DE102005063649B3 - Method for the purpose of synchronizing server or data processing processes - Google Patents

Abstract

A method for the purpose of synchronizing server or data processing processes that obtains data from and / or outputs to such terminals data terminals, wherein
a) these terminals are networked via message links with facilities over which the server and / or data processing processes are to expire or expire and the data sent by the terminals and / or received by the terminals via said synchronization is present in the server or data processing processes Processes are assigned automatically, with
b) the terminals each have one, the type of connection of a respective terminal corresponding message connection to one, the respective terminal respectively associated, the communication link of each terminal respectively providing device and / or can produce, each terminal with its respective associated device communicates and the, the communication link of the terminal providing facilities are networked together, wherein this networking is done via locally separate devices or within a common device, wherein
c) said networking enables the establishment of a communication link between the devices providing the communication link of the terminals, characterized in that
d) a data loop DS is formed via said network, in each case associated with the terminal equipment, by means of said networking of the devices providing the message connection of the terminals, wherein a data transfer made within the terminals is carried out within the network on the terminal side,
e) within said network a KODE is used, which is transmitted in the case of the data transmission on the terminal side under the terminals from one terminal to the other terminal via the data loop DS (Fig.1a), wherein
f) said KODE is used as a connection establishment rule to connect, at said terminal receiving the KODE from the other terminal (Fig. 1a), to a subscriber terminal designated by the KODE or a subscriber address denoted by the KODE via the to establish the messaging of the terminal providing device, wherein
g) the connection made using said KODE is used for the synchronization and / or networking of the server processes and / or data processing processes, data associated with these processes respectively
g1) are transmitted between said terminals and their equipment or facilities providing the communication of the terminals and via said networking of the equipment or facilities providing the communications of the terminals,
g2) and the data transmitted between the terminals and their device or devices providing the communications of the terminals, are assigned to the server processes and / or data processing processes connected by said networking with the terminals via the connection determined by the CODE.

Description

This patent application has the following priorities: (01) DE 10 2004 046 413.8 24/9/04 (02) DE 10 2004 059 168.7 12/8/04 (03) DE 10 2005 007 379.4 17/2/05 (04) DE 10 2005 008 086.3 22/2/05 (05) DE 10 2005 009 367.1 1:03:05 (06) DE 10 2005 010 414.2 7:03:05 (07) DE 10 2005 012 989.7 21/3/05 (08) DE 10 2005 015 619.3 5:04:05 (09) DE 10 2005 016 304.1 9:04:05 (10) DE 10 2005 029 025.6 22/6/05 and relates to a method and a circuit measure taken for carrying out the method in order to achieve the following technical task:

☞ Task:

As a superordinate technical task, the technical requirement can be considered to use the coding (addresses, telephone numbers, radio channels, etc.) of the subscriber connection points of communication links of hierarchical networks (eg telephone connections) for the secure addressing of data connections of arbitrary networks, in particular for the synchronization and networking of Server processes that run concurrently or at arbitrary time intervals. Depending on the application, this synchronization can include both hierarchical networks (telephone, mobile phone, etc.) and, in particular, non-hierarchical networks (for example the Internet), in order to make the data connections more secure in non-hierarchical networks. For example, to connect the possibly even temporarily existing addresses non-hierarchical networks (eg Internet) to the coding of hierarchical networks (such as telephone numbers in landline and mobile), etc. Where this can be done not only to check temporary addresses, but the over these uncertain Nets transmitted data in the same databases that are written or read through these networks, via the encoding of hierarchical networks (such as telephone numbers in landline and mobile) can be addressed safely. Thus, for example, even data transfers from mobile to mobile, or from mobile to landline, or landline to landline (even within conference calls) arbitrarily different or the same networks using their coding (eg telephone numbers) can be linked to each other, dito let the data, regardless of the actual port addresses of servers and terminals, or even only of terminals (eg in conference calls). Thus, it is ensured that a data connection established between respective subscribers (e.g., Internet subscribers, servers, cell phones, etc.) actually involves the correct subscribers and can not be manipulated upon dialing (e.g., by Trojan programs, etc.). In further development, this new method is used in many applications, such as cashless payment, secure server login, user authentication, and so on. Although the basic idea seems simple at first, there are many new applications that will lead to a rethinking of all electronic communication. Many of the state of the art, set only by costly programs to close vulnerabilities in operating systems, are unnecessary by the present invention, with a significant increase in security, because the proposed method is enormously transparent, simple, but more efficient than anything there are so far on this topic. For the reasons of the versatile applications of the invention, the application has become somewhat extensive.

☞ State of the art:

As the prior art is given here, once the usual method of using a name transmitter in which a device sends an address that is recognized by the other device of a two-point connection, for example, when displaying the phone number of a caller at the called party. And still the usual method of transmitting a code to a user, such as a number obtained by purchasing the charge of a mobile phone. Or, for another application: After Payment via mobile phone, sending a code number about SMS , which must be manually entered into a machine to operate the machine. In this case, the machine has stored the numbers in stock, comparable to transfer numbers of on-line accounts, which are also here to be given to the state of the art yet. Above all, these systems have the disadvantage that the security depends directly on the network operator, ditto the feasibility of complex processes depends on the network operator (eg dependence on the network operator in cashless payment, etc.).

All these methods are therefore imperfect and prone, and for the high safety requirements and the required degree of automation of the applications specified in the invention completely unsuitable, therefore hitherto, in practice, said applications were not meaningful realized. For example, the entry of a number could be passed on at any time via another data channel, and be used by a third party. So the provider of a WEB Could no longer reliably use the procedure as an access

☞ The solution is carried out according to claim 1, by (provided by the user) closing a data loop DS via the relevant networks or data connections, via which a test code corresponding to the random principle CODE for testing, or for assigning the respective subscriber connections of the networks (or data connections) is directed.

The measures specified in claim 1 for technical action, relating to a taking place on the client side (user side) by the user forming a data loop DS using two communication networks or links or channels, and transmitting a basically arbitrary (eg randomly generated) security code CODE , which is incorporated into the communication protocol of the data link, provides a remedy and allows the development of a wide field of the most versatile applications, which are specified in corresponding subclaims as preferred embodiments of the invention. In this case, provision has been made in a further development of the invention that the user can not manipulate this data link to another terminal (using a further communication link) and thus transmit the personal access to a third party.

1. a) eine Variante, die als serielle Datenschleife bezeichnet werden soll (1a), und bei welcher die Datenschleife DS über eine entsprechende Kopplung der Endgeräte (2a, 2b) der Nachrichtennetze beim Client (Benutzer) so erfolgt, daß der Server den Sicherheitskode KODE über das eine Nachrichtennetz (1) an das betreffende Endgerät des Nachrichtennetzes aussendet und über die Kopplung DS des Endgerätes zum Endgerät des anderen Nachrichtennetzes zurück erhält (2), wobei eine Prüfung des Sicherheitskodes KODE im Server erfolgt;
2. b) und eine zweite Variante, oder auch Ergänzungsvariante, die als parallele Datenschleife bezeichnet werden soll (1b), und bei welcher die Datenschleife DS über eine entsprechende Kopplung der Endgeräte der Nachrichtennetze beim Client (Benutzer) so erfolgt, daß der Server den Sicherheitskode KODE über beide Nachrichtennetze (1, 2) aussendet, wobei eine Prüfung des Sicherheitskodes KODE am Endgerät des Benutzers vorgenommen wird. Dabei kann es sich hier um ein Endgerät handeln, welches an beide Netze angeschlossen ist, oder es kann sich auch um Endgeräte handeln, die über die bevorzugte Kopplung DS miteinander kommunizieren, was hier in der Regel zutrifft. Ein Beispiel einer solchen Kopplung zeigt 2a, 2b und 4. Für besondere Anwendungen wird für die vorliegende Erfindung die parallele Datenschleife als Ergänzungsvariante zur seriellen Datenschleife benutzt, wobei über die serielle Datenschleife dann die zur seriellen Schleife genannten Vorzüge erhalten werden, und über die parallele Datenschleife die weiteren Vorzüge für die betreffende Anwendung. In 1a, 1b erhalten wir diese Variante durch bidirektionale Datenübertragung über den Datenweg 2, wobei für weitere Anforderungen auch der Datenweg 1 gegebenenfalls bidirektional ausgeführt sein kann.

There are, in adaptation to the many different applications, two basic variants for the formation of the data loop DS two communication networks or channels, provided:

1. a) a variant to be called a serial data loop ( 1a) , and in which the data loop DS via a corresponding coupling of the terminals ( 2a . 2 B) the message networks at the client (user) is done so that the server the security code CODE via the one communication network ( 1 ) to the relevant terminal of the communication network and via the coupling DS of the terminal to the terminal of the other communications network ( 2 ), taking a check of the security code CODE done in the server;
2. b) and a second variant, or supplementary variant, which should be referred to as a parallel data loop ( 1b) , and in which the data loop DS via a corresponding coupling of the terminals of the communication networks at the client (user) is done so that the server the security code CODE over both message networks ( 1 . 2 ), with a check of the security code CODE is made on the user's terminal. This may be a terminal that is connected to both networks, or it may also be terminals that have the preferred coupling DS communicate with each other, which is usually the case here. An example of such a coupling shows 2a . 2 B and 4 , For special applications, the parallel data loop is used for the present invention as a supplementary variant to the serial data loop, whereby the advantages referred to the serial loop are obtained via the serial data loop and the further advantages for the relevant application via the parallel data loop. In 1a . 1b we get this variant by bidirectional data transmission over the data path 2 , where for further requirements, the data path 1 optionally may be bidirectional.

If necessary, both variants, serial data loop and parallel data loop, can also be used in a common method, in which case an examination of the security code KODE transmitted by it takes place both in the server and in the terminals a check of the CODE's takes place, wherein a terminal to the other terminal (the relevant message networks) via the coupling DS then received from the server respectively CODE telling.

In both cases, in the serial data loop and in the parallel data loop, the check of the code ( CODE ) either by a direct (direct) comparison, or by a query as to how the KODE has changed by the transmission over the two networks according to a rule (or according to an algorithm). For example, in the even later 12c described variant, or if the sent to a cell phone code in the phone with a digital signature provided (ie encrypted), as well as additionally contains a further encrypted code portion that is further changed in the corresponding computer of the Internet access (eg the client) in recognition , where the server once decrypts the code in order to be able to check it, furthermore, the manipulation of the Internet in the corresponding computer of the Internet access CODE's checked with, for example, to be able to determine whether the data coupling is actually made directly between mobile phone and corresponding computer of Internet access, or whether another data connection (eg via the Internet, or another telephone connection, etc.) is interposed, via the a locally placed on a completely different place computer of Internet access via a coupling the security code CODE sent back to the server, eg to obfuscate an unauthorized login operation involving the data loop DS must be closed via a specific telephone connection. Embodiments and developments of the invention are described below with reference to the drawings in detail. Examples of acoustic coupling of the data loop DS show for example 2a . 2 B , which will be explained later.

Eine Weiterbildung der Erfindung betrifft die Zuordnung der für die Bildung der Datenschleife DS verwendeten Endgeräte durch Scannen der beim Server jeweils gleichzeitig aktiv vorhandenen Anschlüsse, wie sie für das Senden und das Empfangen des KODE's unter Verwendung unterschiedlicher Netze (für Senden und Empfangen) vorgesehen sind, um jeweils jene Paare von Anschlüssen zu bilden, über die in Bezug auf die Erzeugung im Server (insbesondere bei der seriellen Datenschleife), der Kode KODE auf einem Anschluß gesendet und über einen weiteren Anschluß (entsprechend einem Paar zugehöriger Anschlüsse) wieder zurückerhalten wird. Wird an der Datenschleife DS (über die Endgeräte des Benutzers) eine Veränderung (z.B. im Rahmen einer Verschlüsselungsprozedur oder einer digitalen Signatur) vorgenommen, dann ist weiterhin ein Teil des KODE's nicht verschlüsselt, oder nur für alle Teilnehmer allgemein verschlüsselt, um den KODE scannen zu können, und so die einander zugehörigen Anschlußpaare aufzufinden. Bei der Zufallserzeugung des KODE im Server, wird für jeden generierten KODE geprüft, ob ein gleicher KODE aktuell vergeben worden ist, d.h. ausgesendet, jedoch noch nicht gescannt wurde. Wäre dies zufallsbedingt (trotz der extrem geringen Wahrscheinlichkeit tatsächlich einmal) der Fall, dann wird der generierte KODE nicht ausgesendet, sondern verworfen.

A development of the invention relates to the assignment of the formation of the data loop DS used terminals by scanning the server at the same time active connections, as they are for sending and receiving the CODE's are provided using different networks (for transmission and reception) to respectively form those pairs of ports, over which, with respect to the generation in the server (in particular in the case of the serial data loop), the code CODE sent on one port and retrieved via another port (corresponding to a pair of associated ports). Is at the data loop DS (via the user's terminals) made a change (eg as part of an encryption procedure or a digital signature), then is still part of the CODE's not encrypted, or just generally encrypted for all subscribers to the CODE to be able to scan, and so find the associated connection pairs. In the random generation of CODE in the server, is generated for each CODE checked if an equal CODE currently assigned, ie sent out, but has not yet been scanned. If this happens by chance (despite the extremely low probability actually once), then the generated CODE not sent out, but rejected.

☞ Preview:

What can you do with the invention?

From the examples given in the following preview, the technical measures that are particularly relevant in the present invention can be seen.

ACCESS FUSES:

For the first time, a temporary address of an Internet subscriber assigned by the provider can be connected to a landline telephone number or to a mobile telephone number in order to protect access WEB Pages, or data, only more using a data loop DS formed via this telephone number, in addition to the relevant terminals (landline telephone or mobile phone) in connection with the principle arbitrary (eg randomly generated) security codes CODE , the security code CODE at one of the corresponding terminals (or at the coupling point to form the data loop DS ) can be provided by the user with a digital signature. In doing so, the digital signature is transferred to both via the data loop DS transmitted security codes CODE , as well as in the continue on the data loop DS transferred data with integrated. Thus, in the server clearly, for example, the phone of a specific phone number (or smart card) and the associated digital signature of the registered on this phone number (or smart card) participant can be identified.

For the first time, a secure log-on to a computer (or to a network, etc.), instead of, as it is usually done with a password, even without further input of the password, with the automated log-in derives from the password, which in repeated logging However, on the user side no longer exists (not even in stored form).

Where at the first login using the password and the preferred data loop DS (over which the test code CODE for testing, or for assigning the phone numbers of the mobile phone directed) by the server checked telephone number used for the formation of the data loop DS telephone line (landline or mobile phone) is stored in the server, and, if desired, nor the associated digital signature of the on this phone number (eg smart card) registered subscriber in the test code CODE is involved with.

Thus, the password, or one corresponding to the password CODE can be entered only once (or possibly even several times in succession) in a session, and after this recognized as the correct password input, the access in the other sessions exclusively only using the preferred data loop DS (over which the test code CODE for testing, or to assign the phone numbers of the mobile phone is passed) is possible. It is evident that several different passwords can be provided in each case, among which the telephone number under which the data loop DS each is formed, each can be changed, ditto, according to the same principle, the formation of the data loop DS (over which the test code CODE for testing, or for assigning the phone numbers of the mobile phone is passed) not via the computer, (or not over the network, etc.), but via another phone connection, the server then closes both phone lines via the serial data loop, and the user's telephone number to the new telephone number in the server upon detection of this pairing (by the same test code for both telephone connections CODE ) changes.

SERVER IDENTIFICATION:

For the first time, a WEB - Identify a provider or server also secure, or to a called on the Internet WEB Page at any time to see if the page is actually authentic. For this purpose, the user dials a telephone number that corresponds to a registered secure telephone number of the provider, for example, and receives over a corresponding extension of the telephone network, regardless of its Internet access IT , via the telephone line Tel, the data line of the server, via which the serial data loop DS, eg by acoustic coupling, or infrared coupling of his telephone / mobile phone T via the interface to the internet connection IT (eg a computer CL ) by the user ( 2a . 2 B) to form the serial data loop DS, at which the server the check code CODE testing. Because in this test the serial data loop DS via that telephone line Tel is formed, which the user via his telephone set or his mobile phone T has dialed as a secure connection of a hierarchical network, corresponds to a correct test result of the server of ensuring that the user with the right server and the right one WEB Page is connected.

The correct test result is then communicated to the user via the secure connection of the hierarchical network (here landline telephone or mobile phone). Where the user, eg by clicking a button on the WEB Page triggers the sending of the code on the server side, and at the end of the test, the button in question WEB Page changes its function and the prompt "pick up the handset" (to hear the message on the phone line displays). After clicking the button the server sends the positive acknowledgment, or a negative warning by a computer voice announcement over the telephone line, whose language, eg on the WEB Page can still be selected, etc.

ANONYMITY, NOW ALSO FOR THE SUPPLIER OF WEB SITES:

• • Dabei kann der über eine Telefonnummer erfolgte direkte Aufruf einer WEB-Seite durch direkte telefonische Anwahl des betreffenden Servers auch über Internet Telefonie unter Benutzung eines anonymen Anrufs erfolgen, wobei dann dieser telefonische Anruf wiederum durch Herstellung der bevorzugten Datenschleife DS unter Benutzung einer regulären Telefonverbindung eines hierarchischen Netzes gesichert wird. Auf diese Weise ist sichergestellt, daß die vom Benutzer (über die anonyme IT - Verbindung, voice over IP) gewählte Rufnummer nicht über das hierarchische Netz geht, sondern nur die Sicherung der für diese Wahl verwendeten Internetseite durch eine weitere allgemeinere Telefonnummer. Somit der Benutzer auch wirklich anonym unter Ausnutzung aller Möglichkeiten eine WEB-Seite eines anonymen Anbieters aufrufen kann. Die Registrierung, Darstellung und Übertragung einer WEB-Seite eines anonymen Anbieters wird nachfolgend zu den Figuren noch näher erläutert.

For the first time the WEB - Page of a provider, not just anonymous by one WEB Participants are called, but the provider himself can do his WEB - put the page anonymously on the net. A practical embodiment will be described below. It chooses the WEB - Participants for the purpose of producing the preferred data loop DS again the phone number of the provider, the data loop in this case does not have the WEB Page of the provider, but via the page of a general data service, in which any page of the network can be displayed. For example within the WEB - side of the provider. The actual of the WEB - Participant desired page is not called by the Internet, ie not by a link, but by the phone call of WEB - Subscriber, wherein the server according to the extension number obtained by the caller, corresponding to one of the extension number WEB Page and the telephone number of the caller (checked, or given with the call), an address for forwarding the WEB Page forms. What the relevant WEB - Page from an anonymous server in the WEB - side of the provider is recorded. About the through the data loop DS secured phone number has the WEB - Participants again the assurance that he is actually on his desired WEB - Page is located.

• • The direct call of a WEB Page made by direct telephone dialing of the server concerned also via Internet telephony using an anonymous call, in which case this telephone call is in turn secured by making the preferred data loop DS using a regular telephone connection of a hierarchical network. In this way it is ensured that the user (via the anonymous IT - Connection, voice over IP ) dialed number does not go through the hierarchical network, but only the backup of the Internet page used for this election by another more general telephone number. Thus, the user is really anonymous taking advantage of all the possibilities WEB Page of an anonymous provider. The registration, presentation and transmission of a WEB Page of an anonymous provider will be explained in more detail below to the figures.

CASHLESS PAYMENT AND GENERAL DATA DISTRIBUTION:

A basic idea of using the present invention for a cashless payment is that, via common in the population widely used terminals for the communication of communications, such as landline telephone, mobile phone, and various Internet terminals (notebook, PC , Terminal, etc.) by using the principle of a closed via these terminals, or their associated message links data loop DS and the security code passed over it CODE to connect two servers and the associated terminals of two communication links at the same time and from the server side an undeniable proof, which may also be provided with digital signatures (here the buyer and the seller) can be determined via this connection, in further assignment to corresponding data, which belonging to this proof of the data loop DS between the users of the terminals and their own servers, or also to each other server (in each case based on the terminals) are exchanged.

This principle is also versatile for other applications; while the data loop DS If necessary, also via only one terminal (in conference) and two or more servers are closed when a telephone set, for example, simultaneously several trunks are available, then at the same time the server of the seller and the server of the buyer (or possibly the server of the participating Banks whose accounts are to be used) via this telephone connection. In this conference call then still a cell phone, for example, the buyer be involved, so that as a star connection, the server of two banks (on the conference of the mobile phone of the seller) and the data loop DS connected with the buyer's mobile phone connected. This would be an example of the fact that the data loop DS can also be formed over more than two networks, in which case by means of appropriate control characters, time windows for the transmission of the data of different subscribers can be determined by protocol. In the later description of the figures, an example is given that the code passed over the data loop can also be generated independently by each of the participating servers, cf. later too CODE ( 1 ) and CODE ( 2 ). Or there are only two mobile phones ( 5 ), via which the data loop DS of their networks is closed, or instead of the cell phone of the seller also a IT Network terminal to be used ( 4 ), etc.

This way, the security link between the two servers through the preferred serial data loop DS and the code passed over it CODE a cashless payment transaction can be processed or similar actions can be settled. These actions are generally understood to be data backup, as evidenced by a digital signature, which may correspond to any desired application. For example, in addition to payment transactions, this data deposit can correspond to a voucher paid via the Internet, with which goods (theater tickets, etc.) can be collected at the cash desk. Or the data deposit corresponds in connection with one to this data deposit, ie to the data loop over DS transmitted code CODE and the associated data, digital signature, an e-mail, the data loop DS via the server of a notary or a certification authority. This example will be described in more detail below. In particular, using multiple networked servers.

Another application concerns the training of the mobile phone with a RFID (Radio Frequency Identifier) detector. This fulfills the purpose that the customer can already monitor and control the amount to be paid later at the checkout, while the payment is carried out via the preferred method with the mobile phone.

Charging: By linking the data access via an entered code that can be easily entered into a mobile phone as usual, or via an Internet connection (or to a telephone network connected) ATMs over which the preferred data loop DS to the phone to be charged the assignment each manufactures. In this case, in the ATM, such as a bank, paid amount, via the data loop directly to the mobile phone user, ie corresponding to the smart card inserted phone number and the owner of the digital signature of the certified via the phone code CODE , well written.

• • Um bei der Bildanalyse (z.B. Iris Analyse), oder gegebenenfalls auch bei der Sprachanalyse, eine Manipulationsmöglichkeit zu vermeiden, erfolgt durch den Server eine Ereignisvorgabe, welcher der Benutzer unmittelbar zu folgen hat, z.B. indem durch optische Anzeige SMS, oder Breitbandbildübertragung, etc., oder auch durch akustische Ansage, dem Benutzer vorgegeben wird, was er zu tun hat: Z.B. Welchen Text er sprechen soll, oder wann er mit den Augen Zwinkern soll (z.B. nach einem vorgegeben Klopf Rhythmus). Der Server wertet dann die Eingabe des Benutzers in Bezug auf die Vorgabe des Echtzeit Erreignisses aus (durch Messung der Verzögerungszeit, und/oder ob die richtige Eingabe, z.B. einer Sprachansage zu einem vorgegebenen Text, etc. erfolgt).

Certification: The identification of the person paying for the mobile phone or paying it to the server when paying as well as when charging via the mobile phone, is verified by the server via the data loop DS (from the mobile phone via another mobile phone, cf. 5 or from the mobile phone via a corresponding interface device of a cash register or an ATM, cf. 4 , etc.) to the server CODE's which can be further encoded on the user side (via the mobile phone) with a digital signature comparable to a document. Here's the document returned to the server CODE with other data, such as the amount, if applicable the purpose of payment and the identification data (identification data) of the person (s) concerning the payment. In this case, for example, in addition to the usual pin number, even a fingerprint sensor, or a 3D camera built into the cell phone, can transmit the face of the person concerned to a mobile phone image analysis (iris analysis).

• • In order to avoid a manipulation possibility in the image analysis (eg iris analysis), or possibly also in the speech analysis, the server performs an event specification which the user has to follow immediately, eg by SMS or broadband image transmission, etc. by visual display. , or by acoustic announcement, the user is given what he has to do: eg what text he should speak, or when he should wink with his eyes (eg, after a predetermined knock rhythm). The server then evaluates the input of the user in relation to the specification of the real-time event (by measuring the delay time, and / or if the correct input, eg a voice prompt for a given text, etc., takes place).

In all cases, the respective sensors (camera optics, etc.) on the phone or on the mobile phone with the preferred data loop DS further associated device ergonomically arranged so that the detected by the sensors detection data of the person using the mobile phone, simultaneously with the via the data loop DS transmitted to another device code CODE using the addition of the digital signature stored on the smart card of the mobile during the coupling (the data loop DS ) can be sampled. A positive detection by the sensor then causes the stored in the chip of the mobile add the digital signature, possibly even extended to the input of a pin number.

In a voice verification, the other device, eg a support surface for the phone after 4 , or an ATM, etc., also use an arranged on the machine, another microphone and the digitized audio signal of the microphone then in the data stream of the data loop DS to be involved with; the same applies to any existing 3D cameras to spatially record a person's face, etc.

CONNECTION OF A USUAL SIGNATURE WITH A DIGITAL SECURITY:

The method uniquely enables the combination of a digital signature with a standard hand-written signature. This is illustrated in 19b , It is state of the art to digitize a signature made on a digitizing pad in real time not only according to the coordinates x, and y as a function of time (t) but also while still maintaining the contact pressure p as a function of time (t) or of the coordinates x, y continue to digitize and assign to a person via a digital sample examination.

As has already been explained and will be explained below in a plurality of examples, the preferred test code KODE can be manipulated for the purpose of personal coding of the user by all methods known to the state of the art, and correspondingly decoded again in the server.

In the example below 19b becomes a digitizer pad for this purpose PAD used as part of one in the data loop DS inserted own device 300 , or in the cell phone used to form the data loop (T #) integrated, etc., or on the client computer CL connected. Of the SERVER receives the test code via the data loop DS CODE , which continues, or via another test code KODEn according to the data of PAD is manipulated via a secret algorithm (eg a formula into which the data of the PAD and the Kodeń be used to a new one CODE to receive) and here as linked code pad * KODEn is to be called. The algorithm for linking the current PAD Data with the random code sent by the server CODE can eg over the telephone line Tel, or also over the InterNet IT , or distributed over both networks in blocks, loaded, or retrieved, changed, etc. (see also later 29 ).

Thus, this process makes absolutely clear which signature is made here to which document, or payment transactions, etc., as a real-time event. It would not do any good to feed a digital copy into the data loop DS, no matter where, because the code modulated by the signature on the secreted algorithm Kodeń is a random code spontaneously generated by the server. The server can then recover the data by using the algorithm inversely PAD make back. These data correspond to the x, y corrigenda recorded as a function of time during the delivery of the signature and the pressure p applied to the writing instrument. This data is then used for pattern matching for the digital signature check.

Of course, the code packet can be further secured via a hash code, according to a digital signature. The digital signature is then e.g. in the smart card of the mobile phone and has its own pin number for unlocking and / or still uses a fingerprint sensor as a backup, etc.

verändert wird, ist gegebenenfalls noch ein weiterer Kode KODE_dig enthalten, der sich durch die digitale Unterschrift mit einem Dokument ergibt, somit mit der Hand Unterschrift, Dokument und vom Server gesendeter Prüfkode mit zertifiziert sind. Der Prüfkode dient dabei als Echtzeitnachweis und innerhalb welcher Datenschleife DS, die Handunterschrift geleistet wurde. Liegt dem Server (je nach Anwendung, vgl. später) gegebenenfalls das Dokument nicht vor, dann wird auch noch ein zusätzlicher weiterer neuer Kode gebildet, ohne den KODE_dig mit rein zu nehmen, damit der Server die Handunterschrift des Benutzers zurück bilden kann, und der neue Kode mit dem KODE_dig mit als Nachweis gespeichert.In particular, there are thus advantages when using a digital signature, which also has a digitized hand signature via (for enhanced security). PAD sampled) and also monitored by the random code sent over the data loop as a real-time event. This achieves the same effect, as if the user had signed under the supervision of a notary, except that the notary is realized by an electronic procedure. In the code Kodeń who has the data pad of the PAD in the code: $$\text{new}KODe=f\left(KODen*pad\right).$$

is changed, is possibly still another code KODE_dig which results from the digital signature with a document, so that by hand signature, document and test code sent by the server are certified. The test code serves as a real-time record and within which data loop DS, the hand-signature was made. If the server does not have the document (depending on the application, see later), then another additional code will be created without the KODE_dig so that the server can back up the user 's hand - signature and the new code with the KODE_dig saved with as proof.

It is evident that the method shown here is also very suitable as a supplement to a passport, etc.

THE CODE TRANSFERRED THROUGH THE DATA LOOP DS AS EVENT:

The invention corresponds to a common denominator for as many applications as possible when the code transmitted via the data loop DS CODE timed event of the data coupling made by the user (to establish the data loop DS ), with which continue via the (here serial) data loop DS associated data networks is linked; as has just been described eg for a hand signature. Not only when logging in, but during data transmission, for example, a very broadband, fast data network, the preferred serial data loop DS constantly maintained, and the ever-changing code of the security code generated during data transmission CODE the data loop DS , involved in the data. The data loop can do this DS be formed from the coupling of a telephone line low bandwidth and a high-speed Internet data line. Thus, in this method, the manipulation security of a data transmission is no longer dependent on the used protocol (eg Internet Protocol) of the data connection, but by the security code code CODE the data loop is constantly protected.

Another EVENT APPLICATION is that GPS System of a mobile phone to be used so that when forming a data loop of two mobile phones, such as a stopper and a motorist, the km state of the motor vehicle is transmitted as data to in the realization of a car sharing, the server these data in the data link, in addition to important To provide information about the data (insurance, etc.) of the rider. Where the Mitfahrwillige a text message of his destination to the headquarters (or. the corresponding server), which receives the location of the Mitfahrwilligen, so as to all motorist members who can drive the hitchhiking desired way, can communicate. Motorists can also enter their destination (option). When leaving the vehicle, the status of the identified data link again sends the km status to the servers. Both the driver and the passenger can call the same server (he also optimizes the routes desired by the passenger) under different numbers with their mobile phone. The data transmission of the km booth to the mobile phone (eg to the cell phone of the driver) is realized eg by a blue tooth interface.

ANOTHER EXAMPLE TO EXPRESS AN EVENT LINKING:

If the mobile phone is used, for example, for payment at the filling station of a filling station, then the user can not tap unless he has formed the corresponding data loop with the server for a short time (via a corresponding coupling point, eg to a loudspeaker of a IT Connection at the pump) and the server has detected the transmitted mobile number of the server. In this case, a possible callback of the server for verification of the number by a SMS which indicates to the user a number which he then has to enter via the keypad of his mobile phone during the telephone connection to the server, or if available SMS to Audio Converter, which can also be automatically returned via the mobile phone. The same of course also applies to the optional use of a conference call, if an acoustic code of the server is sent back directly via the further line to the server.

If the user has fueled, then he repeatedly forms the data loop (with the IT Connection dispenser), whereby the payment is triggered by debiting his account. In this case, via a (or the) conference call yet another bank server (such as 12c explained) in the data loop DS be included. There is the option that besides the random code ( CODE ) another code in the data loop is added by the bank server to that in the data loop DS with integrated petrol station billing server to indicate from which account the amount will be transferred. The data of the billing server are then used as the beneficiary (payee) again by the transmitted code address and by the random code ( CODE ). The user can then use the WEB Page of the gas station at home request his bill, in which also his mobile number is given as a reference.

☞ Detailed description of preferred embodiments:

1a and 1b illustrate the difference between serial ( 1a) and parallel ( 1b) data loop DS , which refers to the loop test by the security code CODE includes, including optional encryption. DS symbolizes the terminals of the otherwise independent data paths connected by coupling at the client (user) 1 and 2 , In the serial data loop DS ( 1a) will the of SERVER to the terminal (= part of DS ) of the data path 1 sent code in the respective terminal (depending on the application in the terminal of the data path 1 and / or in the terminal of the data path 2 ) Encrypted, and encrypted sent back to the server.

Depending on the application, this encryption can have different purposes: If the encryption occurs at the terminal of the incoming code signal CODE (here 1 ) and again a decryption of the outgoing code signal CODE (here 2 ), then a simple code comparison of the server's outgoing code CODE with the recovered and still a tampering is detected when the outgoing to the server CODE ( 2 ) from another terminal (eg a telephone line other than 2 ) would be sent back. This is the incoming code 1 encrypted so that it does not match any other code sent by the server, but remains identifiable to the server (using the same encryption algorithm). Thus, the server can determine exactly which subscriber is trying, for example, the security code sent by the server to the coupling of the terminals CODE to send back using a further message link via an unauthorized terminal, to bypass the direct coupling DS to establish the data loop.

The same is true if only in the outgoing code signal CODE (here 2 ) encryption would be decrypted in the server before the code is compared.

Another application is the already mentioned encryption of the security code KODE including further data and a digital signature.

An application example for a parallel data loop ( 1b) is, for example, the operation of a lock or a cabinet, or a safe to be opened, for example via a cell phone or a radiotelephone, which is located in the area of a home telephone exchange. The lock is opened by a code that is sent as an SMS from the phone or mobile phone to the server in question, which then sends an Internet connection to control the lock or cabinet. In order to prevent hackers from being able to operate the lock via the Internet, a backup according to the preferred data loop DS, designed here as a parallel data loop, is provided. In this case, the security code is additionally transmitted from the server to the mobile phone and compared at the castle on the parallel data loop. At the same time, however, a serial data loop is also formed (previously for initialization), eg according to the illustration in FIG 2 B to the transmitted from the server to the phone code signal Tel = KODE on the (here acoustically taking place) coupling DS in the microphone of the lock ( here CL ) feed. Whereby after a positive check of this serial loop (corresponding to 1a) , the server generates another random code, and as shown 1b forms a parallel loop, in reverse direction of the previously in direction 1b transmitted CODE's now the direction 1 equivalent. It is evident that by bidirectional data transmission over the data path 1 (this is the internet connection for example IT ) of the lock, the serial, as well as the parallel data loop with the appropriate checks (and in principle any repetitions, each with differently generated CODE's ) can be formed almost simultaneously. Listening to this lock, eg a garage door opener, would not be expedient because the server generates the code as an arbitrary random code.

