Abstract: A method and system for determining the progress of adoption of an on-demand capabilities model by an organization. A graph displays parameters pertaining to a current state, a modelled state, and a target state for the organization. The graph includes a three-dimensional perspective view of an alignment of a business capability of the organization with respect to an information technology (IT) capability of the organization. A first metric and a second metric are determined. The first metric equals a numerical value associated with a degree of change required for the organization to achieve the target state for the business capability in comparison with a degree of change required across the IT capability. The second metric equals a numerical value associated with a degree to which a business implementation of the on-demand capability lags that of the IT capability. The graph includes the first metric and the second metric.

Abstract: A transformation engine for transforming a legacy IT infrastructure into an on-demand IT infrastructure in a financial services enterprise, the transformation engine comprising: a determiner component for determining a current status of the legacy IT infrastructure; a comparator component for comparing the determined current status to an idealised set of outcome parameters to determine a set of deviation parameters; and the determiner component determining at least one control point within the set of deviation parameters which require enterprise wide governance.

Abstract: Printed document contents are scanned and digitized, using a conventional scanner, and displayed page by page on a screen. Using a conventional editor and an input device, the scanned and digitized document contents are edited before being used to generate a digital signature. This allows reading errors, which could invalidate a subsequent verification process, to be corrected. Using the editor, and an input device such as a mouse, the signing authority identifies on the screen different segments of the document, each segment containing data of a single type and selects for each segment a set of rules, among a group proposed by the system, for authenticating it. Then, for each segment, an edited digital form of the data contents are derived using the method defined in the rules. A hash value of the rules used and the edited digital form of the segment contents is calculated using a public hashing algorithm.

Abstract: A transaction processing system comprises at least one transaction terminal (10, 11, 12) having means to receive characteristic data from a user, which characteristic data is required to generate a characteristic image associated with the user, such as an image of the user's signature, from data stored in a data processing system (14); and logic for generating a transaction message by combining transaction data with the characteristic data in such a way that the transaction data is required to recover the characteristic data from the message. The data processing system (14) comprises means to store the user data, to receive and store the message, to recover the characteristic data from the message using the transaction data, and to reconstruct the characteristic image from the user data using the characteristic data to establish that the transaction was valid by associating the characteristic image with the transaction data.

Abstract: A data communications system is described in which messages are processed using public key cryptography with a private key unique to one or more users (150) under the control of a portable security device (120), such as a smart card, held by each user, the system comprising: a server (130) for performing public key processing using the private key. The server (130) stores, or has access to, the private key for the, or each, user in encrypted form only. The private key is encrypted with a key encrypting key and each security device (120) comprises means for storing or generating the key encrypting key and providing the key encrypting key to the server (130). The server comprises secure means (360) to retrieve the encrypted private key for the user, decrypt the private key using the key encrypting key, perform the public key processing using the decrypted private key, and delete the decrypted private key after use.

Abstract: A method and system are disclosed for the implementation of a weakened privacy channel. This is achieved through use of a weakened symmetric cryptographic algorithm called commercial data masking. The masked text is created from clear text at one system and may to transported electronically to another system where the masked text may be unmasked to produce the clear text. The reason to use the commercial data masking algorithm for data privacy is that it is exportable to organizations to which products which contain the Data Encryption Algorithm when used for data privacy are not exportable. In addition, a method and system is disclosed by which the key when used for commercial data masking may be transformed into a key that may be used with the Data Encryption Algorithm.

Abstract: An electronic funds transfer system (EFT) is described in which retail terminals located in stores are connected through a public switched telecommunication system to card issuing agencies data processing centers. Users of the system are issued with intelligent secure bank cards, which include a microprocessor, ROS and RAM stores. The POS includes a personal key (KP) and an account number (PAN) stored on the card when the issuer issues it to the user. Users also have a personal identity number (PIN) which is stored or remembered separately.A transaction is initiated at a retail terminal when a card is inserted in an EFT module connected to the terminal. A request message including the PAN and a session key (KS) is transmitted to the issuers data processing center. The issuer generates an authentication parameter (TAP) based upon its stored version of KP and PIN and a time variant parameter received from the terminal.

Abstract: An electronic funds transfer system (EFT) is described in which retail terminals located in stores are connected through a public switched telecommunication system to card issuing agencies data processing centers. Users of the system are issued with intelligent secure bank cards, which include a microprocessor, ROS and RAM stores. The ROS includes a personal key (KP) and an account number (PAN) stored on the card when the issuer issues it to the user. Users also have a personal identity numbe (PIN) which is stored or remembered separately.A transaction is initiated at a retail terminal when a card is inserted in an EPT module connected to the terminal. A request message including the PAN and a session key (KS) is transmitted to the issuers data processing center. The issuer generates an authentication parameter (TAP) based upon its stored version of KP and PIN and a time variant parameter received from the terminal.