Method for reading attributes from an ID token
AssigneeBundesdruckerei GmbH
InventorFrank Dietrich
Life of this patent
Estimating the term…
Abstract
A method for reading at least one attribute stored in an ID token assigned to a user involving the steps of: authenticating the user to the ID token, authenticating a first computer system to the ID token, and, assuming successful authentication of the user and the first computer system to the ID token, read access by the first computer system to the at least one attribute stored in the ID token for transmission of the at least one attribute to a second computer system, and generating of a time indication for the at least one attribute by the first computer system.
Claims13
A method for reading at least one attribute stored in an ID token assigned to a user, where the at least one attribute is signed by a first computer system and transmitted to a second computer system without use of any direct communication link between the first computer system and the second computer system, the method comprising:
- the ID token authenticating the user, wherein the ID token is an electronic identification document having an interface with a third computer system, wherein the third computer system is a user computer system;
- the ID token authenticating the first computer system via a public network link between the first and third computer systems;
- after successful authentication of the user and the first computer system by the ID token, the first computer system performs:
- receiving, from the second computer systems via the third computer system, a transaction identifier generated by the second computer system;
- a read access, via an end-to-end encrypted transmission over the public network, of at least one attribute stored in the ID token and not previously stored in the first computer system,
- generating a time indicator for the at least one attribute, the time indicator dependent upon a time at which the interaction between the first and third computers occurs;
- signing the at least one attribute and at least one of:
- the time indicator, and
- the transaction identifier generated by the second computer system, and
- transmitting the at least one attribute, the time indicator, and the transaction identifier to the third computer system, and
- transmitting the at least one attribute read by the first computer system from the third computer system to the second computer system,
- wherein the at least one attribute is signed by the first computer system and transmitted to the second computer system without use of any direct communication link between the first computer system and the second computer system.
A non-transitory computer readable storage medium having instructions executable on a processor, said instructions for a method for reading at least one attribute stored in an ID token assigned to a user, wherein the at least one attribute is signed by a first computer system and transmitted to a second computer system without use of any communication link between the first computer system and the second computer system, the method comprising:
- the ID token authenticating the user, wherein the ID token is an electronic token having an interface with a third computer system, where the third computer system is a user computer system;
- the ID token authenticating a first computer system via a public network link between the first and third computer systems;
- after successful authentication of the user and the first computer system to the ID token:
- receiving a transaction identifier generated by the second computer system from the second computer;
- transmitting, to the first computer, the transaction identifier generated by the second computer system and an attribute specification;
- authorizing a read access, by the first computer system, of at least one attribute stored in the ID token in accordance with the attribute specification, the at least one attribute not previously stored in the first computer system;
- receiving from the first computer system, via the public network link, the transaction identifier and a time indicator for the at least one attribute, where the time indicator is dependent upon a time at which the interaction between the first and second computers occurs where the at least one attribute and at least one of the time indicator and the transaction identifier are signed by the first computer;
- and
- transmitting the at least one attribute read by the first computer system from the third computer system to the second computer system,
- wherein the at least one attribute signed by the first computer system is transmitted to the second computer system without use of any direct communication link between the first computer system and the second computer system.
Dependencies are inferred from the claim text.