Security features of the Northern Gateway Toll Road website – NZ Transport Agency

Using the Northern Gateway Toll Road website is safe and secure. The site’s security features protect your information when you log in, and any transactions you make on the site.

Updated: 12/11/2009 10:00 a.m.

Secure transactions

All toll road online transactions are managed through a secure server, so you have peace of mind when paying for your tolls online.

Protected personal information

Access to your toll road account is controlled by your unique username and password. Your information is further protected by encryption – a technique of coding information being sent using random mathematical ‘keys’. We use strong 128-bit SSL encryption to keep your information secure. This essentially means your information travels over the internet as a sophisticated code that only we can unscramble.

With encryption:

• your username and password can’t be read by anyone else
• your transactions can’t be read by anyone else
• new ‘keys’ are created every time you log in, and destroyed every time you log out.

Our certificate has been ‘digitally signed’ by Verisign – the most recognised issuer of digital certificates in the world. Most browser software is written to automatically recognise any certificate ‘signed’ by Verisign. When viewing our certificate make sure that:

• it has been issued to tolling.nzta.govt.nz
• the ‘issued by’ section refers to Verisign
• the date specified is within a valid date range.

How to tell your information in encrypted

• Check the site address is preceded with https:
• Confirm the site certificate details. You can do this by right clicking on the page and viewing Page Info/Security (Firefox) or viewing Properties/Certificates (Internet Explorer).

Credit card security

If you choose to use your credit card to buy a toll, fund your account payments or pay a toll payment notice, you’ll need to add the card’s security code (CSC) to complete your transaction. This is a three or four digit number that appears on your credit card, but is not part of the credit card number. The CSC is known by a few different names depending on the credit card - Card Verification Code (CVC) by Visa, Card Validation Code (CVV) by MasterCard, Card Identification Number (CID) by American Express.

The CSC is an extra security feature of your credit card. Since it is never printed as part of the receipt or on credit card statements, this ensures the card must be present in order to make a purchase.

Automatic timer/log out

If your toll road online session remains inactive for 20 minutes, you’ll be automatically ‘timed out’.