Kbao certificate is stored in USBKEY medium, with built-in smart chip and special security area to store the private key of the certificate. The private key of Kbao certificate cannot be exported, so the backed-up file cannot be used, and the security is higher than that of browser certificate. Kbao certificate is easy to carry, but customers need to install Kbao driver when using it, and Kbao certificate requires certificate fee.
1. Settings for security control
If the security control is not signed, the page can only call the control after Vista system needs to modify IE option. Setup steps: Open the Tools menu →“Internet Options in IE browser, select Security→ Trusted Sites, click Custom Level, find the option of Initializing and Running Scripts for ActiveX Controls Not Marked as Safe in the Settings box, select the Enable radio box, and click OK to exit the Custom Level. After the software is successfully installed, the software automatically sets the online banking of Agricultural Bank of China as the secure site of IE, and the interface of the secure site is as shown in the figure. If the setting is unsuccessful, add the 6 sites in the following figure as trusted sites.
The names of the two controls called on the online banking page of Agricultural Bank of China are abcPrintCtl4RA.dll and NetSign.dll respectively. When the page is called, the user will be prompted whether to allow running or loading, and the prompt information is at the top of the page area. At this point, the user needs to allow the page to call the control.
2. Automatic operation is blocked.
When automatic operation is blocked, you can install the software package manually. "Explorer" opens the "My Computer" → "ABC" drive disk, and double-clicks "ABChina_setup.exe" to complete the software installation. The interface is as shown in the figure.
K-order is a new security authentication tool launched by Agricultural Bank of China, which can be used in personal online banking, pocket banking, telephone banking and B2C payment channels of e-commerce. It has the characteristics of one secret at a time. At the same time, the dynamic password is obtained by "challenge-response" method, and the transaction elements are integrated into the authentication process, which has high security. This is an enhanced dynamic token device.