Abstract: A security node disposed in the telecommunications network connecting calling and called parties transforms information (which can be voice, data, facsimile, video and other types of calls or messages) encrypted in a first format to (a) encrypted information in a different format or to (b) non-encrypted information, and vice-versa. The node is accessible from any location connected to the network. By routing calls or messages originated by the calling party and destined for the called party via the security node, and providing appropriate control signals to the node, the information may be encrypted only over a portion of the transmission path between the parties, and clear over the remainder of the transmission path. Alternatively, the information may be encrypted in different portions of the path using different encryption algorithms.

Abstract: A Cable Television (CATV) Converter box or computer has a Smart Card connector mounted in a bottom wall thereof. The Converter box includes a case having a top wall, the bottom wall, and four side walls, a main printed circuit (PC) board mounted within the Converter box and parallel to the top and bottom walls thereof, and a Smart Card connector. The Smart Card connector is mounted directly onto the PC board and within a protrusion of the bottom wall of the Converter box. The Smart Card connector defines an opening which is aligned with a first end of a groove defined in the bottom wall of the case for receiving a Smart Card storing a predetermined signal security decrypting algorithm. A second end of the groove is either formed in one of the side walls of the device or in the bottom wall of the case. The Smart Card is installed by inserting the Smart Card in the groove and placing it into contact with the Smart Card connector.

Abstract: A tamperproof arrangement for an integrated circuit device. The arrangement includes a package and lid fabricated of heavy metals to prevent X-radiation or infrared detection of circuit operation. Sensors and control circuitry are located on the integrated circuit die itself which detect increased temperature and radiation and clear or zeroize any sensitive information included within the integrated circuit device. Electrode finger grids above and below the integrated circuit die detect physical attempts to penetrate the integrated circuit die. Critical circuit functions are segregated from non-critical functions. Power applied to the integrated circuit device is monitored and separated for critical and non-critical circuit functions.

Abstract: This invention relates to personal computer systems and, more particularly, to such a system having security features enabling control over access to data retained in such a system.

Abstract: A gasoline service station includes gasoline dispensers and a PIN pad including keypads for receiving personal identification numbers and assembled into a network for securely communicating personal identification numbers from the PIN pads and dispensers to a host computer over unsecured data lines. The PIN pads and dispensers each include means for encryption and outputting of personal identification numbers. A security module includes means for decryption of data associated with each PIN pad and dispenser in a process for the respective PIN pads and dispensers and means for encryption of data associated with the host computer in a process which is different from its decryption of data associated with the PIN pads and dispensers.

Abstract: A hard drive which prevents data access operations on the hard drive upon power up until the user enters a password. When the computer system is powered up, the hard drive spins up and is tested, responding only to a limited set of commands that do not permit data storage or retrieval operations. The password is located on the hard disk itself to prevent bypassing the hard drive's security using a new computer environment. When the user enters the correct password, the hard drive unlocks and operates as a conventional hard drive. If the user chooses, the hard drive may be unlocked by either of two passwords, one defined by the user and the other by the manufacturer. To obtain access to data areas during a locked state, a wipe data command is provided which overwrites all user data on the drive and unlocks the drive.

Abstract: An electronic circuit or device is protected from tamper and/or theft of data contained therein by encapsulation in a hosing and a polymer cradle. The cradle comprises a transducer capable of generating a voltage, detection means to detect said voltage, and protection means associated therewith to destroy and/or alter said circuit, device and/or information and/or record said voltage, characterized in that said transducer is a polymeric pressure/voltage and/or temperature/voltage transducer associated with said detection means such that on alteration of pressure or temperature applied to said transducer beyond pre-set limits, said voltage is sensed by said detection means thereby activating said protection means.

