SSL の脆弱性 ("Heartbleed Bug") に関するFAQ
どういった問題ですか? «HEARTBLEED»とは何ですか?
オープンソースのSSL/TLSプロトコルの実装において指摘された脆弱性は、サーバーのメモリ上にあるパスワードや暗号化キーを読み取られてしまう可能性があるという極めて重大なものです。
SSLとは何ですか?
SSLとは、パソコンに対して、ネットワーク上で通信されるデータの暗号化、復号化を指示するプロトコルです。
IBで«HEARTBLEED»の影響はありますか?
現時点では確認されておりません。
脆弱性が確認されたOpenSSLのバージョンを使ってるIBサーバーはごく僅かで、弊社では脆弱性が指摘され、パッチがリリースされてからすぐに対応策を講じています。
セキュアログインシステム（SLS）を使用することで、こういった場合でもセキュリティ強化になりますか?
主なログイン時の主な認証（ユーザー名、パスワードの入力）に加え、セキュアログイン・システム（SLS）をご利用いただくことで更に高いセキュリティを確保することができます。
また、セキュアログイン・ディバイス（SLS）をご利用いただくことで、他の人が口座へアクセスできないよう対処することができます。
パスワード変更をした方が良いですか?
弊社にて講じた追加のセキュリティ対策により、パスワードはこの脆弱性の影響は受けておりません。
パスワードを定期的に更新することは、セキュリティ上良いことですが、«Heartbleed»対策としてすぐにパスワードを変更する必要はございません。
How to send documents to IB using your smartphone
概観:
Interactive Brokers allows you to send us a copy of a document even if you do not currently have access to a scanner. You can take a picture of the requested document with your smartphone.
Below you will find the instructions on how to take a picture and send it to IB per email with the fllowing smartphone operating systems:
Android (i.e. Samsung Galaxy, HTC One X, Sony Xperia, Motorola Droid)
Windows Phone (i.e. Nokia Lumia, HTC Titan, Samsung Focus)
If you already know how to do so, please consult the instructions about the information you will need to send us aside from the document picture. Click HERE - Where to send the email to and what to include in the subject.
iOS
1. Press the power button to turn your iPhone screen on. Tap, hold and slide upwards the
Camera icon on the bottom right of your screen then drag it upwards to access the Camera.
- If you do not have the Camera icon, you may access the Camera app from the home screen
of your iPhone.
2. Place your iPhone above the document and take the desired portion or page of the document
and tap on the Camera button (designated with 1 on the below illustration - Fig. 3) to take a
photo. Then you need to access the picture - tap the image in the lower left-hand corner (number 2 in the
illustration)
.png)
3. Exit to the home screen by pressing the round Home button on the face of the iPhone.
4. Open the Photos app
5. Next, tap the album ‘Camera Roll’. Make sure that the picture is clear and the document
is well legible, if it isn’t, please repeat the previous two steps.
6. Touch once the picture to make the menus appear and tap the share icon
designated with 1 in the illustration below.
5. Select the first option - Email Photo. Please consult the following instructions for the next step - what address you should send the picture to and what else to include aside from the document, HERE.
Note: to send emails your phone has to be configured for that. Please contact your email
provider if you are not familiar with this procedure.
Android
1. Open your applications list and start the camera app. Depending on your phone model, make or setup it might be called differently.
2. Place your phone over the document and take the desired portion or page of the document and
tap the icon for the camera. (The generic button will look like the one shown below.)
3. Press the Home key to go back to the idle screen. Go back to the apps list and start the Gallery
application. On some phones it may be called Pictures or Photos.
4. Open the album called Camera or All pictures. The last image in either of those should be the
document you just took a picture of. Tap the screen once to bring up the buttons and tap the share
icon, which generically should look as shown below.
5. In the sharing menu that will be displayed now tap on Email. Please consult the following instructions for the next step - what address you should send the picture to and what else to include aside from the document, HERE.
Note: to send emails your phone has to be configured for that. Please contact your email
provider if you are not familiar with this procedure.
