Abstract: A method is disclosed. The method includes receiving, by a hub computer from different validator systems, interaction data for a plurality of interactions conducted by a user on a journey from an initial location to an end location at different validator devices in the different validator systems at different times during the journey. The method includes generating an authorization request message comprising a value associated with the plurality of interactions, and transmitting the authorization request message to an authorizing entity computer. The authorizing entity computer approves or declines the authorization request message, and then generates an authorization response message. The method includes receiving by the hub computer, the authorization response message.

Abstract: A method is disclosed. The method includes receiving, by a hub computer from different validator systems, interaction data for a plurality of interactions conducted by a user on a journey from an initial location to an end location at different validator devices in the different validator systems at different times during the journey. The method includes generating an authorization request message comprising a value associated with the plurality of interactions, and transmitting the authorization request message to an authorizing entity computer. The authorizing entity computer approves or declines the authorization request message, and then generates an authorization response message. The method includes receiving by the hub computer, the authorization response message.

Abstract: The invention provides an ITSO-based smartcard system including a programmable smartcard device for use in the ITSO scheme carrying a file system and operating software enabling the on-device file system to interface with at least one off-device ITSO application. At the interface, the off-device ITSO application is permitted to access and/or modify data in the on-device file system. The programmable smartcard device comprises monitoring means operable to monitor the sequence of operations carried out by the off-line application in accessing and/or modifying data in the on-device files and to restrict or prevent further access or modifications to such data if that sequence of operations does not meet predetermined criteria. Preferably, the monitoring means includes a state engine capable of being set to one of a plurality of states, at least one of which is an error state, in which further modification to the data in some or all of the on-device files is prevented until the sequence of operations is restarted.

Abstract: In an ITSO scheme, construction and initial sealing of ITSO Product Entities (IPEs) is carried out by one of a plurality of ITSO Secure Application Modules (‘ISAMs’) at a location remote from ticket retailer devices at which the IPE fields are generated. Each ticket retailer device is connected to an ISAM over the Internet or other network by control means operable to select an available ISAM from an ISAM array for the duration of a sealing transaction initiated by that ticket retailer device. Validation of IPEs can also be carried out at a remote ISAM array accessed over the Internet or other network. The remote ISAM array can be used in a variety of ITSO applications, for example, transportation ticket sales or secure systems for the prescription of drugs. In the latter scheme, prescription information is presented by the prescription writer for sealing in the form of an IPE and the patient can later validate the prescription IPE at a pharmacy or other supplier.