Atalla Technovations

Atalla Corporation

Other

Tristrata Security, Inc.

Tandem Computers Incorporated

Atalla Technovations Company

Martin M Atalla

Ralph R Bestock

Webster D Hopkins

Daniel F Zucker

Alexander F Liu

W Dale Hopkins

Donald S Adams

Alan Roberts

Jae-Young Kim

An efficient multicast key management is achieved by using seals. A security server generates a seal. In one embodiment, the seal contains a key. In another embodiment, the seal contains information for generating a key. An application server requests the seal from the security server and broadcasts the seal to a plurality of recipients. A recipient wishing to encrypt or decrypt a data stream transmits the received seal to the security server to be opened. If the recipient is authorized, the security server transmits a permit to the authorized recipient. In one embodiment, the recipient generates a key from the permit. In another embodiment, the permit is the key. If the recipient is a sender, the recipient encrypts data using the key and broadcasts the same encrypted data stream to all receivers. If the recipient is a receiver, the recipient decrypts an encrypted data stream using the key. In one embodiment, a seal with a corresponding offset value is sent periodically in a data stream. In another embodiment, multiple instances of identical seals are opened only once. In yet another embodiment, a seal is appended to each datagram packet. In a further embodiment, a seal is appended to any data stream.

Method of securing a document in a system and controlling access to the document and a seal for use in the method

An encryption system and method utilizes a bit stream, called a 'master signature', which is divided into bytes with each byte being assigned a byte address. A portion of the master signature, called an 'access signature' is randomly selected to encode the message to be transmitted. Both a sender and a receiver have the same access signature. The particular portion of the access signature to be used to encrypt and decrypt a message is identified at the sender by identifying the address of the first byte in this portion of the access signature and the number of bytes sequentially related to this first byte which together with the first byte will be used to encode the message to be transmitted. This information is sent to the receiver. Thus, using this information, the sender can encrypt and the receiver can decrypt the message using the same portion of the access signature.

Tri-signature security architecture systems and methods

Secure transmission of a message is achieved by using a one-time encryption key derived at the receiver and the sender from information present at both the sender and the receiver, but wherein the information from which the encryption key is derived is not transmitted between the sender and the receiver. A plurality of bytes, known as a master signature, is randomly generated and stored at the sender, wherein each byte is uniquely identified by an address. A first random subset of this plurality of bytes, called an access signature, and the addresses in the master signature of the bytes in this access signature, are stored at the receiver. To generate an encryption key, the receiver selects a second random subset of bytes, known as a session signature, from the access signature and sends the addresses in the master signature of the bytes in this session signature to the sender. The sender uses these addresses to identify the bytes in this session signature which bytes are used at both the sender and the receiver to derive the encryption key. If desired, these bytes can be used directly as the encryption key but preferably, these bytes are passed through a session signature-to-session key converter using an irreversible algorithm to generate a one-time encryption key to be used to encrypt the message to be sent between the sender and the receiver. The master signature can be also derived from the digitized video image of the user, which allows a card containing the master signature to be used as described above but also with a video monitor to visually identify the user.

Unified end-to-end security methods and systems for operating on

A system and method for distributing video or audio or other interactive program information to multiple users includes master files of such program information that can be selectively distributed to community systems in which individual users are selectively coupled with computing microcells that process the selected program information from within the entire set of programs that are all contained in moving memory modules which cyclically and recurringly distribute the entire set of programs to multiple computing microcells. A microcell access switch controls coupling of users to computing microcells, and controls selective interaction between master files and moving memory modules for updating the set of programs stored therein. The microcell access switch provides network programs to users without requiring a computing microcell for enhanced versatility and reduced system costs.

Wideband on-demand video distribution system and method

A computer system architecture includes microcell computing units with a moving memory distribution of data and instructions to the microcells which are connected to users and other peripheral devices via a telephony type of cell access switch. The computing microcell can be a single computing element or can be a nucleus processor which is connected to a number of satellite processors via a bus or star configuration, and which interfaces with the moving memory modules and cell access switch. The moving memory modules are functionally petitioned to include user's files for data, and operating system instructions, and journal files and reservation files, all of which repetitively broadcast the contents of memory via a moving memory bus within dissimilar repetition intervals.

Microcell computer system and method using cell access switch and

A computer system is described whose architecture employs a microcell computing system with a moving memory architecture (MMA). The MMA sequentially broadcasts or otherwise transmits the stored data in common to an array of computing microcells which are connected to users and other peripheral devices via a telephony type of cell access switch. The computing microcell can be a single computing element or can be a nucleus processor which is connected to a number of satellite processors via a bus or star configuration, and which interfaces with the moving memory modules and cell access switch.

