DE102005056862A1 - Mobile chip card device and method for authentication by means of chip card with respect to at least one device - Google Patents

Abstract

The invention relates to a mobile chip card access device (CZ), comprising a chip card coupling device (KE) for contacting a chip card (C) which can be inserted into the chip card access device (CZ), an input device (EE), a validity checking device (GP) and a transmitting device (SE, AE) , and a method for authentication by means of a chip card (C) and the mobile chip card access device (CZ). The input device (EE) has means for inputting and / or recording authentication information. The validity checking device (GP) comprises means for initiating a check of a valid authentication by the chip card access device (CZ) or by the chip card (C) by evaluating the entered authentication information with identification information stored on the chip card (C). Furthermore, the transmission device (SE, AE) has means for transmitting a proof of authorization by radio based on a valid authentication to at least one device checking the authorization proof (PDA, PC, MT, ZPE) in the range of action of the mobile chip card access device (CZ).

Description

In Companies or organizations are increasingly security-relevant Facilities over Security codes, so-called authentication tokens, digital Signatures and / or smart cards are secured. For example become buildings often secured by chip card read / write devices or magnetic code readers, only persons who encoded one for access to the building Have chip card or magnetic code card and this the respective Chip card reader / writer or magnetic code reader respectively, granted access becomes.

For one Access to a via In addition, a smart card-secured workstation usually becomes next to an introduction the smart card is still an input of identification information - usually a PIN (Personal Identification Number) - required to access on the desktop computer according to strict Security requirements.

One Company often points a plurality of facilities to be secured, depending on the facility different safety criteria can be applied. So can it be sufficient at an entrance of a location of a business a chip card by means of a reading device to check whether the chip card a chip card from a set of previously registered chip cards is. To verify the right of residence of a person on a company premises becomes even often waived controls by means of technical control devices and only the visible carrying of a badge with optical identification features demanded, so that security personnel or employees an unauthorized Person can recognize the missing ID. For an encrypted E-mail traffic in turn become common very high safety requirements, in particular the use from digital signatures to smart cards and an additional one Securing the digital signature in particular by means of PIN or password.

ever more different facilities through security measures be secured, the more advantageous is a uniform Procedure, so that a user only with preferably a single Chip card many or all different security requirements fulfill can and multiple or all facilities to be secured for their intended use can unlock. This requirement often proves to be problematic that facilities - for example, a workstation whose access is secured by chip card - partially require that the chip card in the device during the period of use in the chip card read / write device remain permanently plugged and thus another institution, the also a release or an authorization by means of Chip card required while This time can not be used.

Farther requires a permanent insertion of a smart card in a chip card read / write a Facility an elevated Alertness of a user of the smart card that he is leaving the device or when removing from the device the Chip card again removed from the chip card read / write device. Otherwise one could unauthorized person to the still released device access or it could be up authorize an unauthorized person of the chip card unauthorized.

One uniform use of a single chip card for authorization for different facilities can at usual Chip card sizes beyond especially with small devices problematic because they are not large due to their size Chip card can record.

Of Further have usual Facilities where a PIN entry by means of a keyboard for Unlocking a smart card is performed, often an unsecured transmission path between a keyboard and the smart card reader / writer or require a separate, complex backup of this transmission path.

Of the present invention is based on the object, an arrangement and a method for authentication by means of a smart card and to provide a smart card access device in or at an improved and / or more flexible use of smart cards allows becomes.

Is solved this task by a mobile chip card access device with the features of claim 1, as well as a method for authentication by chip card with the features of claim 9. Advantageous embodiments and further developments of the invention are specified in the dependent claims.

The mobile chip card access device according to the invention comprises a chip card coupling device for, in particular, galvanic, direct and / or contactless contacting of a chip card which can be plugged into the chip card access device and an input device for inputting and / or acquiring authentication information, in particular by entering a PIN or checking biometric features, after plugging in and Contact the chip card. For checking biometric features esp In particular, detection of a fingertip on a fingerprint sensor is performed. In addition, the mobile chip card access device comprises a validation device for initiating a check by the chip card access device or by the chip card checking a valid authentication by means of evaluating the entered authentication information with an identification information stored on the chip card. In addition, the mobile chip card access device comprises a transmitting device for transmitting a, in particular generated by the chip card credentials by radio due to valid authentication to at least one, the credential examining device - especially a workstation, a mobile laptop, a tablet PC, a PDA, a phone and / or a so-called smart phone that combines PDA and telephone functions - within the scope of the mobile chip card access device.

at the method according to the invention for authentication by means of chip card against at least one in the area of effect a mobile smart card device device is after Inserting the chip card into the mobile chip card access device and their contacting an over an input device of the smart card access device input Authentication information recorded. Through the mobile chip card access device or by the chip card is evaluated by means of the entered Authentication information with a stored on the smart card Identification information validates an authentication. Farther is due to a transmitting device of the mobile chip card access device due a valid Authentication a credential to the at least one, verify the credentials Device transmitted by radio.

