# US 10,873,575 B2 · Method for providing a personal identification code of a security module > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,873,575 B2 - Document ID: US10873575B2 - Status: Granted - Kind: B2 - Application number: 15/576,626 - Filed: 2016-05-25 - Published: 2018-06-14 - Granted: 2020-12-22 - Earliest claimed: 2015-05-26 - Assignees: Giesecke+Devrient Mobile Security GmbH - Applicants: Giesecke+Devrient Mobile Security GmbH - Inventors: Werner Herget; Thomas Werner - Web page: https://patentgrep.com/patent/US10873575B2 ## CPC - H04L 63/0838: {using one-time-passwords} - G06Q 20/401: {Transaction verification} - H04L 9/0827: {involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18)} - H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A method for providing a personal identification code of a security module, includes a personal identification code assigned to the security module and a server is provided which a user of the security module can access after an authentication. In the method, triggered by a request from the user at the server, an authentication code is transmitted to a terminal of the user by means of a first message. An authentication code input by the user is received at the server, whereupon it is verified whether the input authentication code matches the authentication code transmitted to the terminal, wherein, in the case of a match, the personal identification code is transmitted to the terminal of the user by means of a second message. ## Claims ### Claim 1 A method for supplying a personal identification code of a security module, wherein the personal identification code is assigned to the security module, and wherein a server is provided, and a user of the security module can access the server after an authentication, the method comprising steps of: transmitting an authentication code which is a one-time password to a terminal of the user by means of a first message, when triggered by a request of the user at the server; receiving an authentication code at the server which is input by the user; verifying whether the authentication code input by the user matches the authentication code transmitted to the terminal of the user; and responsive to the authentication code input by the user matching the authentication code transmitted to the terminal of the user, transmitting the personal identification code that is assigned to the security module to the terminal of the user by a second message, wherein the security module is a portable data carrier having a chip, a USB token, or an RFID transponder. ### Claim 2 (depends on 1) The method according to claim 1, wherein the server is an online transaction server. ### Claim 3 (depends on 2) The method according to claim 2, wherein the online transaction server employs transaction codes for verifying transactions initiated by the user, wherein, in response to the request of the user, a transaction code is transmitted as authentication code to the terminal of the user by means of the first message. ### Claim 4 (depends on 1) The method according to claim 1, wherein the first and/or second message is/are transmitted to the terminal of the user by a supply entity which communicates with the server. ### Claim 5 (depends on 1) The method according to claim 1, wherein the authentication code is generated in the server. ### Claim 6 (depends on 5) The method according to claim 5, wherein the authentication code generated in the server is transmitted to the terminal of the user by the server by means of the first message. ### Claim 7 (depends on 1) The method according to claim 1, wherein the first and/or second message is/are transmitted to the terminal of the user by a supply entity which communicates with the server; wherein the authentication code is generated in the server; wherein the authentication code generated in the server is transmitted to the supply entity by the server, said supply entity transmitting the transmitted authentication code to the terminal of the user by means of the first message. ### Claim 8 (depends on 1) The method according to claim 1, wherein the first and/or second message is/are transmitted to the terminal of the user by a supply entity which communicates with the server; wherein the server instructs the supply entity to generate the authentication code, whereupon the supply entity produces the authentication code and transmits it to the terminal of the user by means of the first message. ### Claim 9 (depends on 1) The method according to claim 1, wherein the verification of the match of the input authentication code with the authentication code transmitted to the terminal of the user is effected by the server. ### Claim 10 (depends on 9) The method of claim 9, wherein the first and/or second message is/are transmitted to the terminal of the user by a supply entity which communicates with the server; wherein responsive to a match of the authentication code input by the user with the authentication code transmitted to the terminal of the user, the supply entity is supplied with a confirmation by the server, wherein, in response to the supply of the confirmation, the supply entity transmits the second message to the terminal of the user. ### Claim 11 (depends on 10) The method according to claim 10, wherein the confirmation is transmitted to the supply entity by the server or is supplied in the form of a transaction carried out by the server. ### Claim 12 (depends on 1) The method according to claim 1, wherein the server supplies the user with an input mask for the authentication code. ### Claim 13 (depends on 1) The method according to claim 1, wherein the first and/or second message is/are transmitted to the terminal of the user by a supply entity which communicates with the server; wherein the verification of the match of the input authentication code with the authentication code transmitted to the terminal of the user is effected by the supply entity, wherein, in the event of a match, the supply entity transmits the second message to the terminal of the user. ### Claim 14 (depends on 1) The method according to claim 1, wherein the terminal of the user is a mobile communication device. ### Claim 15 (depends on 14) The method according to claim 14, wherein the first message is transmitted to the mobile communication device by an SMS message which is sent to the mobile communication device of the use employing a known communication number of the mobile communication device. ### Claim 16 (depends on 1) The method according to claim 1, wherein the second message is addressed to a mobile communication number allocated to the user. ### Claim 17 (depends on 1) The method according to claim 1, wherein the user is registered in advance at the server for the authentication of the user. ### Claim 18 A system for supplying a personal identification code of a security module, wherein the system comprises: a server device which a user of the security module can access after an authentication, wherein the system is adapted for carrying out a method, the server device being a hardware server device, wherein the personal identification code is assigned to the security module, and wherein triggered by a request of the user at the server device, an authentication code, which is a one-time password, is transmitted to a terminal of the user by means of a first message; an authentication code is received at the server device which is input by the user; it is verified whether the authentication code input by the user and received at the server device matches the authentication code transmitted to the terminal of the user, and responsive to the authentication code input by the user matching the authentication code transmitted to the terminal of the user, the personal identification code that is assigned to the security module is transmitted to the terminal of the user by a second message, wherein the security module is a portable data carrier having a chip, a USB token, or an RFID transponder. ### Claim 19 (depends on 18) The system according to claim 18, wherein the server device is an online transaction server device.