Abstract: Systems, methods and computer program products for firewall use of certified binaries. Exemplary embodiments include a method including reading a plaintext component from a digital signature, searching the plaintext component for an identifier, reading in a TotalTCPIPPorts field for a total number of sockets to be opened for an application, reading in ports and descriptions for each of the ports, displaying information from the plaintext component up to a block including the identifier, the port being opened and the port description, prompting an instruction, displaying on the screen information from the plaintext component up to a block including the identifier, displaying a warning that the application is opening additional ports beyond the default number specified displaying a warning that opening the additional ports should be avoided and prompting the instruction.

Abstract: The main CPU executes Fourier transform to the partial image, then performs strict spectrum analysis 1 for judging the presence/absence of data at a coordinate position designated in advance on a Fourier transform plane with high resolution for judging the presence/absence of prohibition of duplication, then judges whether duplication-prohibited data exists or not, and clears both the partial image and the document image if it is judged that duplication-prohibited data exists. If it is judged that duplication-prohibited data does not exist, the main CPU executes spectrum analysis 2 for broadly inspecting the existence of a periodic component instead of lowering the resolution from the spectrum analysis 1 and judges whether a structure other than DC component exists or not.

Abstract: Network registration for a device is achieved by providing the device with an RFID chip bearing a MAC address, cryptographic capabilities and keys, and then disposing the device near a registration server (such as a home network server/server TV) to cause the information on the RFID chip to be automatically transferred to the server and thus execute registration of the device on the network automatically, relieving a person from having to enter long strings of numbers.

Abstract: An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user's account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user's transaction account number.

Abstract: An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user's account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user's transaction account number.

Abstract: An animation data sales mediation method, an animation data sales mediation system and so on are capable of providing large capacity data such as animation data by a large capacity storage medium in advance, rendering the time required for transfer of the data via the network extremely short by passing a key code for viewing the animation data via the network, rendering the labor and costs required for sales of the animation data extremely low, and providing the latest unauthorized copy technology to the animation data. The animation data sales mediation system has the steps of having a user terminal send to a large capacity data sales server an online access code corresponding to the large capacity data one to one, having the large capacity data sales server send the key code to the user terminal, having the user terminal encrypt and store the key code, and having the animation data used by using the key code.

Abstract: A keyboard encryption system that enables encryption of keystrokes prior to their entry into a remote desktop. An encryption device is attached via a keyboard cable to a keyboard at one end and to a keyboard socket on a computer on the other end. A remote desktop connection allows for communication between the computer and a remote desktop server. The encryption device contains encryption software to encrypt each keystroke as it is received. The encryption device contains a unique serial number that allows it recognized by decryption software installed on the remote desktop server. The serial number is the primary key for the decryption software to decipher the encrypted keystrokes.

Abstract: A system and method are directed to managing text input. An image of a virtual keyboard is displayed to a user. The user enters text by using the virtual keyboard image and an input device, such as a pointing device. The image is repeatedly altered, such as by position, size, angle, or shape. One technique includes altering the image after each selection of a virtual key is made. One aspect of the invention includes determining sensitive input fields within a page and facilitating the use of the virtual keyboard for those fields. The invention can be used to improve security when the possibility of keyboard sniffers exists.

Abstract: A control unit is described for technical installations, devices and/or machines having a microprocessor, a programmable memory and a housing enclosing the microprocessor and programmable memory. Data lines lead out of the housing for connection with an external device for writing data to the programmable memory. The control unit is enclosed in the housing such that the operability of the control unit is at least partly destroyed when the housing is opened. The control unit furthermore has a check device that checks for authorization a write access by which data are written to the programmable memory over the data line, and causes the data to be written to the programmable memory only in case of a successful check of authorization.

Abstract: A security device watches over the secure functionality in a computer system. This “watcher” security device may be integrated within the computer system or may be separate from it. The security device queries the secure functionality to determine whether the state of the secure functionality is acceptable. If no satisfactory state exists, or if no response is received, then a signal is transmitted. The signal may be auditory (a buzzer) or visual (a flashing light) in order to signal to any user that the secure functionality has been compromised. Optionally, human input devices may be disabled, or a monitoring service notified, in conjunction with or in lieu of the signal. If the secure functionality includes a secret shared between the secure functionality and the user, then the security device may signal the secret. For example, where the secret is visual, the security device may display the secret.

