This Internet Banking System brings together a combination
of industry-approved security technologies to protect data for
the bank and for you, our customer. It features
password-controlled system entry, a Digital ID for the bank’s
server, Secure Sockets Layer (SSL) protocol for data
encryption, and a router loaded with a firewall to regulate
the inflow and outflow of server traffic.
Secure Access and Verifying User Authenticity
To begin a session with the bank’s server the user must key
in a Log-in ID and a password. Our system, the Internet
Banking System, uses a “3 strikes and you’re out” lock-out
mechanism to deter users from repeated login attempts. After
three unsuccessful login attempts, the system locks the user
out, requiring either a designated wait period or a phone call
to the bank to verify the password before re-entry into the
system. Upon successful login, the Digital ID authenticates
the user’s identity and establishes a secure session with that
visitor.
Secure Data Transfer
Once the server session is established, the user and the
server are in a secured environment. Because the server has
been certified data traveling between the user and the server
is encrypted with Secure Sockets Layer (SSL) protocol. With
SSL, data that travels between the bank and customer is
encrypted and can only be decrypted with the public and
private key pair. In short, the bank’s server issues a public
key to the end user’s browser and created a temporary private
key. These two keys are the only combination possible for that
session. When the session is complete, the keys expire and the
whole process starts over when a new end user makes a server
session.
Router and Firewall
Requests must filter through a router and firewall before they are permitted
to reach the server. A router, a piece of hardware, works in conjunction
with the firewall, a piece of software, to block and direct traffic coming to
the server. The configuration begins by disallowing ALL traffic and then opens
ports only when necessary to process acceptable data requests, such as retrieving
web pages or sending customer requests to the bank.
Using the above technologies, your Internet Banking transactions are secure.
|