The Chip card coupling device has in particular contact pins for a direct contact with contact elements of the chip card and / or has a so-called transponder for contactless coupling of the chip card by means of a coil or antenna. As a chip card is particular a microprocessor card or a so-called smartcard with a integrated processor to understand.

The Mobile chip card access device is in particular a wireless Chip card write / read device with a radio interface, which preferably has a transmission range up to a meter or even several meters, with it for movements within a room, a built-up contact too a device is not lost. Advantageously, the Chip card access device only slightly larger than a smart card and let yourself in a bag of a garment or hung around the Wear a user's neck. Preferably, the smart card access device in a PDA, a mobile phone or a cordless phone integrated into the DECT standard, so that a user no further Device with has to wear and already by the respective device one already existing power supply, an input unit, a control unit and / or a transmitting unit for the smart card access device can be used.

advantageously, let yourself by means of the chip card access device according to the invention a smart card for authentication to one or more devices use, wherein when entering the authentication information none or only a few of the facilities in the sphere of influence the smart card access device can be located. The sphere of influence is in particular the surrounding area of the chip card access device, in which the chip card access device to a radio link build and maintain a facility.

Especially can by the invention several devices simultaneously from a Chip card to be authenticated. An input of the authentication information and an exam of validity the authentication information can preferably only once needed , thereby authenticating multiple facilities becomes very easy. A complicated Inserting the chip card in the different facilities and repeatedly entering the authentication information omitted.

For the input of the authentication information, according to an advantageous embodiment of the mobile chip card access device, a complete, all common characters or a simplified keyboard, a fingerprint sensor and / or a touch screen can be provided. Preferably, the respective input element is integrated in the back of the smart card access device or even directly on the smart card. The integration into the chip card access device is particularly advantageous, as a result of which manipulation or intervention in the authentication process can be hindered or prevented, since the integration makes it particularly difficult or impossible to intercept a entered authentication information. Thus, the smart card access device for applications with high security requirements such as the so-called "secure digital signature" - for example, according to the German Digital Signature Act, also called signature law - and e-commerce applications for goods orders and cash transactions over the Internet use. Furthermore, the smart card access device for be certified for higher security requirements, for example, depending on the design according to the classification of the standards committee of the German banking industry as chip card read / write device class 2, 3 or 4.

to confirmation of validity an entered authentication information or for further interactions with a user, the smart card access device can continue a display, light-emitting diodes or a loudspeaker to at least valid and / or report erroneous inputs to the user or status information to spend.

Preferably can continue to provide mutual authentication between the Smart card access device and the smart card are performed. Here, the knowledge of a secret, cryptographic key in the smart card and the smart card access device are checked.

In an advantageous embodiment of the invention can by a the entity receiving the credential as a result of the transmission of the Proof of Entitlement an exam the credentials. Because of a positive test result may then issue the device until a next examination or no time limit for its intended use be released or unlocked. It can vary depending on security requirements the device is a permanent activation of the device done or only for a predetermined period of time or only until the end of a Transaction.

In a further advantageous embodiment of the mobile chip card access device The credential may be sent to multiple or all facilities transmitted in the sphere of the chip card access device be such that the smart card access device in a temporally overlapping Period may be in radio contact with several of the facilities. The facilities can one specific or one common to all institutions certain credentials received and at respective positive exam for one the following period until the next inspection.

The radio transmission from the mobile smart card access device to the respective ones Facilities may be in a further advantageous embodiment by means of a transmission performed in the radio frequency range become. Here you can so-called passive or active environmental sensors and / or transmitters be used - too Passive proximity or Called Active Proximity Device. The coding of the transmission can continue according to a Bluetooth, WLAN, WiMAX, DECT, GSM, and / or UMTS standard.

