Abstract: The present disclosure is directed to a method for securing access to a system. The method may comprise collecting a set of biometric information and a set of personal information of a person; storing the set of biometric and personal information to a certifying device; receiving a first biometric input from the person; sending the first biometric input to the certifying device; receiving a set of requested biometric tests from the certifying device, the set of requested biometric tests is randomly selected from the set of biometric information; collecting a set of biometric inputs from the person in response to the set of requested biometric tests; sending the set of biometric inputs to the certifying device; determining whether the biometric inputs are valid; receiving a token with personal information representing the person when the biometric inputs are valid; registering the token with the system to allow access to the system.

Abstract: A message brokering mechanism for performing a recovery operation in a transaction processing system including first and second stages operable to exchange message requests and responses. The first stage may receive a message request from a message source and may check whether the message request is a special message request. This may be by way of checking if a recovery attribute of the message request is set. A normal message request may have a recovery attribute that is not set. If the message request is a special message request, it may be dispatched to the second stage. If the message request is a normal message request, it may be dispatched to the second stage if the normal message request is not a repeat normal message request.

Abstract: A message brokering mechanism for a transaction processing system may include first and second stages operable to exchange message requests and responses. The first stage may be operable to receive a message request from a message source and to check whether there is an existing first stage response to the message request. In some embodiments, if there is an existing first stage response, the first stage may dispatch the existing first stage response to the message source.

Abstract: Disclosed is a mechanism, method and apparatus for providing cryptographic key management. In one example, a cryptographic key management system (100′) includes a plurality of processing mechanisms (140) for receiving data to be signed according one or more signing cryptographic keys. Each processing mechanism (140) is coupled to one or more respective cryptographic key modules, such as a hardware security module (146) configured to store the cryptographic key(s). A network configuration database (144) is accessible by each processing mechanism (140) and stores information identifying the cryptographic key(s) stored in the cryptographic key modules (146).

Abstract: Disclosed is a message brokering mechanism (120, 220) for performing a recovery operation in a transaction processing system (100, 200), comprising first and second stages (221, 222) operable to exchange message requests and responses. The first stage (221) is operable to receive a message request from a message source (110, 210) and to check whether the message request is a special message request. This may be by way of checking if a recovery attribute of the message request is set. A normal message request may have a recovery attribute that is not set. If the message request is a special message request, it can be dispatched to the second stage. If the message request is a normal message request, it may be dispatched to the second stage only if the normal message request is not a repeat normal message request.

Abstract: Disclosed is a message brokering mechanism (120, 220) for a transaction processing system (100, 200), comprising first and second stages operable to exchange message requests and responses, wherein the first stage is operable to receive a message request from a message source (110) and to check whether there is an existing first stage response to the message request and, conditional on there being an existing first stage response, to dispatch the existing first stage response to the message source.