Abstract: A data obfuscation method, apparatus and computer program product are disclosed in which at least selected text entities such as words or abbreviations in a document are obfuscated to prevent the disclosure of private information if the document is disclosed. A user establishes various configuration parameters for selected text entities desired to obfuscated. The document is processed and text entities matching the configuration parameters are tagged for obfuscation. The tagged entities are then substituted in the document with obfuscating text. The obfuscating text can be derived from a hash table. The hash table may be used to provide a reverse obfuscation method by which original data can be restored to an obfuscated document.

Abstract: A printing service system is provided. A print terminal includes a data transmission and reception unit for transmitting and receiving image data to and from a server and a key input unit for inputting an address of a recipient authorized to print the image data. The server includes a data accumulation unit in which image data uploaded from the print terminal is accumulated for each ID, a code conversion unit for converting an ID and a password into a code, a mail output unit and a FAX output unit for transmitting the code to the address, and an image management unit for, when the print terminal returns the code to the ID and the password and transmits the ID and the password, performing authentication, reading the image data corresponding to the ID, and returning the image data to the print terminal.

Abstract: An image forming apparatus has a micropattern reading unit, an encoded image generating unit and a code printing control unit. The micropattern reading unit reads a micropattern of a sheet. The encoded image generating unit generates an encoded image. The encoded image has the micropattern and a private key of a user. The code printing control unit prints the encoded image on the sheet to produce a certificate sheet.

Abstract: Conventional virus detection software monitors incoming arrivals of network traffic. Retroactive analysis and/or monitoring of previously accepted traffic is not included in the scope of protection. A retroactive virus detection and propagation history tracking mechanism provides identification of successive recipients of a newly discovered virus which may have eluded detection during the lag time prior to effecting the detection of a new virus. A propagation history maintains a set of recipients receiving a potentially harmful transmission. Upon detection of a particular transmission or portion thereof as being a virus, the propagation history contains a set of infected recipients, which the tracking mechanism notifies so as to perform remedial action and contain the virus to the known set of infected recipients. In this manner, configurations of the invention maintain a set of successive recipients of a virus, and retroactively track and contain the newly propagated virus once detected.

Abstract: The present invention relates to a method of document character box dropout. A character box within the document is printed in thermosensitive ink which is rendered transparent upon the document's heating by a heating element or device. The heating process may be triggered once the scanning unit has detected the document. Following the heating process, pertinent information within the character box is then scanned without the character box.

Abstract: In a personal information access system 1, a bar-code information output 106 of an information processing device 10 makes bar-code information by associating personal information with term information defining a valid period of the personal information, a password, and terminal-identification information unique to an access terminal 20 permitted to gain access, and the bar-code information is printed on a paper medium M. The access terminal 20 displays only the personal information permitted to output by an output controller 204, on a display part 205. When the personal information is bar-coded with the valid period being set, in addition to encryption, the security level of personal information is synergistically enhanced and it is feasible to ensure prevention of leakage of personal information to third parties.

Abstract: A technique for executing customized code on off-loaded or retrieved documents in a document processing environment. The present invention provides a code component in the form of an agent that can be automatically executed relative to a document before a document is off-loaded, after it has been off-loaded or after it has been retrieved. Preferably, the code component is in the form of a plug-in. Embodiments of the present invention enable advantageous pre-processing and post-processing of documents in the document processing environment. Invocation of at least one agent and execution of customized code at a well-defined time, i.e., synchronous with the underlying document processing step or event.

Abstract: An image decrypting apparatus derives spectral reflectance of the face of an original on the basis of obtained original image data, built-in light source data and basis function data, and obtains weighted coefficients of each pixel as object color component data. The apparatus stores a file including the basis function data used at the time of obtaining the spectral reflectance as a key file, and stores a file including the object color component data as an encrypted file. From each of the key file and the encrypted file, the original image data cannot be reproduced. By using the key file and the encrypted file in a correct combination, the original image data can be reproduced. In such a manner, the original image data can be protected.

Abstract: A system and method are presented for assuring electronic documents containing active content. Aspects of the system and method are directed to storing a copy of input data called by the active content in a first invocation of the electronic document, then, on subsequent invocations of the electronic document, using the stored copy of the input data instead of calling for input data from the computing environment. In this way, the output from the subsequent invocations of the electronic document are the same as the output from the first invocation of the electronic document.

