In Internet banking as with traditional banking methods, security is a primary concern. At Bank of Pontiac we have taken every precaution necessary to be sure your information is transmitted safely and securely. The latest methods in Internet banking system security are used to increase and monitor the integrity and security of the system.

The security of the Bank of Pontiac Internet banking application is addressed at three levels. The first concern is the security of customer information as it is sent from the customer's PC to the Web server. The second area concerns the security of the environment in which the Internet banking server and customer information database reside. Finally, security measures are in place to prevent unauthorized users from attempting to log into the online banking section of the Web site.

Data security between the customer browser and our Web server is handled through a security protocol called Secure Sockets Layer (SSL). SSL provides data encryption, server authentication, and message integrity for an Internet connection. In addition, SSL provides a security "handshake" that is used to initiate the connection. This handshake results in the client and server agreeing on the level of security they will use and fulfills any authentication requirements for the connection. Currently Bank of Pontiac's online banking application supports data encryption at the highest level (128 bit). In order to get this level of encryption, you will need a browser that supports it. Both versions 3 and 4 of the most popular browsers support 40-bit encryption as a default, and have complete versions as well as patches that will support the stronger 128-bit encryption. Check with your browser manufacturer's website for more information.

Requests for online banking information are passed on from the Web server to the Internet banking server. The Internet banking application is designed using a three-tiered architecture. The three-tiered architecture provides a double firewall, completely isolating the Web server from the customer information SQL database.

The World Wide Web interface receives SSL input and sends requests through a firewall over a dedicated private network to the Internet banking server. The World Wide Web interface is the only process capable of communicating through the firewall to the Internet banking server. Therefore, only authenticated requests communicate with the Internet banking server.

A security analyzer constantly monitors login attempts and recognizes failures that could indicate a possible unauthorized attempt to log into an account. When such trends are observed, steps will be taken automatically to prevent that account from being used.

Security concerns have been addressed from every angle within the architecture of the Internet banking application. Implementation of the SSL security protocol on the Web server and customer browser ensures authenticated data has been received from the customer. The three-tiered approach of the Internet banking application creates a double firewall which performs information requests over dedicated networks designed to handle specific functions. Placing all business logic and event logging within the Internet banking server creates a controlled environment which allows quick incorporation of Internet security technologies as they evolve. Finally, the security analyzer monitors login attempts in order to prevent unauthorized logins.

Security Enhancements

Bank of Pontiac and Jack Henry are constantly focused on protecting the security of your data and personal information. One major focus of this change is to re-architect the core technology behind our login and registration functionality in order to enhance security, performance, and code maintainability. In particular, we have tightened security restrictions around our login functionality and this may impact your ability to login to Online Banking.


Security FAQ

Q I'm still hesitant about banking online. Can other people see my account information?
A We've taken every step possible to be sure our system meets the latest security standards, including using the latest security encryption methods and software.

Q What about filling applications out online? How secure is that?
A Filling out applications online is as secure as the Online Banking System. Your entire session, from beginning to end, is encrypted. Our system supports 128-bit encryption, so you can also use the latest browser from Netscape or Microsoft that supports this security level. In fact, the highest encryption Netscape and Microsoft browsers support is 128-bit, so you will be using the highest bit encryption currently available if you use a 128-bit encryption capable browser.

Q I keep hearing a lot about encryption? What exactly is it, and why does it make everything more secure?
A Encryption is basically a way to rewrite something in a code which can then be decoded later with the right key. The encryption we use employs a mathematical process for the key which is made up of a certain number of bits (hence, 128-bit encryption). The higher the number of bits, the better the encryption. While using our Online Banking System, all communication from you to the system and from the system to you is encrypted using a maximum of 128 bits. In other words, when you send information to the system, your browser encrypts it using a 128-bit key, and then sends it to the system. The system then decodes the information you sent it using the key (which is predetermined when your Online Banking session is started) and processes it.

Q What about information that is stored? Is it encrypted as well?
A Information stored on our system is also encrypted using at least 128 bits.

• Mix letters and numbers.
• Select codes that will be easy for you to remember.

Use phrases that combine spaces, words and other symbols (i.e. "Mary had a little lamb," etc.)

Don'ts

• Don't use only one word.
• Don't use something readily identifiable such as your birthday, spouse or child's name, social security number, phone number or street address. While these may be easy for you to remember, they can be traced directly to you and are easy for potential hackers to guess.
• Don't use the same code for your User ID and Password. They should be two distinct entries.
• Don't use letters or numbers that are near each other on the keyboard (i.e. hjkl;) or that appear in a logical sequence (i.e. 123456 or abcdefg).
• Don't ever share your codes with anyone.