Abstract: The invention relates to a portable user controlled pointing peripheral device enabling connection of a memory and/or microcomputer module (44) to a processing machine, without requiring a specific connector and/or interface circuit, while preserving the portable nature of such a module. The main characteristic of the invention resides in the fact that the device additionally constitutes a pointing peripheral (47, 48, 49), such as a "mouse", and the electronic circuits of the device are arranged to use conductors (RXD, TXD, RTS, DTR) which are shared between the machine and the device in order to permit the use of the pointing functions and the use of the functions of the module.

Abstract: This invention relates to personal computer systems and, more particularly, to such a system having security features enabling control over access to data retained in such a system. This invention contemplates protecting a personal computer system which has the capability of becoming a secure system from being placed into that condition by an attack on an unsecured machine. Additionally, in a network environment, it is important to maintaining network security that any given particular system be uniquely identified to the network, in order to guard against the substitution of an insecure "alternate" which would open the network to attack through an insecure system. This invention contemplates provision for such identification in a secure manner.

Abstract: A digital interface for allowing a first device which receives and sends information serially to communicate with a second device which receives and sends information in parallel. The first device may be an encryption unit while the second device may be a relay/responder/reporter connected to a transmitter or a digital signal processing unit. The digital interface comprises an erasable programmable logic device which during an uplink data transfer performs the function of converting parallel logic signals, that is control signals and data words provided by the relay/responder/reporter, for example, to commands and data to be transmitted by a transmitter serially to the encryption unit. In a like manner, the erasable programmable memory device during a downlink data transfer converts serial commands and data received from the encryption unit by a receiver to a parallel format for transmission to the relay/responder/reporter.

Abstract: A protection system for protecting valuables, such as, for example, drugs, banknotes, checks, bank cards or securities, that are contained in a physically impregnable storage container or box, in which the contents of the storage box are destroyed upon the detection of an attempted unauthorized access to the storage box. The storage box includes an internal management system that controls transitions between a plurality of operating modes in accordance with particular events, the validity of the transitions being authenticated and verified. If the contents of the storage box are destroyed, data stored in a memory of the internal management system is also erased, so as to prevent the unauthorized extraction of the data, which could possibly be used to gain access to other portions of the protection system.

Abstract: A single remote control transmitter can advantageously control three units including a cable tuner/descrambler, a video recorder/player and a television receiver. One of these three units, preferably the video recorder/player, is a master unit. It receives remote control signals from a hand held remote control transmitter. The master unit is initialized using on screen prompts to learn the remote control signals for the other units which are slaves. The prompts ask the user to operate various controls on the remote control transmitter of the proposed slave unit, while receiving and analyzing the remote control transmissions. This permits the master unit to build a translation table for control of the slave units. The master unit may include a read only memory of remote control codes for a number of possible slave units. The master unit can abort the initialization process if it recognizes the requested remote control transmission is according to one of the remote control codes stored in the memory.

Abstract: A group of seven (7) PINs are assigned to each card holder. The group of PINs are to be used in a specific sequence changing each calendar day. If a PIN is used out of sequence, then access to the charge or credit card is denied by the card company. A grid of numbers and letters are used to vary the PIN each day. The grid includes seven (7) rows and seven (7) columns with the numbers 1 through 7 randomly selected and placed in the seven (7) rows and columns. The rows and columns, when utilized correctly, allow the card holder to access seven three-digit codes. The codes or personal identification numbers must be used in the correct sequence which is determined by the number of uses per calendar day.

Abstract: This secret communication apparatus used in an audio and data transmission system has scramble/descramble circuits formed of programmable logic means. A control circuit in the apparatus instructs the programmable logic means to alter the arrangement of scramble/descramble circuits in accordance with the control signal received from the partner of communication. The control circuit in the partner's apparatus also instructs its programmable logic means to alter the arrangement of scramble/descramble circuits.

Abstract: An audio system for conducting confidential multi-person conferences without the need for secure meeting facilities. Means for silently accepting spoken speech from a number of participants and making that speech available to all participants through headphones. Means for controlling the volume of the speech for each participant. Means for indicating which participant(s) are speaking. Means for masking any incidental speech escaping from masks. Means for alerting participants when speech is escaping from a mask. Means to allow modular expansion of the number of participants. Means for recording the meeting for later listening or transcription.

