Method for delegating access rights

A method for delegating access rights to a secured object, comprising the steps of:

• providing a first-order data packet in a trusted central management device, wherein the first-order data packet at least includes:
• a unique first identifier,
• a first data set with a list of access rights to a secured device,
• a first data secret key, which can be used for the encryption and decryption of data,
• encrypting the first-order data packet in the trusted central management device, wherein a first object data secret specific to the secured object is used for encryption, the first object data secret being matched to a second object data secret stored in the control device of the secured object such that the first-order data packet encrypted using the first object data secret can be decrypted for the control device of the secured object,
• transmitting both the unencrypted first-order data packet and the first-order data packet encrypted using the first object data secret to a first mobile communication device assigned to a first-order user;
• providing a second-order data packet in the first mobile communication device, wherein the second-order data packet includes:
• a unique second identifier,
• first reference data containing a reference to the first-order data packet,
• a second data set with a list of access rights to the secured device, the second data set being a subset of the first data set,
• a second data secret key, which can be used for encryption and decryption of data,
• the first-order data packet encrypted using the first object data secret,
• a first data container encrypted with the first data secret key and containing at least the unique first identifier and the second data secret key,
• signing the second-order data packet using the first data secret key,
• transmitting the signed second-order data packet to a second mobile communication device associated with a second-order user, wherein the second communication device is hierarchically subordinate to the first communication device.