The purpose of online security is
to prevent unauthorized access to sensitive information,
passwords in particular. Some banks and organizations
use One Time Password (OTP). By creating a new password
for every online session conducted, OTP hopes that the
risk of the password being captured can be greatly reduced.
However, the vulnerability of the OTP solution has
already been exposed in 2005.
A superior and proven alternative, Public Key Infrastructure
(PKI), is available and widely used in Hong Kong. PKI
employs the use of digital certificates to electronically
sign the content of a message and has much richer functionalities,
including:
- Encryption
- Authentication of the content of the message
- Proof of the identity of the message sender
In contrast with OTP, under a PKI solution, as the key
used by the sender cannot be captured by the hacker,
the hacker cannot replace the content of a message with
a bogus one, and equally important, cannot pretend to
be the sender.
Tradelink through its wholly-owned subsidiary Digi-Sign
has been providing PKI-based security solution to more
than 50,000 customers for their connection to Hong Kong
Government. Since 2001, Digi-Sign has acquired full
recognition under the Electronic Transactions Ordinance.
- Conformity with the Hong Kong Monetary Authority's
instructions to strengthen online security
- Existing proven solution that can be set up quickly
and conveniently
- Cost-effective, user-friendly and administratively
simple
- Can be customized to each individual institution's
needs
To learn more about how Digi-Sign can provide you
with total online security, please contact Mr. Andrew
Cheng, Chief Development Officer at 852 2599 1693. |