IDEMIA Secure Transactions enters hardware security module market

IDEMIA Secure Transactions (IST) has launched IDEMIA Sphere HSM, another milestone of its cybersecurity suite unveiled in July this year. The move marks IST’s foray into the hardware security module (HSM) market.

With the proliferation of connected devices, digital payments, and the growing threat of cyberattacks, the imperative to secure data and services has never been more important, said IST. By safely creating, storing, and managing cryptographic keys, HSMs enable secure encryption, user authentication, digital signatures, and identity protection.

The IDEMIA Sphere HSM leverages decades of proven expertise in security solutions and has been validated through successful deployment in IST's own operations. According to IST, the HSM will empower organisations to confidently navigate today’s challenges, including post-quantum migration and evolving regulatory requirements. 

IDEMIA Sphere HSM is engineered, designed, and preconfigured in France, it ensures customers complete sovereignty and transparency for mission-critical systems. Natively aligned with stringent European data protection, security directives, and top-tier certifications**, it also ensures compliance across regulated industries, including defence. The solution is post-quantum ready by design.  

IDEMIA Sphere HSM is based on a scalable layered security approach and unique distributed architecture that make the system significantly harder to compromise, IST said. Traditional, monolithic HSMs rely on a single cryptographic processor, whereas the IDEMIA Sphere HSM uses a scalable farm of "secure elements". Each element has a tamper-resistant microcontroller capable of both protecting cryptographic keys and executing cryptographic operations.

The architecture enables companies to deploy exactly enough elements to achieve a specific amount of computing power, so users can optimise performance and pay only for the capacity they use, all while maintaining full ownership of their keys.

A streamlined design further reduces deployment costs and operational complexity by eliminating the need for costly requirements, like fans or battery replacements, that are typical for traditional HSMs, IST added. 

IDEMIA Sphere HSM further limits energy consumption and infrastructure costs. Consuming only half the power of conventional HSMs, it delivers measurable environmental benefits* while helping organisations advance their corporate social responsibility (CSR) commitments.  

“(The launch day) marks a pivotal moment in IDEMIA Secure Transactions' journey. Building on our proven expertise in secure credentials, we are now revolutionising the entire HSM landscape with IDEMIA Sphere HSM – a gamechanging solution that delivers uncompromising security and complete sovereignty while reducing operational costs for our clients.

"This breakthrough represents everything we stand for: relentless innovation to deliver cutting-edge technologies which empowers organisations to effectively and efficiently protect their sensitive data. This achievement firmly positions us at the forefront of the cybersecurity revolution, and I'm incredibly proud of what our teams have achieved,” said Philippe Oliva, CEO, IST.

With decades of cryptographic expertise and significant R&D investments, IST will leverage its extensive customer reach of financial institutions, mobile network operators, and Internet of Things (IoT) companies, all major HSM solution users, as a springboard to scale. 

The HSM is the second milestone in the IDEMIA Sphere cybersecurity offer. The first milestone was the launch of the IDEMIA Sphere Cryptographic Library, which helps organisations adopt quantum-resistant cryptography today. Certified by NIST CAVP***, this modular library supports both classical and post-quantum cryptographic algorithms.

Hashtag: #Cybersecurity

*Typical energy consumption for the IDEMIA Sphere HSM is 50 W. The average power consumption of a traditional HSM is typically around 100 W under normal loads. 

**The solution has achieved certifications such as the National Institute of Standards and Technology (NIST) FIPS 140-3 Level 3.

The Cryptographic Algorithm Validation Program (CAVP) is run by NIST, which certifies the correct implementation of cryptographic algorithms.