Patent ID: 9047455
Filing Date: 2015-06-02
Classification: G06F,G06Q,G07F,H04L

Abstract:
1. A method for reading at least one attribute stored in an ID token and providing the at least one attribute to a second computer, wherein the ID token is associated with a user, comprising: the ID token authenticating the user, the ID token authenticating a first computer system using a certificate of the first computer system received via a protected connection with end-to-end encryption between the first computer system and the ID token over a network, wherein the certificate contains an indication of which attributes stored in the ID token the first computer system is authorized to access, the ID token checking the read authorization of the first computer system for the read access to at least one of the attributes using the certificate, and following successful authentication of the user and the first computer system by the ID token, by which the user is assured that the first computer system is the recipient of the read access and the first computer system is assured that the user authorized the read access: responsive the request from the third computer, the second computer system specifying one or more attributes, thereby creating an attribute specification, and wherein the read access by the first computer system is effected in order to read the one or more attributes specified in the attribute specification from the ID token, wherein the first computer system comprises an ID provider computer, and wherein the request contains an identifier for identification of the first computer system by the second computer system, and wherein the attribute specification is transmitted from the second computer system to the first computer system without interposition of the third computer system.