Privacy
Visitors to
this bank Website remain anonymous. We do not collect identifying
information about visitors to our site. We may use standard software
to collect non-identifying information about our visitors, such
as:
- Date and
time our site was accessed
- IP address
(A numeric address given to servers connected to the Internet)
- Web browser
used
- City, state,
and country
The bank uses
this information to create summary statistics and to determine the
level of interest in information available on our site. Visitors
may elect to provide us with personal information via E-mail, online
registration forms, or our guest book. This information is used
internally, as appropriate, to handle the sender's request. It is
not disseminated or sold to other organizations.
Some areas of
our Website may use a "cookie" temporarily stored in the
visitor's computer memory (RAM) to allow the web server to log the
pages you use within the site and to know if you have visited the
site before.
Pascack Privacy Brochure
Security
This Internet
Banking System brings together a combination of industry-approved
security technologies to protect data for the bank and for you,
our customer. It features password-controlled system entry, a VeriSign-issued
Digital ID for the bank's server, Secure Sockets Layer (SSL) protocol
for data encryption, and a router loaded with a firewall to regulate
the inflow and outflow of server traffic.
Secure Access and Verifying User Authenticity
To begin a session
with the bank's server the user must key in a Log-in ID and a password.
Our system, the Internet Banking System, uses a "3 strikes
and you're out" lock-out mechanism to deter users from repeated
login attempts. After three unsuccessful login attempts, the system
locks the user out, requiring either a designated wait period or
a phone call to the bank to verify the password before re-entry
into the system. Upon successful login, the Digital ID from VeriSign,
the experts in digital identification certificates, authenticates
the user's identity and establishes a secure session with that visitor.
Secure Data
Transfer
Once the server
session is established, the user and the server are in a secured
environment. Because the server has been certified as a 128-bit
secure server by VeriSign, data traveling between the user and the
server is encrypted with Secure Sockets Layer (SSL) protocol. With
SSL, data that travels between the bank and customer is encrypted
and can only be decrypted with the public and private key pair.
In short, the bank's server issues a public key to the end user's
browser and creates a temporary private key. These two keys are
the only combination possible for that session. When the session
is complete, the keys expire and the whole process starts over when
a new end user makes a server session.
Router and
Firewall
Requests must
filter through a router and firewall before they are permitted to
reach the server. A router, a piece of hardware, works in conjunction
with the firewall, a piece of software, to block and direct traffic
coming to the server. The configuration begins by disallowing ALL
traffic and then opens holes only when necessary to process acceptable
data requests, such as retrieving web pages or sending customer
requests to the bank.
Using the above
technologies, your Internet banking transactions are secure.
|