Amendments to the Standard Form of the Agreement for the Provision of Electronic Banking Services in the Internet Banking System

Amendments to the Standard Form of the Agreement for the Provision of Electronic Banking Services in the Internet Banking System

Dear clients,

We would like to inform you that starting from November 21, 2020, changes will be made to the standard form of the Agreement for the provision of electronic banking services in the Internet Banking system:

  1. Section 1 of the Agreement shall be supplemented with the following definition: “e-token - a carrier of key information provided by the Bank to the Client, intended for storing annual cryptographic keys and the annual registration certificate.”
  2. Clause 3.5 of the Agreement is to be amended and restated as follows:

“3.5 According to the certification authority service agreement concluded with the Bank, the certification authority issues registration certificates in the name of the Bank for use by the Bank's clients exclusively in the Bank’s information system. The Client is specified as the signing parties in these registration certificates. The Client independently generates annual cryptographic keys and the annual registration certificate electronically on the certification authority’s website, based on initial initialization keys provided by the Bank on the Client's key information carrier. The Bank does not have access to the Client's annual cryptographic keys generated independently by the Client and cannot use them.”

  1. The last paragraph of clause 3.8.2 of the Agreement is to be amended and restated as follows: “provides the Client with: initial initialization cryptographic keys on the Client's key information carrier, a registration certificate of the certification authority in the form of an electronic document, in a sealed envelope the input name and password for accessing the Internet Banking system.”
  2. Clause 3.8.3 of the Agreement is to be supplemented with the following words: “and stores the annual cryptographic keys and the annual registration certificate on the e-token provided by the Bank.”
  3. The last two paragraphs of clause 5.6 are to be amended and restated as follows: “The Client independently generates annual cryptographic keys and a registration certificate electronically on the certification authority’s website and stores them on the e-token, the Bank does not have access to the annual cryptographic keys and cannot use them;

- the algorithm for generating a digital signature using the key information carrier is reliable, and generating a digital signature under an electronic document is possible only if the sender has the key information carrier with cryptographic keys.”

  1. Clause 6.2.11 of the Agreement is to be amended and restated as follows:

“6.2.11. On the day of submitting the Accession Application to the Bank, pay the commission for connection to the Internet Banking system (with the provision of an e-token).”

  1. Clauses 6.2.17 and 6.2.18 of the Agreement are to be amended and restated as follows: “6.2.17. Store the annual cryptographic keys and the annual registration certificate on the e-token, in a secure place preventing unauthorized access, and take all possible measures to prevent its loss, disclosure, alteration, and unauthorized use.

6.2.18. Do not allow the transfer of key information carriers with cryptographic keys to persons who do not have properly formalized authority to access the Internet Banking system and conduct electronic payments. All expenses and losses that may arise in connection with the Client's transfer of key information carriers with cryptographic keys and login and password information used to access the Internet Banking system are borne by the Client independently, and the Client is not entitled to claim compensation from the Bank.”

8. In clause 6.4.6, replace the words “key carrier” with “e-token.”

9. In clause 9.3 and the second paragraph of clause 9.4 of the Agreement, replace “key information carrier” with “carriers of key information with cryptographic keys.”

10. In clause 9.6 of the Agreement, replace “key information carrier” with “key information carriers.”

11. Clause 9.7 of the Agreement is to be amended and restated as follows: “9.7. The Client is responsible for:

- storing annual cryptographic keys and the annual registration certificate exclusively on the e-token;

- creating appropriate security conditions when using and storing key information carriers with cryptographic keys;

- timely notifying the Bank in case of disclosure of login and password/theft/loss of key information carrier with cryptographic keys.”

11.11.2020