Abstract: A system used in a retail environment, such as a fuel dispensing environment, for providing secure communication of payment information to a host computer. The system includes at least one keypad device configured to receive and encrypt personal information according to a first encryption scheme to produce encrypted personal data. The keypad device is further operative to generate a local zone emulated message in a message format of a second encryption scheme, the local zone emulated message containing the encrypted personal data. A site controller is in communication with the keypad device to receive the local zone emulated message. The site controller is configured to provide a message in the second encryption scheme to a security module for decryption and re-encryption in the first encryption scheme. An emulator is associated with the site controller to emulate the security module.

Abstract: A method for determining an access code comprising a predetermined number of input symbols. The access code is determined from input symbols and the position thereof when inputted. The number of possible input positions for the input symbols is greater than the predetermined number of input symbols. An input device detects the input symbols and the positions thereof in an input field. An access code is determined therefrom and compared in a comparator with a references access code. If compatibility is established, access to the system is authorized.

Abstract: A combination heat sink and electromagnetic interference shield device is provided for a point of distribution card of a television receiver. The combination POD card heat sink and EMI shield device includes a combined thermal transfer and electromagnetic conduction portion that provides thermal and EM coupling or contact between an enclosure of the POD card and the metal control module enclosure of a television. Configured metalwork of the combination heat sink and EMI shield device provides conduction of heat from the POD card to provide the heat sink and short circuiting of developed currents to provide EMI shielding. The combined thermal transfer and EM conduction portion provides a low impedance connection between the POD card and the surrounding module metalwork of the television. This low impedance path provides a short for circulating current in the exposed metalwork that diminishes or essentially eliminates EMI.

Abstract: An electronic settlement system/method includes a keyboard having multiple card identification and charging functions. The electronic settlement may include charges with a smart card, an RF card, or a magnetic card using the keyboard with an electronic cash management server via a web server interlocked with a PC. A settlement approval step may be included to access the electronic commerce server via a web server through a line separate from the electronic cash management server for choosing an item and a settlement type. Scanning the charged card according tithe settlement type using the keyboard may be employed for getting a settlement approval and confirmation. A safe and convenient method/system is provided using a keyboard to identify magnetic cards, read/write smart cards and RF cards. A user PC is coupled with the keyboard through electronic cash management servers, financial settlement institute servers, and/or electronic commerce servers on the Internet.

Abstract: A printer that can reduce a manufacturing cost is obtained. The printer according to the invention includes a casing as a base member, a movable member and a spring. The movable member is movable with respect to the casing. The spring is located between the casing and the movable member. The casing is provided at a position opposed to the lower end of the spring with a projected portion (circular convex portion) arranged to pinch the lower end of the spring. The position of the spring with respect to the casing is fixed by the state in which the lower end of the spring is arranged radially inside the circular convex portion. The movable member is provided at a position opposed to the upper end remote from the lower end of the spring with a fixing portion (projected fixing portion) for fixing the upper end of the spring.

Abstract: Disclosed is a hand cryptographic device for keeping a secret code inside confidential and being convenient to be carried about. The hand cryptographic device of the present invention includes an input module, a memory and a user interface. The input module is used for being inputted the secret code and a command of accessing the secret code. The memory stores a control program of the hand cryptographic device and the inputted secret code. The user interface provides the secret code to the user when the user inputs the command of accessing the secret code. The input module may comprise a keypad device for inputting the command of accessing the secret code.

Abstract: A memory device and system for managing links to content or digital assets in an on-line, network or software application environment. The links and digital assets may be represented by unique identifiers and pointers or similar data. The memory device can take the form of a piece of jewelry, handheld game device, memory stick, toy or similar item. The memory device can include communication ports to provide connectivity to multiple devices including other memory devices, computers and similar electronic devices. The memory device can also include an input mechanism that allows a user to select an output of the memory device. The memory device can include a sensor or similar component that detects and receives non-digital input. The non-digital input can come from any source including sources embedded within pieces of jewelry, toys, electronic devices or similar items. The non-digital input can be received and stored as a digital value or used to modify an existing digital value.