To a further advantageous embodiment of the invention can the mobile chip card access device preferably a largely transparent Chip card container for Inclusion of the chip card or only guide rails for the chip card without further coverage of the chip card surface. Thus can be ensured be that mounted, optical identification features on a surface the chip card - for example a photo of an owner of the chip card, a company logo, a hologram, a caption text and / or a signature - in the inserted Condition largely uncovered. Thus, by means of the chip card access device according to the invention the chip card as an identification card or visual identity card for a manual, used optical verification so that with a single smart card different security requirements Fulfills can be.

Farther can the chip card access device be designed in such a way that different types of known smart cards can be used - for example via a Plurality of contact devices, such as a magnetic stent reader, a Antenna, metallic contact elements - and the chip card access device thus universally applicable.

One embodiment The invention will be explained in more detail below with reference to a drawing.

there show a schematic representation of the

1 a chip card access device with its essential, externally visible components,

2 a block diagram of the smart card access device with its essential functional components, and

3 a system consisting of the smart card access device and with this in contact with other facilities.

In 1A . 1B . 1C are shown in schematic representation three different perspective views of a smart card access device CZ for a read, write and / or program execution access to a smart card. The 1A and 1B show a front-side perspective view of the smart card access device CZ, wherein the 1A a view without and the 1B a view with inserted chip card C represents. On the front of the housing there is only one viewing window SF - shown as a rectangle. The viewing window SF makes it possible to provide an insight into a plugged-in chip card C, as in 1B clarified. The inserted chip card C is inserted laterally into the chip card access device CZ via a rectangular insert E. When inserted, the viewing window SF allows various features of the smart card C to be made visible to a user. These are in particular an image CB of the chip card C, a chip card inscription CBSCHR or security features SM such as a hologram. Furthermore, the mobile chip card access device CZ comprises a rechargeable battery, not shown, which can be charged for example via a charging socket LB at the top of the smart card access device CZ and allows mobile use. Charging of the rechargeable battery can alternatively also take place via an inductive charging only by approximation of the chip card access device CZ to a charging device.

The attachment of the chip card access device CZ to a user's body or garments of the user can be done for example via a carrying strap TB or alternatively via a on the chip card access device CZ fastened th clip (not shown). Furthermore, in 1A and 1B an antenna unit AE indicated by a dashed rectangle, which is not visible from the outside and is included within the smart card access device CZ to make contact with communication devices in the environment of the user can. The antenna unit AE is advantageously integrated into the chip card access device CZ such that the chip card access device CZ is only slightly larger than the chip card C.

The 1C shows a perspective oblique view of the rear, top and side view of the smart card access device CZ, which are attached to the top of the smart card access device CZ already explained elements of the support band TB and the charging socket LB or angeordnert. On the back of the chip card access device CZ are a number field ZF with several input keys - in the present embodiment, only the number keys 1 to 9 - and a fingerprint sensor FS as input unit according to the invention. The numeric field ZF and the fingerprint sensor FS can be used individually or jointly for authentication of the user. For example, a PIN, password or code number is entered and recorded via the numeric keypad ZF. About the fingerprint FS the fingerprint of the user is read and recorded. The chip card access device CZ further preferably comprises an on / off key EAT for deactivating or activating the chip card access device CZ and / or a light-emitting diode LED for outputting status information and / or user-defined assistance by the chip card access device CZ.

In the 1 Smart card access device CZ is small, portable and mobile. By integrating a non-illustrated writing / reading device as a smart card switching device and the Eingabeeinrichtun conditions of the numeric keypad ZF and the fingerprint sensor FS in a common device of the smart card access device CZ high security requirements can be guaranteed as a transmission path between read / write device and the input devices without intervention is not accessible from the outside in the chip card access device CZ, is audible and / or manipulated.

In 2 are shown in a block diagram of the essential, illustrated as rectangles components of the smart card access device CZ. These are the input unit EE as input device according to the invention, which in 1 are represented by the number field ZF and the fingerprint sensor FS. Furthermore, this is the display unit ANZ, which in 1 represented by the LC display LCD and the light emitting diode LED. In addition, the chip card access device CZ comprises an antenna unit AE and a transmission unit SE connected to it, which together form the transmission device according to the invention. Furthermore, the chip card access device CZ comprises a coupling device KE as a chip card coupling device according to the invention for contacting an inserted chip card C and for communication therewith. Further elements of the chip card access device CZ are, in particular, a validation unit GP and a control unit STE, which in particular controls the validation unit GP, the input unit EE, the display unit ANZ and the transmission unit SE. This relationship is in 2 each illustrated by a solid line.

