An edge computing oriented unified cryptographic key management service for financial context.

Cryptography plays a key role in information systems of financial industry. With the rapid development of financial industry, the scale of the financial cryptographic services continues to expand, and the volume of terminal devices increased significantly, causing problems such as system complexity and extreme workload. The centralized data processing model enabled by cloud computing can ease these problems to some extent, but when the data produced by various kinds of devices (e.g. IoT devices) continues to increase rapidly, cloud computing-based services subsequentially cannot meet the demand of real-time and efficient data processing. The edge computing is an emerging computing model, which is capable of hierarchically managing the resource, and supporting the deployment of cryptographic services at the edge. The edge computing-based cryptographic service separates data encryption/ decryption processing and provides low-level interfaces for financial business systems. It could simplify the way financial business systems obtain cryptographic services. In this paper, we propose an edge oriented cryptographic key management service, which consists of system monitor module, key management module and security management module. The proposed service enables the management of the whole life cycle of cryptographic keys, and reconstructs the process of cryptographic key. In a 1-year continuous testing, the proposed system achieved a total of 36 million cryptographic key distributions, and each cryptographic key has a lifecycle of 1.5 days on average. The TPS reached 15,000, and the system availability reached 99.99% throughout the year. The proposed system now is officially available as a commercial cryptographic service platform. [ABSTRACT FROM AUTHOR]