WO2007003446A1

WO2007003446A1 - Method for preparation of electronic certificates for use in electronic signatures

Info

Publication number: WO2007003446A1
Application number: PCT/EP2006/060434
Authority: WO
Inventors: Anja Rose; Elmar Waltereit
Original assignee: Deutscher Sparkassen Verlag Gmbh
Priority date: 2005-03-04
Filing date: 2006-03-03
Publication date: 2007-01-11
Also published as: EP1854241A1; DE102005009867A1

Abstract

A method for preparation of electronic certificates for use in electronic signatures of a user (16) comprises the following steps: preparation of a single-use password provided with a unique reference code on a central computer (12), transmission of the single-use password and the corresponding reference code to the user (16), establishment of a data transmission connection between a user computer (22) and a reader device (20), establishment of a data transmission connection between the user computer (22) and the central computer (12), transmission of the reference code and a public signature key to the central computer (12), allocation of the reference code and the public signature key to the single-use password stored in the central computer (12), checking the single use password by transmission of the encoded single use password or a signature for the single use password from the user computer (22) to the central computer (12), checking the single use password by the central computer, in particular, by means of the public signature key, generation of a user-specific certificate and transmission of the certificate to the user computer (22).

Description

Method for providing electronic certificates for use in electronic signatures

The invention relates to a method for providing electronic certificates for use for electronic signatures of a user.

One way to perform legally binding actions over the Internet or other data transmission system, for example, is the provision of an electronic signature. In order to avoid falsification of an electronic signature and associated misuse, it is necessary to associate the electronic signature with a certificate. To increase security, the use of a qualified certificate is required. According to the German Signature Act, a qualified certificate must fulfill the following requirements:

1. the name of the signature key holder, who is provided with an addition in the case of a possibility to

2. the assigned signature verification key,

3. the name of the algorithms that can be used to use the signature key owner of the signature key holder as well as the certification audit key of the certification service provider (ZDA),

4. the serial number of the certificate, 5. beginning and end of the validity of the certificate,

6. the name of the certification service provider and the country in which it is established,

7. Information that this is a qualified certificate.

In known methods for generating qualified certificates, private keys for the signature of the qualified certificates are managed in these validated and confirmed security modules. This procedure is difficult for the user to handle.

The object of the invention is to provide a method for providing electronic certificates for use for electronic signatures, which can be handled by a user in a simple manner.

The object is achieved according to the invention by the features of claim 1.

An essential element of the method according to the invention is that a user card, such as a credit card or a credit card of a credit institution, is provided and can be activated or activated by the user himself to then use the card for generating the electronic certificates for use for an electronic Signature to use. Of course, it can also be a separate card, which can also be used for other purposes, such as an identity card or health card. Such a card has a chip on which the required data and algorithms are stored. Such a chip or such a memory element can be provided instead of in a card in a corresponding device, such as in combination with a Mobϊltelefon. In order to enable the card to be unlocked, according to the invention, a one-time password is first provided on a central computer. The one-time password can be generated by the central computer, for example via a random number generator. Each one-time password is uniquely assigned to a reference identifier, in particular a reference number. The reference identifier may be, for example, a sequential number. The user of the card, which has the function to be unlocked as a signature card, the one-time password and the associated reference identifier is communicated. In this case, the notification of the one-time password as well as the reference identifier preferably takes place in such a way that both parties are not aware of both data. This can be done, for example, by an envelope in which the one-time password is contained and on which the reference identifier, which in a preferred embodiment of the method must also be readable by third parties, is provided on the outside of the envelope.

Such an envelope or the like may be sent to the user by mail, for example. Preferably, the delivery of such a sealed envelope by a registry, which is, for example, a financial institution, an authority or the like. The registry can verify the identity of the user. Since in a preferred embodiment by an employee of the registry, the reference identifier can be read, the reference identifier associated, for example, provided within the envelope one-time password the registrar staff is not known, the registrar staff can assign the Make reference identifier to the user data. Thus, in this preferred embodiment of the inventive method, there is already a link between the user and the reference identifier, wherein the reference identifier is also linked to the one-time password. However, this is known at this time only the central computer. In a first preferred embodiment, however, it is sufficient that the one-time password is provided on the central computer and uniquely assigned to a reference identifier and the user is notified of the one-time password and the associated reference identifier.

To unlock the card or equivalent means for generating a qualified electronic signature, the user establishes a data transfer connection between a user's computer and the central computer (SSL connection). Furthermore, it is necessary to establish a connection between the user's computer and a reading device, such as a card reader. If the required data are stored in a chip of a mobile phone, the reading device is the mobile phone itself, so that a connection between the mobile phone and the user computer has to be established.

In the next step, the reference identifier and a public signature key, i. a cryptographic key, transmitted to the central computer. In this case, the reference identifier is known to the user and can be entered by the user directly into the user computer or the reading device. The public signature key is stored on the card or in the chip and is read out with the aid of the reading device and transmitted via the user computer to the central computer.

