Abstract: The specification discloses a method of doing business over the public Internet, particularly, a method which enables access to legacy management tools used by a telecommunications enterprise in the management of the enterprise business to the enterprise customer, to enable the customer to more effectively manage the business conducted by the customer through the enterprise, this access being provided over the public Internet. This method of doing business is accomplished with one or more secure web servers which manage one or more secure client sessions over the Internet, each web server supporting secure communications with the client workstation; a web page backplane application capable of launching one or more management tool applications used by the enterprise.

Abstract: Systems and methods for monitoring remotely located devices, systems, users, and user activities are described. The systems contain a central device where the digital content is stored, a remote device for delivering the digital content to a user, and means for transferring the digital content from the central location to the remote location. Data about the remote devices, users, and the user activities at the remote devices may be monitored. The data includes fault monitoring data, system performance data, system management data, user physical activity data, graphical interface data, demographic data, sales transaction data, survey data, and the like. The data can be monitored on a periodic basis or on a substantial real-time basis.

Abstract: Methods and apparatus are described which enable flexible and secure processing of digital bearer instruments. An architecture is provided that enables provision of an extensible applications framework that flexibly supports a variety of features and functionality supporting title-based rights processing operations. A wide range of methods of defining and assuring rights processing operating environments extend the capabilities of rights processing operating environments in a variety of ways.

Abstract: A gateway (e.g., a web site) connects content (e.g., pirated content) playing on a host device to a variety of informational, advertising, merchandising and DRM resources. Links, icons and other elements for connecting with the resources are provided to the host device by the gateway and can be presented to the user while the content is playing or paused. The type of resource presented to the user and the timing of the presentation can be based on content identifying information, timing information and/or other information provided by the host device.

Abstract: An apparatus and method is provided for digital rights management. The method for digital rights management includes receiving encrypted content and a rights object representing use rights of the encrypted content, receiving a software module managing the rights object, and generating a new rights object using the software module.

Abstract: An information security system is disclosed having a considerably simplified access control infrastructure. The number of secrets in a computer system domain is reduced to a minimum, yet individual users may still be identified and access to applications may still be individually controlled. The trusted entity in each of a plurality of platforms (100, 200, 202, 203) of the computer system may store an identity secret of the platform (100, 200, 202, 203) and may be trusted to use that secret in conjunction with an information label only when the platform (100, 200, 202, 203) is running the correct software to provide and/or take part in a particular service associated with that information label.

Abstract: A method of authorizing a commercial transaction between a customer and a provider of goods or services over a network, wherein the provider of goods or services requests that the customer provide authentication by activating a fingerprint identification device, and the provider of goods or services receives at least an authentication code of the customer over the network from the fingerprint identification device, the method comprising the steps of: providing the customer with the fingerprint identification device which produces the authentication code when a fingerprint of the customer matches a stored fingerprint within the fingerprint identification device; receiving at least the authentication code from the provider of goods or services over the network; and authorizing the transaction if at least the authentication code is valid.

Abstract: Encrypting sensitive information sent using an interactive voice response (IVR) system. The systems and methods may include an HSM that provides a secure platform to encrypt the sensitive information. They may also include interfaces with IVR systems and transaction processing hosts. The systems and methods may interact directly with a customer using an IVR to receive the sensitive information. They may also provide for a secure platform to validate the strength of the information, such as a PIN or password, prior to further processing of the sensitive information.

Abstract: System and methods for facilitating electronic commerce by securely providing certificate-related and other services, including certificate validation and warranty services. The system services include a certificate status check service and a warranty service. The certificate status check service allows a relying customer to validate a subscribing customer's digital certificate. The warranty service allows the relying customer to receive a collateral-backed warranty that the subscribing customer's digital certificate is valid, and also confirms the ability of the subscribing customer to pay. All participants and a root entity are provided with a transaction coordinator for combining services and operations into a single transaction having the qualities of atomicity, consistency, isolation, and durability. The transaction coordinator provides a single consistent interface for certificate-status messages and requests, as well as messages and requests relating to other services.

