|
Online Security We take stringent steps to ensure that only you (or someone authorised by you) can access your accounts. A world class solution that makes Internet banking completely secure has therefore been implemented. Here are some of our security measures. - User authentication
- Encryption
- Site certificates
- Firewalls
User authentication When you first use Internet banking, enter your profile number and authenticate it by adding your temporary password, the system will prompt you to change it to a password of your choice. From then on, whenever you bank via Internet banking, you must enter your profile number and password. In an attempt to further ensure that no one else accesses your banking details, your session automatically terminates if you leave your computer unattended for more than 5 minutes. If your password is entered incorrectly three times or if you may have forgotten it, you will need to go back to your branch with your ID and request another temporary password. What is encryption? Encryption converts a meaningful message or other information into something meaningless to those without the authority to view it. It also allows an authorised person to 'decrypt' the message, i.e. to convert it back into its original form. Encryption and decryption make it possible to pass messages between two (or more) people/computers without allowing anyone else to understand them. What kind of encryption does Internet banking use? Without getting too technical, our technique is based on Secure Sockets Layer (SSL) standard (of a similar strength to that used by other leading international internet banks) that encrypts information between your web browser and our banking World Wide Web server. How do I encrypt my secure communications? If you have the browsers Microsoft IE 5.5 or higher, Netscape Communicator 6 or higher (all of which are SGC-capable), you'll be able to access Internet banking without any additional software. These browsers supply 128-bit encryption to banking sites, and 40-bit encryption to non-banking sites that require encryption. How do I know when my communication is encrypted? If your browser is Microsoft IE 5.5 or higher, and you wish to verify your 128-bit connection, drag your mouse pointer over the lock on the status bar at the bottom of your browser. A popup box will display 'SSL Secured 128 bit'. To establish encryption strength if the lock is not displayed, view the site certificate contents in the 'Properties' option under the 'File' menu bar item, and then select the 'Certificates' button. If your browser is Netscape Communicator 4.05 or higher, and you wish to verify the security of your connection, click on the lock displayed at the bottom of the initial logon page (subsequent pages do not display the correct security information). A 'Security info' page will be displayed with two options, namely 'View certificate' and 'Open page info'. When selecting the latter, the page information which includes the security status of the page will be displayed. Ensure that the status is as follows: 'This is a secure document that uses a high-grade encryption key for US domestic use only (RC4, 128 bit)'. This information can also be viewed by selecting the 'Page info' option in the 'View' menu bar. How to verify the banking site certificate if you use a SGC browser: - The Microsoft IE browser allows you to view a site certificate from the 'Properties' option under the 'File' menu bar item at the top of your screen.
- The Netscape browsers allow you to view a site certificate from the 'Page info' option under the 'File' menu bar item at the top of your screen.
The Microsoft Internet Explorer, Netscape Navigator browsers should display the following key information: - This certificate belongs to:
- <site address>
- This certificate was issued by:
- Thawte SGC CA
- This certificate is valid from <start date> to <end date>.
Firewalls Fire walling is a barrier between a sensitive internal network (as used by the bank) and the Internet. Our state-of-the-art firewalls protect our computers and your data, reinforced by other high-security measures designed by experts and continually reviewed by specialists.
|