Since the central computer knows which one-time password is assigned to the transmitted reference identifier, in the next step the central computer assigns the reference identifier and the public key to the one-time password stored in the central computer.

The user can follow the steps below to know the one-time password. This proof is given to the central computer without third parties being able to gain knowledge of it. The proof can be carried out according to a first method in that the one-time password is transmitted encrypted to the central computer. The encryption can z. B. in the context of a previously established SSL connection.

According to a second preferred method, the user signs the one-time password with the private key. From the user computer then the signature, but not the one-time password itself, not even in encrypted form, sent to the central computer. This is possible according to the invention since the central computer knows the one-time password and the central computer can thus check the validity of the signature with the aid of the previously received public key of the user. The check of the one-time password is thus implicit.

After successful verification of the one-time password or the signature by the central computer by means of the public key, the central computer generates possibly with the support of another computer, preferably several user-specific certificates.

Subsequently, the user-specific certificates are transmitted to the user computer and can then be stored on the card or in the chip.

After carrying out the method according to the invention, the user now has the option of using the card or a corresponding device in which the chip is provided to perform qualified electronic signatures using the electronic certificates.

To generate an electronic signature, different software products, such as Adobe Acrobat (version 6.0 or higher) or e-mail clients are offered. To create the signature, the user usually has to call this software e by means of a corresponding button. The software typically generates a so-called hash value, which is then signed by the user using the private key. For this purpose, the user enters his signature PIN via the keyboard or the card reader.

Preferably, in the method according to the invention, the user computer and the central computer are spatially separated from one another. Furthermore, the communication between the two computers is controlled by an additional component, such as a certificate management system. This additional component, depending on user input and information stored in a database, enables the user to access the user's signature functions. Likewise, this additional component makes it possible to introduce further usage data, such as certificates, into the card, which are required for the application of the signature as well as the encryption and decryption functions of the card.

A particular advantage of the method according to the invention is that the production process is significantly simplified. Another advantage is that the user does not yet have to decide with the output of the signature card whether or when the card is provided with a certificate. The decision may be made by the user at any time during the entire life of the card.

The invention will be explained in more detail with reference to a preferred embodiment with reference to the accompanying drawings

Show it :

Fig. 1: a schematic representation of an activation of a card, and

2: a schematic representation of a download of certificates * The individual steps of the card initialization in FIG. 1 are designated A - G.

In step A, the printed one-time password is inserted into an envelope 10 on which a reference number is printed. This takes place after the one-time password has been generated by the central computer or another computer, in particular with the aid of a random number generator, and subsequently assigned to a specific reference identifier or reference number. The assignment between the one-time password and the reference number can be requested by the central computer 12 or stored on it.

The envelope 10 is transmitted to a registration authority 14, such as a financial institution or a public agency, for example by mail. Preferably, the transfer of the envelope 10 is carried out by security mail.

To obtain a corresponding signature card or a corresponding device, a user or customer 16 in the registration office 14, for example with the aid of an identity card, identified in the illustrated preferred embodiment of the invention (step C). A registration office employee hands over the envelope 10 and a card 18 (step E) to the user 16 in step D. Preferably, the transfer of the envelope 10 and the card 18 is carried out by two different persons, so that the four-eyes principle is maintained and misuse is avoided. The registrar (s) collect the reference number printed on the envelope 10 and add it to the recorded identification data such as the name, first name, date of birth, place of birth, etc. Preferably, the identification data are recorded electronically. It is particularly preferred that the registration office employee confirms the recorded data by means of an electronic signature. The registration record (step F) thus generated, which comprises the identification data of the user 16, the reference number present on the envelope 10 and the electronic signature of the registration authority employee, is transmitted to the central computer 12. From the ZentraS computer 12 then takes place an assignment of the user or the identification data of the user by means of the reference number to the one-time password (step G). This is possible since the central computer is aware of the association between the reference number and the one-time password. Preferably, the electronic signature of the registration authority employee is checked by the central computer.

The user or customer 16 can use the card 18 given to him, for example, over a longer period of time than a conventional debit card. Only at a later time can the customer 16 decide to also use the card for the electronic signature. For this purpose, it is necessary to carry out the steps illustrated in FIG. 2, which are designated by 1.-14. First, a user computer 22 for data transmission is connected to a card reader 20.

With the help of the user computer 22, for example, via the Internet or another connection for data transmission, a page of the central computer is called or a connection is established between the user computer 22 and the central computer 12.

Subsequently, in step 2, the reference number is transmitted to the central computer. For this purpose, the reference number is preferably entered by the user in the user computer 22.

In the next step (step 3), the public key is transmitted to the central computer 12. For this purpose, the stored in the chip, public key is read out with the help of the card reader 20 and transmitted to the user computer 22 to then from this to the central computer 12th to be transferred. Possibly. Further data can be read from the chip. This is, for example, the card number or identification data of the user stored in the chip. Such additional data can be checked by the central computer 12 to increase security.

