Abstract: An electronic content storage and exchange system includes an interface configured to send and receive messages; a database and a controller. The database includes a plurality of records, each record representing a respective virtual storage media and including at least: a respective unique identifier assigned to the virtual storage media; a respective Private key and certificate assigned to the virtual storage media; a current content value, and a log of content transfers. The controller executes transfer-in and transfer-out processes in respect of each of the virtual storage media. The transfer-in process includes steps of: receiving a content transfer message including at least a message content to be transferred and the respective identifier assigned to a recipient virtual storage media; accessing the record representing the recipient virtual storage media; and storing the message content in the current content of the recipient virtual storage media.

Abstract: A secure asset storage and transfer system. A first display displays a first bar code encoding a request message including an asset value amount to be transferred. A first camera-equipped device is configured for: reading the first bar code, decoding the first bar code to recover the request message; generating a value transfer message for transferring asset value amount to be transferred from a storage medium associated with the camera-equipped device; encoding the value transfer message to generate a corresponding second bar code; and displaying the second bar code on a second display. A second camera-equipped device is configured for reading the second bar code, and decoding the second bar code to recover the value transfer message.

Abstract: An electronic content exchange system includes a communications medium and at least two storage media. Each storage media includes an interface configured to send and receive messages, a memory storing a current content, a respective unique identifier, and a log of content transfers; and a controller. The controller receives a content transfer message including at least a message content to be transferred, and executes a Transfer-in process to increase the current content by the message content to be transferred and record information of the transfer in the log. The controller receives, via the interface, a content transfer request message including at least a message content to be transferred, and executes a Transfer-out process to generate and send a content transfer message including the message content to be transferred, decreasing the current content by the message content to be transferred; and recording information of the transfer in the log.

Abstract: A security domain control method includes defining a sequential series of security domains; designating one of the security domains as a current domain; generating a plurality of security tokens under the current security domain, each security token being configured to enable a party to exchange cryptographically secured messages with another party that is holding any one of: a token generated under the current security domain; a token generated under at least one next security domain in the series; and a token generated under at least one previous security domain in the series; and subsequently designating a next one of the security domains in the series as a current domain.

Abstract: A secure asset storage and transfer system. A first display displays a first bar code encoding a request message including an asset value amount to be transferred. A first camera-equipped device is configured for: reading the first bar code, decoding the first bar code to recover the request message; generating a value transfer message for transferring asset value amount to be transferred from a storage medium associated with the camera-equipped device; encoding the value transfer message to generate a corresponding second bar code; and displaying the second bar code on a second display. A second camera-equipped device is configured for reading the second bar code, and decoding the second bar code to recover the value transfer message.

Abstract: An electronic content exchange system includes a communications medium and at least two storage media. Each storage media includes an interface configured to send and receive messages, a memory storing a current content, a respective unique identifier, and a log of content transfers; and a controller. The controller receives a content transfer message including at least a message content to be transferred, and executes a Transfer-in process to increase the current content by the message content to be transferred and record information of the transfer in the log. The controller receives, via the interface, a content transfer request message including at least a message content to be transferred, and executes a Transfer-out process to generate and send a content transfer message including the message content to be transferred, decreasing the current content by the message content to be transferred; and recording information of the transfer in the log.

Abstract: A secure asset storage media. A secure module includes a memory storing at least a DuplicateCounter and a HashLog, the HashLog comprising a respective hash of each value transfer message sent or received by the secure asset storage media, the DuplicateCounter storing a count of duplicate hash values in the HashLog. A non-volatile memory is disposed external to the secure module. The non-volatile memory stores a transaction log comprising a copy of each value transfer message sent or received by the secure asset storage media and its respective hash value. A controller is configured to control communication between the secure module and the non-volatile memory to record information of a received value transfer message in the secure module and the transaction log.

Abstract: A security domain control method includes defining a sequential series of security domains; designating one of the security domains as a current domain; generating a plurality of security tokens under the current security domain, each security token being configured to enable a party to exchange cryptographically secured messages with another party that is holding any one of: a token generated under the current security domain; a token generated under at least one next security domain in the series; and a token generated under at least one previous security domain in the series; and subsequently designating a next one of the security domains in the series as a current domain.

Abstract: An electronic asset exchange system includes a communications medium and at least two electronic purses. Each electronic purse includes an interface configured to send and receive messages, a memory storing a current asset value amount, a respective unique identifier, and a log of asset transfers; and a controller. The controller receives an asset transfer message including at least an asset value amount to be transferred, and executes a Transfer-in process to increase the current asset value amount by the asset value amount to be transferred and record information of the asset transfer in the log.

Abstract: An electronic content storage and exchange system includes an interface configured to send and receive messages; a database and a controller. The database includes a plurality of records, each record representing a respective virtual storage media and including at least: a respective unique identifier assigned to the virtual storage media; a respective Private key and certificate assigned to the virtual storage media; a current content value, and a log of content transfers. The controller executes transfer-in and transfer-out processes in respect of each of the virtual storage media. The transfer-in process includes steps of: receiving a content transfer message including at least a message content to be transferred and the respective identifier assigned to a recipient virtual storage media; accessing the record representing the recipient virtual storage media,; and storing the message content in the current content of the recipient virtual storage media.

Abstract: A method of detecting unauthorized activity in an electronic message transfer system comprising a plurality of devices, each device being configured to generate and receive cryptographically secured transfer messages for exchanging content with other devices in the system. In each device, audit information is accumulated in a memory of the device. The device periodically forwards at least part of its accumulated audit information to a secure server.