|
Security Statement
This Internet Banking Solution brings together a combination
of industry-approved security technologies to protect data
for the bank and for you, our customer. It features
password-controlled system entry, a VeriSign-issued Digital
ID for the bank's server, Secure Sockets Layer (SSL)
protocol for data encryption and a router loaded with a
firewall to regulate the inflow and outflow of server
traffic.
Secure Access and Verifying User Authenticity
To begin a session with the bank's server the user must
key in a Log-in ID. The user will then be required to enter
a valid password and when we recognize the computer that the
user is logging in from, the user will be asked to confirm
his SiteKey and passphrase. This two-way authentication is a
security feature designed to protect the user against
Identity theft and fraud. SiteKey also helps prevent
unauthorized access to the user’s accounts while reassuring
the user that they are at the valid Signature Bank website.
SiteKey consists of three parts: an image, a pass phrase,
and three challenge questions that are secrets between the
user and Signature Bank. The user will be asked a series of
challenge questions when they enter a wrong password or log
in from a computer that is not known to us. The Internet
Banking Solution uses a "three strikes and you're out"
lock-out mechanism to deter users from repeated log-in
attempts. After three unsuccessful log-in attempts, the
system locks the user out, requiring either a designated
wait period or a phone call to the bank to verify the
password before re-entry into the system. Upon successful
log-in, the Digital ID from VeriSign, the experts in digital
identification certificates, authenticates the user's
identity and establishes a secure session with that visitor.
Secure Data Transfer
Once the server session is established, the user and the
server are in a secured environment. Because the server has
been certified as a 128-bit secure server by VeriSign, data
traveling between the user and the server is encrypted with
Secure Sockets Layer (SSL) protocol. With SSL, data that
travels between the bank and customer is encrypted and can
only be decrypted with the public and private key pair. In
short, the bank's server issues a public key to the end
user's browser and creates a temporary private key. These
two keys are the only combination possible for that session.
When the session is complete, the keys expire and the whole
process starts over when a new accountholder starts a server
session.
Router and Firewall
Requests must filter through a router and firewall before
they are permitted to reach the server. A router, a piece of
hardware, works in conjunction with the firewall, a piece of
software, to block and direct traffic coming to the server.
The configuration begins by disallowing ALL traffic and then
opens holes only when necessary to process acceptable data
requests, such as retrieving web pages or sending customer
requests to the bank.
Using the above technologies, your Internet banking
transactions are secure. |
