Patent ID: 9411981
Filing Date: 2016-08-09
CPC Classification: G06F,G06Q,G07C,G07F,H04L

Claim Text:
1. A method for activating a first portable data carrier with the aid of a second portable data carrier, the method comprising the steps: supplying the first portable data carrier to a user in an inactive state after the user has requested the first portable data carrier over a communication network from a central instance with the aid of the second portable data carrier, the inactive state being where intended use of the first portable data carrier is not possible, wherein the first portable data carrier is supplied to the user with first personalization data provided thereon, the first personalization data being data pertaining uniquely to the user, the first personalization data being provided on the first portable data carrier by the central instance; setting up a direct communication connection between the first portable data carrier and the second portable data carrier, the direct communication connection being set up between the first portable data carrier and the second portable data carrier without an interposition of any device between the first portable data carrier and the second portable data carrier, wherein the first and the second portable data carriers mutually authenticate each other via the direct communication connection on the basis of authentication data and establish a cryptographically secured end-to-end connection, the authentication data being applied to the first portable data carrier which permit a mutual authentication directly and exclusively with the second portable data carrier by the direct communication connection; and activating the first portable data carrier, wherein the second portable data carrier transmits activation data to the first portable data carrier via the cryptographically secured end-to-end connection, the activation data including second personal identification data pertaining uniquely to the user, wherein, within the framework of activating the first portable data carrier, all authorizations and functionalities present on the second portable data carrier are transferred from the second portable data carrier to the first portable data carrier through the cryptographically secured end-to-end connection and the first portable data carrier is immediately ready for use and usable with all functionalities after the conclusion of the activation, wherein the first portable data carrier and the second portable data carrier are each configured to establish a communication with a terminal and to be powered at least partially by said terminal, wherein the first portable data carrier is a first electronic identity document, and the second portable data carrier is a second electronic identity document, and wherein the first personalization data includes an optical personalization pertaining uniquely to the user and provided on the first portable data carrier by the central instance.