A method for loading software provided by a loading machine onto a smart card (104, 410) by means of the loading machine, wherein the smart card (104, 410) has a processor, a communications interface and a non-volatile electronic memory with, stored therein, a logical data structure as well as useful data (124, 126, 442, 450) and control data (128, 130), wherein the loading machine comprises an authentication token, wherein the authentication token contains data for an authentication of a user of the loading machine, wherein the authentication token is formed as an exchangeable physical data carrier, wherein only the user whose authentication token is currently connected to the loading machine may use the loading machine, wherein the method comprises: a) establishing a communications link between the loading machine and the smart card via the communications interface (412, 106), wherein the establishment of the communications link includes a mutual authentication of the loading machine and the smart card (104, 410), for which purpose authentication data are stored in the authentication token and are used during the course of the mutual authentication, wherein a secure communications channel is established between the loading machine and smart card by means of the authentication, b) generating a first data set by means of the processor by encrypting at least a part of the useful data (124, 126, 442, 450) stored in the non-volatile electronic memory and/or at least a part of the control data (128, 130) stored in the non-volatile electronic memory and/or the logical data structure, c) transmitting the first data set to the loading machine via the communications link, wherein the first data set is transmitted exclusively via the secure communications channel, d) storing the first data set in the loading machine, e) loading the software onto the smart card (104, 410) by transmitting the software to be loaded to the smart card (104, 410) via the communications link and storing the transmitted software in the non-volatile electronic memory, wherein the loading machine gains access to data contained in the smart card (104, 410) only following successful authentication to the smart card (104, 410), f) transmitting the first data set to the smart card (104, 410) via the communications link, and g) restoring the useful data (124, 126, 442, 450) and/or the control data (128, 130) and/or the logical data structure of the smart card (102, 410) by decrypting the first data set by means of the processor and storing the useful data (124, 126, 442, 450) and/or control data (128, 130) and/or the logical data structure contained in the first data set in the non-volatile electronic memory. a) establishing a communications link between the loading machine and the smart card via the communications interface (412, 106), wherein the establishment of the communications link includes a mutual authentication of the loading machine and the smart card (104, 410), for which purpose authentication data are stored in the authentication token and are used during the course of the mutual authentication, wherein a secure communications channel is established between the loading machine and smart card by means of the authentication, b) generating a first data set by means of the processor by encrypting at least a part of the useful data (124, 126, 442, 450) stored in the non-volatile electronic memory and/or at least a part of the control data (128, 130) stored in the non-volatile electronic memory and/or the logical data structure, c) transmitting the first data set to the loading machine via the communications link, wherein the first data set is transmitted exclusively via the secure communications channel, d) storing the first data set in the loading machine, e) loading the software onto the smart card (104, 410) by transmitting the software to be loaded to the smart card (104, 410) via the communications link and storing the transmitted software in the non-volatile electronic memory, wherein the loading machine gains access to data contained in the smart card (104, 410) only following successful authentication to the smart card (104, 410), f) transmitting the first data set to the smart card (104, 410) via the communications link, and g) restoring the useful data (124, 126, 442, 450) and/or the control data (128, 130) and/or the logical data structure of the smart card (102, 410) by decrypting the first data set by means of the processor and storing the useful data (124, 126, 442, 450) and/or control data (128, 130) and/or the logical data structure contained in the first data set in the non-volatile electronic memory.