Abstract: A transaction system for use with passive data storage media, such as optical memory cards, uses secure protocols involving digital certificates for communication between a read/write drive and the medium and also for communication between the drive and a host computer. The drive stores crytographic keys and firmware for executing the secure protocols. All messages (data or commands) passed between the drive and the passive medium or host computer not only are encrypted but also include at least one digital certificate for authenticating the message. Typically, asymmetric (public-private key) encryption is used and keys may be derived from an authorized user's password, personal identification number, or biometric data. The drive includes sensors to detect any attempted intrusions and a control unit that will destroy the critical information (keys and protocol code) in response to a detected intrusion.

Abstract: In a system for reading data encoded on a single, secure, personal, portable database of private information, such as an optical memory card, a method of interaction between an optical card user, a broker and an agency seeking a transaction with the card user. The user is provided with a blank optical memory card which he encodes with the user's personal transactional information such as credit card numbers. The agency and user are provided with access to a transaction site. The user is able to use the single, secure medium to conduct many transactions. The user selects the encoded information that is needed to conduct the transaction with an agency. The information is read and transmitted to a broker who completes the transaction. Here, the agency is not provided with access to the information and the information is not stored in company or network database or on a network.

Abstract: A transaction system for use with passive data storage media, such as optical memory cards, uses secure protocols involving digital certificates for communication between a read/write drive and the medium and also for communication between the drive and a host computer. The drive is physically secured with tamper resistant features and stores cryptographic keys and firmware for executing the secure protocols. All messages (data or commands) passed between the drive and the passive medium or host computer not only are encrypted but also include at least one digital certificate for authenticating the message. Typically, asymmetric (public-private key) encryption is used and keys may be derived from an authorized user's password, personal identification number, or biometric data. The drive includes sensors to detect any attempted intrusions and a control unit that will destroy the critical information (keys and protocol code) in response to a detected intrusion.