Abstract: A customer making a credit card transaction inserts their smart card into a card reader attached to the merchant's system. The card reader activates the customer's card and passes certain merchant information. The merchant's system then requests a “billing digest” from the customer's card. The billing digest is returned to the merchant's card reader that forwards it (and the transaction information which includes customer information and merchant information) to the corresponding credit card issuer, which maintains the customer's credit card account. In one embodiment, the customer information and the merchant information are encrypted. Upon receiving the billing digest, transaction information is decrypted if necessary and the credit card issuer looks up the customer's master key using the customer's account number.

Abstract: Information that must remain secure is often stored on untrusted storage devices. To increase security, this information is encrypted by an encryption value prior to storing on the untrusted storage device. The encryption value itself is then encrypted. The encryption value is decrypted by correctly solving an access formula describing a function of groups. Each group includes a list of at least one consumer client. A requesting consumer client is granted access to the information if the requesting consumer client is a member of at least one group which correctly solves the access formula.

Abstract: Data integrity checking methods utilize a cumulative hash function. A sequence of data blocks and a corresponding sequence of hashes are stored on a medium. Each hash in the sequence of hashes corresponds to a data block in the sequence of data blocks. A particular hash corresponding to a particular data block is determined as a function of the particular data block and at least one previous hash corresponding to a previous data block in the sequence of data blocks.

Abstract: A system and method of storing data using write once read many (WORM) protection including using a hardware storage device to write data to a medium are provided. The method further includes establishing a write once read many (WORM) module external to the hardware storage device. Data blocks are received at the module, block numbers are specified with the module, and data is output from the module to write to the storage medium at specified block numbers. The last specified block number or all specified block numbers depending on the type of media access are stored so that the external WORM module prevents future writing of data to these specified or already used block numbers.

Abstract: A data storage system for remote access to stored data. The innovative system uses a storage library to contain magnetic hard disks and automatically replaces the hard disks upon failure, without human intervention. Failed disks are removed from the library by a robot, deposited from the library, upon which time they are further processed for delivery to the manufacturer, or for disposal. Replacement disk drives are accessed by the robot from within the library to replace the removed storage element. The system's robot is not only moving individual storage elements, but also of moving the access cables connecting the storage elements to the external network. Using this capability, the number of access cables is reduced without requiring added human intervention.

Abstract: Data integrity checking methods utilize a cumulative hash function. A sequence of data blocks and a corresponding sequence of hashes are stored on a medium. Each hash in the sequence of hashes corresponds to a data block in the sequence of data blocks. A particular hash corresponding to a particular data block is determined as a function of the particular data block and at least one previous hash corresponding to a previous data block in the sequence of data blocks.

Abstract: A system and method of storing data using write once read many (WORM) protection including using a hardware storage device to write data to a medium are provided. The method further includes establishing a write once read many (WORM) module external to the hardware storage device. Data blocks are received at the module, block numbers are specified with the module, and data is output from the module to write to the storage medium at specified block numbers. The last specified block number or all specified block numbers depending on the type of media access are stored so that the external WORM module prevents future writing of data to these specified or already used block numbers.

Abstract: A method and system for providing a secure time reference when storing data to a storage medium using write once read many (WORM) protection are provided. The method includes receiving a message, determining a message digest, appending a published time from a digital time stamping service to the message digest to create a timestamp, and digitally signing the timestamp with a private key of the digital time stamping service. The message, the timestamp, and the digital signature are stored to the medium using write once read many (WORM) protection.

Abstract: A trusted high stability time source for use with a digital time stamping service and a trusted external time source includes a private time source, a published time source, at least one power supply, and control logic. The control logic is programmed to perform a time stamping operation and to perform a published time source update. In performing the published time source update, a reply received from the trusted external time source includes the published time update, and the published time is updated with the published time update if an update condition is satisfied. The update condition is based in part on a time difference between the private time and the published time update.

