Abstract: A monitoring apparatus, a computer program and a network are disclosed for monitoring a representation. The representation comprises a first data string. Subsequently, two or more output strings, based on the first data string, are generated by the monitoring apparatus such that the representative can not be reconstructed from just any of the output strings. The output strings are stored at separate storage locations. Each of the locations has different access rights from the other such that a party, authorized to solely access one such location and retrieve the single output string stored there, is unable to access the other location and retrieve the corresponding output string stored there. Consequently, that party, from just the single output string which it can access and retrieve, is unable to reconstruct the entire representation.

Abstract: For cryptographically processing data, data (X) and a key (K) are fed to a cryptographic process (P), which may be a known process. In order to veil the nature of the process (P), auxiliary values as fed to the process, such as a supplementary key (K*), using which a supplementary process (P*) generates the key proper (K). The combination of the original process (P) and the supplementary process (P*) provides an unknown process, hence, the relationship between the supplementary key (K*) and the processed data (Y) is unknown. As a result, improved cryptographic security results.

Abstract: A method for protecting a portable card, provided with at least a crypto algorithm for enciphering data and/or authenticating the card, against deriving the secret key through statistical analysis of its information leaking away to the outside world in the event of cryptographic operations, such as power-consumption data, electromagnetic radiation and the like. The card is provided with at least a shift register having a linear and a non-linear feedback function for creating cryptographic algorithms. An algorithm is applied to the card, which is constructed in such a manner that the collection of values of recorded leak-information signals is resistant to deriving the secret key from statistical analysis of those values. Advantageously, after the key has been loaded into the shift register, the shift register clocks on, using at least the linear-feedback function. A suitable alternative is loading only the key into the shift register in the event of a fixed content of the shift register.

Abstract: Conversion of a biometric item e.g. a recorded fingerprint (FP) into a password (PW). The fingerprint is converted into a fingerprint representation (FPR) which is to be matched with a set of classes of fingerprint representations (FPC), stored in a database. The matching class is selected. Each class is, within the database, linked with one stored password (PW). The password which is linked with the selected class, is output to the relevant system (8) asking for the security password.

Abstract: System for processing of data string generated by a data source (4). Monitoring means (5) inspect the data string for the presence of substrings complying with certain characteristics, while, if found, the substrings are separated by separation means (5) and processed, by processing means (6,7) separately from the remaining data sting. The substrings and remaining data string may be stored at different locations (8a,8b), while the substrings and remaining data string may be formatted, by formatting, means (7) in different (encrypted/not-encrypted) formats. The substrings each may be replaced, by replacement means (6), by a replacement string, like an icon (2) or a box (3), which additionally may comprise an identifier referring to the relevant store location of locations of the substring.

Abstract: A monitoring apparatus, a computer program and a network are disclosed for monitoring a representation. The representation comprises a first data string and afterwards two or more output strings are generated by the monitoring apparatus which output strings are stored at separate storage locations.

Abstract: Method and system for processing natural characteristics like e.g. fingerprint, by means of a portable device (8), comprising means (3a) for inputting a user's PIN code and means (3) for inputting the user's natural biometric data, e.g. fingerprint. Both input means are connected to transformation means (4) which transform the natural fingerprint under control for the PIN code into an artificial fingerprint, to be supplied to a display module (5a). The displayed artificial fingerprint can replace the user's natural fingerprint when the user has to prove his/her identify. If the artificial fingerprint might become corrupt or misused, a new artificial fingerprint can be generated by inputting again the user's unchangeable natural fingerprint and together with a new PIN code.

Abstract: Method and system for marking a file (1) by introducing, by a processor (3) controlled modifications under control of a cryptographic process loaded in a cryptographic module (5). The amendments can be registered in a separate amendments file (6) or, after encryption, added to the same file (1). The amendments may be rectified by a receiving party, (9), using said process in reverse way after reading the properties of the control algorithm used to make those amendments, from a control properties file (7). The method and system can be used to identify the file's (1) identity or origin and, moreover, to distribute degraded files to users (9) free of charge and, after paying for the parameters registered in the control properties file (7), restored high-quality versions of the same file (1).

Abstract: The invention relates to a device (1) for processing data packets, comprising identification means (14) for identifying a data packet, processing means (11, 12) for cryptographically processing the data packet, and memory means (13) for storing information relating to the processing, in which device the processing means comprise at least a first (11) and a second (12) processing unit. Control means (14) are provided to assign, on the basis of the identification of a data packet, said data packet to one of the processing units and to process said data packet with the aid of information related to said data packet. Preferably, at least one processing unit (11; 12) is designed to encrypt or decrypt data packets, and the information relating to the processing comprises a key and a status of a processing procedure.

Abstract: In a system for de-/encoding data using (de)coding devices at either end of a transmission channel, the data sometimes comprise additional synchronisation information which is used to reduce the effect of faults in the transmission channel. If this synchronisation information is not already present, it is impossible in certain cases to add such information. The invention provides a system which, regardless of the presence of additional synchronisation information, is able to reduce the effect of faults. For this purpose, each (de)coding device is provided with means for comparing sequences of encoded data with at least one predetermined code word and for setting the associated coding device to a reset state in the event of equality. Because the predetermined code word repeats statistically in the encoded data, a fault adversely affects the decoding for not more than one time interval.