Abstract: The present invention is directed to systems and methods which identify fraudulent situations during the transaction phase. In one embodiment, such detection is accomplished by monitoring for situations either outside the range of normal for the general population or outside the range of normal for this particular user. The normal range could be rule driven and, for example, could include size of a given purchase, frequency of purchases, identity of use equipment being utilized for the current transaction, etc. The rule could be relaxed or tightened, at least in part, based on the length of time that the user has been a customer and the user's past payment history. In one embodiment, device ids are used to detect fraudulent users. These device (or software) ids could, for example, be a “fingerprint” of the user's equipment, or a “cookie” previously downloaded to the user that identifies the user to the fulfillment system. In situations where fraud is detected downloading the value to the user is interrupted.

Abstract: A system, method and computer program for tabulating votes and creating an audit trail is provided. A ballot processing device may include a paper feed mechanism, a computer, a ballot processing application loaded on the computer, and a digital scanning device linked to the computer. The ballot processing application may process the digital image to establish a series of processing results defining one or more voting results for the paper ballot, and also an audit trail. The ballot processing application may process the digital image to define the voting results based on criteria established by election officials, including ambiguous mark criteria. The audit trail enables election officials to verify that particular paper ballots have been processed correctly in accordance with these criteria.

Abstract: A method (400, 500) and a system (100) of conducting transactions for acquisition of virtual items. The method can include receiving from a user (108) a request to acquire the virtual item. Responsive to an identity indicator (112) that is exclusively unique to an identity confirmation device (110) being communicated from the identity confirmation device, a determination can be made whether the identity indicator corresponds to the user. Responsive to determining that the identity indicator corresponds to the user, the virtual item can be provided to the user. The method also can include receiving from a user a request to acquire the virtual item, receiving from an identity confirmation device an identity indicator exclusively unique to the identity confirmation device, and communicating the request and the identity indicator from the client device to a server (104).

Abstract: A method for activating an optical article includes providing an optical article, wherein at least one mark is disposed on the optical article, wherein the mark comprises an optical-state change material in an initial state, the initial state preventing the optical article from being read by a player; deriving an unlock code by cryptographic operations on an optical article operatively coupled with a POS equipment and a data input from a medium encrypted with a cryptographic algorithm; deriving a toggling signal from an unlock code, and applying the toggling signal to the at least one mark resulting in changing the optical-state change material to a final state, the final state allowing the optical article to be read by the player; wherein the toggling signal comprises a set of values corresponding to the respective states of each of a plurality of marks on the surface of the optical article, and wherein applying the toggling signal results in setting each of the marks to either one of an initial state or a f

Abstract: A solution for spontaneous sharing between a sharer and a recipient device of a media asset reference for a media asset purchased through a media service by a user of the sharer device using a short-range wireless protocol is described. The reference includes a network resolvable identifier of a media service from which the media asset was purchased and an identifier of the media asset. The reference can also include the identity of the user who purchased and is sharing the reference thus allowing the media service to track distribution of its asset and provide an incentive based on sharing if desired when the recipient user sends a request for the media asset via the Internet to the media service including the media asset reference.

Abstract: In a value transfer scheme, users are provided with programmable devices, for example, smart cards, capable of carrying data representing at least one available commodity value. Data representing user accounts is held at a remote processing station. Transactions between users are effected by the off-line exchange of data between users'respective smartcards, the exchanged data containing a record of each transaction entered into. The user account data for each user's account held at the remote processing station is updated only subsequently when the user's smartcard is on-line to the remote processing station and data therefrom is uploaded to the remote processing station. The scheme of the invention can, conveniently, be based around the ITSO scheme which is used to govern the secure transfer of data. The scheme is capable of providing a secure multi-commodity value transfer system.

Abstract: A system for anonymous separation of duties with credentials includes an identity provider, the identity provider configured to issue anonymous credentials to a user based on one or more attributes of the user; a service provider, the service provider configured to issue a pseudonym to the user based on the user's anonymous credentials, and to associate the user's pseudonym with a step of an instance of a business process hosted on the service provider, the step being completed by the user; and an auditor, the auditor configured to determine if the completion of the step of the instance of the business process by the user is compliant with a separation of duties policy.

Abstract: Methods and systems for verification of indicia that do not require key management systems, and in which revocation of key pairs is easily performed without adding costs to the verification process are provided. Indicia are generated and authenticated utilizing an identity-based encryption (IBE) scheme. A key generating authority generates a private key for a PSD, distributes the private key securely to the PSD, and provides public information for use by a verification service when verifying cryptographic digital signatures generated with the private key. The corresponding public key is a string consisting of PSD information that is provided as part of the indicium. The verification service can verify the signature of each indicium by obtaining the public key string from the indicium, and utilizing the key generating authority's public information.

Abstract: A system and method are provided for specifying a legality expression for use in a system for processing the legality expression. The system and method include providing a legality expression language, including at least one of a duty element specifying an obligation that a principal must perform an act, a ban element specifying a prohibition that a principal must not perform an act, an intent element specifying an intention that a principal wants to perform an act, and a claim element specifying an assertion that a principal does perform an act. The system and method further include interpreting by the system a legality expression specified using the legality expression language.