Increased security can also be achieved by having to release the card itself using a transport PI N (step 4). For this purpose, an example, five-digit number is stored as transport PI N in the chip of the card. The transport PIN is known to the user. In order to use the card 18 at a later time for an electronic signature, a signature PΪN must be entered by the user 16. For example, this is a six-digit PIN that can be dialed by the user. The signature PIN (step 5) is transmitted to the reader 20 or input directly to the reader 20 and stored in the chip of the card 18.

In a further preferred embodiment, the transport PIN is not known to the user, but is communicated to the user as part of the download from the central computer. This has the advantage that the user does not know the transport PIN until then, and therefore the private keys of the card can not be used.

The two methods described above ensure with very high certainty that the user obtains his signature PIN without third parties being able to become aware of it.

The transport PIN described above can also be calculated from customer data via a secure method. It is always ensured that the transport PIN can not be read out. After entering the six-digit signature PIIM in the exemplary embodiment, the user has the option of generating an electronic signature. At this point in time, no certificate can be generated to verify the signature.

In step 6, the central computer 12 transmits the registration data as a registration data record to the user computer 22 and displays it to the user 16. The user thus has the opportunity to check the entered data.

Subsequently, the user is prompted in step 7 by the central computer 12 to enter the one-time password. After entering the Eϊnmal password in the user computer 22 this and other data is signed using the private key of the user. The signature thus created is transmitted to the central computer 12.

The correctness of the one-time password is checked with the help of the public key of the user (step 10). This is possible because there is a unique mathematical relationship between the public key and the private key and since the one-time password has entered the signature transmitted in step 9 and since the central computer 12 already has the one-time password. In the subsequent step 11, an assignment of user, public key, one-time password and registration data can then take place. Since the central computer 12, the assignment between the reference number and the one-time password is known, thus the correctness of the one-time password can be checked.

Subsequently, in step 12, the generation of one or more certificates by means of the central computer 12 and by means of a processing center 24. From the processing center 24 technical services for generating and managing the certificates are taken. The certificate specifically includes the following information:

1. the name of the signature holder, who is provided with an addition in the case of a possibility of

2. the assigned signature verification key,

3. the name of the algorithms with which the signature check key of the signature key holder and the signature check key of the certification service scanner (ZDA) can be used,

4. the serial number of the certificate,

5. beginning and end of the validity of the certificate,

7. Information that this is a qualified certificate.

To increase security, it is customary for the certificate to be additionally electronically signed by a trust center (step 13).

Subsequently, the certificate or the certificates is transmitted in step 34 to the user computer 22 and from there to the card reader 20 and stored in the chip.

To perform an electronic signature, the user uses special software that is available as a standard product, such as Adobe Acrobat (version 6.0 or later) or e-mail clicns. To create a signature, the user calls up the corresponding software, for example by clicking a button. The software generates a so-called hash value, which is then signed by the user with the private key. For this purpose, the user must enter his signature PIN via the keyboard or the card reader.

Claims

claims

A method of providing electronic certificates for use with a user's electronic signatures (16), comprising the steps of:

Providing a one-time password uniquely associated with a scrambler identifier on a central computer (12), communicating the one-time password and the associated reference identifier to the user (16),

Establishing a data transmission connection between a user computer (22) and a reading device (20), establishing a data transmission connection between the user computer (22) and the central computer (12),

Transmitting the reference identifier and a public signature key to the central computer (12),

Assigning the reference identifier and the public signature key to the one-time password stored in the central computer (12), checking the one-time password by transmitting the encrypted one-time password or a one-time password signature from the user computer (22) to the central computer (12),

Checking the one-time password by the central computer, in particular by means of the public key, generating a user-specific certificate and transmitting the certificate to the user computer (22).

2. The method of claim 1, wherein the Einmai password is generated by the central computer (12) or a computer connected thereto with a random number generator and assigned a unique reference identifier.

A method according to claim 1 or 2, wherein communicating the one-time password and the reference identifier to the user (16) is via a registration bar (14) in which the identity of the user (16) is checked.

A method according to claim 3, wherein a registration record containing the identification data and the reference identifier and preferably an electronic signature of a registration authority employee is generated in the registration key (14).

5. The method of claim 4, wherein the registration record is transmitted to the central computer (12) and preferably the signature of the Registrarrstellenstellen- employee is checked.

6. The method according to any one of claims 1-5, wherein the public key is read by means of the reading device (20) from a user card (18).

7. The method according to any one of claims 1-6, wherein the user (16) is requested to transmit the one-time password from the central computer (22).

8. The method according to any one of claims 1-7, wherein the certificate contains at least the user name and the public key.

9. The method according to any one of claims 1-8, wherein the certificate is additionally signed by an independent body.

10. The method according to any one of claims 1-9, wherein the certificate is stored on the card (18).

11. The method according to any one of claims 1-10, wherein in the card (18) an initialization Kcnnung is stored, which is replaced for unlocking the card for the electronic signature by a signature identifier.