A method and apparatus are disclosed for approving a transaction request between an electronic transaction system and a portable electronic authorization device (PEAD) carried by a user using an electronic service authorization token The method includes the steps of receiving at the PEAD first digital data representing the transaction request The PEAD provides information to the user regarding an ability to approve the transaction request When the transaction request is approved by the user, the PEAD receives second digital data representing the electronic service authorization token In one aspect of the invention, the method and apparatus include a remote agent server that provides a bridge between the electronic transaction system and the PEAD In an embodiment providing a further level of security, the private key is stored on the portable device, encrypted The decryption key is stored outside of the device, at a trusted 3rd party location When the user attempts to make a signature the software sends a request for the decryption key, along with the user's password or pass phrase keyed in at the keyboard of the PDA, smart phone, or cell phone, to a server belonging to the trusted 3rd party This password is usually, but not always, different than the password stored in the PEAD The server checks the password or pass phrase and, if it is correct sends the decryption key to the portable device, where it is used once and immediately discarded In yet another aspect of the invention, the user's password is securely encoded in the method and apparatus and are used at a point-of-sale location Advantages of the invention include the ability to securely and conveniently perform transactions in a portable device

Electronic transaction systems and methods therefor

In a data communication system capable of variable rate transmission, high rate packet data transmission improves utilization of the forward link and decreases the transmission delay. Data transmission on the forward link is time multiplexed and the base station transmits at the highest data rate supported by the forward link at each time slot to one mobile station. The data rate is determined by the largest C/I measurement of the forward link signals as measured at the mobile station. Upon determination of a data packet received in error, the mobile station transmits a NACK message back to the base station. The NACK message results in retransmission of the data packet received in error. The data packets can be transmitted out of sequence by the use of sequence number to identify each data unit within the data packets.

Method and apparatus for high-rate packet data transmission

An architecture and system uses a smart card for payment of goods and/or services purchased on-line over the Internet A client server on a client terminal controls the interaction with a consumer and interfaces to a card reader which accepts the consumer's smart card A payment server on the Internet includes a computer and terminals that contain security cards to handle the transaction, data store and collection Also connected over the Internet is a merchant server advertising the goods and/or services offered by a merchant for sale on a web site The merchant contracts with an acquirer to accept smart card payments for goods and/or services purchased over the Internet A consumer uses his smart card at the client terminal in order to purchase goods and/or services from the remote merchant server The Internet provides the routing functionality between the client terminal, merchant server and payment server The client terminal emulates a security card in interacting with the smart card, and the responses received are grouped together and sent as a draw request message to the payment server The payment server then emulates the smart card in an interaction with the security card The security card delivers the expected smart card signature to the payment server and/or on to the client terminal or merchant server to reduce message traffic between the entities on the network The comparison of the smart card signature to an expected value can occur at any location Encryption is used for security

Internet payment system using smart card

A requesting terminal includes an interface that allows a user to select whether data downloaded from a network (such as the Internet) is transmitted to the requesting terminal via a high-speed link, such as a satellite link, or a lower speed link, such as a terrestrial link. Preferably, the terrestrial link (which may comprise a conventional dial-up Internet connection) is a two-way link, wherein the requesting terminal transmits data requests to the network via the terrestrial link. The data requests generated by the requesting terminal are modified to designate whether the requested data should be downloaded from the network via the terrestrial link or the satellite link. The terrestrial link may also be automatically selected for certain applications.

