Patent ID: 9461990
Filing Date: 2016-10-04
CPC Classification: G06F,H04L

Claim Text:
1. A computer system comprising: a receiving component capable of receiving an attribute specification generated by a service computer via a network, wherein the attribute specification specifies at least one attribute stored in a secure memory of an ID token assigned to a user and having an interface with a user computer, where the attribute specification is transmitted from the service computer to the receiving component via the user computer; an authenticating component capable of authentication of the computer system to the ID token; an attribute reading component capable of reading at least one attribute from the ID token via a secure connection in accordance with the attribute specification; a generating component capable of generating a time indication for the at least one attribute, wherein the reading of the at least one attribute presupposes that both the user to which the ID token is assigned and the computer system have authenticated themselves to the ID token; a signing component capable of signing the at least one attribute and the time indication, and a sending component capable of sending the signed at least one attribute and time indication to the user computer for relay to the service computer, without use of any direct communication link between the computer system and the service computer.