Abstract: The invention provides a method and system for simultaneously authenticating a user using two or more factors, such as both a password and a physical token or both a password and biometric information. The user presents a physical token including a storage device to a processor and attempts to log in using a first password; the processor includes a login service which receives the first password, accesses the storage device to transform the first password into a second password, and authenticates the second password using an operating system for the processor. The storage device includes encrypted information regarding the second password which can be relatively easily determined in response to the first password, but which cannot be relatively easily determined without the first password. The system or the storage device may also store information for biometric authentication of the user.

Abstract: The invention provides a method of and system for automated verification and prevention of spoofing for biometric data, such as handwritten signatures. Biometric data known to be true, such as signatures already entered by the authentic person, are recorded and compared against test biometric data, such as a test signature entered by a person seeking authentication. The test biometric data is compared against the known biometric data, and is accepted only if the test biometric data is sufficiently "close" to the known biometric data, but not so close as to indicate that known biometric data was recorded and played back for the test. The test biometric data represents a handwritten signature given contemporaneously by the person seeking access, and is verified against a set of template signatures earlier given by at least one authorized person.

Abstract: The invention provides a method of and system for secure application of seals. An optical image of a seal is recorded by a computer and encrypted using a key for encryption generated in response to template biometric data from authorized persons. When a person seeks to use the seal, for example to apply the seal to a document, test biometric data is input from that person and used to generate a key for decryption. If the test biometric data matches the template biometric data, the key for decryption will be useful for decrypting the encrypted seal, and the person seeking access to the seal. The test biometric data represents a handwritten signature given contemporaneously by the person seeking access, and is verified against a set of template signatures earlier given by at least one authorized person. Specific signature features are determined in response to the template signatures and used for generating one or more keys for encrypting the seal.