UBS KeyLink

Encryption software

UBS's all, encompassing security concept uses the latest encryption software combined with tried-and-tested authorization characteristics. This combination provides UBS KeyLink users with a high degree of security, while ensuring that the service is as user-friendly as possible.

A financial certificate (FinCert) is a server certificate that is issued through a credited certification institution. These certificates permit the use of a strong 128-bit encryption. FinCerts are only permitted for certain companies such as financial institutions, since the US Government has to grant the export. As a credited, independent certification institution, VeriSign has confirmed the identity of UBS AG as a financial institution and has hence granted it a financial certificate.

Functionality of a financial certificate

The financial certificate (FinCert) is issued as soon as the user accesses the UBS KeyLink page with his/her browser (http). The browser recognizes the FinCert, ends its 40-bit-SSL session and begins a new session with 128 bit encryption. This strong encryption remains active throughout the session. After ending the session (or upon exiting the UBS KeyLink session), the browser returns to its previous state.

What kind of algorithms does UBS KeyLink use?
All encryption algorithms in the UBS Internet banking application have been tested and approved by UBS and by other major Swiss banks for use in high-security applications.
In particular, RSA, IDEA and MD5 algorithms are in use.

Can my transaction be read/altered on the Internet?
The system encrypts all transaction data on the Internet. Very secure encryption procedures are applied. This provides protection even against professional hackers.

How strong is the implemented encryption?
Encryption algorithms used in the UBS Internet banking system are 128 bit (IDEA/RC4) or 168 bit (3DES).

SSL

What is SSL?
SSL (Secure Socket Layer) is a publicly available protocol that encrypts all data that is passed between a browser and the connected server.

How secure is SSL?
SSL (Secure Socket Layer) is a very secure protocol. In the UBS e-banking application, SSL is used to protect all transactions. SecureNet uses SSL with a very strong encryption algorithm (IDEA).

How can I work with UBS e-banking if our firewall does not allow SSL?
You must use SSL, so you can not use the system if your firewall does not allow SSL. If your company does not allow SSL to pass, you might want to work on a stand-alone system with a dedicated Internet access facility (modem), not connected to your company's network.

What is https?
Https is a secure version of the commonly used http (hypertext transfer protocol). UBS KeyLink uses https to connect to the e-banking server. Https is based on the SSL protocol.

How secure is this system?
The UBS e-banking system has been designed to conform to UBS's high security standards. In addition to this, system security and Internet security in general are constantly watched by the dedicated UBS Internet Security Team in order to be ready for any new developments in this field.
In general, UBS e-banking is considerably more secure than traditional paper-based banking.