Microcell computer system and method using cell access switch and moving

The method and means of transmitting a user's transaction message to a destination node in a computer-secured network operates on the message, and a sequence number that is unique to the transaction message to form a message authentication code in combination with the user's personal identification number. The message authentication code is encrypted with a generated random number and a single session encryption key which also encrypts the user's personal identification number. An intermediate node may receive the encryptions to reproduce the personal identification number that is then used to encrypt the received message and sequence number to produce the random number and a message authentication code for comparison with a decrypted message authentication code. Upon favorable comparison, the random number and the message authentication code are encrypted with a second session encryption key to produce an output code that is transmitted to the destination node along with an encrypted personal identification number. There, the received encryptions are decrypted using the second session key to provide the personal identification number for use in encrypting the message and sequence number to produce a message authentication code for comparison with a decrypted message authentication code. Upon favorable comparison, the transaction is completed and a selected portion of the decrypted random number is returned to the originating node for comparison with the corresponding portion of the random number that was generated there. Upon unfavorable comparison at the destination node or at an intermediate node, a different portion of the decrypted random number is returned to the originating node for comparison with the corresponding portion of the random number that was generated there. The comparisons at the originating node provide an unambiguous indication of the completion or non-completion of the transaction at the destination node.

Method and means for combining and managing personal verification and

A method and apparatus for electronic financial transaction processing systems used by customers of certain credit or electronic banking card-issuing institutions. The present invention involves two levels of secure interaction between the customer and the card-issuing institution. The first level of interaction involves the enrollment of a customer in the institution's electronic financial transaction processing system. The customer either selects or is issued a personal identification number and a card encoded with a personal key. The personal key and peronal identification number are used to generate a PIN transmission number and personal vertification number, which is stored in bank records. The second level of interaction involves the authorization of a customer's use of the electronic financial transaction processing system for executing an electronic transaction. The customer enters his personal identification number and the system reads his encoded card, both of which are used generate a candidate PIN transmission number. The system, at the remote processing center, generates a candidate personal verification number using the transmitted candidate PIN transmission number and compares the candidate PIN transmission number for parity with a PIN transmission number stored in the institution's records.

Multilevel security apparatus and method with personal key

The invention comprises a method for encrypting data for communication between a host computer and each of a plurality of remote terminals in a network. A method is provided for periodically generating a unique dynamic encryption key for each of said plurality of terminals using a system seed key residing only in the host computer. The dynamic encryption key generated for use by said terminal in encrypting data transmitted to said host computer and for decrypting data received from said host computer. The method includes storing at said terminal the dynamic key previously generated by said host for said terminal.

Method for encrypting transmitted data using a unique key

An inexpensive encryption device, system and method includes coded alphanumeric characters preprinted according to different key codes on mail-out forms that can be manipulated by a prospective user to yield encrypted data that can be returned over unsecure transmission channels for secure decryption by the operator of a computer-secured operating system. Error-correcting encoding is included to obviate the effects upon telephone keypad entry of secured data that includes error-prone alpha and numeric characters.

Personal identification encryptor system with error-correcting code and

An inexpensive encryption device, system and method includes coded alphanumeric characters preprinted according to different key codes or mail-out forms that can be manipulated by a prospective user to yield encrypted data that can be returned over unsecure transmission channels for secure decryption by the operator of a computer-secured operating system.

Personal identification encryptor system and method

An improved file access security technique and associated apparatus accesses data which is stored in encrypted form under one encryption key and re-stores the data re-encrypted under another encryption key, and produces a record of each access and data re-encryption both as the control source of encryption keys for access and re-entry of encrypted data and as a secured audit record of users that had access to each file.

File access security method and means

Method and means of supplying currency includes assembling and packing currency on a transport medium which is secured within a housing and which is incrementally unpacked under security control to dispense the desired amount of currency. Method and means for assembling and packing currency on the transport medium include adhesive regions on the transport medium for attaching currency thereto in substantially coplanar array to facilitate selective unpacking by non-coplanar manipulation of currency and transport medium. Another embodiment utilizes packets of currency that move along with the adhesive transport medium to facilitate self-contained assembly of units of currency on the transport medium. Equal rates of movement of the next unit of currency and the transport medium assure that only the next unit of currency will be transported on the adhesive medium.

Currency-dispensing method and apparatus

A portable banking terminal under control of an authorized user and operating within a system of banks and retailers may be initialized for personal use under separate controls by the banks and the retailers to facilitate the completion of basic transactions such as deposits and withdrawals from remote locations. Multiple verification checks for authorization of the user secure the transactions against interception and alteration during transmission over unsecured communication channels.

Pocket banking terminal, method and system

Units of currency are assembled and packed on a transport medium which is secured within a housing and which is incrementally unpacked under security control to dispense the desired amount of currency. The units of currency are removably attached to the transport medium by isolated, discontinuous adhesive regions on the transport medium that attach the currency thereto in substantially coplanar array with the forward edge unattached to facilitate selective unpacking by non-coplanar manipulation of the transport medium that separates the forward edge of the currency from the transport medium.

Growing community of inventors

Atherton, CA, United States of America

Martin M Atalla