Abstract: A server or Internet service provider computer selects a soliciting merchant and an outputting merchant based on various factors. In one embodiment, the soliciting merchant is selected is its activity rate (e.g. sales rate) is low. The outputting merchant provides offers for bonuses to customers on behalf of the soliciting merchant. The bonus is provided to the customer in exchange for consummating a transaction with the soliciting merchant. Thus, the soliciting merchant benefits from the increased patronage such offers encourage.

Abstract: A method and system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity's electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity's electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Abstract: A method and system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity's electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity's electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Abstract: A method and system for biometric authorization to facilitate a radio frequency transaction is disclosed. In an exemplary embodiment, a system and method is provided for using biometric sample and biometric sample data to authorize completion of an RF transaction. Authorization of biometric sample data may authorize increasing a preloaded value, or using an additional value to supplement the preloaded value, in order to facilitate completion of an RF transaction.

Abstract: Systems and methods for individualized distribution of digital content to purchasers via portable kiosks are described. The systems contain a storage device for storing the digital content and distribution devices for distributing the digital content to a user. The distribution devices can be configured to be portable so that users who are not mobile can access the distribution device. As well, the users can use a receiving device containing unique identification data to receive and access the digital content. Such a system is extremely useful for users who are not mobile and whose use of the distribution devices needs to be controlled, such as detainees in a corrections facility. Other embodiments are described.

Abstract: A subset of unique codes is generated from a set of codes. The subset of codes are stored in a database on a secure server and each of the codes is marked on a corresponding instantiation of the product. The marked instantiations are distributed. During their distribution, the marked instantiations are verified for authenticity and for routing. This verification is performed by reading or scanning the codes on the instantiations, and transmitting that information to the secure server for comparison against the codes and other information located in the database contained of the secure server.

Abstract: A waterborne munitions system is disclosed. The system includes a submersible munitions platform and a remote control module. The munitions platform has a plurality of canistered munitions, either waterborne, airborne, or both, which can be remotely launched via the remote control module.

Abstract: An encrypted content and a license are separated from each other to be distributed individually, so that the encrypted content is decrypted using the license in a user apparatus. A server encrypts licenses of a plurality of encrypted contents for package sale to generate an inactive license packaged in one file and distribute the inactive license to a user terminal utilizing an activation license for package sale. An activation license for package sale is distributed in response to a purchase request from the user terminal, a plurality of encrypted licenses contained in the inactive license are decrypted, an encrypted content contained in an object for package sale is decrypted using a license corresponding thereto so that the decrypted content is reproduced.

Abstract: An online card-present transaction system facilitates card-present type transactions with a merchant over a public network. A host system is configured to accept authentication data from a user via an authentication device. The host system, after authenticating a user is configured to retrieve the user's account information from a user database system and translate a user account number into a temporary transaction number. The temporary transaction number is then transmitted directly from the host system to the merchant, thereby eliminating the need for the user to send to the merchant over the internet, the user's transaction account number.

Abstract: A method and system for supply of data, including generating a first digital certificate referred (empowerment certificate) signed with a first signing entity's electronic signature. The empowerment certificate includes attributes of the described entity, information identifying the first signing entity, indication of data relating to the described entity, indication of a source of the data, and identification of a relying entity to which the data can be supplied. The relying entity forwards the empowerment certificate to a source supplying the data indicated in the empowerment certificate. The data may be supplied to the relying entity by a second digital certificate (custom certificate), signed with a second signing entity's electronic signature. Custom certificates may appear in custom certificate revocation lists. A system and method for transfer of ownership of electronic property from a first entity to a second entity, and a method and system for electronic voting are also provided.

Abstract: A method is disclosed. The method includes generating an initial key after interacting with an access device, storing the initial key at a key storage location, altering the initial key with a public key to form an altered key, and sending the altered key to a server computer along with an identifier for the access device. The altered key is changed to the initial key at the server computer and is stored with the identifier in a database in operative communication with the server computer. The initial keys that are stored at the key storage location and in the database are used to alter and restore transaction data associated with multiple financial transactions that are conducted using the access device.