Method for suspending a physical protection of an object achieved by a protection device, comprising the following steps: a first data connection is established between the protection device and a dongle; a second data connection is established between a host device and the dongle; a third data connection is established between the host device and a public transaction directory; the host device receives via the second data connection at least a first public key, a second public key, a third public key and a signed combined identifier incorporating at least the first public key and the second public key, wherein the signed combined identifier is signed with a third private key, which third private key is cryptographically associated with the third public key; the host device requests via the third data connection a search of transactions associated with the signed combined identifier within the public transaction directory; the host device authenticates at least the first public key and the second public key using a signature of the signed combined identifier and using the third public key; the host device authenticates the protection device using the first public key; the host device authenticates the dongle using the second public key; if the search of the transaction directory yields at least one transaction and the first public key and second public key are authentic and the protection device is authentic and the dongle is authentic, the host device sends an unlock request to the dongle via the second data connection; the dongle receives the unlock request and in reaction sends an unlock command via the first data connection controlling an actuator of the protection device to suspend the physical protection of the protected object. a first data connection is established between the protection device and a dongle; a second data connection is established between a host device and the dongle; a third data connection is established between the host device and a public transaction directory; the host device receives via the second data connection at least a first public key, a second public key, a third public key and a signed combined identifier incorporating at least the first public key and the second public key, wherein the signed combined identifier is signed with a third private key, which third private key is cryptographically associated with the third public key; the host device requests via the third data connection a search of transactions associated with the signed combined identifier within the public transaction directory; the host device authenticates at least the first public key and the second public key using a signature of the signed combined identifier and using the third public key; the host device authenticates the protection device using the first public key; the host device authenticates the dongle using the second public key; if the search of the transaction directory yields at least one transaction and the first public key and second public key are authentic and the protection device is authentic and the dongle is authentic, the host device sends an unlock request to the dongle via the second data connection; the dongle receives the unlock request and in reaction sends an unlock command via the first data connection controlling an actuator of the protection device to suspend the physical protection of the protected object.