Patent ID: 9413753
Filing Date: 2016-08-09
CPC Classification: G06F,H04L

Claim Text:
1. A method for generating a soft token, comprising: making a secure element available, wherein a secret key of a first asymmetric cryptographic key pair is stored in a protected memory area of the secure element; establishing a first cryptographically secure connection between an electronic device and a service computer system; transmitting a request for the generation of a soft token from the electronic device to the service computer system via the first connection; generating, by the service computer system, a one-time password after having received the request; recording, by the service computer system, the one-time password as an identifier of the first connection; transmitting the one-time password from the service computer system to the electronic device via the first connection; outputting the one-time password via a user interface of the electronic device; establishing a second cryptographically secure connection between a user computer system and the service computer system; entering the one-time password into the user computer system; transmitting the entered one-time password from the user computer system to the service computer system via the second connection; and checking, by the service computer system, whether the recorded one-time password agrees with the one-time password received via the second connection, and only if this is the case reading at least one attribute stored in an ID token, generating the soft token by signing the at least one attribute and the public key of the first cryptographic key pair, transmitting the soft token to the electronic device via the first connection and/or transmitting the soft token to the user computer system via the second connection.