A method of maintaining digital medical records, comprising a step of receiving a medical transaction record (102), encrypted with a key in accordance with a patient-file association. Also comprising a step of accessing the encrypted medical transaction record according to a patient association with the record (111). And further comprising a step of re-encryption of the encrypted accessed medical transaction record with a key associated with an intended recipient of the medical record. The system and method according to the present invention presents a new business model for creation, maintenance, transmission, and use of medical records. The invention also allows financial burdens to be reallocated optimally and equitably, resulting in decreased overall societal cost and providing a successful business model for a database proprietor. Secure entrusted medical records are held in trust by an independent third party on behalf of the patient (113), and serve the medical community at large. Separately encrypted record elements may be aggregated as an information polymer.

Information record infrastructure, system and method

A system and method for communicating information between a first party and a second party, comprising the steps of receiving, by an intermediary, an identifier of desired information and accounting information for a transaction involving the information from the first party, transmitting an identifier of the first party to the second party, and negotiating, by the intermediary, a comprehension function for obscuring at least a portion of the information communicated between the first party and the second party. The data transmission may be made secure with respect to the intermediary by providing an asymmetric key or direct key exchange for encryption of the communication between the first and second party. The data transmission may be made secure with respect to the second party by maintaining the information in encrypted format at the second party, with the decryption key held only by the intermediary, and transmitting a secure composite of the decryption key and a new encryption key to the second party for transcoding of the data record, and providing the new decryption key to the first party, so that the information transmitted to the first party can be comprehended by it.

System and method for secure three-party communications

An adaptive interface for a programmable system, for predicting a desired user function, based on user history, as well as machine internal status and context. The apparatus receives an input from the user and other data. A predicted input is presented for confirmation by the user, and the predictive mechanism is updated based on this feedback. Also provided is a pattern recognition system for a multimedia device, wherein a user input is matched to a video stream on a conceptual basis, allowing inexact programming of a multimedia device. The system analyzes a data stream for correspondence with a data pattern for processing and storage. The data stream is subjected to adaptive pattern recognition to extract features of interest to provide a highly compressed representation that may be efficiently processed to determine correspondence. Applications of the interface and system include a video cassette recorder (VCR), medical device, vehicle control system, audio device, environmental control system, securities trading terminal, and smart house. The system optionally includes an actuator for effecting the environment of operation, allowing closed-loop feedback operation and automated learning.

Adaptive pattern recognition based control system and method

A method for providing unequal allocation of rights among agents while operating according to fair principles, comprising assigning a hierarchal rank to each agent; providing a synthetic economic value to a first set of agents at the a high level of the hierarchy; allocating portions of the synthetic economic value by the first set of agents to a second set of agents at respectively different hierarchal rank than the first set of agents; and conducting an auction amongst agents using the synthetic economic value as the currency. A method for allocation among agents, comprising assigning a wealth generation function for generating future wealth to each of a plurality of agents, communicating subjective market information between agents, and transferring wealth generated by the secure wealth generation function between agents in consideration of a market transaction. The method may further comprise the step of transferring at least a portion of the wealth generation function between agents.

Multifactorial optimization system and method

A method comprising providing a plurality of links to a plurality of end-user devices communicatively coupled to a network system, a particular link of the plurality of links supporting control-plane communications between the network system and a particular end-user device of the plurality of end-user devices over one or more wireless access networks; receiving a message from a server communicatively coupled to the network system, the message comprising payload for delivery to the particular end-user device; generating an encrypted message comprising the payload and an identifier identifying a particular device agent of a plurality of device agents on the particular end-user device, the identifier configured to assist in delivering at least a portion of the payload to the particular device agent on the particular end-user device; and sending the encrypted message to the particular end-user device over the particular link.

Automated Device Provisioning and Activation

A data access management system capable of executing access control management for a data file stored in a memory in a device That is, a system managing a data access from an access apparatus to a device having a memory The system issues a service permission ticket (SPT) as an access control ticket specifying an access mode allowed for an access apparatus such as a reader/writer The memory-equipped device receives the service permission ticket (SPT) from the access apparatus and executes processing in accordance with an access mode described in the service permission ticket (SPT) The service permission ticket (SPT) specifying an access mode allowed for an access apparatus is issued for each of the access apparatuses Accordingly, it is possible to perform accesses of various types in accordance with the access apparatuses

Data access management system and management method using access control ticket

When transmitting position/time information calculated by means of a GPS function to a server apparatus, authentication is carried out with the server apparatus. The position/time information may be certified as legitimate measured by a portable apparatus with a GPS reception function employed by a user. When transmitting information related to the position and the time acquired from a portable phone terminal having the GPS function and a network function by means of the GPS function to the server apparatus, authentication is carried out between the portable phone terminal and the server apparatus. The position/time information is transmitted to the server apparatus, only if the server apparatus is authenticated as a legitimate counterpart for connection. A secret key holding section is provided for holding different secret keys for different apparatuses. The position/time information measured based on an electromagnetic wave received from a positioning satellite is digitally signed by means of the secret key. The identification information and the position/time information having the digital signature are then transmitted to a counterpart.

Information terminal apparatus, information processing apparatus and information communication system

A memory access control system capable of independent management of partitions as divided memory regions generated in a device. For accessing the memory regions as a plurality of partitions, various types of access control tickets are issued under management of a device or partition manger and a process based on a rule described in each of the tickets is executed in the device mounted. A memory block includes a partition region as a memory region managed by the partition manager and a device manager management region managed by the device manager. It is possible to verify the partition correspondence and device object using a public key or a common key specified.

Memory access control system and management method using access control ticket

Mutual authentication is performed. A reader/writer (R/W) transmits to an IC card a code C1 such that a random number RA is encrypted using a key KB. The IC card decrypts the code C1 into plain text M1 using the key KB. The IC card transmits to the R/W a code C2 such that the plain text M1 is encrypted using a key KA and a code C3 such that a random number RB is encrypted using the key KA. The R/W decrypts the codes C2 and C3 into plain text M2 and plain text M3, respectively, using the key KA. When the R/W determines that the plain text M2 and the random number RA are the same, it authenticates the IC card. Next, the R/W transmits to the IC card a code C4 such that the plain text M3 is encrypted using the key KB. The IC card decrypts the code C4 into plain text M4 using the key KB. When the IC card determines that the plain text M4 and the random number RB are the same, it authenticates the R/W.

Authentication method, communication method, and information processing apparatus

In authentication using a plurality of cipher keys, the authentication time is shortened. In the case that an encipher key to encipher key are required to take an access to each area out of the area to area in a memory of an IC card, a plurality of areas to have an access is informed to the IC card from a reader writer, a plurality of cipher keys corresponding to these areas (for example, cipher key 1, cipher key 2, and cipher key 4) is read out, and reduction processing section generates one reduction key from these cipher keys. A random number which is generated from a random number generation section of the reader writer is transferred to the IC card, and an encipherment section enciphers the random number using the reduction key. The reader writer receives the enciphered random number from the IC card, and deciphers it using the reduction key, and judges the IC card to be proper if the deciphered random number is equal to the generated random number.

Masayuki Takada

Papers

Data access management system and management method using access control ticket

Information terminal apparatus, information processing apparatus and information communication system

Memory access control system and management method using access control ticket

Authentication method, communication method, and information processing apparatus

System and method for authentication, and device and method for authentication