2a and 2 B illustrate the two possibilities for the formation of the serial data loop by an acoustic coupling, wherein 2a the microphone of the phone or mobile phone T to the speaker of a notebook CL which is accessed via a browser WEB Page, where the browser generates the audible tones of the data encoding. In 2 B it is the transfer direction of the code CODE conversely, there is the phone or mobile phone T to the microphone of the notebook CL held. The name IT relates to the data path of the Internet between client and server, for example, a notebook is used as a terminal on the user side (client); The term Tel refers to a telephone connection (landline or mobile) with a corresponding telephone or mobile phone T as terminal on the user side (client). TELCOM concerns the data paths to the server, whereby in symbolic representation the left half concerns the Internet connection, and the right half concerns the telephone network. The server is connected to the telephone network for each trunk line via an audio signal card, in 2a as input, in 2 B as output, or both (bidirectional).

It can, depending on the application, via the telephone line Tel only the CODE and some important data (eg also encryption parameters, etc.) and acoustic security messages (voice message, etc.) are transmitted, or the telephone line Tel can also be used as a kind of auxiliary channel to (optionally also bidirectionally) transmit parameters which the Check / Backup / Encryption / via internet connection IT supported data.

For a bidirectional connection is held (for the direction in which the server his audio signal via the telephone line Tel to the client), the handset of the phone or phone also to the microphone of the notebook, and the volume of the speaker of the notebook just turned on so far that the micro of the phone receives a sufficient sound level, which (because the server is also connected to the phone), on the WEB side of the user can be displayed, or the server by increasing the volume (if necessary, reduce again, if CL found) can automatically find. As long as the server searches for the pairwise assignment of the connections, or scans (to determine which telephone connections Tel to which Internet access IT belong), takes place (in the acoustic coupling variant) the transmission of the code signal CODE only in one direction around an acoustic feedback (whistling) at the client CL to avoid.

In the server all currently busy lines that have not yet been assigned, scanned as follows, with each new line occupancy of a telephone connection is set in each case a corresponding flag, which is deleted after assignment of the line connection again.

In this association, two independently operating operations (WEB pages, mobile-server connections, etc.) running on the same server, for example, may be performed by the preferred method via a telephone number, e.g. more precisely via an address of a line connected through the address (= telephone number) are linked together. This process can be carried out just as well over several networked servers.

In this case, the server which transmits the code signal compares the transmitted code signals for all currently transmitted code signals (which in each case are not yet completely taken into account in this comparison). SO1 . S02 , .... s0n ) with the returned ( SI1 . SI2 , .... SIn ) in a pairwise comparison via a corresponding program loop design.

Example:

Currently transmitted code signals: SO1, SO2, SO3, Currently received code signals: SI1, SI2, SI3.

Thus, with S0 * in the outer loop (switched) and SI * paired in the inner loop (advanced): SO1 / SI1; SO1 / SI2; SO1 / SI 3 SO2 / SI1; SO2 / SI2; SO2 / S13 SO3 / SI1; SO3 / SI2; SO3 / SI3 and the pairs SO1 = SI1, SO2 = SI2, SO3 = SI3.

SOI . SO2 . SO3 ... are, for example, the phone numbers 100000, 200000, 300000 assigned (which is verified by the callback of the server, or possibly decoded via the smart card of a calling mobile phone, or is transmitted to the called server with the telephone network, etc.) ie
SO1 is sent to (or over) phone number 100000,
SO2 is sent to (or over) telephone number 200000,
and SO3 is sent to (or over) telephone number 300000.

The code signal is received back at the Internet addresses (here only symbolically) I . II , and III where, for example: at access I the code signal SI2 is found; at access II the code signal SI3 is found; to access III the code signal SI1 is found.

By substitution (via the tables created according to the program) we obtain the following assignments from access to the telephone number: Access I with all associated data information has the address, or Tel.Nr. 200000 Access II with all associated data information has the address, or Tel.Nr. 300000 Access III with all associated data information has the address, or Tel.Nr. 100,000.

As always, it is common for the entrances I . II . III Providers usually only assign temporary addresses. However, since during a session the data processing via the accesses obtains the direct assignment to the telephone numbers used as address (or key) (via which the data loop DS is respectively formed), the assignment at each session is also the case with constantly changing absolute addresses uniquely connected by the provider.

Before the loop becomes a kind FIFO Register implemented in which the newly added signals (as to be compared string vectors, or pointer to S0 * ) and if the signal received back SI * an emitted signal (to which the pointer points in each case) respectively corresponds to be deleted from this register (or be controlled by markers). The signals compared according to the order of their occurrence or their generation in this way S0 * are therefore never unnecessarily compared multiple times, whereby the comparison loop (s) construction is not unnecessarily busy. Moreover, such statistical comparisons are state of the art of programming.

As the comparison itself, in the decoding of eg encoded as a string of frequencies of an audio signal CODE's (for acoustic coupling via DS ), will be described in more detail below in an example.

Another example is that the user has a ON LINE Account paid a movie ticket, where he is in the payment with his mobile phone the data loop DS has formed, and read the phone number of the phone through the server, or over the CODE the data loop was assigned and / or checked. Thus, in the database of the server, the paid movie ticket is available under the mobile phone number.

At the box office (which can be here also a machine for the card issue on roll with printer) the user finds a bearing surface 1 ( 4 ) with a microphone ( MIC) which is networked via a client computer with the web server, wherein the mobile phone 2 with his earpiece HK hang up on this support surface is.

The user calls beforehand via his mobile phone a special number that connects to the web server or sends an SMS to the web server, which then decodes the phone number of the caller, asks the subscriber to hang up and then immediately calls the decoded phone number to over this Connection to the mobile phone to send an audible signal, which via the acoustic coupling DS via the microphone of the client computer is returned to the server. If the server is unable to recognize the telephone number of the calling mobile phone, it issues a corresponding error message, eg as voice announcement text with the request to deactivate the suppression of the telephone number. One option is in the phone one SMS To use a converter that received a SMS into an interface signal for data coupling converts (if this can save telephone charges), eg in the characters corresponding frequencies of a serial code, or in a serial infrared signal, (or blue tooth interface, etc.). This converter can also include the sending of the phone number on the acoustic coupling of the mobile phone as another option.

By recalling the server, it is ensured that the user can not manipulate the payment purpose paid by him during the subsequent process (eg receives several movie tickets, even though he only paid one, etc.). In the same way, it is also possible to proceed if the user has previously transferred the movie ticket using the data loop DS formed with the mobile phone ON Line account paid. Whereby also several mobile phones or even a landline phone can each be assigned to the same user, who then picks up the card at the cash register with one of these mobile phones. The coding of a relevant user's mobile phone or phones can basically be done so that one behind the other in the same session with the different mobile phones or phones the data loop DS is closed, their phone numbers are each assigned to that user in the database, to the already a number (a phone used in the data loops DS) is already stored.

As a variant to SMS Entering the callback number while the cell phone still be modified, so that at the touch of a button, or via the coding of an initialization codes received via the data link, first the phone number of the mobile phone via the coupling, which otherwise to form the data loop DS is used (via the microphone of the client computer) the server (via the IT Connection) is sent, which dials the mobile phone after detecting the phone number, so that the user can take the acoustically transmitted signal from the server and form the actual data loop on the coupling. Where appropriate, the process is aborted by the server after a period of time, if the server is the code CODE does not receive after a certain time. Does a cell phone contain one MP3 Player, then it can also a melody as encoding of the phone number (the server has to select subsequently) on the (eg acoustic) coupling of the data loop DS, send.

• • Wird von der Variante Gebrauch gemacht, dem Server über die IT- Verbindung die Telefonnummer des Handy's vorab zu senden, dann erübrigt sich der Scanner Vorgang, da der Server dann für die IT- Verbindung den Anschluß nicht mehr suchen muß.

About the data loop DS the server checks the signal sent back to it via the (eg acoustic) coupling of the mobile phone to the client computer, with which it was sent to the mobile phone in order to be able to determine the assignment to the mobile phone again. As always, the acoustic coupling could also be reversed, for example from an earpiece of the support surface into the microphone of the mobile phone.

• • If the variant is used, the server via the IT - Connection to send the phone number of the phone in advance, then the scanner process is unnecessary, since the server then for the IT - Connection no longer needs to search the connection.

Below is a detailed example of the coding of the data loop DS transmitted test and or detection CODES be explained for an acoustic coupling.

Example of creating and recognizing a coded signal coded as Audiosianal: In this example, the serial coding of the CODE Signal so that it as a coded signal not at all noticeable by any melody, or even a voice announcement, etc. is used as a detection signal, and it can also constantly change from use to use, so that every log-on another CODE for detecting the data loop DS, or for detecting the location affiliation of the pair of terminals identified by the formation of the data loop (eg telephone or mobile phone T to Internet client CL or mobile to mobile) can be used.

The processing of the code takes place here CODE so that a short piece of any melody, from the server with a FFT - Software (Fast Fourier Analysis) is analyzed to obtain the frequency spectrum associated with this section as a function of time as a recognition pattern. Not all frequencies have to be used for the later recognition, but only the frequencies lying within the transmission bandwidth of the telephone channel used for the data loop DS, which are used as recognition patterns of the CODE Signals are stored. Or, for example, only those frequencies are used in which a clean assignment to tones of a scale is given, ie not directly on the border to another detection sound, etc. Whereby this limit depending on the application (detection of the frequency-time pattern of a melody or a computer voice announcement) can be arbitrarily sized differently.

At each stored frequency value (as a result of the FFT ), the time value of the time duration is also stored, which elapses in each case until the next frequency value used in the recognition pattern occurs.

Conversely, when examining an incoming audio signal after the recognition pattern, the audio signal first again with a FFT In the case of the character-by-character check (see the following explanation), the time intervals between the characters are also checked and evaluated within a tolerance window.

The characters then correspond to frequencies that must correspond to a certain amplitude value (relative to the maximum value). Both the time intervals and the amplitude values are then provided with corresponding tolerance windows within which they are tested.

• a,h,a,fis; a,h,a,fis; e,e,cis,d,d,a

wobei die Zeitwerte t* zwischen den dekodierten Frequenzen (bzw. hier Tönen) dem Erkennungsmuster zugehörig mit gespeichert werden. Die über die FFT innerhalb eines bestimmten Toleranzrasters erkannten Frequenzen, ergeben dann die angegebenen Noten.
a(t₁), h(t₂), a(t₃), fis(t₄);
a(t₁), h(t₂), a(t₃), fis(t₄);
e(t₅), e(t₆), cis(t₇), d(t₅), d(t₆), a(t₇);Example: For example, the beginning of the melody played in D major Silent Night, Holy Night is issued by the server as a code and when restored by the FFT analyzed, then we get here as musical notes (of the respective octave) the following decoded frequencies:

• a, h, a, fis; a, h, a, fis; e, s, cis, d, d, a

where the time values t * between the decoded frequencies (or tones here) associated with the recognition pattern associated with. The over the FFT within a certain tolerance grid detected frequencies, then give the specified grades.
a (t ₁ ), h (t ₂ ), a (t ₃ ), fis (t ₄ );
a (t ₁ ), h (t ₂ ), a (t ₃ ), fis (t ₄ );
e (t ₅ ), e (t ₆ ), cis (t ₇ ), d (t ₅ ), d (t ₆ ), a (t ₇ );

Thus, once the portion of the music playback for the output by the server is stored and, moreover, the associated recognition file, for example, in the example above is stored (to the over the data loop DS received back CODE to compare).

When closing the data loop DS on the client side by the user (by holding the telephone / mobile phone to the speaker or the microphone of the computer), the server receives the output audio signal via the connection made at the interface computer / telephone back again. Should he CODE This can be done by transposing individual tones or the entire piece of music, for example, via the terminals of the client side before returning them to the server.

In this case, the music reproduction optionally contains a plurality of further sounds, or frequencies that are not included in the recognition pattern: z. Intermediate tones (with a violin, etc.) or above all also additional noises, which are taken over the open acoustic coupling at the interface computer (client) / telephone, and in quiet places or in pauses stand out particularly.

This fact is particularly taken into account in the particularly preferred embodiment of the recognition method, the method thus differing from conventional character recognition, eg the recognition of a $ string, as follows:

If, for example, the string is to be recognized from an arbitrary input string (eg $ string = "g, a, h, a, g, a, h, a, f") according to the predetermined pattern "a, h, a, f", then becomes any incoming character according to the usual procedure ZE of the input string the given pattern ZM Character by character as comparison result VGL compared as follows: 1) ZE = "g" ≠ "a" = ZM returns VGL = no, ie reset the pattern string ZM to the first character "a" for the next comparison, 2) ZE = "a" = "a" = ZM returns VGL = yes, ie switching from ZM to the next character; 3) ZE = "h" = "h" = ZM gives VGL = yes, ie switching from ZM to the next character; 4) ZE = "a" = "a" = ZM returns VGL = yes, ie switching from ZM to the next character; 5) ZE = "g" ≠ "f" = ZM gives VGL = no, ie reset the pattern string ZM to the first character "a" for the next comparison, 6) ZE = "a" = "a" = ZM returns VGL = yes, ie switching from ZM to the next character; 7) ZE = "h" = "h" = ZM gives VGL = yes, ie switching from ZM to the next character; 8th) ZE = "a" = "a" = ZM returns VGL = yes, ie switching from ZM to the next character; 9) ZE = "f" = "f" = ZM gives VGL = yes, where ZM is recognized as the last character of the pattern string, ie the string has been successfully recognized.

Thus with the steps 6 ) ..... 9 ) the character string a, h, a, f contained in the input string is recognized.

In the conventional methods, therefore, for each incoming character of the input string, the pattern string is checked character-wise in the manner shown, i. Advancing the pattern string if the character was recognized or returning to the first character of the pattern string if the character was not recognized to restart the test. Likewise, if the pattern string has been incremented / checked to the last character, the output will be the recognition of the string to be examined, which may occur within any portion of the input string.

One would call this procedure on the test of (in the server), with a FFT Apply (or by filtering) analyzed audio signal, then there would be the problem that despite proper sequence of tones corresponding to the recognition pattern, the pattern string would not be continued to the last comparison character, but would be reset in advance, because between the correct sequence of Sound the FFT other frequencies, or tones (as in the transition of the notes played with a violin, or a vocal, or by ambient noise at Pianissimostellen or pauses, etc.) supplies, which are included in the input string S tring, but even in the pattern string not occur. To avoid this, takes place before each implementation of the above comparison method, here in each case by the comparison steps 1 .... 9 in which, according to the usual procedure, the character-by-character comparison of the currently arriving character ZE (of the input string S $ tring) with the character string currently updated (incremented) or reset to the first character depending on the previous comparison result ZM is made, the previous check, whether the currently current incoming character ZE of the input string $ String is a valid character at all. This is the case when it is in the set of characters of the pattern string as a single character ZM is included.

In the program, this is realized by adding to each new incoming character ZE of the input string ($ String), within a loop, all characters contained in the pattern string are checked, whether one of these characters is the new incoming character ZE of the input string ($ String). If this is not the case, then the procedure is as if there were no new sign at all ZE of the input string $ String. On the other hand, if a character is recognized as being in stock in the pattern string, then the test method is performed according to the comparison steps given above.

In this way, the server can detect whether the recovered audio signal corresponds to the transmitted, whereby the location affiliation of the formation of the coupling, or data loop DS used terminal pair (eg coupling between IT - Calculator and telephone connection, or from mobile to mobile) is displayed on the server.

Checking the incoming characters recognized as valid ZE of the input string ($ string) periods coincide with the check as to whether ZE = ZM corresponds to where ZM each time value (to the previous character of the pattern string) is checked with. It will therefore ZE (t *) = ZM (t *) checked.

t * ... is evaluated in a corresponding tolerance grid in order to get reliable results (ie, whether t * between tmin and tmax).

Returns the test according to the measured time value t * a wrong result, then even if ZE = ZM matches, this result is evaluated as false, ie as ZE ≠ ZM.

It is evident that instead of a melody, the frequency spectrum of any voice announcement for the coding / decoding of the test code ( CODE ) can be used, or any audio signal can be used. In this case, it is advantageous for the generation of the code signal if an audio signal source which can be controlled by its control signal in its playback speed (FIG. MP3 ), etc., which can change the playback speed at a constant pitch (frequency position). The coding takes place at frequencies selected from the spectrum of the audio signal with the time duration t * after which the next selected frequency ZM ( t * ), or switch algebraic combinations (eg, or function) of several frequencies of a spectrum (as frequency patterns) can be defined, in each case the value ZM to form (t *). The control signal of the audio signal source ( MP3 ), the tempo then varies so that, for example, over the speaking time of vowels, those between a pair of values ZM with following ZM respective period of time t * is set in its target duration, which then with the value ZM (a frequency or a frequency pattern) in coincidence one serial element of the serially encoded test code CODE forms.

In addition to the following 6a and 6b explained timing to determine a bypass attempt of a local terminal in the formation of the data loop DS , This can also be done via an on the terminals continued encryption of the over the data loop DS conducted codes CODE avoided, where appropriate, the illegal interposition of a data in the coupling DS recognize the inserted link. Another alternative is to detect such a case by bandwidth measurement. This option is based on the further inventive basic idea, the frequency spectrum of the coding of the code signal CODE used to continuously vary according to a time function, and to evaluate the recovered spectrum accordingly. Since the usual automatic level correction (gain control) in telephone networks, or data networks, over the average level of the signal is controlled, so the frequency-dependent attenuation of the transmission line can be measured. In particular also by a between the for the coupling of the data loop DS used bandwidth measuring devices that can be made in addition to, or in addition to an encryption made between the terminals.

Option: In order to determine in the server, for example, whether only approved terminals are used for the formation of the data loop DS, it is provided in this case that the server adds a harmonic component transmitted via the network to the audio signal (see signal via telephone line and mobile phone network Tel in 10 ), where the authorized terminal (here the phone) then the harmonic content from a certain frequency (via a low-pass function TP ) filters, with the low pass TP not constantly, but according to a serial data signal (encoded) keyed (via mod, 10 ) is switched here, by selectively switching the output of the low-pass filter or the direct (not filtered) line accordingly, to the audio signal via the telephone or mobile phone handset (from TL ) and to the microphone of the client CL (from A to B ) via the acoustic coupling. In this case, in addition to a start stop method, for example, a modulo 2 Methods are used to modulate the data about the harmonic content in the signal. The client CL sends over the internet IT or when using another mobile phone as a client, via the further mobile phone connection, etc., the signal modulated in the harmonic content ( IT ), whereupon the server demodulates the serial signal by decoding the missing harmonic components (in comparison to the originally transmitted signal Tel), and from this the authenticity of the device used in the data loop (here A ) recognizes. Furthermore, the server can also determine whether between the phone or mobile phone ( A ) and the client's microphone CL (here B ) a data line is switched in between by measuring the attenuation.

This measurement is most easily made for the given example of Freufquenzkodierung so that the server also makes when transmitting a further manipulation of the harmonics; at relevant points, which do not affect the previously explained data signal, or during decoding the data signal then these places are not rated. This manipulation of the harmonics takes place in the server also by a controlled according to a time function in the limiting frequency low-pass filter.

When the audio signal used for bandwidth measurement is restored, the audio signal in the server is transmitted via a FFT analyzed by filtering. Thus, different harmonic components are obtained over the time course of the signal. In the audio signal received back, an evaluation is made as to how the broadband part is attenuated over the line in relation to the less wideband part of the audio signal in order to obtain a statement about the bandwidth of the line.

The described decoding of a recognition pattern within an arbitrary audio signal section can continue to be made so that for each currently received characters ZE (as about the FFT detected frequency) of the input string sequentially alternately switched several different pattern strings (with respective switching of ZM1 . ZM2 ... ZMn ) can be tested. Wherein some pattern strings encode the section (beginning / end) as a control character, in which the part of the audio signal for the bandwidth test is, or dito in which is the part of the audio signal corresponding to the code to be recognized.

The method described is suitable for any type of analog interface, in addition to an acoustic coupling for an infrared coupling, etc.

For an exclusively digital evaluation of the signal transmitted over the data loop, for a preferred variant during the transmission of the code ( CODE ) over the data loop DS from a terminal ( A ) to the other terminal ( B ), immediate ( 2a . 2 B . 5 ) or via a third party device (see 300 in 3 ), in a terminal approved for transmission ( A ) and in the further terminal ( B ) is further encrypted, such that the server further decrypted when receiving the code ( CODE ). The server uses the encryption parameters in both directions (according to a parallel loop 1 b) , the terminals can pass each. In this variant, however, the statement is whether the data loop DS is manipulated to which the code ( CODE ) Returned terminal bound.

3 will be explained in more detail later and shows the basic possibility of networking multiple servers (here Server I and Server II, in prinizip, however, in any number), over which the preferred data loop DS can be closed. Each server can have its own code CODE ( 1 ) CODE ( 2 ) over the loop DS which can be manipulated with different priorities in the server, as well as at the coupling point DS by encryption / decryption as needed. For example, as will be explained in more detail below, certified applications, such as notarial filing as evidence of sent emails, or any other transmitted and provided with a digital signature digital contracts, etc. to deposit. And above all, as evidence of the time, sender and recipient, since this data in addition to the content, which can be properly assigned to the signed by the digital signature, this data, if necessary notarized by electronic means to deposit.

In 3 is still the option shown, the coupling loop DS , here between mobile phone and client CL (eg a standard Internet connection) via a blue tooth interface ( HF ), whereby a clock ( 300 ) with corresponding blue tooth ( HF ) Interface is switched in order to loop through the data if necessary also in bidirectional data direction. The looped data is then further encrypted or decrypted in the clock as needed.

4 concerns one to an Internet connection, or to a IT - Calculator, attached extension panel, with microphone MIC , optionally with an infrared interface IF to a cellphone 2 with the earpiece HK against the microphone MIC , or if appropriate, to match the infrared interface b of the mobile phone hang. The component MONO relates to a possibility for automatic switching from acoustic coupling to infrared, as will be explained later (see 12a) ,

In 5 the data loop DS is via 2 cell phones (each micro MIC directed against earpiece HK) closed via an acoustic coupling. The additional option is provided, a third-party device ( MIC ext., LS ) in the acoustic coupling, wherein the third device in addition to a notebook can also be a very small self-sufficient device, and has a fingerprint sensor to a digital signature in the transmitted code CODE integrate. It is evident that even a fourth external attachment could be used, one for each cell phone (held right and left). The individual links at those at the coupling point DS involved multiple devices or device pairs are then separated by time division / half duplex (even after a forced sequence in which the order of blocks sent by different devices is fixed or previously agreed by protocol), or by filtering means (if full duplex) with respect to their message contents separated.

The following example concerns the use of several servers: cf. to 3 . 13a . 13b , also 33 and will be discussed in detail in the later part of the description. In addition to the certification applications already mentioned, this also applies to the possibility of initializing a server by telephone call that, if necessary, it also registered via a further auxiliary server WEB Pages under the telephone number and copied into a carrier web page, which is not assigned a specific content, but which is only used as a general data channel (eg a provider) copied. Although the authorized user can determine the authenticity of the page via the preferred data loop DS, the provider can remain anonymous. This authenticity check can also be done by retrieving further information from other anonymous users WEB Pages using the preferred data loop DS continue to be tested.

Another example, which will be explained in detail below concerns a notary seal with a chip, which von Rolle ( 15 . 16 . 17 . 18 ), and continues to be involved in the process of using a preferred application of data loop DS. For this purpose, a suitable interface device is still provided (see also later 17 ), which is designed as a stamp and can be placed on the chip seal to make the digital signature of a document, which is also available as a document (eg in a notary) for a layman verifiable, ie for the first time there is a permanent connection between a document signed with a digital signature and a hard copy document corresponding to the digital document, said indelible connection being determined by a stamp movement (of the device according to US Pat 17 ) is verifiable.

The following example relates to a variant in which a conference circuit is used to form the data loop DS and will also be discussed in detail in the later part of the description in detail. In this case, this application relates to the possibility with the same phone or phone the data loop DS at the same time using other connections, for example by a telephone call made for a specific area code, not via the subscriber's party to the contract ( TELECOM , etc.) but to settle directly with the subscriber, wherein instead of the otherwise used code number input (to prove payment) the data loop is closed via the server of the respective telephone company to close by closing another data loop (via the conference call) from a credit that before with further use of the data loop DS or a cell phone of one ON LINE Bank account payment was made. That is, all processes are here by the mobile phone number, or optionally by another digital signature that can be made with an additional device marked and can be assigned in different databases (via different server processes).

Another example shows 12b : Using a mobile phone that has a conference call feature that has 2 connections ( Tel1 . tel2 ) can be dialed at the same time (the selection of which may optionally be triggered at the same time on the telephone directory at the touch of a button), the user sends via a standard mobile phone connection SMS , or dials by direct dialing ( Tel1 ) the server of the bank, over the SIM Card in the phone decodes the phone number of the phone, and opens a connection that, if the procedure does not continue, is terminated after a measured timeout with an abort by the server. This timeout is a retriggerable function that is always extended (re-triggered) as the procedure goes one step further. The second connection of the conference call concerns the connection between the mobile phone and the client computer (client computer). IT ), which is for example at home or in the office of the user, and is constantly accessible via the mobile phone connection by the user (via a suitable interface). The interface of the client computer (client IT Also realizes the timeout monitoring for this connection and is designed so that it has a phone number decoding to recognize the call of the user's mobile phone and to decode. It is evident that the client interface of the client computer (client IT ) with its minimal functions can be installed in a landline telephone and a corresponding cable connection or blue tooth connection to the client computer (client IT ) having.

Is a call ( ARU ) detected by the user's mobile phone from the interface, then there is an initialization signal to the switched-on computer (client IT ), or if the computer should not be turned on, then a wake-up signal from standby in the operation, or a power-on signal to boot the computer and then call a relevant software. When calling this software takes the calculator an internet connection IT to the server of the bank, which decodes the given user identification (user identification) and then the randomly generated check code ( CODE ) to the client computer (client IT ), which in turn sends him over the telephone connection to the mobile phone to the mobile phone A sends, and the phone A via the conference call the test code ( CODE ) sends to the bank server, which thus has the possibility, independently of the user ID of the client computer (client IT ) to verify the authenticity of client computers and mobile users. The manipulations of the test code proposed in the present invention ( CODE ) optionally be made by the devices located in the serial data loop DS (Client Calculate, mobile phone). In particular, the server initialized CODE also run several times through the data loop, and be manipulated in each pass accordingly, for example by the mobile phone, a digital signature is added, with which the initialized by the server KODE is marked. The variant described could also be carried out in the prinizip without a conference call by the individual telephone connections Tel1 and tel2 from the mobile phone at the same time, but sequentially selected, with respective caching of the code, but then can not direct security dependency of a remote control function by the mobile phone started client computer server connection to the server of the bank (via IT ), as in direct conferencing with the many possibilities. Does the server have the authenticity of the mobile phone user, phone number of the mobile phone, and client computer client IT recognized, then the client calculator, the amount of money from this one specified by the mobile phone (as a sign or also sent SMS, etc.) begins ON LINE Transfer the account to another account from which eg a service is being paid. Whereby, by the fact that here the mobile user also has a direct connection to his computer, he eg the amount of money, or any other data (bank account, beneficiary, purpose of payment, etc.) first via SMS (during initialization ARU . 12b) the client computer (client IT ), so that he can then use his software the corresponding data in the standard form of the bank.

Whereby the circulating code loop DS authenticity is verifiable for each device in the loop by the device changing the code and verifying the change after recovery. It is evident that a landline telephone can also be used instead of the mobile phone, with the user then inputting, for example, a long pinkode and a previously defined transfer code via the keyboard in order to access his home network. PC a ON Line transfer. Thus over the data loop DS the home PC comparable to a remote control (= telephone) controlled PC works.

• Schritt 1: Der vom SERVER BANK (Schnittstelle B) über C und A ausgesendete und von A nach B zurückerhaltene Kode (KODE) wird im SERVER BANK (Schnittstelle B) verglichen, um die Authentizität von B und C zu prüfen;
• Schritt 2: Der in der seriellen Datenschleife DS zirkulierende Kode (KODE) wird im Client C manipuliert und bei Rückerhalt die zuvor vorgenommene Manipulation im Client C geprüft, um die Authentizität von A und B zu prüfen;
• Schritt 3: Der in der seriellen Datenschleife DS zirkulierende Kode (KODE) wird im Handy A manipuliert und bei Rückerhalt die zuvor vorgenommene Manipulation im Handy A geprüft, um die Authentizität von C und B zu prüfen.

Example: In 12b are the device interfaces of the devices mobile phone in the serial data loop DS, SERVER BANK , Client IT , With A . B , and C designated:

• step 1 : The from the SERVER BANK (Interface B ) above C and A emitted and returned from A to B ( CODE ) is in SERVER BANK (Interface B ) compared to the authenticity of B and C to consider;
• step 2 : The one in the serial data loop DS circulating code ( CODE ) is in the client C manipulated and on receipt the previously made manipulation in the client C checked for the authenticity of A and B to consider;
• step 3 : The one in the serial data loop DS circulating code ( CODE ) is in the mobile phone A manipulated and with the receipt of the previously made manipulation in the mobile phone A checked for the authenticity of C and B to consider.

Thus, all subscribers within the serial data loop DS can check the other subscribers for authenticity. It is also possible, of course, the steps 1 ... 3 perform simultaneously, according to a controlled protocol, each of the 3 devices A . B , and C its own self-sufficient code KODE_A . KODE_B . KODE_C generated, which can be optionally manipulated by the other devices (option) by an agreement, whereby by an appropriate protocol these code elements KODE_A . KODE_B . KODE_C be set in appropriate time window, or block positions.

In 12b is at the server interface B still drawn the line option to symbolically indicate that the generation, verification and assignment of the codes sent by the server and received CODE via additional hardware and software without changing the previous server software. The actual software for one ON Line Account will then only be extended with queries provided by the add-on package (to stop the transaction in case of fraud attempt, etc.).

12c relates to the implementation of a telephone exchange, in which a connection server can be called by a mobile phone to a direct dialing connection, which also the forwarding to another trunk ( Tel1 . tel2 ). It is indicated by dashed lines, that also for a such compound is a use of 12b conferred advantages, once to charge the account for the payment of such a service, and further, to the connection data, immediately via IT the domestic one IT - Calculator (Client - IT ) from the linked server, etc.

Another example 12c (Option bank server): Used in the conference call for the mobile phone connection tel2 instead of the client computer (the user) a bank server (parallel to the connection Tel1 of the connection server), then the procedure is that the bank server on the basis of the selected connection number (also dial) an Internet connection IT to the connection number (or extension) appropriate connection server builds, if one should not exist.

The case continues to be generated by the bank server and via the data loop DS (Linked server / client IT / Mobile) led code ( CODE ) is first manipulated in the linked server according to a certain algorithm, whereby this manipulation is checked in the bank server (according to a protocol agreement that is made via the internet connection IT can be made). Only if this check is positive, the code is further manipulated in the bank server, which is detected in the next pass of the loop DS in the linked server to the via a direct dial number of the phone (via the network connection Tel1 ) selected connection ( Tel1 ... stuffs ) actually dial. What is missing if the check of the code (KODE) in the bank server (in the previous first step) or in the linked server (in the current second step) negative.

According to the charge clock received for this connection, this information is included in the further code sent from the linked server to the bank server (via IT ), whereby the bank server immediately deducts the currently incurred fees from the account of the user, or checks for cover. In doing so, the bank server can use the internet connection IT , the connection switched by the connection server ( Tel1 ... stuffs ) stop immediately if the conversation is no longer covered. Similarly, the user may consider a telephone billing account as the second account to limit the charges incurred. Over his ON-LINE Connection to the bank server or via SMS, the user can then query the cost of each call. After connecting ( Tel1 ) between the mobile phone and the connection server no control data must be transmitted via the line during the call. Thus, this method of real-time charging of call charges from any on-line account (server), controlled by an independent connection server, into any mobile connection as a third party for connection establishment ( Tel1 via linked server) and as a fourth party for debt collection (bank server). Via the telephone call ( Tel1 . tel2 ) by the user's mobile phone is determined by a corresponding protocol between linked server ( SERVER ) and bank server recording the Internet connection IT initialized between the two servers, this connection all the necessary protocol and security check data, such as for the manipulation of the circulating over the data loop test codes CODE be transferred to agree between the bank server and linked server matching manipulation and validation rules. Dito will also transfer the fee. The assignment of the data can then independent fixed addresses exclusively under the over the data loop DS and the test code KODE assigned, and on the call of the cellphone given, or possibly still checked by calling back to the phone still checked phone number.

After this brief preview, on the following pages of the description the examples mentioned under the further designation example 1.0 to example 10 under further use of the 11 to 38 be described in more detail.

In the further appendix at the end of the description of the other examples, then a feature list is also given, which the invention in 251 features (feature 1 to feature 251 ) in order to further emphasize the particular performance of the invention.

Further detailed examples: (partly also summarized from previous explanation):

Example 1.0:

11a and 11b illustrate the preamble to making the acoustic coupling loop between IT networked computer (client CL ) and telephone T , In this case, the arrows of the transmission paths illustrate the transmission direction of the audio signal. In both variants, the server selects on request (pressing a button) a relevant WEB -Page the phone number of the client (phone or mobile T ). However, this can also be done with a password entry or the entry of a session be connected to session changing transfer number. Only after successful entry the server selects the telephone number of the user.

