Bundesdruckerei Gmbh

Bundesdruckeri Gmbh

Fraunhofer-gesellschaft Zur Foerderung Der Angewandten Forschung E.v.

Deutschetelekom Ag

Freie Universitat Berlin

Frank Dietrich

Manfred Paeschke

Jörg Fischer

Arthur Mathea

Frank Byszio

Malte Pflughoefft

Olaf Clemens

Frank Morgner

Olaf Dressel

Frank Fritze

Micha Kraus

Paul Bastian

Matthias Schwan

Marian Margraf

Tim Ohlendorf

Robert Fiedler

Wolf Müller

Christian Seegebarth

Ivonne Scherfenberg

Hendrik Schulz

Malte Pflughofft

Frederic Strumpf

Christoph Krauss

Dr Manfred Paeschke

Gregor KÖLTZSCH

Ulrike Linde

Martin SCHRÖDER

Robert Zastrau

Marian Prof Dr Margraf

Steven Kall

Matthias Dr Schwan

Manfred Dr Paeschke

Marcus Fritsche

Frank Byszio-wegener

The invention relates to a method for securely providing a personalized electronic identity on a terminal () which can be used by a user () for identification purposes when claiming an online service. In the method, an identification application is ran on a terminal (), which is assigned to a user (), in a system comprising data processing devices () and said terminal (), and additionally a personalization application and an identity provider application are ran. The method has the following steps in particular; transmitting a request to transmit an identity attribute assigned to the user () front the personalization application to the identity provider application; transmitting the identity attribute from the identity provider application to the personalization application after an agreement to transmit the identity attribute by means of the identity provider application is received from the user (); generating an asymmetric key pair with a public and a private key on the terminal () by means of the identification application; transmitting the public-key from tire identification application on the terminal () to the personalization application; and generating an electronic certificate for the public-key by means of tire personalization application and storing the electronic certificate in a data storage device in order to form a first public-key infrastructure of the personalization application, additionally having the steps of: generating a hash value for the identity attribute and recording the hash value onto the electronic certificate. The identity attribute is encoded and transmitted together with the electronic certificate from the personalization application to the identification application () on the terminal (), where both are stored in a local storage device of the terminal ().

Method for securely providing a personalized electronic identity on a terminal

The invention relates to a method for reading at least one attribute stored in an ID token, wherein the ID token is assigned to a user, comprising the following steps: authenticating the user with respect to the ID token, authenticating a first computer system with respect to the ID token, after successful authentication of the user and the first computer system with respect to the ID token, read-access by the first computer system to the at least one attribute stored in the ID token for transfer of the at least one attribute to a second computer system.

Method for reading attributes from an ID token

The method relates to a method for generating a soft token, having the following: providing a secure element, wherein, in a protected storage area of the secure element, a secret key of a first asymmetric cryptographic key pair is stored, setting up a first cryptographically secured connection between an electronic device and a service computer system, transmitting a request for the generation of the soft token from the electronic device to the service computer system via the first connection, generating a one-time password on the basis of the reception of the request by the service computer system, registering the one-time password as an identifier of the first connection by the service computer system, transmitting the one-time password from the service computer system to the electronic device via the first connection, issuing the one-time password via a user interface of the electronic device, setting up a second cryptographically stored connection between a user computer system and the service computer system, entering the one-time password into the user computer system, transmitting the entered one-time password from the user computer system to the service computer system via the second connection, verifying, by means of the service computer system, whether the registered one-time password is in agreement with the one-time password received via the second connection, and only if this is the case, reading at least one attribute stored in an ID token, generating the soft token by signing the at least one attribute and the public key of the first cryptographic key pair, transmitting the soft token via the first connection to the electronic device and/or transmitting the soft token via the second connection to the user computer system.

Method for producing a soft token, computer program product and service computer system

A method for initializing a memory area associated with a smart meter, establishing a first communication channel between a first computer system and a security module, the security module being associated with a memory area, and the first computer system being associated with a set of computer systems interconnected via a network; authenticating the first computer system with respect to the security module; once the first computer system has been successfully authenticated, the security module receiving data from the first computer system by secure transmission and storage of the data in the memory area in order to initialize the memory area, communication between a second computer system of a utility company and/or operator of the measuring system and the security module being only possible while bypassing the first computer system, owing to the stored data, the second computer system being a computer system of the set of computer systems.

