US 2018/0025145 A1Published application

Computer-implemented method for controlling access

AssigneeBundesdruckerei GmbH

InventorsFrank MORGNER, Paul BASTIAN

Life of this patent

Estimating the term…

Loading patent…

Abstract

The invention relates to a computer-implemented method for controlling access of a terminal (118) to an attribute (112) stored in an ID token (100), wherein the ID token (100) is associated with a user, wherein the method comprises receipt of an identification of the terminal (118) by the ID token (100) and checking by the ID token (100) if a session identification validly associated with the identification of the terminal (118) is stored in the ID token (100), wherein, if a session identification validly associated with the identification of the terminal (118) is stored in the ID token (100), the ID token (100) transmits the session identification to the terminal (118) and grants the terminal (118) access to the attribute (112), wherein a subsequent communication with access to the attribute (112) is carried out in an encrypted manner using a session-specific session key, wherein the session-specific session key is stored in the ID token (100) in a manner associated with the session identification or the identification of the terminal (118).

Claims16

Dependent claims

A computer-implemented method for controlling access of a terminal to an attribute stored in an ID token, wherein the ID token is associated with a user, wherein the method comprises receipt of an identification of the terminal by the ID token and checking by the ID token if a session identification validly associated with the identification of the terminal is stored in the ID token, wherein, if a session identification validly associated with the identification of the terminal is stored in the ID token, the ID token transmits the session identification to the terminal and grants the terminal access to the attribute, wherein a subsequent communication with access to the attribute is carried out in an encrypted manner using a session-specific session key, wherein the session-specific session key is stored in the ID token in a manner associated with the session identification or the identification of the terminal, wherein, if no session identification validly associated with the identification of the terminal is stored in the ID token, the method comprises the following steps:

authenticating the terminal by the ID token and authenticating the ID token to the terminal, wherein, following successful authentications, the terminal is granted access to the attribute,
deriving a session-specific session key, wherein a subsequent communication with access to the attribute is carried out in an encrypted manner using a session-specific session key,
deriving a session identification,
storing, in the ID token, the identification of the terminal associated with the session identification,
storing, in the ID token the session-specific session key associated with the identification of the terminal.

2 more elements

A computer-implemented method for controlling access of a terminal to an attribute stored in an ID token, wherein the ID token is associated with a user, wherein the method comprises a step of sending an identification of the terminal, by the terminal, to the ID token, wherein, if the ID token responds to the sending of the identification with the transmission of a session identification to the terminal, the terminal checks whether a session-specific session key validly associated with the session identification is stored in the terminal, wherein, if a session-specific session key validly associated with the session identification is stored, access of the terminal to the attribute is granted, wherein the access is carried out by means of a communication of the terminal with the ID token in an encrypted manner using the session-specific session key, wherein, if there is no session-specific session key validly associated with the session identification, the method comprises the following steps:

authenticating the terminal to the ID token and authenticating the ID token to the terminal,
following successful authentications, deriving a session-specific session key, wherein a subsequent communication with access to the attribute is carried out in an encrypted manner using a session-specific session key,
deriving a session identification,
storing, in the terminal, the session-specific session key associated with session identification.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 15/549,949Filed 10 Feb 2016
Priority: DE 10 2015 202 308.710 Feb 2015
Published: 25 Jan 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G06F 21/33
User authentication: using certificates
G06F 21/35
Involving the use of external additional devices, e.g. dongles or smart cards: communicating wirelessly
G06F 21/6227
To a system of files or objects, e.g. local or distributed file system or database: where protection concerns the structure of data, e.g. records,…
H04L 63/045
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: wherein the sending and receiving network entities apply…

Family

US 10,360,361 B2Related patent
US 2018/0025145 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key