A method of maintaining digital medical records, comprising a step of receiving a medical transaction record (102), encrypted with a key in accordance with a patient-file association. Also comprising a step of accessing the encrypted medical transaction record according to a patient association with the record (111). And further comprising a step of re-encryption of the encrypted accessed medical transaction record with a key associated with an intended recipient of the medical record. The system and method according to the present invention presents a new business model for creation, maintenance, transmission, and use of medical records. The invention also allows financial burdens to be reallocated optimally and equitably, resulting in decreased overall societal cost and providing a successful business model for a database proprietor. Secure entrusted medical records are held in trust by an independent third party on behalf of the patient (113), and serve the medical community at large. Separately encrypted record elements may be aggregated as an information polymer.

Information record infrastructure, system and method

A system and method for communicating information between a first party and a second party, comprising the steps of receiving, by an intermediary, an identifier of desired information and accounting information for a transaction involving the information from the first party, transmitting an identifier of the first party to the second party, and negotiating, by the intermediary, a comprehension function for obscuring at least a portion of the information communicated between the first party and the second party. The data transmission may be made secure with respect to the intermediary by providing an asymmetric key or direct key exchange for encryption of the communication between the first and second party. The data transmission may be made secure with respect to the second party by maintaining the information in encrypted format at the second party, with the decryption key held only by the intermediary, and transmitting a secure composite of the decryption key and a new encryption key to the second party for transcoding of the data record, and providing the new decryption key to the first party, so that the information transmitted to the first party can be comprehended by it.

System and method for secure three-party communications

An adaptive interface for a programmable system, for predicting a desired user function, based on user history, as well as machine internal status and context. The apparatus receives an input from the user and other data. A predicted input is presented for confirmation by the user, and the predictive mechanism is updated based on this feedback. Also provided is a pattern recognition system for a multimedia device, wherein a user input is matched to a video stream on a conceptual basis, allowing inexact programming of a multimedia device. The system analyzes a data stream for correspondence with a data pattern for processing and storage. The data stream is subjected to adaptive pattern recognition to extract features of interest to provide a highly compressed representation that may be efficiently processed to determine correspondence. Applications of the interface and system include a video cassette recorder (VCR), medical device, vehicle control system, audio device, environmental control system, securities trading terminal, and smart house. The system optionally includes an actuator for effecting the environment of operation, allowing closed-loop feedback operation and automated learning.

Adaptive pattern recognition based control system and method

A method for providing unequal allocation of rights among agents while operating according to fair principles, comprising assigning a hierarchal rank to each agent; providing a synthetic economic value to a first set of agents at the a high level of the hierarchy; allocating portions of the synthetic economic value by the first set of agents to a second set of agents at respectively different hierarchal rank than the first set of agents; and conducting an auction amongst agents using the synthetic economic value as the currency. A method for allocation among agents, comprising assigning a wealth generation function for generating future wealth to each of a plurality of agents, communicating subjective market information between agents, and transferring wealth generated by the secure wealth generation function between agents in consideration of a market transaction. The method may further comprise the step of transferring at least a portion of the wealth generation function between agents.

Multifactorial optimization system and method

A method and apparatus are disclosed for approving a transaction request between an electronic transaction system and a portable electronic authorization device (PEAD) carried by a user using an electronic service authorization token The method includes the steps of receiving at the PEAD first digital data representing the transaction request The PEAD provides information to the user regarding an ability to approve the transaction request When the transaction request is approved by the user, the PEAD receives second digital data representing the electronic service authorization token In one aspect of the invention, the method and apparatus include a remote agent server that provides a bridge between the electronic transaction system and the PEAD In an embodiment providing a further level of security, the private key is stored on the portable device, encrypted The decryption key is stored outside of the device, at a trusted 3rd party location When the user attempts to make a signature the software sends a request for the decryption key, along with the user's password or pass phrase keyed in at the keyboard of the PDA, smart phone, or cell phone, to a server belonging to the trusted 3rd party This password is usually, but not always, different than the password stored in the PEAD The server checks the password or pass phrase and, if it is correct sends the decryption key to the portable device, where it is used once and immediately discarded In yet another aspect of the invention, the user's password is securely encoded in the method and apparatus and are used at a point-of-sale location Advantages of the invention include the ability to securely and conveniently perform transactions in a portable device

Electronic transaction systems and methods therefor

A method and apparatus for authenticating a roaming subscriber. In a preferred embodiment, a subscriber receives a challenge (305) that is in a format of a local authentication protocol, and determines (310) whether the local authentication protocol is the subscriber's home system authentication protocol. If it is not, the subscriber converts the challenge into a format (e.g., bit length) compatible (325) with its home system authentication protocol, and processes the converted challenge with the subscriber's secret key and authentication algorithm into an authentication response (330). The authentication response is converted (335) to be compatible with the local authentication protocol, and transmitted (340) to a local system communication unit. The challenge and response is then forwarded to the subscriber's home system (345) for similar conversion and processing, and the subscriber's response is compared against a home system generated response (355).

Method and apparatus for authentication in a communication system

Radio frequency based cellular telecommunication systems often require both subscriber units (100) and communication units (130) of a fixed network communication system to maintain secret data which may be used to verify authenticity as well as provide encrypting variables for message encryption processes. An efficient real-time authentication method and apparatus are provided which use a single message (210) to provide authentication and communication link setup information. Further, an authentication method and apparatus are provided which uses instant-specific information such as a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, or a base site controller identifier to enhance the reliability of the authentication process. Furthermore, a method and apparatus are provided for maintaining secure packet data communications through an encryption process by utilizing a packetized message encryption key (502) and a unique packet number (504) as encryption variables.

Method and apparatus for efficient real-time authentication and encryption in a communication system

A zener diode random number generator circuit is described which produces a random binary number output having a statistical distribution exhibiting a controlled degree of randomness determined in response to an input control signal. A microprocessor feedback circuit monitors the random number output and produces the input control signal in response to the difference between the degree of randomness of the output signal and that of a pre-determined statistical distribution. The digital feedback automatically adjusts the zener diode biasing point and the limiter threshold such that part-to-part tolerance, component aging, temperature variations, or voltage fluctuations will not adversely affect the randomness of the bit stream output. In the preferred embodiment, the microprocessor tests the ratio of ONES bits to ZERO bits of the random number such that a desired 1:1 ONES/ZERO ratio is approximated.

Random number generator with digital feedback

A system (100) and method of improving activation security allows a remote device (104) to identify that there is a difference between a first signal transmitted by a central site (102) and a first signal received by the remote device A derived number is used The derived number can be displayed to the user for verbal verification by the user, or the derived number can be used internally of the remote device, or the central site, for verification that is transparent to the user A significant amount of security is added without substantially altering the communication protocol

Communication method and device

A method of secure key distribution in a communication system having a plurality of subscriber units (100, 102) and an infrastructure communication center (104) is provided. A first subscriber unit (100) sends a request (202) to the infrastructure communication center (104) for a secure communication link with a second subscriber unit (102). This request includes an encrypted session encryption key which was encrypted with a first subscriber registration key. The infrastructure communication center decrypts the encrypted session encryption key (204) with the first subscriber registration key. Subsequently, the infrastructure communication center re-encrypts the session encryption key (206) with a second subscriber registration key. This re-encrypted session encryption key is sent (210) to the second subscriber unit.

Daniel Peter Brown

Papers

Method and apparatus for authentication in a communication system

Method and apparatus for efficient real-time authentication and encryption in a communication system

Random number generator with digital feedback

Communication method and device

Method for key management of point-to-point communications