Rules for Secure Use of Internet Banka

Transcription

1 Rules for Secure Use of Internet Banka

2 Content TECHNICAL SECURITY FOR YOUR INTERNET BANKA... 3 Encryption... 3 Automatic Logging Off from Internet Banka... 3 Web Application Firewall... 3 Regular Checks on Vulnerability of Internet Banka... 3 PROTECTION OF LOG-IN DETAILS... 3 How to Create a Strong Password and Protect It... 3 Blocking and Unblocking Internet Banka... 3 Process of Changing Mobile Telephone for Mobile Key... 4 Storage of Signature Certificate... 4 Information about Last Log In... 4 How We Designate s, the Website and Applications... 4 Measures Not Provided... 5 How We Contact Our Clients... 5 PERSONAL DATA AND IDENTITY... 5 Prevention and Recovery after Identity Theft. (phishing, telephone phishing, dumpster diving)... 5 How We Protect Client Information and Personal Data... 6 We Can Share Client Information... 6 PROTECT YOUR COMPUTER AND MOBILE DEVICES... 6 Security for Computers and Mobile Devices... 6 Backing Up Data... 6 Security for Wireless Networks... 6 CONTACT US... 6

3 Technical Security for Your Internet Banka Encryption To maintain the confidentiality of your data we encrypt its transmission between your computer and Internet Banka using symmetrical encryption algorithms with a key at least 128 bits long. The transmission of the symmetrical key is encrypted using an asymmetrical key with a length of 2,048 bits. Automatic Logging Off from Internet Banka To increase security there is automatic logging off from Internet Banka after 20 minutes of inactivity. For security reasons and to protect your data and finances, after the end of work in Internet Banka always log off using the Log Off button and then close your internet browser. Web Application Firewall Internet Banka is protected by a web application firewall (WAF). Regular Checks on Vulnerability of Internet Banka To maintain the security of Internet Banka, we test it for the presence of vulnerabilities. Protection of Log-in Details How to Create a Strong Password and Protect It Your password must meet the following criteria: length of 8 to 16 characters at last one character must always be a number at least one character must always be a lower-case letter at least one character must always be an upper-case letter For the creation of the strongest possible password we recommend using the maximum number of characters and including in the password, in addition to the mandatory characters, for example, also non-alphanumerical characters. Pay increased attention to maintaining the confidentiality of your password. Do not disclose your password to other persons, even to family members. If you are worried that you won t remember it, write it down so that only you have access to the records. Store a security envelope with your password in a safe place. Regularly change your password, best of all every month. Promptly change your password in the event of any doubt it is known by an unauthorised person. Do not use simple passwords that contain the names of family members and dates of birth. Such passwords can be easily uncovered and abused. In no settings on your computer should you allow remembering of passwords. Never send your password by , even if somebody asks you for it. For security reasons, GE Money Bank may not request you communicate your password. When inputting your password, always check that you input your password into an application that is operated by GE Money Bank. Blocking and Unblocking Internet Banka The procedure for blocking and unblocking the Internet Banka service differs depending on the type of client. Individuals Not in Business and in Business If you have a request for the blocking or unblocking of access to the Internet Banka service, contact nonstop Customer Service. at GE Money Bank on Or you can contact any branch of GE Money Bank. Legal Entities If you have a request for blocking or unblocking access to the Internet Banka service, contact the branch with which your account is maintained. If you want to block Internet Banka, you can use the GE Money Bank nonstop Customer Service line on If you want to unblock Internet Banka you can use the GE Money Bank Customer Service line on , Mon-Fri 8:00-21:00. and Sat-Sun 8:00-17:00. 3

4 Process of Changing Mobile Telephone for Mobile Key In the event you want to change the number for the sending of a mobile key, it is necessary to visit any GE Money Bank branch.. To increase security, changes are not permitted using Customer Service. Storage of Signature Certificate If you log on to Internet Banka using certificates, do not store the signature certificate on your computer, but outside your computer,. for example on a USB flash disk or other device that you have under your control or that you can store in a safe place. Information about Last Log In In your Internet Banka you will find information about the previous time you logged in and also the five last times you logged in, where you can check whether anybody has logged in to your Internet Banka application. You can find information about the previous time you logged in most quickly at the Internet Banka homepage, where the date and time of last logging in is stated. After clicking on Previous Log-ins you will be redirected to a screen with a list of the last five times you logged in. Here you will find information about the date and time of logging in, the IP address from which the log-in occurred and also information about the type of access to Internet Banka (Standard = logging in to full version of Internet Banka, Mobile = logging in to mobile version of Internet Banka). You can get to the screen with the last five log-ins using the Personal Settings in the Last Log-ins menu. How We Designate s, the Website and Applications Do not respond to s that ask you to input your personal details. GE Money Bank never asks in an for your confidential information, e.g. log-in details for Internet Banka. Check that you are logging in to Internet Banka in the right place: After opening the log-in page for Internet Banka, check in the command line that you can see the address ibs31/controllerservlet. In new browser versions the command line also has a green background. Depending on the type and version of your internet browser, a locked padlock icon should be displayed in the upper or lower part. After clicking on the padlock icon, information about the security certificate is displayed. The Norton Secured logo is displayed in the lower right of the screen. After clicking on the logo, a page opens with information about. the security certificate issued for the domain ibs.internetbanka.cz belonging to GE Money Bank. 4

