Abstract: An active monitor detects and classifies messages transmitted on a network. In one form, the monitor includes a routine for classifying TCP packet source addresses as being of an acceptable, unacceptable, or suspect type. Suspect source addresses may be further processed in accordance with a state machine having a number of conditionally linked states including a good address state, a new address state, and a bad address state.

Abstract: A method of generating electronic monetary tokens that supports off-line transactions while preventing double-spending. Generation of electronic token halves by a financial services provider begins in response to a request from a buyer to generate electronic monetary tokens to be used with an identified seller. First, the financial services provider generates a multiplicity of electronic monetary tokens. Second, the provider splits each electronic monetary token into two electronic token halves and associates with each the same serial number. These electronic token halves when combined recreate the electronic monetary token from which they were generated, but by themselves neither electronic token half has any value. Nor can either electronic half by itself be used to create the electronic monetary token without the token half's mate.