International Business Machines Corporation

Christopher J Holloway

Stephen M Matyas

Carl H Meyer

Jonathan Oseas

Richard E Lennon

Bruno O Brachtl

Martyn James Dawkes

Donald B Johnson

Stephen Michael Matyas, Jr

Michael James Kelly

An V Le

John D Wilkins

Robert C Elander

James D Randall

Paul G Lubold

George M Dolan

Mark K Chetwood

Rashik Parmar

Michael O Onoufriou

Michael J Kelly

A transformation engine for transforming a legacy IT infrastructure into an on-demand IT infrastructure in a financial services enterprise, the transformation engine comprising: a determiner component for determining a current status of the legacy IT infrastructure; a comparator component for comparing the determined current status to an idealised set of outcome parameters to determine a set of deviation parameters; and the determiner component determining at least one control point within the set of deviation parameters which require enterprise wide governance.

Transforming a legacy IT infrastructure into an on-demand operating environment

A capability progress modeling component for determining the progress of adoption of an on-demand capabilities model by an organization, the deployment progress component comprising: a completion state descriptor component for receiving inputs from an entity describing a current state, a target state and a modeled state for the organization; and a state comparator component for comparing the current state and modeled state with the target status to derive a set of parameters, the state comparator component analyzing the set of parameters to determine deviation points indicating capability areas requiring attention in order for the organization to progress to an on-demand capabilities model.

Determining the progress of adoption and alignment of information technology capabilities and on-demand capabilities by an organization

Described is a communications system in which messages may be processed using public key cryptography with a private key (SKu) unique to one or more users ( ). The system comprises a server means ( ) adapted for data communication with a client ( ) via a network ( ), the server means ( ) comprising first data storage means in which is stored in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key. The server means further comprises second data storage means in which is stored applet code executable on the client. The server provides the applet code to the client via the network in response to connection of the client to the server via the network. The applet code comprises secure processing means operable, when executed in the client, to receive a message to be processed from the user, to retrieve the encrypted private key for the user from the server means via the network, to receive the key encrypting key from the user, to decrypt the private key using the key encrypting key, and to perform the public key processing for the message using the decrypted private key. The applet code and the associated keys are removed from the client on termination of the applet code.

Data communications system using public key cryptography in a web environment

Printed document contents are scanned and digitized, using a conventional scanner, and displayed page by page on a screen. Using a conventional editor and an input device, the scanned and digitized document contents are edited before being used to generate a digital signature. This allows reading errors, which could invalidate a subsequent verification process, to be corrected. Using the editor, and an input device such as a mouse, the signing authority identifies on the screen different segments of the document, each segment containing data of a single type and selects for each segment a set of rules, among a group proposed by the system, for authenticating it. Then, for each segment, an edited digital form of the data contents are derived using the method defined in the rules. A hash value of the rules used and the edited digital form of the segment contents is calculated using a public hashing algorithm. Then the apparatus generates a digital signature of the edited digitized segments contents using the secret key of the authenticator. Finally, an authentication code comprising the edited digital form of each segment and the digital signature is printed on the document. To verify the authenticity, the printed document is scanned and digitized again and the digital signature is checked using the associated public key. If the check fails, the verifier identifies which segment has been scanned differently, comparing it with the related edited digital form in the authentication code printed on the document to evaluate its validity.

Apparatus and method for authentication of printed documents

A data communications system is described in which messages are processed using public key cryptography with a private key unique to one or more users (150) under the control of a portable security device (120), such as a smart card, held by each user, the system comprising: a server (130) for performing public key processing using the private key. The server (130) stores, or has access to, the private key for the, or each, user in encrypted form only. The private key is encrypted with a key encrypting key and each security device (120) comprises means for storing or generating the key encrypting key and providing the key encrypting key to the server (130). The server comprises secure means (360) to retrieve the encrypted private key for the user, decrypt the private key using the key encrypting key, perform the public key processing using the decrypted private key, and delete the decrypted private key after use.

