Bundesdruckerei Gmbh

Freie Universitat Berlin

Cv Cryptovision Gmbh

Matthias Schwan

Frank Dietrich

Klaus-Dieter Wirth

Uwe Rabeler

Steffen Scholze

Frank Muller

Elke Filzhuth

Marian Margraf

Tim Ohlendorf

Marcus Fritsche

Olaf Clemens

Frank MÜLLER

Danny Hesse

Thomas Mai

Ansgar Lohoff

Klaus Dieter Wirth

The invention relates to a method for securely providing a personalized electronic identity on a terminal () which can be used by a user () for identification purposes when claiming an online service. In the method, an identification application is ran on a terminal (), which is assigned to a user (), in a system comprising data processing devices () and said terminal (), and additionally a personalization application and an identity provider application are ran. The method has the following steps in particular; transmitting a request to transmit an identity attribute assigned to the user () front the personalization application to the identity provider application; transmitting the identity attribute from the identity provider application to the personalization application after an agreement to transmit the identity attribute by means of the identity provider application is received from the user (); generating an asymmetric key pair with a public and a private key on the terminal () by means of the identification application; transmitting the public-key from tire identification application on the terminal () to the personalization application; and generating an electronic certificate for the public-key by means of tire personalization application and storing the electronic certificate in a data storage device in order to form a first public-key infrastructure of the personalization application, additionally having the steps of: generating a hash value for the identity attribute and recording the hash value onto the electronic certificate. The identity attribute is encoded and transmitted together with the electronic certificate from the personalization application to the identification application () on the terminal (), where both are stored in a local storage device of the terminal ().

Method for securely providing a personalized electronic identity on a terminal

The method includes authenticating a chip card terminal to a chip card by a chip card operating system, verifying the authorization of the chip card terminal to load executable program instructions by the chip card operating system, storing data in a predefined memory region of the NVM, which data indicate a successful execution of the authentication and the verification, by the chip card operating system, starting execution of a boot loader by the chip card operating system and interrupting the execution of the chip card operating system following the start of the boot loader, reading the data from the predefined memory region by the boot loader, loading the program instructions from the chip card terminal into the NVM by the boot loader on the precondition that the data indicate the successful authentication and verification in the predefined memory region.

Method for loading executable program instructions into a chip card during active operation

Growing community of inventors

Berlin, Germany

Matthias Schwan