Friday, January 11, 2008

Home Banking System Security Overview

The diagram below illustrates an overview of how a Home Banking User’s session will be handled.The User begins the session by connecting to the Internet using a Web Browser and requesting to connect to our Home Banking system. Even before the User can attempt to access the system, their Web Browser must support an encryption protocol called Secured Sockets Layer or SSL. SSL provides for data encryption, server authentication, and message integrity for the Internet connection. Most important, it provides a security “handshake” that is used to initiate the connection into the Home Banking system. If the Browser does not support the correct level of security, connection through the Firewall to
Internet
Firewall Security
Transaction Server
WEBServer
Firewall Security
Customer Database

Home Banking User

the Web Server is not made. The Five Online System supports data encryption at the highest level available (currently 128 Bit). Check your browser manufacturer’s Website for updates if it does not currently support this level of encryption. Once it has been determined that the Browser has SSL 128Bit encryption, requests for online banking information are passed through the Firewall to the Web Server. The User is then challenged by the Web Server to provide proper access information, such as a Login and Password. Once access is authenticated, the actual session is started on a
Transaction Server. In order for the Transaction Server to properly process session requests, it needs to have the ability to interact and communicate with the User’s information at the Bank. Through a higher level of security features, which include Private Data Lines, Firewalls, and Intrusion Detection / Security systems, the Transaction Server is then connected up to the User’s account information residing on the Bank’s main computer system. The User can then perform a variety of banking functions, such as balance / transaction inquiries, transfers between accounts, and Bill Payments. Fall River Five Cents Savings has gone to great measures to insure that your online banking experience safe and secure. However, security is also something you as a User must insure from your side. Never disclose your Login and Password to anyone, not even Bank Employees. Insure that this information in not easily available to anyone who may try to gain access to your information. If you feel that your Login/Password has been compromised, contact the Bank immediately.