After inserting the chip card C into the chip card access device CZ, the coupling device KE establishes contact with the chip card C by galvanic contacting or contacting via a short-distance antenna respectively integrated in the chip card C and the chip card access device CZ. Subsequently, by means of the input unit EE, an activation or authentication of the chip card C can take place. In this case, only the user of the chip card C accessible information, for example, entered by entering a PIN through the number pad ZF or by placing a finger on the fingerprint sensor FS and recorded. For example, it covers the entry of a multi-digit PIN as authentication information, wherein the detected PIN is transmitted to the chip card C by means of the validation unit GP. The smart card C can then check by evaluating the input PIN information, whether the authentication is valid by the user. This is done in particular by comparing, processing or evaluating the detected PIN information with a stored on the smart card, secret identification information and / or by processing a secret algorithm. The evaluation for validity can be done by the smart card C or by the smart card access device CZ. A positive or negative evaluation result can then be transmitted from the chip card C to the chip card access device CZ and consequently be displayed on the LC display LCD or on the light-emitting diode LED accordingly. Furthermore, the control unit STE can then perform a state change in order to provide means in the following time in order to be able to come into contact with further devices. The transmitting unit SE and the antenna unit AE can also be activated for contact with the other devices.

In 3 is a chip card access device CZ with - preferably over a prolonged period or permanently - inserted and contacted smart card C shown in their environment or area of action - in particular determined by the radio range - are several facilities that check to perform their respective intended use each a credential , The credentials will be provided below by the smart card access device CZ.

Exemplary are in 3 a pocket computer PDA, a mobile phone MT - for example, a cordless voice terminal registered to a telephone system TK -, a workstation PC and an access control unit ZKE shown. The access control unit ZKE is, for example, a turnstile (as in FIG 3 shown) at an entrance of a company or to a - not shown - door to a building that opens only when there is authorization for a user.

Farther Assume that the smart card access device CZ means their validation unit GP already a valid one Authentication of the user against the smart card C has verified or such a review already triggered has and this review is positive has failed.

reports between the aforementioned devices PDA, MT, PC, ZKE and the smart card access device CZ are hereafter as stylized Flash of a radio wave transmitted Message traffic M is illustrated. Specific messages are additional in each case as an arrow beside the stylized lightning with arrowhead in transmission direction the respective message.

The Access control unit ZKE is equipped with a wireless module, not shown equipped and sends a query message A1 at regular intervals into their respective environment, to users entering the environment to recognize with their respective smart card access devices CZ and capture. approaches Now a user with his smart card access device CZ an access control unit ZKE, then receives the smart card access device CZ said query message A1 by means of its antenna unit AE. The message information contained in the query message A1 is extracted by the control unit STE from the interrogation message A1 and forwarded to the chip card C. The message information is For example, an identification number of the access control unit ZKE.

The Chipcard C responds with an answering information to the smart card access device CZ is returned. This answer information corresponds to a credential and is sent by the send unit SE - controlled by the control unit STE - in a confirmation message B1 packed and returned by means of the antenna unit AE back to the Access control unit ZKE transmitted by radio. The latter receives the confirmation message B1 recognizes the valid Authentication and gives the access control unit ZKE to the user free, for example by an otherwise permanently existing lock is deactivated. Thus, the user can view the building or the site, which is secured by the access control unit ZKE, enter. Said request message A1 and said confirmation message B1 are part of the radio-transmitted message traffic M, in the period during which the chip card access device CZ and the access control unit ZKE are in the mutual sphere of action takes place.

In a second scenario will now be described below how the smart card access device CZ can be used by means of the invention for logging on the workstation PC. The workstation PC having a radio module sends a search message Q to its respective operating environment before displaying an input mask for a login on its screen. This is in 3 illustrated by several arrows in different directions starting from the workstation PC.

By sending out the search message Q, the workstation PC tries all authenticated chip card access devices CZ in his Determine impact environment. The receiving chip card access devices CZ then each transmit an identification message K to the workstation PC, which in particular comprises a unique identifier for the chip card or user-specific information, for example a name or a computer login of the user. After receiving one or more identification messages K, the workstation PC displays a login window (in 3 not shown) with the determined from the received identification messages K and selectable on the screen. The login window preferably additionally comprises an input field for further authentication information, for example a PIN, so that only the respective identifier can be activated for several displayed identifiers, which is actually to be activated by the user by entering the PIN. In this way it can be prevented that a user can unauthorized the login of another user who is staying with a smart card access device CZ in the vicinity of the workstation PC use.

