Patent ID: 8966275
Filing Date: 2015-02-24
Classification: G06F,H04L

Abstract:
1. A method for authenticating a portable data carrier to a terminal device, the method comprising: deriving a public session key (PKSession) and a secret session key (SKSession) in the data carrier, the public session key (PKSession) being derived from a public key (PKi) individual to the data carrier, the public key (PKi) being derived from a public group key (PK), and the secret session key (SKSession) being derived from a secret key (SKi) individual to the data carrier, the secret key (SKi) being derived from a secret group key (SK); and anonymously authenticating the data carrier to the terminal device using the secret session key (SKSession) in the data carrier and the public session key (PKSession) in the terminal device, wherein the terminal device verifies the public session key (PKSession) by a certificate (CPK) of the public group key (PK), which certificate is stored in the data carrier, by the terminal device checking the certificate (CpK) and reconstructing the derivation of the public session key (PKSession) from the public group key (PK) via the public key (PKi) individual to the data carrier.