Browser security
Security features may be required for some services, such as online banking or
shopping. For such connections you need security certificates and possibly a
security module, which may be available on your SIM card. For more information,
contact your service provider.
Security module
The security module improves security services for applications requiring a browser
connection, and allows you to use a digital signature. The security module may contain
certificates as well as private and public keys. The certificates are saved in the security
module by the service provider.
To view or change the security module settings, select Menu > Settings > Security >
Security module sett..
Certificates
Important: Even if the use of certificates makes the risks involved in remote
connections and software installation considerably smaller, they must be
used correctly in order to benefit from increased security. The existence of a
certificate does not offer any protection by itself; the certificate manager
must contain correct, authentic, or trusted certificates for increased security
to be available. Certificates have a restricted lifetime. If “Expired certificate”
or “Certificate not valid yet” is shown, even if the certificate should be valid,
check that the current date and time in your device are correct.
Before changing any certificate settings, you must make sure that you really
trust the owner of the certificate and that the certificate really belongs to the
listed owner.
There are three kinds of certificates: server certificates, authority certificates, and
user certificates. You may receive these certificates from your service provider.
33
Authority certificates and user certificates may also be saved in the security module
by the service provider.
To view the list of the authority or user certificates downloaded into your phone,
select Menu > Settings > Security > Authority certificates or User certificates.
is displayed during a connection, if the data transmission between the phone
and the content server is encrypted.
The security icon does not indicate that the data transmission between the gateway
and the content server (or the place where the requested resource is stored) is secure.
The service provider secures the data transmission between the gateway and the
content server.
Digital signature
You can make digital signatures with your phone if your SIM card has a security
module. Using the digital signature can be the same as signing your name to a
paper bill, contract, or other document.
To make a digital signature, select a link on a page, such as, the title of the book you
want to buy and its price. The text to sign, which may include the amount and date,
is displayed.
Check that the header text is Read and that the digital signature icon
is displayed.
If the digital signature icon does not appear, there is a security breach, and you should
not enter any personal data such as your signing PIN.
To sign the text, read all of the text first, and select Sign.
The text may not fit within a single screen. Therefore, make sure to scroll through and
read all of the text before signing.
Select the user certificate you want to use. Enter the signing PIN. The digital signature
icon disappears, and the service may display a confirmation of your purchase.
34