﻿ RBC BankUSA Privacy & Security - Key Security Terms
Skip to Main Content


A Glossary of Key Security Terms





The process by which individuals and organizations verify each other's identity during the exchange of sensitive and confidential information. During Online Banking sessions, clients are usually authenticated using IDs and passwords. Clients can ensure that they are dealing with the party they intend to communicate with by examining the secured website's security certificate.



Cable Modem



Temporary storage. For example, web pages you visit may be downloaded to your computer and stored in your web browser's cache, which is physically located on your computer’s hard drive. When you return to a recently visited web page, your web browser can retrieve it from the cache rather than from the web server where the page is hosted. This cuts down the retrieval time and helps minimize Internet traffic.

Certification Authority (CA)


Cipher, Ciphertext



A small text file containing a unique identification number that a website sends to your computer's web browser. When you visit a particular site, a cookie may be used to track the activities of your browser as well as provide you with a consistent, more efficient experience. There are two common types of cookies: persistent and non-persistent. Persistent cookies stay in the browser for long periods of time. Cookies cannot view or retrieve data from other cookies, nor can they capture files and data stored on your computer. Only the website that sends you cookies is able to read them.


This represents a set of mathematical techniques to encode information so that it can be stored and transmitted securely. A system for encrypting and decrypting data is called a cryptosystem. The system usually involves a mathematical equation or algorithm for combining the original data with one or more keys, numbers or strings of characters known only to the sender and recipient. The resulting encoded, unreadable data is known as ciphertext.

Digital Certificate


Digital Signature


Digital Subscriber Line Technology (DSL)



The process of scrambling or encrypting data into a form that cannot be read or understood by unauthorized individuals, ensuring its security during transmission over the Internet. Very similar to secret code, encryption changes data from readable to unreadable and back again using complex mathematical algorithms known as keys. It is not possible to convert encrypted data to unencrypted data without the corresponding key. The two most common levels of encryption, 40-bit and 128-bit, are both in use on popular web browsers.

End-to-end Security





In cryptography, a key is complex mathematical algorithm applied to plain data to produce encrypted data, or applied to encrypted data to produce the original information. The longer the key, the more difficult it is to decrypt the data should an unauthorized third party intercept it.



Public Key Infrastructure (PKI)

Allows users to exchange sensitive information over the Internet in a secure and private manner using a public and private key pair that is obtained through a certification authority. The public key infrastructure uses a digital certificate to identify the individual attempting to decrypt data.


A software module that adds a specific functionality to the web browser. For example, plug-ins allow browsers to display various types of audio and video messages or popular Adobe Acrobat (PDF) files.

Public Key Encryption

This process uses a pair of private and public keys that are mathematically related for the encryption and decryption of data. The public key is made widely available to parties who want to communicate with the private key issuer/holder in a secure manner and it is the key used to encrypt the data. The private key is never shared and remains private to the issuer/holder of the public key and is used to decrypt the data.

Security Holes/Bugs

Faults, defects or programming errors exploited by unauthorized intruders to enter computer networks or web servers from the Internet. As these holes or bugs become known, software publishers develop "patches,” "fixes" or "updates" users can download to fix the problems.

Secure Electronic Transaction (SET)

An open technical standard for the commerce industry developed by Visa and MasterCard to facilitate secure credit card payment transactions over the Internet. Digital Certificates are used throughout the transaction, verifying cardholder and merchant. SET may be used by software vendors, merchants, financial institutions, and others that pass SET compliance testing.

Smart Card

A plastic card about the size of a credit card with an embedded microchip where data and applications are stored. Information on Smart Cards can be updated after the card is issued. A smart card reader, a small device into which the smart card is inserted, is required to load data onto the card or read information from it.



Secure Socket Layer (SSL)

This protocol was developed by Netscape Communications Corporation to provide a high level of security for Internet communications. SSL provides an encrypted communications session between your web browser and a web server. SSL helps verify that sensitive information (e.g. credit card numbers, account balances and other proprietary financial and personal data) sent over the Internet between your browser and a web server, remains confidential during online transactions.

Symmetric Key Encryption

Also known as Private Key Encryption, this uses the same private key shared by the sender and recipient for the encryption and decryption of data. A web browser will generate a new symmetric key each time it opens a secure connection.

Trojan Horse

A malicious program disguised as a useful or fun program. Trojan Horses are frequently transmitted as files attached to e-mail messages, can be downloaded from websites, and enter a computer via a USB or CD-ROM file. When you install the file, it appears as if nothing untoward has happened, but the Trojan Horse installs itself on your computer and may destroy files or create a "back door" entry point that allows an unauthorized individual to gain access to your computer.


A malicious program often designed as games, image files (JPEG) or screen savers. They are frequently transmitted as files attached to e-mail messages, can be downloaded from websites, and enter a computer via a USB or CD-ROM file. Some viruses do damage as soon as they are run inadvertently. Others remain dormant until a date predetermined by the virus creator, then come alive and destroy files or data. When run (clicked on to install the file or play the game), viruses frequently search the Microsoft Outlook address book and send themselves to some or all of the contacts in the address book without the user's knowledge. Known as self-propagation, this is how viruses often spread like wildfire across the Internet and corporate networks.


A malicious program that replicates itself over a computer network. It does not alter files but resides in active memory of the computer, invisible to the user, until uncontrolled replication causes a computer to slow down or shut down. By way of example, worms which gained widespread media attention are Code Red and Nimda. Code Red worm infected commercial servers by flooding them with large amounts of data. Nimda ("admin" spelled backwards) wreaked havoc in both home PCs and commercial network and web servers. Self-replicating worms generally use e-mail and infected websites to spread across the Internet and computer networks.