Abstract: Systems and techniques for improving the performance of a network system having one or more sending systems and one or more receiving systems may include determining the digital signature of a received embedded digital resource, comparing the digital signature against stored digital signatures of digital resources accessible to the receiving system, and determining whether to store the received embedded digital resource and/or a location identifier for the stored version of the received embedded digital resource based on a result of the comparison.

Abstract: Digital rights management method and system for items having usage rights. A first activation device defines a first trust zone. A first license device associated with the first trust zone generates an open license having usage rights associated with a first item. A second activation device defines a second trust zone and is adapted to issue a software package that enforces usage rights. A user device associated with the second trust zone is adapted to receive the software package from the second activation device, to receive the open license associated with the first item, and to use the first item in accordance with the open license. In addition, a method is provided for enforcing a license granting usage rights associated with a protected item, and for classifying a license, the license being an open license or a closed license.

Abstract: Systems and methods of distributing and controlling use of data content are provided. Data content is distributed to users by a service provider system, shared between computer system users, or both. In one embodiment, data content is segregated into a plurality of sections, each section is encrypted using a respective one of a plurality of encryption keys, and the resultant plurality of encrypted sections is downloaded to a customer processing platform. In order to control the use of the data content, a plurality of decryption keys corresponding to the plurality of encryption keys are then delivered to the customer processing platform in a manner such that the customer processing platform has possession of at most a subset of the plurality of decryption keys at any time. According to another embodiment, downloaded data content is adapted for use only with a particular software component that establishes a connection with a data content service provider system to obtain permission to use the data content.

Abstract: An electronic system for payment via a telecommunications network between firstly a vendor having a server suitable for implementing a secure protocol for payment by smart card, and secondly a client having navigation and electronic payment means suitable for making a payment to said vendor using client software for handling payment that includes the secure payment protocol. The client software for handling payment is installed on a payment server on the telecommunications network. The system comprises, at the client end, navigation means, electronic payment means constituted by a mobile terminal connected to the network and including a reader for reading payment smart cards, and means for redirecting messages suitable for transmitting at least the call number of the mobile terminal to the payment server.

Abstract: A method and system for subscription-based, entitlement-driven license key generation and distribution for digital goods allows digital goods vendors to manage rights of customers having maintenance contracts or subscriptions. Rights management includes the ability of the vendor to specify upgraded license rules and automatically update entitlements for all customers having current contracts and/or subscriptions, as specified by the upgraded license rules. Upgrades and accompanying license keys are proactively offered to customers without requiring additional sales transactions.

Abstract: The operating and other procedures of a disk or recording medium application system of the type for which a network is used are simplified. Disks or recording media have auxiliary data recording areas, where different IDs for individual disk, and/or cipher keys and/or decoding keys for ciphers are recorded in advance in a factory. By using the IDs to release the soft ciphers, and using the cipher keys when sending the ciphers, and using the decoding keys when receiving the ciphers, user authorization procedures are simplified.

Abstract: A point-of-sale terminal determines an upsell to offer in exchange for a round-up amount in connection with a purchase. In one embodiment, the point-of-sale terminal preferably maintains a database of at least one upsell price and a corresponding upsell to offer a customer in exchange for a round-up amount (e.g., change due the customer).

Abstract: A system and method for conducting electronic commerce are disclosed. In various embodiments, the electronic transaction is a purchase transaction. A user is provided with an intelligent token, such as a smartcard containing a digital certificate. The intelligent token suitably authenticates with a server on a network that conducts all or portions of the transaction on behalf of the user. In various embodiments a wallet server interacts with a security server to provide enhanced reliability and confidence in the transaction. In various embodiments, the wallet server includes a toolbar. In various embodiments, the digital wallet pre-fills forms. Forms may be pre-filled using an auto-remember component.

Abstract: Content is stored as ClearText by a content provider within a trusted area. Specific content is requested by an end user, preferably via a service provider, and the requested content is encrypted and then delivered over a secure communications channel to a home server system. While the encrypted content is stored on the home server system, the associated encryption keys are stored as a license with the content provider. When a playback device on the home server system is instructed to play back the encrypted content, the encrypted content is streamed from local storage within the home server system while the associated encrypted keys are simultaneously streamed from the content provider to the playback device.

Abstract: There are provided a digital content management apparatus which further embodies a digital content management apparatus used with a user terminal, and a system which protects the secrets of a digital content. The system and the apparatus are a real time operating system using a micro-kernel, which is incorporated in the digital content management apparatus as an interruption process having high priority. When a user uses the digital content, whether there is an illegitimate usage or not, is watched by interrupting the usage process. In the case where illegitimate usage is carried out, a warning is given or the usage is stopped. The decryption/re-encryption functions of the digital content management apparatus having the decryption/re-encryption functions are not restricted to the inside of the user apparatus. By providing the decryption/re-encryption functions between the networks, the exchange of secret information between different networks is secured.