Public key data communications system under control of a portable

A transaction processing system comprises at least one transaction terminal (10, 11, 12) having means to receive characteristic data from a user, which characteristic data is required to generate a characteristic image associated with the user, such as an image of the user's signature, from data stored in a data processing system (14); and logic for generating a transaction message by combining transaction data with the characteristic data in such a way that the transaction data is required to recover the characteristic data from the message. The data processing system (14) comprises means to store the user data, to receive and store the message, to recover the characteristic data from the message using the transaction data, and to reconstruct the characteristic image from the user data using the characteristic data to establish that the transaction was valid by associating the characteristic image with the transaction data.

Transaction processing system

A method and system are disclosed for the implementation of a weakened privacy channel. This is achieved through use of a weakened symmetric cryptographic algorithm called commercial data masking. The masked text is created from clear text at one system and may to transported electronically to another system where the masked text may be unmasked to produce the clear text. The reason to use the commercial data masking algorithm for data privacy is that it is exportable to organizations to which products which contain the Data Encryption Algorithm when used for data privacy are not exportable. In addition, a method and system is disclosed by which the key when used for commercial data masking may be transformed into a key that may be used with the Data Encryption Algorithm.

Commercial data masking

The invention supplements the use of a conventional authentication token such as a MAC or DSG, to provide very strong evidence of the origin of an electronic message. A new type of authentication token, known as the 'Non-Repudiation Vector' (NRV) is attached to each message sent across a data network. The NRV cryptographically links each message sent or received by a particular data processor on the network to previous and subsequent messages handled by that data processor, to create a chain of cryptographically linked messages. The burden of proof for the repudiation of a message is transferred to the sender of a message, who must demonstrate how the sending data processor could have moved through the time period during which the disputed message was sent, without generating the NRV corresponding to the disputed message.

Non-repudiation in computer networks

An electronic funds transfer system (EFT) is described in which retail terminals located in stores are connected through a public switched telecommunication system to card issuing agencies data processing centers. Users of the system are issued with intelligent secure bank cards, which include a microprocessor, ROS and RAM stores. The POS includes a personal key (KP) and an account number (PAN) stored on the card when the issuer issues it to the user. Users also have a personal identity number (PIN) which is stored or remembered separately. A transaction is initiated at a retail terminal when a card is inserted in an EFT module connected to the terminal. A request message including the PAN and a session key (KS) is transmitted to the issuers data processing center. The issuer generates an authentication parameter (TAP) based upon its stored version of KP and PIN and a time variant parameter received from the terminal. The TAP is then returned to the terminal in a response message, and based upon an imputed PIN, partial processing of the input PIN and KP on the card a derived TAP is compared with the received TAP in the terminal. A correct comparison indicating that the entered PIN is valid. The request message includes the PAN encoded under the KS and KS encoded under a cross-domain key. Message authentication codes (MAC) are attached to each message and the correct reception and regeneration of a MAC on a message including a term encoded under KS indicates that the received KS is valid and that the message originated at a valid terminal or card.

Transaction security system

An electronic funds transfer system (EFT) is described in which retail terminals located in stores are connected through a public switched telecommunication system to card issuing agencies data processing centers. Users of the system are issued with intelligent secure bank cards, which include a microprocessor, ROS and RAM stores. The ROS includes a personal key (KP) and an account number (PAN) stored on the card when the issuer issues it to the user. Users also have a personal identity numbe (PIN) which is stored or remembered separately. A transaction is initiated at a retail terminal when a card is inserted in an EPT module connected to the terminal. A request message including the PAN and a session key (KS) is transmitted to the issuers data processing center. The issuer generates an authentication parameter (TAP) based upon its stored version of KP and PIN and a time variant parameter received from the terminal. The TAP is then returned to the terminal in a response message, and based upon an inputed PIN, partial processing of the input PIN and KP on the card a derived TAP is compared with the received TAP in the terminal. A correct comparison indicating that the entered PIN is valid. The request message includes the PAN encoded under the KS and KS encoded under a cross-domain key. Message authentication codes (MAC) are attached to each message and the correct reception and regeneration of a MAC on a message including a term encoded under KS indicates that the received KS is valid and that the message originated at a valid terminal or card.

Growing community of inventors

Woking, United Kingdom

Christopher J Holloway