Security Policy

To ensure the security and privacy of your online banking, United Commercial Bank has implemented the latest Internet security and monitoring systems.

Security Infrastructure

United Commercial Bank (The Bank) protects your account data from unauthorized or direct access on the Internet. The following security measures are used to protect the privacy and the confidentiality of the communications between your Internet Browser and our Online Banking Servers:

  • To secure communications between your Internet Browser and the Bank's servers, Cryptography (encryption) is used to protect banking transactions from unauthorized access or tampering. Cryptography is the process used to scramble transactions exchanged between your browser and our online banking servers. The following is a brief explanation of how encryption is performed: Using your Internet browser when you go to the Online Banking sign-on page, your browser establishes a secure session with the Online Banking server.
  • The protocol used to establish the secure session is called Secure Sockets Layer (SSL) Encryption. Once a secure session is established, keys (public and private) are exchanged between your browser and our Online Banking server. The keys are used to scramble and unscramble transactions exchanged between your browser and our Online Banking servers. The keys are chosen only for the current secure session. The keys are only known between your browser and our Online Banking server which prevents other Internet browsers to "impersonate" your browser or alter any of the information exchanged during your secure session.
  • You can tell whether your browser is in a secure session mode by looking for the secured lock symbol at the bottom of your browser window. To provide the highest amount of security during your online banking session, we recommend that you have an Internet browser with 128-bit encryption. Click on browser test, to find out if your browser supports 128-bit encryption.
  • To obtain authorized access to the Bank's Online Banking system, you must enter a password at the beginning of each online banking session. The password is verified at our secure data center. If you enter a password incorrectly three (3) times during a Personal Online Banking session, or five (5) times during a Business Online Banking session, your online banking account will be locked until you contact us to unlock your banking account. We monitor and record "bad-login" attempts to detect any suspicious activity (such as, someone trying to guess your password).
  • To provide additional security during your online banking session, the Bank's Online Banking system provides a "timeout" feature. If you leave your computer unattended or do not perform a transaction over a predefined time period, the Online Banking system will automatically log you out of the secure session. The timeout feature prevents unauthorized individuals continuing your online banking session in case you have left your computer unattended. You can set the timeout period from the User Options window of the online banking system. We recommend that you log out of your online banking session before leaving your computer.
  • Both physical and automated security techniques are employed to protect against unauthorized access to the Bank's Online Banking Servers, computers storing customer account information and the Bank's website. Protection techniques include physical security of the Bank's computer and telecommunication hardware, firewalls to prevent unauthorized access to the Bank's website and computers storing customer account information and monitoring of logon attempts for unauthorized access attempts. It is important to note that computers containing customer account information are not directly connected to the internet. During your online banking session, your information request transactions are handled through our Online Banking server. The Online Banking server retrieves information from the Bank's computer containing customer account information  through a proxy-based firewall server.