Choose now a user of the workstation PC one of the displayed identifiers out, gives an associated PIN and initiates the login process, then a login authentication request message A2 from the workstation PC to the selected chip card access device CZ transmitted. One determined by the login process and using the login-authenticate request message A2 transmitted Authentication information is provided by the smart card access device CZ forwarded to the chip card C, which then a test of Authorization of the respective workstation user. The Chipcard C generates over a secret algorithm using the authentication information a credential and submit this chip card access device CZ. This transmitted the generated credential by means of its transmitting unit SE via radio PC calculates the workstation by means of the authentication confirmation message B2. The workstation PC receives this authentication confirmation message B2, check that in it contained credentials and gives the workstation PC for free the user if the credential proves to be valid.

in the further course now for the intended use of the workstation PC at intervals Interrogation messages to the Chip card access device CZ are sent by means of which It can be detected whether the smart card access device CZ and their inserted chip card C continues to impact the workstation PC are located. If this is not the case, then a failure to a Reply message from the smart card access device CZ cause that the workstation PC is blocked.

While now the workstation PC can be used as intended, is by the user another device, the pocket computer PDA turned on. It is assumed that Data on the handheld PDA via authentication mechanisms are secured separately. Now trying to access this data, Thus, the PDA activates an integrated radio module, and via the Radio module a query message (not explicitly shown) with a check information transmitted to the nearby chip card access devices CZ. This check information is sent by the smart card access device CZ to the smart card C forwarded, which then a check by means of or Evaluation of stored data on the chip card C performs. On In this way, the smart card C generates response information that by means of the transmitting unit SE of the chip card access device CZ back transmitted to the pocket computer PDA is (not shown). This answer information corresponds to one Proof of Entitlement and will now be through the PDA PDA checked. Proves the credential in one through the pocket computer PDA performed Examination - for example by comparing with a reference information - as valid, so the data is released and the user on a display unit of the pocket computer PDA.

In Another scenario is the contact of a Mobile phones MT - for example a so-called smart phone - the chip card access device CZ shown. Here it is assumed that use of the mobile phone MT even without authentication by the smart card access device CZ possible is. However, due to authentication at the mobile phone MT user-specific settings can be activated.

Temporally overlapping with the activated state of the workstation PC and / or the handheld computer PDA now a user of the mobile phone MT can identify to this by means of his office number or other, unique, user-specific information. This number is now transmitted to the chip card access device CZ within a query message (not explicitly shown). The smart card C analyzes this information and responds with a confirmation information, if the smart card C, the transmitted office number or user-specific information is known. The chip card access device CZ transmits the confirmation information as a proof of authorization by means of its transmitting unit SE via radio to the mobile telephone MT. proves If the transmitted response information is valid, the mobile telephone MT can activate user-specific settings of the respective user. This is done, for example, by contacting the mobile telephone MT with a telecommunication system TK - in 3 represented as a rectangle - in which the respective user settings are stored. These activated user settings can also remain activated after the user has left the surrounding area of the mobile telephone MT together with its chip card access device CZ. Thus, this differs from the behavior of the workstation PC, in which leaving the impact environment of the workstation PC causes a deactivation or blocking of the workstation PC and thus can meet higher security requirements.

at The invention is particularly advantageous in that a plurality of devices, which require a proof of eligibility before being used as intended can be simultaneously by a single smart card access device CZ and an inserted smart card C can be authorized. This means in particular that, for example, the pocket computer PDA, the mobile phone MT and the workstation PC temporally overlapping can be used by the user. This is usual stationary Systems in which a chip card must remain plugged, with a single Chip card not possible since these can only be in one device.

Farther is advantageous that by the smart card access device CZ simultaneously different test algorithms and test methods can be used which, among other things, can fulfill different security criteria. Consequently can a chip card for different uses used become.

Farther is advantageous in that the smart card access device different Support radio standards can. For example, a mobile computer via Bluetooth and a computer network via wireless LAN be contacted. About that In addition, a direct contact via the GSM, UMTS or DECT standard possible (GSM: Global System for Mobile Communication, UMTS: Universal Mobile Telecommunications System, DECT: Digital Enhanced Cordless Telecommunications).

