Abstract: Techniques are disclosed for protecting privacy of parties to electronic transactions, such as transactions conducted through a GSM network. An anonymity service provider receives orders directed from its subscriber to a recipient for goods or services, along with information about its subscriber. The anonymity service provider relays the order to the recipient but withholds information about the subscriber, as the subscriber directs. The recipient receives payment for the good or service by way of a voucher from the anonymity service provider.

Abstract: The present invention provides a system and method of tracing the spread of computer malware in a communication network. One aspect of the present invention is a method that traces the spread of computer malware in a communication network. When suspicious data characteristic of malware is identified in a computing device connected to the communication network, the method causes data that describes the state of the computing device to be stored in a database. After a specific attack against the communication network is confirmed, computing devices that are infected with the malware are identified. Then, the spread of the malware between computing devices in the communication network is traced back to a source.

Abstract: A method and apparatus for computer platform identification. According to the method, a first fingerprint is generated using a plurality of computer system traits. A second fingerprint is generated on an unidentified computer and then compared to the first fingerprint. This comparison results in a value representing a probability that the unidentified computer system is the same computer system which generated the first fingerprint. A system disclosed includes a processor which is coupled to memory by a bus. The memory contains a first routine which retrieves a plurality of system traits to form a first fingerprint. The memory also contains a second routine which retrieves the first fingerprint and compares the first fingerprint to a second fingerprint.

Abstract: A method for encoding MPEG compatible video data for subsequent compression comprises detecting a plurality of frames of video data organized as a GOP, generating an encryption key for the GOP, and encrypting the video data using GOP-synchronized substitution, transposition, and rotation transformations that are parameterized by offsets derived from the generated encryption key.

Abstract: A device for transferring data between a data processing machine and a smart card is provided. The data processing machine has a drive for receiving a removable storage unit and for reading and writing data from and to said removable storage unit. The device for transferring data between a data processing machine and a smart card includes a housing insertable into the drive. The housing has a recess for receiving a smart card. The device for transferring data further includes a logic circuit, disposed within the housing, for transferring data between the data processing machine and the smart card.

Abstract: In accordance with a first aspect of the present invention, a security sensitive program that operates with a secret is made tamper resistant by distributing the secret in space as well as in time. In accordance with a second aspect of the present invention, a security sensitive program is made tamper resistant by obfuscating the program. In accordance with a third aspect of the present invention, a security sensitive application is made tamper resistant by isolating its security sensitive functions, and making the isolated security sensitive functions tamper resistant by distributing the secrets of the security sensitive functions in time as well as in space, and/or obfuscating the security sensitive functions. In one embodiment where obfuscation is employed, the pseudo-randomly selected pattern(s) of mutations is (are) unique for each installation.

Abstract: A method, apparatus, and storage medium for encoding data. According to one embodiment, the data is encrypted with a variable encryption technique, and the encryption is varied to prevent oversaturation of a processor. According to another embodiment, a method, apparatus, and storage medium for decoding data. Encrypted data is received and decrypted, wherein the encrypted data has been generated by encrypting the data with a variable encryption technique, wherein the encryption is varied to prevent oversaturation of a processor.

Abstract: A device for transferring data between a data processing machine and a smart card is provided. The data processing machine has a drive for receiving a removable storage unit and for reading and writing data from and to said removable storage unit. The device for transferring data between a data processing machine and a smart card includes a housing insertable into the drive. The housing has a recess for receiving a smart card. The device for transferring data further includes a logic circuit, disposed within the housing, for transferring data between the data processing machine and the smart card.