In 11a becomes the microphone of the telephone T to the speaker of the IT network computer CL held in 1b the receiver of a telephone set to the microphone of the computer CL held.

TELCOM is the telecom network complex over which the computer CL his internet connection IT refers to the server of a provider, ditto the associated telephone connection of the user is selected by the server.

In some of the previously discussed examples, it is important, in addition to other security applications, a connected to the Internet via a provider IT - Calculator (or client computer, etc.), which usually gets assigned only a temporary address, by a server, such as a WEB Page on this computer through the browser represents, as belonging to a terminal of another network (eg, a phone, mobile phones, etc.) to recognize. For this purpose, the terminal of the other network, such as the phone of a telephone connection, called by the server in question, the server, for example, via the speaker output of the device used to display the website (client computer) sends an acoustic code signal (melody, etc.), that he receives back over the called telephone connection (acoustically coupled) and checks whether it is actually that of him to the concerned WEB Page sent code signal acts and only with a positive result, the assignment of the relevant WEB Page evaluates the phone number used for the call as a passed security check. In this case, the method can also be applied vice versa by the server sends the acoustic code signal to the earpiece of the mobile phone via a telephone connection, wherein the code signal is acoustically coupled via microphone of the client computer and sent back to the server. Furthermore, the phone can also independently enter the phone number into the microphone of the client computer acoustically coupled with.

Example (s) 2.0:

In this example, without technical ancillary equipment, i. without a special service using these ancillary facilities, a mobile phone capable of being charged in advance or immediately before payment can be used to make the deposit into an account via an on-line account at any place of residence (including on-the-spot if necessary) the payee) and at the place of the payee directly by the phone over the telephone line, or phone number, this payment can be detected.

By using a server, or with this server networked terminal, the preferred data loop is formed via the phone as a temporary coupling and by a guided over the data loop code signal the previous transfer (payment) is detected or upon receipt of the purpose of payment (goods, service ) is booked (via the networked cash register or a vending machine, etc.). Of course, it does not matter whether using the preferred data loop to identify the phone number of the mobile phone, the previous payment was made via an on-line transfer or through a cash deposit (e.g., at a bank counter, cash register, etc.).

This technical problem with the associated solution can be applied to several variants, some of which are referred to below under the name A . B and C are described.

Application A:

In this application we have a station for charging a sum of money, e.g. on the access of an on-line account of a bank (or also a cash deposit), whereby this recharge can be assigned to a single, directly payable invoice of the beneficiary or also to any desired number of future services of different account holders. And we have a station to pay, where the phone serves as a bearer of the security code, which is defined when charging and assigned to the relevant phone number of the mobile phone and is delivered by the user of the mobile phone as a means of payment via the further networked terminal of the payee. Likewise, this method is with a in the payment using the WEB page, which relates to the payment, created code, which is to be delivered by the user to the payee, so that he can allocate the amount already paid during the deposit him to the depositor.

For this application A, therefore, the membership recognized by the method is invoked by a user WEB Page and the phone number of a mobile phone so that the user can identify himself as a payer with the payee. Or technically expressed, the smart card of the mobile phone with the associated phone number is used as an address to allocate paid to a specific account of the payee amount to the payee.

The advantage of the system is that no service, in which a deposit account of the mobile operator must be present, is required and that the server, which handles the payment made by the mobile phone through its software, completely independent of the operator (or the provider communication) of the mobile phone network used for payment.

The independent server controlling the processing of the payment transaction is assigned to the web page concerned with the payment and is therefore also referred to below as the web server. In this case, this web server can directly be the server on which the relevant web page is running, or else concern its own service, which offers this service for a large number of different providers, etc., e.g. as server of a provider, etc.

Example: On the web page of the web server, e.g. Cinema tickets are offered, which the user not only wants to order, but also wants to pay immediately, so that he can pick them up immediately before the performance (or shortly after the start) at the cashier.

For this purpose, the user proceeds in the following order: For the called WEB Page is made an assignment to the phone number of a mobile phone, this being in the two variants, user calls the server or server calls the user, can be done. In the first variant, the user enters his telephone number into the web page (eg via the copy of the clipboard), whereupon the web server calls the user, so that this over the WEB Page and the speaker output output acoustic signal via the microphone of the mobile phone's send back to the server, whereupon the server assigns to this access the website the relevant telephone number to an expected receipt of payment. However, if the WEB page is left again without the expected receipt of payment being determined, then the assignment of this telephone number is deleted again.

In order to make the receipt of payment for a variable selected by the user on the website (for example, a particular movie ticket, etc.), the user calls in addition to the WEB Site with the offer of movie tickets to be on line account through the server of his bank, copied the bank account of the beneficiary with the on the WEB Page continues to specify the purpose of payment (which in this example denotes the relevant movie ticket for the performance in question) and further the amount with Drag & .Drop (via the copy of the clipboard), or if necessary, this copy (the insertion of the data in the form for bank transfer ) also via a standardized format of an additional software supplied by the bank to the user or via a service produced by the server of the bank, etc., which can also be done only by a single click on a corresponding button of the relevant WEB page. The user then sends the online transfer form to the bank's server. The server of the bank recognizes at the beneficiary (payee) the associated web server (directly or via a database, etc.) and reports directly to the web server the receipt of payment, mentioning the beneficiary, the purpose of payment and the amount.

This incoming message sent from the bank's server to the web server is assigned by the web server to the website via the specified beneficiary and the payment purpose of the previously checked telephone number. As a result, the phone has been charged for this process. It is evident that the user can do this for many arbitrary operations with the indication of the purpose of payment. For example, Did he order a pizza, or does he intend to go to the dry cleaner, or to go to various shops, etc.

In one variant, the special case (as an option) is provided that the software of the bank, or the server in question, via which the customer makes the transfer of his on-line account, also linking the phone number with the preferred method a mobile phone worth charging up and this phone number is included as a purpose of payment in the database. If the web server asks the bank server regarding the payment, then he can allocate the deposit to the account assigned to the web server without explicitly stating the purpose of the user.

D.h. durch die bevorzugte Benutzung der Datenschleife unter Verwendung eines Kodesignals werden zwei auf dem Client Rechner des Benutzers durch völlig unabhängig voneinander operierende Server dargestellte WEB-Seiten über die beim Aufbau der Datenschleife zu den betreffenden WEB-Seiten verwendete Telefonverbindung bzw. Telefonnummer miteinander verknüpft, so daß von einem Formular einer WEB-Seite auf das Formular und dessen Dateninhalt der anderen WEB-Seite durch die betreffenden Server jeweils wechselseitig zugegriffen werden kann.

That is, by the preferred use of the data loop using a code signal, two on the client computer of the user represented by completely independently operating server WEB -Shops about when building the data loop to the respective ones WEB Pages used telephone connection or telephone number, so that a form of a WEB Page on the form and its data content of the other WEB Page can be mutually accessed by the respective server.

It does not matter whether the telephone connection used in carrying out the method by the telephone number used in the assignment (or formation of the data loop) WEB Pages are simultaneously displayed on a respective client computer, or at any time independently of each other individually over any Internet access, or computers are displayed. It does not matter which devices or networks or formats, etc. are involved. Ie instead of WEB Pages can also be any other formats of mobile phones, etc., linked together by the phone number of a terminal used for general purposes. Also, instead of a telephone connection, another radio network with corresponding addressing device can be used for establishing a subscriber connection for networking, etc.

It is evident that instead of two independently operating servers, two independently operating processes ( WEB Pages, etc.) running on the same server by the preferred method over a telephone number, ie, more specifically, can be linked together via an address of a line connected by the address.

In this case, the server which transmits the code signal compares the transmitted code signals for all currently transmitted code signals (which in each case are not yet completely taken into account in this comparison). SO1 . S02 , .... s0n ) with the returned ( SI1 . SI2 , .... SIn ) in a pairwise comparison using a corresponding program design.

Example:

Currently transmitted code signals: SO1, SO2, SO3, Currently received code signals: SI1, SI2, SI3.

Thus, with S0 * in the outer loop (switched) and SI * paired in the inner loop (advanced): SO1 / SI1; SO1 / SI2; SO1 / SI 3 SO2 / SI1; SO2 / SI2; SO2 / SI3 SO3 / SI1; SO3 / SI2; SO3 / SI3
and the pairs SO1 = SI1, SO2 = SI2, SO3 = SI3.

SO1 . SO2 . SO3 For example, the telephone numbers 100000, 200000, 300000 are assigned (which is confirmed by the callback of the server to which the code signal is checked), ie
SO1 is sent to 100000,
SO2 is sent to 200000,
and SO3 is sent to 300000.
the code signal is received back at the internet addresses (here only symbolically) I . II , and III where, for example: at access I the code signal SI2 is found; at access II the code signal SI3 is found; to access III the code signal SI1 is found.

This substitution (via the tables created according to the program) gives us the following assignments of access / telephone number: Access I with all associated data information, the address has 200000 Access II with all associated data information, the address has 300000 Access III with all associated data information, the address has 100000.

As always, it is common for the entrances I . II . III Providers usually only assign temporary addresses. However, since during a session the data processing via the accesses receive the immediate assignment to the respective telephone numbers used as the address (or key), the assignment is unique at each session even with constantly changing absolute addresses of the subscribers connected by the provider.

Before the loop becomes a kind FIFO Register implemented in which the newly added signals (as to be compared string vectors, or pointer to SO* ) and if the signal received back SI * an emitted signal (to which the pointer points in each case) respectively corresponds to be deleted from this register (or be controlled by markers). The signals compared according to the order of their occurrence or their generation in this way S0 * are therefore never unnecessarily compared multiple times, whereby the comparison loop (s) construction is not unnecessarily busy. Moreover, such statistical comparisons are state of the art of programming.

Like the comparison itself, e.g. has been described in detail as a string of frequencies of an audio signal used for acoustic coupling code signal.

At the box office, the user finds a support surface ( 12a) with a microphone, which is networked via a client computer with the web server, the mobile phone with his earpiece is to hang on this support surface.

The user calls beforehand via his mobile phone to a special number, which connects to the web server, which then decodes the phone number of the caller, asks the subscriber to hang up and then immediately calls the decoded phone number to this connection to the mobile phone beep to send, which is returned via the acoustic coupling via the microphone of the client computer to the server. If the server can not recognize the phone number of the calling cell phone, it issues a corresponding error message, e.g. as Sprachansagetext with the request to turn off the suppression of the phone number.

By recalling the server, it is ensured that the user can not manipulate the payment purpose paid by him for the subsequent transaction (e.g., receiving multiple movie tickets even though he has paid only one, etc.).

As a variant, it can also be reversed way, in which the cell phone at the touch of a button sends its own number as an acoustically encoded signal, which receives the server via the client computer's microphone and dials the mobile phone after recognizing the phone number, so the user acoustically transmitted signal of the server can receive.

In both cases, the server checks the signal sent back via the acoustic coupling of the mobile phone to the client computer with the signal sent to the mobile phone in order to be able to determine the assignment to the mobile phone again. As always, the acoustic coupling could also be reversed, e.g. from an earpiece of the support surface into the microphone of the mobile phone.

The acoustic coupling of the mobile phone to the client computer, for example, by the bearing surface after 12a performed.

If the phone number already decoded by the web server when the user calls is confirmed when the server is called back via the check by the transmitted code signal, the client computer is sent the code signal to the server WEB Page, an associated acknowledgment signal is output. For example, on the screen at a checkout the staff displayed, or possibly issued to a machine as a command to print a ticket issued via a tear strip (for example, on the principle of a receipt printer) or directly right to open a turnstile, etc. Or a locker to open the removal of a DVD of an automated video store, etc.

The assignment to the purpose of payment is thus made here via the phone number of the mobile phone. The method is used twice, once for the assignment of the phone number of the mobile phone when transferring the amount of money to the beneficiary (web server) with the assigned depositor and the purpose of payment, and a second time vice versa on the phone number of the phone again the depositor with the Find payment purpose.

It is evident that using a common service server, which is networked with a plurality of web servers of different funds or even different providers, the phone can be loaded with a variety of payment orders. Or it can be specified at the box office, for example, a phone number, which is to be selected by the user each to a payment process and which directly affects the special web server of the beneficiary, whereby a common service server is no longer necessary. In this case, after establishing the connection nor the input of a password will be required (option), which the user when charging the mobile phone with the amount of money (transfer) on the WEB Page could still set.

A common service server is also useful, for example, if a complex additional service is to be offered as additional security, eg a voice recognition of the user, who in this case also has a via SMS transmitted random test can repeat. It then takes a combined evaluation of the acoustic signal Textes, once on a text recognition, whether it is the SMS Text acts, and once around FFT Analysis to recognize the voice.

Or by querying special data known only to the person concerned, via SMS, or by image analysis of the iris on the built-in camera (possibly with an extension provided by extending it lens, etc.).

Options for the Code Transmission for Generating the Activation Signal When Redeeming the Paid Purpose: If e.g. a turnstile is to be controlled for access protection, e.g. in a ski lift or at a football stadium, etc., it may also make sense to combine the preferred method with the known method in which a clock is held by a sensor via which the opening function (generation of the actuating signal) takes place. The watch knows, for example, in microphone or an earpiece or an infrared interface to allow between clock and mobile phone data transmission. Respectively. If necessary, the clock can also communicate directly with a PC via a data connection, so that the latter can write the digital receipt received as a data code when depositing directly into a memory of the clock, which in turn can be used against a respective interface Interface when redeeming the paid purpose with a computer and thus temporarily networked with a server generates the relevant actuation signal. The encrypted data will then contain the code issued by the WEB site when depositing on the online account.

Internal bank transfer for an instant transfer:

In the application C described later, the mobile is not charged, but it is immediately booked through the bank with each payment.

In this case, there is usually the problem when depositing on the account by the user that a payment can not be immediately determined because the bank in question, who receives the money this does not immediately good, or the bank server, who receives the order online Do not execute this order immediately. However, it is desirable that when charging the mobile phone with a certain monetary value, this process immediately, practically in real time to the transmission process, e.g. while in addition to the web page of the bank, the respective customer side of the web server is called in the user's browser, the web server is "informed" of the initialization of this transfer process by the user, or receives a corresponding message signal to the activation for payment of the process to be able to make direct reference to the identification of a telephone number later, even if the amount of money actually transferred does not arrive in the relevant account until two or three days later.

This is done so that the bank at which the user maintains an account for a payment order by the software checks whether the transfer is directed to an account associated with a respective (registered for that purpose) web server. Both the user account and the account corresponding to the web server thereby belong to a type (coded by a number range) which is recognized directly by the account number in order to accelerate this check. If this is the case, then the bank server first checks on receipt of the transfer order whether the amount is covered, if so then becomes one Chargeback of this amount blocked (until it is actually booked) and the web server receives a message immediately that an amount of the relevant amount was irrevocably transferred with the respective purpose of payment and the client concerned (as the bank is a possibility of redemption of the amount is blocked). With this message, the web server can then generate to the relevant record, which also includes the assigned mobile number, the subsequent redemption (against the paid item, or against the paid service) the release signal via the web server (to it at the cashier on the client Display computer, or even to generate the output signal for a networked via the Internet machine, etc.).

Application B:

Will when depositing the possibility of linking two WEB -Pages via a telephone number (which can also affect a landline in addition to a mobile phone), this has the decisive advantage for on-line banking, that without an immediate connection of the on-line banking concerned WEB Page is required for further software, which is also called later in the payment, the data supplied by this additional software can be linked to the data required for online banking.

This will be shown in the example described below in which the mobile is charged with a certain amount of money.

Example of a charging variant:

• Cash Server: Dieser Server hat Zugriff zum Überweisen auf ein Ladekonto, welches dem aktuellen Geldwert entspricht, der mit dem Handy als Barwert bezahlt werden kann. Der Cash Server verwaltet für jeden Benutzer ein Ladekonto, das in der Praxis jedoch auch ein für alle verwalteten Benutzer gemeinsames Konto sein kann, welches von einer Datenbank verwaltet wird, die dieses Konto so verwaltet, als wäre für jeden Benutzer ein unter der Adresse der Handy Telefonnummer aufrufbares Konto vorhanden.
• Bankserver: Entspricht dem Server der Bank, über welchen durch Online Banking der Benutzer von seinem regulären Konto ein Betrag auf das Ladekonto überwiesen werden kann. Zweckmäßigerweise sind beide Konten bei der gleichen Bank um schnellere Überweisungszeiten zu erreichen. Dies ist jedoch nicht Bedingung.
• Client Rechner: Als Client-Rechner wird hier der via Internet mit dem Cash Server vernetzte Server bezeichnet, über den die Bezahlung durch Bildung einer Datenschleife (vom Cash Server zum Handy und vom Handy zum Server zurück) mit dem Handy vorgenommen wird. In einem Sonderfall kann dieser Client-Rechner jedoch auch ein Server sein, z.B. auch der Cash Server, der über ein weiteres Handy das Endgerät der Datenschleife bildet. D.h. das zur Bezahlung verwendete Handy wird dann mit dem Endgerät des Client-Rechners (bzw. hier Cash- Server) zur Bildung der Datenschleife vorübergehend gekoppelt. Somit hier in diesem Fall, das zweite Handy praktisch als Client-Rechner (zur akustischen Kopplung oder auch Kopplung über Infrarot Schnittstelle, etc.) verwendet ist.

Overview of the servers and computers involved in the payment process:

• Cash Server: This server has access to transfer to a charge account, which corresponds to the current monetary value, which can be paid with the mobile phone as cash value. The cash server manages a load account for each user, but in practice it may also be a common account for all managed users, managed by a database that manages this account as if the user had a cell phone at each address Telephone callable account available.
• Bank server: Corresponds to the server of the bank, through which the user can be transferred from his regular account through online banking an amount to the loading account. Conveniently, both accounts at the same bank to achieve faster transfer times. This is not a requirement.
• Client computer: As a client computer, the server connected via the Internet to the cash server is designated, via which the payment is made by forming a data loop (from the cash server to the mobile phone and from the mobile phone to the server) with the mobile phone. In a special case, however, this client computer can also be a server, for example the cash server, which forms the terminal of the data loop via another mobile phone. That is, the mobile phone used for payment is then temporarily coupled to the terminal of the client computer (or here cash server) to form the data loop. Thus here in this case, the second mobile phone is practically used as a client computer (for acoustic coupling or also coupling via infrared interface, etc.).

Procedure for the monetary value of charging the mobile phone:

The user transfers a certain amount from his online account to the charging account with which he wants to charge his mobile phone. If he makes the transfer via an Internet browser on his computer, then he calls with his cell phone in addition to the bank server, which decodes the phone number and calls back so that the user on the data loop and the loop from the server via the phone and the Web Page of the on-line account (of the bank server) sent code can transmit to the bank server the number of his mobile phone. The bank server uses the thus decoded and verified telephone number of the user to give them as a purpose of payment to the transferred to the charge account amount, so that the payment can be credited to the phone corresponding phone number by the cash server. In the cash server, this telephone number is used as the address for the access of a mobile phone or user associated charging account, whereby the personal data of the user, as they are taken from the transfer of his account on the charging account, are specified.

Procedure for cash loose payment by mobile phone:

In order to pay without cash, it is sufficient to close the preferred data loop (from the cash server to the mobile phone via the link back to the cash server) on any terminal at short notice. This terminal can be either directly an Internet-networked input, or another cell phone that is connected via another phone connection to the cash server.

If the end device used is a checkout connected to the Internet or a client computer networked with the Internet as a checkout, or a (further) mobile phone that is used, for example, as a checkout, then the following protocol is appropriate:

The price to be paid will be displayed on the device corresponding to the cash register (on the display), preferably also visible to the customer. The customer has (to avoid waiting times) previously called the cash server and sent via the dialpad an encrypted transmitted pin code to the server, which he, for example, via the WEB Page when assigning his mobile phone on the preferred data loop can also change as desired. With this PIN code transmission, the cash server decodes the phone number of the mobile phone (if this is not possible then it is canceled and the subscriber is requested to switch off the number suppression and dial again) and registers the call by entering a specific initialization status for this telephone number. Follows in this initialization status to this phone number another call of the phone's, which is done by simply pressing the redial, or by a SMS can be made, etc., then immediately a callback, in which the code signal is sent from the cash server to the phone.

The cash register sends over the Internet connection in addition to the transmission of the code signal for the data loop nor the money received in each case as amount to be paid, as it is also displayed to the customer on a display. In this case, this amount of money is directly associated with the code signal by the format used.

The cash server constantly checks all sent code signals. It is possible either to send the code signal from the cash server directly to the phone and get back over the Internet connection of the client computer, or to send the code signal from the cash server to the client computer and get back over the phone. Furthermore, it is still possible to replace the interface of the client computer for the formation of the data loop formed by temporary coupling via the mobile phone by another terminal, e.g. by another mobile phone, which is connected to the cash server via the further telephone connection (this mobile phone).

If the cash server recognizes a transmitted and returned code signal as being consistent, then the software reads the telephone number which the server uses to establish this telephone connection and continues to decode the amount of money associated with the code signal (as displayed to the customer via a display on the cash register becomes).

The cash server sends via the recognized telephone number the account of the user which can be called up under this telephone number and checks whether the amount is covered. If yes, then it will be transmitted to the mobile phone (via SMS or an alternative format) so that the customer can check the value to be debited and will then appear on the display. If only a smaller amount is covered, then in addition to this amount a warning message is issued (optical, acoustic, or amount flashes, etc.). If he is not covered at all, then appears as a zero with a corresponding warning message.

If the indicated amount is to be paid, then a defined key (for example #, etc.) of the mobile phone has to be pressed, if the amount is not to be paid then another key has to be pressed. Where for payment can be inquired again and the key must be pressed repeatedly to confirm, the same may be provided for not paying.

The screen for the cash register networked with the cash server also displays the message when the customer has paid the amount. If he pays less than the amount, then this will be displayed with an alert (for example, the customer may pay the missing difference, which is also displayed at the cashier, in cash or otherwise, etc.).

Only when the customer has paid, whereby in case of a false sum the difference at the cash register has to be manually confirmed, the payment process at the cash register is completed as usual.

If the customer has confirmed the payment process on his mobile phone, the paid amount remains displayed on the phone until the customer performs another function, or the paid amounts can also be stored and displayed as phone numbers, etc.

The amount paid in this way, or the amount debited from the account of the relevant telephone number (the customer or user), may be canceled by the beneficiary within a short period of time during which the amount has not yet been transferred to the beneficiary. With usual cash payment this is possible by a special function (usually with a special key at the cash register). The same function is also possible here via the server access of the cash register. To this

For this purpose, proceed as in a payment and, except that instead of an amount to be paid, the amount typed as repayment by the beneficiary at the cash register, and sent to the cash server using the coupling, or data loop of the phone for the transmission of the phone number becomes.

The cell phone user then gets the well-written amount (which he can dispose of immediately, since he was not debited) on the phone with the note well written.

Furthermore, the mobile phone user, as usual on-line, can call the cash server to view his credit. Also cash deposits through a bank are possible in principle.

Application C:

The application C is different from the applications A and B especially the fact that the phone does not have to be charged in advance, ie no advance transfer by the user (the paid) must be made, but only the transfer takes place when the user via the acoustic connection between the client computer of the beneficiary and his mobile phone For example, when paying at a cash register of the beneficiary, etc. Where this is done for security reasons via a particular service server.

For this purpose, the user uses a mobile phone which can make a transfer from an online account, e.g. a Java enabled mobile phone. It is provided for the input fields: beneficiary (or addressee of the payment), bank details (bank code and other required numbers, account number), amount and purpose of payment to provide an interface over which these information can be used automatically.

Where the amount and possibly (as an option) and on a receipt with specified payment purpose (store, date, even articles, etc.) is automatically used as the purpose of payment in the transfer. Of the options given here, the following are further preferred for simplicity and security, with all transfers being supported by a service server and the money transferred going the following way:

The service server can access accounts associated therewith via a robot, referred to as intermediate accounts. So that the transfer is not unnecessarily delayed, it is expedient that each of the most important banks such an intermediate account is opened, which is managed as all other accounts from the server of the bank. Although the user can transfer money to this subaccount, no transfers can be made from this account via standard online access, except via a secure connection via a landline telephone line, whereby a fast broadband connection can be used instead of a slow modem connection In addition to the usual encrypted data transmission is still secured via the preferred method is the necessary data loop for looping the recognition codes then eg constantly switched.

And only on this secured data line, with which the service server is connected to the bank server, funds can be transferred to any other accounts of any bank.

If the user wants to pay with his mobile phone, then he first executes a bank transfer using his mobile phone to the fixed account account number provided intermediate account, which has the same bank account, as his account and the receipt of payment on the interim account by the server of the bank virtually no delay is reported to the service server. The user only needs to enter the pin number, further the amount and with a keystroke to transfer the amount of his account to the intermediate account (as a fixed bank account).

The service server immediately determines this payment receipt via a direct reporting signal from the bank server (even if the amount has not actually been posted), and must assign it to the correct recipient because, for reasons of faster processing, the user only has one fixed account number, namely that of the intermediate account used to save the time-consuming entry of the bank details and account number of the payee.

The assignment of a no purpose of payment, without payee (ie without specifying the name or without specifying the bank account, or the account number of the actual beneficiary), and only with the fixed in the user's mobile phone for this payment function bank account and account number of the intermediate account on the Sub-account received amount is again using the preferred allocation method.

The cash register, or the client computer used as cash register, etc., of the actual beneficiary of the payment to be made with the user's mobile phone is networked with the service server, as explained in the example for application B for the cash server, whose function here the service server takes over.

Differences to application B:

The essential difference to the application B is that the cash server only takes into account amounts that are actually already booked, while in this example, the service server already in the payment order with the user of his account causes a transfer to the intermediate account, a message gets in real time and the bank server this amount before further bookings (withdrawals and transfers) blocks until it receives the message that the amount is posted to the intermediate account. Furthermore, in the example of the application A not from a mobile phone, but usually via an Internet access through a computer the amount transferred to the intermediate account, or on the charge account of the mobile phone.

Another essential difference to B is the use of the accounts:

The charge account used in application B, or the portion managed by the cash server for the user of the mobile phone (ie, the payee) under his telephone number, is to be regarded here as cash storage, which can be filled by the user by means of transfers or deposits, in order subsequently to be able to dispose of the amount as you wish, divided into any number of payments to different recipients (beneficiaries), whose account is transferred from this charging account controlled by the cash server.

That in the application C on the other hand used intermediate account, or by the service server for the payee (ie the actual beneficiary) under the phone number (as found in the payment via the data loop respectively) managed share is here as already the payee belonging and provided for security reasons , Because only the service server, and even a secure connection, can access the intermediate account through the bank server. It is provided for each operation, which runs the software of the service server as a robot that serves the bank server via its online account interface, and a reduction of the amount on the intermediate account concerns to include the preferred data loop DS to authenticate the code signal the source of a software operation.

That The method is suitable above all for identifying the source server that produces a WEB page, thus basically excluding manipulations via the name server (via which a WEB page is usually called or which generates the call address), etc ,

Similarities of application B and C:

As a comparable technical detail of these applications, the cash server in example B, like the service server in example C, performs the function for assigning the account of the beneficiary as the actual recipient account as well as the assignment of the debit from the payer (user). This assignment is made by using the method using the telephone number of the at Payment for making special data loop used mobile phone. Where by finding the match of a sent from the server code signal and the returned code returned, the relevant telephone line, which has made with its terminal (here eg a mobile phone) the special data loop for returning the code signal, as the connection key (or connection address) used telephone number the relevant terminal (mobile phone) is identified by the server.

Note: Of course, the assignment of accounts made via the phone number of the mobile phone could also be made by direct transfer to the beneficiary's account from the payer's (user's) mobile phone. However, this has the disadvantage that the payer (user) would have to use each time the bank account of the beneficiary with the account number and the purpose of payment, which would be very time consuming. In the alternative, described method, he must enter the amount only after a keystroke, which calls the form for transfer after entering the pin number, and send the transfer after confirmation, similar to e.g. can withdraw money from an ATM. Only here is the chip card of his cell phone replaced the card for the ATM.

Here is the following, especially suitable for practice special measure for the unlocking of the security function of the mobile phone, which by a (eg, in addition own) pin number for access to the on line account of the mobile user provides in the software of the mobile phone implemented: It is additional to the example longer pin number provided even a shorter pin number, which the user enters only when he enters the amount and submits the transfer order. This ensures that he can enter the longer number in peace and access to the on-line account still remains secured until he (when he is in line at the cashier's turn) enters the amount, presses a key and the second shorter pin number enters. If it is entered incorrectly, the status is reset to the entry of the first pin number to prevent the possibility of trial and error.

For further security reasons, a time-out is provided, which is started for all other transfers (except the permanently programmed intermediate account) with entry of the pin number, and if no subsequent transfer occurs, the locking of the on-line account after expiry of the timeout again automatically made becomes.

If, during the on-line transfer by the mobile phone, the transfer (to the intermediate account) does not take place within a short timeout, or within a short timeout after the transfer, the data loop for the return of the code signal to the server is not established; then the entry of the complete PIN number is required again to repeat the process or in case of repeated failure, the process finally canceled and reversed in the bank server due to the absence of expected by the service server acknowledgment signals to the phone number, the transfer to the intermediate account.

In order for the payer (user) to be able to automatically allocate his transfer to the bank account's interim account via his mobile phone, the procedure is as follows:

The bank server accepts via the protocol (for the transfer) the access to the intermediate account (for the acceptance of a receipt of payment) only if the payer (user) with the telephone connection also gives his number (so that the bank server in the purpose of payment use the phone number for the assignment can). If this is not the case, then an error message is aborted. Since the intermediate account of the service server is maintained by the same bank server as the personal account of the payer (user), a technical realization of this requirement is not a problem. It is provided for a variety of bank servers, which manage an online account, each such an intermediate account (which is assigned to the service server, or under control of the service server to the beneficiary and not the payer!).

In this variant after application C is (as with the other applications A and B Prinizip also possible, but not conditional) the immediate generation of a report signal provided when the payer (user) from his account (here on the intermediate account of the service server) makes a transfer, the amount as long as the account of the payer (user) for all further transactions remains blocked until he actually arrives at the intermediate account. This can usually be done immediately because the intermediate account is an account that belongs to the same bank as the account of the payer (user). This message signal is then given to the service server and contains as information in addition to the amount transferred with the sender data (including bank details) and the phone number of the phone even the exact time when the online transfer has taken place.

• - Telefonnummer des rückzurufenden Handys;
• - Uhrzeit mit Datum der initialisierten On line Überweisung des zahlenden (Benutzers);
• - überwiesener (=erhaltener) Betrag;
• - Bankverbindung des Absenders, d.h. des Einzahlers (Benutzers bzw. des Überweisenden);
• - gegebenenfalls Anschrift des Absenders.

After the service server has received the advance notification of a payment receipt (as a notification signal) from the bank server, which takes place in real time immediately after completion of the transfer of the user, he evaluates the following obtained with the message signal as data received from the bank server as follows:

• - telephone number of the mobile to be recalled;
• - time with date of the initialized on-line transfer of the paying (user);
• - amount transferred (= received);
• - Bank details of the sender, ie of the depositor (user or of the transferor);
• - if applicable, the address of the sender.

Parallel to the process of transferring the amount of money corresponding to an invoice or a receipt, or even immediately before, when the cash register displays the amount to be paid, the cash register, or a respective client computer, etc., has the Internet connection to the service server recorded, or possibly keeps upright if necessary.

The customer or the user paying with the mobile phone has expediently entered the PIN number for unlocking the access to his account even before the actual payment, or only has to enter a short supplementary number in order to make a transfer from his account to the intermediate account can. After he gets the amount displayed at the cash register, he enters the amount in his cell phone and press the send button. From this point on, the mobile phone will be blocked for all incoming calls that are not made via the service server (recognized by the caller with a given phone number) (option).

After sending, e.g. an SMS or encrypted data to the bank server, which data may also contain an invisible to the user of the mobile phone secret number or a transfer code that is generated by entering the pin number in the phone, etc., puts the phone back on and it will in real time from the bank server the above message (with the data listed above) sent to the service server, which in turn immediately makes the call back from the received phone number. Upon receipt of this call back, the preferred acoustic signal with the preferred recognition code is transmitted to the mobile from the service server in constant repetition. Or an infrared signal controlled accordingly. Depending on the mobile phone, both options can be carried out at the same time, with automatic switching for the respective transmission mode, determined by a signal detector for each interface at the terminal via which the data loop is closed, and switching over a retriggerable signal triggered by the signal Mono time eg performs.

The user places the phone on the support surface with the microphone embedded therein to couple the earpiece of his mobile phone with the microphone and / or the infrared interface, etc.

About the microphone reproduced by the mobile phone code signal in the client computer (or cash register, or machines, etc.) and the client computer (or the cash register, etc.) of the payee (beneficiary) over the Internet connection to the service server again transferred back. In the data packet of returning this code to the service server, the address and bank details of the payee (beneficiary) are still included (encoded in the client machine or in the cash register, or vending machines, etc.).

• - den über das Aussenden des Dienstleistungsservers an das Handy und von diesem wieder an den Dienstleistungsserver zur Prüfung zurück erhaltenen Kode
• - zusammen mit dem Absenderdaten (Name, Anschrift und Bankverbindung mit Kontonummer).

Thus, the data packet sent to the service server contains, as a record obtained from the client computer (the cash register or an atomic, etc.), the following minimum data:

• the code obtained by sending the service server to the mobile phone and from this back to the service server for checking back
• - together with the sender details (name, address and bank details with account number).

The service server constantly checks for all recorded data connections concerning such payment transactions (payments by mobile phone), the returned code (simultaneously) with the inclusion of all currently sent codes, if such a code is recognized. If this is the case, then the received data record is assigned via this check code to that telephone number which has previously been called (in addition to other telephone numbers) or to which the relevant code has been sent.

