Abstract: Data is recorded on an optical disk. In a prescribed region of the disk, an identifier is provided for indicating whether a barcode-like mark is present or not on the disk. The identifier and the barcode-mark are in different locations on the disk. At least a portion of the barcode-like mark overwrites a pre-pit area of the disk.

Abstract: An account processing method and system for providing specific pre-authorization parameters for transactions that require specific pre-authorization by a network user specifying conformity parameters within which any requested transaction parameters must comply in order to enable the requested transaction to be approved. Upon establishment of an account, transaction types by standard industrial code (SIC) are specified as needing specific authorization prior to approving the transaction as requested by a merchant An account issuer provides a service to account members that permits network user to independently specify the parametric conditions under which to approve a transaction within such categories. Once a transaction is approved, the pre-authorization is spent and requires individual pre-authorization of each transaction, thereby minimizing misuse of an account number by merchants or others that come into possession of the network user's account number.

Abstract: A multicast message transmission device and a message receiving protocol device for guaranteeing a fair message delivery time for a multicast message. At the receiving protocol device, a release time of the received multicast message is set to a prescribed time specified to all receiving protocol devices of the same multicast group, and the received multicast message is stored until the release time, and then released to a corresponding upper level device. At the transmission device, each receiving protocol device is authenticated, and then the encrypted multicast messages are transmitted to the receiving protocol devices, while a prescribed decryption key corresponding to the encryption key of the encrypted multicast message is distributed the authenticated receiving protocol devices prior to transmissions of the multicast messages.

Abstract: A method and apparatus for controlling use of an electronic system is described. Use of the electronic system is controlled by programming at least one unique code into an auxiliary memory of the electronic system. The auxiliary memory is a permanently lockable memory that is located outside of a main memory array space. The unique code is compared to at least one component code. Use of the electronic system is controlled based on a predefined relationship between the unique code and the component code.

Abstract: A method for securing a system protected by a predefined hierarchy of cryptographic keys, and in particular, for securing a pay TV system, against unauthorized users. An individual cryptographic key assigned to a dishonest customer is determined by forming the intersection of at least two predefined subsets formed at different points in time and pertaining to the same hierarchical level.

Abstract: A wireless data platform (10) comprises a plurality of processors (12, 16). Channels of communication are set up between processors such that they may communicate information as tasks are performed. A dynamic cross compiler (80) executed on one processor compiles code into native processing code for another processor. A dynamic cross linker (82) links the compiled code for other processor. Native code may also be downloaded to the platform through use of a JAVA Bean (90) (or other language type) which encapsulates the native code. The JAVA Bean can be encrypted and digitally signed for security purposes.

Abstract: A multi-level security system prevents unauthorized use of a computer. A program resident on the computer and implements a user-validation procedure. A key device carries a first serial number and an encryption key. A second serial number is stored in said computer, the second serial number being the serial number of a device internal to the computer. A mass storage device installed in said computer stores a validation record. The validation record comprises an unencrypted portion and an encrypted portion, the unencrypted portion including a copy of said first serial number and said encrypted portion including a copy of said second serial number and a user personal identification number. The key device is interfaced to the computer. The first serial number and the encryption key are read from said key device in order to gain authorized use of said computer. The key device may be removed from the computer after authorized use of the computer has been gained, and during operation of the computer.

Abstract: Upon receiving a message {ID′i−1, X′i−1, m′i−1, Yi−1} from a signer (i−1), a signer i generates a random number ri, then calculates Xi=gri mod p using pieces of public information p, q and g, then sets X′i=(X′i−1, Xi), m′i=(m′i−1, mi), then calculates ei=fi(X′i, m′i), di=hi(X′i, m′i) with public one-way functions fi and hi, calculates yi=(yi−1+diri+eisi) mod q using a secret random number si, sets ID′i=(ID′i−1, IDi), and sends information {ID′i,X′i,m′i,y′i} to the next signer (i+1). A verifier calculates ei and di with the one-way functions fi and hi using X′L and m′L contained in received information {ID′L, X′L, m′L, yL}, and makes a check to see if gyL≡X1d1 ILe1 . . .

Abstract: When data is simply input without being aware of describing a program language (e.g., COBOL or FORTRAN), the data input meaning is detected, and software for this data processing is automatically applied and prepared. Various types of worksheets corresponding to the business logic terms and data input positions are stored in a business data file. When an operation unit is operated and data is input to the data input position, the input data is stored as rule setting data. When application data corresponding to the rule setting data is input through the operation unit, a business logic applying section determines the use software in accordance with the corresponding business logic term.

Abstract: A method of communicating encrypted configuration data between a programmable logic device (PLD) and a storage device is included in one part of the invention. The method includes the following steps. Transmit encrypted configuration data stored in a storage device to the PLD. Decrypt the encrypted configuration data to generate a copy of the configuration data in the PLD. Configure the PLD using the copy of the configuration data. In one embodiment, the PLD transmits a key to the storage device. In another embodiment the key is separately entered into the storage device and the PLD and never transmitted between the PLD and the storage device. In another embodiment, the key is entered only into the PLD. The key is used to encrypt the configuration data.

Abstract: An adaptive security system having a hierarchy of security servers. The security system maintains a primary security server for each task or process executing within a computing environment. An enforcement mechanism receives resource requests from the tasks and queries the corresponding primary security server which resolves the request based on a set of security associations. If the primary security server is unable to resolve the request, the enforcement mechanism queries a parent security server. Security servers are dynamically created and terminated in response to changing organizational policies. The present invention facilitates the dynamic creation and termination of security servers to adapt to organizational policy changes.

Abstract: A method and system for recording and reproducing, such as on a record carrier, content information and supplemental information relating thereto. The content information may be audio and/or video, and the supplemental information may provide author identification and/or copy control status. An encoded signal is generated representing the content information and which includes a watermark pattern representing the supplemental information. The watermark pattern cannot be changed without impairing the quality of the content information during reproduction. The supplemental information also includes a control pattern, the watermark being generated by applying a one-way function to such control pattern. This has the advantage that any alteration of the watermark or the control pattern can be detected easily, because it is not computationally feasible to calculate a new control pattern for an altered watermark. Therefore, the supplemental information is well protected against unauthorized manipulation.

Abstract: To store main information with associated additional information incorporated therein, data constituting the additional information is divided into a plurality of small-size data pieces of, e.g., one bit. Then, the respective values of particular ones of predetermined data units (e.g., bytes) constituting the main information are subjected to arithmetic operations in accordance with a predetermined algorithm containing the value of each of the data pieces as a parameter. In this way, the respective values of the particular data units in the main information are modulated in accordance with the values of the individual data pieces in the additional information; at that time, only some of the data unit values are altered with the others left unaltered. For reproduction of the additional information, the stored main information is read out, and the individual data pieces are reproduced from the particular data units by inversely executing the algorithm.

Abstract: An order management system enables a customer to use a terminal device to order food, but can respond rapidly to changes and additions to the menu. When this system starts up, it transmits an operating program and image data from main management equipment to each of a number of order-taking terminal devices. Each order-taking terminal device stores the thus received operating program and image data and displays a menu screen on a display screen on the basis of the thus stored operating program and image data.

Abstract: Data is recorded on an optical disk. In a prescribed region of the disk, an identifier is provided for indicating whether a barcode-like mark is present or not on the optical disk. The identifier and the barcode-like mark are in different locations on the disk. The barcode-like mark has a plurality of bars. Each of the bars extends in a radial direction. The optical disk is constructed from two disk substrates.

Abstract: The invention includes a markup language according to the SGML standard in which document type definitions are created under which electronic documents are divided into blocks that are associated with logical fields that are specific to the type of block. Each of many different types of electronic documents can have a record mapping to a particular environment, such as a legacy environment of a banking network, a hospital's computer environment for electronic record keeping, a lending institution's computer environment for processing loan applications, or a court or arbitrator's computer system. Semantic document type definitions for various electronic document types (including, for example, electronic checks, mortgage applications, medical records, prescriptions, contracts, and the like) can be formed using mapping techniques between the logical content of the document and the block that is defined to include such content.

Abstract: A system and method for determining approval of a multi-currency transaction between a customer and a merchant over a network. The system includes a customer computer which is connected to a communication network, a merchant computer which is connected to the communication network, and a server connected to both the customer computer via the communication network and to the merchant computer via the communication network. The customer computer includes a first set of data which contains an amount the customer is willing to pay the merchant for a product in a first currency. The merchant computer includes a second set of data which contains a product price at which the merchant agrees to sell the product in a second currency. The server receives the first set of data and the second set of data. The server then converts the amount in the first currency into a converted amount in the second currency.

Abstract: An X-Y grid tree clock distribution network for distributing a clock signal across a VLSI chip. Tunable wiring tree networks are combined with an X-Y grid vertically and horizontally connecting all the tree end points. No drivers are necessary at connection points of the tree end points to the X-Y grid. The final X-Y grid distributes the clock signal close to every place it is needed, and reduces skew across local regions. A tuning method allows buffering of the clock signal, while minimizing both nominal clock skew and clock uncertainty. The tuned tree networks provide low skew even with variations in clock load density and non-ideal buffer placement, while minimizing the number of buffers needed. The tuning method first represents a total capacitance of one or more of clock pin loads and twig wiring as a clustered grid load. Next, a smoothing of the clustered grid loads approximates the effect of the X-Y grid.

Abstract: A complete system for the purchasing of goods or information over a computer network is presented. Merchant computers on the network maintain databases of digital advertisements that are accessed by buyer computers. In response to user inquiries, buyer computers retrieve and display digital advertisements from merchant computers. A digital advertisement can further include a program that is interpreted by a buyer's computer. The buyer computers include a means for a user to purchase the product described by a digital advertisement. If a user has not specified a means of payment at the time of purchase, it can be requested after a purchase transaction is initiated. A network payment system performs payment order authorization in a network with untrusted switching, transmission, and host components. Payment orders are backed by accounts in an external financial system network, and the payment system obtains account authorizations from this external network in real-time.

Abstract: A method of automatically detecting a data format type of a stream of data. A determination is made as to whether a current word and a previously received words comprise a set of identifiers associated with a selected type of data. When a preselected number of detections of the set of identifiers has been reached within a predefined time period, the input stream is declared to be the selected type of data. Simultaneously, when the selected type of data is not detected, other data types are sequentially selected for similar checking. This successive selection of different data types allows the method to classify the input data into one out of multiple data types.