Towne Bank of Arizona is pleased to offer Internet Banking services. Delivering these services requires a solid security framework that protects you and our institution’s data from outside intrusion. We are committed to working with our Internet, information technology, and communications service providers to produce the safest operating environment possible for our customers. There are several layers of security within our security framework: User, Server, and Host levels.
USER LEVEL
The User Level deals with cryptography and Secure Sockets Layer (SSL) protocol, and is the first line of defense used by all customers accessing our banking server from the public Internet. There are several components of User Level security that ensure the confidentiality of information sent through the public Internet. The first requires your use of a fully SSL-compliant 128 bit encrypted browser such as Netscape Navigator or Microsoft Internet Explorer. SSL is an open protocol that allows a user’s browser to establish a secure channel for communicating with our Internet server. SSL utilizes highly effective cryptography techniques between your browser and our server to ensure that the information being passed is authentic, cannot be deciphered, and has not been altered en route. SSL also utilizes a digitally signed certificate, which ensures that you are truly communicating with the Online Banking server and not a third party trying to intercept the transaction.
USER RESPONSIBILITIES
Our service providers continue to evaluate and implement the latest improvements in Internet security technology. You, as a user of the Online Banking system, also have a responsibility for the security of your information and should always follow the recommendations listed below:
Utilize the latest 128 bit encryption version of either Netscape Navigator or Microsoft Internet Explorer. The Online Banking system is best viewed and is most secure when you use one of these two browsers, as they are both certified for use at our site.
Your password must be kept confidential. You must follow our specific parameters for a password and change it frequently to ensure that the information cannot be correctly guessed or used by others. Be sure others are not watching you enter information on the keyboard when using the system.
Choose a good password. Your online password, along with your User ID code, authenticate you when you begin an Internet banking session. You should carefully select a password that is hard to correctly guess.
Keep your password safe. Even the best password is worthless if it is written on a note attached to your computer or your checkbook. Memorize your password and never tell it to anyone. We do not need your password to help you, so we will never ask you for it.
Change your password regularly. It is very important to change your password regularly. This greatly increases your protection against unauthorized access to your account.
Keep your computer free of viruses. Use virus protection software to routinely check for viruses on your computer. New viruses appear all the time. Make sure you regularly update the virus definitions of your virus protection software. Never allow a virus to remain on your computer while accessing the Online Banking system.
SERVER LEVEL
The Server Level focuses on firewalls, filtering routers, and our trusted operating system.
All transactions sent to our banking server must first pass through a filtering router system. These filtering routers automatically direct the request to the appropriate server after ensuring the access is only through a secured browser. The routers verify the source and destination of each network packet, and manage the authorization process of allowing packets through. The filtering routers also prohibit all other types of Internet access methods at this point. This process blocks all non-secure activity and defends against inappropriate access to the server.
The banking server is protected using the latest firewall platform. This platform defends against system intrusions and effectively isolates all but approved customer financial requests. The platform secures the hardware running the online applications and prevents associated attacks against all systems connected to the banking server. The system is monitored 24-hours a day, seven days a week for a wide range of anomalies to determine if attempts are being made to breach our security framework.
HOST LEVEL
The Host Level deals specifically with our Internet banking services and the processing of secure financial transactions.
Once authenticated, the customer is allowed to process authorized Internet banking transactions using host data. In addition, communication time-outs ensure that the request is received, processed, and delivered within a given time frame. Any outside attempt to delay or alter the process will fail. Further password encryption techniques are implemented at the host level, as well as additional security logging and another complete physical security layer to protect the host information itself.
