Home > Online Banking > Online Banking Security

Online Banking Security

In online banking as with traditional banking methods, security is a primary concern. At Madison National Bank we have taken every precaution necessary to be sure your information is transmitted safely and securely. The latest methods in online banking system security are used to increase and monitor the integrity and security of the system.

The security of the Madison National Bank online banking system is addressed at three levels. The first concern is the security of customer information as it is sent from the customer’s computer to the Web server. The second area concerns the security of the environment in which the online banking server and customer information database reside. Finally, security measures are in place to prevent unauthorized users from attempting to log into the online banking section of the Web site.

Data security between the customer browser and our Web server is handled through a security protocol called Secure Sockets Layer (SSL). SSL provides data encryption, server authentication, and message integrity for an Internet connection. In addition, SSL establishes a security “handshake” that is used to initiate the connection. This handshake results with the client and server agreeing on the level of security they will use and fulfills any authentication requirements for the connection. Currently Madison National Bank’s online banking service supports data encryption at the highest level (128 bit). In order to get this level of encryption, you will need a browser that supports it. For a listing of the browsers supported by our Online Banking service, please refer to our Supported Browsers Listing. Check with your browser manufacturer’s website for more information.

Requests for online banking information are passed on from the Web server to the online banking server. The online banking service is designed using a three-tiered architecture. The three-tiered architecture provides a double firewall, completely isolating the Web server from the customer information database.

The World Wide Web interface receives SSL input and sends request through a firewall over a dedicated private network to the online banking server. The World Wide Web interface is the only process capable of communicating through the firewall to the online banking server. Therefore, only authenticated requests communicate with the online banking server.

The customer information database is housed on a proprietary Unisys database. Just as the World Wide Web interface is the only process capable of communicating with the online banking server, the online banking server is the only process able to send requests to the Unisys database. Thus, the outside world is removed from the customer database by two dedicated private networks.

A security analyzer constantly monitors login attempts and recognizes failures that could indicate a possible unauthorized attempt to log into an account. When such trends are observed, steps will be taken automatically to prevent that account from being used.

Security concerns have been addressed from every angle within the architecture of the online banking service. Implementation of the SSL security protocol on the Web server and customer browser ensures authenticated data has been received from the customer. The three-tiered approach of the online banking service creates a double firewall which performs information requests over dedicated networks designed to handle specific functions. Placing all business logic and event logging within the online banking service creates a controlled environment which allows quick incorporation of Internet security technologies as they evolve. Finally, the security analyzer monitors login attempts in order to prevent unauthorized logins.

As of February 1, 2008