A method for electronically signing an electronic dataset, comprising at least the following steps: a) providing a signature generation unit having a memory that cannot be read out from outside the signature generation unit, in which memory a first key (107; 122, 123) is stored, wherein the signature generation unit is formed for bi-directional data communication with a separate data processing device, and for carrying out an encryption method by means of the first key (107; 122, 123) stored in the signature generation unit, b) providing a data processing device, which is spatially separated from the signature generation unit, and which is formed for bi-directional data communication with the signature generation unit, and for providing an electronic dataset to be signed by means of the signature generation unit, c) capturing at least one biometric feature of a natural person, which person has to electronically sign the electronic dataset, by means of the signature generation unit, d) generating an electronic biometric dataset based on the at least one captured biometric feature in the signature generation unit, e) generating a signature capture process random value in the signature generation unit, f) encrypting the generated biometric dataset in the signature generation unit by means of the generated signature capture process random value, g) transmitting the encrypted biometric data to the data processing device, forming a first checksum over the encrypted biometric data and the electronic dataset in the data processing device, and transmitting the formed first checksum from the data processing device to the signature generation unit, or transmitting the electronic dataset from the data processing device to the signature generation unit, and forming a first checksum over the encrypted biometric data and the electronic dataset in the signature generation unit, h) encrypting the generated signature capture process random value in the signature generation unit by means of the first checksum, i) encrypting the result of method step h) by means of the first key (107; 122, 123) stored in the signature generation unit, and j) transmitting the result of the encryption according to method step i) to the data processing device, and, if not already carried out in method step g), transmitting the encrypted biometric data to the data processing device. a) providing a signature generation unit having a memory that cannot be read out from outside the signature generation unit, in which memory a first key (107; 122, 123) is stored, wherein the signature generation unit is formed for bi-directional data communication with a separate data processing device, and for carrying out an encryption method by means of the first key (107; 122, 123) stored in the signature generation unit, b) providing a data processing device, which is spatially separated from the signature generation unit, and which is formed for bi-directional data communication with the signature generation unit, and for providing an electronic dataset to be signed by means of the signature generation unit, c) capturing at least one biometric feature of a natural person, which person has to electronically sign the electronic dataset, by means of the signature generation unit, d) generating an electronic biometric dataset based on the at least one captured biometric feature in the signature generation unit, e) generating a signature capture process random value in the signature generation unit, f) encrypting the generated biometric dataset in the signature generation unit by means of the generated signature capture process random value, g) transmitting the encrypted biometric data to the data processing device, forming a first checksum over the encrypted biometric data and the electronic dataset in the data processing device, and transmitting the formed first checksum from the data processing device to the signature generation unit, or transmitting the electronic dataset from the data processing device to the signature generation unit, and forming a first checksum over the encrypted biometric data and the electronic dataset in the signature generation unit, h) encrypting the generated signature capture process random value in the signature generation unit by means of the first checksum, i) encrypting the result of method step h) by means of the first key (107; 122, 123) stored in the signature generation unit, and j) transmitting the result of the encryption according to method step i) to the data processing device, and, if not already carried out in method step g), transmitting the encrypted biometric data to the data processing device.