This Internet
Banking System brings together a combination of industry-approved
security technologies to protect data for the bank and
for you, our customer. It features password-controlled
system entry, a VeriSign-issued Digital ID for the bank's
server, Secure Sockets Layer (SSL) protocol for data
encryption, and a router loaded with a firewall to regulate
the inflow and outflow of server traffic.
Secure Access and Verifying User Authenticity
To begin a session with the bank's
server the user must key in a Log-in ID and a password.
Our system, the NetBanking System, uses a "3 strikes
and you're out" lock-out mechanism to deter users
from repeated login attempts. After three unsuccessful
login attempts, the system locks the user out, requiring
either a designated wait period or a phone call to the
bank to verify the password before re-entry into the
system. Upon successful login, the Digital ID from VeriSign,
the experts in digital identification certificates,
authenticates the user's identity and establishes a
secure session with that visitor.
Secure Data Transfer
Once the server session is established,
the user and the server are in a secured environment.
Because the server has been certified as a 128-bit secure
server by VeriSign, data traveling between the user
and the server is encrypted with Secure Sockets Layer
(SSL) protocol. With SSL, data that travels between
the bank and customer is encrypted and can only be decrypted
with the public and private key pair. In short, the
bank's server issues a public key to the end user's
browser and creates a temporary private key. These two
keys are the only combination possible for that session.
When the session is complete, the keys expire and the
whole process starts over when a new end user makes
a server session.
Router and Firewall
Requests must filter through a router
and firewall before they are permitted to reach the
server. A router, a piece of hardware, works in conjunction
with the firewall, a piece of software, to block and
direct traffic coming to the server. The configuration
begins by disallowing ALL traffic and then opens holes
only when necessary to process acceptable data requests,
such as retrieving web pages or sending customer requests
to the bank.
Using the above technologies, your
NetBanking transactions are secure.
For your added protection, please ensure
that:
- When you open our website, that the web address
is correct to avoid phishing which is basically another
site pretending to be our site with the intention
of gathering sensitive information.
- Your password is secure. Make sure you use a password
that is easy to remember but difficult to guess, change
your password regularly, change your password if you
feel that it has been compromised and do keep the
password personal to you by not disclosing it to anyone.
- Your PC is secure. Use a personal firewall if possible
and make sure that you apply the recent security patches
for your operating system. Install anti-virus and
anti-spyware in your PC, and keep their signatures
updated.
- Do not use a public PC for sensitive transactions.
In case the need to do so arises, make sure that you
clear the internet history and cache after you use
it. Close the browser after.
|