Abstract: A system and method for secure purchase and delivery of video content programs over various distribution media, including distribution networks and digital video disks, includes an integrated circuit card (e.g., a smart card, PCMCIA card) which is configured to store decryption capabilities for related video programs. The decryption capabilities are initially kept in a secure store at a video merchant. When a purchaser orders a particular video program, the decryption capabilities for that program are downloaded to the IC card, either at the merchant premises or over a distribution network. The video content program is distributed in encrypted format via the distribution media to the purchaser. The IC card uses the decryption capabilities to at least partly decrypt the video content program without exposing the decryption capabilities.

Abstract: An online commerce system facilitates online commerce over a public network using an online commerce card. The "card" does not exist in physical form, but instead exists in digital form. It is assigned a customer account number that includes digits for a prefix number for bank-handling information, digits for a customer identification number, digits reserved for an embedded code number, and a digit for check sum. The bank also gives the customer a private key. During an online transaction, the customer computer retrieves the private key and customer account number from storage. The customer computer generates a code number as a function of the private key, customer-specific data (e.g, card-holder's name, account number, etc.) and transaction-specific data (e.g., transaction amount, merchant ID, goods ID, time, transaction date, etc.). The customer computer embeds the code number in the reserved digits of the customer account number to create a transaction number specific to the transaction.

Abstract: A computer-implemented pseudo random number generator includes an input device to assemble multiple classes of bits from multiple sources into an input bit string. The multiple classes of bits include an internal class of bits from at least one source internal to the random number generator, such as a static bit register which maintains the current state of the generator. The input device also gathers one or more external classes of bits from one or more sources external to the random number generator, such as a machine class of bits which relate to operating parameters of the computer and an application class of bits which relate to execution of an application running on the computer. The input device concatenates the three classes of bits into an arbitrary length input bit string. The random number generator also has a hash computing device which computes an m-bit hash value of the input bit string assembled by the input device.

Abstract: An electronic cash protocol including the steps of using a one-way function f.sub.1 (x) to generate an image f.sub.1 (x.sub.1) from a preimage x.sub.1 ; sending the image f.sub.1 (x.sub.1) in an unblinded form to a second party; and receiving from the second party a note including a digital signature, wherein the note represents a commitment by the second party to credit a predetermined amount of money to a first presenter of the preimage x.sub.1 to the second party.

Abstract: An authentication system includes a portable information device, such as a smart card, that is configured to store and process multiple different applications. The smart card is assigned its own digital certificate which contains a digital signature from a trusted certifying authority and a unique public key. Each of the applications stored on the smart card is also assigned an associated certificate having the digital signature of the certifying authority. The system further includes a terminal that is capable of accessing the smart card. The terminal has at least one compatible application which operates in conjunction with an application on the smart card. The terminal is assigned its own certificate which also contains the digital signature from the trusted certifying authority and a unique public key. Similarly, the application on the terminal is given an associated digital certificate. During a transactional session, the smart card and terminal exchange their certificates to authenticate one another.

Abstract: A cryptography system architecture provides cryptographic functionality to support an application requiring encryption, decryption, signing, and verification of electronic messages. The cryptography system has a cryptographic application program interface (CAPI) which interfaces with the application to receive requests for cryptographic functions. The cryptographic system further includes at least one cryptography service provider (CSP) that is independent from, but dynamically accessible by, the CAPI. The CSP provides the cryptographic functionality and manages the secret cryptographic keys. In particular, the CSP prevents exposure of the encryption keys in a non-encrypted form to the CAPI or application. The cryptographic system also has a private application program interface (PAPI) to provide direct access between the CSP and the user. The PAPI enables the user to confirm or reject certain requested cryptographic functions, such as digitally signing the messages or exportation of keys.

Abstract: A dual piston alternately reciprocating pumping apparatus utilizing, in part, a pressure based precompression stroke to provide product at a substantially uniform discharge pressure. In operation, a first feed piston is advanced through a first feed cylinder to discharge product therefrom, during which time a second feed piston is retracting within a second feed cylinder to obtain a product charge therein. The second feed piston reaches bottom dead center and thereafter advances through the second feed cylinder on a precompression stroke, during which no product is discharged from the second feed cylinder. After a predetermined pressure related to that within the second feed cylinder is detected, further advancement of the second feed piston is terminated and is not reactivated until the first feed piston nears top dead center. Therefore, a product having a substantially uniform discharge pressure is provided.

Abstract: A unitized loader has a structural framework supporting a plurality of air bearings on its upper surface and on its lower surface, the upper air bearings supporting cargo on the loader and the lower bearings supporting the loader on the floor, the structural framework delivering air to both upper and lower bearings from a blower mounted on the framework. A pusher is movably mounted on the framework to index or discharge the cargo, and the upper air bearings are designed to provide greater lift along the sides of the loader to naturally compact cargo. Loader motion is controlled by a belt and chain system, the belt forming a pathway under the lower air bearings during loader extension and the chain connected by a driven sprocket to a drive motor on the loader framework, the belt and chain forming a loop with one point connected to the floor under the loader. The discharge end of the loader may be equipped with a ramp-like articulating section for guiding cargo to floor level.