Nokia 6102 - Browser security

background image

Browser security

Security features may be required for some services, such as online banking or
shopping. For such connections you need security certificates and possibly a
security module, which may be available on your SIM card. For more information,
contact your service provider.

Security module

The security module improves security services for applications requiring a browser
connection, and allows you to use a digital signature. The security module may
contain certificates as well as private and public keys. The certificates are saved
in the security module by the service provider.

background image

W e b

62

Copyright © 2005 Nokia

Select

Menu

>

Web

>

Settings

>

Security settings

>

Security module settings

and from the following options:

Security module details

— to show the security module title, status, manufacturer,

and serial number

Module PIN request

— to set the phone to ask for the module PIN when using services

provided by the security module. Enter the code, and select

On

. To disable the

module PIN request, select

Off

.

Change module PIN

— to change the module PIN, if allowed by the security module.

Enter the current module PIN code, then the new code twice.

Change signing PIN

— to change the signing PIN code for the digital signature.

Select the signing PIN you want to change. Enter the current PIN code, then the
new code twice.

See also “Access codes,” p. 11.

Certificates

Important: Note that even if the use of certificates makes the risks
involved in remote connections and software installation considerably
smaller, they must be used correctly in order to benefit from increased
security. The existence of a certificate does not offer any protection by
itself; the certificate manager must contain correct, authentic, or trusted
certificates for increased security to be available. Certificates have a
restricted lifetime. If Expired certificate or Certificate not valid yet is
shown even if the certificate should be valid, check that the current date
and time in your device are correct.

Before changing any certificate settings, you must make sure that you
really trust the owner of the certificate and that the certificate really
belongs to the listed owner.

There are three kinds of certificates: server certificates, authority certificates, and
user certificates. You may receive these certificates from your service provider.
Authority certificates and user certificates may also be saved in the security
module by the service provider.

To view the list of the authority or user certificates downloaded into your phone,
select

Menu

>

Web

>

Settings

>

Security settings

>

Authority certificates

or

User certificates

.

The security indicator

is displayed during a connection, if the data transmission

between the phone and the content server is encrypted.

background image

W e b

Nokia 6101 and Nokia 6102 User Guide

63

Copyright © 2005 Nokia

The security icon does not indicate that the data transmission between the gateway
and the content server (or place where the requested resource is stored) is secure.
The service provider secures the data transmission between the gateway and the
content server.

Digital signature

You can make digital signatures with your phone if your SIM card has a security
module. Using the digital signature can be the same as signing your name to a
paper bill, contract, or other document.

To make a digital signature, select a link on a page (for example, the title of the
book you want to buy and its price). The text to sign, which may include the
amount and date, is shown.

Check that the header text is

Read

and that the digital signature icon

is shown.

If the digital signature icon does not appear, there is a security breach, and you
should not enter any personal data such as your signing PIN.

To sign the text, read all of the text first, and select

Sign

.

The text may not fit within a single screen. Therefore, make sure to scroll through
and read all of the text before signing.

Select the user certificate you want to use. Enter the signing PIN (see “Access
codes,” p. 11), and select

OK

. The digital signature icon disappears, and the

service may display a confirmation of your purchase.

background image

S I M s e r v i c e s

64

Copyright © 2005 Nokia