In this case, under the connection key of this telephone number, the data record obtained from the bank server ( BSD ) with the data set received from the client computer (the cash register) ( CRD ) linked together in the service server.

• BSD:
  • - Telefonnummer des rückzurufenden Handys;
  • - Uhrzeit mit Datum der initialisierten On line Überweisung des zahlenden (Benutzers);
  • - überwiesener (=erhaltener) Betrag;
  • - Bankverbindung des Absenders, d.h. des Einzahlers (Benutzers bzw. des Überweisenden);
  • - gegebenenfalls Anschrift des Absenders;
• (CRD):
  • - den über das Aussenden des Dienstleistungsservers an das Handy und von diesem wieder an den Dienstleistungsserver zur Prüfung zurück erhaltenen Kode, über den die Telefonnummer des zur Bezahlung verwendeten Handy's aufgefunden wurde, wobei über die Übereinstimmung mit der über die BSD Daten erhaltenen Telefonnummer die zugehörigen Daten (BSD und CRD) miteinander verknüpft werden können;
  • - zusammen mit dem Absenderdaten (Name, Anschrift und Bankverbindung mit Kontonummer).

Thus, this record maintained by the service server contains the following data:

• BSD:
  • - telephone number of the mobile to be recalled;
  • - time with date of the initialized on-line transfer of the paying (user);
  • - amount transferred (= received);
  • - Bank details of the sender, ie of the depositor (user or of the transferor);
  • - if applicable, the address of the sender;
• (CRD):
  • the code obtained by sending out the service server to the mobile phone and from this back to the service server for checking, by means of which the telephone number of the mobile phone used for payment was found, whereby the agreement with the one concerning the BSD Data received telephone number the associated data ( BSD and CRD ) can be linked together;
  • - together with the sender details (name, address and bank details with account number).

With this data, the service server can immediately send the acknowledgment signal to the relevant institution of the beneficiary who has received the payment. In technical realization, this applies e.g. a cash register (also screen of a client computer, etc.) or, where appropriate, a machine for unlocking a compartment, or issuing a printed card, or a printed ticket, etc.

Furthermore, the software of the service server sets a mark (for deadline monitoring) to the data combined using the phone number of a cell phone (left) corresponding record and waits for the actual payment, in which the account of the mobile phone user on the intermediate account of the service server, stating the Amount and the phone number of the mobile phone (which was recorded in the transfer from the bank server with), with the server of the bank, this phone number as the purpose of payment for the transfer to the intermediate account of the service server is inserted automatically (in the booking document).

• - Telefonnummer des rückzurufenden Handys;
• - Uhrzeit mit Datum der initialisierten On line Überweisung des zahlenden (Benutzers);
• - überwiesener (=erhaltener) Betrag;
• - Bankverbindung des Absenders, d.h. des Einzahlers (Benutzers bzw. des Überweisenden);
• - gegebenenfalls Anschrift des Absenders,

und kann mit diesen Angaben (über die Telefonnummer und dem Vergleich der weiteren Daten) die Weiterleitung als Überweisung an den Begünstigten entsprechend den mit (CRD) bezeichneten Daten veranlassen. Worauf die Terminmarkierung gelöscht wird. Sollte das am Zwischenkonto erwartete Geld nicht eintreffen, dann wird auf die Protokolldatei eine entsprechende Alarmmeldung ausgegeben, um mit den Daten des betreffenden Datensatzes eine Nachforschung einleiten zu können.Thus, upon actual receipt of payment of the transferred amount, the service server (by automatically reading the account statements of the intermediate account) receives the data as a copy of the record (BSD) received from the bank server:

• - telephone number of the mobile to be recalled;
• - time with date of the initialized on-line transfer of the paying (user);
• - amount transferred (= received);
• - Bank details of the sender, ie of the depositor (user or of the transferor);
• - where appropriate, the address of the sender,

and can use this information (via the telephone number and the comparison of other data) to forward it as a transfer to the beneficiary in accordance with CRD ). To which the appointment marker is deleted. If the money expected on the intermediate account does not arrive, then a corresponding alarm message is output to the log file in order to be able to initiate an investigation with the data of the relevant data record.

General: A general improvement for the transfer of a sum of money with a mobile phone still brings the evaluation of a language profile with a FFT For example, by voice prompts the user is predicted a word, and / or indicated that he must speak to recognize his identity.

Error messages:

are provided as usual, e.g. Online access to a bank account is not reached, etc.

special:

However, the following possibility of error should basically be excluded or at least reduced in frequency. Concerning a mistake that could occur when the transfer of the user of the mobile phone to the intermediate account of the service server was performed, but for some reason, the subsequent assignment of the phone number of the mobile phone over the code signal issued by the service server within a predetermined period of time could no longer occur (eg battery of the mobile phone is empty, etc. or the Internet connection of the cash register or a machine has failed, etc.).

In this case, in addition to measures to avoid errors, a time-out is provided, which, for example, From the time is measured, where the callback is initiated to the mobile in question, or is considered yet another period of time that the user needs to place after receiving the call his cell phone on the support surface with the microphone. Respectively. If the number (of the mobile phone) is constantly occupied during a callback attempt, then a predetermined timeout is also started in the server. After expiration of the time-out, an error procedure is initiated as usual in such cases.

Exact timing of the transfer by the mobile phone from the account of the user or payer (managed by the bank server) to the intermediate account of the service server (managed by the bank server with robot access by the service server).

1. a) es wird die Handynummer des Anrufers durch den Bankserver gelesen, ist dies nicht möglich wird mit einer Fehlermeldung: „die Nummer des Anrufers muß eingeschaltet sein“ abgebrochen und um einen wiederholten Anruf gebeten;
2. b) ist der in der Überweisung angegebene Betrag nicht gedeckt, dann wird mit einer Fehlermeldung: „Betrag nicht gedeckt“ abgebrochen;
3. c) ist der Betrag hingegen gedeckt, dann wird die gelesene Handynummer vom Bankserver mit oben unter BSD angegebenen Daten (Telefonnummer, Uhrzeit mit Datum, Betrag; Bankverbindung des Absenders, Anschrift des Absenders) dem Dienstleistungsserver vom Bankserver übermittelt, wobei der Bankserver diese (BSD) Daten über im Handy des Anrufers fest kodierte Werte erhält, bzw. gegebenenfalls noch nach dem Datum verschlüsselte Transaktionsnummern zur Adressierung dieser Festdaten (des Zwischenkontos) verwendet sind.
4. d) der Dienstleistungsserver wählt die erhaltene Telefonnummer des Handy's für einen Rückruf (bzw. Anruf), wobei
   • d1) bei Nichterreichen des Teilnehmers nach entsprechenden Wiederholungsversuch(en) abgebrochen wird und dabei dem Handy Teilnehmer eine SMS mit der Fehlerangabe übermittelt wird; dem Bankserver eine negative Quittung übermittelt wird, daß er die Überweisung nicht durchführen, bzw. abbrechen soll, werden weiterhin die zur Telefonnummer gespeicherten aus der aktuellen Bearbeitung genommen (gegebenenfalls für eine spätere Recherche in einem anderen Bereich gespeichert).
   • d2) bei Erreichen des Teilnehmers wird das Verfahren mit nachfolgendem Schritt e) fortgesetzt:
5. e) bei dem Rückruf (Anruf) durch den Dienstleistungsserver wird das aktuell durch einen Zufallsgenerator unmittelbar oder vorab erzeugte Kodesignal als von den Kodesignalen aller weiterer gleichzeitig geprüfter Handyverbindungen unterschiedener Kode an das Handy als akustisches Signal ausgegeben;
6. f) es wird im Dienstleistungsserver bei den aktuell angeschalteten Client Verbindungen (welche jeweils eine Kassenfunktion ausüben, dito auch Automatenfunktion, usw.), das über deren Internetverbindung vom Handy eingespeiste und an den Server zurückgeleitete Kode Signal gesucht, bzw. die Anschlußadresse des betreffenden Webteilnehmers gesucht zu dem das Kodesignal gehört. Diese Anschlußadresse entspricht der vom betreffenden Client-Rechner (bzw. Kasse, Automaten, etc.) ausgesendeten Geräteadresse, die dem Begünstigten zugeordnet ist (worüber sich der Zahlungsempfänger identifiziert). Wird eine dem Kodesignal entsprechende Anschlußadresse gefunden, dann wird mit dem nachfolgend angegeben Schritt g) das Verfahren fortgesetzt, wird jedoch keine dem Kodesignal entsprechende Anschlußadresse gefunden, dann wird das Verfahren abgebrochen und an das Handy über eine entsprechende SMS eine entsprechende Fehlermeldung ausgegeben und dem Bankserver eine negative Quittung übermittelt, worauf der Bankserver keine Überweisung veranlaßt und die Beträge der betreffenden Konten nicht verändert werden, und es werden weiterhin die zur Telefonnummer gespeicherten Daten aus der aktuellen Bearbeitung genommen (gegebenenfalls für eine spätere Recherche in einem anderen Bereich gespeichert).
7. g) Bei Auffinden einer dem Kodesignal entsprechenden Anschlußadresse (im Dienstleistungsservers) wird dem Bankserver vom Dienstleistungsserver eine positive Quittung übermittelt, worauf der Bankserver den Betrag ausschließlich für diese Überweisung reserviert (bzw. für weitere Anfragen und Überweisungen vom Kontostand vorab abzieht) und dem Dienstleistungsserver den Betrag auf das Zwischenkonto überweist. Dabei werden die bei Erhalt des Anrufs durch das Handy gelesene Handynummer als Zahlungszweck und die dazu übermittelten Festdaten (der Kontonummer des Zwischenkontos) zusätzlich zum Betrag übermittelt. Nach Beendigung des Überweisungsinitialisierung wird dem Dienstleistungsserver unter der Adresse der betreffenden Telefonnummer eine entsprechende positive Meldung übermittelt, welche bei dem betreffenden Endgerät des Zahlungsempfängers (Registrierkasse, Automat, Kartendrucker von Rolle mit Ausgabeautomat, Drehkreuz einer Zugangskontrolle, etc.) das eine Bezahlung anzeigende Betätigungssignal auslöst.
8. h) Im Dienstleistungsserver wird der entsprechende Datensatz, welcher die betreffende Telefonnummer des Handy's als Schlüssel zur Verbindung der Daten des begünstigten Zahlungsempfängers (Bankverbindung, Uhrzeit, Datum, erhalten über die Vernetzung mit dem Endgerät, über welches die Datenschleife mit dem Handy der betreffenden über das zurückerhaltene Kodesignal aufgefundenen Telefonnummer, gebildet wurde) und der vom Bankenserver zu dieser Telefonnummer mitgeteilten Daten (Betrag, Absender, Datum, Uhrzeit, etc.) ergänzt (verknüpft) und über eine Roboterfunktion die Weiterleitung (Überweisung) des betreffenden (über die Telefonnummer als Schlüsseladresse erkannten) Betrages vom Zwischenkonto auf das eigentliche Konto des begünstigten Zahlungsempfängers überwiesen wobei dieser Zahlungseingang auf dieses Konto, bzw. die tatsächlich erfolgte Abbuchung vom Zwischenkonto vom Server überwacht wird,

After the bank server reads from the user (payer) via his mobile phone a transfer order in which the beneficiary is the intermediate account of the service server (as a trigger condition), the following steps are initialized:

1. a) it is the phone number of the caller read by the bank server, this is not possible with an error message: "the number of the caller must be turned on" canceled and asked for a repeated call;
2. b) if the amount indicated in the transfer is not covered, then an error message: "amount not covered" is canceled;
3. c) if the amount is covered, then the read mobile number is transmitted from the bank server with the above BSD data (phone number, time with date, amount, bank details of the sender, address of the sender) the service server from the bank server, the bank server this (BSD ) Data on the phone of the caller hard coded values receives, or if necessary, even after the date encrypted transaction numbers for addressing this fixed data (the intermediate account) are used.
4. d) the service server selects the received phone number of the mobile phone for a call (or call), wherein
   • d1) if the subscriber is not reached after a corresponding retry attempt (s), the mobile subscriber is sent an SMS with the error indication; the bank server is sent a negative acknowledgment that he does not perform the transfer, or should cancel, continue to the phone number stored from the current processing taken (possibly stored for later research in another area).
   • d2) on reaching the subscriber, the procedure is continued with the following step e):
5. e) in the callback (call) by the service server the code signal currently generated directly or by a random generator as the code signals of all other simultaneously checked cell phone connections code is output to the phone as an audible signal;
6. f) it is in the service server at the currently activated client connections (which each exercise a cash register function, ditto automaton function, etc.), which fed via their Internet connection from the phone and returned to the server code signal sought, or the connection address of the relevant web user searched to which the code signal belongs. This connection address corresponds to the device address sent by the respective client computer (or cash register, machine, etc.) assigned to the beneficiary (which the payee identifies). If a terminal address corresponding to the code signal is found, then the procedure is continued with step g) given below, but if no terminal address corresponding to the code signal is found, then the method is aborted and a corresponding error message is output to the mobile phone via a corresponding SMS and the bank server sends a negative acknowledgment, whereupon the bank server does not initiate a transfer and the amounts of the respective accounts are not changed, and the data stored for the telephone number are further removed from the current processing (possibly stored for a later search in another area).
7. g) If a terminal address corresponding to the code signal is found (in the service server), a positive acknowledgment is sent to the bank server by the service server, whereupon the bank server reserves the amount exclusively for this transfer (or withdraws it in advance from the account balance for further inquiries and transfers) and the service server Transfer amount to the intermediate account. In this case, the mobile phone number read on receipt of the call by the mobile phone as the purpose of payment and the fixed data transmitted to it (the account number of the intermediate account) are transmitted in addition to the amount. After completion of the Überweisungsinitialisierung the service server is transmitted under the address of the relevant telephone number, a corresponding positive message, which triggers at the relevant terminal of the payee (cash register, vending machine, card printer of role with dispenser, turnstile access control, etc.) indicating a payment actuation signal ,
8. h) In the service server is the corresponding record, which the phone number of the mobile phone as a key to connect the data of the beneficiary payee (bank details, time, date, via the network with the terminal, via which the data loop with the phone of the concerned on the and the data communicated by the bank server to this telephone number (amount, sender, date, time, etc.) added (linked) and via a robot function the forwarding (transfer) of the relevant (via the phone number as the key address recognized) amounts are transferred from the intermediate account to the actual account of the beneficiary recipient, whereby this receipt of payment to this account, or the actual debiting of the intermediate account is monitored by the server,

If the debit from the intermediate account is not within the monitoring time (timeout monitoring) started for each mobile telephone number (from the generation of the actuation signal) in the service server, then the data of the transfer is written to a journal file, which is monitored by an operator, to investigate if necessary and to be able to operate.

It is evident that, as required, any number of error controls can be provided for error monitoring and timeout monitoring, in addition to a cash register application in which the actuation signal can be used as a receipt for the deposit received, e.g. is displayed on a display of a cash register and further the release of printing a receipt or ticket, etc., also controls for the control of a machine (e.g., cigarette vending machines) or access through a turnstile, etc., control.

Likewise, the mobile phone may e.g. are linked to a variety of services to be paid by a bank transfer, then in each case by the preferred production of the data loop on the code signal, the recognition of the payment takes place (with the associated programmed procedure in the database).

Furthermore, instead of a cash register networked with a service server, a second mobile phone may also be connected to the service server via an internet connection, thus payment transactions can also be handled with two mobile phones.

12a shows an example of one with a soft foam ( 1 ) padded support surface (plate), wherein the foam has a recess into which the mobile phone ( 2 ) for the purpose of producing a temporary data loop (here via microphone MIC the support surface and earpiece HK of the mobile phone and / or via an infrared interface (IF, a, b) is inserted and pressed against the foam. The acoustically or via infrared coupled interface is then networked via a corresponding Internet connection of a corresponding terminal with the server.

Furthermore, it will be illustrated how the automatic switching of infrared interface and acoustic coupling is performed. If the mobile phone has an infrared interface, whereby several possibilities for attaching a corresponding sensor to the support surface can be provided, then all other input channels (acoustic coupling, etc.) are switched off and only the infrared coupling (data) is evaluated. For this purpose, the relevant infrared signal is the trigger signal of a retriggerable mono time MONO used (eg implemented by software), where the output Q This mono time then only uses this signal channel and shuts off all other available channels. It is evident that any number of infrared interfaces can be provided on a mobile phone, etc.

Also in the example explained below also about a connected to a server (eg an Internet provider) terminal (eg IT - Calculator or client computer, or even just a cell phone, etc.), which usually gets assigned only a temporary address, as belonging to a terminal of another network (eg, a phone, mobile phones, etc.) to recognize.

For this purpose, the terminal of the other network, which can be regarded as secure, or distinctive connection, (eg a dial-up telephone connection of a landline or a mobile phone, or via radio channels, etc.), called by the server in question, wherein the server via the speaker output of the device used to display the website (client computer) an acoustic code signal (KODE, also melody as code, etc.), which is generated by a random number generator in the server, which he calls over the called telephone connection ( acoustically coupled via the microphone) receives back and over this data loop checks whether it is actually sent by him to the WEB page sent code signal and only with a positive result, the assignment of the relevant WEB page to the phone number used for the call as passes the passed safety test. In this case, the method can also be applied vice versa by the server sends the acoustic code signal to the earpiece of the mobile phone via a telephone connection, wherein the code signal via microphone of the client computer is acoustically coupled to the server via the data loop sent back.

Furthermore, the necessary for the data loop coupling between the data output of the computer and the data input of the telephone connection, or possibly vice versa, the coupling between the data input of the computer and the data output of the telephone connection, in addition to the preferred compatibility reasons acoustic coupling by any interface can be realized , such as infrared coupling, or other optical coupling, or plug-in connections with conventional start-stop or synchronous data transmission (modulo 2 , etc.), etc.

Ditto, the method can also be carried out exclusively under mobile phones (i.e., from mobile to mobile) or in conjunction with mobile phones and a computer, etc., as already indicated in examples, e.g. to use the general payment procedure.

Here, the server using the used for the data loop DS port number T- # of the mobile phone (ie, a fixed connection connected) can assign the data of a database or even different databases, even with temporally independent call, or can synchronize, if, when calling up a database, the preferred code (under the relevant mobile number T- #) CODE ) is passed over a user-formed data loop; and the server by pairwise comparison of each incoming code signals ( KODE_1 ...... ( KODE_n ), each of which must correspond to the emitted by him, the corresponding telephone lines, or determines phone numbers. And on the corresponding phone numbers T- # in this recognition, the server processes associated with the data loop, or sessions of the client CL are recognized as belonging to each other. Through this synchronization, not only the server used in cashless payment transactions can be assigned processes, it can also after payment and booking below the telephone number used for synchronization (T- #), the payment (booking) below or even before any other server processes (or their WEB pages, ditto databases) are assigned, for example, to pay for the service of a WEB page (or even on a WEB page managed only service, such as theater tickets, pizzas, punishment mandates, etc.).

As already stated in the examples mentioned above, the emission of the code signal can also optionally take place in the reverse direction, ie the code signal is sent to the telephone via the telephone connection and transmitted via the WEB page (resp. IT - connection) sent back to the server. Ditto can that Coupling of the data loop between the phone and the computer that the WEB Page represents (or another cell phone, etc.) also here via any interface, for example via an infrared interface, etc ..

Due to the preferred data loop, different server processes are used on the client side CL (or mobile page, etc.) for the data loop respectively used telephone connections T- # synchronized, with the telephone connections used on the client side T- # checked by this data loop and even with only temporary IT Addresses (the server processes as an interface to the client), the processes can be uniquely assigned to a specific session or client CL.

Example (s) 3.0:

• al) der gesetzestreue link auf eine beliebige WEB-Seite, bei der grundsätzlich eine Haftung für diesen link ausgeschlossen ist, unabhängig von Art und Inhalt dieser Seite. Dabei wird der link so vorgenommen, daß er in der „aufrufenden“ WEB-Seite als solcher nicht enthalten ist;
• a2) der gesetzestreue link auf eine beliebige herrenlose WEB-Seite, die niemandem gehört, weil sie treuhändisch verwaltet wird, und der Quellenserver nicht ausgeforscht werden kann, und weiters unter Wahrung des IT Protokolls die Seite unter einem anderen Namen (bzw. unter anderer IT- Adresse) dem Client präsentiert wird, als sie der erzeugende Server benutzt. Dabei kann sich der Name der WEB-Seite ständig ändern;
• b) eine neuartige Benutzung eines Handy's zur Abgabe einer digitalen Unterschrift eines Dokumentes, welches über ein beliebiges Endgerät, bzw. einen beliebigen Client-Rechner (auch eines Internet Cafes, etc.) übermittelt, bzw. dargestellt (oder ausgedruckt, etc.) wird. Diese Anwendung läßt sich auch gut mit der bereits erläuterten Anwendung zur Benutzung eines Handy's für einen bargeldlosen Zahlungsverkehr kombinieren.

In addition to the already explained application for using a mobile phone for a cashless payment, with the example, the smart card of a mobile phone can be recharged immediately, here are two other major applications for such synchronization on the phone numbers T- # used by the client CL Telephone connections proposed:

• al) the law-abiding link on any WEB site, in which a liability for this link is excluded, regardless of the nature and content of this site. The link is made so that it in the "calling" WEB Page as such is not included;
• a2) the law-abiding link on any unclaimed WEB site, which belongs to no one, because it is managed in trust, and the source server can not be explored, and further, while preserving the IT Log the page under a different name (or among others IT Address) is presented to the client as it uses the originating server. The name of the WEB site may change constantly;
• b) a novel use of a mobile phone to submit a digital signature of a document, which transmits via any terminal, or any client computer (including an Internet cafe, etc.), or displayed (or printed, etc.) , This application can also be combined well with the already explained application for using a mobile phone for a cashless payment transaction.

In further education, the integration of any WEB - Site in a (eg at a notary, court, etc., set up) certificate server for the certification of digital signatures to documents on any non-certified servers the client CL presented, whereby the user (client) receives a counter document transmitted electronically, which can not be forged although the client CL has no certification for recognizing the authenticity of the document (eg from a notary server) received back (so that the undersigned also gets a legal document from the contracting party of the WEB site).

Auf Basis dieser Anwendung ist es weiterhin erstmals möglich, vollautomatisiert (durch Übermittlung einer digitalen Signature) unterschriftsbeglaubigte E-Mails und FAXE vom Bürorechner abzusenden, ohne daß auf dem Rechner, bzw. Client CL des Absenders oder Empfängers die digitale Signature geprüft werden muß. Dies erfolgt unter Zwischenschaltung eines Zertifizierungsservers, welcher als Sicherheit gegenüber dem Benutzer die Einbindung der bevorzugten Datenschleife DS benutzt und dessen digitale Signature entgegennimmt, weiterhin prüft, den Vorgang speichert und archiviert, sowie dem Unterfertigten eine beglaubigte Kopie des von ihm unterzeichnenden Dokumentes rückübersendet. Dadurch wird es erstmals möglich, E-Mails und FAXE entsprechend dem Status eines eingeschriebenen Briefes (auch mit „Rückschein“) in digitaler Form automatisiert zu übersenden.

Based on this application, it is still possible for the first time, fully automated (by submitting a digital signature) signed e-mails and FAXES to send from the office computer, without on the computer, or client CL the sender or recipient of the digital signature must be checked. This is done with the interposition of a certification server, which uses as security to the user the integration of the preferred data loop DS and receives its digital signature checks further, stores and archives the process, as well as the undersigned a certified copy of the document signed by him back. This makes it possible for the first time, emails and FAXES according to the status of a registered letter (also with "Rückschein") in digital form to be sent automatically.

Furthermore, if the client computer is already connected via a telephone connection (ie via a modem) to the server of a provider, the data loop in principle also using a telephone call back the (relevant) telephone number, under which the client computer can be reached , getting produced. However, since the modem connections for Internet use are becoming increasingly rare, such a variant is not necessarily worthwhile, because in a modem connection this is fully utilized anyway with the data transfer.

However, the modem could be the preferred data loop on the client computer for a second telephone connection CL also directly to the software (option).

In addition to the main applications mentioned above (relating to these examples), numerous applications of the method are still proposed.

In addition, also advantageous refinements for the design of the mobile phone are proposed in order to carry out the process in principle even more user friendly. This includes, for example, the further option of making better use of the usually already installed digital camera for the process in different applications.

Dazu ist zur technischen Weiterbildung vorgesehen, die meist ohnehin eingebaute Digitalkamera des Handy's für die Bildung der Datenschleife des vom Server an den Client Rechner CL gesendeten und über die (weitere) Telefonverbindung zurück erhaltenen Kodes (KODE) zu verwenden. Zu diesem Zweck wird auf dem (oder gegebenenfalls auch auf einem weiteren noch zusätzlich vorgesehenen) Bildschirm der Gegenstation (Bildschirm des Client Rechners CL oder auch Handy) ein Bildfeld optisch angezeigt, über das die Daten durch eine Helligkeitsmodulation übertragen werden, z.B. entsprechend einem Synchronverfahren wie Modulo 2 etc., vergleichbar auch mit der Datenübertragung über einen Lichtleiter (nur langsamer). Dabei kann dieses optische Bildfeld neben einem im Display angezeigten, auch eine gesonderte Leuchtdiode sein, usw.

This is provided for technical training, usually already built-in digital camera of the mobile phone for the formation of the data loop of the server to the client computer CL transmitted and returned via the (further) telephone connection ( CODE ) to use. For this purpose, on the (or possibly also on a further additionally provided) screen of the remote station (screen of the client computer CL or cell phone) an image field displayed optically, via which the data is transmitted by a brightness modulation, eg according to a synchronous method such as modulo 2 etc., comparable also with the data transmission over a light conductor (only slower). In this case, this optical image field next to a displayed in the display, also be a separate LED, etc.

Thus, it is sufficient to keep the optics of the digital camera of the mobile phone against the screen, or on this optical field of the remote station, if the client computer or a special additional mobile phone to the mobile data to be (coupled) to be.

It is further provided (optional) to indicate on the phone by means of two arrows (⇑⇓) ("⇑" or "⇓" or "" = OK), whether the phone with the built-in camera is closer or more distant to the screen to hold. It is also envisaged to make the lens extendable in order to narrow the detail of the image as a detail, as is the case with conventional intermediate rings of a standard objective. In this case, two detent positions are provided, one the distance of the lens to the mobile phone housing (equivalent end position to the camera housing back) shortened (usual position) and one extends this distance for the purpose of imaging a detail (image) section (as a special position for data coupling ).

Likewise, a barcode can be read by the camera of the mobile phone, eg also for later 18 described application to a certification server, the on the chip label ( 10 . 11 16 ), with which the document ( 40 ) to be printed.

Eine besondere Anwendung, wo die Benutzung der Kamera an einem Handy gleichfalls eine Vereinfachung in der Handhabung bedeutet, ist, ein Druckwerk, wie eine Zeitung, oder ein Buch, etc., nicht nur über die Information, z.B. durch einen im Druckwerk angegebenen exemplarischen Kode an eine WEB-Seite zu binden, sondern diese WEB-Seite wiederum an eine bestimmte Person zu binden, wobei dabei die bevorzugte Datenschleife unter Verwendung eines bestimmten Telefonanschlusses (Nummer T-#) einer bestimmten Person, den Zugang zur WEB-Seite an diese Person bindet.

A particular application, where the use of the camera on a cell phone likewise means a simplification in the handling is, a printing unit, such as a newspaper or a book, etc., not only on the information, eg by an exemplary code specified in the printing unit to one WEB Side, but this one WEB Page to bind to a particular person, whereby the preferred data loop using a particular telephone line (number T- #) of a particular person, access to the WEB Side binds to this person.

This binding can in turn be realized very well by the method by an exemplary code number which can be taken from the printing unit KODE_extern (ie a different code for each copy KODE_extern ) and this code number KODE_extern in connection with the implementation of the example in a relevant Website is entered, in which the user has to log in on the preferred data loop with the code sent by the server (KODE) to identify the telephone connection used for this purpose (T- #).

After the single entry of the exemplary code of the journal KODE_extern the user may continue to log in for any length of time (or even number of sessions, etc.) using the data loop with the same telephone connection (eg mobile or landline number T- #) as used when logging in for the first time, without each time you need to enter the KODE_extern of the journal, or use this example to another user KODE_extern the magazine nothing if he uses a different telephone connection (eg mobile or landline number T- #), as when logging in by entering the exemplary code KODE_extern (the magazine) has been used for the data loop for transmitting the security code generated by the server by a random number generator (KODE).

As a result, the user is encouraged, for example, to regularly buy the coded with exemplary code numbers KODE_extern newspaper. How the code is read from the newspaper does not matter. In the simplest case, it is only stamped, or printed as an exemplary number, or labeled by a laser inscription and the keyboard or a pad for handwriting recognition, etc. in the relevant WEB Page.

In Weiterbildung wird dieser Kode KODE_extern über die zum Zwecke der Übertragung des vom Server erzeugten Sicherheitskodes (KODE) gebildete Datenschleife (DS), hier über das Handy unmittelbar eingespeist, wobei der KODE_extern z.B. über die Kamera in das Handy eingelesen wird.

In further education becomes this code KODE_extern about the purpose of transmitting the security code generated by the server ( CODE ) formed data loop ( DS ), here directly fed via the phone, where the KODE_extern eg via the camera in the mobile phone is read.

Das heißt der Server erhält in der Datenschleife nicht nur den von ihm gesendeten Kode (KODE) zurück, sondern auch noch den hier nur jeweils beim erstmaligen Einloggen, auf das kodierte Druckwerk bezogenen KODE_extern, der hier (als Variante) über das Handy akustisch eingeben wird. In weiteren ausgesprochenen Sicherheitsbeispielen, die später noch beschrieben sind, wird auf den Vorteil dieser Eingabemethode noch hingewiesen (wobei der KODE des Servers und der extern eingegebene KODE_extern im Handy noch gemeinsam verschlüsselt werden können, usw.).

In other words, the server not only receives the code it has sent in the data loop ( CODE ), but also only here at the first login, related to the coded printing unit KODE_extern , which will enter acoustically (as a variant) via the mobile phone. In further pronounced security examples, which are described later, the advantage of this input method is still pointed out (where the CODE of the server and the externally entered KODE_extern in the cell phone can still be encrypted together, etc.).

If the mobile phone does not have a camera, then another preferred method is an additional code, eg a number here KODE_extern a correspondingly coded newspaper and in connection with the preferred data loop of a code generated by the server ( CODE ) in the relevant WEB Page, or in the server to enter, which uses already existing acoustic input of digits (eg for dialing) on many mobile phones. In this case, as always, the implementation of the acoustically spoken digits in the corresponding character code either off-line, ie be made directly on the phone, on-line via a corresponding service number of the mobile network, which can be reached, for example, at the press of a button.

Die gleiche Methode kann auch für die Eingabe einer pin Nummer, bzw. einem persönlichen Identifizierungskode (PIC) verwendet werden, wie sie für eine verschlüsselte Übertragung, z.B. bei einem Zahlungsverkehr benutzt wird oder in Verbindung mit der Abgabe einer digitalen Unterschrift, in einem später noch beschriebenen Beispiel zur Anwendung gelangt.

The same method can also be used to enter a pin number or a personal identification code ( PIC ) used for an encrypted transmission, eg in a payment transaction or in connection with the delivery of a digital signature, in an example which will be described later.

①; ⑤; ⑤; ..... Another application in which the preferred assignment of a WEB Page is made, that is called from the telephone line T- # of the user from the server to charge over this telephone call for the use of the data loop assigned in the data loop WEB - to settle the page.

The technically simplest case is when the service is offered on the WEB side as long as the data loop is maintained with the transmitted code signal, thus telephone charges during the service on the WEB side via the user's telephone T- # immediately according to the one made Duration of the data loop can be billed.

Or, in a further variant, if for each one-time call of the server via the telephone connection T- # of the user a certain feature is enabled (to download a file, etc.). Where the called server the data loop by hanging up at any time (corresponding to one with the WEB Page synchronized duration).

❑ Another fundamental variant is when using the WEB Page using the preferred data loop, a user input of charge is made so that the user over the WEB Page enters a monetary amount, or confirms while the data loop via his phone or mobile phone connection T- # with the server of WEB Page, or the security codes ( CODE ), whereby the entered or selected amount of money is then billed via the telephone charges.

❑ In a further development, this method can also be performed well in conjunction with the submission of a digital signature (signature) to a certification server (as will be explained in detail in the later part of this description). The input of the over the telephone bill (the port T- #) then deducted amount of money can also be done via the located in the data loop mobile phone, this input data to the server together with the security code ( CODE ), possibly encrypted, are redirected.

Der (später noch im Detail ein seiner Funktion beschriebene) Zertifizierungsserver gewährleistet dann als behördlich anerkannte Vermittlung zwischen einem beliebigen WEB- Seitenanbieter und einem beliebigen Client User (Benutzer), daß einerseits der vom Anwender zu dieser WEB-Seite eingegebene Geldbetrag stimmt und zweitens der Geldbetrag der angebotenen Leistung zuzuordnen ist, gegebenenfalls noch dazu notariell überwacht. D.h. die übliche Abzocke über Dialer und überhöhten Gebührennummern wir für seriöse Anbieter nicht mehr benötigt, und könnte auf Grund der vorliegende Neuerung sogar gesetzlich verboten werden.

The Certification Server (later described in detail in its function) then ensures as officially recognized mediation between any one WEB - Page provider and any client user (user), that on the one hand the user to this WEB Page amount entered and secondly, the amount of money to be allocated to the offered service, if necessary also notarially supervised. That is, the usual rip-off about dialers and excessive fee numbers, we no longer needed for reputable providers, and could even be legally prohibited by the present innovation.

Also, this method could very well be combined with a parcel service whereby the parcel delivery service (eg the post office), with its many branches, acts as a trustee for internet purchases / sales entry. Ditto also still over the certification computer a central file is put on, with which only reputable offerers and buyers are registered, etc.

