|
Security
Statement
All transaction on parts4laptop.ca are powered by
PSIGate. they recognizes the importance of protecting
transactions online. The procedures for security and how PSIGate
sends transaction information online are described below. You will
discover how their policies are designed to protect our company and
our customers -- function. If you have any remaining questions,
please
Click Here to send us an
email
All Transactions are sent between hosting server and
PSIGate data centers via the Internet using a highly secure
technique based on Secure Sockets Layer (SSL).
Information Security
PSIGate store transaction information on secure computers
located in a locked data center. Where possible, we encrypt information stored on
our computers as a further measure of protection. We use
state-of-the-art firewalls and other security technology to prevent
our computers from being accessed by unauthorized persons.
We give you the
option of using a secure transmission method to send us the
following types of personal data:
-
primary personal data (such as name and
contact details)
-
identifiers (such as credit card details, Web
site password)
We have
implemented security policies, rules and technical measures to
protect the personal data that we have under our control from
unauthorized access , improper use or disclosure , unauthorized
modification and unlawful destruction or accidental loss.
All our employees
and data processors, who have access to, and are associated with
the processing of personal data, are obliged to respect the
confidentiality of our visitors' personal data. We ensure that
your personal data will not be disclosed to State institutions
and authorities except if required by law or other regulation.
How SSL Works
SSL is a protocol that provides privacy and
integrity between two communicating applications using TCP/IP. The
Hypertext Transfer Protocol (HTTP) for the World Wide Web uses
SSL for secure communications.
The data going back and forth between client and
server is encrypted using a symmetric algorithm such as DES or RC4.
A public-key algorithm-usually RSA is used for the exchange of the
encryption keys and for digital signatures. The algorithm uses the
public key in the server's digital certificate. With the server's
digital certificate, the client can also verify the server's
identity. Versions 1 and 2 of the SSL protocol provide only server
authentication. Version 3 adds client authentication, using both
client and server digital certificates.
An SSL connection is always initiated by the client.
At the beginning of an SSL session, an SSL handshake is performed.
This handshake produces the cryptographic parameters of the session.
A simplified overview of how the SSL handshake is processed is
described below. This example assumes the
SSL connection is being established between a Web browser (client) and a Web
server.
-
A
client requests a secure connection to a server.
-
The server sends its authentication certificate
and its public key to the client.
-
The client verifies the certificate. If the
certificate is valid, the client sends the server
a randomly generated encryption key encoded with
the server's public key.
-
The server decodes the encryption key using its
private key.
-
The client and server can now exchange encoded
data.
|