Method for initializing a memory area that is associated with a smart meter

A document having a non-volatile memory area for storing a secret identifier that has a first n-digit character sequence from a predefined character set; a random generator for selecting at least one character from the predefined character set for replacement of at least one character of the first character sequence, such that a second n-digit character sequence is defined as a result of this replacement; a volatile memory area for storing the at least one selected character; a display device for displaying the at least one selected character; an interface for inputting a third character sequence; and a processor element for authenticating the user to the document, wherein the processor element is configured to access the non-volatile memory area and the volatile memory area in order to read the second character sequence and check for a match between the second and third character sequences in order to authenticate the user.

Document, method for authenticating a user, in particular for releasing a chip card function, and computer system

A method for communicating energy consumption-specific measurement data elements recorded by a smart meter between a smart meter device and a first computer system of a utility company and/or operator of a measuring system, the device having a security module, said security module serving as the sole communication interface between of the device with the first computer system, the device having configuration data required for its operation, and the device being associated with an indication of those measurement data elements and/or configuration data for which the first computer system has a read access authorization, the method comprising: establishing a first communication channel between the first computer system and the security module, mutually authenticating the computer system and the security module, authentication being carried out with the aid of a first certificate of the security module and a second certificate of the first computer system; once mutual authentication has been completed, transmitting via the security module at least a part of the measurement data elements and/or configuration data specified in the indication to the first computer system by a secured transmission.

Method for communication of energy consumption-specific measurement data elements between a smart meter device and a computer system of a utility company and/or operator of a measuring system

A method for reading at least one attribute stored in an ID token assigned to a user involving: authenticating the user to the ID token, authenticating a first computer system to the ID token, and, assuming successful authentication of the user and the first computer system to the ID token, read access by the first computer system to the at least one attribute stored in the ID token for transmission of the at least one attribute to a second computer system, and generating of a time indication for the at least one attribute by the first computer system.

A method is provided for generating a soft token by which attributes of a user may be authenticated. A request to generate the soft token is transmitted from an electronic device of the user to a service provider computer via a first secure connection. After receiving the request, the service computer generates a one-time password, records the password as a session identifier, and transmits the password to the electronic device. The password is output by the electronic device via a user interface. The user enters the password into a user computer system, from where it is transmitted, via a second secure connection, to the service computer system. If the recorded password agrees with the received password, one or more attributes are read from an ID token of the user and a corresponding soft token is generated and transmitted to the electronic device or user computer system.

Method for generating a soft token, computer program product and service computer system

A method for calling up a client program: transmitting a message to a server computer system using an Internet browser, wherein the message contains at least one parameter for communication of the client program with the Internet browser; dynamically generating a URL by the server computer system, wherein the URL calls up the client program according to a URL scheme, wherein the URL contains the at least one parameter; transmitting a website having the URL from the server computer system to the user computer system and displaying the website having the URL in a browser window of the Internet browser for selection by a user; starting the client program on a user computer system and imputing the at least one parameter into the client program on the basis of the selection of URL by the user; and communicating a result.

Method for starting a client program

The invention relates to a method for reading the at least one attribute stored in an ID token ('), wherein the ID token is assigned to a user (), having the following steps:

Method for producing a soft token

The invention relates to a motor vehicle electronics device comprising a first interface () for establishing a first connection to a first ID token () in order to read data from the first ID token, &#x2014;a memory () for storing a certificate, &#x2014;means () for the cryptographic authentication with respect to the first ID token using the certificate, &#x2014;means () for actuating at least one display apparatus () for reproducing the data, and &#x2014;a second interface () for storing the certificate in the memory.

Motor vehicle electronics device, motor vehicle, method for displaying data on a motor vehicle display apparatus, and computer program product

The invention relates to a motor vehicle display apparatus having an electronic appliance containing:

Motor vehicle display device, motor vehicle electronic system, motor vehicle, method for displaying data and a computer program product

A method for reading at least one attribute stored in an ID token assigned to a user involving the steps of: authenticating the user to the ID token, authenticating a first computer system to the ID token, and, assuming successful authentication of the user and the first computer system to the ID token, read access by the first computer system to the at least one attribute stored in the ID token for transmission of the at least one attribute to a second computer system, and generating of a time indication for the at least one attribute by the first computer system.

Growing community of inventors

Berlin, Germany

Frank Dietrich