Abstract: In order to facilitate the installation of off-premises equipment which distributes CATV signals from a distribution cable to subscribers and to allow different subscribers to receive different classes of service (basic service alone or with one or more premium or pay-per-view channels), a pair of housings are used, one containing circuits for tapping the signals from the cable and the other for electronics hardware which processes the signals and distributes them to subscribers in accordance with the class of service which is ordered by the subscribers. The housing containing the tapping circuits is permanently connected to the cable and need not be removed or replaced when connecting additional subscribers or changing the class of service. The housing containing the electronics hardware for processing the signals may be attached to or along side of the first housing. The first housing may be suspended from the strand which supports the cable in an aerial mount configuration.

Abstract: The postage meter incorporates an accounts verification system which ensures that an authority, such as the U.K. General Post Office, is provided with regular and accurate readings without the need for a meter, such as a postage meter, to be read by the authority's inspector. The account verification provides for a system in which the meter is disabled at preset intervals and in which operation of the meter for the next interval is conditional upon the user providing an accurate meter reading to the authority. The meter includes a funding register and a machine inhibiting system. The machine inhibiting system is operable to inhibit operation of the meter following a predetermined period of time or a predetermined number of machine cycles of operation of the machine. A processor system is provided for generating a code dependent on the accounting data stored in the funding register.

Abstract: A high security bolt lock is described having the ability to reencrypt the combination code for the lock each time a key is used and thus partially defeat the use of an unauthorized key. The lock may be operated by a temporary one time use key. The key for the lock carries a data storage means and battery to provide a date/time stamp and key identification for any key used. The key and lock may be coded to only allow access in a particular time block, or only in conjunction with an other key. The access to the lock may be controlled such that two keys must be used in a prescribed order to gain access through the lock.

Abstract: A delay means in a security apparatus for identifying a code of characters to authenticate access to the apparatus by matching an entered code with a stored value by a procedure which so enciphers the coded information as it is entered into the apparatus and displayed on a keyboard that disclosure of the code by observation of the entry operation is prevented. A delay timing circuit produces a delayed signal in the matching of the entered code and the stored value so that the length of the period of time for authentication is controllable.

Abstract: The present invention provides an intrusion barrier for protecting against mechanical or chemical intrusion into an electronic assembly, especially one containing volatile memory. It includes a screen material surrounding the electronic assembly which screen material has formed thereon fine conductive lines in close proximity to each other. The lines are formed of conductive particles of material dispersed in a solidified matrix of a material which loses its mechanical integrity when removed from the screen. An electrical supply and signal detection circuit is provided which generates an output signal responsive to a given change in resistance of the conductive lines, such that if the resistance changes are a result of a mechanical or chemical attack, a signal is generated which can cause the erasure of the volatile memory.

Abstract: A security module for a radio telephone prevents a KEY code stored in a non-volatile memory from being read out for illicit use. The security module deletes the KEY code stored in the memory when accessed from the outside. Hence, although a KEY code can be written to the memory or the operation of the memory can be tested from the outside, the KEY code is prevented from being read out by an unauthorized person.

Abstract: A method for backing up and erasing encryption keys that provides a backup power supply (110) so that keys stored in a memory (104) will not be lost inadvertently, while still permitting keys to be erased, either in response to a low battery condition in the absence of the main supply (101), or in response to an external key erase input (105).

Abstract: A video recorder, adapted to receive descrambled signals from a remotely controllable tuner/descrambler for multi-channel cable or satellite signals for recording or provision to a T.V. receiver, includes a future program memory which may be programmed by an operator to cause the system to record a predetermined channel at a predetermined future time. To ensure that the descrambler is tuned to the proper channel when a signal requiring descrambling is to be recorded, the video recorder is connected to a remote control transmitter which is energized at the time occurrence of a program to be recorded to send a signal to the remote control receiver of the tuner/descrambler causing it to select the appropriate channel for descrambling.