❖ Another, additional application is to call another one WEB Page through any other WEB Page, without the usual link would be required (according to the main application mentioned a1 and a2 ):

In contrast to the prior art, where such a call is made with a usual link, in which the address, or the name is contained in the code of the WEB page to be called, or at least on the server via the WEB Page is called, the address or the name of the web page must be encoded, this is not the case with this novel application. It gets the server, the client CL immediately (as a provider) via the interposition of another server WEB - Page represents, one WEB Page, which he has not called, transmitted by a server to them under a completely different (anonymous) name to the client CL to present, the client then only those WEB Page about that IT - Call log that the server in question displays to display (anonymous) WEB - Site used, in terms of international law comparable to a switching service of any data network, or a telephone network, etc., according to which the mediation service for the transmitted content is not liable and technically, can not be liable.

It is envisaged that the WEB Page, about which the call by the client CL only performs a general browser function, which is the client's browser CL to the effect that one over the client CL direct (direct addressing) or indirect (indirect addressing) input of the name or the address of the call to be called WEB Page takes place.

In both cases (direct addressing and indirect addressing), this is not done here, as otherwise usual by entering in the relevant window of the browser on the intended standard interfaces (via keyboard or by decoding a left of the currently called WEB Page), but by calling a telephone number (via the telephone network or mobile phone network), which relates to the call of that server on which to be called WEB Page is to be accessed, or which, if appropriate, at least make another call to another server (so that the called WEB Page-generating additional servers, or even a whole battery of locally-branched servers behind which the phone-initialized server can hide).

Where the user then only a phone number (a corresponding server or corresponding robot station, etc.) has to call to a relevant, presented anonymously WEB Page.

This call can then be made by the usual choice of a telephone number (or generally, by entering appropriate data for the control of a connection setup) via a landline or mobile phone (including radio network, etc.) by the user. Where in continuing education to call WEB Page not only has a list of phone numbers, but also can generate a dialing code to dial directly.

❑ In this context, for the use of mobile phones, which standard moderately have a speech recognition for the choice, this speech recognition additionally simplified by a sound recognition, their execution, for example, the measures already indicated for detecting the server back through the data loop transmitted codes ( CODE ) are used. In addition to using tone frequencies to enter the dialing code, a voice prompt could also be used directly, but the use of tone frequencies is more reliable.

❑ Thereby, this procedure is not limited only to mobile phones, as the implementation of a WEB page at the client CL reproduced audio frequencies in dialing numbers, not necessarily the terminal (or telephone device) of the user must be made, but can also be made to a server, for example, via an intermediate selection or even directly.

In an intermediate selection, the user always selects a fixed number (in his telephone set, mobile phone, etc.) that relates to call forwarding. This call forwarding sets the number generated by the user on the relevant WEB page, eg "WEB-Vermittlung.com" (also referred to as WEB-Seite_A) and generated by the client computer CL the user reproduced as audio frequencies telephone number (eg "001 / xxx .... xxx") in dialing numbers for further selection of the coded by the audio frequencies connection to. It is optionally provided, instead of dialing a phone number to send even an SMS to the phone number of the call forwarding, the SMS then the to be dialed telephone number of the server to be dialed contains. The call forwarding (as an option) and the sender of SMS call back to test the phone number, etc. Or even immediately return to this phone number received from the server as a code SMS, which in turn (also via direct coupling by converting the SMS in accordance with serial data) to the server of a relevant WEB page over the client CL (or a suitably formed data loop) can be sent back to perform the test of the data loop, etc. The whole of course works on IT Telephony, etc.

In the direct dialing, the preferred data coupling on the client side CL is made, for example, by dialing the relevant telephone number via the Internet, using a service provider (server), which is via the telephone network (dialing network) to the server whose WEB Page should be called cost-effectively dial into the telephone network.

Further explanation of the other options with which the call of the concerned WEB Page without direct link over another WEB Page can be done ::

I) In the case of direct addressing, the WEB page to be called up is called here WEB -Seite_B, via an on the client machine CL installed software ("plug-in"), in the data via a data interface (eg by an acoustic coupling or via an infrared interface, or even another interface, etc.), the data for the name, or for the address of the invoked WEB Page can be enrolled to the WEB page directly from the client machine CL call on the browser, or even for the call to use a special service via another server, which may call the WEB page anonymously in relation to the user, but can not represent anonymous in the current state of the art.

The data interface is supplied by the user or on the client side CL established preferred coupling, in which the data after calling the user one for calling the WEB Page provided telephone number, or a respective telephone server (or robot, etc.), from this telephone server to the telephone connection of the user (T- #) are transmitted and by feeding into the data interface on the client computer CL (or even on a cell phone, etc.) for calling the relevant WEB Page to be used.

II) For indirect addressing is on the client machine CL No specially installed software ("plug in") is required to connect via an external data interface of the client computer CL a WEB Page. But it is a software with a function, as provided in the direct direct addressing to the client computer, on the server Server_A installed, which is just an extension of the interface to the client CL over the IT - represents connection.

It will call for the call WEB Page, here WEB -Seite_B called, preferably the same data interface of the respective terminals (client CL , Phone or mobile), as well as for the production of the preferred data loop when the user logs in WEB Page_A (eg from " WEB -Vermittlung.com "), whereby the user on the client side then uses the same telephone connection (his number T- #) to the relevant server, Server_A , and Server_B Dial (via their telephone network!).

The server is reading B the telephone number T- # of the telephone connection (user or client) given in his telephone call over the telephone network CL ), or if this is not possible, the user receives the announcement via the telephone connection to repeat the process, while the phone number suppression but disable. Server B stores this telephone number as (later to be used allocation address, or for the subsequent synchronization of the data in relation to WEB Page A of Servers_A ).

Here again, the server or the identification of the subscriber via this data loop (the telephone line T- #) by generating the test code ( CODE ) by sending and checking the returned code.

If the called web page, here called WEB-Seite_B, on the same server (here Server_A called) stored as the WEB page (here called WEB-Seiten_A), which visually represents the phone number of the server to be called (or as a stream for directly automatic dialing Data loop to the phone / mobile generated), then only a one-time formation of the data loop would be required (to the server A ) to check the telephone caller through the data loop.

Since this is not the case (usually), ie the WEB page WEB page_B called is not on the server server A but stored on any other server, here called server B, sends the here directly by the client user ( CL ) Server Server_B called its telephone (T- #) its name (ie its IT - address) over the telephone connection, as determined by the preparation of the data loop DS to server A (under WEB page_A) to the client CL initially still exists, to the Server_A , That is the user on the client side CL established data loop is over the telephone line (T- #) already the Server_B switched on, but still on the internet connection Server_A or on its WEB page WEB page_A turned on. Whereby between Server_A and server B Initially, no connection via the IT network must be included, that is, via the data loop DS at the client CL first established is the only connection.

Receives however the server A via the data coupling of the data loop DS over the telephone network (T- #) from the server server B whose IT - Address, then build the Server_A an internet connection to Server_B and immediately sends the telephone number of the telephone line (T- #), which the user has used for the time being in the production of the data loop. Or the server A sends the server B the telephone number (T- #) via an SMS, etc., (see later).

It is evident that the user through his client computer CL only once when logging a first data loop to Server_A while being able to keep the WEB Page_A constantly invoked, and calling any number of additional servers of the category according to Server_B, so that these servers each have their identifier (via the data loop of the telephone). IT - address) to the Server_A can send. This means that the user can call any number of servers of the category according to server B by phone when the WEB page_A is called up and to Server_A each form the data loop DS, with the purpose that on the WEB side_A of the Server_A which are displayed to the selected telephone numbers WEB pages of the server concerned on the WEB side_A of Server_A as anonymous WEB page.

In this case, the telephone numbers can also relate to only one switching page of the server server B selected with the telephone number via the telephone network, with the corresponding links to the relevant ones WEB Pages, or the WEB Pages can also be called directly via extension numbers on server B.

• - Durch direkten Aufruf über die Telefonverbindung zum Benutzer (T-#), über welche der Server B das serielle Signal für den Aufruf der durch die Telefonnummer (seiner telefonischen Anwahl) bezeichnete (bzw. dekodierte) WEB-Seite über die WEB-Seite_A des Client CL, bzw. über die Datenschleife (Datenkopplung) an den Server_A sendet. Dabei ruft jedoch der Server_B die WEB-Seite auf, kopiert sie und stellt sie unter einem anderen Namen (bzw. anderer IT- Adresse) bereit, oder übersendet sie einem weiteren Server zu dem selben Zweck (der die Seite dann unter einem anderen Namen bereitstellt). Und zwar jeweils unter dem Namen, den der Server_B an die WEB-Seite_A zum Aufruf über das Telefon T-# des Benutzers sendet. D.h. der telefonisch angerufene Server B ist hier der verlängerte Arm des Benutzers, der die betreffende WEB-Seite (z.B. über ein Plug In seines Rechners) und durch Benutzung eines anonymen Zugangsdienstes aufruft.
• - oder durch indirekten Aufruf , bei welchem der Server B die durch die Telefonnummer (seiner telefonischen Anwahl) bezeichnete (bzw. dekodierte) WEB-Seite aufruft und sie in eine eigene WEB-Seite anderer Bezeichnung kopiert, um sie unmittelbar oder über weitere Server dem Server A zur Darstellung innerhalb der WEB-Seite_A zu übermitteln. D.h. in diesem Fall stellt die WEB-Seite_A ein durch einen Mausklick aufzurufendes leeres Fenster zur Verfügung, innerhalb die vom Server B direkt oder über weitere Server aufgerufene Seite dem Benutzer (unter einem anderen Namen) präsentiert wird. Im Unterschied zum direkten Aufruf über die Telefonverbindung, wo die betreffende WEB-Seite in einem vom Server_B zur Verfügung gestellten leeren Fenster dem Benutzer (unter einem anderen Namen) präsentiert wird, der sie über die Daten der Datenschleife der betreffenden Telefonverbindung aufruft.

Server_B has the user's phone number (T- #) from Server Server_A over the established one IT - Received connection, then Server_B makes the call of the corresponding WEB page, whereby this can take place over two alternatives:

• - By direct call over the telephone connection to the user (T- #), via which the server B, the serial signal for calling the designated by the telephone number (his telephone dialing) (or decoded) WEB page on the WEB-Seiten_A des Client CL, or via the data loop (data coupling) to the Server_A sends. However, Server_B calls the WEB page, copies it and places it under a different name (or other name) IT - address), or send it to another server for the same purpose (which then provides the page under a different name). In each case under the name that the server_B sends to the WEB page_A for the call via the user's telephone T- #. That is, the server B called by telephone is here the extended arm of the user who calls the relevant WEB page (eg via a plug-in in his computer) and by using an anonymous access service.
• - or by indirect call, in which the server B calls the designated by the phone number (his telephone dialing) (or decoded) WEB page and copied it into its own WEB page other name to them directly or through other servers the Server A for display within the WEB Page_A to submit. Ie in this case, the WEB -Seite_A an empty window to be invoked by a mouse click within which presented by the server B directly or through other servers page to the user (under a different name) is presented. In contrast to the direct call over the telephone connection, where the concerned WEB In an empty window provided by Server_B, the page is presented to the user (under a different name), who calls it via the data loop of the relevant telephone connection.

In each case, there is the option of calling via a plug-in on the computer of the client CL or via the server A , or the server of the provider, directly make.

Thus, in both cases, it is not a link in the legal sense, which would be provided in a particular WEB page acts, but a pure service, as occurs at a telephone number of a telephone network.

The same applies to the WEB Page_A of Server_A, which is nothing more than a telephone directory (of WEB pages calling by phone call anonymously).

eg a list of WEB -Page " WEB -Vermittlung.com "

FULL TEXT SEARCH button ...... THEME TEL. number I know something about corrupt politicians and tell all electoral fraud * bribery 001 / XXX ...... * Misuse of authority in the ministerial office * Everything about cats 001 / XXX ...... room cats 001 / XXX ...... garden cats 001 / XXX ...... Wildcats 001 / XXX ...... · · etc. ............

Note: Since the callable exclusively by dialing a phone number pages are intentionally detected by a search engine hardly meaningful, as their only temporary assigned name NonameX.com (see also later) constantly changes for their access over the Internet, it is important to the topic The website "WEB-Vermittlung.com", which can usually be accessed via the internet protocol, also includes keywords so that the search engines can find the "WEB-Vermittlung.com" page under the search term entered (eg "electoral fraud", "bribery", "politicians") , Since the page " WEB -Vermittlung.com "eg represents the only or one of the few directories to which the calling telephone numbers of the anonymous WEB pages can be taken, the page" WEB -Vermittlung.com "therefore called by many users and therefore in the ranking of the search engines usually displayed at the top, the anonymous WEB page itself, however, not what should be. Ie the procedure is meaningful also if in addition to the anonymous ones WEB - Sites are still completely harmless topics, such as the example with the cats to be included, the WEB page with the cats then next to the call on the phone number or even just a direct link, under a regular WEB Page (with regular IT - Address), which is on a "harmless" server, can be called. The purpose of this page in the search engine is, then so that the search engine shows the overview with the cats at the top. The website " WEB -Vermittlung.com "also has a self-sufficient full-text search, so that the user can quickly find the desired terms within the list of topics.

In this example, the topic is indicated on the left side according to a lexicon, and on the right side is a US telephone number that the user has to dial to call up a WEB page no matter where the server is located worldwide. The left-hand column can also be opened via various information windows on the left-hand side, and an expert system can also be integrated in order to access the topics sought using intelligent search functions. Instead of topics, of course, any names and names can be provided, the one, for example, already out of print name of a WEB Page, eg for proper names, etc.

• • Der Benutzer (Client CL) ruft die WEB Seite „WEB-Vermittlung.com“ (entspricht WEB-Seite A erzeugt durch Server_A) über das Eingabefenster seines Browsers auf und schließt über diese WEB Seite und über seinen Telefonanschluß (der Rufnummer T-#), über welche er den Server_A telefonisch anruft, die Datenschleife, wobei gegebenenfalls durch einen Rückruf (Option) die vom Benutzer verwendete Rufnummer (T-#) nachgeprüft wird; und weiters die vom Benutzer verwendete Rufnummer für die Datensynchronisation im Server A abgespeichert wird.

Further options for the example of indirect addressing:

• • The user (client CL ) the WEB page calls " WEB -Vermittlung.com "(equals WEB-page A generated by Server_A ) on the input window of his browser and closes on this WEB page and on his telephone line (the phone number T- #), over which he the Server_A calls, the data loop, where appropriate, by a callback (option), the number used by the user (T- #) is checked; and the phone number used by the user for data synchronization in the server A is stored.

Note: In the case of a reputable provider that guarantees the security of telephone connections, the call of the user (client) can also be made using a IT Telephone, which can be reached at the telephone number (T- #).

Eine weitere Verbilligungsoption, die für alle vorgeschlagenen Beispiele gleichermaßen anwendbar ist, ist, daß der Benutzer eine SMS des für die Bildung der Datenschleife verwendeten Handy's abschickt und eine SMS als Rückantwort auf sein Handy erhält, welches er für die Datenschleife benutzt. Dabei muß der Benutzer die SMS nicht einmal über sein Handy abschicken, sondern er schickt als Text für die SMS einfach nur die Angabe seiner Telefonnummer T-#, an die der Rückruf durch den Server erfolgen soll.

Another cost-cutting option, which is equally applicable to all proposed examples, is that the user sends an SMS of the cell phone used to form the data loop and receives an SMS in response to his cell phone, which he uses for the data loop. In this case, the user does not even have to send the text message via his mobile phone, but simply sends the text of the SMS as an indication of his telephone number T- # to which the callback is to be made by the server.

special:

Für den Rückruf enthält das Handy einen SMS-Datenkonverter als Schnittstelle, mit dem die Texte erhaltener SMS als entsprechende Zeichendaten über die zur Bildung der Datenschleife DS vorgesehene Schnittstelle der Benutzer direkt in seinen Client Rechner direkt einspeisen kann, wobei dann der Text der SMS den vom Server gesendeten Zufallskode KODE entspricht.

For the callback, the mobile contains an SMS data converter as an interface, with which the texts of received SMS as corresponding character data on the formation of the data loop DS provided interface the user can directly feed directly into his client computer, in which case the text of the SMS the random code sent by the server CODE equivalent.

• • Anstelle, daß der Benutzer über seinen Telefonanschluß (der Rufnummer T-#), den Server_B telefonisch anruft, dessen Rufnummer er dem Verzeichnis (vgl. obiges Beispiel entnimmt), wobei auch hier die Option vorgesehen sein könnte, daß bei Anklicken der betreffenden Telefonnummer auf der Web- Seite „WEB-Vermittlung.com“ (WEB-Seite_A) die Nummer als serielle Daten wiedergegeben werden (z.B. akustisch, Infrarot, etc.), um sich das manuelle Wählen zu ersparen, ist bei diesem Beispiel die Option vorgesehen, daß die Anwahl des Server_B über eine SMS erfolgt, die an die angegebene Telefonnummer über die WEB-Seite „WEB-Vermittlung.com“ an den Server_B abzuschicken ist, wobei als Text der SMS die Rufnummer T-# des Benutzers vom Benutzer mitzusenden ist. Neben der Möglichkeit, daß der Benutzer dies von seinem Handy aus tut, kann er gegebenenfalls auch durch Anklicken der Nummer direkt vom Server_A an den Server_B die SMS abschicken, wobei als Text der SMS die Rufnummer T-# des Benutzers dann von der Software der WEB-Seite des Server_A automatisch eingesetzt wird (welche Server_A über die erste Datenschleife über den Server_A erhalten hat). Dies ist kein link im klassischen Sinne, da der Server_A keinen Aufruf der WEB-Seite_B des Server B vornimmt, sondern an den Server B nur eine SMS des Benutzers an eine nicht definierte WEB-Seite (sondern nur an den Server_B übermittelt).

For example, the received SMS characters in an acoustic signal (modem signal, or modulo 2 Sync signal with block repetition and sync bit frequency encoded, etc.) or converted into an infrared signal to the received SMS in the client machine CL read. Or the callback takes place via the telephone connection, also very cost-effective, if the calling back the server IT - Network used for this callback. There is again the option that the mobile adds another code within the data loop, which relates to the identification of the mobile phone and / or user (see later part of the description).

• • Instead of the user telephoning via his telephone line (the telephone number T- #), the server_B whose phone number he takes from the directory (see example above), where also the option could be provided that by clicking on the relevant telephone number On the web page "WEB-Vermittlung.com" (WEB-Seite_A) the number is displayed as serial data (eg acoustic, infrared, etc.) to avoid manual dialing, this example provides the option of that the selection of the Server_B is done via an SMS to the specified phone number on the WEB site "WEB-Vermittlung.com" to the Server_B is to be sent, being sent as text of the SMS, the number T- # of the user by the user. In addition to the possibility that the user does this from his mobile phone, he can optionally also by clicking the number directly from Server_A to the Server_B send the SMS, whereby as text of the SMS the call number T- # of the user then of the software of the WEB side of the Server_A is used automatically (which Server_A over the first data loop over the Server_A had received). This is not a link in the classical sense, since the Server_A does not call the WEB-Seiten_B of the server B makes, but to the server B only an SMS of the user to an undefined WEB-side (but only to the Server_B transmitted).

That In this case, the server A transmits to the server B the telephone number T- # of the user directly via the text of the SMS sent by him.

• • Da der Server_A auf der WEB-Seite „WEB-Vermittlung.com“ (WEB-Seite_A) keinen direkten link zur WEB-Seite_B (die durch Anklicken einer Telefonnummer ausgewählt wurde) aufweist, sondern der link erst durch die Dateneingabe des Benutzers (über die Datenschnittstelle) zustande kommt, erfolgt die Verlinkung zur WEB-Seite_B zwar sehr komfortabel, ist aber sowohl in technischer Hinsicht, als auch in juristischer Hinsicht kein link, da die WEB-Seite „WEB-Vermittlung.com“ nur einem üblichen Telefonverzeichnis entspricht (vergleichbar mit einem Branchenbuch, etc.).

The server B retrieves the telephone number T- # obtained via the SMS and transmits the complete Internet address under which the page selected by clicking the telephone number (from the table) can be called via the telephone connection to the client CL which assigns this number to the existing data loop WEB -Side_A sends. It can the WEB -Seite_A for calling the over the telephone connection T- # received as a data code address (name) to be called WEB Page also use a service that allows an anonymous call the WEB page, or with a corresponding plug-in on the client computer, the data loop over the input of the address (name) to be called WEB Page directly into the input window of the respective service for anonymous call the WEB Page are redirected (piping).

• • Because Server_A is on the WEB page " WEB -Vermittlung.com "( WEB Page_A) no direct link to WEB Page_B (which was selected by clicking on a telephone number), but the link only comes through the data input of the user (via the data interface), the link is made to WEB Page_B is very comfortable, but in terms of technology, as well as in legal terms, there is no link, as the WEB page WEB -Vermittlung.com "only corresponds to a usual telephone directory (comparable with a business directory, etc.).

The closer selection of a call to be called WEB Page takes place eg by extension numbers or it can after calling the WEB -Page_B an overview of the topics will be presented with real left click to the user.

Checking the authenticity of a WEB page:

When a WEB page is invoked with the interposition of multiple servers, the client needs to check the authenticity of the page. This can for example be done so that the server in question, which the sending and checking of the code ( CODE ) via which the data loop of a telephone network (ie via a telephone line dialed by the telephone exchange, in this case via the telephone connection to Server_B), generates an acoustic announcement via the telephone network to confirm the authenticity of the page when the broadcast CODE coincides with the returned or give a message, if this is not the case, ie the WEB Page that the client user on his machine CL looks, is not the one he wanted to call. In this case, the Server_A can transmit in this example still part of the split in two parts security code [KODE = KODE1, KODE2] to the server B (via SMS , or IT-network, also encrypted, etc.), to enable this preliminary check and then ask a question "Display web page, yes / no", so that the user the page (if forged) not even on his Calculator leaves. Thereafter, the second part of the code is again used to directly check the WEB page generated by Server_B.

Another example of the anonymous generation of a WEB page (see also Fig.19):

In the 19 (and also in the other figures 13 . 14 ) selected symbolic representations do not affect the actual data paths to the servers, which can indeed be very complex, but only those considered for the process.

The anonymously generated WEB Page is not always constantly on the page generating server, (the server_anonym, SANY ), but kept without Internet access on the server, or generated. Only when the server anonymously receives a telephone call concerning the call of the WEB page, eg with an extension number, does he copy the page corresponding to the extension number to another server (the server display, SDIS ) of a variety of registered WEB Pages with no content of their own and inserts the data corresponding to the page received into the blank page. Conversely, form data entered into this page will be returned anonymously to the server.

The server_display constantly changes (rotating) the name NonameX.com of the registered WEB pages, which it fills with the contents of the (or the) server _anonymously sent to it. If the data transfer to the client computer is transferred via the telephone line (option also includes the call address of the page to be called up), then this is done under the temporary name NonameX.com, under which the server _display currently displays the relevant page, with the server _display then displaying the NonameX.com the temporary name NonameX.com the WEB Page, so that NonameX.com can cause the user to call the NonameX.com page via the telephone connection that name as data on the preferred data loop to the WEB-Verification.com WEB page of the _display server.

• (1).......Der Benutzer loggt sich mit seinem Client Rechner CL auf dem Server SDIS über den Aufruf der WEB-Seite „WEB-Vermittlung.com“ ein und schließt über seinen Telefonanschluß T-# (oder Handy) die Datenschleife DS. Dabei hat der Benutzer den Server SDIS über das Telefonnetz TELCOM angewählt.
• (2).......Der Benutzer entnimmt der Liste auf der WEB-Seite „WEB-Vermittlung.com“ die Telefonnummer der aufzurufenden WEB-Seite, welche zunächst nur den Server SANY bezeichnet und wählt den Server SANY an, um ihn eine SMS mit dem Text der Nummer des für die Datenschleife verwendeten Telefonanschlusses T-# (oder Handy's) zu senden.

19 illustrates this process, with the three most important phases for calling the anonymous WEB page (the one from the server SANY is generated) with the steps 1 . 2 . 3 are marked:

• (1) ....... The user logs in with his client machine CL on the server SDIS about the call of the WEB -Page " WEB -Vermittlung.com "and closes the data loop via its T-# (or mobile) telephone connection DS , The user has the server SDIS over the telephone network TELCOM selected.
• (2) ....... The user removes the list on the WEB page " WEB -Vermittlung.com "the phone number to call WEB Page, which initially only the server SANY designates and selects the server SANY to him one SMS with the text of the number of the telephone line used for the data loop T- # (or mobile phone) to send.

This process can also be done automatically in the Prinizip directly via the Internet (also by mouse click) (because the server SDIS the telephone number has already been checked via the data loop DS) if the user does not need a proof of authenticity of the anonymously accessed WEB page, or checks this again later via a telephone loop, etc.

The server SANY retrieves the user T- # and sends via the data link (acoustic, infrared, SMS, etc.) via the client computer CL the user's IT - Address (under which an IT connection can be recorded with the server SANY) to the server SDIS over the existing data coupling DS the client to the "WEB-Vermittlung.com" of the server SDIS ,

• (3)........Der Server SDIS nimmt unter der erhaltenen IT- Adresse die Verbindung zum Server SANY auf und übersendet dem Server SANY folgende Daten:
  • - jene Telefonnummer T-# (des Benutzers), welche jener Sitzung zur WEB-Seite „WEB-Vermittlung.com“ (über die Datenschleife) erhaltenen (Telefonnummer T-#) entspricht, unter der er (über die Datenschleife DS) die Aufrufadresse des Server SANY erhalten hat,
  • - den (nicht registrierten) Bezugsnamen oder eine Feldadresse der Datenbank, zur Bezeichnung der gewünschten WEB-Seite, die der Benutzer aus der Themenliste durch anklicken ausgewählt hat,
  • - und noch den Namen einer (von vielen) registrierten WEB- Seiten NonameX.com (die z.B. auch „Pseudonym_583.de“ heißen kann, vgl. später), die gerade nicht benutzt wird und keinen Inhalt hat, und unter welcher der Inhalt der aufgerufenen und vom Server SANY anonym erzeugten WEB-Seite dargestellt werden soll.

Detects the server SDIS (eg after clicking a respective button on the WEB Page "WEB-Vermittlung.com") an expected IT - Address (of any arbitrary) server, then this is confirmed to the user, "server is called".

• (3) ........ The server SDIS takes below the received IT - Addresses the connection to the server SANY and sends the server SANY following data:
  • - that phone number T- # (of the user) which that session to WEB -Page " WEB -Vermittlung.com "(via the data loop) (telephone number T- #), under which it (via the data loop DS ) the call address of the server SANY had received,
  • - the (non-registered) reference name or a field address of the database, to indicate the desired WEB page, which the user has selected by clicking on the list of topics,
  • - And still the name of one (of many) registered WEB pages NonameX.com (which can be called eg "Pseudonym_583.de", see later), which is currently not used and has no content, and under which the content of called and from the server SANY anonymously generated WEB page should be displayed.

The SANY server responds by checking the content of the relevant (desired) WEB - Page the server SDIS again, at the address of the telephone number T- # of the subscriber that he used in the data loop. As stated earlier, the entire synchronization of the processes of server SDIS and server SANY under this telephone number T- # take place. The server SDIS copies the contents of the telephone number T- (or to the relevant session via its to WEB Page "WEB-Vermittlung.com") from the server SANY received WEB Page then in the empty WEB Page under the name of WEB Page "pseudonym_583.de", where the user this WEB Page also by entering this name in its browser window or by typing in a special service (for the anonymous call).

Respectively. In order to make things more comfortable the server sends SANY over the telephone network ( 2 ) TELCOM the invocation address he has received from the SDIS to allow them through the data loop DS under the support of a plug-in software directly into the browser window of the user can be entered automatically. Furthermore, of course, the alternative is the call received via the data loop DS directly to the server SDIS continue to lead. In all cases, the call is guaranteed not directly on the page " WEB -Vermittlung.com ", which is called" Pseudonym_583.de "(the one called WEB Page) is not known at all, because the allocation of the currently free page (without content) to the representation of the server SANY received on the WEB page does not have the " WEB -Vermittlung.com ", but via a Server SDIS running on the server software running from the" WEB -Vermittlung.com "only the telephone number T- # for the synchronization of the process passes, which corresponds only to the telephone connection of the T- # user and has otherwise no connection to the further procedures. Excluding the option where the transfer of a field number from the advertisement (the telephone number list of the WEB page " WEB -Vermittlung.com ") to the server SANY (to assign the selected WEB page), which is optional, since the user can also communicate this (optically displayed) field number via the keyboard of his phone directly to the server SANY, which then assigns the desired WEB page via this field number.

The in the list of web page " WEB -Vermittlung.com "displayed telephone numbers correspond thus no left, but only one advertisement.

If the browser is extended (eg also directly) so that it can link (link) the information distributed to several registered WEB pages and display it in a common window, then the matter becomes (because of the constant change of the name of the information representing WEB Pages NonameX1.com .... NonameXn.com) legally, even more complicated.

Reference to 13a The user has identified himself by using his telephone, eg a mobile or landline telephone, which has a telephone number T- # (which is recognized by the server I as the called party or by a received SMS) using the preferred data loop DS (server I → CL → TELCOM ( 1 ) → Server I, 13a) logged in, the server I, the code signal KODE ( 1 ), see. 13a , to the client computer (CL) on which the browser makes the presentation of the WEB side, as a loudspeaker signal L transmits and over the user-made data coupling DS (data loop) via the microphone MIC of the phone T for comparison (for identification) gets back. Respectively. if appropriate, the data link DS also via the reverse path from the server to the handset L of the telephone T ( 13b) can be routed back to the server via the microphone MIC of the client computer CL (server I → TELCOM ( 1 ) → CL → Server I, 13b) ,

The data loop DS (server I → CL → TELCOM ( 2 ) → Server II → Server I, or vice versa) is server when the user calls (via TELCOM2) via the Internet connection II → Server I (and vice versa) not yet closed, which only after notification of IT - Address of the server II to server I takes place (over the telephone connection of the data loop DS, as discussed above) or it can also server I in advance (via a direct link) a connection to the server II For example, if the method is used for other applications, such as the connection to a certification server described below for receiving / checking a digital signature. In this case, the server sends II then the server I , corresponding data with the address of the telephone number used for logging on the preferred data loop T- #, ditto vice versa, if server I to the server II Sends data.

Call forwarding: It is further evident that the telephone number to be called can be routed via a call forwarding via which the callbacks of the (or possibly the) server station (s) involved in the method can also take place. The same applies to the use of SMS, IT - Telephone connections, etc. as further data channels for the telephone connection of the terminal (T- #) for establishing the data loop on the client side.

In this case, the interposition of a trusted server is also provided, if necessary, e.g. to the Orststarif or free tariff an SMS (possibly also a call) receives, whereby in the SMS as text then two call numbers, which are marked by letters at the beginning are specified [s000111h22222222]. The first phone number (s) refers to the name of the server, but the name "000111" at the trusted server again in a phone number or e-mail address, or a direct call a server over the Internet, etc., is implemented, and the second number (h) relates to the specification of a separate telephone number T- #, eg a mobile number.

The trust server either negotiates the invocation of the web page to be called anonymously, and guarantees the user the authenticity of the called web page, or after the trusted server sends the received SMS [s000111h22222222] to the actual web server (the server anonymous , SANY) calls this using a cost-effective IT -Telephoneats the user back to the T- # connection, which via an acoustic coupling, or SMS, infrared, etc., the user the data loop DS to the other server, (the server_display, SDIS ), which displays the telephone number list via its WEB page "WEB-Vermittlung.com", forms the relevant one WEB Page in the manner described. The trusted server stores the calls to the WEB Pages of the server anonymous, SANY (or more, depending on the number of the received SMS ), but forwards them to another server, which like a name server, for example, in the first place of the SMS standing first phone number (s) in a IT - Translates address and replies to the trusted server. This data exchange takes place under the servers, as always, encrypted accordingly.

Encrypted presentation of WEB pages:

As the provider of WEB Page is hidden by the preferred Verfahrern perfectly, it is logical that such a provider, for example, e-mails from a server in question (eg server II ) can be looped through to hide the sender. Then the sender is called eg "Pseudonym_081.de" and can even be disguised as an encrypted WEB page. In fact, an encrypted browser is already long overdue in order to make WEB pages accessible only to a specific circle that has the corresponding key. Since now the sender or producer of the WEB page can no longer be determined, further e-mails can be disguised as encrypted WEB pages, and of course still as text or image, etc. encoded without being able to determine the sender, can be sent, the Internet will certainly be more interesting from a certain total encryption in many areas. Encryption without borders is the motto. Not anymore It can be distinguished whether an encrypted page is a WEB page or a private email in which the text of the email geometric form of pretty girls is encrypted (because the server then simply prepares the page accordingly) Furthermore, even the sender (or owner) of the WEB site can no longer be determined, eavesdropping is actually becoming more complicated.

Of course, this only makes sense if the provider of a WEB Site can safely hide itself so that the server is not bugged by intrusive attackers. This means that the task of securely hiding the sender of a WEB page, especially by calling the WEB page completely anonymously while bypassing the Internet using another network (eg by calling a telephone number T- #), sets a milestone in the encryption technology in the IT - Area. The network via which the WEB page is called and which here is a telephone network, could also be any other one, eg a radio network including using a Morse channel, etc. Also different networks in the production of the preferred data loops for servers I and server II to use is possible.