5 If you suspect that the log-in page is behaving unusually somehow, for example it is requesting the password, mobile key or signature certificate in an unusual place, do not complete the log-in information, contact GE Money Bank Customer Service on and check that you are logging in to Internet Banka on the right page. If you are using Internet Banka with a mobile key, pay attention to the whole text of the text message with the mobile key.. This is because each text message contains, for security reasons, not only the mobile key, but also a description of the transaction. you are authorising. Keep an eye on your money. Regularly check your accounts. If you notice any unusual transactions, promptly contact us. If you suspect a website is fraudulent or you have received a fraudulent , write to us at technickapodpora@ge.com. or call Measures Not Provided At its website, GE Money Bank does not provide and does not offer the option of downloading or links to any software except. GE Money Bank software. An exception is the option of downloading the TeamViewer application file. Non-provided tools therefore. include updates to the operating system, archiving programs, anti-virus programs, anti-malware programs, etc. The software provided includes, for example, the GE Money CZ or bene+ bonuses and discounts applications. How We Contact Our Clients GE Money Bank contacts its clients by telephone or . The telephone number from which a client is contacted can change depending on the department that is contacting the client, or depending on the client s mobile operator. communication is always from addresses ending with the ge.com domain. A client is never asked to provide his security details (for example his password for Internet Banka, PIN for payment card and so on). Personal Data and Identity Prevention and Recovery after Identity Theft (phishing, telephone phishing, dumpster diving) Identity theft is a situation where somebody steals your personal data and uses them without your permission. Identity thieves are inventive; they go through publicly available dumpsters in which documents with personal data can be found. They can work for actual companies and authorities, or pretend that they do. They can also try to convince you by or by telephone to provide your personal data. If they obtain your personal data, they can use it to get money from your bank account, make payments using your credit card, order services or borrow money in your name. The following are signs that somebody has stolen your identity: transactions or payments by card that you did not make, some statements stop coming. Identity theft is a criminal offence. You can make a criminal complaint. 5

6 How We Protect Client Information and Personal Data In the case of mutual exchange of information between GE Money Bank, credit entities, Internet Banka, etc., GE Money Bank ensures that there cannot be unauthorised or random access to information, its alteration, destruction or loss, unauthorised transfers, unauthorised processing, as well as other abuse of information. We Can Share Client Information GE Money Bank, based on consent granted to the processing of personal data, shares personal data and closely works with its affiliate. GE CZ and subsidiaries GE Money Auto, a.s., AgroConsult Bohemia s.r.o., and GE Capital (Czech) Holdings, s.r.o. With GE CZ we share clients personal information, to achieve common goals and therefore protect the rights and lawfully protected interests of GE Money Bank, or other related entities. Recipients can also be other companies working as a part of the Bank Register of Client Information and Non-bank Register of Client Information, or another register that GE Money Bank uses based on the law or regarding the use of which clients are informed in advance (see the BRCI and NRCI Information Memoranda). Recipients can also be other companies providing additional services for GE Money Bank for products and services with which the client expresses its consent or submits a request as a part of negotiations on a contractual relationship with GE Money Bank or in a concluded contractual relationship. Protect Your Computer and Mobile Devices Security for Computers and Mobile Devices Keep your computer and mobile devices secure. Regularly update the operating system on your computer and mobile devices. Use the current version of your internet browser. Install programs that protect your computer and mobile devices, such as anti-virus programs, anti-spyware programs and a firewall, and regularly update them. Use a spam filter, do not open and immediately delete s and attachments that came to you from an unknown sender, because they could contain viruses and unsecure programs. Avoid downloading and installing unknown files from unknown sources to your computer and mobile devices (in particular with the file extension.exe), because they could reduce the security of your computer and mobile devices. If you connect from a place where more than one person has access to your computer, do not leave your computer switched on without supervision. Before you leave your computer, active a password-protected screensaver or use CTRL+ALT+DEL to lock your computer. Backing Up Data In order to maintain the availability of your data, we recommend that you regularly back up important data on data storage devices outside your computer. Suitable storage devices are USB flash discs, external discs and home network storage devices. If you want to maintain the confidentiality of your backed-up data, we recommend encrypted backing-up. By backing up at a cloud storage point you undergo the risk of your backed up personal data leaking and thereby limit the efficiency of your measures to maintain data confidentiality. Security for Wireless Networks Pay increased attention when using public Wi-Fi hotspots. The data transferred can be unencrypted or insufficiently encrypted. Therefore take additional measures such as using https or other encryption if you are accessing s, social networks or sharing sensitive data using a public Wi-Fi hotspot. If you cannot take such measures, consider whether you could delay such activities until you are connected using a secure network. Contact Us Customer Service: Mon Fri 8:00 21:00, Sat Sun 8:00 17:00 To contact Customer Service you can also use a Message. to the Bank in your Internet Banka application, or send. an to internetbanka@ge.com. GE Money Bank, a.s., Vyskočilova 1422/1a, Praha 4-Michle, IČO , zapsáno u MS v Praze, odd. B, vl. 5403, tel.: