Abstract: In a value transfer scheme, users are provided with programmable devices, for example, smart cards, capable of carrying data representing at least one available commodity value. Data representing user accounts is held at a remote processing station. Transactions between users are effected by the off-line exchange of data between users' respective smartcards, the exchanged data containing a record of each transaction entered into. The user account data for each user's account held at the remote processing station is updated only subsequently when the user's smartcard is on-line to the remote processing station and data therefrom is uploaded to the remote processing station. The scheme of the invention can, conveniently, be based around the ITSO scheme which is used to govern the secure transfer of data The scheme is capable of providing a secure multi-commodity value transfer system.

Abstract: In a value transfer scheme, users are provided with programmable devices, for example, smart cards, capable of carrying data representing at least one available commodity value. Data representing user accounts is held at a remote processing station. Transactions between users are effected by the off-line exchange of data between users'respective smartcards, the exchanged data containing a record of each transaction entered into. The user account data for each user's account held at the remote processing station is updated only subsequently when the user's smartcard is on-line to the remote processing station and data therefrom is uploaded to the remote processing station. The scheme of the invention can, conveniently, be based around the ITSO scheme which is used to govern the secure transfer of data. The scheme is capable of providing a secure multi-commodity value transfer system.

Abstract: A programmable smartcard device (10) carries a file system (22, 24) and operating software enabling the on-device file system to interface with at least one off-device file and/or application. It also has a script engine (32) capable of running one or more Application Protocol Data Units (1APDUs') associated with a particular form of transaction so as to modify the structure and/or content of the file system, or the commands to be used for accessing the file system or any security conditions associated therewith. The smartcard device (10) is provided with comparator means (34) configurable by a security APDU run by the script engine (32) so that it operates in use to compare the commands carried out in implementing the transaction with one or more reference commands and to restrict or prevent further access or modifications to the on-device data, file system, commands or security conditions in dependence on the outcome of the comparison carried out by the comparator means (34).

Abstract: A valve arrangement for a pipeline protection system comprises a plurality of barrier valves in series with each other for coupling in a pipeline, wherein the valves are received in a metallic block.

Abstract: A programmable device carries an on-device file. An interface device is provided to interface with the programmable device, the interface device having an off-device file. Web (Internet) standard language operating software is stored in the programmable device in a compressed format, that software containing at least some of the file system and commands for accessing the file system which enable the on-device file and off-device file to interface with each other. The interface device further includes an upgrade file. The system operates to compare the upgrade file to the on-device file and upgrade the on-device file to the newer upgrade file. The system is further provided with a web (Internet) standard language file containing a configurable Security Environment. The system is further provided with a file including a data model (‘virtual card’) corresponding to a programmable device and adapted for downloading to the programmable device.

Abstract: A smartcard comprises a substrate having a smartcard chip formed on it as well as a secondary memory device, for example, a FLASH ROM, operatively connected to the smartcard chip. The secondary memory device is capable of storing a plurality of pages of data, each having associated with it a unique sequence number, the sequence number being stored separately from the data page so that when the page is to be read, the sequence number retrieved with the page can be compared with the stored sequence number to authenticate the page.

Abstract: In a system for carrying out pupil response testing, an individual who is to be tested is provided with a portable programmable device, for example, a smartcard carrying data representing personal information, for example, the age and gender of the holder. An interface device comprises means for reading the said data from the programmable device, such as a smartcard reader, and test means including a camera for carrying out pupil response testing. Control means process the results from the pupil response test in dependence on the data read from the programmable device by the interface device. Preferably, the smartcard or other programmable device also carries biometric data identifying the individual to whom the programmable device has been issued and the interface device is operable to read the biometric data from the smartcard and verifying that the holder is the individual to whom the smartcard has been issued.

Abstract: A programmable smartcard device (10) carries a file system (22, 24) and operating software enabling the on-device file system to interface with at least one off-device file and/or application. It also has a script engine (32) capable of running one or more Application Protocol Data Units (1APDUs' associated with a particular form of transaction so as to modify the structure and/or content of the file system, or the commands to be used for accessing the file system or any security conditions associated therewith. The smartcard device (10) is provided with comparator means (34) configurable by a security APDU run by the script engine (32) so that it operates in use to compare the commands carried out in implementing the transaction with one or more reference commands and to restrict or prevent further access or modifications to the on-device data, file system, commands or security conditions in dependence on the outcome of the comparison carried out by the comparator means (34).

Abstract: The invention provides an ITSO-based smartcard system including a programmable smartcard device for use in the ITSO scheme carrying a file system and operating software enabling the on-device file system to interface with at least one off-device ITSO application. At the interface, the off-device ITSO application is permitted to access and/or modify data in the on-device file system. The programmable smartcard device comprises monitoring means operable to monitor the sequence of operations carried out by the off-line application in accessing and/or modifying data in the on-device files and to restrict or prevent further access or modifications to such data if that sequence of operations does not meet predetermined criteria. Preferably, the monitoring means includes a state engine capable of being set to one of a plurality of states, at least one of which is an error state, in which further modification to the data in some or all of the on-device files is prevented until the sequence of operations is restarted.

Abstract: In an ITSO scheme, construction and initial sealing of ITSO Product Entities (IPEs) is carried out by one of a plurality of ITSO Secure Application Modules (‘ISAMs’) at a location remote from ticket retailer devices at which the IPE fields are generated. Each ticket retailer device is connected to an ISAM over the Internet or other network by control means operable to select an available ISAM from an ISAM array for the duration of a sealing transaction initiated by that ticket retailer device. Validation of IPEs can also be carried out at a remote ISAM array accessed over the Internet or other network. The remote ISAM array can be used in a variety of ITSO applications, for example, transportation ticket sales or secure systems for the prescription of drugs. In the latter scheme, prescription information is presented by the prescription writer for sealing in the form of an IPE and the patient can later validate the prescription IPE at a pharmacy or other supplier.