Abstract: An apparatus, system, and method are disclosed for checking the health of encryption key managers (EKM). An identification module identifies an EKM of a plurality of EKMs. A communication module establishes communication with the EKM. A request module requests an encryption key from the EKM. A verification module verifies that there is a valid encryption key path to the EKM. In one embodiment, the verification module validates that the EKM can exchange encryption keys with a tape drive. The verification module may also validate that the EKM can certify the authenticity of a tape drive.

Abstract: An optimized server for streamed applications provides a streamed application server optimized to provide efficient delivery of streamed applications to client systems across a computer network such as the Internet. The server persistently stores streamed application program sets that contain streamed application file pages. Client systems request streamed application file pages from the server using a unique set of numbers common among all servers that store the particular streamed application file pages. A license server offloads the streamed application server by performing client access privilege validations. Commonly accessed streamed application file pages are stored in a cache on the streamed application server which attempts to retrieve requested streamed application file pages from the cache before retrieving them from persistent storage. Requested streamed application file pages are compressed before being sent to a client as well as those stored in the cache.

Abstract: A user sets up an account including radio identification, billing information, etc. via a web-based account creation device, or over the telephone with an account representative. An activation key is provided to the user that identifies the radio device and the users account. An activation screen is displayed to a user at the start of wireless activities. The activation screen requires the activation key before continuing with wireless services. Since the key identifies both the radio and user's account (which was approved prior to provision of the activation key), rejection traffic is eliminated and non-active account traffic is significantly reduced.

Abstract: The invention discloses a method by which the health care professional or patient may draw upon historical medical data concerning patients similarly situated in medical condition, to assist him/her in deciding on a clinical intervention procedure to select. This method is specifically tailored to the patient, as data is provided and evaluated from only similarly situated patients, and provides an expectation of potential outcome of the patient should one or the other of the options be selected. The invention further provides a database that may be used in order to provide this comparison based evaluation method. A computer based software system is further disclosed that implements the method. The invention more speiocifically provides a method by which a post-coronary event patient may make an informed decision of which post-coronary revascularization procedure to undergo in the future management of his disease.

Abstract: An electronic warranty unit and method. In one embodiment the electronic warranty unit includes a programmable electronic memory unit configured for removable insertion into a device and an electronic warranty stored on the electronic memory unit. A method for electronically warranting a device includes removably attaching an electronic warranty unit, capable of storing an electronic warranty for the device, to the device or removably inserting the electronic warranty unit into the device.

Abstract: In a content delivery system, delivery of content and charging the fee of the content are performed and managed in a highly secure and effective fashion. If a content-purchasing request is transmitted from a user device to a shop server, a charging process is performed. A user device authentication server, which manages content delivery, converts an encrypted content key KpDAS(Kc) encrypted using a public key of the user device authentication server (DAS) into an encrypted content key KpDEV(Kc) encrypted using a public key KpDEV of the user device. If the charging process is successfully completed, the shop server transmits, to the user device, the encrypted content key KpDEV(Kc).

Abstract: The present invention includes a virtual customer database system for delivering personalized services to a consumer operating a communication device. The virtual customer database system includes an administrator and a distributed database. The distributed database may be selectively loaded by the administrator with customer related information extracted from participating businesses. The distributed database includes secure databases associated with each participating business and a public participant database. The administrator may process push and pull service requests by selectively querying the distributed database. Sensitive customer specific information may remain with each corresponding participating business while responses to the requests may include personalized customer specific information provided via a common interface standard.

Abstract: A licensing system is disclosed for performing synchronous encryption with a client over an IP-compliant network. In disclosed embodiments, the system includes a licensing agent configured to pass a data structure unencrypted in an initial communication between the licensing agent/client pair and pass a first key to said client responsive to an initial communication. The licensing agent then receives the data structure from the client having designated fields encrypted according to the first key. The licensing agent then sends a second key to the client for use in subsequent communications.

Abstract: A method and system for authenticating applications. The system includes a plurality of portable electronic devices, at least one process organizer, at least one module developer, at least one task performer and a workflow server. The process organizer generates an application. The process organizer can request modules from module developers that are incorporated into the application. Alternatively, the process organizer makes an agreement with a task performer to perform tasks to complete the application. The application is transmitted to the workflow server, which includes an online marketplace for displaying and selling the applications. A user purchases the application through the store. A routing module generates a signature and compares the signature to application, module or document metadata and a secret to determine consistency of the data before the application, module or document is routed.

Abstract: Systems and methods enable members of a secure transaction network to readily identify the appropriate trusted service manager (TSM) to support a particular transaction. A global directory of TSM providers is provided that a secure service provider can use for determining which TSM provider is the authorized manager of a security domain for the particular transaction. In aspect the directory of TSM providers may be stored within a mobile device secure element. In another aspect, the directory of TSM providers may be stored in a central TSM repository. In a further aspect, the directory of TSM providers may be distributed among a number of secondary TSM repositories. The appropriate TSM may be identified based upon a secure element identifier and an application identifier provided by a secure element as part of the transaction. Communication of the identifiers from mobile devices may be via cellular or near field communication links.

