SSL 漏洞 ("Heartbleed 漏洞") 常见问题解答
这是一个什么问题？ “HEARTBLEED”是指什么?
HEARTBLEED漏洞是指开源应用项目SSL（保安接层加密技术）和TLS（安全传输协议）协议的安全漏洞，它能让攻击者从服务器内存中读取密码和密钥。
什么是SSL?
SSL（保安接层加密技术）是一种安全协议，用于指令机器对网络通信中的数据进行加密和解密。
盈透是否受到“HEARTBLEED”漏洞的影响？
盈透未受该漏洞的影响。
在发现漏洞并有补丁发布之时，我们已经更新并修复了少数几个使用受影响的OpenSSL的盈透服务器。
出现这种问题及相似问题时，SLS是否可以更好的保护账户？
安全登录系统（SLS）为您在通过主要的登录凭证（用户名和密码）访问账户之外增添了另一层保护。
用户名和密码并不是阻止未经授权而访问账户的唯一防线。
使用SLS设备可确保只有您才能访问您的账户。
我是否需要更改密码？
盈透采取了其他安全措施，因此您的密码不会受到此漏洞的影响。
定期更换密码是防止账户被他人攻击的好方法，但是您不必在看到有关Heartbleed的报道时专门去更改密码。
How to send documents to IB using your smartphone
Overview:
Interactive Brokers allows you to send us a copy of a document even if you do not currently have access to a scanner. You can take a picture of the requested document with your smartphone.
Below you will find the instructions on how to take a picture and send it to IB per email with the fllowing smartphone operating systems:
Android (i.e. Samsung Galaxy, HTC One X, Sony Xperia, Motorola Droid)
Windows Phone (i.e. Nokia Lumia, HTC Titan, Samsung Focus)
If you already know how to do so, please consult the instructions about the information you will need to send us aside from the document picture. Click HERE - Where to send the email to and what to include in the subject.
iOS
1. Press the power button to turn your iPhone screen on. Tap, hold and slide upwards the
Camera icon on the bottom right of your screen then drag it upwards to access the Camera.
- If you do not have the Camera icon, you may access the Camera app from the home screen
of your iPhone.
2. Place your iPhone above the document and take the desired portion or page of the document
and tap on the Camera button (designated with 1 on the below illustration - Fig. 3) to take a
photo. Then you need to access the picture - tap the image in the lower left-hand corner (number 2 in the
illustration)
.png)
3. Exit to the home screen by pressing the round Home button on the face of the iPhone.
4. Open the Photos app
5. Next, tap the album ‘Camera Roll’. Make sure that the picture is clear and the document
is well legible, if it isn’t, please repeat the previous two steps.
6. Touch once the picture to make the menus appear and tap the share icon
designated with 1 in the illustration below.
5. Select the first option - Email Photo. Please consult the following instructions for the next step - what address you should send the picture to and what else to include aside from the document, HERE.
Note: to send emails your phone has to be configured for that. Please contact your email
provider if you are not familiar with this procedure.
Android
1. Open your applications list and start the camera app. Depending on your phone model, make or setup it might be called differently.
2. Place your phone over the document and take the desired portion or page of the document and
tap the icon for the camera. (The generic button will look like the one shown below.)
3. Press the Home key to go back to the idle screen. Go back to the apps list and start the Gallery
application. On some phones it may be called Pictures or Photos.
4. Open the album called Camera or All pictures. The last image in either of those should be the
document you just took a picture of. Tap the screen once to bring up the buttons and tap the share
icon, which generically should look as shown below.
5. In the sharing menu that will be displayed now tap on Email. Please consult the following instructions for the next step - what address you should send the picture to and what else to include aside from the document, HERE.
Note: to send emails your phone has to be configured for that. Please contact your email
provider if you are not familiar with this procedure.
Windows Phone
1. Press the camera button in the Desktop menu of Windows phone. (If you do
not see the camera in the desktop menu, please scroll to the right and choose
camera in the listed applications)
2. Take a picture by pressing the trigger button on the side of the phone.
3. Open the picture by scrolling to the left and press the ‘...’ menu item
at the bottom task bar to see the available options.
4. Please choose send and the configured Email account you would like to use.
5. In the upcoming email, please add the destination email address, the
subject and the text you would like to send and press the ‘Send email’ button in
the bottom menu. Please consult the following instructions for the next step - what address you should send the picture to and what else to include aside from the document, HERE.
Note: to send emails your phone has to be configured for that. Please contact your email
provider if you are not familiar with this procedure.