Abstract: Methods and systems for protecting data that is intended for use and processed on video or graphics cards are described. In one embodiment, data is provided into a first portion of memory on a video card and the first portion has a first level of protection. The data is operated upon to provide resultant data on the video card. A determination is made as to whether a second portion of the memory on the video card has a level of protection that is compatible with the first level of protection. If the first and second levels of protection are compatible, the resultant data is provided into the second portion of the memory on the video card.

Abstract: Methods and systems for protecting data that is intended for use and processed on video or graphics cards are described. In one embodiment, a system comprises a graphics processor unit (GPU) for processing data that is to be rendered on a monitor. Memory is operably associated with the graphics processor unit for holding data that is to be or has been processed by the GPU. A display converter converts digital data to signals for use in rendering the data on the monitor, and a memory controller is configured to receive encrypted data and decrypt the encrypted data into protected regions of the memory.

Abstract: A computer system with a monitor display, comprises a decoder unit configured to decode video data containing digital watermark information to derive decoded data, and configured to determine, based on information included in the video data, whether or not first certification for certifying that the video data is legitimately reproduced data succeeds, and a graphics controller which determines, using the digital watermark information, whether or not second certification for certifying that the video data is to be protected from being copied succeeds, the graphics controller converting the decoded data into a protected decoded data from being copied and outputting the protected decoded data to the monitor display if the first certification and the second certification succeed, and the graphics controller inhibiting the decoded data from being output to the monitor display if the first certification fails and the second certification succeeds.

Abstract: Methods and systems for protecting data that is intended for use and processed on video or graphics cards are described. In one embodiment, unencrypted data is provided in a video card memory. The unencrypted data is encrypted on the video card and transferred off of the video card.

Abstract: Methods and systems for protecting data that is intended for use and processed on video or graphics cards are described. In one embodiment, data that is stored in memory other than a video card memory is encrypted and transferred over a bus to the video card. The encrypted data is decrypted on the video card independent of a graphics processor unit (GPU) on the card needing to process the encrypted data. The decrypted data is stored in the video card memory.

Abstract: A modular radio includes a chassis holding a network infosec unit module; a power amplifier module; and at least one transceiver module. Each of the modules include a separate housing and is removable and replaceable. The modules communicate via a bus and are reconfigurable along the bus. The transceivers support a channel that may be reprogrammable by the network interface.

Abstract: Methods and systems for protecting data that is intended for use and processed on video or graphics cards are described. In one embodiment, a video card comprises a graphics processor unit (GPU) for processing data that is to be rendered on a monitor. The GPU comprises encryption and decryption functionality sufficient to encrypt and decrypt data on the video card. Memory is operably associated with the GPU for holding data that is to be or has been processed by the GPU. The memory comprises protected and unprotected portions. A display converter is provided for converting digital data to analog signals for use in rendering the data on the monitor. A memory controller is configured to protect the protected portions of the video memory.

Abstract: Methods and systems for protecting data that is intended for use and processed on video or graphics cards are described. In various embodiments, data that is intended for use by a video card can be encrypted such that any time the data is provided onto a bus (e.g. a PCI or AGP bus) between the video card and the computer system, the data is encrypted. For example, when data is moved from memory on the video card to the system's memory (e.g. when it is mapped to the system's physical memory) and vice versa, the data is in encrypted form and thus protected.

Abstract: In an IC card 30 is sealed an IC chip 70 provided with an exposure sensor 84. When exposure sensor 84 detects that IC card 30 has been opened, exposure sensor 84 outputs an exposure detection signal to a CPU 76. In response to the exposure detection signal, CPU 76 provides a predetermined operation, such as erasure of data in a non-volatile memory 78. As such, the data in non-volatile memory 78 cannot be obtained if IC card 30 is improperly opened to check the data in non-volatile memory 78. Thus the IC card can obtain an enhanced data security.

