Skip to content
Bacs HSM • FIPS 140-3 Level 3

Hardware Security Module (HSM)

Fully automate your payment file and submission workflows with a Hardware Security Module; removing the need for manual smart card authentication. 

Interbacs - Bacs Payment Services SEO Bomb Post Headers
FIPS 140-3
Level 3 tamper-resistant key storage
No smart cards
No smart cards / No manual sign-off of payment files
ISO 27001 Certified
Ultra-secure, off-site data centre
No extra cost
for attended mode with 2FA or digital signatures
Introducing HSM

The pinnacle of Bacs submission security and automation

Hardware Security Modules (HSM) are the pinnacle of Bacs submission security and automation. Implementing a Hardware Security Module into the Bacs payment process allows you to automate as much as you are comfortable with.

At Interbacs, we are utilising HSMs to help the public sector and larger organisations streamline complex payment processes and improve system performance. This has helped organisations to realise cost and time efficiencies and boost their digital data security.

 

What is DDMS_-1
BROCHURES
HSM_Cover-01

Hardware Security Module

HSMs are an added automation and security feature to our InterPay software offering.

Get the brochure

Tell us where to send it. You can read it straight away, and we'll email you a copy.

THE CHALLENGE

How are Hardware Security Modules helping?

Hardware Security Modules are transforming how organisations manage substantial financial operations, delivering enhanced security and operational efficiency. Many of our clients have encountered significant challenges as financial workloads have increased.

Security remains paramount, particularly in light of evolving data protection regulations and the growing demand for robust data storage and secure file transfer protocols, to mitigate the rising threat of cyberattacks. Risks can be minimised or negated by limiting the need for use of physical smart cards.

Many of our clients' finance departments reported recurring incidents of human error and preventable oversights, largely a result of processing high volumes of payment files or submissions in conjunction with their core business responsibilities.

Switching to a Hardware Security Module as a Service (HSMaaS) solution has been and continues to be revolutionary for businesses with complex Bacs payment processes, allowing them to reduce errors, tackle scaling workloads & better manage disaster recovery processes.

 

THE TECHNOLOGY

What is an HSM, and how does it work?

certificate_icon

What is a Hardware Security Module?

A Hardware Security Module (HSM) is a physical storage device that conforms to standard FIPS 140-3 Level 3 (security standard for cryptographic modules, focusing on physical security and identity-based authentication).

The HSM stores and safeguards cryptographic keys and certificates, removing the need for manual sign-off of payment files and submissions. The encrypted storage device is typically housed off-site in an ultra secure ISO 27001-certified data centre and is seamlessly integrated with your Bacs Approved InterPay DDMS software.

interbacs_icon

How does it work?

The HSM integrates into your payment file submission process and works alongside our InterPay software to fully automate the process.

Stored certificates and cryptographic keys (public/private keys) are automatically called upon and checked at key steps to validate and authorise submissions. Segregation of duties and role-based permissions are implemented automatically and your desired reports are generated and actioned automatically for you to view within Interpay DDMS.

Explore Interpay
Interbacs_HSM_v2.1-01
CHOOSE YOUR LEVEL OF CONTROL

Attended vs Unattended

Enterprise Business

Attended HSM

 Attended HSM is a customisable approach that allows you to maintain a desired level of control. Gain the added security of HSM but enable digital signature requirements or two factor authentication. We charge no extra cost for this feature. 

Channel Partners

Unattended HSM

Unattended HSM is the complete "hands-off" approach and offers the highest levels of security. Store all keys and certificates, develop segregation of duties and completely automate the entire Bacs payment file and submissions process. 

How to switch to an HSM

Three steps, and the Interbacs team is always happy to guide you along the process.

  1. Apply for an HSM certificate

     The first step is to obtain an HSM Certificate through your bank; contact them and enquire about their HSM Certificate Application process. 

  2. Send your Certificate Signing Request

    Following submission of your completed application form, your bank will request that you provide a Certificate Signing Request (CSR). At this stage, contact us as Interbacs will generate this for you. 

  3. We load your certificate

     Once the bank has received and checked your CSR, you will be awarded the certificate. Once you send this over to us, we will load it into your Hardware Security Module to enable use via InterPay DDMS. 

Free — No Obligation

Talk to an HSM specialist

Book a free demo now with one of our Hardware Security Module automation specialists.

  • See HSM working with InterPay DDMS
  • Help with your bank's certificate process
  • Attended or unattended – we'll help you choose
Book a demo

Prefer to talk? Call 0161 667 0758

FEATURES & BENEFITS

Why organisations choose HSM

Security_icon_web

Security

Strengthen your digital security by storing cryptographic keys in a tamper-resistant FIPS 140-3 Level 3 compliant device, stored in an ultra secure data centre. 

Efficiency_icon_web

Efficiency

Create automated payment file and submission workflows for time consuming tasks to enable your finance teams to focus on other business critical activities. 

Flexibility_icon_web

Flexibility

Customise your level of automation for peace of mind. Unattended allows creation of automated workflows with multi-user, manual signing via 2FA. 

Risk_icon_web

Risk Mitigation

Configure your file upload and approval workflows and tailor your submission frequencies to remove the potential for incorrect processing and human error.
bank_icon
PUBLIC SECTOR G-CLOUD • LOT 2: CLOUD SOFTWARE

Procure Bacs HSM through G-Cloud

Local and central governments, charities and non-profit organisations can find us on G-Cloud under Lot 2: Cloud Software (Bacs HSM).

FAQs

Questions about Hardware Security Modules

What is a Hardware Security Module?

A Hardware Security Module (HSM) is a physical device, certified to FIPS 140-3 Level 3, that stores and safeguards the cryptographic keys and certificates used to sign Bacs submissions. It removes the need to sign payment files manually with a smart card.

What is the difference between unattended and attended?

Attended HSM keeps a person in the loop, with digital signature or two-factor authentication at the steps you choose, at no extra cost. Unattended HSM is fully hands-off: keys and certificates are stored, duties are segregated and the whole file and submission process is automated.

How do we switch to an HSM?

Apply to your bank for an HSM certificate, send the bank the Certificate Signing Request (CSR) that Interbacs generates for you, then send us the certificate and we load it into your HSM.

Does an HSM work with InterPay?
Yes. The HSM integrates with InterPay to automate file signing, approval and submission, and your reports are generated automatically.
Can public sector organisations buy an HSM through G-Cloud?
Yes. Interbacs is listed on G-Cloud under Lot 2: Cloud Software (Bacs HSM).

Ready to automate your Bacs submissions?

Book a free demo now with one of our Hardware Security Module automation specialists.

Bacs Approved Bureau
Bacs Approved Software Supplier
Crown Commercial Service Supplier
ISO 27001 Certified
ISO 9001 Certified