In this example, the server identifies II the user's telephone call also via a data loop ( 2 ), where the option exists here, the data loop ( 2 ) also over several servers, here over the two servers I and server II to continue, ie via the (first) called (and at the browser of the client by the user as currently selected) WEB page 1 of the server I to form, and the server II generated, forwarded to the client and encrypted CODE ( 2 ) over the server I to go through. The decryption of the server II sent codes CODE ( 2 ) is then retrieved by the server again II ,

Collateral for the data loop:

• It is evident that the encryption of the code sent over the data loop (KOSE) can also be made by falsification, i. if an attacker intercepts the code sent to the data loop from the server to return it to the server on the other channel, i. the server receives the same code over both data paths, he still recognizes him as wrong. For this purpose, the server sends to one of the terminals involved in the data loop an encrypted algorithm for the defined falsification of the code (or uses such) and checks upon recovery of the code, after decoding the corruption, whether the code is correct (ie with the sent out matches).
• A further variant is to send to one of the terminals involved in the data loop an algorithm for the defined interruption after defined pause times / transmission times of the code, and to check these times when returning, ditto if necessary, from one of the terminals involved in the data loop to one check the code added to the particular algorithm, etc. The thus interrupted code is then reassembled before the check. If the time periods or the duration of a code fragment and the associated pause do not match those calculated in the server or specified by the server, then the code is considered fake.
• • If the code signal is routed through several servers, then this server can also alienate the code passed via the data loop following an encryption algorithm ( CODE ...), whereby the responsible server decrypts this alienation again.

Further procedure of the example:

It will be between servers I and server II a corresponding data channel (channel CL- T- #) provided to the code signal CODE ( 2 ) between the two servers.

In 13a is this data loop connected via both servers ( 2 ) formed via:
(Server II → Server I → CL → TELCOM ( 2 ) → Server II)
or in the variant 13b :
(Server II → TELCOM ( 2 ) → CL → Server I → Server II)

Example too 13a : This data channel (channel CLT- #) connected in server I becomes the server II via the server I (via the Internet) sent further code signal KODE ( 2 ) provided to the user as well for a data link DS, as previously for the generated by the server I code signal CODE ( 1 ) was made. However, the code signal works CODE ( 2 ) the server I only as mediation, or provides the data channel. Generating and sending out the code and comparison takes place in the server II , However, in principle, the server I, the code signal KODE ( 2 ) produce and the server II only those over an internet connection IT "Extended" telephone connection for the transmission of the code signal KODE ( 2 ) to server I. Of course the same principle works in the opposite direction, too 13b shown as a variant (alternative) and has already been explained at the beginning for data coupling on the client computer CL.

In this example, (involving Server II and server I ) by the data loop closed over both servers ( 2 ) directly by the code signal CODE ( 2 ) check whether the user is calling for his phone call from the server II (directly or via a call forwarding) the same telephone line T- # (a relevant telephone number) used, as he also in the first identification when logging into the WEB -Page 1 for the data loop ( 1 ) of the first code signal code signal CODE ( 1 ) of the server I has used. In this case, it is also possible via this data loop, ie via the connection considered as secure or unmistakable (eg via a dialing office or consisting of radio channels) (in this case, the telephone connection between client CL and server II ) both from the server II to the server I , as well as from the server I to the server II (in each case over the over the coupling with the Client CL encrypted data, each server ( I respectively. II ) within this encryption its check code ( CODE 1 . CODE 2 ) can arbitrarily add.

• • Ebenso kann bei diesem Beispiel z.B. Server II an das Handy über die Telefonverbindung (d.h. unter Umgehung von Server I) einen Algorithmus, oder z.B. Daten für einem String zu einer vom Handy zu erzeugenden Pausenunterbrechung des zurückgesendeten Kodes ablagen, oder auch nur einen Algorithmus zur einfachen Veränderung des Kodes (KODE 2) abspeichern, über die der Kode verfremdet wird, somit der Server I den Prüfkode (KODE 2) des Server II nicht dahingehend verfälschen kann, daß Server I fälschlicher Weise den Prüfkode als positiv bewertet.

It can, if necessary, the coupling at the client CL also bidirectional, ie the client computer CL couples, or transmits via the phone or mobile phone, both input and output data of the respective WEB Page, ditto the phone.

• • Similarly, in this example, for example server II to the phone over the phone connection (ie bypassing server I ) an algorithm, or, for example, data for a string to a generated by the mobile phone break interruption of the returned code, or even just an algorithm for easy change of the code ( CODE 2 ), over which the code is alienated, thus the server I the test code ( CODE 2 ) of the server II can not falsify that server I erroneously rated the check code as positive.

Conversely, server can I about the IT - connection to the client machine CL and the data link to the phone (ie bypassing server II ), the mobile phone the algorithm for alienation of the code ( CODE 1 ) store, over which the code is alienated, thus the server II the test code ( CODE 1 ) of the server I can not falsify that server II wrongly rated the test code as positive.

That means both servers I and server II can via the shared data loop (via the WEB page 1 ) independently of each other their test codes ( CODE 1 . CODE 2 ) and simultaneously use a common loop (through their connection via the Internet), via which they can receive data from the user's device (eg mobile phone), intended for both servers, and also verify the telephone loop via their check codes ,

Thus, the option exists that server I and server II independently of each other in each successive data loops (each telephone line T- #) can make the synchronization of the processes, or can make the synchronization of the processes via a common data loop (telephone line T- #). For the latter variant, which is preferably carried out with a mobile phone, the mobile has two independently functioning and also to be configured alienation functions for alienating the received and forwarded to form the data loop codes. For the code fed from the coupling interface (from client CL or another cell phone) (acoustic, infrared, etc.) to forward it over the telephone connection, and one for the code fed from the telephone line to forward it via the coupling interface (to client CL or another mobile).

Thus, for this example, the two possibilities (the full or half duplex method) are the code signal generated by the server II CODE ( 2 ) either via server I transmitted via the user's data loop DS and the telephone connection ( 2 ) to the server II get back again ( 13a) , or in the opposite direction from the server II generated code signal CODE ( 2 ) over the telephone connection ( 2 ) and via the data loop DS the user and the internet connection ( IT ) from the server I to the server II get back again ( 13b) ,

Further training variants and general options for selecting the server by the user (T- #):

• - a) Dabei besteht die allgemeine Option, z.B. für ein Handy, daß in allgemeiner Ergänzung (und direkter Anwendbarkeit) durch akustische Einspeisung eines Modem Signals (akustische Kopplung), oder auch alternativ über eine Infrarot Schnittstelle vorgenommene Einspeisung (als weitere Option) eine von einer WEB-Seite über eine solche Schnittstelle (oder eine andere Variante, etc.) ausgegebene Telefonnummer direkt in das Telefon, bzw. Handy eingelesen werden kann, um die Nummer dann anschließend automatisch wählen zu können. Diese Option eignet sich auch allgemein sehr gut für im WEB angegebene Telefonverzeichnisse, bzw. Telefonnummern, auch unabhängig von der bevorzugten Anwendung.

• - b) Oder, wenn ein Standart Telefon ohne eine solche Option verwendet wird, dann kann vom Benutzer auch nur eine bestimmte Servicenummer angewählt werden, die eine Anrufweiterschaltung zu jeweils jener Nummer anwählt, welche der Benutzer über eine einfache akustische Kopplung (vom Lautsprecher seines Rechners zum Mikrofon seines Telefons) herstellt, wobei diese Anrufweiterschaltung dann den Server II inklusive mit gegebener Durchwahlnummer einspeist. Auch diese Anwendung ist in allgemeinster Form unabhängig vom erfindungsgemäßen Verfahren anwendbar und kann für alle im Telefon angezeigten WEB-Seiten verwendet werden.

For a further training variant, the telephone numbers to be dialed by the user are not only displayed as text in the WEB page, but also still encoded as a signal (eg acoustically according to a modem signal) and issued by the client computer CL accordingly and fed into the used terminal (landline, mobile phone, etc.) of the telephone line T- # used by the user, for example, the easier compatibility because of acoustic coupling for cheaper versions, or even over Infrared for slightly more expensive versions.

• - a) There is the general option, eg for a mobile phone, that in general supplementation (and direct applicability) by acoustic feed of a modem signal (acoustic coupling), or alternatively via an infrared interface made feed (as another option) one of a WEB page via such an interface (or another variant, etc.) issued phone number can be read directly into the phone, or mobile phone to then automatically dial the number. This option is also generally very well for specified in the WEB telephone directories, or telephone numbers, regardless of the preferred application.

• - b) Or, if a standard telephone is used without such an option, then the user can also only a specific service number are dialed, which selects a call forwarding to each number, which the user via a simple acoustic coupling (from the loudspeaker of his computer to the microphone of his phone) produces, this call forwarding then the server II including feeds with a given extension number. This application is applicable in the most general form regardless of the method according to the invention and can be used for all WEB pages displayed in the phone.

In both cases (a, b), the user copies on the relevant WEB page 1 (represented by any general server A ) drag and drop (via the clipboard of its operating system) the phone number into a window of a second service webpage (represented by service server TCOM). The service server TCOM is operated, for example, as a free service of a mobile phone manufacturer or a network operator, etc. After the user has sent the telephone number to the service server TCOM via the window of the relevant WEB page, this WEB page generates the signal output at the client computer CL the user, where he reads this user (acoustically or via infrared, etc. output signal) in the phone, which decodes the signal corresponding to the phone number and enrolls in the dialing memory, while the user can, for example, still in the WEB page of the service server TCOM Add a comment that will be stored on the cell phone for the number and displayed as a selection help (text) for the selection of the phone numbers. It is evident that in the case of networking the arbitrary, general server A with the service server TCOM, the user can save the input of the telephone numbers in the WEB page of the service server TCOM (via) drag and drop, and then by clicking on a relevant telephone number , or a selection field for the telephone number selection, etc., on the general WEB page of the general server A, by a standard link, a small window of the service server TCOM is called to indicate that the service server TCOM now via its WEB page Output of the signal corresponding to the telephone number (eg as modulo 2 Sync signal with block repetition), which the user can feed into his mobile phone.

1. a) die Eingabe der Adresse, bzw. des Namens einer aufzurufenden WEB-Seite in den Client Rechner (über Signal des Telefonanschlusses T-#), wobei dies über eine Plug In Software, die den Browser des Client Rechners CL unmittelbar unterstützt, oder über eine betreffende direkte Unterstützung des Internet Servers erfolgen kann,
2. b) die Ein- Ausgabe von Daten, die über die Datenschleife des Client-Rechners CL von einer Telefonverbindung zu einem Server, bzw. von einem Server zu einer Telefonverbindung gesendet werden sollen, insbesondere der Prüfkode (KODE) zur Prüfung der Datenschleife,
3. c) die Umsetzung einer am Endgerät der Telefonverbindung über den Telefonanschluß T-# (Telefonapparat oder Handy) erhaltenen SMS, welche einem Datenkode, bzw. Daten entsprechen, in einen Datenstrom, der über die Datenschleife und der direkten Datenverbindung des Client Rechners CL dem Server gesendet werden,
4. d) die Umsetzung einer am Client-Rechner erhaltenen SMS, welche einem Datenkode, bzw. Daten entsprechen, in einen Datenstrom, der über die Datenschleife (auf der Client Seite CL) durch die Telefonverbindung (Telefonapparat oder Handy) dem Server gesendet werden,
5. e) die Verfremdung des über die Datenschleife erhaltenen und wieder abgesendeten Kodes (KODE) derart, daß der erhaltene Kode nach einem Algorithmus verändert (verschlüsselt) wird, welcher zur Wiederherstellung des Kodes (Entschlüsselung) im Server wieder rückgängig verändert wird, wobei

das die Datenschleife betreffende Endgerät (z.B. Handy) an der Koppelstelle der Datenschleife die Verschlüsselungsdaten, bzw. den Algorithmus jeweils von der Übertragungsseite bezieht, von der der zu verfremdende Kode (KODE) bezogen wird, welcher in die andere Übertragungsseite (nach diesem Algorithmus) verfremdet weiter gegeben wird und gegebenenfalls (falls erforderlich) für beide Übertragungsrichtungen unabhängig voneinander die Verfremdung (Verschlüsselung) über die Koppelstelle durchgeschleiften Kodes mit voneinander völlig entkoppelten Verschlüsselungsdaten erfolgt.In further development for the design of a telephone set or mobile phone when using the preferred coupling for the preferred data loop (to / from the server) this use includes the following additional data:

1. a) the input of the address, or the name of a call WEB Page in the client machine (via T-# telephone line signal), this being via a plug-in software, which is the browser of the client machine CL directly supported, or via a direct support of the Internet server in question,
2. b) the input of data over the data loop of the client computer CL be sent from a telephone connection to a server, or from a server to a telephone connection, in particular the test code ( CODE ) for checking the data loop,
3. c) the implementation of a telephone terminal on the telephone line T- # (telephone or mobile phone) received SMS , which correspond to a data code, or data, into a data stream that passes through the data loop and the direct data connection of the client computer CL sent to the server,
4. d) the conversion of an SMS received at the client computer, which correspond to a data code, or data, into a data stream which flows over the data loop (on the client side CL ) are sent to the server through the telephone connection (telephone or mobile),
5. e) the alienation of the code received and returned via the data loop ( CODE ) in such a way that the received code is changed (encrypted) according to an algorithm which is changed back to restore the code (decryption) in the server, wherein

the terminal concerning the data loop (eg mobile phone) at the coupling point of the data loop receives the encryption data or the algorithm respectively from the transmission side from which the code to be alerted ( CODE ), which is given alienated in the other transmission side (according to this algorithm) and optionally (if necessary) for both directions independent of each other the alienation (encryption) looped through the coupling point codes with completely decoupled encryption data from each other.

• 1) eine akustische Kopplung über den/das bestehende(n) Hörer und Mikro des Telefons. bzw. Handy's, gegebenenfalls auch einem weiteren Handy und/oder Lautsprecher/Mikro eines Client Rechners;
• 2) die Kopplung zwischen Handy, gegebenenfalls auch einem weiteren Handy und einem Client Rechner über die bestehende Infrarot Schnittstelle;
• 3) die Kopplung zwischen Handy gegebenenfalls auch einem weiteren Handy und einem Client Rechner über bereits vorhandene Kameraoptik und für die Gegenseite einer entsprechenden Helligkeitsmodulation (oder Farbe, etc.) einer auf einem Display oder Bildschirm dargestellten graphischen Fläche (z.B. Kreis, Quadrat, etc.);
• 4) die Kopplung über den SMS Kanal des Handy, wobei die SMS über die Datenkopplung als Datenstrom (je nach Datenrichtung) eingelesen, bzw. ausgelesen wird;
• 5) die Herstellung der Kopplung über durch Hardware und/oder Software geschaltete Verbindungen, wobei anstelle eines Benutzers gegebenenfalls auch ein Server die Bildung der Datenschleife DS anstelle eines Client CL vornehmen kann.

As already stated, for the coupling of the telephone set or mobile phone to form the preferred data loop to a client Calculator CL or optionally also to a further mobile phone, three variants are particularly preferred, wherein, if necessary, this coupling can also be bidirectional:

• 1) an acoustic coupling over the existing handset and microphone of the telephone. or mobile phone, possibly also another mobile phone and / or speaker / micro client computer;
• 2) the coupling between the mobile phone, possibly also another mobile phone and a client computer via the existing infrared interface;
• 3) the coupling between the mobile telephone and, if appropriate, also another mobile phone and a client computer via already existing camera optics and for the opposite side of a corresponding brightness modulation (or color, etc.) of a graphical area displayed on a display or screen (eg circle, square, etc.). );
• 4) the coupling over the SMS Channel of the mobile phone, wherein the SMS is read in via the data coupling as a data stream (depending on the data direction), or read out;
• 5) the establishment of the coupling via connections switched through hardware and / or software, wherein instead of a user, if appropriate, a server also forms the formation of the data loop DS instead of a client CL can make.

For these applications, in addition to the variants for the preferred method also sought for independent most general protection.

Another good application for the specified method is e.g. Proof that certain terms and conditions disseminated through the WEB have been read when the data loop is formed through this site, or even the linking of certificates.

The following chapter deals with the linking of servers, which are authorized to receive certified digital signatures (and are eg installed and supervised by a notary) with arbitrary servers, which are not subject to any official control and still present documents to which the client user (user ) can issue a digital signature, but with the advantageous difference that the undersigned, who provides the digital signature for such a document, has still secured the counter - document containing an equivalent and possibly even notarized signature from the supplier to which Document the user submits his signature. This backup is done (e.g., involving a notary where the server is located) exactly to the document that the user of a particular WEB page signs with his digital signature.

Mobile phone (or possibly a landline phone) used for the digital signature of a WEB page:

• - um Dokumente, auch erhaltene E-Mails mit digitalen Unterschriften zu versehen, die auf einem beliebigen Server dargestellt sind, und unter Aufsucht eines bei einem Notar oder Gericht aufgestellten Zertifizierungsservers digital unterzeichnet werden;
• - um abgesendete E-Mails mit digitalen Unterschriften zu versehen, die an einen beliebigen Server adressiert sind, und unter Aufsucht eines bei einem Notar oder Gericht aufgestellten Zertifizierungsservers digital unterzeichnet werden;
• - um Käufe über beliebige WEB-Seiten abzuwickeln, Einzahlungen auf Bankkonten, Überweisungen, usw. zu protokollieren, beliebige Vorgänge und Ereignisse welche Einwirkung eines Servers und eines Handys gesteuert sind (z.B. auch die Zugangskontrolle zu einem Bankschließfach, etc.) unter Aufsucht eines bei einem Notar (oder auch in einer Bank, etc.) aufgestellten Zertifizierungsservers digital unterzeichnet abzuwickeln.

for use:

• - to digitally sign documents, including received e-mails, displayed on any server, and digitally sign them in the name of a certification server established at a notary or court;
• to digitally sign outgoing e-mails addressed to any server and digitally sign them upon the search of a certification server established at a notary or court;
• - To make purchases on any WEB pages, to record deposits on bank accounts, transfers, etc., any events and events which are controlled by a server and a mobile phone (eg, access control to a bank locker, etc.) under the search of a digitally signed to a notary (or even in a bank, etc.) set up certification server.

• - eine Pin Kode Eingabe, und/oder
• - ein Fingerabdruck Sensor, und/oder
• - eine Stimmenerkennung, und/oder
• - eine Iris Abfrage

In addition to the possibility of using exclusively a code entered in a WEB page as a digital signature, further development variants are described here which, in addition to this code, also use variants as alternatives or in simultaneous use for further security and a sensor system for identifying the person, below Person sensor called, with the following variants and options concern:

• - a pin code input, and / or
• - a fingerprint sensor, and / or
• a voice recognition, and / or
• - an iris query

The valid recognition of the fingerprint and / or voice, ditto possibly via the WEB camera made iris analysis is done for cost reasons in the best of the phone dialed server, with a pre-detection, however, can still be made in the phone. The possibility of the preferred method further provides a security, twice, once to test whether the ATM is actually operated by the right server, and further whether the phone communicates with the right server over the telephone network. Both possibilities of forming the data loop DS (serial to 14a and / or in parallel 14b) be used for the purpose of this recognition. In the serial data loop ( 14a) the mobile receives over the safer connection, eg over the telephone connection from the server the confirmation that the loop was positively examined by the KODE sent by the server. In the parallel data loop ( 14b) however, the phone can also determine the more secure connection via the KODE sent by the server.

It is evident that the method described below for issuing a digital signature can not only be used for a WEB page, but also at an ATM connected to the relevant server (via which the data loop is closed) to clear money , or even to open an apartment door, the electric lock is then in communication with the server, the opening signal, however, is sent as an encrypted signal to the lock from the phone directly to the lock (in addition to HF via infrared interface, etc.). Advantage: The server alone can not operate the lock without using a cell phone (as a key).

Procedure for this example (for opening an electronically locked lock): If the user is positively recognized (as the creditor), the server generates a random code (KODE), which he sends to the lock. Furthermore, the server sends the code ( CODE ) also to the mobile phone, so this the lock this code as opening code transmitted. If the code matches, but here at the castle (ie the client CL ) is checked, then opens the lock, this is not the case, the server aborts and registers the opening attempt with date and time, or optionally stores one more about a WEB Camera with a sent photo (video), which documents the opening attempt, so that the claimant may be able to see him (eg automatic call on his mobile phone and automatic communication via e-mail, etc.). The data loop with a code check at the client CL is here, in contrast to the serial data loop with code check at the server, referred to as a parallel circuit and the differences below with reference to 14a and 14b explained in more detail.

Locksmith: An authorized locksmith, for example, can gain access via a mobile phone under the power of his digital signature via any mobile phone in which the owner's fingerprint (usually the homeowner) is to be entered, giving the identity number the mobile phone for this one-time operation this fingerprint (in the server) is assigned, which is in the granting of authorization for the locksmith service to open the door (against the digital signature of the locksmith).

Instead of entering a PIN code, or as a supplement, it is expedient to use a voice recognition, the user simply indulges a text transmitted as text message on his mobile phone display. Where appropriate, these texts can also be spoken by the user as a pattern on a corresponding server in the certification of the signature, etc.

In the case of recognition for a digital signature, for example, the procedure can be as follows: Entering an optionally even short pin number generates an initialization signal which causes the mobile phone to enter the certification server SMS to send, which responds immediately with an SMS, which relates to the text to be spoken by the user in the mobile phone and is displayed on the display of the mobile phone. Another option is to enter a short pin number before speaking. Furthermore, in addition to or as an alternative to voice recognition, the data for the fingerprint analysis can be sent to the certification server, the certification server first sending a randomly generated encryption code to the mobile as input parameter for an algorithm encrypting (alienating) the one sent in the mobile phone Data.

It is expedient to design the mobile phone so that encrypted, sensitive data concerning a fingerprint and / or a voice recognition and / or an iris query during the existence of the preferred data loop DS (checked via the server CODE ), or during the examination of the data loop by a CODE , sent to the server in question, or that the cell phone does not send the data to the server concerned, if the examination of the data loop (or the code CODE ) negative. This ensures that sensitive data, not even sent from the phone, when the examination of the endpoints of the connection (phone server / mobile / WEB - Server) does not match the desired connection.

If the user does not follow the actions to be taken within a time-out period initiated with the initialization of the process, then the server will abort the process and possibly only permit a limited repetition of initialization attempts, as is also the case with the usual simple pin entry at ATMs.

In conjunction with the preferred data loop ( 2 ) should be submitted to any WEB page "WEBX.com" any server (eg from Server I, which may also be on the Fiji Islands) a digital signature on a corresponding mobile phone, in which case the server II is used as a verification server to verify the digital signature and should be well secured and well-monitored by a notary or court, or a certification authority.

In this application, the procedure is as follows: The user has called a WEB page "WEBX.com" which is from the server I is generated.

For this check of a digital signature, first the check is made as to which telephone number T- # of the mobile phone the user is using the preferred data loop in the server (here server I ) logs in. By clicking on a button on the relevant WEB page of the server I, the server stops I to the certification server II a data connection, if none existed (concerning other participants or users).

The server sends II (Certification Server) the one generated by a random number generator CODE ( 2 ) and receives it for examination over the already data loop 2 (either after 13a or after 13b) , ie on the WEB page "WEBX.com" (which has a corresponding interface to support a digital signature) back, with over CODE ( 2 ) the server II for this application checks which telephone connection, in particular which cell phone (ie which number T- #) during this data loop 2 is used. In this application, there is the CODE ( 2 ) not only from the server II generated identification code for determining which cell phone is in the data loop, the phone number of the phone T- # eg by a callback of the server II is checked again and this callback the data loop 2 is then formed, but the phone generates in this data loop 2 another identification code, here as a personal identification code ( PIC ), similar to the additional data added for cashless payment by mobile phone in the identification data loop (data loop DS), as already explained in detail. In addition to the addition of the personal identification codes ( PIC ) alienates the phone from the server II received CODE ( 2 ) for the purpose of encryption according to a secret algorithm, the server II For this purpose, advance appropriate parameters (as input variables) to the mobile via the secure, direct connection, ie over the telephone network (T- #) loads. The to the server II returned CODE ( 2 ) is in the server II then decrypted again.

The personal identification code ( PIC ), in addition to, or rather as part of CODE ( 2 ) over the data loop 2 the server II is also transmitted, corresponds to a standard code as used for the transmission of a digital signature and may still contain the necessary additional data (as an option), such as the data for the identification of a fingerprint and / or an audio text for voice identification or optical image of an iris, or a common pin code, etc., thus in addition to the server II sent out and alienated in the phone code CODE ( 2 ) optionally a long block of data sent back as the server CODE ( 2 ) over the data loop 2 is transmitted. In the mobile then takes place for this purpose a corresponding formatting, which is the server II received code CODE ( 2 ) in the encryption in such a way that a falsification of the block also encodes the code KODE (from the server via the data loop to the mobile phone). 2 ) with falsified.

Ie in an advantageous development is provided, the personal identification code ( PIC ), which is actually only generated and added to the user's terminal (which in this case is the mobile phone), and the original CODE ( 2 ), who already through the server II is generated, and is only transmitted back to connect via an encryption so inseparable that although manipulations are not possible anyway, already the approach to manipulation is further complicated. Thus, the server II sent out original CODE ( 2 ) in the terminal of the user (here mobile phone) not only alienated and looped through, but after adding the personal identification code ( PIC ) in the phone again and further encrypted when receiving back in the server II decrypted accordingly as well as from the specific mobile phone data ( PIC ) so that the originally emitted CODE ( 2 ) after its recovery (decryption), or if appropriate, the sent can be assigned to the associated WEB page "WEBX.com" of the server I, or the associated session whose data loop 2 about in the server II determined telephone number T- # of the user (via which of these CODE 2 of the server II ) in the preferred data loop (via the IT Connection between server I and server II , see. 13a . 13b . 19 ), to find.

Briefly summarized, the following steps have been performed in this process so far.

1. Login the user via data loop T- # into the page "WEBX.com" of the server I ; Note: If server I is dialed via T- #, then he can directly determine the telephone number of T- # via the separate data loop (DS = 1) T- #. If this selection is to be spared the user, the data loop (DS = 2) is transmitted via both servers (via the IT Connection between servers I and server II ) closed, using this common data loop 2 (via which both servers are involved, both servers can determine the phone number of T- #.

2. After receiving a command via the WEBX.com page of the server I : Existing IT Connection between servers I and the certification server (server II ) if not present, then build up, taking the server I the certification server server II dials and the identity of the server II reviewed. In doing so, the existing procedure can be used additionally for this check by the server I eg over its fixed net telephone connection T - ### the server II dials automatically and via a parallel or serial data loop DS = T - ### (possibly with encrypted acknowledgment from server II ) the authenticity of server II reviewed.
Note: For this test, the data loop DS is not by a user or operator but by automatic coupling (semiconductor switch, relay, port addressing, etc.) between the telephone line T - ### and server I performed. The formation of a parallel loop here has the advantage that the server II corresponding 14b the one generated by a random number generator CODE for both channels ( 1 and 2 , here T - ### and IT ) Although internally generated the same, but by the encryption (alienation of a channel or both channels, here 1 and / or 2) unequal codes over the data lines ( 1 and 2 ) sends to the client; this is the server I, over which the data loop DS is formed (by appropriate hardware connection), the server I the alienated sent code after with server II reconstructed algorithm so that it (with correct looping 2 ) for both channels 1 and 2 ( 14b) becomes identical again (1 = 2), thus the authenticity of the server I selected server II (of the certification server). It is evident that this can also be done in reverse order by server II the authenticity of server I to consider.

3. Select the server II over the telephone connection (or mobile phone) T- # of the user. It is via the phone (or mobile) T- # of the user and the existing IT Connection between servers I and server II , the data loop 2 formed as a serially connected data loop DS , corresponding 14a (see also 19 ).

4. Server II (this is the certification server) sends the terminal to the data loop DS (here cell phone used for DS = 2) in direct access over the secure connection (this is telephone connection here) the current input parameters to use for encryption of KODE 2 that by server II for the purpose of examining DS is sent, and via server I is routed and encrypted along with the security data entered by the user into the phone (pin number, data of fingerprint, voice, iris, etc.) in the mobile phone.
Thus server II (the certification server) the sensitive data of the phone as well as its test code CODE 2 For checking the data loop DS receives encrypted transmitted without the server I Thus server II , about whose IT Connection would have the ability to identify the encrypted data, even if he knew the algorithm, then he still would not have the current input parameters for decryption.
Likewise, the server has I in this variant (since DS = 2 used) also the possibility of configuring the data loop DS for the encryption of exclusively assigned to him data, ie the terminal on the data loop DS (here cell phone used for DS = 2) on the IT Connection (to the client CL ) the current input parameters to use for the encryption of its code CODE 1 for autarkic testing of the loop ( 2 ) as well as possibly from the mobile phone to server I Data is also transmitted to the server servers II can not decrypt. Conversely, in accordance with special training of the mobile phone's server I via the coupling (acoustic, infrared, etc.) eg also directly the phone number T- # of the mobile phone regardless of server II Interrogate. If this training does not exist, then servers can be used I do likewise by having the user select it directly via the telephone network before; which is spared in the further education version of the mobile phone, however (see also later on) 20 ).

5. The certification server server II constantly goes through a scanner cycle and compares all (here via the IT connection from server I ) received codes after their decryption (CODE 2 all subscribers, from a variety of servers of the type "server I ") with the sent out codes to match the pairs, as has already been suggested in a comparable example, and assigns to each code pair the associated telephone number T- # (at which a respective code has been sent out or a respective one Code has been obtained, depending on which variant 13b or 13a is used). Thus server II As often as you can constantly check, or associated with the code data of the phone can clearly assign the relevant phone number T- # of the user, if this is not him directly, but on the IT Connection of the server I along with the code 2 , or also with the telephone number T- # be transmitted.

It could be for many applications, eg, opening a turnstile, etc., the process even when needed also apply so that the server I, which offers the power (and monitors the hub) does not make any identification of the phone number T- #, but to a the server II sent code 2 only the answer is received ( OK or non-OK), ie if recognized, then open the turnstile, or a door to a bank, etc.

Furthermore, the server I can of course also own data, such as documents under the assignment of KODE 2 (ditto T- #) to the certification server server II Submit this document in the database of the server II clearly a particular cell phone, which has formed a data loop (DS = 2) with him, can be assigned.

➢ As a further special feature, it is also possible with this method to use a special plug-in software of the client computer, the relevant document, or parts of the document (even checksums of the data in the text lines, etc.) via the coupling of the Handy from the client computer over the telephone connection directly to the server II (Certification Server) will be sent so if this document later from server I about the IT -Connection to a specific phone number T- # receives, also can check if this is exactly this document.

• 1. die in der Datenbank zur über den KODE(2) festgestellten Telefonnummer (T#) (des Handy's) zugehörige digitalen Signatur der erhaltenen korrekt entspricht ?
• und 2. ob der Benutzer zu dem Handy der Telefonnummer T-# gehört ?

For the delivery of the digital signature from the input code KODE ( 2 ) the code ( PIC ) in the cell phone and this entire code is encrypted, with the code ( PIC ) also already before (additionally) can be arbitrarily encrypted, etc. The server II then decrypts this code again and separates the code ( PIC ) from CODE ( 2 ) and checks on the one hand the CODE ( 2 ) after the telephone number T- # and checks further the code composed of the transmitted digital signature and the user identification (pin number, fingerprint, voice, iris, etc.) ( PIC ), if:

• 1. in the database about the CODE ( 2 ) determined telephone number (T #) (of the mobile phone) associated digital signature of the received corresponds correctly?
• and 2. whether the user belongs to the cell phone of the telephone number T- #?

That is, we get the usual security of using a certified code for the purpose of a signature, within the code evaluated by the server, ie at the time the code arrives (and not just by a prior check, etc.), nor the additional assurance that the user and the exemplary coded input device (here with the telephone number T- #) must be inseparably connected, otherwise also the personal identification code ( PIC ) is rated negative. The fact that this statement is contained in a single (common) code, has the advantage that even if the telephone exchange by an attacker, or hacker had already been conquered, even (- careful encryption provided) - it will not succeed, this To manipulate statement.

In addition, this method can be used to submit the code originally used by the server to identify the preferred data loop CODE ( 2 ) this code to a certain bit length with excess digits (bits) are added, the excess bits are provided only as a placeholder. The digits that belong to the valid code are nested among the wildcards (according to a given encryption), so that speculation becomes more difficult here as well.

It is evident that the same method can also be used to jointly encrypt the data for the payment transaction with the code for the loop identification, to decrypt it again in the server.

Als konkretes Beispiel für das weitere Zusetzen und Prüfen von Kodes innerhalb der bevorzugten Datenschleife(n) (1, bzw.2, etc.) wird in der nachfolgend erläuterten Anwendung beschrieben, bei der ein Handy oder auch ein Telefonapparat (eines Festnetzes) als ideales Verschlüsselungsgerät zur Leistung einer digitalen Unterschrift verwendet wird, mit der Möglichkeit die digitale Signatur über jedes beliebige Netz und jedes beliebige Endgerät (hier z.B. auf dem Bildschirm eines an das Internet angeschlossenen beliebigen Client Rechners CL) zur Leistung einer digitalen Unterschrift für ein über dieses Endgerät übermitteltes Dokument (z.B. über eine WEB-Seite) zu benutzen. Es ist evident, daß auch hier wieder als Endgerät neben einem Client Rechner CL, auch ein weitere Handy verwendet sein kann. Weiters können nach diesem Verfahren auch weitere Personen bezogene Aktivitäten (Öffnen von Schranken, Zugangssicherung, etc.) gesteuert werden.

As a concrete example of further adding and checking codes within the preferred data loop (s) ( 1 , respectively. 2 , etc.) is described in the application explained below in which a mobile phone or even a fixed-line telephone is used as an ideal encryption device for the performance of a digital signature, with the possibility of the digital signature over any network and any terminal ( eg on the screen of any client computer connected to the Internet CL ) for the provision of a digital signature for a document transmitted via this terminal (eg via a WEB page). It is evident that here again as a terminal in addition to a client computer CL, also another cell phone can be used. Furthermore, according to this method, other person-related activities (opening of barriers, access protection, etc.) can be controlled.