Abstract: A method and system of selectively and securely enabling an added or premium functionality in a printer can be created by transmitting or inputting to the printer an electronic key correlated to the unique serial number stored in that printer. In this way, the key used to activate an added or premium functionality in a particular printer cannot be used to activate the same functionality in any other printer. This prevents the unauthorized activation of added or premium functions in other printers.

Abstract: A digital video camera includes an image sensor capable of producing a frame of video data representing an image viewed by the sensor, an image memory for storing video data such as previously recorded frame data in a video frame location of the image memory, a read circuit for fetching the previously recorded frame data, an encryption circuit having an encryption key input connected to receive the previously recorded frame data from the read circuit as an encryption key, an un-encrypted data input connected to receive the frame of video data from the image sensor and an encrypted data output port, and a write circuit for writing a frame of encrypted video data received from the encrypted data output port of the encryption circuit to the memory and overwriting the video frame location storing the previously recorded frame data.

Abstract: An image processing apparatus for encrypting a profile for color matching, generates a table which stores change information of the profile, changes data in the profile on the basis of the generated table, and encrypts the table by a predetermined algorithm.

Abstract: An encrypted/authenticated mobile application part (MAP) protocol message is sent between a first network element (42A) of a first telecommunications network (40A) and a second network element (42B) of a second telecommunications network (40B). The first network element uses a master security association to derive a connection-specific security association, and includes in the encrypted/authenticated MAP message a parameter obtained from the connection-specific security association. Upon receipt at the second network element, the master security association is used to derive a connection-specific security association for use by the second network element. The second network element uses the connection-specific security association to decrypt/decode the MAP message.

Abstract: Output image data, which is composed of a plurality of pages, and output configuring information are stored temporarily in a file spool in an intermediate data format using an information processing apparatus. The size in which a prescribed page is to be output is acquired by a spool file manager from the temporarily stored output configuring information of the output image data in the intermediate data format. The size of each page of the output image data is changed by a despooler based upon the output size acquired.

Abstract: Confidential information is protected from unauthorized or accidental disclosure by requiring a successful comparison of near end and far end passwords prior to a facsimile transmission of the confidential information.

Abstract: A printer for receiving document data from a computer system and printing an interface onto a surface. The interface is based on the document data, which includes identity data indicative of at least one identity. The identity is, in turn, associated with a region of the interface. The interface also includes coded data. The printer includes a coded data generator configured to generate the coded data based at least partially on the identity data. A printing mechanism in the printer prints the interface onto the surface, including printing the coded data using an ink including an infrared-absorbing dye.

Abstract: In an image input apparatus provided with an image pick-up unit, an image signal generated by the image pick-up unit is converted into digital information. The digital information is then encrypted by using an encryption key. The encryption key is input into the image input apparatus from an external apparatus, such as an IC card. The image input apparatus erases the encryption key after the digital information has been encrypted. With this arrangement, unauthorized users can be prevented from obtaining the encryption key, and different encryption keys can be assigned to a plurality of users. Thus, the privacy and the security of the image information can be enhanced, and the copyright of the image information can be protected more reliably.

Abstract: A printer for receiving document data from a computer system and printing an interface onto a surface. The interface is based on the document data, which includes identity data indicative of at least one identity. The identity is, in turn, associated with a region of the interface. The interface also includes coded data. The printer includes a coded data generator configured to generate the coded data based at least partially on the identity data. A printing mechanism in the printer prints the interface onto the surface.

Abstract: A printer for receiving document data from a computer system and printing an interface onto a surface. The interface is based on the document data, which includes identity data indicative of at least one identity. The identity is, in turn, associated with a region of the interface. The interface also includes coded data. The printer includes a coded data generator configured to generate the coded data based at least partially on the identity data. A printing mechanism in the printer prints the interface onto the surface.

Abstract: A digital measurement apparatus measures a physical measurement object, provides a digital signature of public-key cryptography to measured data of a thus-measured physical quantity, and manages the measured data. The apparatus generates at least a pair of a public key and a private key, to be used for the digital signature of the public-key cryptography, through a key generating algorithm.

