A method for authenticating a user with respect to a plurality of programs (330, 332, 334, 336) of the same security domain by means of a computer and an ID token, the ID token being assigned to the user in a cryptographically protected manner, a terminal comprising a first communication interface for communicating with the ID token being coupled to the computer, the ID token comprising a second communication interface for communicating with the terminal, each of the programs (330, 332, 334, 336) being configured in such a way that the particular program (330, 332, 334, 336) requires a successful authentication of the user with respect to the corresponding program (330, 332, 334, 336), the computer and the ID token each including a common, shared secret, which is provided for carrying out end-to-end encryption, the common, shared secret being managed on the computer by a user authentication module, the user authentication module belonging to the security domain, wherein the method comprises: • selecting a first program of the plurality of programs (330, 332, 334, 336); • providing the common, shared secret for the first program by the user authentication module; • carrying out a first communication session between the first program and the ID token, the first communication session encompassing a data exchange, according to a request-response protocol, which is protected by end-to-end encryption, using the common, shared secret; • selecting a second program of the plurality of programs (330, 332, 334, 336); • providing the common, shared secret for the second program by the user authentication module; and • after the first communication session has ended, switching to a second communication session between the second program and the ID token, the second communication session encompassing a data exchange, according to a request-response protocol, which is protected by end-to-end encryption, using the common, shared secret. a terminal comprising a first communication interface for communicating with the ID token being coupled to the computer, the ID token comprising a second communication interface for communicating with the terminal, each of the programs (330, 332, 334, 336) being configured in such a way that the particular program (330, 332, 334, 336) requires a successful authentication of the user with respect to the corresponding program (330, 332, 334, 336), the computer and the ID token each including a common, shared secret, which is provided for carrying out end-to-end encryption, the common, shared secret being managed on the computer by a user authentication module, the user authentication module belonging to the security domain, wherein the method comprises: • selecting a first program of the plurality of programs (330, 332, 334, 336); • providing the common, shared secret for the first program by the user authentication module; • carrying out a first communication session between the first program and the ID token, the first communication session encompassing a data exchange, according to a request-response protocol, which is protected by end-to-end encryption, using the common, shared secret; • selecting a second program of the plurality of programs (330, 332, 334, 336); • providing the common, shared secret for the second program by the user authentication module; and • after the first communication session has ended, switching to a second communication session between the second program and the ID token, the second communication session encompassing a data exchange, according to a request-response protocol, which is protected by end-to-end encryption, using the common, shared secret. • selecting a first program of the plurality of programs (330, 332, 334, 336); • providing the common, shared secret for the first program by the user authentication module; • carrying out a first communication session between the first program and the ID token, the first communication session encompassing a data exchange, according to a request-response protocol, which is protected by end-to-end encryption, using the common, shared secret; • selecting a second program of the plurality of programs (330, 332, 334, 336); • providing the common, shared secret for the second program by the user authentication module; and • after the first communication session has ended, switching to a second communication session between the second program and the ID token, the second communication session encompassing a data exchange, according to a request-response protocol, which is protected by end-to-end encryption, using the common, shared secret.