Abstract: A method and system is provided for selectively denying access to encoded data. Encryption is used to protect secured data on any of a number of media devices in a system and in which unsecured data is not encrypted. The classified data is encrypted and then transmitted for storage on the medium. The encryption key is stored only in volatile memory on the target device connected to the medium during a mission. The encryption key is known only in a location physically distant from the target device during a mission. Resources are provided for mission personnel to immediately delete the encryption key from volatile memory upon perceiving a threat, as well as causing automatic deletion of the encryption key upon a power loss to the target device in order to make the encrypted data unavailable to any personnel (whether authorized or not) at the location of the target device.

Abstract: A tamper detection system includes a trigger mechanism system and a detection circuit that operate in combination to protect an integrated circuit from attack. The detection circuit connects to the trigger mechanism system that is basically a protective mesh that consists of two separate loops of wire held in close proximity to each other and an optional ground layer. The mesh is such that an attempted penetration is highly likely to cause an open of either loop or a short of one loop to the other. The detection system recognizes shorts and opens in the mesh. The detection circuit is intended to be very simple in its operation it that it does not require a sophisticated stimulus and response set to operate. It is designed to be polled on a regular basis for indications of a change in its operation.

Abstract: An apparatus and method for controlling access to, or interaction with, a variety of different types of devices is provided. The system includes a plurality of different lights that flash sequentially, the lights being distinguishable on the basis of color, location within a light pattern, or labeling. Alternately the system includes a single light that sequentially flashes different colors. The user enters data into the system by responding to particular lights in accordance with a predetermined light sequence. Alternately, the user enters data by responding to a particular light where each light corresponds to a predefined response. In general, a user responds to a particular light by triggering a response with the system's controller while the particular light is lit or before the next light in the sequence becomes lit. A user can trigger a response in a variety of ways, ranging from blinking an eye to pressing or otherwise operating a mechanical switch.

Abstract: Use of an especially small-sized and valuable display device (b 31) is limited to persons knowing a password, not by any requirement that a password (33) always be entered when the display device (31) is switched on, but rather detecting, the detachment of the display device (31) from the equipment (35-39) controlling it and measuring its time of being detached, for limiting the use of the display device (31) on the basis of a certain predetermined and adjustable time limit which, when exceeded, requires the password be entered.

Abstract: A secure circuit is protected from reverse engineering by sensing radiation to which the circuit is normally not exposed, but which is present in its analysis. The circuit is modified in response to such radiation so that it is not compromised by subsequent analysis. The secure circuit can be implemented as a volatile memory having a power supply circuit that is interrupted in response to radiation exposure. Alternately, a circuit used to burn out the secure circuit, or to reprogram the circuit in the case of a programmable memory, could be actuated by the radiation exposure. Reprogramming mechanisms include an operational amplifier with its input state controlled by a photodiode, a random access memory cell with inherently photosensitive transistors, and a photosensitive transistor switch connecting a multi-vibrator to a memory address line.

Abstract: A source of MPEG2 video data is connected with a dedicated AV device or personal computer by means of an IEEE 1394 interface. A transmission unit in the source has an IEEE 1394 encryption unit and a sending I/F unit. A reception unit varies between the dedicated AV unit and the personal computer. In the reception unit of the dedicated AV device, a receiving I/F unit and a decryptor are integrally incorporated into one semiconductor chip and an MPEG2 decoder is incorporated into one semiconductor chip. In the reception unit of the personal computer, the receiving I/F unit is formed of one semiconductor chip, and the decryptor connected to the I/F unit through a bus, and the MPEG2 decoder are formed of one semiconductor chip. Thus, data before decryption will not appear on the bus, which prevents MPEG2 video data from being taken out of the computer for illegal copying purposes.

Abstract: A modular radio includes a chassis holding a network infosec unit module; a power amplifier module; and at least one transceiver module. Each of the modules include a separate housing and is removable and replaceable. The modules communicate via a bus and are reconfigurable along the bus. The transceivers support a channel that may be reprogrammable by the network interface.

