Abstract: A digital license includes an identification of a removal service that can authorize removing such license. A client selects the license to be removed and the service, constructs a challenge including therein a challenge license identification block (LIB) identifying the license to be removed, and sends the challenge to the service. The service receives the challenge, stores at least a portion of the challenge in a database, constructs a response corresponding to the challenge and including therein a response LIB identifying the license to be removed and an identification of the service, and sends the response to the client. The client receives the response, employs the response LIB from the response to identify the license to be removed, and removes the identified license upon confirming that the identification of the service in the identified license matches the identification of the service in the response.

Abstract: A computerized method of verifying the identity of an attendant operating a money transfer transaction device includes receiving at the money transfer transaction device a user identification and password from the attendant and receiving at the money transfer transaction device additional information from the attendant. The additional information relates to a security feature that limits access to the transaction device. The method also includes using the additional information, the user identification, and the password to evaluate whether to allow the attendant to operate the transaction device to process a transaction.

Abstract: There is provided a method of, computer programs for and apparatus for providing and accessing digital content such as a news item. A news provider generates a news item, creates a digitally signed version of the news item and packages them together with a digital certificate issued by a certificate authority containing the public key required to decrypt the digitally signed version. The package is posted to a server and is transmitted, or made available or transmission, over a public data network together with a computer program for verifying the news item. A receiving party receives, over the public data network, the package at a client device and is provided with means for launching, and if necessary first downloading, the verifying program. The verifying program uses the public key contained in the certificate to verify the digitally signed news item.

Abstract: A software conditional access system (CAS) for media services provided to a Media Distribution Device, such as a set top box (STB), is disclosed. The STB may be connected to a Media Delivery Service Provider via a broadband connection. Over the broadband connection, a CAS application may be downloaded to the STB, maintained and dynamically updated. Because the CAS is implemented by software on the STB, it is inexpensive to install, maintain and update. When a user desires to purchase media services through the STB, a request, with identifying information, is sent to the Media Delivery Service Provider via the broadband connection. The service provider cross-references the identifying information with a user's account to determine whether to allow the user to view the media service requested. If the service provider determines to allow the user to view the media service, the user's account (typically maintained by the service provider) is charged and a key is downloaded via the broadband connection to the STB.

Abstract: Among other disclosure, a computer-implemented method for context-specific modeling of a collaborative business process includes receiving an identification of a collaborative business process to involve a communication between at least two entities. The identification is submitted by an entity seeking to model the collaborative business process for a specific context associated with the entity. The method includes selecting, in a repository and using the specific context, at least one modeling artifact that has been defined for use in the identified collaborative business process. The repository includes a plurality of stored modeling artifacts for at least one collaborative business process, each of the stored modeling artifacts associated with at least one context value. The method includes providing the selected modeling artifact to the entity in response to the received identification.

Abstract: A method, device, and system including a digital rights management (DRM) license manager to protect software applications from unauthorized use. The DRM license manager system binds essential application data to a software license. This binding is achieved by adding an encryption key to a software license and encrypting the application data with that key. The essential application data is any kind of data which is required for proper operation of the program, such as media files, game levels or state tables. The DRM license manager system performs a check and decrypt operation of the essential application data during program run time. It requires that the license is available on the system. It also ensures that the decryption operation can only take place if the conditions defined in the license are met.

Abstract: A method and system is provided for assuring the integrity of data used to evaluate financial risk or exposure in trading portfolios such as portfolios of derivative contracts by looking for sweeping changes or statistically significant trends suggestive of possible errors. The method and system uses Content Analysis to measure the changes in the information content or entropy of data to detect abnormal changes that may require human intervention. A graphical user interface can also be provided that provides a mechanism for alerting users of possible errors and also gives an indication of the severity of the detected abnormality.

Abstract: The present invention is a system for conducting commercial transactions over the Internet, whereby a shopper can simultaneously search for a plurality of items on at least one website with a single search command. The shopper can selectively specify the items of interest to be searched and can also specify and/or exclude websites to be searched. The system also searches a selectively alterable set of default website(s) and intelligently recommended website(s). Under one search command, the system simultaneously searches for all of the items on any combination of the following: site(s) specified by the user, a default website, an alterable set of default or intelligently recommended website(s). Information regarding the items retrieved as a result of the search is compiled under an alterable set of criteria, and displayed for viewing by the shopper. The shopper can simultaneously purchase selected ones of said items with one order command.

Abstract: A Digital Rights Management (DRM) content player and play method for a portable terminal are disclosed. The DRM content player includes a first memory unit for storing a license stating usage rights upon an associated DRM content, and a content list of DRM contents, a second memory unit for storing the DRM content associated with the license, wherein the DRM content and associated license are received from an external source, a first controller for controlling the first memory unit, and finding a desired license in the first memory and sending the found license to the second memory unit, and a second controller for communicating with the first controller and controlling the second memory unit.

Abstract: An electronic content distribution and exchange system provides authenticated, reliable content downloads and tracking capabilities. Content is distributed to users through the invention's architecture. A user registers for the purchase of content through an interface on a client system or via a Web site. The purchase is for a license to the content, not for the content itself. A list of available content is displayed to the user through the client system or the Web site. The invention's central servers log the purchase of the content into a license database. The electronic copy of the song may be already resident on the client system in a hidden area, carouseled in a protected broadcast channel, in the central database ready to be sent out in slices, or resident on a secure server on the Internet. The user accesses content through the client system's user interface where the user plays the content and controls its playback.