In this case, the client computer on which e.g. the WEB page is shown with the document to be signed, also in an Internet Cafe and be provided with a special acoustic coupler or infrared interface, etc., for coupling the mobile phone.

It is evident that the data for recognizing the person or the user identification (pin number, fingerprint, voice, iris, etc.) can also be pre-evaluated already in the mobile phone by a corresponding processor.

• • Allgemein formuliert, können in die Datenschleife DS daher mehrere Server (I, II) eingebunden werden, die über das Handy unterschiedlich zugeordnete Dateneingaben PIC und untereinander gleichfalls Daten (z.B. ein Dokument, etc.) über diese durch ihren Prüfkode (KODE1, KODE2) gesicherte Datenschleife DS austauschen können, wobei auch die Server untereinander ihre Informationen, betreffend der Dateneingabe durch das Handy über unterschiedliche Verschlüsselungen geheim halten können (vgl. dazu auch zu 20 später).

The mobile phone with its secure electronic signature is bound by the preferred method to the WEB page used for the data loop, as already explained for the examples of cashless payment transactions. Through this connection increases the security, and especially the affiliation, to which WEB Page an electronic signature has been made. It is provided in a further development, even the document or test values (cross sums, determined via lines sums of data, etc.) via the data loop DS to transmit (possibly encrypted), thus the certification server, the data via the loop DS from the phone for the digital signature, and at the same time receives the document to which the signature has been made.

• • Generally speaking, multiple servers (in the data loop DS) can therefore I . II ), the data entries entered via the mobile phone are different PIC and with each other also data (eg a document, etc.) about this by their test code ( code1 . KODE2 ), whereby also the servers among themselves their information, regarding the data input by the mobile phone over different encryptions can keep secret (see also to 20 later).

In the conventional methods according to the prior art these possibilities and this security is not given. Although a certain effort is required for the proof of authenticity of an electronic signature of some dimensions, but against attacks in the WEB If the undersigned is better off signing a signature on a completely different document (or if another external server could also display the web page under the name of the certification server when intercepting the call on the Internet), then the signatory is not immune, especially if a different server is used for the presentation of the document, as for the input (and verification) of the digital signature.

Since the data for recognizing the authorization of the signature provided with the corresponding data is encrypted, they can also be looped through for the purpose of logging by that server which actually generates the document to which the user of a client computer CL signs. Here is the server I.

In this case, and this is another advantage of the method, the server I can additionally its own identification code CODE ( 1 ) in the data loop with feed back to the client CL (or via the mobile phone) to check the telephone number T- # of the telephone used for the delivery of the digital signature or mobile phone.

Whereby server I This can also do the same twice, a first time when the user logs into the server I WEBX.com generated WEB page, where the user is the phone connection to the server I through its direct telephone dialing establishes (to the data loop 1 which may also be omitted in the more elaborate variant of a more elaborate protocol) and subsequently, to sign the document, although the document is on the server I generated WEB "WEBX.com" page, the user is the phone connection to the server II through its direct telephone dialing establishes (to the data loop 2 to build). That is the (in principle any) server I puts the WEB page "WEBX.com" on the browser of the client computer CL However, the user's input and validation of the digital signature will be through the certification server server II made for this purpose by the user dialed directly by phone to the data loop 2 for example, in a public office or at a notary public.

For both variants 13a or after 13b , the client CL has the server first I WEBX.com called "WEBX.com" and is now to one on this WEB page, or on a sub-page (such as the WEB page 1 , etc.) make his signature by handing over the digital signature, which can also be done on an e-mail to be sent, for example, or the document to be signed may be any electronic document that is sent via such Internet access, It does not matter if the signer receives the document for signature or if he sends it by e-mail.

If the user of the client computer CL wants to submit his electronic signature to any electronic document X in the prinizip, then he first forms the telephone call of the server I a data loop ( 1 ) about which the server I can identify the phone call of the server (or as an option: equal to a data loop 2 via the certification server II ), the server I the telephone number T- # used by the user (immediately above the data loop 1 or as an option: also over the data loop 2 , or via the server II ), or optionally by a call on the user's callback over which the data loop ( 1 ) of the user is then formed, also checked immediately. Server I represents the relevant document X on its WEB page ("WEBX.com").

Immediately before the user wishes to make his signature (electronic signature) to a respective document X, i. if the supplements to be made by the user in the document, if necessary via form input, have been recognized as complete by the server I software, the user will download the document ready for signature to his PC for archiving and will also be expressly posted on the relevant WEB page WB Page "WEBX.com" prompted to do so. It is expedient if the user before signing the text that he signed still prints, so he can read it carefully again.

If he has saved the document on his computer, then the user can read the data loop ( 1 ) and click on the link on the document (WB Page "WEBX.com") regarding the performance of his digital signature. About this link is the WEB page 2 the certification server server II called.

• - nimmt elektronische Signaturen vom Unterfertigten (Unterschreibenden) zusammen mit dem zu unterzeichnenden Dokument entgegen, wobei hier die Option besteht, auch das Dokument neben der direkten Übertragungsmöglichkeit via Internet über die Datenschleife DS zu erhalten,
• - prüft die entgegengenommene Signatur mit dem hinterlegten Muster,
• - archiviert Dokument und Signatur,
• - und übersendet dem Unterfertigten als Protokoll das Dokument mit der vorab Bestätigung, daß er es unterzeichnet hat. Später kann der Unterfertigte auch noch von der amtlichen Stelle oder von einem Notar auf dem Postweg das Dokument zurück erhalten mit der Bestätigung, daß er es mit seiner elektronischen Signatur unterzeichnet hat. Diese Dienstleistung kann z.B. bei einem Notar vom Zertifizierungsserver beinahe vollautomatisch so abgewickelt werden, so daß die Dokumente zusammen mit einem Briefaufkleber des Adressaten auf einem Stapel gedruckt werden, wobei die Bezahlung dieser Leistung über das mit der WEB-Seite des Zertifizierungsservers verknüpfte Verfahren unter Benutzung eines Telefons, d.h. über Telefongebühren oder über das beschriebene bargeldlose Verfahren erfolgt. Wobei nachfolgend noch eines Weiterbildung beschrieben wird, bei der als Nachweis der Unterzeichnung des Dokumentes ein Chip unter dem Siegel (des Notars oder eines Amtes, etc.) geklebt wird, der durch den Zertifizierungsserver jeweils automatisch erstellt wird.

The certification server is in an office or at a notary and

• - accepts electronic signatures from the undersigned (undersigned) together with the document to be signed, whereby here the option exists to also receive the document in addition to the direct transmission possibility via the Internet via the data loop DS,
• - checks the accepted signature with the stored pattern,
• - archives document and signature,
• - and send to the undersigned as a record the document with the advance confirmation that he has signed it. Later, the undersigned may also receive the document from the official body or from a notary by post confirming that he has signed it with his electronic signature. This service can, for example, be handled almost fully automatically by a notary from the certification server, so that the documents are printed together with a letter sticker of the addressee on a stack, the payment of this service via the process associated with the WEB side of the certification server using a Telephone, ie via telephone charges or via the described cashless procedure. In the following, a further development is described, in which a chip is stuck under the seal (of the notary or an office, etc.) as proof of the signing of the document, which is created automatically by the certification server in each case.

In a further developed, (optional) additional function, the user, ie the signer who uses the digital signature for a particular document, should have the absolute certainty that the digital signature is sent to the correct server (ie server here) II ) was sent. This is done in a training option so that within the data loop ( 2 ), which the certification server (server II ), that of the server II generated CODE ( 2 ) in addition to the random code generated portion of the code (for checking the authenticity of the user within the data loop 2 ) still an encrypted name code of the server II contains, over which the concerned mobile phone (if necessary also another terminal, like a telephone set or also a plug in in the client computer CL , etc.) the server II recognizes, so that abuse attempts (with fake WEB pages) are not recognized only after sending the certified and encrypted code of the mobile phone or terminal (because of the wrong, or in the phone or terminal not recognized receipt of the server, the can also be changed constantly from access to access after the prinizip of a transfer code), but already when contacting the server ( II ) after the log is clear that it is not the server II is. The encryption / decryption of the server name code II can be done according to any algorithm, in the simplest case also using variables determined partly by program (stored in the smart card of the mobile phone as transfer codes) and partly by a secret formula variables that change from access to access, whereby the number of access attempts in the mobile phone and in the server are counted and also by control data between server and mobile phone can be adjusted, etc.

1. a) die Authentizität des Zugriffes durch Server II innerhalb der Datenschleife (2) des Handy's als zusätzliche optionale Sicherheit in Bezug einer Vermeidung, daß sich der Benutzer in die falsche WEB-Seite, bzw. in den falschen Server bei der Abgabe der digitalen Signatur einloggt;
2. b) weiters durch Anwahl der Telefonnummer des Server II ist bereits eine hohe Sicherheit gegeben, daß sich ausschließlich Server II in der Datenschleife befindet;
3. c) daß das betreffende Handy mit der betreffenden Telefonnummer T-# sich in der Datenschleife befindet und die digitale Unterschrift durch den Benutzer (unter Einhaltung der genannten weiteren Sicherheiten wie Pinnummer, Fingerabdruck, Stimmenprofil, etc.) geleistet wird, wobei das Handy diese digitale Signatur verschlüsselt an den Server II innerhalb der Datenschleife (2) absendet;
4. d) und weiters noch, daß die unter a).....c) genannten Sicherheiten erforderlichenfalls zu einem in sich geschlossenen, verschlüsselten Kode zusammengefaßt werden können, wobei der Server Manipulationen an diesem Kode bei der Entschlüsselung erkennen kann.

About the data loop ( 2 ) is therefore ensured:

1. a) the authenticity of the access by server II within the data loop ( 2 ) of the mobile phone as an additional optional security with respect to avoiding the user logging into the wrong WEB page or the wrong server when delivering the digital signature;
2. b) further by dialing the telephone number of the server II is already given a high security that only servers II located in the data loop;
3. c) that the mobile in question with the relevant telephone number T- # is in the data loop and the digital signature is provided by the user (in compliance with the said other collateral such as pin number, fingerprint, voice profile, etc.), the mobile this digital Signature encrypted to the server II within the data loop ( 2 ) sends off;
4. d) and still further that the collateral mentioned under a) ..... c) can, if necessary, be combined into a self-contained, encrypted code, whereby the server can recognize manipulations of this code during decryption.

Thus via a link secured via the data loop of a telephone connection corresponding to the number of a mobile phone (or of another terminal) T- # the call of the WEB page 2 of the certification server (server II ) is done by the browser of the client computer CL.

By pressing this on the left (ie calling the WEB page 2 of the certification server), the server sends I , which represents the document X on its WEB page "WEBX.com", to the server II who is to undertake the receipt / verification of a digital signature to the document X, the message that a Handy (or alternative terminal) with the telephone number T- # logged in, thus the server II a digital signature to this document X, which is on the server I stored is expected to form a data loop with the phone number T- # (by the user).

This document X, which does not necessarily have to be a text file, can therefore also be an image file, or can also be a process description, the server I has generated, such as the opening of an apartment door using the method by a locksmith, etc., as it is to be signed (ie possibly including made form entries of the user) with the phone number T- # as assignment address, from the server I to the server II sent. Since these can also be confidential documents, the server is available II best of all under the access management of a notary who also has exclusive access and administers the system administration, etc. In case of a challenge of the signature, the notary can then either confirm the fact of the process as witness or deny it. It can be the server II connected to a log printer, which prints out the signed document and adds the owner's text to the digital signature. So that the signed document is available as a hardcopy at the notary, or later in the legally prescribed manner (microfilm, etc.) can be archived if the paper is destroyed for reasons of space, or the undersigned can be handed over a notarized by the notary copy , Likewise, further data carriers, eg on DVD can be archived as part of the regular data backup, etc. The following is a preferred variant is described in which the storage of the process (signature + document) is archived on a chip under a seal (eg a notary ) can be glued.

All these operations between server I and the certification server server II the user by pressing the link on the WEB page "WEBX.com" of the server I for the purpose of calling the WEB page 2 of the certification server (server II ) triggered, of course, using a user interface fully automatic on the WEB side.

Wherein the server I by transmitting the document X together with the phone number T- # of the user's mobile phone (as access address) to the server II , the call of the WEB page 2 (by pressing the link on the WEB page "WEBX.com") prepared.

That is, while the WEB page 2 the certification server server II from the "WEBX.com" (the server I ) is called, receives server II the phone number (mobile number T- #) of the user as well as the associated document X of server I.

Thus, this process is an application as it has already been stated, namely, that different processes running on several servers via corresponding data loops, which are connected via telephone networks (ditto mobile networks) by the telephone numbers T- # of the connections ( or the user on the client side CL ) are coordinated or assigned.

By the (via the link of the WEB-Site "WEBX.com") from the certification server (server II ) called WEB page 2 the user is prompted to dial the telephone number (of a dial-up network) indicated on the WEB page. By this step, the user is given the absolute security (corresponding to the dialing network) that when the WEB page concerned appears, this page is actually the "WEB page 2 ' the certification server (server II ). Does the server have this by the generated and sent by him codes (code 2 ), then he reports this via an audible and / or visual display on the user's mobile / telephone, possibly also with an SMS. If this confirmation does not exist, then a procedure is provided on the mobile (in a further development) in which the mobile generates a warning tone (or warning display on the display, etc.) after a period of time (from which the data loop DS was formed) , This would mean, assuming the user did not dial, the called WEB page will not be deleted from the certification server (server II ) Posted. Depending on whether a standard cell phone or a specially trained for this certification is used, in a negative failing test, the phone to this current phone connection internally still be locked so that it can not send a corresponding digital signature code.

Dabei gibt es auf der Serverseite zur weiteren Sicherheit noch die Möglichkeit, den Kode (KODE 2) des Zertifizierungsservers (Server II) extern (z.B. durch eine DSP Schaltung) zu generieren und extern in den Server einzuspeisen, dito die Prüfung des (hier über die IT-Verbindung an den Client CL gesendeten und über die Telefonverbindung T-#) wieder zurück erhaltenen Kodes gleichfalls extern (z.B. durch die DSP Schaltung) vorzunehmen und die Meldung OK/Fehler an den Client (über die Telefonverbindung T-#) gleichfalls über die externe Schaltung (z.B. durch die DSP Schaltung) vorzunehmen. Würde der Zertifizierungsserver (Server II) erfolgreich angegriffen, dann würde dies somit der Benutzer merken, wenn er mit einem falschen Server, der die WEB-Seite des Zertifizierungsservers (Server II) imitiert, verbunden wäre; um unabhängig von den vorgenommenen Maßnahmen zur Sicherheit des (Server II) zu verhindern, daß ein falscher Server geheime digitale Unterschriften (auch wenn diese verschlüsselt sind), und gegebenenfalls auch geheime Dokumente übermittelt bekommt.

There is still the possibility on the server side for further security, the code ( CODE 2 ) of the certification server (server II ) externally (eg by a DSP circuit) to generate and feed externally into the server, dito the test of (here on the IT -Connection sent to the client CL and over the telephone line T- #) back received codes also made externally (eg by the DSP circuit) and the message OK / error to the client (over the telephone line T- #) also about the external circuit (eg by the DSP circuit) make. Would the certification server (server II ) successfully attacked, then this would be noticed by the user, if he with a wrong server, which the WEB-side of the certification server (server II ) imitated, would be connected; Regardless of the measures taken for the safety of (server II ) to prevent an incorrect server from receiving secret digital signatures (even if they are encrypted) and possibly even secret documents.

• „Telefonnummer des anrufenden Handy's nicht erkannt, bitte Nummernunterdrückung abschalten, bzw. neu versuchen“.

By clicking on the corresponding button on the WEB page 2 is in the certification server (server II ) a corresponding timeout is started within which the certification server (server II ) the phone number of the mobile via the data loop ( 2 ) must have assigned. If this is not the case then an error message is displayed on the WEB page:

• "Phone number of the calling cell phone not recognized, please turn off number suppression, or try again."

• „Telefonverbindung wurde erfolgreich aufgenommen, es erfolgt jetzt die Anzeige des zu unterzeichnenden Dokumentes und der Rückruf des Servers, damit sie die digitale Unterschrift leisten können“.

However, if the number of the calling mobile phone is recognized, then the message:

• "Telephone connection has been successfully completed, the display of the document to be signed is now displayed and the server is called back so that they can provide the digital signature".

• „Sie haben sich erfolgreich in den zur Entgegennahme einer digitalen Unterschrift vorgesehenen Server „SERVERNAME“, Standort (z.B. in Notariat, etc.) eingeloggt“.

When the server is called back, the server generates the CODE ( 2 ) for identifying the mobile within the data loop ( 2 ) of the server II , optionally optional (as additional variant) or the encrypted name code of the server II so that the phone can look in a table to see if the server is actually an approved server ( II ) to receive a digital signature. If this is the case, then the user receives the message on the display of the mobile phone:

• "You have successfully logged into the server provided for receiving a digital signature" SERVERNAME ", location (eg in notary, etc.)".

If this were not the case (as in the case of a negative test result over the data loop by the CODE 2 the server) then the sending of a valid electronic signature on the phone is again suppressed, or the phone can then also issued a warning beep, so that fake server calls (wrong certification server) are recognized by the user immediately. The phone determines the lack of positive response of the server by expiration of a time-out within which no positive message from the server is detected.

However, the user has succeeded in the WEB page 2 of the certification server (server II ), then he gets it from the server I to the certification server (server II ) displayed under the association address of the phone number of the mobile phone.

Further training option: After server I sends the document to be signed to the server II has sent, the user can now under the WEB page 2 of the server II, ie on the certification server, the corresponding file, X and as he should sign it, not only, but also still with the original file X, which he from the server I before in his computer ( CL) downloaded from a certification server (server II ) compare comparison program. If, for any reason, the user has not previously backed up the file X whose content he is to sign, (via WEBX.com WEB page generated by server I, he is prompted to do so now, after which he will make the comparison Furthermore, the user is requested to read the document carefully before signing (eg also in printed form).

So that the certification server (server II ) can compare the stored under the address of the phone number T- # of the mobile user file (or the document) with the stored on the client computer CL of the user, the user must previously from the WEB site "WEBX.com" of Server I on its client computer CL stored file X to the certification server (server II ), where the certification server (server II ) performs the comparison of the files X subsequently.

This comparison is relatively unproblematic for a text file, in the case of image files, in addition to the pixel by pixel comparison, a vectorial polyline evaluation may be provided so that if the pixels change slightly due to different resolutions, the comparison will only take the polyline, e.g. of a handwritten text, etc.

If the comparison is correct, then this is displayed to the user and a request is made to submit the electronic signature. If the comparison is not correct, then the relevant text passages or passages in the file are displayed on the screen of the client computer CL by the certification server (server II ) is displayed.

During the comparison of the documents, the user can also use the data loop ( 2 ) or for security reasons also select the option (eg entered via the mobile phone), the data loop ( 2 ) to monitor constantly, with the certification server (server II ) terminates the comparison of the documents when this data loop ( 2 ) is interrupted, etc.

For the submission of the electronic signature, the data loop ( 2 ) in any case needed to identify the right mobile phone (eg by repeated callback by clicking on a corresponding button on the WEB -Page 2 from server II can be requested), with the certification code in the usual way the server II encrypted transmitted by the mobile phone, here including the server II generated control codes CODE ( 2 ) to the data loop ( 2 ) to control. In order not to be able to crack the encryption, it is possibly recommended for the encryption of CODE ( 2 ) to use a different algorithm than for the encryption of the digital signature or, if necessary, the CODE ( 2 ) also with the name of the server to encrypt, etc.

After the user has made the digital signature, he can do so via the certification server (server II ) signed document on the client computer CL download, for example, with the confirmation of the notary that he has the signature on the day, set to this date on the document (eg as a counterpart of a contract, etc.).

The notary's confirmation may be filed on the relevant document with the notary's seal as signature authentication. Furthermore, important data may be recorded on an electronically written ROM mini-map, e.g. glued between the notary seal and can be read via a capacitive coupling. Or the seal has a window so contacts can pick up the chip.

The data on the chip contain the data of the document or, in the case of extensive image data, possibly also only reference data, etc., furthermore the proof of all digital signatures belonging to a document, including the encrypted digital signature of the notary, or an authority contained in the data etc. In the following part of the description, this method with corresponding device features will be discussed in more detail.

Since the authenticity of the server over the data loop ( 2 ) is checked by issuing the encrypted name identifier in the server also (option), further the selected telephone number T- # only the certification server (server II ), the security of the authenticity of the certificate server (server II ) issued document. The optional additional encrypted name identifier of the server prevents a user from falling for fake information and dialing a wrong phone number of a malicious certification server.

In order to prevent inadvertent users who may not automatically check the telephone number T-#, which is automatically read from the client computer and dialed from the mobile telephone, this automatic function should be handled with care, or it may be better if the Cell phone dials this number (with frequent use) on the phone number memory, or over the free for electronic signature provided chip card of the mobile phone this number can be called via the phone number memory under the name server number for digital signature by the user for automatic dialing, so no wrong Number is dialed (which has an important security function).

Nachfolgend ist noch ein Weiterbildungsbeispiel beschrieben, für das neben der Benutzung als Vorrichtung in Verbindung zur Durchführung des erfindungsgemäßen Verfahrens, um eigenständigen Schutz angesucht wird. Dabei geht es darum, für einen Serienprozeß, z.B. in Verbindung mit einem Zertifizierungsrechner, automatisch mit einer digitalen Signatur versehene Dokumente, oder auch Protokolle zu einem Vorgang, etc., fest zu halten, auf einem Chip zu speichern, der gegebenenfalls unter einem Siegel (z.B. eines Notars oder einer Behörde, etc.) dazwischen geklebt werden kann, um die Unterschrift durch den Notar oder die Behörde noch zu beglaubigen.

A further development example is described below, for which, in addition to use as a device in connection with carrying out the method according to the invention, independent protection is sought. The aim is to record for a series process, eg in connection with a certification computer, documents automatically provided with a digital signature, or protocols for a process, etc., to store them on a chip which may be under a seal ( eg a notary or an authority, etc.) can be glued in between to authenticate the signature by the notary or the authority.

The relevant document on which the signature was provided is stored on the electrically programmable ROM, or if that would be too extensive, then the number of the document deposited with a notary, together with the notarised proof of the documents submitted for that document correspond to digital signatures, wherein in this ROM chip at the same time the digital signature of the notary or an authority is stored. This process can also be automated. As a chip technology, an electronically protected against overwriting FLASH memory, or an EPROM technology, or can all common chip card techniques are used, including the interface, which may relate to ohmic contacting and a capacitive contacting, etc.

In this case, such a chip can be used not only for the proof of a signature, but also for the detection of any caused by the user via the delivery of a digital signature events, in which case the certification computer creates a corresponding accompanying document, or printed. For example, in addition to the already mentioned lock application (to operate an electric lock or similar device), also to make choices. Should be selected via the certification calculator, then a lot of votes are stored in a chip, further can also be described for security several chips with the same data, etc.

In a special design and generally applicable for the issue of certified documents, the in 16 to 18 and 15 illustrated variant in which the chips in question 30 on a label strip ( 10 with tear-off perforations 11 ), on roll ( 70 . 15 ), are applied, the label strips replace the carrier material of an otherwise conventional plastic card here.

Besides the possibility of the chips ( 30 ) Stick on a small plastic backing or even on a thin ceramic plate as a backing on the labels, there are already the technical prerequisites for gluing the chip directly between two paper carriers.

The roll with the chips ( 30 ), for example, on a thermal paper strip ( 10 ) are applied, which one with laterally (as a peeling edge) standing out cover ( 80 ) has a self-adhesive layer protected by a corresponding roll holder ( 70 . 71 . 15 ) and a printing unit (housing 61 ). This printing device corresponds for example to a conventional thermal printer (with printing unit 114 in 15 and edition 58 ), which, however, additionally a Kontaktierungskopf ( 53 . 53b) used to contact the chip. If the chip card is designed with a capacitively coupled contact, then it is sufficient to place it on the paper strip ( 10 ) applied smart card ( 30 ) at the contacts ( 53 ) just pull over (against the pad 57 supported). With ohmic contacting, the contacting head ( 53 . 53b) each lifted by a solenoid (EM) during paper transport and lowered only for contacting. An optical reflection meter 113 scans a coding on the edge of the paper strip ( 13 . 16 ), which corresponds exactly to the contacting position of the chip.

With the thermal printer (which is provided here as an option) becomes each chip 30 , or to each by perforation ( 11 ) label, one text and one barcode each, which is also printed on the 40 ) is printed with (cf. 18 ). Thus, before the label is pasted onto the document, by simply scanning the label and the document with a barcode scanner, or also digit scanner, etc., it can be accurately compared whether the chip previously described via the certification server to a printed document ( 30 ) belongs to the document at all.

After sticking with the chip ( 30 ) equipped paper strip 10 to the document in question 40 , the seal ( 20 ) of a notary, or an authority (which monitors the certification server) glued over it, possibly with the cord which the document pages ( 40 ) inseparably connects with each other. Wherein when storing the complete document text on the chip ( 30 ), this otherwise usual connection cord of the document is actually unnecessary.

If the chip can be contacted capacitively, then the seal must 20 have no windows, since the scanning electrodes through the seal ( 20 ) through the contacting of the chip can make. If this is not the case, then the seal ( 20 ) a corresponding window 22 on. The seal 20 , as well as on the carrier strip 10 of the chip 30 imprinted mark m, (eg as a crosshair, etc.) facilitate the precise placement of the seal 20 if a window 22 is provided.

In 17 is a housing suggestion for a reader of the chip shown when the chip has, for example, an ohmic contact. The housing corresponds in its design to a standard cassette stamp (of course without stamp and without ink pad). Instead of the stamp, the support base ( 53b) the contact pins 53 upon actuation of the handle 50 pressed down, where appropriate, on a display 54 (Option) the name of the document (TEXT) is directly readable. The Electronic ( 53b) with the resilient scanning tips and with the batteries (not shown) is in the handle part 50 housed, which can be by pushing the laterally inserted snaps k, the locking springs f back so far that they disengage from the attacks a, can lift off to change the battery. the data transmission to the computer takes place via an HF or via an infrared ( 59 ) Interface, similar to a wireless mouse or keyboard. The seal then has a printed Aufsetzrahmen 21 on, after which the landing surface 51 of the "stamp" can be placed exactly to contact with subsequent press down the contacts, and until the punch a built-in piezo pips sounds, indicating that the data of the chip have been successfully read and transferred to the computer, ditto if he is missing, the data transmission has failed, resulting in the presence of a display 54 is displayed on this, or otherwise determined on the computer, if the confirmation is missing (if this has been initially initialized on the computer). Otherwise, it is useful after reading de chips 30 to store in the electronics of the stamp between, to call up the corresponding software over the wireless connection of the computer, or to check and to write the data into the computer (PC, server).

Another option is instead of batteries or a battery (which is in the handle housing 50 are housed) to use a generator G for power generation. The usual construction of a cassette stamping case is used in which by depressing the handle 50 via a deflection of the linear movement in a rotational movement made on the guide rails of the stamp, a generator rotates rotor G (instead of the stamp otherwise fastened here, the axis a, however, without rotary punch, on the other side between the contact spring pins ( 56 ) is performed). The stator of the generator is then attached to the laterally guided linear guide of the handle and thus by the stroke movement of the handle (as well as otherwise the storage of the punch, and here the rotor G) moves linearly with. As a rotor, for example, small permanent magnets (cobalt, etc.) are provided. Since all the electronics are in the stamp anyway, the contacting of the generator voltage generated in the stator winding, which charges a capacitor, presents no particular problems. The generator voltage is then fed via a conventional rectifier circuit with a relevant control and overvoltage protection to a capacitor which feeds a clocked mini power supply for generating the voltage (for the transmitter, possibly also receiver of the tapped chip signals).

Another option concerns an additional mini temple 100 that is either on the handle housing 50 Static (with ink transfer via an external ink pad) or directly on the rotor axis of the generator as a rotary punch (with built-in ink pad 101 ), and if necessary, of course, can also be installed without a generator (battery operation), and the sides of the contacts 56 with the purpose of stamping a dot or a small character on the document as confirmation that after the seal has been affixed, the function of the chip has been retested.

Furthermore, in 15 . 60 .... guide rollers 90 Edition.

It is evident that instead of a paper on (or embedded between layers of paper) the chips 30 are arranged, a film, etc. could be used. In 16 the chips are alternately offset alternately (in relation to the longitudinal centerline of the paper strip 10 ) so that they apply symmetrically. However, they could also be placed in the middle of the strip, or it can be used for balancing even plastic or cardboard chip without a chip, etc. Furthermore, for the in 15 Proposal also shown a rewinder for winding the automatically transported labels with the chips automatically described by the certification server be provided, the documents are then stacked when printed by the certification server so that the last document is at the top of the stack, ie in the Order the stack can be removed, as the label strips me the chips from the (in 15 not shown and connected at the end of e) take-up reel can be torn off in order.

In connection with the device described, notaries or even courts can certify documents as on the assembly line, which can be signed worldwide using the Internet. In the same way, public authorities can be networked worldwide in this way in order to submit timely and legally binding information with a corresponding signing to another state or authority, notary, etc.

Certification of electronic signatures for e-mails sent by the undersigned:

The same procedure can also be performed with a sent e-mail by first sending the e-mail in advance to the certification server, where it is stored in a database of the server at the sender's e-mail address. The sender calls the relevant service, eg the web page of the certification server, logs over the preferred data loop DS on his mobile phone with his client computer CL one, gives his ( e -Mail) address, and so gets access to his document, which calculates him on the client machine CL is displayed and to which he, as already explained in principle, can submit an electronic signature with his cell phone. After the signing of the document, he still has the possibility not to send the document, but to delete it on the certification server, then the electronic signature will be deleted, as well as delete the document before signing on the certification server, or sends sign the document for signature. If the document is not signed and the user leaves the Certification Server web page for a long time (time out), the document is automatically deleted from the Certification Server.

The document can be sent in such a way that the content of the e-mail in the header automatically places the addressee in the submission window of the certification server, which can also be corrected by the user. If the e-mail does not reach the addressee after being sent by the certification server, the addressee will be notified accordingly.

Archiving the sender's proof: To archive the proof that the user has signed the e-mail via the certification server and sent it to the designated sender, the content of the e-mail and the associated further guide data, such as addressee, sender, date, undersigned, stored on the certification server, which can also be encrypted.

Depending on the size of the content, e.g. in addition to the unencrypted stored Leitdaten, the key of the e-mail stored on the chip, the e. Notarized. Although this key can still be stored encrypted on the certification server for security of its data, this is done only in case of an emergency that the chip would be defective.

1. 1) Der Chip über die Schnittstelle zum Zertifizierungsserver, das ist beispielsweise der bereits erläuterte Kontaktstempel, der auf den Chip auf einem betreffendem Dokument (in gedruckter Form) auf das Siegel aufgesetzt wird,
2. 2) und während der Stempel betätigt wird, muß der Absender, bzw. der Unterfertigte der E-Mail sich über sein Handy zur Leistung der digitalen Unterschrift über die Datenschleife DS eingeloggt haben, die Unterschrift leisten und auch weiters einen Modus, der über die Datenschleife DS dem Zertifizierungsserver übergeben wird, vorgewählt haben, der die Initialisierung der zu Entschlüsselung angegebenen Datei einleitet. Diese Datei entspricht dem im Chip vermerkten Dateinamen, der dem Benutzer (Adressaten) auf seinem Client Rechner angezeigt wird, wenn (z.B. im Notariat) der Kontaktstempel auf den betreffenden Chip gesetzt wird.

In a particular development, a special algorithm is provided on the chip, which controls the connection of the chip to the certification server, in such a way that it provides the key for the decryption of the encrypted only on the certification server document, but only if at the time where this should be the case:

1. 1) The chip via the interface to the certification server, this is, for example, the already explained contact stamp which is placed on the chip on a respective document (in printed form) on the seal,
2. 2) and while the stamp is being pressed, the sender or the undersigned of the e-mail must use his mobile phone to perform the digital signature over the data loop DS logged in, signing, and also running a mode over the data loop DS to the certification server that initiates the initialization of the file specified for decryption. This file corresponds to the file name noted in the chip, which is displayed to the user (addressee) on his client computer if (eg in the notary office) the contact stamp is placed on the relevant chip.

Only then will the relevant document be decrypted on the certification server.

When archiving the chips, the notary or the court, etc. can keep bound files, in each of which the file name, the guide data, etc. are indicated for quickly locating a process. It may also make sense for particularly important processes to save the process on two chips in duplicate, and possibly important texts of a document, also each store directly on the chip, etc.

The user has also saved these documents under this name on his computer. For the case of a complaint, e.g. a court, or an authority, that they did not receive a certain e-mail, then the notary can find the chip under this data in his books, and according to the method described above, decrypt the file, print and send it to the relevant body (Authority ) with the attestation that this e-mail (time + date) has been sent.

It can also be agreed with authorities also a receipt for sending e-mails that the server of the authority the certification server automatically a receipt for a Receive e-mail (indicating the exact data, including if necessary a serial number, if several e-mails) to send.

Certification of electronic signatures for faxes sent by the undersigned:

This is done in the same way as described above for e-mails, except that the sender receives a FAX number from the sender when sending it to the addressee, from which he sends the e-mail as FAX. In this case, attachments can also be sent as an image file to the e-mail concerning the certification server and faxed during forwarding. These files can also be stored encrypted, etc.

• - es werden nur die Leitdaten auf dem Chip gespeichert,
• - es wird auch das übersendete Dokument auf dem Chip verschlüsselt gespeichert.

Respectively. Different modes can be used at different costs:

• - only the guide data is stored on the chip,
• - The transmitted document is also stored encrypted on the chip.