Abstract: Systems and methods for evaluating electronic value transfers. Various of the methods include graduating a defined affinity between transactions to increasing levels of scrutiny. At an increased level of scrutiny, reports can be generated indicating suspicious activity and/or interdiction procedures can be implemented to reduce the occurrence of the detected suspicious activity. Various of the systems are tailored to implement the aforementioned methods.

Abstract: Systems and methods for evaluating electronic value transfers. Various of the methods include receiving money transfer requests, electronically storing records of the money transfer requests, and performing an analysis of the records. The analysis of the records can indicate that two or more of the records are related. The related records are associated with a reference designator that is used to search money transfer records and identify suspect activity. The systems can include a fraud processing system associated with a money transfer system.

Abstract: The present invention proposes a safe and quick individual certification method using a portable terminal. When a portable terminal 30 sends a request for certification to a certification server 10, the certification server 10 transmits query code for certification to the portable terminal 30. The portable terminal 30 transmits said query code to the certification server 10 via a reader 21 or the like and also via a sales management server 23 to be certified. The certification server 10 verifies the query code to that generated in the past, and returns a result of verification and personal data required by the sales management server 23 to the sales management server 23.

Abstract: Service delivery systems and methods are described. In one aspect, a service delivery system includes a set of tokens, a database, multiple terminals, and a service manager. Each of the tokens includes a respective token identifier. The database stores personal user profiles each of which is associated with a respective token identifier. The terminals are distributed about a selected locale. Each terminal has a reader that is operable to read token identifiers from tokens and a controller that is operable to transmit read token identifiers and context data identifying one or more conditions under which a token identifier is read through a network connection each time a token identifier is read. The service manager is connected to each of the terminals through a respective network connection and to the database.

Abstract: Methods and systems to assign an application and a video frame buffer to a protected memory domain to render an image of a keyboard from the protected memory domain to a random position of the video frame buffer and correlate user input from a pointing device to the rendered keyboard image. The keyboard image may be randomly repositioned following a user input. The keyboard image may be rendered over a secure user image. An acknowledgment image may be rendered from the protected memory domain to a random position of the video frame buffer, and may be randomly repositioned in response to a user input that does not correlate to the acknowledgment image. User inputs that do not correlate to a randomly positioned image may be counted, and one or more processes may be aborted when the number of non-correlated user inputs exceeds a threshold.

Abstract: An apparatus and method capable of purchasing external charged content in a UPnP network are provided. A media server (MS) provides a media renderer (MR) with a URL that executes a CGI that that performs purchasing of a charged content included in an external server, and, if the MR requests the reproduction of content corresponding to the URL, the MS executes a CGI of the URL, purchases charged content corresponding to the URL, and downloads the charged content, thereby browsing a list of contents provided by an external contents purchase site through a consumer electronic device such as a digital television, in which a UPnP audio/visual control point is mounted without a separate interface, purchasing desired content, and reproducing the purchased content.

Abstract: A duplication/delivery center DDS records contents C11 and C12 on a recording medium M in accordance with requests from content providing apparatuses CP11 and CP12, duplicates the recording medium M, and delivers the recording medium M to users. When doing so, parts of the contents are encrypted. The content providing apparatuses CP11 and CP12 request a content control apparatus CC1 to control the contents on the recording media M. At the side of contents users, when a user sets a recording medium M in a video game console GM and tries to use a content that has been encrypted, the video game console GM requests, via a mobile packet communication network MPN, the content control apparatus CC1 to transmit a decryption key. The content control apparatus CC1 decides whether or not to transmit the decryption key based on the content of the request received from the content providing apparatus.

Abstract: A system and method are disclosed for registering a mobile computing device of a service on a wireless network. The method comprises receiving user information for a user of the mobile computing device and creating an account based on the user information. The method comprises receiving a first key and serial number from the mobile computing device at a network node and generating a second key based on an encryption of a stored serial number of the mobile computing device. Based on an evaluation of the first and second keys and received and stored serial numbers, the mobile computing device is registered on the wireless network for the service.

Abstract: The present disclosure attempts to migrate from a first authenticator to a second authenticator. In the most preferred embodiment, the first step is to migrate the data that is not stored encrypted by a traditional replication or transformation between the datastores of the authenticators. The new authenticator is placed in position, while the old authenticator is maintained. When a user attempts to login, servlets check to see if the user's password exists within the datastore for the new authenticator. If not, then the user is sent to the old authenticator's sign-on page. When the user enters their authentication credentials into the old authenticator, a code snippet or second servlet will capture this information and, on confirmation from the old authenticator that the user is properly authenticated, use the captured information to populate the new datastore.

Abstract: A document distribution system transfers a document from a source computer to a destination computer in the form of a print file. The print file defines the appearance of the document in a code suitable for telling a printer how to print the document. The source computer executes “license stamper” software for embedding an encoded license stamp into the print file before it is sent to the destination computer. Viewer software executed by the source computer receives and parses the print file to determine whether it contains the license stamp. If so, the viewer may generate a video display of the document defined by the print file or may print the document by sending the print file to a printer. However if the viewer receives a print file not containing the embedded license stamp, the viewer refrains from displaying or printing the document.