■ Browser security
Security features may be required for some services, such as online banking
or shopping. For such connections you need security certificates and
possibly a security module, which may be available on your SIM card.
For more information, contact your service provider.
Security module
The security module improves security services for applications requiring a
browser connection, and allows you to use a digital signature. The security
module may contain certificates as well as private and public keys. The
certificates are saved in the security module by the service provider.
Select
Menu
>
Web
>
Settings
>
Security settings
>
Security module
settings
and from the following options:
Security module details
— to show the security module title, status,
manufacturer, and serial number
W e b
64
Module PIN request
— to set the phone to ask for the module PIN when
using services provided by the security module. Enter the code, and select
On
. To disable the module PIN request, select
Off
.
Change module PIN
— to change the module PIN, if allowed by the security
module. Enter the current module PIN code, then enter the new code twice.
Change signing PIN
— to change the signing PIN code for the digital
signature. Select the signing PIN you want to change. Enter the current
PIN code, then the new code twice.
See also “Access codes,” p. 9.
Certificates
Important: Note that even if the use of certificates makes the risks
involved in remote connections and software installation considerably
smaller, they must be used correctly in order to benefit from increased
security. The existence of a certificate does not offer any protection by
itself; the certificate manager must contain correct, authentic, or
trusted certificates for increased security to be available. Certificates
have a restricted lifetime. If Expired certificate or Certificate not valid
yet is shown even if the certificate should be valid, check that the
current date and time in your device are correct.
Before changing any certificate settings, you must make sure that you
really trust the owner of the certificate and that the certificate really
belongs to the listed owner.
There are three kinds of certificates: server certificates, authority
certificates, and user certificates. You may receive these certificates
from your service provider. Authority certificates and user certificates
may also be saved in the security module by the service provider.
To view the list of the authority or user certificates downloaded into
your phone, select
Menu
>
Web
>
Settings
>
Security settings
>
Authority certificates
or
User certificates
.
The security indicator
is displayed during a connection, if the data
transmission between the phone and the content server is encrypted.
The security icon does not indicate that the data transmission between the gateway
and the content server (or place where the requested resource is stored) is secure.
The service provider secures the data transmission between the gateway and the
content server.
W e b
65
Digital signature
You can make digital signatures with your phone if your SIM card has a
security module. Using the digital signature can be the same as signing
your name to a paper bill, contract, or other document.
To make a digital signature, select a link on a page (for example, the title
of the book you want to buy and its price). The text to sign, which may
include the amount and date, is shown.
Check that the header text is
Read
and that the digital signature icon
is shown.
If the digital signature icon does not appear, there is a security breach,
you should not enter any personal data such as your signing PIN.
To sign the text, read all of the text first, and select
Sign
.
The text may not fit within a single screen. Therefore, make sure to scroll
through and read all of the text before signing.
Select the user certificate you want to use. Enter the signing PIN (see
“Access codes,” p. 9), and select
OK
. The digital signature icon disappears,
and the service may display a confirmation of your purchase.
S I M s e r v i c e s
66