Infospace, Inc.

Other

Hewlett-packard Development Company, L.P.

Conexant, Inc.

Digicash Incorporated

Niels Thomas Ferguson

David L Chaum

Jelte Van Der Hoek

Michael John Wray

Christopher David Shelton

Martin S Kelly

Marius P Schilder

Wolfgang Mayerwieser

William E Orme

Volker Schindler

Erik W Voskuil

David Chaum

Berry Schoenmakers

Reinhard Posch

A security mechanism suitable for wireless local area networks is disclosed that exhibits a reasonable trade-off between computation speed and resistance to attack. The illustrative embodiment can be implemented with operations that are quickly performed on most processors, and, therefore be in many cases reasonably implemented in software. The illustrative embodiment comprises modulo 2 additions, modulo 2additions, bit rotations, and byte transpositions.

Secure telecommunications system for wireless local area networks

A system has a local client application () and a communications stack () by which the local application can communicate with remote peer applications on other systems. The communications stack includes a transport entity () for providing transport services, and a transport-independent, session-level security entity () logically positioned above the transport entity and visible to the local application. The security entity has a key-exchange handshake protocol engine () for conducting a handshake with a peer security entity () associated with a particular remote application () with which the local application () wishes to communicate, this handshake involving the exchange of key-related data for use in generating session keys. The security entity () also has a secure channel engine () for enabling messages to be passed between the local application and the target remote application with authentication and/or encryption. During the key-exchange handshake, the handshake protocol engine () exchanges attribute justifications, in the form of one or more certificates, with its peer whereby to enable verification by each system that the application () being contacted has the particular attributes, if any, required by its own application ().

Security protocol

Disclosed is a multi-purpose transaction card system comprising an issuer, one or more cards, one or more terminals, and optionally one or more acquires, communicating using a variety of cryptographic confidentiality and authentication methods. Cards authenticate messages using public key based cryptographic without themselves performing the extensive computations usually associated with such cryptography. Integrity of complex transaction sequences and plural card storage updates are maintained even under intentionally generated interruptions and/or modifications of data transmitted between card and terminal. Cards do not reveal any information to the terminal which is not directly necessary for the transaction or any information to which the terminal should not have access, though externally measurable aspects of its behavior. Transaction types supported include those suitable for off-line credit cards, in which the &ldquo;open to buy&rdquo; is maintained on the card.

Multi-purpose transaction card system

Disclosed is a multi-purpose transaction card system comprising an issuer, one or more cards, one or more terminals, and optionally one or more acquires, communicating using a variety of cryptographic confidentiality and authentication methods. Cards authenticate messages using public key based cryptographic without themselves performing the extensive computations usually associated with such cryptography. Integrity of complex transaction sequences and plural card storage updates are maintained, even under intentionally generated interruptions and/or modifications of data transmitted between card and terminal. Cards do not reveal any information to the terminal which is not directly necessary for the transaction or any information to which the terminal should not have access, though externally measurable aspects of its behavior. Transaction types supported include those suitable for off-line credit cards, in which the &ldquo;open to buy&rdquo; is maintained on the card.

Integrated circuit

An information storage system includes one or more information update terminals, a mapper, one or more partial-databases, and one or more query terminals, exchanging messages over a set of communication channels. An identifier-mapping mechanism provides (to an update terminal) a method for delegating control over retrieval of the data stored at the partial-databases to one or more mappers, typically operated by one or more trusted third parties. Update terminals supply information, that is stored in fragmented form by the partial-databases. Data-fragment identifiers and pseudonyms are introduced, preventing unauthorized de-fragmentation of information--thus providing compliance to privacy legislation--while at the same time allowing query terminals to retrieve (part of) the stored data or learn properties of the stored data. The mapper is necessarily involved in both operations, allowing data access policies to be enforced and potential abuse of stored information to be reduced. Introduction of multiple mappers acts to distribute information retrieval control among multiple trusted third parties. Introducing so-called `groupers` increases the efficiency of data retrieval for a common set of queries and further reduces potential abuse of information.

Partitioned information storage systems with controlled retrieval

Growing community of inventors

Amsterdam, Netherlands

Niels Thomas Ferguson