Method and apparatus for selectively retrieving information from a source computer using a terrestrial or satellite interface

The present invention provides a system to ensure security of data in a computer network system A center certifies a public-key of user of the system and distributes a secret-key A first system comprises the center in a network, an information provider and a plurality of users The center identifies utilization status by requests of the secret-key The data is encrypted by the secret-key and is stored and transferred, while the data to be stored and transferred is encrypted by a secret-key different from the secret-key of the transferred data An original data label is added to the original data, and an edit label is added to the edited data, and the center does not store the data and stores only the original data label and the edit label A second system comprises a center and an information provider in a network, and a plurality of users utilizing the network The center stores the original data and editing scenario, and also the original data label, user label and edit label The data is not transferred between the users, but data label encrypted by the public-key is transferred In electronic commerce system, every data is distributed through a mediator in the network, data which is transferred from a maker to a user is encrypted by a secret-key for encryption, and data which is transferred from the user to the maker is encrypted by a secret-key for re-encryption

Data management system

Radio frequency based cellular telecommunication systems often require both subscriber units (100) and communication units (130) of a fixed network communication system to maintain secret data which may be used to verify authenticity as well as provide encrypting variables for message encryption processes. An efficient real-time authentication method and apparatus are provided which use a single message (210) to provide authentication and communication link setup information. Further, an authentication method and apparatus are provided which uses instant-specific information such as a time of day, radio frequency carrier frequency, a time slot number, a radio port number, access manager identifier, a radio port control unit identifier, or a base site controller identifier to enhance the reliability of the authentication process. Furthermore, a method and apparatus are provided for maintaining secure packet data communications through an encryption process by utilizing a packetized message encryption key (502) and a unique packet number (504) as encryption variables.

Method and apparatus for efficient real-time authentication and encryption in a communication system

A method and apparatus for providing cryptographic protection of a data stream are described in accordance with the Open Systems Interconnection (OSI) model for a communication system This cryptographic protection is accomplished on the transmitting side by assigning a packet sequence number to a packet derived from a data stream received from a network layer (110) Subsequently, a transmit overflow sequence number (124) is updated as a function of the packet sequence number (116) Then, prior to communicating the packet and the packet sequence number on a physical layer, the packet is encrypted as a function of the packet sequence number (116) and the transmit overflow sequence number (124) On the receiving side, the packet sequence number is extracted (166) from the physical layer (160) In addition, a receive overflow sequence number (174) is updated as a function of the packet sequence number (172) Finally, the encrypted packet is decrypted as a function of the packet sequence number (176) and the receive overflow sequence number (178) In addition, a transmitting and a receiving communication unit for use in a communication system which includes cryptographic protection of a data stream is described

Method and apparatus for providing cryptographic protection of a data stream in a communication system.

The method and device of the present invention provide for efficient error correction in a packet radio system by 1) eliminating wasted bandwidth due to the unnecessary retransmissions that occur as a result of lost positive acknowledgments, 2) occupying less downlink bandwidth than a scheme requiring positive acknowledgments, and 3) minimizing packet delay by providing two levels of error correction at the datalink layer.

Method and device for efficient error correction in a packet-switched communication system

During data transmission to a remote unit (113) utilizing a supplemental, highspeed data channel (105), data transmission stops due to all data being communicated to the remote unit (113) or because a time period for transmission has expired. In the situation where all data has been transmitted to the remote unit (113) the remote unit (113) will delay dropping the data channel (105) for a predetermined period of time. In the situation where a time period for transmission has expired, the remote unit (113) will continue transmitting into a frame assigned to another remote unit.

Packet data transmission within a broad-band communication system

A communication system provides for a mobile station (MS) to pre-register with a Serving GPRS Support Node (SGSN) servicing a neighboring Routing Area (RA) that is a handoff candidate. In pre-registering with the neighboring RA and SGSN, the MS at least partially registers with the RA and SGSN, that is, at least a portion of the MS's registration information is conveyed to the neighboring SGSN serving the neighboring RA, prior to the MS being served by an associated neighboring BSS 230, for example, prior to an initiation of a handoff of the MS to neighboring BSS 230. By pre-registering with the candidate SGSN, a duration of a registration process and the corresponding service disruptions when the MS is handed off to such an SGSN are reduced.

Jeffrey C. Smolinske

Papers

Method and apparatus for efficient real-time authentication and encryption in a communication system

Method and apparatus for providing cryptographic protection of a data stream in a communication system.

Method and device for efficient error correction in a packet-switched communication system

Packet data transmission within a broad-band communication system

Method and apparatus for mobile station registration in a cellular communication system