Abstract: A method for group authentication using a public key cryptosystem that includes a public key and a private key, comprising the steps of providing a Private Key Share to a Tool of each Entity of each Group encompassed by a Boolean Expression of a prescribed Rule based upon the private key, encrypting a random number using the public key of the public key cryptosystem to generate a ciphertext challenge at a Verification Device, conveying the ciphertext challenge to the Tool of each Entity in communication with the Verification Device, generating a response to the ciphertext challenge using the Private Key Share of the Tool of each Entity in communication with the Verification Device, transmitting the response generated by each Entity in communication with the Verification Device to the Verification Device, combining the responses received from the Entities in communication with the Verification Device, determining whether any combination of the responses equals the random number wherein any combination that equ

Abstract: An integrated circuit card includes a microprocessor, an integral memory element, and a pseudo-random number sequence file stored therein. The pseudo-random number sequence file includes a pseudo-random number sequence generator operable to generate an instance of a sequence of apparently random numbers when executed, values for the parameters of the pseudo-random number sequence generator, and an Initial Value for the sequence of random numbers. The microprocessor is operable to execute an operation on the pseudo-random number sequence file in response to a predetermined input from an external source.

Abstract: An enterprise communications system for implementing, accessing, using, and managing enterprise-specific resources includes one or more Mandate clients, each Mandate client including a wireless communication device and an enterprise-specific identity module installed in such wireless communication device, a digital mobile communications network operative to provide a wireless communications link to each Mandate client, a Mandate server interfaced with the digital mobile communications network and interconnected to the enterprise-specific resources, each enterprise-specific identity module having stored therein a unique authentication key and cryptographic algorithms, the unique authentication key and the cryptographic algorithms of each enterprise-specific identity module being available to the digital mobile communications network and the Mandate server, wherein each Mandate client, the digital mobile communications network and the Mandate server utilize the unique authentication key and the cryptographic al

Abstract: A smart card capable of having a plurality of applications has a memory that is logically partitioned into a plurality of memory blocks. A control program allocates one or more blocks to one of the applications, upon a declaration from the application of its memory needs, and schedules the applications for execution. Only those applications whose memory needs have been satisfied are scheduled. The control program receives a permission request packet from a host, addressed to an application, and passes the permission request packet to the application. When the control program receives a permission packet from the addressed application after the addressed application has had its declared memory needs satisfied, the control program sends the permission packet to the host. A virtual machine is used to execute one or more of the applications. The control program communicates with the virtual machine to control scheduling to predetermined time granularity.

Abstract: A smart card-based information processing system capable of compatibly operating under a standard requiring the complete processing of one command at a time, but which is also capable of queuing commands received from applications external to the smart card that it cannot immediately process. When the smart card receives a command that it can process immediately, it processes the command and returns an appropriate status response word. When the smart card receives a command that it cannot process immediately, it places the command in a command queue and returns a status response word indicating that it cannot immediately process the command, along with an index/identifier defining the memory location of the queued command in the command queue. If the smart card also has data or other information developed as a result of executing a previously queued command, it transmits an appropriate proactive command to the application, so that the application can send a command to request the information.

Abstract: A smart card capable of having a plurality of applications has a memory that is logically partitioned into a plurality of memory blocks. A control program allocates one or more blocks to one of the applications, upon a declaration from the application of its memory needs, and schedules the applications for execution. Only those applications whose memory needs have been satisfied are scheduled. The control program receives a permission request packet from a host, addressed to an application, and passes the permission request packet to the application. When the control program receives a permission packet from the addressed application after the addressed application has had its declared memory needs satisfied, the control program sends the permission packet to the host. A virtual machine is used to execute one or more of the applications. The control program communicates with the virtual machine to control scheduling to predetermined time granularity.