A method for acquiring user identity data for an identity account at a point of sale, wherein the method comprises the following steps: - creation of an identity account for an individual, which can be used for an online identity check, in a server set-up of an identity service provider; - provision of a code for the identity account created, wherein the code of the individual is provided to whom the identity account is assigned, and wherein the code for the identity account is provided as a code from the following group: barcode and alphanumeric code; wherein subsequent to the creation of the identity account and the provision of the code, the method comprises the following steps: - formation of a data communication link between a chip of a personal identity document , which is assigned to the individual and has personal data on the individual in a memory of the chip , and a document reader of a terminal at a point of sale ; - acquisition of an access code , which is printed on the personal identity document , in the document reader ; - execution of a password-based authentication and key agreement protocol for the personal identity document and the document reader ; - after the authentication and key agreement protocol has been run through successfully, reading-out of the personal data by means of the document reader via the data communication link ; - acquisition of the code provided for the identity account created in the terminal at the point-of-sale ; - transmitting the read-out personal data and the acquired code from the terminal at the point-of-sale to the server set-up of the identity service provider; - in the server set-up of the identity service provider, checking of the transmitted code; and - if the personal data received in the server set-up of the identity service provider can be assigned to the individual's identity account after the transmitted code has been checked, storage of an electronic assignment between the personal data and the identity account in the server set-up of the identity service provider. - creation of an identity account for an individual, which can be used for an online identity check, in a server set-up of an identity service provider; - provision of a code for the identity account created, wherein the code of the individual is provided to whom the identity account is assigned, and wherein the code for the identity account is provided as a code from the following group: barcode and alphanumeric code; - formation of a data communication link between a chip of a personal identity document , which is assigned to the individual and has personal data on the individual in a memory of the chip , and a document reader of a terminal at a point of sale ; - acquisition of an access code , which is printed on the personal identity document , in the document reader ; - execution of a password-based authentication and key agreement protocol for the personal identity document and the document reader ; - after the authentication and key agreement protocol has been run through successfully, reading-out of the personal data by means of the document reader via the data communication link ; - acquisition of the code provided for the identity account created in the terminal at the point-of-sale ; - transmitting the read-out personal data and the acquired code from the terminal at the point-of-sale to the server set-up of the identity service provider; - in the server set-up of the identity service provider, checking of the transmitted code; and - if the personal data received in the server set-up of the identity service provider can be assigned to the individual's identity account after the transmitted code has been checked, storage of an electronic assignment between the personal data and the identity account in the server set-up of the identity service provider. <EOS>