An ID token comprising a sensor (70, 72), a communication interface, and a first microcontroller, wherein the ID token comprises a protected second microcontroller having at least one microcontroller communication interface, which is arranged in a holder of the ID token, wherein the microcontroller communication interface provides a data input and a data output, • wherein the sensor (70, 72) is configured to sense measurement data, • wherein the first microcontroller, for data exchange with the microcontroller communication interface of the protected second microcontroller, is connected to the sensor (70, 72) and to the communication interface of the ID token, and wherein the first microcontroller is configured to exchange data with a reading device via the communication interface of the ID token, • wherein the protected second microcontroller comprises a first and a second application (56, 58), • wherein the first application is configured to compare the measurement data of the sensor (70, 72) with comparison data stored in a memory of the second microcontroller and to forward the comparison result to the second application, • wherein the second application is configured to establish a connection to the reading device and to output specified data by a read command of the reading device, • wherein the first microcontroller is configured as a proxy for switching between the sensing of the measurement data by the sensor (70, 72) and forwarding of the sensed measurement data from the sensor (70, 72) to the first application of the protected second microcontroller by means of the microcontroller communication interface thereof on the one hand and forwarding of notifications for establishing a connection between the second application and the reading device and/or forwarding of APDUs by means of the connection between the second application and the reading device on the other hand, wherein the second application is configured to establish a connection to the reading device in the form of an encrypted end-to-end connection and to output the data specified by a read command of the reading device via the encrypted end-to-end connection, wherein encrypted APDUs are transmitted via the encrypted and-to-end connection, wherein the protected second microcontroller is configured to provide a plurality of logical channels for data exchange via the microcontroller communication interface, wherein the communication via the encrypted end-to-end connection is performed over a first logical channel of the second microcontroller, and wherein the first microcontroller is configured: • to receive and temporarily store an encrypted APDU sent via the encrypted end-to-end connection from the reading device to the second application and containing unencrypted header data and encrypted user data, and to analyse the header data, • if the header data comprise a reference to measurement data sensed by the sensor (70, 72), to send a request to sense the measurement data to the sensor (70, 72), • upon receipt of the request, to receive the sensed measurement data from the sensor (70, 72) and to forward said data to the first application over a second logical channel of the second microcontroller, • to forward the temporarily stored encrypted APDU to the second application over the first logical channel. • wherein the sensor (70, 72) is configured to sense measurement data, • wherein the first microcontroller, for data exchange with the microcontroller communication interface of the protected second microcontroller, is connected to the sensor (70, 72) and to the communication interface of the ID token, and wherein the first microcontroller is configured to exchange data with a reading device via the communication interface of the ID token, • wherein the protected second microcontroller comprises a first and a second application (56, 58), • wherein the first application is configured to compare the measurement data of the sensor (70, 72) with comparison data stored in a memory of the second microcontroller and to forward the comparison result to the second application, • wherein the second application is configured to establish a connection to the reading device and to output specified data by a read command of the reading device, • wherein the first microcontroller is configured as a proxy for switching between the sensing of the measurement data by the sensor (70, 72) and forwarding of the sensed measurement data from the sensor (70, 72) to the first application of the protected second microcontroller by means of the microcontroller communication interface thereof on the one hand and forwarding of notifications for establishing a connection between the second application and the reading device and/or forwarding of APDUs by means of the connection between the second application and the reading device on the other hand, • to receive and temporarily store an encrypted APDU sent via the encrypted end-to-end connection from the reading device to the second application and containing unencrypted header data and encrypted user data, and to analyse the header data, • if the header data comprise a reference to measurement data sensed by the sensor (70, 72), to send a request to sense the measurement data to the sensor (70, 72), • upon receipt of the request, to receive the sensed measurement data from the sensor (70, 72) and to forward said data to the first application over a second logical channel of the second microcontroller, • to forward the temporarily stored encrypted APDU to the second application over the first logical channel.