Abstract: A method and apparatus for establishing and distributing a currency is disclosed. First, a user accesses a web site and downloads a form. The user completes and returns the form with a currency name, an initial amount of currency and other parameters which characterize the currency. Next, the system server checks to ensure the requested currency name is unique. If the name is unique, the system server and user's smart card employ a cryptographic key management system to establish the currency as a leaf in a currency tree on the user's smart card. A new root value is computed for the currency tree and saved in memory on the user's smart card. The user may then distribute the currency to other holders of smart cards from the same smart card issuer using the same cryptographic key management system employed between the system server and the user's smart card.

Abstract: A method for performing electronic transactions, comprising receiving a long-term certificate, authenticating a user associated with the long-term certificate, and then sending a short-term certificate to the authenticated user. In addition, risk associated with the user can be evaluated, and this risk information, as well as other information, can be included in the short-term certificate.

Abstract: The generation of electronic identifiers for network interface units connected to a data network for use in detecting unauthorized decryption of encrypted data transmitted over the data network. A random number is generated for use as a private key decryption code and is stored in memory in each network interface unit. A public key is calculated from the stored private key using a non-invertible mathematical formula. If the calculated public key is unique, then a portion of the public key (e.g. a subset of its bits) is stored in a data provider database as an electronic identifier for use in detecting unauthorized decryption of data by the interface unit.

Abstract: We have recognized that there is a strong need to control and maintain the secrecy of the intelligence that may be used by computers to communicate with another, for example, by encrypting the messages that they exchange with one another. Thus, the encryption keys used to encrypt such messages need to be managed in a highly secure manner. Accordingly, we provide an encryption module, which, in accord with an aspect of the invention, generates a unique device encryption key (S.sub.local), a cryptographic key formed from a unique identification key (S.sub.id) and an associated public key (KP.sub.id), and at least one program encryption key, in which the public key is generated as a function of the unique identification key. The module then encrypts the unique identification key and program encryption key using said device encryption key and stores the encrypted result in memory internal to security module, thereby securing the keys against misappropriation.

Abstract: In an electronic card of the type for insertion into a host electronic device for providing to the host device security parameters pertaining to the rightful holder of the card, the security parameters are stored in encrypted form to preclude their discovery by unauthorized parties. The decryption mechanism resists probing by unauthorized parties.

Abstract: A security node disposed in the telecommunications network connecting calling and called parties transforms information (which can be voice, data, facsimile, video and other types of calls or messages) encrypted in a first format to (a) encrypted information in a different format or to (b) non-encrypted information, and vice-versa. The node is accessible from any location connected to the network. By routing calls or messages originated by the calling party and destined for the called party via the security node, and providing appropriate control signals to the node, the information may be encrypted only over a portion of the transmission path between the parties, and clear over the remainder of the transmission path. Alternatively, the information may be encrypted in different portions of the path using different encryption algorithms.

Abstract: In communication devices for conducting secure communications over insecure channels, means for detecting active attacks on voice or video communication is provided. These means enhance security of exchange of certificates, netkeys, and the like for use in securing subsequent voice, video, data, or facsimile communications.

Abstract: An attractive, durable, three-dimensional replacement panel for a soft-drink vending machine or the like. A steel panel is laminated with a polymeric seal layer, printed with a polymeric ink to create a graphic and then overcoated with permanently bonded hard, tough crosslinked polyester material, followed by the application of a temporarily protective polymeric sheet that is applied using a release adhesive.

Abstract: A digital processor (16) is disclosed for improving the statistical characteristics of nondeterministic random-like binary sequence. The basic elements of the digital processor are a feedback loop comprising a delay (17) and a signal combiner (18) and a subsampler (19). Maximum performance of the digital processor is achieved when a relatively prime relationship exists between number of cells in the delay (17) and ratio of the original signaling rate to the output signaling rate of the subsampler (19). Mathematical analysis is presented for showing that the digital processor improves both the equidistribution of the binary variable and autocorrelation statistic of output signal over the nondeterministic random-like binary signal. A further improvement in statistical properties is obtained by using two digital processors (116 and 121) in serial fashion.