Abstract: A system and method for verifying a digital signature on a certificate, which may be used in the processing of encoded messages. In one embodiment, when a digital signature is successfully verified in a signature verification operation, the public key used to verify that digital signature is cached. When a subsequent attempt to verify the digital signature is made, the public key to be used to verify the digital signature is compared to the cached key. If the keys match, the digital signature can be successfully verified without requiring that a signature verification operation in which some data is decoded using the public key be performed.

Abstract: A title management apparatus resident on a first computer including a memory for storing a control program and data, and a processor for executing the control program and for managing the data. The apparatus includes user data resident in the memory including a set of user security indicia. The apparatus also includes a first title object resident in the memory including a title structure, the title structure further comprising a content element, a set of attributes, and a set of title object security indicia. The apparatus further includes a set of stub objects coupled to the title object, wherein the set of stub objects can further optimize the title structure; an authorization structure configured to selectively redeem the content element based at least in part of the user security indicia; and, a title management structure configured to associate a user with the first title object based at least in part of the user data and the title attributes.

Abstract: A method, apparatus, and computer instructions for transferring a unique digital item between a first party and a destination party in a network data processing system. A request to transfer a unique digital item in an account of the first party is received. Responsive to receiving the request, a retrieval tag is associated with the unique digital item. The retrieval tag is generated by a server process, such as one on which the unique digital item is located. The unique digital item is transferred from the source account to a temporary storage account in association with the retrieval tag. The unique digital item is listed on a trusted third-party server. A second party may inspect the unique digital item and agree to exchange something in return for the first party's listed unique digital item. The transfer occurs after all parties have committed to the transaction.

Abstract: The present embodiments provide methods, systems and apparatuses for use in managing content on at least a local network. Some embodiments provide a method for use in distributing content that receives a request to deliver premium content over a distributed network; identifies a location relative to where the request is made; determines whether there is a first additional content associated with the location; adds the first additional content to the requested premium content when there is the first additional content associated with the location; and distributes the requested premium content and the first additional content according to the request.

Abstract: An eVault system securely stores personal data and documents for citizens and allows controlled access by citizens and optionally by service providers. The eVault may be adapted to allow processes involving the documents to be carried out in a secure and paperless fashion. Documents are certified, and biometric matching is used for security. On effecting a match with a biometric identifier presented by a user, the user is allowed access to his personal eVault and to access a personal cryptographic key stored therein. One or more of these personal keys may be securely applied within the eVault to generate an electronic signature, amongst other functions.

Abstract: Embodiments of the present invention enable a user to acquire an item (e.g., a digital song, digital video, etc.) using one device (e.g., a portable device) and to easily move a copy of the acquired item from the one device to another device so that a user of the other device can play the item.

Abstract: The invention provides a method of detection of an imprint of a postal indicium at a location on a mail piece. The method involves utilizing a sensor to scan along a band on the mail piece to detect a sequence of transitions between light and dark reflectance areas within a band extending across the said location. AN indication of the presence of the imprint of the postal indication is generated in response to detection of a transition succeeding a predetermined number of initial transitions at a start of the sequence of transitions. The invention also provides apparatus for imprinting postal indicia on mail pieces. The apparatus comprises a printer operable to print a postal indicium in a required location on the mail piece. A first sensor is provided that is responsive to reflectance transitions between light and dark along a band of the mail piece extending across the said location.

Abstract: A method. The method includes a) sending a first transaction notification message comprising an original payee identifier to a user. The original payee identifier may be part of original transaction information associated with a first transaction. At some point, the user sees this transaction information and wants to correct one or more items in the transaction information. For example, the user may not recognize that the original payee identifier is wrong or is otherwise unrecognizable. The user may then contact a central server (e.g., via a Web site) and may provide updated transaction information such as an updated merchant identifier to the central server computer. This updated transaction information may be stored so that subsequent transactions can be accurately conducted and reported to the user, and other uses.

Abstract: A central transaction server in electronic commerce card authorization system enables the electronic commerce card association to manage and monitor the authentication system. The central transaction server acts as an intermediary for all communications between the access control server used for authentication. If any portion of the authentication system fails, the central transaction server compensates by providing appropriate responses to other portions of the system. The centralized transaction server translates all incoming traffic into a format compatible with the intended recipient, enabling portions of the system to be upgraded without breaking compatibility with the non-upgraded portions. The centralized transaction server also enables the integration of formally separate portions of the authentication system into a single unit.

Abstract: A system, method, and computer program product for maintaining the anonymity of a consumer in a transaction with a retailer. The consumer provides payment method information and ship-to address information to a trusted third party. The consumer purchases products from a retailer by providing the trusted third party anonymous identifiers (e.g., nicknames, unique codes, or one time use codes either supplied by the consumer or by the trusted third party) corresponding to the selected payment methods and ship-to addresses. The retailer requests payment approval from the trusted third party. The trusted third party receives payment approval from a payment partner using the payment method information determined from the anonymous identifier received from the consumer. The trusted third party provides payment approval to the retailer along a transaction unique shipment identifier to place on the parcel.

