Transcription

1

2

3

4

5

6

7

8

9

10 Appendix: Items 1-3 of the NemID rules netbank and public digital signature 1. Introduction NemID is a security solution you can use in connection with your netbank, public and private websites. NemID can also be used in connection with digital signatures. NemID consists of a user ID, a password and a keycard or other unit such as a telephone which indicates the codes (keys) you must enter together with your user ID and your password. If you wish to use NemID in connection with public digital signatures an OCES certificate must be linked to the NemID. OCES is the abbreviation for Offentlige Certifikater til Elektronisk Service (Public Certificates for Electronic Services). You will find the NemID rules below. If you only wish to use NemID for your netbank, items 2 and 3 will apply to you. The use of NemID for your netbank is moreover subject to your agreement with the bank. The extent to which the liability rules under the Danish Payment Services Act will apply appears from the agreement. If you also wish to use NemID for public digital signature, items 2, 3 and 4 will apply to you. The rules are also available at or 2. Binding actions When you use NemID and carry out actions such as sign digitally you assume the same obligation to the recipient as if you had signed physically. 3. Rules governing the use of NemID 3.1 Registration for the use of NemID When you register for NemID you undertake to provide satisfactory and correct information. 3.2 Safekeeping of user ID, password and keycard Please note that you must keep your user ID, password and your keycard safe so that others cannot get access to use them must not reveal your password, your keys or entrust your keycard to others

11 must not scan your keycard, enter your keys or otherwise digitise or copy the keys must not write down your password must not keep your password together with your keycard or write your password on the keycard. 3.3 Security in connection with use You must ensure that your user ID, your password and your keycard are used only by you and in accordance with the rules you are not overlooked by anyone while entering your password you upgrade your operating system, your internet browser and your other programs to the latest security updates. You must check regularly that you have not lost your keycard and that your NemID has not been misused. Via the self-service facility at ( Hændelseslog ) you may choose to have registered where you use your NemID and you can check regularly that your NemID has been used only at service providers you have visited. 3.4 Temporary password If you are a new netbank user you will receive a temporary password to log in and create a NemID. This also applies if you have blocked your password, see 3.5 Blocking. You must ask DanID or your bank immediately for a new temporary password if you suspect that others have or may have obtained knowledge of the temporary password for instance if the letter containing the password was not intact when you received it. 3.5 Blocking You must immediately block your keycard if you suspect that others have or may have obtained knowledge of the keys from the keycard for instance if the letter containing the keycard was not intact when you received it your keycard if you have lost it. If you find the keycard that has been lost it must be destroyed your password if you suspect that others have or may have obtained knowledge of your password unless you are able to change the password immediately at Request for blocking When you block your password and/or your keycard you must state your name, your address and CPR number or your user ID or your keycard number. Moreover, you must state whether you wish to block your password or your keycard. When you have blocked your password you will receive a confirmation from DanID stating the time and reason for the blocking.

12 You can block your password and/or your keycard by calling: (open 24 hours) accessing (open 24 hours) contacting your bank or citizens service office (if you use NemID in connection with public digital signature). At the same time you may ask for a new keycard. The self-service facility at ( Hændelseslog ) allows you to check the time and reason for the blocking of your password and/or your keycard DanID will block your password if DanID suspects or finds out that others have obtained knowledge of your password your password if an incorrect password has been entered a certain number of times your keycard if DanID suspects or finds out that others have obtained knowledge of keys from your keycard NemID if DanID obtains knowledge that you have not complied with the rules in item 3 NemID if you have stated incorrect information in connection with your registration for NemID NemID if DanID receives notification that you have died Use of NemID after blocking You cannot use your NemID if your NemID or password has been blocked. If only your keycard has been blocked some netbanks will allow you restricted access, for instance to check your account information. 3.6 Cancellation of use of NemID If you no longer wish to use NemID you may block your access to NemID at any time, see on blocking. Please note that you will no longer be able to use the services which make use of NemID. 3.7 Processing of personal data If you have created a NemID via your bank, DanID will process your personal data on behalf of the bank. DanID will process your data, ie name, address and CPR number, for the purpose of identifying you and will use your address to send messages to you, including confirmation of blocking. If you have registered your cellphone number with DanID, DanID will use this number to send messages to you, including messages concerning temporary passwords.

13 To be able to investigate any misuse DanID will record the times when you use your NemID, the IP address and other information about the computer you log in from. If you wish to have registered where you have used your NemID in the selfservice facility at DanID will also register which service providers you have visited. You can always stop this registration. Subsequently DanID will no longer register where you have used your NemID. DanID will store the information for the current year plus five years after which it will be deleted. 3.8 Claims in respect of NemID Claims arising as a result of your use of NemID in your netbank must be submitted to your bank in accordance with your netbank agreement. Claims arising as a result of your use of NemID at other websites must be submitted to the service provider or DanID. 3.9 Particularly applying to IVR solution Interactive Voice Response (IVR) is a solution for blind and visually impaired users in particular. If you receive keys via the IVR solution the telephone on which you receive keys requires the same security measures as keycards (see above). This means that you must ensure that the telephone on which you receive keys is independent from your computer/telephone on which you subsequently enter your key you must block your password immediately if you lose the telephone on which you receive keys or if you discover that your telephone line is being misused Amendments to the rules governing the use of NemID DanID is entitled to make amendments to the rules without notice if they are made as a result of amendments to the security requirements applying to NemID. The amendments will become effective when published at If DanID has registered your address you will be notified of any amendments via . Other amendments will be notified at no later than three months before they become effective.