Abstract: The integrated circuit has a circuit with information that is protected by a covering shielding level. A network with a large number of nodes is formed in the shielding level. Some of the nodes are linked to a comparator for a nominal-actual comparison. The comparator checks for a characteristic output current from each node. Errors on the characteristic output current lead to a change in the information which is stored in the circuit, so that the latter is protected against manipulation or analysis.

Abstract: Data entry apparatus comprising a display screen device, a touch pad mounted over the display screen device, and an application processor coupled to the touch pad and to the display screen device. The application processor has an application program processing module and a touch pad controller module. The application program processing module displays on the display screen a predefined data entry screen having a prearranged set of functional components and sends to the touch pad controller module a hot spot command defining a plurality of touch pad hot spots corresponding in area and location to the set of functional components. The touch pad controller module senses a touch event on the touch pad corresponding to one of the touch pad hot spots and sends to the application processor a touch event message identifying the touch pad hot spot corresponding to the touch event.

Abstract: A relation between the data process contents in an IC card chip and the consumption current of the IC card chip is reduced. Prior to executing an input data process of the IC card chip, the input data is transformed to thereby reduce the relation between the process data and the consumption current of the IC card chip. After the transforming process, the transformed data is untransformed to obtain a correct process result.

Abstract: A relation between the data process contents in an IC card chip and the consumption current of the IC card chip is reduced. Prior to executing an input data process of the IC card chip, the input data is transformed to thereby reduce the relation between the process data and the consumption current of the IC card chip. After the transforming process, the transformed data is untransformed to obtain a correct process result.

Abstract: A secure storage device with the identical external dimensions, form factor and hardware connectivity configuration of a standard removable storage device, for securing digital data such as digital images from digital cameras at the acquisition stage. Original digital camera data is saved in the memory of the secure storage device after performing one or more security functions, including encryption, creation of an authentication file, adding data to the image data such as fingerprinting, and adding secure annotations such as separate data included in an image header. These processes are transparent to a host device receiving secure data from the storage device because standard protocol is used to write to the secure storage device. The device prepares original authentication data from original digital camera data, and encrypts and stores both the original authentication data and the original image data.

Abstract: A trainable transmitter comprises a transmitter, code-generation circuitry and a removable, plug-in data module. The data module includes information necessary for generating a code for a specific security system, such as a garage door opener. Preferably, the data includes a cryptographic algorithm and the frequency at which the wireless signal is to be generated. The code-generation circuitry accesses the data in the data module to generate a code, which is then transmitted by the transmitter. A variety of data modules are provided. A user installs a data module which corresponds to the security system to be accessed.

Abstract: A security system comprises a card containing access information, a reader for reading the card, a power source, a locking mechanism, and a first circuit for operating the locking mechanism. The power source is coupled to the first circuit to provide power to the first circuit. The power source is also coupled to a wake-up circuit to provide power to the wake-up circuit. The wake-up circuit detects the presence of an object and enables the reader to ascertain whether the object is the card. A method for operating the security system comprises first determining that electromagnetic energy is not being detected by the wake-up circuit, then determining that electromagnetic energy is being detected by the wake-up circuit, then determining that electromagnetic energy is not being detected by the wake-up circuit, and then ascertaining whether the object is the card.

Abstract: A quantum cryptographic communication channel having: a light source; a reflector; first and second sources each capable of generating a pair of photons emitted in the form of signal and idler light beams when energized by the light source, the first and second sources being arranged relative to each other such that the idler beam from the first source is incident upon the second source and aligned into the idler beam of the second source and the signal beams are directed by the reflector to converge upon a common point; a light modulator for changing the phase of the idler beam from the first source between first and second phase settings before being incident upon the second source; a controller for controlling the timing of the phase change from the first phase setting to the second phase setting; first and second detectors for detecting the incidence of the signal beams from the first and second sources; and a beam splitter disposed at the common point for directing the signal beams to the first detector