Abstract: A management center registers user information that includes user identification information for identifying a user terminal and improvement-information identification information for identifying improvement information recorded in an optical disk and processed by the user terminal. When a user terminal requests improvement information through a network, the management center searches for another user terminal that can provide necessary information, according to user information, and obtains the improvement information from the another user terminal searched for, through the network. The management center then provides the obtained improvement information for the user terminal that requested it, through the network.

Abstract: The invention relates to a method and an arrangement for concealing the true identity of a user in a communications system comprising a first user equipment having a first characteristic identifier, a second user equipment having a second characteristic identifier, a service network serving the first and the second user equipment. The method according to the invention comprises: requesting a virtual identifier by means of the first user equipment; establishing the virtual identifier for the first user equipment; linking the virtual identifier of the first user equipment to the first characteristic identifier of the first user equipment and using the virtual identifier of the first user equipment for communication between the first and the second user equipment.

Abstract: An automated banking machine (12) is operative to conduct transactions in response to HTML documents and TCP/IP messages exchanged with a local computer system (14) through an intranet (16), as well as in response to messages exchanged with foreign servers (20, 22, 24, 26, 28, 96) in a wide area network (18). The banking machine includes a computer (34) having an HTML document handling portion (76, 80, 82). The HTML document handling portion is operative to communicate through a proxy server (88), with a home HTTP server (90) in the intranet or the foreign servers in the wide area network. The computer further includes a device application portion (84) which interfaces with the HTML document handling portion and dispatches messages to operate devices (36) in the automated banking machine. The devices include a sheet dispenser mechanism (42) which dispenses currency as well as other transaction devices.

Abstract: A method and apparatus for obtaining access to services of service providers. In one embodiment, the method comprises requesting a desired service through a foreign service provider. (101), generating a hash tree and generating a digital signature on a root value of the hash tree (102), sending the digital signature and the root value to the foreign service provider (103), providing one or more tokens to the foreign service provider with the next packet if the foreign service provider accepts the signature (105) and continuing to use the service while the foreign service provider accepts token (107).

Abstract: In a method and arrangement for variable generation of cryptographic securities of communications in a host device, for cryptographic security of a communication for a first purpose a first signature is used and for cryptographic security of a communication for a second purpose a second signature is used, the signatures being differentiated from each other by the type of their generation. A cryptologic module has a number of logic circuits and a changeover switch and is arranged externally of the postal security device and is connected at its output with an information input of the postal security device that has a logic circuit that applies a digital signal algorithm to the output signal supplied by the output in order to generate a signature.

Abstract: An information processing apparatus handling a removable formation recording medium storing predetermined substance information and first license information concerning the information processing apparatus includes a storing part storing second license information concerning the removable information recording medium, a license checking part carrying out checking of license information with the use of at least one of the first license information and the second license information, and a substance information usage allowability control part controlling, based on a result of the checking carried out by the license checking part, allowability for usage of the predetermined substance information from the removable information recording medium.

Abstract: A system and method for performing an on-line transaction, such as making a payment, with a single-use payment instrument makes use of computer hardware and software, such as the computing device of a customer, the customer's bank's home banking server, the bank's card authorization server, a vendor's website server, and the vendor's credit card acquirer, coupled to one another over a network. The customer is issued a single use payment instrument through the bank, the bank debits an account nominated by the customer for the requested value of the payment instrument and may also specify an expiry for the payment instrument. The customer is able to nominate a particular source of funds for each transaction from among various accounts of the customer. The payment instrument settles and clears through existing credit card payment mechanisms without a need for special accommodation with the Internet vendor.

Abstract: The present disclosure provides a method and system of electronically associating one or any combination of the production, balancing, editing, transmission, distribution and sale of live event “Recordings” with the sale of a “ticket” [defined to include any entrance payment/receipt, (tournament) entrance fee or logged placed bet] to or during the event, such that both or either of a ticket purchaser and/or non-ticket purchaser are able to automatically acquire a Recording or participate in interactive offerings related to the event by means of [optional] authenticated retrieval systems at a terminal device when connected to the Internet or wireless network. A method for electronically converting a balanced audience feed to the value for optimal Recording balance is also disclosed for optional integration.

Abstract: A method, in different embodiments, is provided to construct on-line, off-line, or hybrid internet payment systems that allow a vendor to sell physical or digital products or services to a user. The embodiments reduce transaction costs, facilitate implementation, help prevent fraud and solve privacy, trust, accountability and liability issues, in ways that may be specially suited to on-line micropayment systems. In one embodiment a vendor makes available some payment information to a user (100) and provides a ways to secure the payment information (500). A payment transaction is initiated (102) and payment is performed with the participation of a broker. The vendor may grant access to content to the user (109).

Abstract: Access rights may be managed using non-volatile memory. The charge retention characteristics in devices with non-volatile memory are used to establish time-limited rights. Time duration is calculated using the floating gate in a storage cell. First, time-limited rights are determined from a license. Second, a set of computer software selects a time-sensitive storage cell, containing the floating gate, in the non-volatile memory that approximates the required time duration in the license.