Method for reading an attribute from an ID token

US8812851B2 · kind B2 · utility

Assignee

• BUNDESDRUCKEREI GMBH · DE

Inventors

• Carsten Schwarz · Berlin, DE
• Gunter Koch · Bad Kreuznach, DE

Key dates

• Filing date: Apr 20, 2011
• Grant date: Aug 19, 2014
• Expiry date: Aug 28, 2031

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/1466
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

The invention relates to a method for reading at least one attribute stored in an ID token (106, 106′) using first (136), second (150) and third (100) computer systems, wherein the third computer system comprises a browser (112) and a client (113), and wherein a service certificate (144) is assigned to the second computer system, wherein the service certificate comprises an identifier which is used to identify the second computer system, wherein the ID token is assigned to a user (102), having the following steps: —a first cryptographically protected connection (TLS1) is set up between the browser of the third computer system and the second computer system, wherein the third computer system receives a first certificate (176), —the first certificate is stored by the third computer system, —the third computer system receives a signed attribute specification (182) via the first connection, —a second cryptographically protected connection (TLS2) is set up between the browser of the third computer system and the first computer system, wherein the third computer system receives a second certificate (190), —the signed attribute specification is forwarded from the third computer system to …