Abstract: A quantum cryptographic communication channel having: a light source; a reflector; first and second sources each capable of generating a pair of photons emitted in the form of signal and idler light beams when energized by the light source, the first and second sources being arranged relative to each other such that the idler beam from the first source is incident upon the second source and aligned into the idler beam of the second source and the signal beams are directed by the reflector to converge upon a common point; a light modulator for changing the phase of the idler beam from the first source between first and second phase settings before being incident upon the second source; a controller for controlling the timing of the phase change from the first phase setting to the second phase setting; first and second detectors for detecting the incidence of the signal beams from the first and second sources; and a beam splitter disposed at the common point for directing the signal beams to the first detector

Abstract: An improved keyboard comprises a base, and a plurality of keys, and a grid surrounding some of the keys which can be projected onto a screen, and in which some of the keys control the functions of others of the keys.

Abstract: A long code scrambler has been provided to scramble the data bits prior to QAM mapping. Different data rates are accommodated by using different long code m-tuples sampled at the modulation symbol rate, where m equals 2, 4 or 6 for 4, 16 or 64 QAM, respectively. In order to support 1XEV-DV users employing multiple Walsh code channels, a long code 6-tuple sample is permutated, to further randomize the QAM symbols. As appropriate for the modulation order, 2, 4 or 6 bits of the permutated 6-tuple are applied to the data sequence. That is, in addition to randomizing the modulation symbols for a given code channel, each code channel will likely have unique QAM symbols at any given symbol time.

Abstract: A telephone disconnect system having a current-sensitive relay which automatically operates to electrically connect the telephone lines to the telephone network when the cradle switch of the telephone is closed, and which automatically operates to electrically disconnect the telephone lines from the telephone network when the cradle switch is open thus providing protection against the use of a cradled telephone as a clandestine listening device.

Abstract: A secure computer system including a host computer unit having embedded in a single package, a host CPU, and an authenticating and security controlling computer, a verification unit and a smart card accepting connector providing a public-key protected communication channel between the authenticating and security controlling computer and the verification unit, in a first mode of operation of the secure computer system, and between the host CPU, via the authenticating and security controlling computer, and a smart card, via smart cord terminal, in a second mode of operation of the secure computer system, wherein communication between the authenticating and security controlling computer and the smart card terminal is unmediated, and wherein the verification unit is operative to verify the identity of the authenticating and security controlling computer in the first mode of operation.

Abstract: A method and apparatus for controlling access to confidential data are disclosed. The disclosed apparatus includes a non-volatile memory for storing data and a logic circuit for controlling access to the data contained in the memory. The logic circuit selectively accesses the memory to determine whether at least a portion of the data contained in the memory comprises confidential data by analyzing a property inherent in the accessed data. The disclosed method includes the steps of: defining a predetermined section of the programmable memory as a repository for confidential data; addressing the predetermined section of the programmable memory; calculating a number of data blocks in the predetermined section having a predetermined characteristic; comparing the calculated number to a threshold value; and defining the memory as including confidential data in the predetermined section if the calculated number has a predetermined relationship to the threshold value.

Abstract: The present invention is directed to a touch screen system and method for entry of encrypted and non-encrypted information. The system and method comprise a sensing means for detecting the coordinates of a touch on the touch screen device, a toggling means for toggling between encryption and non-encryption mode, and a processing means for encrypting data associated with the coordinates of the touch and transmitting the encrypted or non-encrypted data to a remote processor.

Abstract: A microcontroller communicating via a data path and an address path with a memory block containing encrypted contents, the microcontroller including the capability for detecting resets effectuated in the wake of an unauthorized attempt to gain access to the encrypted contents and the capability of evading such an unauthorized attempt.

Abstract: A security apparatus including a number input device (302), an address register (312) responsive to the number input device, an encryption schema memory (316) addressable by the address register to produce an output code and a relative address code, and address incrementing logic (310) responsive the relative address code and operative to increment the address register. The apparatus also preferably includes a PIN register (304) coupled to the number input device, a public code register (306) coupled to the number input device, and merging logic (308) merging outputs of the PIN register and the public code register to be input to the address register. The apparatus also preferably includes an output shift register operative to shift out the output code of the encryption schema memory. The encryption schema memory can be read only memory, writeable memory, or both.