Windows Phone
1. Press the camera button in the Desktop menu of Windows phone. (If you do
not see the camera in the desktop menu, please scroll to the right and choose
camera in the listed applications)
2. Take a picture by pressing the trigger button on the side of the phone.
3. Open the picture by scrolling to the left and press the ‘...’ menu item
at the bottom task bar to see the available options.
4. Please choose send and the configured Email account you would like to use.
5. In the upcoming email, please add the destination email address, the
subject and the text you would like to send and press the ‘Send email’ button in
the bottom menu. Please consult the following instructions for the next step - what address you should send the picture to and what else to include aside from the document, HERE.
Note: to send emails your phone has to be configured for that. Please contact your email
provider if you are not familiar with this procedure.
WHERE TO SEND THE EMAIL AND WHAT TO INCLUDE IN THE SUBJECT
The email has to be created observing the below instructions:
1. In the ‘To:’ field type...
a. newaccounts@interactivebrokers.com if your you are a resident of a non-European country
b. newaccounts.uk@interactivebrokers.co.uk if you are a European resident
2. The subject field must contain all of the below:
a. Your account number (it usually has the format Uxxxxxxx, where x are numbers) or your
username
b. The purpose of sending the document. Please use the below convention:
i. PoRes for a proof of residential address
ii. PID for a proof of identity
How to obtain an Online Security Code Card
概観:
The Online Security Code Card provides you with a temporary access to your account and trading platform for a duration of 21 days. This is an ad-interim solution usually needed in those cases:
A. You are temporary away from your permanent security device and you are waiting to regain access to it.
B. You have lost your permanent security device and you want to either request a replacement or maintain access to your account while waiting for the delivery to happen.
Background:
For the cases above mentioned, we assume you have already notified IB Client Services and obtained a Temporary Code, as explained in KB70. You can now extend the duration of your temporary access as follows
Activation procedure
1. Open your browser and go to the web page ibkr.com
2. Click on Login > Client Portal
.png)
3. Enter your credentials and click on Login. Enter the Temporary Code you received from IB Client Services to complete the authentication and click again on Login
.png)
4. From the left side menu, click on Settings > User Settings. Then, within the Security box, click on the whee(Configure) icon next to Secure Login System1.png)
5. The system will list all the security devices currently active for your user. Below the list, click on the button Request Online (Temporary) Security Code Card
6. Your Online Security Card will be displayed. Click on Print2
(1).png)
7. Please make sure the card has been printed correctly in all its parts and it is clearly readable. Then click on Continue 
8. Two index numbers will appear on the activation screen. Locate the first index number on your card and enter the correspondent three digits code into the Card Values field. Then repeat the same operation for the second index number, leaving no spaces between the codes. Then click on Continue
9. You will see a confirmation message stating the expiration date of the card. Click on OK to finalize the procedure.png)
Notes
1. If you use the Classic Account Management, click on the top menu Manage Account > Security > Secure Login System > Security Device
2. Should you not have a printer connected to your device, you can right-click directly on the card image and save it as an image file. In this case, upon proceeding to the activation screen, you may receive a warning message.
Please make sure that the image file has been successfully stored on your device and that it is readable before you acknowledge the warning message by clicking on Continue
References
- See KB1131 for an overview of the Secure Login System
- See KB1943 for instructions on requesting a replacement Digital Security Card+
- See KB2636 for information and procedures related to Security Devices
- See KB2481 for instructions about sharing the Security Login Device between two or more users
- See KB2545 for instructions on how to opt back in to the Secure Login System
- See KB975 for instructions on how to return your security device to IB
- See KB2260 for instructions on activating the IB Key authentication via IBKR Mobile
- See KB2895 for information about Multiple Two-Factor Authentication System (M2FS)
- See KB1861 for information about charges or expenses associated with the security devices
- See KB69 for information about Temporary passcode validity
Troubleshooting Trading Platform Login Failures
Click on the link below which best describes your situation:
10. I am able to log into Account Management with my temporary passcode but not the trading platform
a. Confirm whether your account has been approved. Accounts which have not been approved or which have been approved after the daily cut-off time are provided access solely to Account Management and not the trading platform (access will be provided next day if approved after daily cut-off time)
b. Confirm whether your account has been funded with the deposit minimum of USD 10,000, or equivalent. Accounts which have not been funded at this level are provided access solely to Account Management and not the trading platform.