Abstract: A portion of an image is selected as an arbitrary rectangle indicated by diagonal coordinates, and this portion of an image is encrypted and embedded in the original rectangular image portion, thus accomplishing partial encryption of the image. This is done by an image encryption device, in which an partial image data selector, encryptor and decryptor are connected via a memory; and a display, auxiliary (external) memory, keyboard, mouse, image scanner, camera, etc. are also connected. At the time of decryption, the encrypted rectangle is decrypted and returned to its original state.

Abstract: A client/server networking topology comprising a trusted server agent (TSA) (e.g., software application) that runs either at a client node or at a node in close proximity to the client and provides various trusted services to the client on behalf of a trusted server. In instances where the node in which the TSA software runs (i.e., the client or a node in close proximity) may be untrusted, and/or unreliable, methods are provided for making the TSA software running on the untrusted and/or unreliable node provide trusted and reliable services. In one aspect of the invention, a method for providing trusted service in a client/server system comprises the steps of: providing at least one client; providing at least one trusted server (TS); providing at least one trusted server agent (TSA) which is executing on or near the at least one client; providing a trusted service by the at least one TSA to the at least one client on behalf of the at least one TS.

Abstract: In one embodiment of the invention, an apparatus for secured facsimile transmission, includes: a destination facsimile (fax) machine configured to receive a private key and generate a public key associated with the private key; and an originating fax machine configured to communicate with the destination facsimile via a network and to receive the public key, wherein the originating fax machine is configured to encrypt a fax data with the public key by use of an encryption algorithm and the destination fax machine configured to decrypt the fax data with the private key by use of a decryption algorithm.

Abstract: An on-line disc printing network comprises a portal computer, a print manager computer 301 and at least one print service provider computer 302. The portal computer 300 and print merchant computer 301 are connected by a relatively high bit rate capacity communications link 302. The print merchant computer and print service provider computer 303 are connected by a conventional low bit rate capacity communications link 304, e.g. a 25 kilobits per second modem. The print manager computer and print service provide r computer have respective first and second level cache data storage devices for storage of encrypted content data transferred from the portal to the print manager computer to the print service provider computer. Local storage of encrypted content data at the first and second level cache devices reduces the need for transmission of high volumes of content data over the communications links.

Abstract: Systems and methods for managing data in compliance with regulated privacy, security, and electronic transaction standards. One or more computer devices are used in a system to manage data in compliance with regulated privacy, security, and electronic transaction standards. In one implementation, a fax machine is used to provide a transmission set to a computer system, which acknowledges receipt of the set and preserves the transmission set for a period of time to satisfy a regulation. The system includes a single point of entry for external and/or internal requests, and/or a single point of exit for transmissions of information, wherein the transmissions include individually identifiable patient information to legitimate patient-approved requests. Information is de-identified so as to be selectively used and/or sold.

Abstract: A method and apparatus using a duplex printer to print indicia on the back side of a printed page to provide privacy for confidential information appearing on the front side and/or indicia to indicate that information which previously appeared on the back side of a printed sheet is not relevant to the information appearing on the front side of the printed sheet.

Abstract: An image decrypting apparatus derives spectral reflectance of the face of an original on the basis of obtained original image data, built-in light source data and basis function data, and obtains weighted coefficients of each pixel as object color component data. The apparatus stores a file including the basis function data used at the time of obtaining the spectral reflectance as a key file, and stores a file including the object color component data as an encrypted file. From each of the key file and the encrypted file, the original image data cannot be reproduced. By using the key file and the encrypted file in a correct combination, the original image data can be reproduced. In such a manner, the original image data can be protected.

Abstract: An imaging system is provided with an authentification data storage that stores a plurality of pieces of authentification data in relationship to user IDs respectively representing owners of the plurality of communication devices. Further included is a reading system that reads out one of the plurality of pieces of the authentification data corresponding to a user ID if the user ID is transmitted from the external device in relationship to the image data, and a searching system searches for a communication device with which a connection authentification is established using the authentification data read out by the reading system within a predetermined communication area with respect to the imaging system. An imaging system forms an image represented by the image data transmitted in relationship to the user ID from the external device when the communication device is detected by the searching system.

