Bundesdruckerei Gmbh

Paul Bastian

Manfred Paeschke

Jörg Fischer

Frank Dietrich

Markus Tietke

Frank Morgner

Micha Kraus

Enrico Entschew

Christian Seegebarth

Wolf Müller

Christoph BÖSCH

Robert Musick

Marco Walz

Stefan TRÖLENBERG

Maxim Dr Schnjakin

Martin SCHRÖDER

An ID token includes a sensor, a communication interface, and a first microcontroller. The ID token includes a protected second microcontroller having at least one microcontroller communication interface, which is arranged in a holder of the ID token, wherein the microcontroller communication interface provides a data input and a data output. The first microcontroller is configured as a proxy for switching between the sensing of the measurement data by the sensor and forwarding of the sensed measurement data from the sensor to the first application of the protected second microcontroller by the microcontroller communication interface thereof on the one hand and forwarding of notifications for establishing a connection between the second application and the reading device and/or forwarding of APDUs by the connection between the second application and the reading device on the other hand.

ID token having a protected microcontroller

The invention relates to a computer-implemented method for controlling access of a terminal () to an attribute () stored in an ID token (), wherein the ID token () is associated with a user, wherein the method comprises receipt of an identification of the terminal () by the ID token () and checking by the ID token () if a session identification validly associated with the identification of the terminal () is stored in the ID token (), wherein, if a session identification validly associated with the identification of the terminal () is stored in the ID token (), the ID token () transmits the session identification to the terminal () and grants the terminal () access to the attribute (), wherein a subsequent communication with access to the attribute () is carried out in an encrypted manner using a session-specific session key, wherein the session-specific session key is stored in the ID token () in a manner associated with the session identification or the identification of the terminal ().

Computer-implemented method for controlling access

A document having a non-volatile memory area for storing a secret identifier that has a first n-digit character sequence from a predefined character set; a random generator for selecting at least one character from the predefined character set for replacement of at least one character of the first character sequence, such that a second n-digit character sequence is defined as a result of this replacement; a volatile memory area for storing the at least one selected character; a display device for displaying the at least one selected character; an interface for inputting a third character sequence; and a processor element for authenticating the user to the document, wherein the processor element is configured to access the non-volatile memory area and the volatile memory area in order to read the second character sequence and check for a match between the second and third character sequences in order to authenticate the user.

Document, method for authenticating a user, in particular for releasing a chip card function, and computer system

Growing community of inventors

Berlin, Germany

Paul Bastian