Abstract: A tamper-resistant package for protecting information stored in electronic circuitry is described. An energy source provides energy (electrical current, optical energy, microwave energy or RF energy, for example) within a region occupied by the circuitry to be protected. The energy is applied to an energy distribution system comprising a path or paths for energy distribution. Sensing means are provided which respond to the distribution system for sensing an intrusion. The distribution system includes an arrangement for changing or altering the path or paths over which the energy travels or altering the topology of the path or paths. The sensing means is informed of the appearance of the distribution system and senses an intrusion by comparing the appearance of the path(s) with the predicted appearance. In one embodiment, electrical current is selectively applied to a subset of electrical conductors.

Abstract: A cable television reverse manifold system is coupled between first and second diplexers of off-premises subscriber service providing equipment. The diplexers separate the transmission path between a headend and a subscriber into downstream or forward and upstream or reverse transmission paths. In one embodiment, the reverse manifold apparatus combines signals from at least one subscriber for transmission to the headend. In another embodiment including a data receiver and a controller, the off premises service providing equipment may be controlled by the subscriber. In yet a third embodiment, a radio frequency transmitter is coupled between the controller and the upstream diplexer which may actuate a plurality of simultaneous data transmissions over separate data channels in the notoriously noisy subsplit 5-30 megahertz transmission spectrum.

Abstract: This key management system effectively solves the key distribution problems of distance, time, operator error, and security risk by transferring encryption keys with appropriate system information between a key management controller (101) and a remote keyloader (109). The keyloader (109) is then coupled to a communication device to transfer (327) the keys and receive (329) identification information from the communication device. The keyloader (109) then sends (323) the information to the key management controller (101) that controls the distribution of the encryption keys and collection of the communication device identifications.

Abstract: A tape cassette which locks up to prevent more than one play through of the information carrying portion of the cassette has a label with an encrypted unlocking combination for the cassette along with a memory address for a key code needed to decrypt the combination. A locked up cassette may be inserted in an unlock terminal which reads the information on the label and looks in memory at the address on the label for a key code. The returned key code is used to decrypt the unlocking combination read from the label and the unlocking combination is applied to unlock the cassette. A host may intermittently communicate with the unlock terminal in order to update the memory of the unlock terminal.

Abstract: In the copy prevention apparatus and its method, it is discriminated whether an object is legally copied or not; a constant event is generated at or below a predetermined probability; and an abnormal operation is executed only if the two conditions of the object having been determined as an illegal copy, and the event having been generated, are satisfied. Therefore, even if the object is determined as an illegal copy, the abnormal operation is not always executed, but executed at or below a predetermined probability. Although the occurrence of the abnormal operation can be indicated to the user immediately, it is also preferable to keep the abnormal operation occurrence secret for a time and inform the user of the occurrence an appropriate time later.

Abstract: A keyboard arrangement, such as for a computer or the like, has a number of keys arranged in rows and columns. The keys of each row are associated with a respective conductor and the keys of each column are associated with a respective conductor. Each key, when depressed, interconnects the two conductors. An interrogator is provided to interrogate the rows respectively by transmitting pulses to the rows and to interrogate the columns, to determine the presence of a transmitted pulse. The interrogator is adapted to interrogate the rows in a random or quasi-random order during successive cycles of operation.

Abstract: A security system to prevent un-authorized access to the hard drive of a personal computer system. The security system consists of a plug-in expansion card containing a program on an EPROM, a device driver program which requests the password for access, and other programs to establish the valid passwords for the security system, provide an audit trail of computer access, and other functions. The program on the EPROM disables the floppy drives until a valid password has been entered, forcing the booting process to be controlled and forcing the computer to boot off of the hard drive and request a password via the device driver. A skilled programmer, even with a complete knowledge of the security system's details of operation, can not write a program which can be booted off of a diskette in order to bypass the security system. The passwords and user IDs for the security system are stored on the hard drive of the computer inside the device driver program.

