A computer-implemented method for controlling the access to and usage of a motor vehicle, comprising the steps of: - transmitting a user log-on signal from a log-on computer to a service computer via a network; - requesting, from an ID provider computer, data relating to a number of attributes from a user's personal ID token, via the network and using the service computer; - authenticating the user to the ID token and authenticating the ID provider computer to the ID token, via the network, as a precondition for reading of the data relating to the attributes from the ID token by the ID provider computer, via the network and with end-to-end encryption; - transmitting the data relating to the attributes, read from the ID token, from the ID provider computer to the service computer via the network; wherein the method additionally comprises steps for: - generating a soft token using the service computer by signing, with the private key of an asymmetric key pair, a data structure consisting of the data relating to the attributes transmitted from the ID provider computer and of a non-plain text depiction of an authentication code; - transmitting the generated soft token via the network to a user's personal mobile computer in order to be stored; - transmitting the stored soft token from the selected user's personal mobile computer to a control computer that is connected to the motor vehicle; - checking the validity of the signature of the soft token using the control computer, with the public key of the asymmetric key pair, as a precondition for outputting a signal for unlocking the vehicle locking system; - comparing an input of the user into an input device, associated with the control computer, with the non-plain text depiction of the authentication code contained in the soft token, as a precondition for outputting a signal for deactivating a motor vehicle immobiliser; and - detecting and storing data relating to the usage of the motor vehicle in the control computer, and using the control computer to transmit the stored data to the service computer when a network connection is available. - transmitting a user log-on signal from a log-on computer to a service computer via a network; - requesting, from an ID provider computer, data relating to a number of attributes from a user's personal ID token, via the network and using the service computer; - authenticating the user to the ID token and authenticating the ID provider computer to the ID token, via the network, as a precondition for reading of the data relating to the attributes from the ID token by the ID provider computer, via the network and with end-to-end encryption; - transmitting the data relating to the attributes, read from the ID token, from the ID provider computer to the service computer via the network; - generating a soft token using the service computer by signing, with the private key of an asymmetric key pair, a data structure consisting of the data relating to the attributes transmitted from the ID provider computer and of a non-plain text depiction of an authentication code; - transmitting the generated soft token via the network to a user's personal mobile computer in order to be stored; - transmitting the stored soft token from the selected user's personal mobile computer to a control computer that is connected to the motor vehicle; - checking the validity of the signature of the soft token using the control computer, with the public key of the asymmetric key pair, as a precondition for outputting a signal for unlocking the vehicle locking system; - comparing an input of the user into an input device, associated with the control computer, with the non-plain text depiction of the authentication code contained in the soft token, as a precondition for outputting a signal for deactivating a motor vehicle immobiliser; and - detecting and storing data relating to the usage of the motor vehicle in the control computer, and using the control computer to transmit the stored data to the service computer when a network connection is available.