CFCA creates a secure all-in-one solution, Kunpeng comprehensively promotes financial innovation

Currently, the financial industry is in a critical period of business digital transformation, and the underlying IT architecture needs revolutionary changes to effectively support the transformation.

On the one hand, the demand for high speed, large capacity, high concurrency, and real-time risk control requires a very solid foundation for the digitalization of the financial industry; on the other hand, the digital transformation of the financial industry places increasingly high demands on the technological innovation of the sustainability, stability, and security of the underlying IT architecture. Under the rigid demand for financial digital transformation, whoever can better meet the needs in this track will be able to take the lead and achieve success.

Therefore, digital transformation requires not only "speed" but also "efficiency". In today's booming digital economy, the financial industry is changing rapidly from business to channels, from customers to products, from internal risks to external competition. In the face of the diverse scenarios that may arise, the traditional all-in-one security machine with the x86 platform as the core is obviously unsustainable.

Then, how to adopt a better platform as a foundation to help financial institutions increase speed and efficiency, and quickly migrate existing applications while maintaining stability becomes a key issue.

CFCA joins hands with Kunpeng to create a new all-in-one security solution

China Financial Certification Center (CFCA) is a technology company with integrated network security services as its core. It has participated in major scientific research projects such as the "National Golden Card Project" and the "National 863 Program", and has led the formulation of more than 30 national standards, financial industry standards, cryptographic industry standards and important group standards. It has more than 100 invention patents and software copyrights, and has won the "Banking Technology Development Award" issued by the People's Bank of China and important awards issued by the government and associations. At the same time, CFCA is the first domestic institution to realize the implantation of all root certificates into the world's four major root certificate repositories, realizing independent control of server certificates.

In order to further solve the security and effectiveness of "electronic signature" in the application process of the financial field, CFCA launched a new security all-in-one solution based on Huawei Kunpeng server. The solution was jointly designed and developed by Huawei Financial Industry Solutions Department and CFCA, and through the technical empowerment of the Central Plains Kunpeng Ecological Innovation Center, it greatly improved the security level and transaction performance of the connection between financial institutions. The overall solution is based on Kunpeng server, Kylin operating system issued by openEuler, and PCIE password card independently developed by CFCA and other software and hardware. According to the banking business system specifications, it realizes the functions of national secret algorithm signature verification, digital envelope encryption and decryption, etc. On the premise of fully meeting the business needs of customers, it has also achieved full localization from the bottom foundation to the top architecture, firmly holding the lifeline of finance in its own hands.

Today, this solution has begun to be piloted in a bank's core production system, achieving secure connection between access institutions and the bank's core system.

​​

Speed ​​up, increase efficiency, and quickly migrate, Kunpeng's advantages in software and hardware collaboration are fully demonstrated

In actual operation, the new all-in-one security solution has shown obvious advantages, and the information integrity, non-repudiation and post-event traceability of the transaction process in key business applications within the bank have been effectively improved. The capabilities of Kunpeng's software and hardware products are far more than just security and stability.

It is understood that the new all-in-one security solution adopts the Kylin operating system and performs full-stack optimization of the platform based on the Kunpeng BoostKit application enabling suite, allowing the Kunpeng server hardware to give full play to its multi-core computing advantages. At the same time, it optimizes the user-state lock mechanism, making the CPU consumption rate of password card operations less than 30%.

Based on Kunpeng BoostKit application enablement kit and relying on Kunpeng hardware encryption instruction set, the new solution realizes software and hardware coordinated acceleration, and the application performance is improved by multiples. According to actual test data, after using the KAE acceleration engine in Kunpeng BootsKit to call the SM3 and SM4 algorithms, the performance of the SM3 algorithm has increased by about 100,000 TPS compared with before, and the performance of the SM4 algorithm has increased by about 15 times.

In addition, Wang Bo, product director of CFCA's technical department, said that in the process of creating a new all-in-one security solution, CFCA also worked with Huawei to recompile the BIOS software to achieve disk RAID settings that can be directly recognized by Kunpeng hardware, and created a new password card reader form factor to better meet the needs of the core-level systems in the financial industry.

Program migration is a time-consuming and laborious process, and the iteration of the underlying architecture from the old to the new is faced with many challenges. To migrate from the x86 platform to the Kunpeng platform, most of the dynamic libraries and static library files in the encryption card, optical port driver and other program software need to be recompiled. However, with the support of the Kunpeng development kit DevKit, these problems are solved.

"Using the Kunpeng development kit DevKit, we quickly completed the platform migration of the software program within a week," said the product manager.

Implemented in various scenarios, Kunpeng ecosystem accelerates innovation and transformation in all aspects

The CFCA all-in-one security solution is the first of its kind in the industry. Through Kunpeng technology, it effectively improves the computing performance of cryptographic cards, reduces CPU power consumption, and accelerates customer implementation in the financial industry.

In the localization transformation of a domestic bank's core system, the original business was based on an X86 base, and the business performance was less than 6000TPS. After completing the technical empowerment, CFCA provided high-performance domestic password cards based on Kunpeng processors and Kirin operating systems, forming a completely independent and controllable security all-in-one solution, which perfectly replaced RISC minicomputers and x86 platforms. The business performance was increased from less than 6000TPS to 15500TPS on the Kunpeng platform, a performance improvement of 150%.

Applying Kunpeng's software and hardware base to the all-in-one security machine is a new attempt. Today, the all-in-one security machine solution based on Kunpeng's software and hardware collaboration has been running stably in the business system of the pilot bank for half a year. In the future, CFCA will continue to deepen the solution and plan to promote it in many financial application scenarios such as telecommunications anti-fraud, second-generation payment, second-generation credit reporting, NetsUnion access, same-city clearing, digital RMB, etc., and simultaneously explore application scenarios in other fields.

From the perspective of the Kunpeng computing industry ecosystem, this is just one example of helping customers increase speed and efficiency through underlying construction. Kunpeng has already established mature technology and ecological conditions for the architectural and business characteristics of the financial industry and financial business systems, allowing more customers to enjoy Kunpeng's empowerment in specific scenarios:

• Multi-core high-concurrency computing power supports customers to build a secure and stable distributed financial core system;
• Collaborative innovation with cloud platforms and distributed databases can accelerate the launch of Internet banking services while saving costs;
• We work with banking customers to promote open source container cloud projects and develop channel transaction scenario applications...

As the digital foundation of financial technology, Kunpeng is promoting financial digital transformation in the four major financial industry business scenarios: financial core, Internet banking, business analysis, and channel transactions.

Huawei Connect 2021 will be held online from September 23 to 25. The conference will focus on the theme of "Deepening Digitalization" and discuss in depth the issues of experience improvement, efficiency improvement, and model innovation in various industries in the digital era. With the assistance of Huawei, we look forward to seeing more industries embrace the arrival of digitalization as soon as possible.