This Internet Banking System brings together a combination of industry-approved security technologies to protect data for the bank and for you, our customer. It features password-controlled system entry, a
Thawte-issued Digital ID for the bank's server, Secure Sockets Layer
(SSL) protocol for data
encryption, 24 hour monitoring by an independent
network security firm, and a
firewall to regulate the inflow and outflow of server traffic.
Secure Access and Verifying User Authenticity
To begin an i-Bank session, the user must key in a login ID and a password. Our system, the Internet Banking System, uses a "3" strikes and you're out lock-out mechanism to deter users from repeated login attempts. After three unsuccessful login attempts, the system locks the account, requiring phone call to the bank to verify the password before re-entry into the system. Upon successful login, the Digital ID from
VeriSign, the experts in digital identification certificates, authenticates the user's identity and establishes a secure session with that visitor.
Secure Data Transfer
Once the server session is established, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by
Thawte, data traveling between the user and the server is encrypted with Secure Sockets Layer
(SSL) protocol. With SSL, data that travels between CNB and the customer is encrypted and can only be decrypted with the public and private key pair. In short, CNB's server issues a public key to the end user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user initiates a server session.
Router and Firewall
Requests must filter through a router and firewall before they are permitted to reach the web server.
The router and firewall work together to block and direct traffic coming to the server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process acceptable data requests, such are retrieving web pages or sending customer requests to the bank.
Using the above technologies, your Internet banking transactions are secure.
This web site is secured using a
Thawte Digital
Certificate. This ensures that all information you send to us via the World Wide Web will be encrypted. Please click on the Thawte Authentic Site Seal which will verify the validity of our Thawte Certificate, and our commitment to your security.
The
CNB network, including our Web server and iBank functionality, is
protected 24 hours a day by SecureWorks, an independent network security
company. SecureWorks uses a combination of a proprietary firewall device
along with remote monitoring to ensure that our network is safe from
both malware (such as viruses and worms) as well as hackers and other
unauthorized users.
|