Business clients › Merchants and service outlets › Sampo Bank Link › Security
Sampo Bank Link
Using the Bank Link is safe
The communication between the bank and the client employs the standard security measures of Sampo Internet Bank. The communication between the merchant and the client takes place according to the requests of the merchant. Preferably, it should employ SSL technology. The data presented to the merchant by Sampo and to Sampo by the merchant are electronically signed, which allows the opposite party to verify the correctness of the data presented, i.e. that the data has not been changed and that it comes from the right sender.
Making Bank Link payments or authenticating the user involves three separate systems: client’s computer, merchant’s server and the Bank Link.
The process is initiated by the client, surfing on the home page of the merchant. She selects the desired goods and proceeds to buy them or enter the authenticated environment of the merchant.
The merchant offers the client an opportunity to pay or to identify herself via Sampo Internet Bank.
When the client has a Sampo Teleservices contract and decides to pay/authenticate herself, the merchant will generate a web page that includes the data of the merchant, the details of the bill and the electronic signature of the merchant. This web page wil redirect the client to Sampo Internet Bank. Here the signature of the merchant is verified and the client must identify herself and enter her password(s).
After the authentication the client sees her completed payment order. She can only choose between confirming the order, cancelling the process or putting the order on hold.
In reply, the bank generates a web page which includes the result of the payment order, electronically signed by the bank. In addition, the bank submits a confirmation to the merchant regarding the result of the payment order. The merchant verifies the bank’s signature and posts the goods.
When the client begins the identification process, the bank will submit the name and the identification code of the client to the merchant and redirects her to the merchant’s web page.