Nokia 6310i User Manual page 51

use of the phone's digital signature
functionality. If present, the security module
is in the SIM card as an optional service of
your service provider. It can contain
certificates, as well as private and public keys
to operate the certificates. The certificates
and keys are stored in the security module by
the SIM card issuer or service provider.
Digital signature
With the digital signature functionality you
can, for example, digitally sign a bill or a
financial contract. The signature can be
traced back to you via the private key and the
associated certificate that was used to
perform the signature, so signing using the
digital signature is the same as signing your
name to a paper bill, contract or other
document.
A digital signature is initiated by a code
embedded in a WAP page. See also
codes on page 8. Select a product you want to
buy and the digital signature procedure starts
and shows the text to sign. At this point check
that the header text is
signature icon is shown.
Note: If the digital signature icon
does not appear, there is a security
breach, and you should not enter any
personal data such as your signing
PIN.
To sign the displayed text, select Sign, after
you have read all of the text.
Note: The text may not fit within a
single screen. Therefore, make sure
to scroll through and read all of the
text before signing.
Select the user certificate you want to use.
Key in the signing PIN and press OK. Since the
PIN code will not be sent outside the phone, it
will remain secret. The phone displays a
confirmation Code accepted. If you entered a
wrong PIN, an error note
Access
Read and the digital
Code error is
Copyright © 2004 Nokia. All rights reserved
displayed, and the phone asks you to key in
the PIN code again. After the confirmation
has been displayed, the digital signature icon
will disappear, and browsing continues. The
WAP service may display a confirmation of
your purchase.
Certificates
There are three kinds of certificates:
• Server certificates
A server certificate is sent from the server
to the phone and its validity is checked
using the authority certificates stored in
the security module. This way you can be
certain that a WAP gateway or a WAP
server is the one it claims to be.
You will see a note on the phone display if
the identity of the WAP server or WAP
gateway cannot be verified, if the WAP
server or WAP gateway certificate is not
authentic or if you do not have the right
authority certificate in your phone.
• Authority certificates
Authority certificates are used by some
WAP services, such as banking services, for
checking signatures or server certificates
or other authority certificates.
• User certificates
User certificates are issued to users by a
Certifying Authority. They associate a user
with a specific private key in a security
module.
Security module settings
Press Menu, select Services,
Security module settings. If there is no
security module in the phone,
module is displayed.
In the Security module settings
have the following options:
• Security module details
module label, its status, manufacturer and
serial number.
M e n u f u n c t i o n s
Settings and
Insert security
menu you
show the security
51