Abstract: In a method of authorizing a supply for use with a printing system, a supply is provided having a memory containing a first and second codes and supply-specific data, which uniquely identifies the supply. The first code, the second code and the supply-specific data are retrieved from the memory of the supply. The first and second codes are translated using the supply-specific data. The translated first code is compared to a third code and the translated second code is compared to a fourth code. Use of the supply with the printing system is authorized when the translated first code corresponds to the third code and the translated second code corresponds to the fourth code. Use of the supply with the printing system is prevented when either the translated first code does not correspond to the third code, or the translated second code does not correspond to the fourth code.

Abstract: A method of dynamically negotiating a transaction can include determining a potential transaction between participants according to transaction parameters stored within a transaction parameter data store. The transaction parameters can be associated with each of the participants and can specify acceptable transaction terms. The potential transactions can be evaluated according to a mutual benefit conferred on the participants by the potential transactions according to the transaction parameters. The potential transactions can be ordered according to decreasing mutual benefit; and, the potential transaction having the greatest mutual benefit can be presented to the participants.

Abstract: The method and system of the invention provide a variety of techniques for using a selected alias and a selected personal identification entry (PIE) in conjunction with use of a transaction card, such as a credit card, debit card or stored value card, for example. A suitable number or other identification parameter is selected by the account-holder as an alias. The account-holder is then required to choose a PIE for security purposes. The alias is linked to the account-holder's credit card number via a database. When the account-holder enters into a transaction with a merchant, the physical card need not be present. The account-holder simply provides his or her alias and then the PIE. This can be done at any point of sale such as a store, catalog telephone order, or over the Internet. The alias and PIE are entered and authorization is returned from the credit card company.

Abstract: Downloading configuration data to program card terminals and providing real-time data of activity occurring at card terminals. A merchant can log on to a system server and enter information to program options for its card terminals such as via a web page on an Internet site. The system server formats the information into a file based upon a communication protocol and programming rules for the card terminal, and downloads the file to it as a data stream. The card terminal programs itself according to the configuration data. A merchant can also view data for activity occurring at its card terminals, possibly in real-time proximate to detection of the activity by the system server. In conjunction with processing transactions or other activity from the card terminals, the system server replicates the records for the activity and makes them available to merchants such as via a web page on an Internet site.

Abstract: Unique identification information is prerecorded on a disc. The identification information is registered to a server along with user's license when he or she buys the disc. When an terminal unit reproduces data from the disc, identification information is read and transmitted to the server through the Internet. The server creates a key that controls to reproduce data from the disc in accordance with the license identified by the identification information and transmits the key to the terminal unit along with the user's license information for the disc. The terminal unit controls to reproduce contents of the disc in accordance with key and license information transmitted from the server. The license for each disc is managed in accordance with the identification information. Thus, different services can be provided for individual discs.

Abstract: Device-based access to financial account functions is provided. Access to functions is based upon the protocols supported by the device. More secure protocols are used to access all account functions including more sensitive account functions, such as making online payments and transferring funds. Less secure protocols, such as those used by mobile telephones and wireless communication devices, can still be used to access the account in order to perform less sensitive account functions, such as checking account summaries or balances. In one embodiment, the user can alter security settings to determine which account functions are allowed based on the type of protocol being used.

Abstract: A computer network having a requesting node and a providing node permits data transfer therebetween when permitted by an authorizing node. Reports generated in response to authorizations and reports generated in response to data transfers are reconciled at a reconciliation node to improve the accuracy of payments collected and paid for use of the data. Such payments include copyright royalties for audio, video, and other works recorded in digital format.

Abstract: A computer network having a requesting node and a providing node permits data transfer therebetween when permitted by an authorizing node. Reports generated in response to authorizations and reports generated in response to data transfers are reconciled at a reconciliation node to improve the accuracy of payments collected and paid for use of the data. Such payments include copyright royalties for audio, video, and other works recorded in digital format.

Abstract: A system and method for providing a Contact Management System (CMS) so that individual owners of personal contact data may control and manage the access and dissemination of the personal data. The owner of personal contact data may securely register the data with secured information vault of the CMS and specify which other parties may have access to the personal data. In this way, duplication of the personal data is avoided, but at the same time is always current. In use, a second party's device, such as a telephone or a PDA may access the CMS database and under public key infrastructure (PKI) controls identify themselves so that access to the owner's personal data may be verified. Once verified, the telephone number or other data may be returned to the device where a call may be automatically placed or otherwise used.

Abstract: An apparatus and method by which a user or cardholder can be given an Electronic-Commerce PIN that bears no discernible relation to the ATM PIN, but from which the ATM PIN can be cryptographically determined using the cardholder's account number and an issuer-unique “conversion” secret key. The intent is that the Maestro Master Debit Switch, or else the Member Interface Processor, whichever is appropriate to a given issuer, can “convert” an Electronic-Commerce PIN to an ATM PIN, so that the member, by verifying the ATM PIN, is in effect verifying the Electronic-Commerce PIN. If the Electronic-Commerce PIN is entered incorrectly, it will convert into an incorrect ATM PIN. Thus the member's EDP facility need not deal with two PINs, yet the ATM PIN is not exposed to possible compromise in PCs or other electronic-commerce equipment. The suggested approach ensures that any disclosure of the Electronic-Commerce PIN does not disclose the ATM PIN.