■ Browser security
Security features may be required for some services, such as online banking or shopping. For
such connections, you need security certificates and possibly a security module, which may
be available on your SIM card. For more information, contact your service provider.
RM429_EN_820.fm Page 47 Thursday, August 21, 2008 5:12 PM
48
W e b
Security module
The security module improves security services for applications requiring a browser
connection, and allows you to use a digital signature. The security module may contain
certificates as well as private and public keys. The certificates are saved in the security
module by the service provider.
To view or change the security module settings, select Menu > Settings > Security >
Security module settings.
Certificates
Important: Even if the use of certificates makes the risks involved in remote
connections and software installation considerably smaller, they must be used
correctly in order to benefit from increased security.
The existence of a certificate does not offer any protection by itself; the certificate manager
must contain correct, authentic, or trusted certificates for increased security to be available.
Certificates have a restricted lifetime. If "Expired certificate" or "Certificate not valid yet" is
shown even if the certificate should be valid, check that the current date and time in your
device are correct.
Before changing any certificate settings, you must make sure that you really trust the owner
of the certificate and that the certificate really belongs to the listed owner.
There are three kinds of certificates: server certificates, authority certificates, and user
certificates. You may receive these certificates from your service provider. Authority
certificates and user certificates may also be saved in the security module by the service
provider.
To view the list of the authority or user certificates downloaded into your phone, select
Menu > Settings > Security > Authority certificates or User certificates.
is displayed during a connection, if the data transmission between the phone and the
content server is encrypted.
The security icon does not indicate that the data transmission between the gateway and the
content server (or place where the requested resource is stored) is secure. The service
provider secures the data transmission between the gateway and the content server.
Digital signature
You can make digital signatures with your phone if your SIM card has a security module.
Using the digital signature can be the same as signing your name to a paper bill, contract, or
other document.
To make a digital signature, select a link on a page, for example, the title of the book you
want to buy and its price. The text to sign, which may include the amount and date, is
shown.
RM429_EN_820.fm Page 48 Thursday, August 21, 2008 5:12 PM
49
P C c o n n e c t i v i t y
Check that the header text is Read and that the digital signature icon
is shown.
Note: If the digital signature icon does not appear, there is a security breach, and you should
not enter any personal data such as your signing PIN.
To sign the text, read all of the text first, and select Sign.
The text may not fit within a single screen. Therefore, make sure to scroll through and read
all of the text before signing.
Select the user certificate you want to use. Enter the signing PIN. The digital signature icon
disappears, and the service may display a confirmation of your purchase.