■ Browser security
Security features may be required for some services, such as online banking or
shopping. For such connections, you need security certificates and possibly a
security module, which may be available on your SIM card. For more information,
contact your service provider.
Security module
The security module improves security services for applications requiring a
browser connection, and allows you to use a digital signature. The security
module may contain certificates as well as private and public keys. The
certificates are saved in the security module by the service provider.
Select
Menu
>
Settings
>
Security
>
Security module settings
and one of the
following options:
Security module details
— to show the security module title, manufacturer, and
serial number
Module PIN request
— to set the phone to ask for the module PIN when using
services provided by the security module. Enter the code, and select
On
. To
disable the module PIN request, select
Off
.
Change module PIN
— to change the module PIN, if allowed by the security
module. Enter the current module PIN code, then the new code twice.
Change signing PIN
— to change the signing PIN code for the digital signature.
Select the signing PIN you want to change. Enter the current PIN code, then the
new code twice.
See also ”Access codes,” p. 9.
W e b
97
Certificates
Important: Even if the use of certificates makes the risks involved in
remote connections and software installation considerably smaller,
they must be used correctly in order to benefit from increased security.
The existence of a certificate does not offer any protection by itself; the
certificate manager must contain correct, authentic, or trusted
certificates for increased security to be available. Certificates have a
restricted lifetime. If Expired certificate or Certificate not valid yet is
shown even if the certificate should be valid, check that the current
date and time in your device are correct.
Before changing any certificate settings, you must make sure that you
really trust the owner of the certificate and that the certificate really
belongs to the listed owner.
There are three kinds of certificates: server certificates, authority certificates, and
user certificates. You may receive these certificates from your service provider.
Authority certificates and user certificates may also be saved in the security
module by the service provider.
To view the list of the authority or user certificates downloaded into your phone,
select
Menu
>
Settings
>
Security
>
Authority certificates
or
User certificates
.
The security indicator
is displayed during a connection, if the data
transmission between the phone and the content server is encrypted.
The security icon does not indicate that the data transmission between the
gateway and the content server (or place where the requested resource is stored)
is secure. The service provider secures the data transmission between the
gateway and the content server.
Digital signature
You can make digital signatures with your phone if your SIM card has a security
module. Using the digital signature can be the same as signing your name to a
paper bill, contract, or other document.
To make a digital signature, select a link on a page, such as the title of the book
you want to buy and its price. The text to sign is displayed, which may include the
amount and date.
Check that the header text is
Read
and that the digital signature icon
is
shown.
W e b
98
If the digital signature icon does not appear, there is a security breach, and you
should not enter any personal data such as your signing PIN.
To sign the text, read all of the text first, and select
Sign
.
The text may not fit within a single screen. Therefore, make sure to scroll through
and read all of the text before signing.
Select the user certificate you want to use. Enter the signing PIN (see ”Access
codes,” p. 9), and select
OK
. The digital signature icon disappears, and the service
may display a confirmation of your purchase.
S I M s e r v i c e s
99