Abstract: A data storage system for remote access to stored data. The innovative system uses a storage library to contain magnetic hard disks (for example) and automatically replaces the hard disks upon failure, without human intervention. Failed disks are removed from the library by a robot, deposited from the library, upon which time they are further processed for delivery to the manufacturer, for example, or for disposal. Replacement disk drives are accessed by the robot from within the library to replace the removed storage element. The system's robot is capable of not only moving individual storage elements, but also of moving the access cables connecting the storage elements to the external network. Using this capability, the number of access cables is reduced without requiring added human intervention.

Abstract: A method, computer program product, and data processing system for generating and validating an upgradeable digital timestamp of a document is disclosed. The digital timestamp includes a hash value, a current time, and a digital signature. Over time, as computer and cryptanalytic technology progresses, upgrade timestamps are applied to the document that take advantage of more advanced, more difficult to break hash functions or digital signature schemes. These upgrade timestamps are applied preventatively at a point in time just prior to the timestamp's being able to be compromised.

Abstract: A method and apparatus to handle multiple sets of removable media within a storage system. A first set of removable media are mounted on a set of drives. Data is accepted until the first set of removable media is filled. A second set of removable media is mounted on the drives, while the first set of removable media is removed. When the change in removable media is complete, writing of data proceeds on the second set of removable media. Data may be buffered while the change in removable media occurs. Alternatively, two sets of removable media may be mounted at the same time. When the first set of removable media is filled to a selected amount, the second set of removable media may then be used to write the data. A third set of removable media is set up or mounted for use, while the first set of removable media is removed.

Abstract: A system and method for storing data in a storage system having storage elements arranged in parallel for concurrent access such that data can be continuously communicated to the storage element array while one of the storage elements is in error recovery. Some of the storage elements receive data of a stripe and the remaining storage elements receive parity information based on the data of the stripe. An unresponsive storage element in error recovery is dropped from the other storage elements for receiving data until error recovery is complete and the storage element is responsive for receiving data. While the storage element is unresponsive, one of the storage elements scheduled to receive parity information receives data to be written to the unresponsive storage element instead of the parity information. Communication to the storage elements continues while the failed storage element is in error recovery.

Abstract: A method and apparatus to handle multiple sets of removable media within a storage system. A first set of removable media are mounted on a set of drives. Data is accepted until the first set of removable media is filled. A second set of removable media is mounted on the drives, while the first set of removable media is removed. When the change in removable media is complete, writing of data proceeds on the second set of removable media. Data may be buffered while the change in removable media occurs. Alternatively, two sets of removable media may be mounted at the same time. When the first set of removable media is filled to a selected amount, the second set of removable media may then be used to write the data. A third set of removable media is set up or mounted for use, while the first set of removable media is removed.

Abstract: A policy caching method for use in a communication device is provided. The communication device determines which instance of protocol data unit (PDU) network policy from a plurality of policies is to be applied to related-received PDUs based on contents of one of the related-received PDUs. Subsequently, policy identification information identifying the instance PDU policy is cached for future application to other of the related-received PDUs. Also, a communication device which implemented this policy caching method is provided.

Abstract: A network communications adapter interconnects a plurality of digital computing resources for mutual data exchange in which a high performance, large capacity common memory is provided with a pair of external buses which allows multiple processors to store information in and read information from the common memory. The common memory is configured into two banks, each bank operating independently and concurrently under control of bus switching logic with separate address, control and data buses. The common memory typically provides 400 megabits per second of bandwidth to the multiple attached thirty-two and sixteen bit processors which may be coupled either to both buses simultaneously or individually to the two buses. The bus switching logic then allocates all of the available bandwidth to the individual processors coupled to the buses based upon a predetermined profile established at the time of system installation. Also included in the bus switch logic is circuitry for broadcasting a processor I.D.

Abstract: A set of numbered golf clubs made from a plurality of progressively lofted clubs, each club having a club head, a shaft fixed at one end to the club head, and a grip fixed to the shaft at the other end. A counterweight is positioned at the distal end of the golf club opposite the club head, and the length of the shaft and the weight of the head, the shaft, the grip, and the counterweight of each club are selected so that each club within the set has a lorythmic swing weight of less than A minus 6 points, each club preferably having a shaft of the same flexing properties. The club heads with the counterweight system provides the user with increased stability, control and power.