Abstract: A token issuer and an authentication device provide an identity confirmation device. A token issuer is programmable by a central identity provider to issue certification tokens for use in e-commerce whereby transactions can be certified with suppliers without need for additional communication with a central server.

Abstract: Security check method and apparatus reduces problems that can arise if the user security data set becomes known by unauthorized persons. To address this problem only part of the user data set is recorded in insecure sections of the system. For example, a security check preventing unauthorized remote access to a shared computer is provided by capturing a user data set representing a user's iris, operating the user's personal computer to select only a portion of the captured data set requested by the shared computer and transmitting the portion along a telecommunications line. The shared computer derives partial data sets from stored user data sets using a similar selection to that used by personal computer and compares the partial data set it has derived with the partial data set transmitted by the personal computer in deciding whether to grant access. Point-of-sale devices and cards recording only partial user data sets are also disclosed.

Abstract: Security check method and apparatus reduces problmes that can arise if the user security data set becomes known by unauthorized persons. To address this problem only part of the user data set is recorded in insecure sections of the system. For example, a security check preventing unauthorized remote access to a shared computer is provided by capturing a user data set representing a user's iris, operating the user's personal computer to select only a portion of the captured data set requested by the shared computer and transmitting the portion along a telecommunications line. The shared computer derives partial data sets from stored user data sets using a similar selection to that used by personal computer and compares the partial data set it has derived with the partial data set transmitted by the personal computer in deciding whether to grant access. Point-of-sale devices and cards recording only partial user data sets are also disclosed.

Abstract: In a payment validation system, a mobile phone or other communications terminal associated with a particular user is used. A vending node communicates with a validation platform which either returns a telephone number to be displayed for the user to call or which calls the alleged users phone or terminal for confirmation.

Abstract: An optical apparatus records light reflected from one or more of a user's facial features. While the image is captured, visible light from a display or other scene to be viewed by the user passes to the user's eye. A portable iris pattern capture device is used. Near-infrared light is directed towards the user's eye from where it is reflected back into the apparatus. Visible light from an LCD display mounted at the rear of the apparatus travels out to the user's eye from the apparatus. A hot mirror inside the apparatus directs the near-infrared light reflected from the user's eye to a camera unit, and does not significantly attenuate the visible light emanating from the display.

Abstract: Methods and apparatus for providing a security check are disclosed. Many conventional security checks require the recording or transmission of a user data sets associated with respective authorized users. A problem arises with these systems if the user data set becomes known by unauthorized persons. In order to address this problem the present invention proposes the recording or transmission of only part of the user data set in insecure sections of the system. For example, a security check preventing unauthorized remote access to a shared computer (20) is provided by capturing a user data set representing a user's iris, operating the user's personal computer (10) to select only a portion of the captured data set requested by the shared computer (20) and transmitting the portion along a telecommunications line (16).