Furthermore is advantageous in that new applications can be introduced at which an authentication or even control only by approach a user with a smart card access device CZ done can. For example, could an automobile merely by approaching with a specific one Chip card access device CZ can be unlocked and could be customized Settings - for example the seating position - made become.

through of the invention about it for example, an Internet-enabled PC in a common room control a company so that unauthorized persons each only access to freely accessible areas of the intranet own and that users with extended rights by means of authentication by the chip card access device CZ also restrictive areas of the intranet or get access to the Internet.

Known Chip cards are common optical characteristics that are valid the chip cards indicate. These are, for example, a picture of a user on the chip card, a company logo or a hologram. At the illustrated Mobile chip card access device CZ is with respect to these optical features furthermore advantageous that they continue due to the viewing window SF can retain the function of a visual identification card. Thus are a simultaneous electronic authentication and a manual optical authentication, for example by security personnel, just possible. As an alternative to the design with a viewing window, the visibility can the optical features also ensured by guide rails on the smart card access device surface be, by means of which a chip card can be fixed, wherein no or only a small coverage of the chip card surface takes place and thus in this embodiment, optical identification features a surface the chip card in the inserted state remain largely uncovered.

Around an increased Security over Abuse or unconscious misbehavior during authentication can be obtained by means of mobile chip card access device, can the chip card access device according to the invention be extended in such a way that any contact with facilities on the display of the smart card access device or via a Tone generator is displayed and a response of the smart card access device explicitly by the user by user action on the input device must be released. Preferably indicated on the display which device requested authentication.

The messages and credentials mentioned in the description of the figures may in particular be so-called signature tokens or authentication tokens, a valid token assuring the authorization for the use of a respective device by the user. The token is preferably determined or calculated in the smart card where the result of the calculation proves a possession and / or correct use of the token. For smart cards with certificates this can be a signature or a correct decryption. Furthermore, a token can also be a one-time password.

alternative and / or additionally to those in the embodiment mentioned messages, also the smart card access device with inserted and activated chip card permanently and / or repeated inquiry messages send out to its impact environment, to one, an authentication to detect requiring device. This can be used to track down new facilities, or the presence of already authenticated facilities to confirm.

advantageously, includes the smart card or the smart card access device continues a memory for storing identification information already authenticated facilities for which a user is currently up to date has acquired a permission, so that a temporary loss of contact and / or a brief departure from the scope of the smart card access device not to restart the authentication process and contained therein, manual steps. On this way can be achieved that the user as little as possible perform manual steps needs to be authorized for to get a facility.

The said method is described by means of a chip card, however can the invention about it also for other mobile, processor-controlled small computers - for example, USB or Bluetooth dongles (USB: Universal Serial Bus) with its own processor and interface to a read / write device, be used. The chip card access device according to the invention this only has to be a suitable interface to this small computer provide.

Furthermore let yourself the chip card access device according to the invention also in a mobile device like a cordless phone or a pocket computer. This is particularly advantageous as that the user does not re-enter another device must carry with you permanently. Preferably, the chip card - in particular when integrated into a telephone or pocket computer, but also at an independent one Device - about one Slot of the chip card access device and / or without position change of moving components of the chip card access device (CZ) in or out of the smart card access device (CZ) plugged or removed. An opening a cover, such as a battery compartment or a removal a component, such as a battery, should not be necessary for this process, so that a change of the chip card completed quickly and easily can be.

This further allows the smart card is not permanently plugged, but for example, only during the stay on a company site is plugged and stuck throughout the stay on the premises, the smart card is removed when leaving the company premises again. This can be especially true for standalone smart card access device - As in the 1 and 3 shown - be advantageous because an application example can be such that the smart card access devices are stored at a janitor of a company and charged with electricity and when approaching the company premises one of the smart card access devices is presented to a user, said by means of said simple way his Chip card can quickly and easily introduce into the mobile smart card access device.

