NPS attaches the highest importance to security within our payment system as do customers who are naturally and appropriately extremely concerned about online payments security .

Security of online transactions within NPS system is ensured over 3 layers as follows:

1. Network Layer: Security is guaranteed at this level with a powerful firewall.
2. Systematic layer: Anti-hawker, anti-virus and loophole scanning systems are in place at this level.
3. Application layer: An SSL certificate issued by an industry renowned and respected authentication certificate provider is installed, providing confidentiality, authenticity, and integrity guarantees as well as a secure environment for online data input.

SSL, Secure Socket Layer, a transmission layer-based security protocol provides security on channels and is a widely used encryption standard for internet transmission. NPSuses SSL for all its online transactions to ensure transmission security control.

This protocol may provide TCP/IP-based user/server applications with security measures for identification, data integrity and confidentiality at the user end / service end. The procedure realizes a security review by means of exchanging initial handshaking information prior to data exchange via applications. Such encryption as DES and MD5 are adopted in our SSL handshaking information to ensure confidentiality and data integrity, identified by X.509 digital certificate. This protocol has been widely used in Internet/Intranet servers or user-end products and is also adopted in leading Internet/Intranet products by companies such as Netscape, Microsoft and IBM.

The industry renowned EnTrust SSL certificate is set at the service end of NPS and https protocol used is at the user-end browser, sending off the CGI request. Our SSL encryption is also used in the https request send off from the customer side and within web server feedback. Addiationally all information transferred from the customer to the Internet service provider is automatically encrypted and restored to its original state after being encrypted and received.

As a result NPS is able to ensure the confidentiality of the payment information, integrity of the payment process and legal identification of customer and merchant cardholders as well as the whole system process.

Readable and usable information is not available to hackers who may have obtained encrypted information without the secret cryptography required to decipher the encrypted information. NPS is therefor able to ensure confidentiality of the payment information, integrity of the payment process and legal identification of consumers and merchants as well as the whole process of the payment system.

The SSL Security Protocol functions within NPS service
in the following way.

Authentication on users and servers provides trust in the data
transmitted concerning customers servers.
Encryption ensures data is secretly transmitted.
Data integrity is maintained as no change occurs to the data during transmission.