Abstract: The invention relates to an apparatus and method for enhancing the security of selected information associated with a negotiable document, such as the monetary value of a cheque. In the invention, one or more security features are printed or applied onto the cheque. One such security feature is an encrypted control code. The preferred embodiment employs a secret key cryptographic scheme to encrypt the monetary value and thereby generate a first control code which is printed on the cheque. When the cheque is presented for payment, a validator, such as bank or cheque clearing house, employs a verification system having a copy of the encryption key to read the monetary value from the cheque and re-encrypt it according to said scheme to generate a second control code. The cheque is not honored if the first and second control codes are not identical. Another security feature is a security image, composed, for instance, from a foreground image of the monetary value superimposed over a background motif image.

Abstract: The invention provides methods for embedding digital watermarks for authentication of printed objects, and corresponding methods for authenticating these objects. One aspect of the invention is a method of embedding a digital watermark in a digital image to be printed on an object. The method embeds an auxiliary signal in the digital image so that the auxiliary signal is substantially imperceptible, yet machine readable. It converts the image to a halftone image using an inherently unstable halftone screen structure that is likely to cause ink flow errors when reproduced. The errors introduced by reproducing the unstable halftone screen structure incorrectly are automatically detectable by reading the auxiliary signal.

Abstract: A method of authenticating a video image created by a camera (V) or similar video device. The image is formed into a first 2-dimensional pixel array (A1) with each pixel (pm,n) represented by a data word of a predetermined length. Additional data words including event information are added to this 2-dimensional array (A1). The formatted array is converted into a second 2-dimensional array (A2) which may be made smaller than the first array by eliminating rows and columns from the formatted array. A first linear vector (A3) is created using the data words in the second array, and a second linear vector (A4) is created by repositioning the data words from the first linear vector in a random pattern. A checksum is created by summing the contents of all of the data words in the second linear vector beginning at a location established by a pre-established formula. A header (H) is formed using the resulting checksum, information identifying the device used to create the image, and the time the image is formed.

Abstract: The present invention provides systems and methods for electronic commerce including secure transaction management and electronic rights protection. Electronic appliances such as computers employed in accordance with the present invention help to ensure that information is accessed and used only in authorized ways, and maintain the integrity, availability, and/or confidentiality of the information. Secure subsystems used with such electronic appliances provide a distributed virtual distribution environment (VDE) that may enforce a secure chain of handling and control, for example, to control and/or meter or otherwise monitor use of electronically stored or disseminated information. Such a virtual distribution environment may be used to protect rights of various participants in electronic commerce and other electronic or electronic-facilitated transactions.

Abstract: A cryptographic device and corresponding method for producing a cloaked watermark which is a private watermark having the functionality of a public watermark. In one embodiment, the cryptographic device comprises an internal memory and a processor contained in a package. The internal memory provides a region for storage of key information used at least to produce the cloaked watermark. The processor is coupled to the internal memory and is responsible for producing a cloaked watermark based on the key and for inserting the cloaked watermark into an outgoing data set.

Abstract: The present invention provides an apparatus and method for confirming, timestamping, and archiving documents using telecopiers (e.g., facsimile machines). A user sends a document to a timestamping service via facsimile, which archives the transmission with a timestamp. A submission receipt, containing size-reduced images of the submission and a document identification value (DIV), is prepared and sent to the sender. The DIV can later be submitted to the timestamping service to obtain verification that the document was received at the indicated time. In addition, the invention allows for various other forms of document transmission, document identification, and timestamp verification. The invention is thus useful in any situation where it is desired to prove that a document was in existence at a given time. Other embodiments of the invention provide senders of facsimile and telecopier transmissions with confirmation that their transmissions were received successfully.

Abstract: A facsimile apparatus is provided with changeover means that makes it possible to pass signals through or to bypass a coder, which encrypts transmission information, and a decoder, which decodes encrypted information that has been received. Whether or not a facsimile apparatus belonging to another party has an encrypting/decoding processing function is verified by a pre-procedure signal. If the other party's apparatus possesses an encrypting/decoding processing function, control is performed in such a manner that encrypting/decoding processing is applied solely to an image signal and a training-check signal transmitted before transmission/reception of the image signal, and encrypting/decoding processing is not applied to a procedure signal which accompanies transmission reception transmission/reception of the image signal.