Abstract: A computer or communication system having physically secure vault means which include data source, receiver and decoder-encoder (cryptosystem). Data outside the vault means is coded and thereby protecting its loss from electronic tapping. Clear data inside the vault means is protected by the vault.

Abstract: Data transmission to an aircraft is secured by encrypting the data between a remote data source and the aircraft. The encryption is initiated when a random number is coupled to the remote location where it is encoded with the data in accordance with a preselected encryption sequence. The encoded data, after transmission to the aircraft, is decoded in the same sequence so that the original data may be retrieved.

Abstract: A configurable connector between two or more devices with at least one of the devices being capable of programming the connector through an interface therewith. The connector contains programmable electronic circuitry capable of being instructed by the device whereby the connector assumes a desired connecting configuration and/or function. In one embodiment the connector is programmed to inquire and determine the configuration of the device to which it is connected. With the results of its analysis the connector adapts the necessary timing, pin-outs, voltages, and other parameters to assure proper communication between the connected devices. In other embodiments the connector contains electronic components to add specific functions for data exchange, such as data buffering, data encryption and the like. In addition, the connector is programmable with interchangeable pin designations thereby obviating the need for rewiring for different applications and physical connections.

Abstract: Equipment for use in CATV lines and a system for distribution of CATV signals and for power to operate CATV line equipment having active devices which require power is described. The system distributes CATV signals to subscribers who have ordered different levels of service (basic service without premium channels or different groups of premium channels). Housings are located in proximity to the premises of both actual subscribers and potential subscribers, and have like covers which contain tapping electronics (a directional coupler, line equalizers and power bypassing circuit). The cover has ports at opposite ends and an additional port at one end. The tapping electronics is located on a seizure board having seizure blocks spaced from each other along one edge of the board. The seizure board is rotatable ninety degrees (90.degree.

Abstract: According to the invention, the keyboard consists of a matrix of keys and variable visible indicia. Each of the variable visible indicia is associated with a key. Upon each keystroke on the keyboard, the system randomly changes the positions of all of the indicia on the matrix. Because the true value of any particular key is independent of the value displayed on the variable visible indicia, a casual observer can not learn the keystrokes being entered into the keyboard. If the code entered at the keyboard matches a stored value, the user is granted access.

Abstract: Different digital radio transceiver front panel escutcheon plate modules are provided for different optional transceiver configurations. A security circuit is provided in each module in addition to user controls and associated circuitry. The security circuit is connected to communicate serial data signals to and from a digital signal controller which is part of the main transceiver circuitry. The controller is capable of performing any of various basic and option functions under control of program control instructions stored in an associated non-volatile memory. Upon initial application of power to the transceiver, the controller transmits a sequence of digital signals to the security circuit. The security circuit permutes the sequence of signals into a different sequence, the specific permutation used being arbitrarily complex--and dependent on transceiver "option" features to be enabled. The security circuit communicates the permuted signal sequence back to the controller.

Abstract: Aircraft often include a central memory which distributes data to a number of communication, navigational and other utilization devices. In order to achieve a high degree of security for data transmission from the memory to the utilization devices, data subsets are distributed to the utilization devices in parallel so that any radiation generated from the parallel branches results in superposition of individual data signals. In effect, a jumbled resultant signal is produced which is difficult or near impossible for unfriendly surveillance equipment to decipher.

Abstract: A data entry keyboard apparatus includes a key switch array (18) in a keyboard unit (12) connected via a cable (14) to a tamper-resistant module (28) which contains control circuitry (16). The control circuitry (16) includes a random pattern generator (30) which generates successive random patterns, causing the selection of a single column and a random pattern of rows, thereby effecting the simulation of key actuations. An EXCLUSIVE-OR gating network (56a-56d) is effective to distinguish a genuine key actuation from simulated key actuations. The invention prevents the ascertainment of actuated keys by unauthorized tapping connections applied to the keyboard unit (12) or the cable (14).

