A system for remote data acquisition and centralized processing and storage is disclosed called the DataTreasury System (600). The DataTreasury System provided comprehensive support for the processing of documents and electronic data associated with different applications including sale, business, banking and general consumer transactions. The system retrieves transaction data such as credit card receipts checks in either electronic or paper form at one or more remote locations, encrypts the data, transmits the encrypted data to a central location, transforms the data to a usable form, performs identification verification using signature data and biometric data, generates informative reports from the data and transmits the informative reports to the remote location(s). The DataTreasury System (200, 400, 600) has many advantageous features which work together to provide high performance, security, reliability, fault tolerance and low cost. First, the network architecture facilitates secure communication between the remote location(s) and the central processing facility. A dynamic address assignment algorithm performs load balancing among the system's servers for faster performance and higher utilization. Finally, partitioning scheme improves the error correction process.

Remote image capture with centralized processing and storage

The present invention provides a system to ensure security of data in a computer network system A center certifies a public-key of user of the system and distributes a secret-key A first system comprises the center in a network, an information provider and a plurality of users The center identifies utilization status by requests of the secret-key The data is encrypted by the secret-key and is stored and transferred, while the data to be stored and transferred is encrypted by a secret-key different from the secret-key of the transferred data An original data label is added to the original data, and an edit label is added to the edited data, and the center does not store the data and stores only the original data label and the edit label A second system comprises a center and an information provider in a network, and a plurality of users utilizing the network The center stores the original data and editing scenario, and also the original data label, user label and edit label The data is not transferred between the users, but data label encrypted by the public-key is transferred In electronic commerce system, every data is distributed through a mediator in the network, data which is transferred from a maker to a user is encrypted by a secret-key for encryption, and data which is transferred from the user to the maker is encrypted by a secret-key for re-encryption

Data management system

A transaction terminal for use with diverse credit or other transaction cards is provided with an interface unit for receiving a plurality of modules, wherein each module contains programming information corresponding to transactions that may be carried out with at least one of the diverse identification cards presented to the machine. Accordingly, financial institutions who issue cards can independently arrange and program their own security and transaction routines which are to be carried out with the cards and distribute such routines in a secure manner for use on a common terminal.

Multi-issuer transaction device with individual identification verification plug-in application modules for each issuer

Two-way authentication system between user's smart card and issuer-specific plug-in application modules in multi-issued transaction device

An automated transaction system employs a card maintaining an account balance and a terminal for dispensing an article of value and debiting the card's balance. The card has a secure, resident microprocessor which executes an interactive handshake recognition procedure with a secure, resident microprocessor in the value dispensing section of the terminal prior to actuating a requested transaction. In the preferred form, the handshake procedure operates by an exchange of encrypted words between the card microprocessor and the dispenser microprocessor using corresponding encryption algorithms and a secret key number, and the card microprocessor providing a command signal to the dispenser microprocessor only upon successful completion of the procedure. The automated transaction system is particularly suitable as a postage metering terminal having a postmark printer as the value dispensing section. Postage is printed only if the handshake procedure is executed between the card microprocessor and the printer microprocessor. The postal terminal also receives a rate card for computing postage automatically, and prints an invisible authentication mark along with the postmark to discourage counterfeiting. The terminal can be configured to print standard form waybills for postal and private carrier services by loading waybill information from an IC ROM services card. The balance in the user card is refilled in a refilling terminal using a master card which maintains a master account balance and a supervisor card which is in the custody of an authorized person.

Automated transaction system

In a data communication network which includes terminals interconnected via a central switch, a process for verifying the identity of a terminal user who is provided with secret data associated with his identity. In carrying out the verification process, the secret data is first encrypted at the terminal under a transfer-in key for transmission to an associated data processing system. When it is determined that the terminal user maintains an account at the associated data processing system, a first translate operation is performed to translate the data from encryption under the transfer-in key to encryption under an authentication key, both of which keys are protected under other keys which are different from each other, thereby providing an authentication parameter which may be used to verify the identity of the terminal user. When it is determined that the terminal user does not maintain an account at the associated data processing system, a second translate operation is performed to translate the data from encryption under the transfer-in key to encryption under a transfer-out key for transmission to the next associated host system, the switch or a remote host system. At each such node, except the switch, a determination is made as to whether a verification process can be performed otherwise, the encrypted data is translated for transmission to the next or a remote node of the network for such verification.

Cryptographic application for interbank verification

In a data communication network which includes terminals interconnected via a central switch, a process for verifying the identity of a terminal user who is provided with secret data associated with his identity. In carrying out the verification process, the secret data is first encrypted at the terminal under a transfer-in key for transmission to an associated data processing system. When it is determined that the terminal user maintains an account at the associated data processing system, a first translate operation is performed to translate the data from encryption under the transfer-in key to encryption under an authentication key, both of which keys are protected under other keys which are different from each other, thereby providing an authentication parameter which may be used to verify the identity of the terminal user. When it is determined that the terminal user does not maintain an account at the associated data processing system, a second translate operation is performed to translate the data from encryption under the transfer-in key to encryption under a transfer-out key for transmission to the next associated host system, the switch or a remote host system. At each such node, except the switch, a determination is made as to whether a verification process can be performed; otherwise, the encrypted data is translated for transmission to the next or a remote node of the network for such verification.

Robert Edward Shuck

Papers

Cryptographic application for interbank verification

Cryptographic data communications