Abstract: In a franking system, a postal security device (PSD) is used to account for postage dispensation, and generate digital signatures for inclusion in postage indicia to authenticate same. In accordance with the invention, the PSD includes multiple crypto processors which participate in franking transactions and generate the digital signatures in a multiplexed manner. Each crypto processor verifies the accounting of postage dispensation leading to and including the transactions in which the crypto processor participates. In addition, the crypto processors re-create transaction records and store them therein in a distributed manner.

Abstract: Methods and systems for performing micropayment transactions over communication networks is provided. These methods and systems enable ubiquitous micropayments by providing a seamless payment solution in which micropayment is one of a plurality of payments facilitated. In an embodiment, the transaction value may be compared to a predefined threshold, and processed as a micropayment if said value is less than said threshold, and otherwise processed using a second processing system. In another embodiment, the transaction may be processed as a micropayment if the payee has previously been verified by the micropayment processing system. In a third embodiment, the transaction takes place using the payee's website.

Abstract: In a case where a secondary use of a communication line which is provided as a communication service is permitted, an appropriate communication charge to be charged to each user is computed in order to promote the use of the communication line. There is provided a communication relay system providing communication service which connects a communication device to an existing communication network.

Abstract: Methods and systems are described for transferring funds from a sender to a recipient. Source funds are received from a sender. An amount of recipient funds is determined from a value of the source funds. A transfer identifier associated with the recipient funds is generated and provided to the sender. The transfer identifier is received from the recipient, prompting a transfer in control of the recipient funds to the recipient. At least one of the source funds and the recipient funds are in the form of one or more electronic tokens. Each such electronic token has a currency amount and a digital signature identifying a financial institution that backs the electronic token for the currency amount.

Abstract: Piracy of digital content is currently a large problem. Copyright notification and sales of metadata can help counteract the problem. The novel solution shows different methods to provide copyright notification and sell metadata, such as including identification of the content (via digital watermarks, fingerprints, or header data) and a personal domain. Metadata is ideal to sell since it is dynamic, and, thus, is accessed from a master server.

Abstract: Methods and a program of instruction provide a packet schema framework for communication between elements of a pay-as-you-go business model including a provisioning server, an adapted electronic device, and a service provider. The packet schema defines provisioning instructions and content types to support service provisioning, including electronic device configuration and state, time-metering, and other types of functional and administrative tasks as well as to provide a foundation for any future messages needed for product evolution. The schema also defines security at multiple levels to guard against malicious users who may try to hook into the system to fraudulently use and/or configure the electronic devices for their own use and gain.

Abstract: An information processing apparatus, which encrypts print data (PDL), receives a personal identification code (PIN) input by a user, generates a random number (rnd), encrypts the generated random number by using the personal identification code or an encryption key generated based on the personal identification code, converts the personal identification code by using a predetermined function, and encrypts print data by using the random number as an encryption key, thereby maintaining security in the printing.

Abstract: A system, method and computer program for tabulating votes and creating an audit trail is provided. A ballot processing device is integrated with a ballot box. The ballot processing device includes a paper feed mechanism, a computer, a ballot processing application loaded on the computer, and a digital scanning device linked to the computer. The ballot processing application provides instructions to the computer to initiate the digital scanning device to scan a paper ballot fed into the paper feed mechanism so as to create a digital image of the paper ballot. The ballot processing application also processes the digital image to establish a series of processing results defining one or more voting results for the paper ballot, and also an audit trail. The ballot processing application processes the digital image to define the voting results based on criteria established by election officials.

Abstract: Verifying ballots that are cast in an election is provided. A mutual attestation procedure is executed between a plurality of devices communicating in a voting system via a network. A number of certificates are published. Each certificate corresponds to one of the plurality of devices and contains a public key and reference election configuration data defining a reference machine execution environment state of its corresponding device. A voter authorization token is generated for each voter. Voting results are generated in response to using a given voter authorization token to cast a given ballot using a specified voting device. Current election configuration data is generated that defines a current machine execution environment state of the specified voting device when the given ballot was cast. The current election configuration data is compared with the reference configuration data to verify a valid machine execution environment state of the specified voting device.

Abstract: There is provided a method and a system for documenting a transfer of authority of control for a container from a first entity of a transportation chain to a second entity of the transportation chain. The first entity transfers an electronic container control certificate to an electronic seal of the respective container, which electronic container control certificate comprises a cryptographic key associated to the second entity, and which container control certificate is digitally signed by the first entity. The container control certificate is stored in a log of the electronic seal.

Abstract: A method and system for installing software and hardware licenses on electronic devices supporting licensable features. Specifically, a method is disclosed for installing licenses in a node based licensing scheme. The electronic device defining the node receives an input containing an authorization key. The authorization comprises a license for a service feature, a node identifier, a software version, and a sequence number. Information in the authorization key is used to install the license on the electronic device. The node identifier is compared to an official node identifier stored at the electronic device. The sequence number is compared to an official sequence number stored at the electronic device. The license is installed into a pool of licenses available to the electronic device when the node identifier matches the official node identifier and the sequence number matches the official sequence number. The sequence number ensures that the authorization key at most can only be used once.