Abstract: A method and system for token based user access authentication enables secure user access to a web server using a token, such as a smart card, and provides a single sign-on mechanism which does not employ a user name and password in the log on process. Instead, a smart card with a certificate enables the user at a client workstation to log on by authenticating himself or herself to the smart card with a Personal Identification Number (PIN). The smart card then uses mutual authentication to verify the identity of the cardholder and the access server and establishes a secure link between the client workstation and the access server with Secure Sockets Layer (SSL) protocol.

Abstract: A smart card for financial transactions that can be programmed to operate using a variety of applications is disclosed. The card includes an interpreter that interfaces the smart card and an automatic teller machine or merchant terminal. The card includes a plurality of application modules each of which contain application programming that can be used by the interpreter to manage the card-to-system interface. At least one of the application modules can be reprogrammed to provide application programming for the interpreter that is compatible with the locally prevalent application program used by automatic teller machines and card terminals in the area where the cardholder is traveling.

Abstract: An improved touch screen encryption device and method is disclosed. The user selects information from prompts displayed on a touch screen. The improved device determines the input information based upon the location of the touch. The device encrypts the information--for example, the user's personal identification number--and sends the encrypted information to a remote processor. The device and method may be used by a financial institution (such as a bank), a postal services institution or wherever sensitive information is input through a touch screen.