A new electronic money system striking a balance between functionality, security, and user privacy. The system can encompass both network and stored-value card based payment mechanisms, with transferability between them, hence the name. Work done at IBM, with Mihir Bellare , Charanjit Jutla , and Moti Yung . Protocols can be applied to any account-based payment model, such as debit cards and electronic checks. They are based on careful and minimal use of public-key cryptography and can be implemented in either software or hardware.
Individual protocols differ in both complexity and degree of security.
A Security Architecture for the Internet Protocol Security architecture for protecting the secrecy and integrity of Internet traffic at the IP layer, allowing for the establishment of a secure channel between any two communicating systems over the Internet. The design includes a key management protocol, called MKMP, for establishing shared secrets between communicating parties and meta-information prescribed by the security policy. The architecture allows for the establishment of a secure channel between any two communicating systems over the Internet. This technology is a component of IBM's Firewall product, and is being ported to other IBM platforms. Work done at IBM with Pau-Chen Cheng, Amir Herzberg , and Hugo Krawzcyk .