WHERE TO SEND THE EMAIL AND WHAT TO INCLUDE IN THE SUBJECT
The email has to be created observing the below instructions:
1. In the ‘To:’ field type...
a. newaccounts@interactivebrokers.com if your you are a resident of a non-European country
b. newaccounts.uk@interactivebrokers.co.uk if you are a European resident
2. The subject field must contain all of the below:
a. Your account number (it usually has the format Uxxxxxxx, where x are numbers) or your
username
b. The purpose of sending the document. Please use the below convention:
i. PoRes for a proof of residential address
ii. PID for a proof of identity
如何获得在线安全密码卡
背景知识
在线安全密码卡是一种在过渡期使用的安全设备，供身边没有永久设备而使用临时码登录账户的用户使用。分配临时码时盈透强烈建议客户登录账户管理选择在线安全卡，这么做的主要益处是：
- 通过在登录时分配随机密码提供更高等级的保护，从而不受网络黑客侵害；
- 提供更长时间（21天 ：临时码2天）的保护，能重新激活永久设备，之后便可以弃用；
- 允许取款及信息更改，可免去与临时码用户相同的限制；
- 能够在账户管理中直接获取并打印，并允许在不联系客户服务的情况下重新激活永久设备。
在账户管理中获取卡片的步骤如下：
（如果您的账户管理是菜单位于页面顶部的版本）：
1、选择管理账户，安全，再选择安全登录系统菜单选项；
2、点击“是的，我想加入安全登录系统”，再点击“继续”
3、屏幕上将出现在线安全卡图片。点击右上角的“打印”选项（或者点击鼠标右键将图片保存到桌面上）。
4、点击“确认”选项激活卡片。屏幕上将出现两个卡片序号。
5、找出图片上与第一个序号对应的三位字母-数字密码，将其输入到“卡片值”区域，第二个序号采取相同的做法，两组密码间不留空格。
6、点击“提交”
7、成功激活卡片之后，会为您提供卡片到期日，以及进行其他操作的选项。
.png)
请见KB1042 查看使用安全密码卡登录的视频讲解
请见KB1942 查看重新激活永久安全登录设备的说明
请见KB1943查看申请替换安全登录设备的说明
（如果您的账户管理是菜单位于页面左侧的版本）
1、选择用户管理，再选择安全登录系统菜单选项；
2、点击“是的，我想加入安全登录系统”
3、将出现在线安全卡图片。点击右上角的“打印”选项（或者点击鼠标右键将图片保存到桌面上 ）。
4、点击“确认”选项激活卡片。屏幕上将出现两个卡片序号。
5、找出图片上与第一个序号对应的三位字母 - 数字密码，将其输入到“卡片值”区域，第二个序号采取相同的做法，两组密码间不留空格。
6、点击“提交”
7、成功激活卡片之后，会为您提供卡片到期日，以及进行其他操作的选项。
How to obtain an Online Security Code Card
Overview:
The Online Security Code Card provides you with a temporary access to your account and trading platform for a duration of 21 days. This is an ad-interim solution usually needed in those cases:
A. You are temporary away from your permanent security device and you are waiting to regain access to it.
B. You have lost your permanent security device and you want to either request a replacement or maintain access to your account while waiting for the delivery to happen.
Background:
For the cases above mentioned, we assume you have already notified IB Client Services and obtained a Temporary Code, as explained in KB70. You can now extend the duration of your temporary access as follows
Activation procedure
1. Open your browser and go to the web page ibkr.com
2. Click on Login > Client Portal
.png)
3. Enter your credentials and click on Login. Enter the Temporary Code you received from IB Client Services to complete the authentication and click again on Login
.png)
4. From the left side menu, click on Settings > User Settings. Then, within the Security box, click on the whee(Configure) icon next to Secure Login System1.png)
5. The system will list all the security devices currently active for your user. Below the list, click on the button Request Online (Temporary) Security Code Card
6. Your Online Security Card will be displayed. Click on Print2
(1).png)
7. Please make sure the card has been printed correctly in all its parts and it is clearly readable. Then click on Continue 
8. Two index numbers will appear on the activation screen. Locate the first index number on your card and enter the correspondent three digits code into the Card Values field. Then repeat the same operation for the second index number, leaving no spaces between the codes. Then click on Continue
9. You will see a confirmation message stating the expiration date of the card. Click on OK to finalize the procedure.png)
Notes
1. If you use the Classic Account Management, click on the top menu Manage Account > Security > Secure Login System > Security Device
2. Should you not have a printer connected to your device, you can right-click directly on the card image and save it as an image file. In this case, upon proceeding to the activation screen, you may receive a warning message.
