 Systems for accessing the internet and geo-defined data and associated methods |
| In one aspect, the invention provides Internet access apparatus that co-exists, and/or operates in ... |
|
| Method and apparatus for managing accounts payable |
| The foregoing summary is intended merely to provide a brief description of the general nature of ... |
|
| Flexible direct signaling system |
| Accordingly, the present invention is directed to a direct signaling method and architecture for ... |
|
| Sender-paid electronic messaging |
| The present invention is a messaging system, and method of operation thereof, which provides ... |
|
| Time stamp authority hierarchy protocol and associated validating system |
| The invention provides a time stamp authority hierarchy protocol and associated validating system. T... |
|
| Methods and systems for electronically accepting and exchanging an online gift |
| Methods, systems and articles of manufacture consistent with the present invention overcome the ... |
|
| Internet browser facility and method for the visually impaired |
| As the Internet has become an important communication tool, the visually impaired require display ... |
|
|
Method and system for providing controlled access to information stored on a portable recording medium
| Details |
Inventors: Basso, Jr., Micheal R.; Lee, Joonho; Li, Chunhua;
Assignee: Pitney Bowes Inc. (Stamford, CT)
Primary Examiner: Hafiz; Tariq R.
Assistant Examiner: Pender, Jr.; Michael J.
Attorney, Agent or Firm: Chotkowski; Kimberly S., Melton; Michael E.
A method and system for providing controlled access to information stored on a smartcard. The system includes a data processing center maintained by a trusted third party for storing a database of authorizations of various service providers to access information pertaining to individuals, and for responding to request by service providers for access from terminals which communicate with the data processing center and smartcards storing the individuals' information. The information is stored on the smartcard in encrypted form and the data processing center provides an access code, which includes a key for decrypting the information, only to service providers who are authorized to access the information. The service provider then sends the access code to the smartcard which verifies the access code and decrypts and outputs the requested information. The smartcard then computes a new key as a function of information unique to each access session and uses the new key to re-encrypt the information, and then erases the new key. The data processing center also computes the new key so that the data processing center can provide an access code including the new key for the next request for access. |
|
DETAILED DESCRIPTION The above object is achieved and the disadvantages of the prior art are overcome in accordance with the subject invention by means of a system and method for recording information and controlling access to that information.
The system includes a portable recording medium, which includes memory for storing information and a microprocessor responsive to input of an access code to enable access to the memory or a predetermined portion of the memory; a data processing center which includes a database of authorizations of a plurality of service providers with respect to the information; and a terminal which communicates with the data processing center.
The data processing center is responsive to a message from the terminal which identifies a service provider seeking access to the information by accessing the database to determine if the service provider is authorized to access the information, and by outputting the access code to the service provider only if the service provider is authorized to access the information.
The system is used to control access to information recorded on the portable recording medium by establishing the data processing center as secure, and by then receiving data identifying various service providers who can request access to the information, and verifying this data.
A database is then established in the data processing center identifying the authorizations of each service provider with respect to the information.
When a message is received from one of the service providers requesting access to the information the data processing center accesses the database to determine if that service provider is authorized to access the information, and, if so, provides the service provider with the necessary access code.
In accordance with one aspect of the subject invention a different key is required to decrypt the information each time the information is accessed.
In accordance with another aspect of the subject invention a certifying authority certifies each service provider authorized to access the information, and messages requesting access to the information from a service provider are digitally signed by the service provider with a private key certified to the service provider by the certifying authority
|
| Related patents |
|
|
Application package and system for permitting a user to use distributed application package on the term of the use thereof
OF THE PREFERRED EMBODIMENTS For the sake of better understanding of the following description, it will be useful to define some terms to be used. Charged information ...
|
|
|
Automated unmanned rental system and method
OF THE INVENTION FIG. 1 shows a schematic/block diagram of an embodiment of an automated unmanned rental system of the present invention. Referring now to FIG. 1, A...
|
|
|
System and method of secure electronic commerce transactions including tracking and recording the distribution and usage of assets
The present invention relates to electronic commerce transactions. In particular, the invention relates to a system and method for electronic commerce transactions that ...
|
|
|
Method, apparatus and system for directing access to content on a computer network
OF PREFERRED EMBODIMENTS Preferred embodiments of the instant invention employ a network of computers and programs for controlling one or more of such computers for ...
|
|
|
Flexible computer resource manager
The subject invention improves upon existing resource management techniques by providing an intelligent, multithreaded component called the Flexible Resource Manager, or ...
|
|
|
Dynamic modification of multimedia content
FIG. 1 depicts an example of an Internet environment having features of the present invention. As depicted, one or more content servers (135) are connected to a network ...
|
|
|
Networked appliance for recording, storing and serving digital images
An improved image server is provided by virtue of the present invention. In one embodiment of an image server according to the present invention, images are captured on ...
|
|
|
Method and apparatus for providing access to a legacy application on a distributed data processing system
What is claimed is: 1. A method in a data processing system for providing access to an application, the method comprising: transforming data from the application having ...
|
|
|
System and method for processing a request for information in a network
From the foregoing, it may be appreciated by those skilled in the art that a need has arisen for a system and technique that can locate an appropriate server to fulfill ...
|
|
|
Secure postage meter in an ATM application
We claim: 1. An apparatus for performing banking and postage metering functions comprising: a postage metering apparatus including a meter controller; a host secure ...
|
|
|
Finance 
