Abstract: A smart card is adapted to partially include and employ a triply-secure algorithm for data exchange. The algorithm verifies a user's identity and his simultaneous membership in any groups that he has joined. For this purpose, the algorithm requires only a single insertion of the smart card and only a single input of the user's personal identification number. The algorithm can be used in smart cards or in computer networks for identity verification and membership proof. A combination of three different hard problems is used. The first one is based on integer factorization, such as the RSA authenticating technique, and the second one is based on a discrete logarithm, and the third one is based on the coefficients of a polynomial function. In a typical application using smart cards, a certification authority (CA) establishes requirements for preparation and issuance of a multi-purpose card.

Abstract: A smart card is adapted to partially include and employ a triply-secure algorithm for data exchange. The algorithm verifies a user's identity and his simultaneous membership in any groups that he has joined. For this purpose, the algorithm requires only a single insertion of the smart card and only a single input of the user's personal identification number. The algorithm can be used in smart cards or in computer networks for identity verification and membership proof. A combination of three different hard problems is used. The first one is based on integer factorization, such as the RSA authenticating technique, and the second one is based on a discrete logarithm, and the third one is based on the coefficients of a polynomial function. In a typical application using smart cards, a certification authority (CA) establishes requirements for preparation and issuance of a multi-purpose card.

Abstract: A comprehensive system and method for managing security in an electronic network. The method includes the steps of providing a plurality of security services, providing a plurality of security mechanisms, and linking the services and mechanisms with a plurality of security management functions. The method supports all associated security protocols in the electronic network while maintaining transparency for message exchange. Advantageously, the method of the invention readily provides compatibility with a plurality of environments, network types, and technologies. The method provides five functional hierarchical layers, one protocol handling access to the layers, and includes a security management information base segmented according to the five functional layers. The five functional layers are, from the base, fundamental security primitives, security mechanisms, security services, security management functions, and security policies. Each layer can contain several independent modules.

Abstract: The present invention is an enhanced signaling system (ESS) that provides a signaling platform that is independent of the electronics and optical switching and transmission systems. The invention provides controllability on an end-end basis to a concatenation of optical and electronic systems by the service providers and end users. Since the present invention enables control over the transport network resources by the end user and service providers, it accelerates the process of service creation and network service expansion. By providing end-end control over the connection, it allows total control of service requirements and QoS. Accordingly, service providers can allocate transport network resources in a dynamic fashion independent of other network users (when dedicated wavelengths and resources are allocated), or in conjunction with other users when sharing of transport wavelengths is allowed.