Method of authenticating a user of a mobile user terminal that is provided with a display, wherein the method comprises, using an inspection terminal provided with a digital camera, the steps of: i) capturing, with the digital camera, information presented on the display of the user terminal, the information comprising: - a human-recognizable visual representation of biometric data of the user, - a document identifier for identifying an identity document that has been issued to the user, - a user profile specifying a subset of personalization data derived from the identity document issued to the user, to be provided to the inspection terminal, and - a one-time stamp; ii) calculating a biometric feature descriptor from the captured human-recognizable visual representation of the biometric data of the user; wherein the human-recognizable visual representation of biometric data of the user corresponds to an image of the user stored in the user's identity document, iii) transmitting the captured document identifier, biometric feature descriptor, user profile and the one-time stamp to an inspection server, wherein the inspection server comprises or is connected to an Identity Document Server which stores, for each identity document of a plurality of identity documents issued to different persons, personalization data about the person to which the identity document has been issued and an associated document identifier uniquely identifying the respective identity document, wherein the inspection server is adapted for returning a signal "authentication approved" together with a subset of the personalization data defined by the user profile, if ▪ the transmitted biometric feature descriptor corresponds to a biometric feature descriptor of biometric data stored in the IDS for an identity document for which the associated document identifier corresponds to the transmitted document identifier, and ▪ the one-time stamp has not been received earlier for the transmitted document identifier; iv) at the inspection terminal, waiting for the "authentication approved" signal, and upon receipt of said signal, generating an audible and/or visual signal indicating that authentication of the user has been approved. i) capturing, with the digital camera, information presented on the display of the user terminal, the information comprising: - a human-recognizable visual representation of biometric data of the user, - a document identifier for identifying an identity document that has been issued to the user, - a user profile specifying a subset of personalization data derived from the identity document issued to the user, to be provided to the inspection terminal, and - a one-time stamp; - a human-recognizable visual representation of biometric data of the user, - a document identifier for identifying an identity document that has been issued to the user, - a user profile specifying a subset of personalization data derived from the identity document issued to the user, to be provided to the inspection terminal, and - a one-time stamp; ii) calculating a biometric feature descriptor from the captured human-recognizable visual representation of the biometric data of the user; wherein the human-recognizable visual representation of biometric data of the user corresponds to an image of the user stored in the user's identity document, iii) transmitting the captured document identifier, biometric feature descriptor, user profile and the one-time stamp to an inspection server, wherein the inspection server comprises or is connected to an Identity Document Server which stores, for each identity document of a plurality of identity documents issued to different persons, personalization data about the person to which the identity document has been issued and an associated document identifier uniquely identifying the respective identity document, wherein the inspection server is adapted for returning a signal "authentication approved" together with a subset of the personalization data defined by the user profile, if ▪ the transmitted biometric feature descriptor corresponds to a biometric feature descriptor of biometric data stored in the IDS for an identity document for which the associated document identifier corresponds to the transmitted document identifier, and ▪ the one-time stamp has not been received earlier for the transmitted document identifier; ▪ the transmitted biometric feature descriptor corresponds to a biometric feature descriptor of biometric data stored in the IDS for an identity document for which the associated document identifier corresponds to the transmitted document identifier, and ▪ the one-time stamp has not been received earlier for the transmitted document identifier; iv) at the inspection terminal, waiting for the "authentication approved" signal, and upon receipt of said signal, generating an audible and/or visual signal indicating that authentication of the user has been approved.