Bundesdruckerei Gmbh

Frank Morgner

Manfred Paeschke

Frank Dietrich

Olga Kulikovska

Markus Tietke

Paul Bastian

Walter Fumy

Micha Kraus

Lazar Kulikovsky

Denis Holinski

Martin Schroeder

Niklas Weiss

Jürgen Drebes

Alexa Bartocha

Ulrike Linde

Olga Kullkovska

Christoph BÖSCH

Maxim Dr Schnjakin

Martin SCHRÖDER

Ivonne Scherfenberg

Robert MÖSER

An ID token includes a sensor, a communication interface, and a first microcontroller. The ID token includes a protected second microcontroller having at least one microcontroller communication interface, which is arranged in a holder of the ID token, wherein the microcontroller communication interface provides a data input and a data output. The first microcontroller is configured as a proxy for switching between the sensing of the measurement data by the sensor and forwarding of the sensed measurement data from the sensor to the first application of the protected second microcontroller by the microcontroller communication interface thereof on the one hand and forwarding of notifications for establishing a connection between the second application and the reading device and/or forwarding of APDUs by the connection between the second application and the reading device on the other hand.

ID token having a protected microcontroller

Method for generating a digital signature for a digital content using a computer and trustworthy signature hardware connected thereto for data exchange, includes generating a message digest from the digital content by an application executed on the computer; generating descriptive data relating to the electronic digital signature; transmitting the message digest and the descriptive data to the trustworthy signature hardware; outputting the descriptive data at an output device of the trustworthy signature hardware; carrying out a user interaction as precondition for the continuation of the method; generating signature data from the message digest and the descriptive data by the trustworthy signature hardware; and transmitting the signature data from the trustworthy signature hardware to the computer and in particular the application.

Method for generating a digital signature

The disclosure relates to a method for authenticating a user to a machine: generating a challenge by the machine, generating a first pattern, in which the challenge is coded, by the machine, displaying the first pattern on a display device of the machine, optically recording the first pattern by a user device, decoding the first pattern to receive the challenge by the user device, generating a response to the challenge by the user device, generating a second pattern, in which the response is coded, by the user device, displaying the second pattern on a display device of the user device, optically recording the second pattern by the machine, decoding the second pattern to receive the response by the machine, checking the correctness of the response by the machine, and, on the condition that the response is correct, fulfilling a function by the machine.

Method for authenticating a user to a machine

The invention relates to a computer-implemented method for controlling access of a terminal () to an attribute () stored in an ID token (), wherein the ID token () is associated with a user, wherein the method comprises receipt of an identification of the terminal () by the ID token () and checking by the ID token () if a session identification validly associated with the identification of the terminal () is stored in the ID token (), wherein, if a session identification validly associated with the identification of the terminal () is stored in the ID token (), the ID token () transmits the session identification to the terminal () and grants the terminal () access to the attribute (), wherein a subsequent communication with access to the attribute () is carried out in an encrypted manner using a session-specific session key, wherein the session-specific session key is stored in the ID token () in a manner associated with the session identification or the identification of the terminal ().

Computer-implemented method for controlling access

An identity card, comprising a card body and a physical unclonable function arranged within the card body, wherein the physical unclonable function comprises a first light influencing layer and a second light influencing layer.

Identity card with physical unclonable function

The disclosure relates to a method for reading at least one attribute stored in an ID token, wherein the ID token is assigned to a user, said method comprising: determining, by a terminal, of whether a contact-based interface of the ID token is present and can be used for data exchange with the terminal. If the ID token does not have the contact-based interface or this cannot be used, implementing a zero-knowledge authentication protocol via a contactless interface of the terminal and ID token; and deriving an ID token identifier by the terminal. If the ID token has the contact-based interface and this can be used, authenticating the user to the ID token via the contact-based interface; accessing to an ID token identifier by the terminal; sending of the ID token identifier from the terminal to an ID provider computer; use of the ID token identifier by the ID provider computer in order to authenticate the ID provider computer to the ID token; andread access of the ID provider computer to the at least one attribute stored in the ID token.

Reading of an attribute from an ID token

A method is proposed for providing position data for a chip card having portions for receiving or detecting position data of a localization unit by the localization unit, wherein the localization unit is spatially separate from the chip card; transmitting the position data from the localization unit to the chip card via a contactless interface with use of a cryptographic protocol; executing a distance-bounding protocol between the chip card and the localization unit, wherein the distance-bounding protocol then concludes successfully precisely when the spatial distance between the chip card and localization unit does not exceed a predefined maximum distance; and executing a chip card function with successful conclusion of the distance-bounding protocol, wherein the chip card function uses the transmitted position data as position data specifying the current position of the chip card.

Providing position data by means of a distance-bounding protocol

An identity card, comprising a card body and a physical unclonable function are arranged within the card body, wherein the physical unclonable function comprises a first light influencing layer and a second light influencing layer.

Growing community of inventors

Gruenheide, Germany

Frank Morgner