c. Confirm whether your account remains open. Accounts which have been closed, either by customer action or by IB due to no balance, no longer have access to the trading platform but continue to have access to Account Management in order to obtain activity and tax statements. Access to Acount Management is provided using the same User Name and password combination which existed when the account was open and do not require the use of the security device.
d. If you are attempting to log into your paper trading account, make sure that you are not using the user name and password combination from your live account.
a. If operating with a temporary passcode, note that alpha characters are case sensitive and are required to be input in upper case format
b. If operating a security card or electronic device, note that there are no spaces between characters
a. For security purposes, all requests for assistance with a user name and/or password must be initiated via telephone and require prior verification of the account holder’s identity. Requests are to be directed to one of the regional Customer Service Centers.
a. Confirm that your Internet connection is active (test by accessing another website). If you are unable to establish an Internet connection you will need to contact your Internet Service Provider for assistance.
b. Confirm whether you are operating under a firewall which is blocking the TWS connection. If so, the firewall would need to be re-configured in order to provide access.
c. Ports 4000/4001 are being blocked. These ports are often blocked from public connections such as hotels, cafes, etc. and required to be open to accommodate Inbound/Outbound TCP protocol. In addition, if you have a router connected to your computer, these ports must be open on the router.
a. If you are temporarily without possession of your security device, interim access may be provided by contacting your regional Customer Service Center via telephone where, once your identity has been verified, you will be provided with a temporary passcode.
The temporary passcode is a static alpha-numeric code which replaces the randomly generated code provided through your security device and which will provide full access to Account Management and the trading platforms for 2 days. Should a lengthier period of interim access be necessary, and to obtain enhanced protection, it is recommended that you use the temporary passcode to log into Account Management and print out the on-line security card which will operate as a replacement to your security device for up to 3 weeks.
After the expiration of the temporary passcode or on-line security card, or if you regain possession of your security device beforehand, you will need to log into Account Management and select the menu option to re-activate your security device.
a. In the case of a lost or damaged security device, you will need to contact our Customer Service center to arrange for a replacement and to provide for interim access. As the time frame for shipping a replacement device may range form 3 to 14 days depending upon your country of residence, interim access is provided via an on-line security card. The on-line security card may be retrieved for printing or saving as an image to your desktop once a temporary passcode has been provided for Account Management access.
a. The temporary passcode is intended to provide full access to both Account Management and the trading platforms for a period of 2 days. After 2 days, the temporary passcode may no longer be used to access the trading platforms but may be used to access Account Management for an additional period of 10 days. The Account Management access, however, is limited solely for the purpose of printing or saving the on-line security card.
If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days. If you are unable to log into Account Management, you will need to contact your regional Customer Service center for assistance.
a. The on-line security card is intended to provide full access to both Account Management and the trading platforms for a period of 21 days. This time frame, while limited, is intended to provide sufficient opportunity for the account holder to either regain possession of a temporarily unavailable security device or request and receive a replacement device.
If you are unable to log in using the on-line security card, you will need to contact your regional Customer Service center for assistance and to provide information as to the status of your permanent security device.
a. Depending upon your location, the physical security device should be delivered to the address of record on your account within 2 days in the case of US residents and within 2 weeks for all other accounts. It’s important to note that the permanent devices are set to automatically activate after a set timeframe if not yet manually activated by the account holder. If this is the case and you encounter difficulties logging into your account, please contact our Technical Assistance Department at 1-877-442-2757.
10. I am able to log into Account Management with my temporary passcode but not the trading platform
a. If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days.
If you are unable to log into Account Management, you will need to contact your regional Customer Servicecenter for assistance.
a. To activate either a replacement device or one which was temporarily unavailable and which required issuance of a temporary passcode, you will need to log into Account Management and select the reactivate security device menu option. Once reactivated, neither the temporary passcode nor on-line security card will remain operable.