Claims (14)

Mobile chip card access device (CZ), full a. a chip card coupling device (KE) for contacting an in the chip card access device (CZ) plug-in chip card (C), b. an input device (EE) for input and / or detection of a Authentication information after plugging in and contacting the chip card (C), c. a validity checker (GP) for initiating a by the chip card access device (CZ) or by the chip card (C) ongoing review of a valid Authentication by evaluating the entered authentication information with an identification information stored on the chip card (C), and d. a transmitting device (SE, AE) for transmitting a credential by radio due to a valid Authentication to at least one, the Proof of Entitlement tested Device (PDA, PC, MT, ZPE) in the area of action of the mobile chip card access device (CZ). Mobile chip card access device (CZ) according to claim 1, characterized in that by a the credentials Receiving entity (PDA, PC, MT, ZPE) as a result of the transfer (B1, B2) of the credential a check of the credential is carried out and due to a positive test result the Device (PDA, PC, MT, ZPE) can be used as intended. Mobile chip card access device (CZ) according to one of the preceding claims, characterized in that the credentials to a plurality of devices (PDA, PC, MT, ZPE) is transmitted and / or in a temporally overlapping period, the multiple devices (PDA, PC, MT, ZPE) each receive a credential and each positive test the multiple devices (PDA, PC, MT, ZPE) are used as intended in this period can. Mobile chip card access device (CZ) after a of the preceding claims, characterized by a battery or accumulator based power supply unit. Mobile chip card access device (CZ) after a of the preceding claims, characterized in that the input means (EE) for input the authentication information is a keyboard (ZF), a fingerprint sensor (FS) and / or includes a touch screen. Mobile chip card access device (CZ) after a of the preceding claims, characterized in that by the transmitting device (SE, AE) the transmission (M, A1, B1, A2, B2, K) in the radio-frequency range and / or the transmission (M, A1, B1, A2, B2, K) according to Bluetooth, WLAN and / or WiMAX standard he follows. Mobile chip card access device (CZ) after a of the preceding claims, thereby in that the chip card access device (CZ) - one largely transparent container or - only guide rails without additional cover for receiving the inserted chip card (C) having. Mobile chip card access device (C2) after a of the preceding claims, thereby in that the chip card (C) - about one Slot (E) of the smart card access device (CZ) and / or - without situation change of moving components of the chip card access device (CZ) in or from the chip card access device (CZ) inserted or is removable. Method for authentication by means of chip card (C) opposite at least one within the scope of a mobile chip card access device (CZ) device (PDA, PC, MT, ZPE), in which - after insertion the chip card (C) in the mobile chip card access device (CZ) and their contacting an over an input device (EE) of the chip card access device (CZ) entered authentication information is detected, - by the mobile chip card access device (CZ) or by the chip card (C) by evaluating the input authentication information with an identification information stored on the chip card (C) an authentication is checked for validity, and - by a transmitting device (SE, AE) of the mobile chip card access device (CZ) due to a valid Authentication a credential to the at least one, verify the credentials Device (PDA, PC, MT, ZPE) is transmitted by radio. Method according to claim 9, characterized that is repeated by the at least one device (PDA, PC, MT, ZPE) a query message (Q) is sent out to indicate the presence of the Chip card access device (CZ) with inserted chip card (C) in the environment of the facility (PDA, PC, MT, ZPE) or leaving the chip card access device (CZ) with inserted chip card (C) from the impact environment of the facility (PDA, PC, MT, ZPE). Method according to claim 10, characterized in that that by the at least one device (PDA, PC, MT, ZPE) due one or more acknowledgments (K) to the interrogation message (Q) of smart card access devices (CZ) with inserted chip card (C) in the environment of action of the device (PDA, PC, MT, ZPE) a selection information associated with at least one the acknowledged chip card access devices (CZ) on the device (PDA, PC, MT, ZPE) is displayed for selection. Method according to one of claims 9 to 11, characterized that by the chip card access device (CZ) when removing or deactivating a plugged smart card (C) a deactivation message to one or more, through the chip card access device (CZ) authenticated facilities (PDA, PC, MT, ZPE) in the area of impact the smart card access device (CZ) is sent to the respective device (PDA, PC, MT, ZPE) the authorization for a proper use the device (PDA, PC, MT, ZPE). Method according to one of Claims 9 to 12, characterized in that the chip card access device (CZ) with inserted chip card (C) repeatedly sends a query message into the operating environment of the chip card access device (CZ) in order to obtain a device requiring authentication ( PDA, PC, MT, ZPE) and / or - after authentication at the device (PDA, PC, MT, ZPE) repeatedly a credential to the device (PDA, PC, MT, ZPE) is transmitted to the authentication for a be using the device as intended (PDA, PC, MT, ZPE). Method according to one of claims 9 to 13, characterized by one of the devices (PDA, PC, MT, ZPE) an input an additional one Identification information on the device (PDA, PC, MT, ZPE) is detected.