Computer-implemented method for controlling access

US10360361B2 · kind B2 · utility

Assignee

• BUNDESDRUCKEREI GMBH · DE

Inventors

• Frank Morgner · Espelkamp, DE
• Paul Bastian · Berlin, DE

Key dates

• Filing date: Feb 10, 2016
• Grant date: Jul 23, 2019
• Expiry date: May 20, 2036

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/10
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

The invention relates to a computer-implemented method for controlling access of a terminal (118) to an attribute (112) stored in an ID token (100), wherein the ID token (100) is associated with a user, wherein the method comprises receipt of an identification of the terminal (118) by the ID token (100) and checking by the ID token (100) if a session identification validly associated with the identification of the terminal (118) is stored in the ID token (100), wherein, if a session identification validly associated with the identification of the terminal (118) is stored in the ID token (100), the ID token (100) transmits the session identification to the terminal (118) and grants the terminal (118) access to the attribute (112), wherein a subsequent communication with access to the attribute (112) is carried out in an encrypted manner using a session-specific session key, wherein the session-specific session key is stored in the ID token (100) in a manner associated with the session identification or the identification of the terminal (118).