Abstract: A method and apparatus for processing credit card transactions over the Internet includes an application program interface (API) that converts a simple ASCII transaction message from the merchant to the message spec required by the transaction processor. The API also encrypts the transaction message so that the transaction is secure over the Internet and manages the message traffic between the merchant and transaction processor. In a second preferred embodiment, a merchant sends a simple ASCII transaction message via a SSL (secure sockets layer) Internet connection. In preferred embodiments, redundant connections are set up between the merchant and the transaction processor, allowing a transaction to continue being processed if one of the connections fails.

Abstract: A system for making computing applications aware of business events. The system can consist of an enterprise integration layer that automatically publishes business events and a messaging system that automatically subscribes to business events and makes the computing applications aware of the business events. The enterprise integration layer can include a set of client access interfaces, a business object server, and a set of adapters. The interfaces transform data from the format of a front-office application to a common data format. The business object server performs object assembly and disassembly, caching and synchronization, and service invocation functions. The adapters transform business objects into data requests compatible with a back-office system. The enterprise integration layer can also include an enterprise object model to standardize business objects, a rules engine to define and store rules regarding data and events, and a business event repository to contain definitions of business events.

Abstract: The present invention is a method, system and apparatus for the policy based provisioning and management of a collaborative context. A policy based application provisioning system for use in a collaborative environment can include a policy having rules for limiting collaborative context creation and operation in the collaborative environment. A context provisioning process can be coupled to the policy and configured to create collaborative contexts in the collaborative environment limited by the rules in the policy. Finally, a context management process can be coupled to a data store of usage data for created ones of created collaborative contexts in the collaborative environment.

Abstract: A method of conducting real time, on-line financial transactions includes operating at least one communication network (12) which can communicate with first and second communication devices (14, 16) having first and second electronic addresses respectively, the communication network (12) being in communication with one or more databases (20) which contain details of first and second accounts, receiving information from the first communication device (14), which information includes details of transfer to be made into the second account from the first account, communicating a signal to interrogate the first account to determine if the transfer can be made, and if the transfer can be made, debiting the first account with the amount of the transfer, and crediting the second account with the amount of the transfer.

Abstract: A currency distribution system and method. In accordance with the invention, a first transaction is facilitated by which currency is transferred electronically between a first entity and a second entity, and whereby a first balance of currency is maintained by said second entity. A second transaction is facilitated by which at least a portion of the first balance of currency is transferred electronically between the second entity and a third entity. In particular, the second transaction is facilitated by a processor that includes code for ascertaining data with respect to the third entity, the data pertaining to goods or services unrelated to the currency, and providing a qualification in response thereto. A second processor included for enabling the second transaction in response to the qualification. A database is employed and a query is made to determine the qualification for the second transaction.

Abstract: There is disclosed a method for performing secure electronic transactions on a computer network, the network comprising a buyer's computer, a vendor server, a creditor server and a security server. The buyer's computer has a fingerprint file stored in the memory thereof.

Abstract: An Improved Method and System for Electronic Data Sales and Distribution over Wide Area Networks is disclosed. The preferred system and method divides the software or other data to be distributed into a separate licensing module and a program module, with each module being distributed separately. The preferred licensing module can be distributed by an e-commerce server over a wide-area network, while the program module is distributed by a separate server computer over the wide-area network (or other method). Furthermore, the software or other electronic data can be updated easily by simply updating the single repository of the program module, while leaving the licensing module(s) at each e-commerce server unchanged.

Abstract: Provided is a method, system, and program for enabling access to data in a storage medium within one of a plurality of storage cartridges capable of being mounted into a interface device. An association is provided of at least one coding key to a plurality of storage cartridges. A determination is made of one coding key associated with one target storage cartridge, wherein the coding key is capable of being used to access data in the storage medium within the target storage cartridge. The determined coding key is encrypted. The coding key is subsequently decrypted to use to decode and code data stored in the storage medium.

Abstract: Provided is an electronic postal money order system and method comprising the purchase and fulfillment of a money order, having the steps of inputting, through a computer, money order identifying data, comprising at least the amount of the money order and addressee data and inputting payment authorization data through a payment authorization terminal. The system also transmits the money order identifying data and payment authorization data to a central server, authenticates the payment authorization data and, upon such authentication, prints a money order corresponding to the inputted money order identifying data and mails the money order to the addressee.

Abstract: The present invention provides a device for authenticating user's access rights to resources, which comprises first memory means for storing challenging data, second memory means for storing unique identifying information of the user, third memory means for storing proof support information which is a result of executing predetermined computations to the unique identifying information of the user and unique security characteristic information of the device, response generation means for generating a response from the challenging data stored in the first memory means, the unique identifying information stored in the second memory means and the proof support information stored in the third memory means, and verification means for verifying the legitimacy of the response by verifying that the response, the challenging data and the unique security characteristic information of the device satisfy a specific predefined relation.