Abstract: A telecommunications security device for use on the communication medium includes a first and a second security unit each arranged to be inserted into for example the telephone line adjacent a user device. The units are identical and therefore either can act as a central unit for example for a computer access port with the other providing one of a set of remote units. Each unit includes a separable memory module with all the modules having a memory storing identical information. The information stored includes a plurality of pairs of random signals one of each pair providing a request signal and the other the security code. The central unit on receipt of a telephone call provides a signal requesting an ID code from the remote unit and on receipt of the ID code issues from one of the pairs the security code request signal. On matching the received code with the expected code a transmission gate is opened.

Abstract: A tamper-resistant package for protection of information stored in electronic circuitry includes apparatus for distributing electro-magnetic energy within a region occupied by the circuit to be protected. A sensing arrangement senses the distribution of the energy. In a preferred embodiment, electrical current is distributed through a coil or coils within which the circuit to be protected resides. The sensor includes an integrating circuit, and the output of the integrating circuit is presented to both a sample and hold circuit and to a comparator. The comparator has high and low reference input terminals which are fed from a voltage divider to which is also applied an output from the sample and hold circuit. The high and low reference inputs to the comparator are, by reason of the sample and hold circuit, adaptive. The comparator produces an output if its input is outside the limits established by the high and low reference inputs; that output of the comparator is taken as evidence of tampering.

Abstract: A security system for a protected premise has a controller which receives data, over a pair of line conductors, from the addressed transponder of a series of addressable transponders located within the protected premise and connected across the line. To enhance the security of the system and to prevent compromising, the data is sent to the controller in coded form that changes from time to time in accordance with a secret code schedule. A decoding or decrypting system in the controller operates in accordance and in step with the same secret code schedule to decode the received coded data to recover the original information. The coded data may represent an encrypted signature of the addressed transponder which signature is decrypted to check the validity of the replying transponder.

Abstract: The present invention relates to electronic locks and electronic locking systems, to electronic locking systems which use remotely encoded keycards and, in particular, to an electronic locking system which utilizes public key cryptography.

Abstract: A device (10) for protecting stored sensitive data includes a housing (12) formed by six plates P1-P6 inclusive each carrying a conductive path segment formed by thick film deposition techniques and each having a winding configuration covering substantially the entire inner surface of the plate. The four side plates P2-P5 inclusive are mounted on a printed circuit board (PCB 14) which is mounted on the base plate (P6). The conductive path segments on the side and base plates (P2-P6 inclusive) are interconnected to form a wire mesh by conductive epoxy material connecting the path segments on the side and base plates (P2-P6 inclusive) with conductive tracks on the PCB (14). The conductive path segment on the top plate (P1) is connected by conductive wires (58, 60), which extend through plated through holes (B9, B10) in the PCB (14).

Abstract: In order to protect secret information in the electronic storage medium, the storage medium is provided in a housing protected against access. This housing contains one or more detector elements, via which erasure of the memory contents is initiated when unauthorized access is detected. The detector elements are connected with a clock unit which sets these elements into operation for short periods of time at certain time intervals. This clocked operation allows for the energy consumption of the overall arrangement to be reduced many times over without any essential restriction of security.

Abstract: A security device (10) contains electronic circuitry (84) including a resettable memory (110) which stores sensitive data. The device (10) includes a housing (11) formed by six ceramic plates (P1-P6) each having provided thereon a pair of serially connected conductive path segments formed in separate, superposed layers and arranged in complementary winding configurations. Between the conductive path segments is disposed a conductive sheet. The conductive path segments are serially interconnected by interconnection blocks (N1-N7) and the conductive sheets are serially interconnected by further interconnection blocks (N8-N14). If an attempt to penetrate the housing results in either of the conductive path segments being interrupted or shorted to the conductive sheet, a reset signal is generated to reset the resettable memory (110) thereby erasing the sensitive data stored therein.