Entrust Technologies Limited

Other

Entrust Corporation

Roland Thomas Lockhart

Michael James Wiener

Serge Jean Maurice Mister

Murray McCulligh

Carlisle M Adams

Edward C Carew

Michael Holtstrom

Sean G Brophy

Christopher D Wood

Greg Wetmore

Michael Holstrom

Serge Jean Mister

In one example, a proxy server acts as a gateway to a website and modifies the traffic between a web browser on a user device and the website server, as necessary to request protection by providing step-up authentication and/or transaction verification. The proxy server blocks transactions when protection is required but has not occurred (either because the authentication was not proper or due to the detection of another problem). Associated methods and systems are also provided.

Online secure transaction verification system proxy server and method

A data management system and method for a limited cryptographic storage unit, such as a smartcard or other hardware token, includes a cryptographic data manager that interfaces with the limited capacity cryptographic storage unit and a data overflow memory coupled to the cryptographic data manager. The cryptographic data manager stores cryptographic data, such as decryption private keys or other secret cryptographic data, in the overflow memory from the limited capacity cryptographic storage unit based on a limited capacity storage unit data update condition. The cryptographic data manager may serve as a secondary cryptographic data manager that receives the cryptographic data from an original cryptographic data storage device, or primary storage device such as a server that generates the cryptographic data, that stores a history of the cryptographic data.

Data management system and method for a limited capacity cryptographic storage unit

A method and system for protecting a multipurpose data string used for both decrypting data and for authenticating a user utilizes a remote storage element that contains a long random data string or password protected by a short easy to remember access data, such as a personal identification number or other user authentication mechanism. The remote storage element contains data used for both initially encrypting secret private keys and for later decrypting the encrypted secret private keys, or other secret data, so they can be used to decrypt data transferred within a computer network, or be used for digitally signing data transferred within a computer network.

System and method for protecting a multipurpose data string used for both decrypting data and for authenticating a user

A new design procedure for constructing a family of DES-like Substitution-Permutation Network (SPN) cryptosystems with desirable cryptographic properties including provable resistance to differential cryptanalysis, linear cryptanalysis, and related-key cryptanalysis is described. New cryptosystems called CAST ciphers, constructed according to the procedure, are also described. Details of the design choices in the procedure are given, including those regarding the component substitution boxes (s-boxes), the overall framework, the key schedule, and the round function. A fully specified example CAST cipher, an output of this design procedure, is presented as an aid to understanding the concepts and to encourage detailed analysis by the cryptologic community.

Construction symmetric ciphers using the cast design procedure

A circuit to improve noise mitigation and mode switching in telephony, wherein the noise-floor level is continuously estimated by comparing its stored current value to the signal level value and substituting the latter for the former if it is less than the former.

Noise mitigation and mode switching in communications terminals such as

Growing community of inventors

Kanata, Canada

Roland Thomas Lockhart