Please make sure that the image file has been successfully stored on your device and that it is readable before you acknowledge the warning message by clicking on Continue
References
- See KB1131 for an overview of the Secure Login System
- See KB1943 for instructions on requesting a replacement Digital Security Card+
- See KB2636 for information and procedures related to Security Devices
- See KB2481 for instructions about sharing the Security Login Device between two or more users
- See KB2545 for instructions on how to opt back in to the Secure Login System
- See KB975 for instructions on how to return your security device to IB
- See KB2260 for instructions on activating the IB Key authentication via IBKR Mobile
- See KB2895 for information about Multiple Two-Factor Authentication System (M2FS)
- See KB1861 for information about charges or expenses associated with the security devices
- See KB69 for information about Temporary passcode validity
Troubleshooting Trading Platform Login Failures
Click on the link below which best describes your situation:
10. I am able to log into Account Management with my temporary passcode but not the trading platform
a. Confirm whether your account has been approved. Accounts which have not been approved or which have been approved after the daily cut-off time are provided access solely to Account Management and not the trading platform (access will be provided next day if approved after daily cut-off time)
b. Confirm whether your account has been funded with the deposit minimum of USD 10,000, or equivalent. Accounts which have not been funded at this level are provided access solely to Account Management and not the trading platform.
c. Confirm whether your account remains open. Accounts which have been closed, either by customer action or by IB due to no balance, no longer have access to the trading platform but continue to have access to Account Management in order to obtain activity and tax statements. Access to Acount Management is provided using the same User Name and password combination which existed when the account was open and do not require the use of the security device.
d. If you are attempting to log into your paper trading account, make sure that you are not using the user name and password combination from your live account.
a. If operating with a temporary passcode, note that alpha characters are case sensitive and are required to be input in upper case format
b. If operating a security card or electronic device, note that there are no spaces between characters
a. For security purposes, all requests for assistance with a user name and/or password must be initiated via telephone and require prior verification of the account holder’s identity. Requests are to be directed to one of the regional Customer Service Centers.
a. Confirm that your Internet connection is active (test by accessing another website). If you are unable to establish an Internet connection you will need to contact your Internet Service Provider for assistance.
b. Confirm whether you are operating under a firewall which is blocking the TWS connection. If so, the firewall would need to be re-configured in order to provide access.
c. Ports 4000/4001 are being blocked. These ports are often blocked from public connections such as hotels, cafes, etc. and required to be open to accommodate Inbound/Outbound TCP protocol. In addition, if you have a router connected to your computer, these ports must be open on the router.
a. If you are temporarily without possession of your security device, interim access may be provided by contacting your regional Customer Service Center via telephone where, once your identity has been verified, you will be provided with a temporary passcode.
The temporary passcode is a static alpha-numeric code which replaces the randomly generated code provided through your security device and which will provide full access to Account Management and the trading platforms for 2 days. Should a lengthier period of interim access be necessary, and to obtain enhanced protection, it is recommended that you use the temporary passcode to log into Account Management and print out the on-line security card which will operate as a replacement to your security device for up to 3 weeks.
After the expiration of the temporary passcode or on-line security card, or if you regain possession of your security device beforehand, you will need to log into Account Management and select the menu option to re-activate your security device.
a. In the case of a lost or damaged security device, you will need to contact our Customer Service center to arrange for a replacement and to provide for interim access. As the time frame for shipping a replacement device may range form 3 to 14 days depending upon your country of residence, interim access is provided via an on-line security card. The on-line security card may be retrieved for printing or saving as an image to your desktop once a temporary passcode has been provided for Account Management access.
a. The temporary passcode is intended to provide full access to both Account Management and the trading platforms for a period of 2 days. After 2 days, the temporary passcode may no longer be used to access the trading platforms but may be used to access Account Management for an additional period of 10 days. The Account Management access, however, is limited solely for the purpose of printing or saving the on-line security card.
If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days. If you are unable to log into Account Management, you will need to contact your regional Customer Service center for assistance.
a. The on-line security card is intended to provide full access to both Account Management and the trading platforms for a period of 21 days. This time frame, while limited, is intended to provide sufficient opportunity for the account holder to either regain possession of a temporarily unavailable security device or request and receive a replacement device.
If you are unable to log in using the on-line security card, you will need to contact your regional Customer Service center for assistance and to provide information as to the status of your permanent security device.
a. Depending upon your location, the physical security device should be delivered to the address of record on your account within 2 days in the case of US residents and within 2 weeks for all other accounts. It’s important to note that the permanent devices are set to automatically activate after a set timeframe if not yet manually activated by the account holder. If this is the case and you encounter difficulties logging into your account, please contact our Technical Assistance Department at 1-877-442-2757.
10. I am able to log into Account Management with my temporary passcode but not the trading platform
a. If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days.
If you are unable to log into Account Management, you will need to contact your regional Customer Servicecenter for assistance.
a. To activate either a replacement device or one which was temporarily unavailable and which required issuance of a temporary passcode, you will need to log into Account Management and select the reactivate security device menu option. Once reactivated, neither the temporary passcode nor on-line security card will remain operable.
