Patent ID: 8806582

Claim:
A method for reading at least one attribute stored in an ID token assigned to a user, where the at least one attribute is signed by a first computer system and transmitted to a second computer system without use of any direct communication link between the first computer system and the second computer system, the method comprising: the ID token authenticating the user, wherein the ID token is an electronic identification document having an interface with a third computer system, wherein the third computer system is a user computer system; the ID token authenticating the first computer system via a public network link between the first and third computer systems; after successful authentication of the user and the first computer system by the ID token, the first computer system performs: receiving, from the second computer systems via the third computer system, a transaction identifier generated by the second computer system; a read access, via an end-to-end encrypted transmission over the public network, of at least one attribute stored in the ID token and not previously stored in the first computer system, generating a time indicator for the at least one attribute, the time indicator dependent upon a time at which the interaction between the first and third computers occurs; signing the at least one attribute and at least one of: the time indicator, and the transaction identifier generated by the second computer system, and transmitting the at least one attribute, the time indicator, and the transaction identifier to the third computer system, and transmitting the at least one attribute read by the first computer system from the third computer system to the second computer system, wherein the at least one attribute is signed by the first computer system and transmitted to the second computer system without use of any direct communication link between the first computer system and the second computer system.