security
Windows Logon Email Security
Encryption
10
In what areas can ACOS5-EVO be used?
Employees request for a digital Employee inserts the ACOS5-EVO in the
Company provides their ACR39U PocketMate
certificate via the company website
employees with an ID
Employee uses his/her digital Employees stores the digital Administrator checks the credentials
and provides the employee with the link to
certificate to sign and encrypt the email certificate in the ID
download and store the certificate in the ID
11
In what areas can ACOS5-EVO be used?
Citizens go to Registration Authorities Certificate Authority provides the
to apply for a Digital Certificate citizen with the digital certificate
Citizen logs in to a secured website and Citizen digitally signs and encrypts his
submits the digitally signed and encrypted Income Tax Statement using the digital
document to the government agency certificate stored in the card
12
Related Software
Products
ACOS5-EVO PKI KIT
ACS offers the ACOS5-EVO PKI KIT to Certificate Authorities and other
organizations who are interested in deploying PKI Solutions with ECC Support.
With the ACOS5-EVO/CryptoMate EVO PKI Kit, the following are supported:
• Secure Online Certificate Generation
• Microsoft® Outlook and Mozilla® Thunderbird® mail signing and encryption
(S/MIME)
• Windows® Smart Card Logon
• Microsoft® Office
• Adobe® Reader®
Contact your ACS sales representative, visit our website at http://www.acs.com.hk or email us at
[email protected] for more information.
14
ACOS5 Minidriver
For clients who want to use the ACOS5-EVO and CryptoMate EVO in
Windows Environment only, ACS also provides the ACOS5 Minidriver.
The following Windows applications are supported:
• Windows® Smart Card Logon
• Microsoft® Office
• Microsoft® Outlook mail signing and encryption (S/MIME)
Once the token has been initialized with the ACOS5 Minidriver, it can only be
used with Windows OS and will not be compatible with other ACS
middleware.
Contact your ACS sales representative, visit our website at http://www.acs.com.hk or email us at
[email protected] for more information.
15
Thank You!
[email protected]
www.acs.com.hk