Thus the post office can be relieved with millions of registered letters to authorities, etc.

It may even be worthwhile for the post office to offer this service, and then the client, who has sent an FAX with a certified signature by e-mail to a certification server established at the post office or on behalf of the post office, receives Postal and enrolled a document with the chip, which he can read with the preferred stamp contact and an interface to his client computer CL self-sufficient, or via the certification server when logging on the preferred data loop DS for control. This document with the glued-on chip can also be produced fully automatically at the post office (for example, the chips are already printed on a roll with corresponding tear-off cards to which the addressee of the certification server is imprinted with a dot-matrix printer) and serves as proof for the recipient sent by e-mail and forwarded as FAX with a certified signature.

➢ Another variant relates to the already mentioned and partially described embodiment for opening a lock, etc., or for other operation of a triggering operation (such as the opening of a barrier a roadblock, or the release of the access of a person via a turnstile, etc. ) by the server, but only if at the same time closed the data loop on the phone, and the digital signature is made.

In such applications, the operation of the lock, or the (general) triggering operation of a general device is only released if, on the one hand, the server generates a randomly generated code ( CODE ) via a data connection to the device (eg to a lock) sends, for example via an Internet data connection, and on the other hand, this code ( CODE ) continues to send via the further connection, eg via the telephone connection T- to the mobile phone, which by closing the preferred data loop (acoustically or via infrared, etc.) DS , the code received from the server ( CODE ) to the device (eg in an electronic lock), which receives the data received via the direct data connection (eg an Internet data connection) from the server ( CODE ) with which continues via the data loop (which is formed by the coupling via the mobile phone) received from the server code ( CODE ) compares, so to speak, as an extended function of the server.

It is also useful in this variant to encrypt the code again, or to alienate. This is done, for example, so that in this encryption from the server via the different data paths (in this parallel variant over the telephone network T- # of the mobile phone and the IT Interface of the lock of the "data loop" DS) sent codes ( CODE ) are unequal, because the code, which in itself matches ( CODE ) is alienated when fed into the telephone network T- #, that is encrypted transmitted to the mobile, which again performs the decryption (decryption) of the code, so that when the correct data loop DS via the data loop the same code ( CODE ) is fed into the unlocking electronics of the lock, as he this electronics from the server directly over the IT Connection is sent. The from the server over the direct IT Connection fed code is of course also encrypted and is decrypted in the unlocking electronics. It makes sense, if necessary, if parameters (eg open keys, etc.) that are to be used in the unlocking electronics for the decryption of the codes to be updated (also encrypted with a fixed, closed key), this on in their Assignment (cross-exchanged) to make data paths, ie, if necessary sent by the server (open) parameters for the decryption of the over IT -Connection transmitted codes ( CODE ) are sent over the telephone line T- # to the mobile phone and the parameters for the decryption of the transmitted over the telephone line T- # to the phone codes ( CODE ) are about the IT Connection sent to the phone. Whereby via the data loop DS closed by the user on site (at the lock), the mobile phone transmits the parameters via the data loop DS from the (to the IT Connection) and the unlocking electronics receives the parameters via the data loop DS from the telephone connection of the mobile phone.

Whereby the decrypted codes obtained via the separate data paths, the actuation of the lock, or the (general) triggering operation of a general device, take place directly through the electronics of the lock, or the device, only if they match.

Der Unterschied dieses Beispiels zum Vergleich des Kodes direkt beim Server ist der, daß genau genommen hier zwischen Absenden (vom Server) und Vergleich des Kodes (an der Vorrichtung, bzw. am Schloß) eine Parallelschaltung der unterschiedlichen Datenwege (Server, Telefon T-#) statt findet, während bei den vorherigen Beispielen zwischen Absenden (vom Server) und Vergleich des Kodes (wieder am Server) eine Serienschaltung (über den Client, bzw. ein Telefon oder einem Handy, gegebenenfalls auch zwei Handy's) statt findet. Jedoch wird in beiden Fällen die Datenschleife durch die Endgeräte des Benutzers (z.B. Handy und IT-Schnittstelle, bzw. Client Rechner CL) geschlossen. Dito kann in beiden Fällen die Verfremdung bzw. Verschlüsselung / Entschlüsselung des (der ) über die Datenschleife übertagenen Kodes erfolgen. Wobei z.B. bei der Serienschaltung es zweckmäßig ist, die Verfremdung bzw. Verschlüsselung an der Datenschleife DS (z.B. im Handy, und/oder gegebenenfalls auch im Client CL) vorzunehmen und die Rückbildung bzw. Entschlüsselung des über die Datenschleife DS zum Server übertragenen Kodes, beim Server vorzunehmen.

The difference of this example for the comparison of the code directly at the server is that strictly speaking here between sending (from the server) and comparing the code (at the device, or at the castle) a parallel connection of the different data paths (server, telephone T- # ) takes place, while in the previous examples between sending (from the server) and comparison of the code (again on the server) a series circuit (via the client, or a phone or a cell phone, possibly also two cell phone's) takes place. However, in both cases, the data loop through the user's terminals (eg cell phone and IT Interface, or client computer CL ) closed. In both cases, the alienation or encryption / decryption of the code transmitted via the data loop can take place. Where, for example, in the series connection, it is expedient, the alienation or encryption at the data loop DS (eg in the mobile phone, and / or possibly also in the client CL ) and the regression or decryption of the data loop DS to the server transmitted codes to make the server.

14a illustrates the serial connection via the data loop DS on the client side CL ; 14b however, the parallel connection. 1, 2 are the two data paths of which one example, an Internet connection and the other is a telephone connection.

In 14a the comparison (1 = 2) of the random codes generated by the server and sent via the data loop (1, 2) takes place in the server and, if appropriate, takes place on the data loop DS (or one at the endpoints, or terminals over which the data loop DS closed) for the purpose of encryption alienated and restored to the server for decryption.

In 14b the comparison (1 = 2) of the server-generated and the data loop ( 1 . 2 ) sent random code at the client (in one of the two the data loop DS forming terminals, whereby in special cases this comparison may also be made in both terminals in order to be evaluated in coincidence, etc.), and the code may be alienated upon transmission by the server for the purpose of encryption and at the data loop DS (ie relevant terminal (s)) for decryption.

It is evident that the two methods after 14a and 14b can be used together if it is useful for the application.

Likewise, for the variants described above, it is also possible, instead of a series connection, to make a parallel connection of the data loop, e.g. if it can be assumed that the code comparison can be made in a mobile phone safely and not manipulated, and continue to the user directly (even without special acknowledgment signal, or regardless of the name coding contained in the code, or naming the server) the Guarantee that he actually communicates with the selected server, etc.

In both cases (series connection or parallel connection of the data loop), it is evident that e.g. the telephone connection (T- #) assumed in the examples as a second, secure data path can likewise be switched over an Internet connection. These methods are well advanced and may also be used to request the server to call back to the user's T-# telephone (at client CL), and so on.

Zu den beiden Optionen Serienschaltung oder Parallelschaltung der Datenschleife ist weiterhin noch festzustellen, daß zum Zwecke der Prüfung der Datenschleife durch einen Kode (KODE) dieser Kode anstelle durch den Server im Prinzip auch durch das Handy (bzw. allgemein durch eines der beiden Endgeräte, welche für die Herstellung der Datenschleife benutzt sind) erzeugt und gesendet werden kann, bei den jeweiligen Optionen, ob die Gleichheit des Kodes bei der Datenschleife DS oder beim Server geprüft wird. Die Datenschleife wird dann sozusagen beim Server gebildet. Ebenso kann die Verfremdung (Verschlüsselung) und Wiederherstellung der Gleichheit (Entschlüsselung) den Erfordernissen angepaßt, auch so erfolgen, daß die Verschlüsselung/Entschlüsselung am Server/Client oder auch umgekehrt (Client/Server) erfolgen kann. D.h. man erhält die Möglichkeiten durch Anwendung des Dualitätsprinzips, indem man bei 14a, bzw. 14b Server und Client einfach vertauscht.

• • Eine weitere Option, die erforderlichenfalls für die allgemeine Anwendung einer Zuordnung zweier Serverprozesse noch zur Anwendung gelangen kann, wobei z.B. unter einer bestimmten Anschlußnummer T-# eine Datenschleife über eine erste WEB-Seite_1 geschlossen wird und bei einem nachfolgenden Aufruf einer weiteren WEB-Seite_2 (eines weiteren Servers) unter dieser Anschlußnummer T-# eine weitere Datenschleife geschlossen wird, um die Benutzerdaten beider WEB-Seiten WEB-Seite_1 und WEB-Seite_2 unter dieser Anschlußnummer T-# zu synchronisieren, bzw. zuzuordnen,

ist, eine Zeitüberwachung zwischen den beiden Aufrufen der WEB-Seiten WEB-Seite_1 und WEB-Seite_2 einzuführen und nach Ablauf der bei Schließen der Datenschleife der WEB-Seite_1 gestarteten Zeitüberwachung keine Synchronisation der Benutzerdaten der WEB-Seite_2 mehr zu ermöglichen, da bei Ablauf der Zeit, die Bereitschaft zur Übergabe der Anschlußnummer T-# an den Server der WEB-Seite_2 von seitens der WEB-Seite_1 (bzw. deren Server) nicht mehr besteht.

In addition to the two options series connection or parallel connection of the data loop, it should also be noted that for the purpose of checking the data loop by a code ( CODE ) This code can be generated and sent instead of by the server in principle by the mobile phone (or in general by one of the two terminals, which are used for the production of the data loop) and sent at the respective options, whether the equality of the code in the Data loop DS or checked at the server. The data loop is then formed, so to speak, at the server. Likewise, the alienation (encryption) and restoration of equality (decryption) adapted to the requirements, even done so that the encryption / decryption at the server / client or vice versa (client / server) can take place. That means you get the possibilities by applying the principle of duality, by at 14a , respectively. 14b Server and client simply swapped.

• • Another option that can be used if necessary for the general application of an assignment of two server processes, where, for example, under a particular port number T- #, a data loop over a first WEB Page_1 is closed and on a subsequent call another WEB -Seite_2 (another server) under this port number T- # another data loop is closed to synchronize the user data of both WEB pages WEB page_1 and WEB page_2 under this port number T- #, or assign,

is to introduce a time monitoring between the two calls of the WEB pages WEB-Seiten_1 and WEB-Seite_2 and after expiration of started when closing the data loop of the WEB-Seiten_1 time monitoring no synchronization of the user data of the WEB-Seiten_2 more, since at the end of Time, the willingness to transfer the port number T- # to the server of WEB-Seiten_2 on the part of WEB-Seiten_1 (or their server) no longer exists.

➢ Development efforts are currently underway, such as a telephone connection difficult to connect to fixed data paths due to the nature of the Internet, which comes exclusively using the data paths of the Internet, in terms of connection reliability of the port numbers between which a connection state comes, a registered telephone number of the caller, as well as the callee can be assigned.

The proposed method is also suitable for this, without having to intervene in the basic structure of the Internet, which controls the time-synchronous distribution and reassembly of data blocks transmitted over different data paths. This control mechanism can be considered very reliable. Critical is the inclusion of the data connection when a server with the involvement of a name server, to be asked to connect to another server. That the identification of the participants over the existing telephone network by means of a short-term formed data loop of a called WEB page (in case of prolonged telephone conversation over the IT network) can also bring security here.

Of course, there is the possibility for longer connections, such a data loop often times briefly to switch between. The data loop is then not manually formed by the user, but e.g. through a plug-in software of the client computer, or what is sufficient in most cases, directly with the provider, in conjunction with appropriate hardware facilities.

For this purpose, the user calls when invoked WEB Page on the page of a telephone service over which he wants to establish a secure Internet telephone connection, forming the preferred data loop the service number of the server of this service over a conventional dial-up connection (a conventional dial-up network), where, as already explained, the telephone number T- # the caller is determined in this way on the one hand by the server safely, on the other hand, the user can receive a message (by announcement, or via an SMS, etc.), that it is the service used, for example, with his client computer CL (possibly also with a mobile phone, etc.) has called; because when calling via a name server, or in the presence of a so-called. "Trojan horse" on the client machine, the call of WEB pages could possibly be falsified by an attacker.

The user selects the phone number via the input window (the WEB Page) of the service in question, or gives this number with an extension, or by keystrokes his phone, etc., right at the telephone dialing the server that he wants to dial over the Internet.

The server of the service then calls the telephone number obtained from the user via a switched dial-up telephone connection over which the Internet connection is to be used and informs him of this, whereupon the person concerned calls the relevant telephone number WEB Page of the service. It is evident that this process can also be fully automatic when a special telephone device is available as a terminal. Such a terminal, or telephone device, then consists of a traditional telephone connection, an Internet telephone of the service in question and an automatic coupling device (relay, semiconductor switch, etc.) for establishing the data loop between conventional telephone connection (without user intervention). About this coupling device is after calling the WEB Page of the concerned Service, through the server, to this WEB Page, or to the called user again via the data loop one CODE via which one data connection sends and receives over the other again for the examination, examined whether with the call the WEB Page actually the right one WEB Page was called.

It is evident that the method can also be performed when the WEB Page is manually called by the called, ditto the data loop via a manually established coupling (acoustic coupling, infrared coupling, etc.) is made.

It is evident that this method of distinctive coding of a caller, ditto the distinctive coding of a called party, using the phone number of a classic (dial-up connection) telephone line (T- #) of the caller (ditto possibly also in the reverse direction of the called ) can continue to be used to monitor not only the servers at the endpoints, which provide callers and called parties with the interface of their terminals (client server CL , or Internet phone, etc.), but also for any intervening server, including the home wiring of the connections of callers and called parties.

In principle, can be with the preferred data loops DS and their check codes also track the paths of the data packets through the Internet, without having to access the network directly. In this case, instead of dial-up connections, other Internet connections can be used to establish the data loops. Just as for all examples instead of dial-up connections (T- #) also other classified as safe connections, or network connections (including those of the Internet, if special measures are provided) in the prinizip can be used.

It is further evident that in addition to or instead of using the phone number T- # of a mobile phone also an encrypted identity number of the mobile phone in the data sent by the phone encrypted recorded and for the identification of the mobile phone in conjunction with the data loop used DS can be used to give attackers no attack opportunity here. That is, in general, the entire combination of the (for a switched connection) security measures taken by the network provider for the establishment of such a connection to be understood here under telephone connection T- #.

8th illustrates the access for setting current encryption parameters in the phone by the server. For example, are two servers (Display Server SDIS and anonymous server SANY in 19 or also a general server I and a certification server II . 13a . 13b ) into the data loop closed via the mobile phone DS (Telephone network / IT network, 8th ) included as a serial circuit, then the over the telephone network, the mobile phone directly feeding server (via IT - Network further networked server chain) via the transmitting / receiving part S / E of the mobile phone, the encryption parameters directly bypassing the other server in the phone store ( VSE ), ditto the over the IT Network over the client machine CL (with coupling interface, or interface IF to the mobile phone) directly feeding servers, the encryption parameters in the mobile phone over the coupling interface IF directly bypassing the other server ( VSS ). The encryption units VSS and VSE work separately from each other so that the encryption of the server chain (in the data loop with I . II ) can be done completely independently of each other.

In a parallel circuit of the data paths, a single server can do this the other way round via a cross-commutation of the data paths, as already discussed. Furthermore, different configurations can also be transmitted and controlled by control characters, etc. from the server.

Examples) 4.0:

The examples given below relate to particularly advantageous further developed applications of this method, in which via a further network (telephone network, mobile phone network, etc.) in addition to an IT network (or to an alternative network such as intranet, etc.) a data loop on the relevant terminals (such as an IT client CL and a telephone / mobile, etc.) of the networks is formed by a via the data loop DS sent code ( CODE ) Make the assignment of the terminals concerned subscriber lines or addresses (WEB pages, etc.) or from different server processes on the port number (including telephone number T- #) of the relevant other network.

The two (possibly also simultaneously applicable) options are provided, the data loop made by coupling at the client CL server ← → terminals (such as IT website ← → telephone via T- # number) ← → server, as a serial connection, in which a server of the one data path emitted code (KODE) on the client (via its terminals) formed data loop DS the server on the (respectively) is forwarded back to the other data path and at the server the transmitted code (KODE) specified by him as a random code is checked with the returned one for consistency. Optionally using an encrypted alienation / dito re-decrypted recovery of the code ( CODE ).

Or, if required, the data loop DS can also be implemented as a parallel connection, in which a code sent by the server via both data paths ( CODE ) over at the client CL Existing terminals is checked, the test via a coupling of the data paths (as a data loop DS ) takes place in one of the terminals (eg in a mobile phone, etc.) of the user. In both cases series connection and / or parallel connection is still an alienation (encryption) and recovery (decryption) of the code ( CODE ) is preferred to prevent manipulation by attackers.

21 relates to another preferred application, with the purpose of being in a local server, eg a corporate network using a mobile phone simply and without a password, or with a very simple password (not the security of the actual access to the protected data, but only the initialization of the access procedure).

In the examples already described, such an application for an Internet server is already described, with the purpose that the user in a magazine, or other print engine, etc., printed exemplary code, such as a number, in a WEB Page in which he uses his mobile phone with a relevant data loop DS in which a code sent by the server ( CODE ) is returned to the server again via the mobile phone logs in, after entering the first input of the exemplary number (taken from the printing unit, or from the magazine), for subsequent calls (or sessions of this WEB page), the user already exclusive use of his cell phone (identified by his phone number T- #) by closing the data loop DS (via his mobile phone) gets access to the protected data.

In 21 An example is described where the same procedure is performed on an internal company server server I, over an intranet ITR or other common network with the client, or a workstation CL is applied, and further, as already described in the examples mentioned, the implementation of a received from a mobile phone SMS in a serial coupling signal, which for the coupling to the client computer CL is used, for example, in an acoustic signal, which is via the handset L of the phone in the micro MIC the client computer is fed, or in an infrared signal, if an infrared interface between the mobile phone and client computer (or workstation) CL is used, etc.

Will the user in the server I via any workstation CL log in, then he can do this without a password or in addition to a password in the following way:

He gives his assigned name and / or a password in the workstation CL one, whereupon the server I a random code ( CODE ) and calls the user's mobile phone, or over the Internet IT to the user's mobile an instant SMS sends.

In this case, the converter interface of the mobile phone, which converts the SMS into the serial coupling signal, designed so that the text of the SMS For example, a freely selectable by the user (and sent by the server as text sent) code word that the user reads as text, eg "LOG-IN IN COMPANY CALCULATOR with number key 1". Furthermore, the user can see from the sender's telephone number that the company server has sent this SMS, whereby the sender number in the mobile phone can also be assigned to a text "COMPANY SERVER", etc. By a special operating function, eg a keystroke of a certain number key (" 1 ", etc.) of the mobile phone, the transmission of the SMS contained in the text message, but not necessarily displayed in the phone, generated by the server test codes KODE (eg as modulo 2 Signal with constant block repetition and synchronous bit). The modulo 2 Signal, as is usual in this method, with fixed block length, continuous block repetition and a blocking, block-to-block alternately alternating synchronous bit work, thus by Exclusiv-or comparison of the block length delayed serial data signal with the undelayed, while checking the Block length, the components of a correct block information (with error detection, or by overwriting successful correction) can be decoded out.

If the server recovers by comparing the returned code ( CODE ) after its decryption that it corresponds to the (before the encryption) emitted, then he releases the access, or the authorization of the user is recognized as recognized. Since in the data loop DS at the terminals further encryption of the code CODE can be made, the decryption in the server still takes into account all the algorithms according to which appropriate alienations of the code have been made.

As already indicated in the illustrated examples, the possibility may be a data loop DS to continue to be secured by entering a pin number on the phone, and it can still be on the phone still personal data ( PIC ) of the user to the server (I, 21 ) over the data loop DS (and also with encrypted) with are sent, as the data for the detection of a fingerprint (via sensor FI , for example, below a transparent button, cf. later, arranged), or for voice recognition, in which case maintained at IT Connection in the cell phone additionally still is spoken. In this case, for example, as an micro for the client, an external micro (as an adapter) can be used, which can be attached to the handset T of the mobile phone via a self-adhesive rubber (which is also interchangeable of this adapter to renew it with decreasing adhesion) and can be easily solved again at any time. If the sample text which is still displayed as an SMS text (from the server) is then spoken into the microphone, then this acoustic signal is transmitted in the signal sent by the mobile phone to the data loop DS (acoustically or via infrared, etc.) in an analogue or digitized manner. There are two possibilities, the personal data ( PIC ) of the user closed between two blocks of the server generated CODE's Include, interleave (or encrypt) the data loop, etc.

Because the code sent by the server via the mobile phone ( CODE ) Is sent encrypted by the server, and in the mobile phone, as well as in the client computer again (thus doubly encrypted before it is sent back to the server I, if necessary, in a simplification of CODE with the text of the SMS. However, if it should be disconnected, then the phone is modified to the effect that when a server number (as the sending phone number of the SMS) this separation of the code KODE simply makes and does not display, eg the code can then by a control character sequence, such as. eg three points ("... CODE "), etc., are initiated.

The encryption of the code takes place, then in each case at the relevant point in that he before the transmission (server), or the received in the terminals (HANDY, CL client) code according to an algorithm, which on the one hand constants, on the other hand handles variable changes will be undone accordingly before the comparison. As already explained in the examples given, the parameters (variables) can be changed as desired, depending on the purpose, from both sides of the data loop DS (with respect to the different connections ITR and mobile telephone connection), these parameters each to a location for encryption / decryption from the server ( I ), not only via SMS, if necessary also using the regular data format of a mobile phone, etc.

It is sufficient for many applications, if the over a corresponding terminal CL (eg, via internet IT can be connected to a server networked smart card reader, etc.) closed on the client side data loop DS is closed only briefly for the purpose of transferring the encryption parameters, and after the Internet IT Connection has checked the telephone number T- # of the telephone line used by the client (or even mobile phone connection, etc.) and has also transmitted the current parameter (variable) for encrypting / decrypting the data from the server (for the CODE as well as the general data, as for the delivery of a digital signature, etc.), the relatively expensive telephone connection (mobile phone connection) while still maintained IT Connection to the relevant terminal CL can be terminated. The server can do this via the IT Check at any time whether it is still the same, already identified by a mobile phone T-# connection IT Connection, or can the telephone connection T- # through the server also over the Internet IT - Telephone dialed to save costs.

It is evident that the server I for the examination of the fingerprint or a voice pattern also any database via IT continue to query. Besides that too 21 in principle, the testing of the data loop could also take place via a local switching system with a corresponding radio network, etc., but the use of standardized mobile phones is of great advantage, in particular because the proposed extension function in which an SMS is inserted into the serial data signal for coupling the data loop DS is implemented for all applications that in the examples already explained are also used and it is in principle the same whether the server I is a local server with a workstation CL, or an Internet server with a client CL.

Also for the detection of a fingerprint an improvement alternative is proposed: The sensor is located under a transparent surface of the phone, the user has to press slowly with his finger, the impression is to be pressed and the resilient yielding, the optics fixed underneath is arranged. The image of the fingerprint is changed from outside to inside when it is pressed onto the transparent surface. The optics (with respect to the diaphragm) is so dimensioned that it has a particularly small depth of field, so that only the directly on the surface resting part of the finger is sharp, the (spatial) behind it no longer part, and also a not closer to the optics zoomed object. Such a design can be achieved well by enlarging the image section of the optics by increasing their distance from the recorded image (chip), as described, for example, in US Pat. with cameras by intermediate rings the case is. If the transparent support surface gives way elastically, then the part of the object that was previously sharp (because it is too close to the lens) and the part that was previously out of focus (because it is too far away from the lens) now becomes sharp. The approach of the transparent support surface is measured to the lens. That The fingerprint is captured by the built-in camera of the mobile phone not only as a surface image, but also as a spatial image, because the measured values of the surface approaching the lens are constantly measured. That the finger is also measured with respect to the curvature.

In the evaluation, all the snapshots of the fingerprint are evaluated and related to each other in relation to the measured distance of the photograph (i.e., the scanned path of the recording surface). The advantage of this method is that it is then no longer so easy, e.g. to take a fingerprint of a glass, then to process it for PC editing for such input, e.g. using a high-resolution optic adapter of a calculator to use for a counterfeit.

To Fig.22 to Fig.28:

The pictures 22 to 28 are not to scale but only shown schematically.

22 relates to a further proposal to accommodate a cheap optics side of a cell phone to scan fingerprints, the expensive, high-resolution chip of the video or digital camera is used for scanning, with the training at the same time also the finger bend corresponding to the finger scan with. In this case, the image reversal described below (via mirror) can also be well gekappselt housed in a particularly small module.

23a and 23b to 25 , concern proposals to record the iris with the high-resolution standard optics of the mobile phone and transmit it to the server for analysis. As pointed out in the previous examples, the user's personal information is combined with the check code CODE the data loop DS the other network (mobile phone network + IT Network) are encrypted so that, even if they were to be illegally injected by an attacker as the applicable data, they are considered invalid in the server if the check code generated by the server CODE (to check the data loop DS ) not true.

24 relates to a variant to indicate the correct removal of the mobile phone from the user's face when recording the iris.

25 concerns a further variant 23a . 23b ,

26 concerns a variant in which the earphones of a mobile phone connection are connected via radio or via a plug connection with the mobile phone and are fixed to a headband (otherwise conventional design),
in which 40 ..... headband with 44 electrical connection of the headphones ( 41 ) to an RF receiver with amplifier 45 in which the antenna can also be inserted in the headband (eg between two elastic fabric layers), 43 ... optional holes.

27 concerns a microphone attached to a tie pin ( 51 ) is mounted and connected via radio or via a plug connection to the mobile phone, wherein 50 ...Microphone, 51 ... needle, ..... 52 Fixing connection of the needle.

28 concerns a detail for the slider for covering the camera optics, with 23 ... slider, 20 ... front of the phone with the optics 18 ,

to Fig.22

General: For the execution of a low-cost fingerprint sensor, the pressure surface on a cheap optics, or lens, the finger is placed over a spring arranged above transparent support surface. Below a small reflective mirror (45 °) is provided, in which the image is directed to another 45 ° mirror, which is only partially reflective, or semi-transparent, and therefore works as a beam splitter. Furthermore, the usual for the fingerprint scanning light source is still provided. The straight path (from the top) of the beam splitter affects the usual camera optics of the mobile phone. By a simple, manually operated slide, with depending on the position of either the lens for the fingerprint sensor or the camera optics (see also 28 ) is covered, the dropping onto the image pickup chip unwanted image is darkened in each case. This simple method makes it easy to double-use the expensive image capture chip along with its transmission technology to the grid.

About the path recording according to the approach of the contact surface of the finger in front of the optics for contrast evaluation of each sharply recorded fingerprints on the image analysis in the server, a safer typing and a particularly difficult circumvention (which could be made for example by generating a relevant simulation image) can be achieved ,

In this case, a display is made in the development (on the display), for example, a like them 24 corresponds to, or a similar, which indicates to the user whether he is tighter or less firm on the receiving surface ( 11 . 22 ), in which case the server monitors and analyzes this action of the user in real time, with constant evaluation of the image of the partly blurred fingerprint, or the displacement of the sharp areas of the image made by this actuation.

Special: In a modified version after 22 That's the cheap lens 15 (as optics) taken over a greater distance (a) on the image receiving surface corresponding mirror 16 projected, which has a further deflection mirror 17 the picture on the recording chip 19 projected. The greater distance a between mirrors 16 and lens, or lens 15 corresponds to the spacer rings otherwise used in a camera, to a very small image detail at a given focal length of the lens 15 to get, with the associated side effect of a particular shallow depth of field is desired.

Because of the relatively "large" distance a, the recording of the fingerprint (visual ray S2 ) from the narrow side of the cell phone, but with the camera lens 18 for the regular recording of the pictures (Sehstrahl S1 ) As usual front of the phone is provided. For example, sideways to the point where the camera lens 18 is provided, a slightly longer distance for the realization of the distance a for the inclusion of the fingerprint, in otherwise conventional design of a mobile phone, is possible.

This is done via the mirror 16 . 17 Guided projection path for recording the fingerprint (visual ray S2 ) once perpendicular to the narrow side with deflection by mirror 16 and still diagonally to the broadside, with mirror 17 deflected (see also angle α of S2 on mirror 17 ), or via mirrors 17 obliquely on the image pickup surface 19 of the image pickup chip, the straight projection path of the visual beam S2 for the actual camera lens 18 (perpendicular to the front of the phone) is not hindered and immediately without mirror deflection on the image pickup area 19 of the image pickup chip. Thus on the image pickup area 19 the image pickup chip is a mixture of superimposed projected images, wherein by simple manually operated slide 22 . 23 , each in front of the optics ( 18 ) can be pushed (or in front of the transparent support surface 11 for the fingerprint recording), the respectively unwanted projection path is darkened.

How out 22 visible and somewhat exaggerated in length (so that the details can be recognized from the drawing), the distance between the support surface 11 of the finger 10 (or object) and lens 15 (or lens) through a guided ( 24 ) Tube (sleeve 12 ) formed on the upper side (ie the outside of the mobile phone housing 21 ) has the support surface for the support of the fingerprint and is resiliently mounted (see 13 ). In this case, the compression spring 13 and the tube 12 also be made of plastic. By the already explained large distance a between the lens (lens 15 ) and image redirection (at the mirror 16 ) we get a very shallow depth of field. Where, when taking the fingerprint, the finger ( 10 ) over the transparent support surface 11 on the tube 12 suppressed. According to the size of the finger 10 will therefore be during the approach of the bearing surface 11 (because the sleeve 12 against the spring force 13 displaceable), to the objective (lens 15 ), change the sharpness of the image (corresponding to the curvature of the fingertip) from the inside to the outside, this change taking place according to this approach, and this approach being the sliding path of the sleeve 12 corresponds, which is measured by a sensor. For example, by a solenoid 14 , in which the sleeve is immersed (or approaching) with a frontally attached metal ring, wherein according to the eddy current principle, an approximation measurement, or by gap measurement through a hole through which a light beam on the change in intensity, the displacement of the sleeve 12 is measured. Furthermore, an indirect light source is still present around the object, ie the fingertip when placed on the pressure surface 11 to illuminate accordingly. It is sufficient if the fingertip (to get defined ratios) as flat as possible on the support surface 11 is put on.

to 23 Another preferred training for the phone concerns the iris scanning, in addition to the retractable lens 18 To put a small mirror so that the user can look into this mirror and adjust its position to the phone so that he sees in this mirror his eye to record with maximum resolution, the iris with the camera.

The in 3a Framed by a rectangle highlighted part of the drawing corresponds to such a training using a standard lens 18 , where the side-facing and to match the field of view of the lens 18 tilted mirrors 34 (if appropriate, also correspondingly curved, etc.) at the correct distance to the mobile phone the user shows his eye and according to this position, the user's eye over the entire receiving surface of the chip 19 is projected. In order for this adjustment is easy to realize, is the lens 18 extendable to the distance between optics 18 and image pickup area 19 To increase the chip accordingly, for example, by manual rotation around a spiral groove (eg to hollow cylinder 32 , within which the electronics of the recording chip is housed) is made, similar to the linear feed in mini printers, etc.

In principle, the mirror to be integrated in the prinizip at any point in the mobile phone on the front side, cf. 34 , (or from the bottom undressing mirror, etc.) also on the display, which reproduces the image of the eye, be realized, however, this variant is also suitable for mobile phones that have no particularly complex display and have only a cheap camera ,

Or, as in 25 shown, the linear guide 30 of the lens 18 is with a compression spring 39 so biased that they are the lens 18 pushes outward, thus to m image capture chip 19 ( 23b) the farthest distance a is set. Should the lens 18 on the other hand, stand in the normal recording position, then the linear guide 30 simply pushed in by hand. It is provided in a further development that the lower (or relative to the mobile phone housing, inner) edge of the sliding cylinder 30 with a soft iron ring ( 36 ) is provided, which with inserted sliding cylinder 30 on a small cobalt magnet ring 37 rests, causing the sliding cylinder 30 against the spring force of the compression spring 39 is kept fixed in the retracted position. So that the inserted sliding cylinder 30 (where the optics 18 ) is mounted, also precisely rests, special mating surfaces are provided for the edition, being between soft iron ring 36 of the sliding cylinder 30 and Kobald magnets 37 of the housing ( 40 ), then a very small air gap is tolerated (because the magnets can not be made so accurate). Ie in the inserted position ( II ) is the intended as a lens carrier sliding cylinder 30 very precise on the housing.

In the extended position (as shown in 25 ) lies the projecting edge (cf. 36 ) of the sliding cylinder 30 on the housing neck 41 the linear guide of the sliding cylinder 30 on, or is very well centered (by all-round pressure of the spring force on the ring 41 the end face of the housing neck. Ie in the extended position ( I ) is the intended as a lens carrier sliding cylinder 30 very precise on the housing neck.

In the positions in between there is no need for precision, that is to say the sliding cylinder 30 can be guided very loose, so that it is pushed out at very low spring force, when the tightening force of the magnetic field of the Kobald magnet ring 37c is correspondingly weakened, what about an opposing field coil 38 takes place, for which purpose a corresponding Sägezahnstromimpuls is fed with a slow current pulse, so that the field is sufficiently weakened. It is expedient, in order to save power, the sawtooth switched in its increase, where it follows up to the vicinity of the detected field weakening a steep slope, and after detecting the field weakness follows a slower increase until the spring force 39 stronger and the sliding cylinder 30 jump out. The field weakness is measured, for example by the sawtooth is superimposed on a small rectangular pulse whose induced voltage (as superposition) is measured. If this voltage reaches a certain minimum, then the increase of the counter-field current (as a sawing stem) is flattened. The opposite field is always triggered when the user uses a corresponding function, eg scanning the iris of his eyes, or reading a bar code or scanning a text, or even to use the camera to couple for the data loop DS, etc. Where the optics then according to the principle of an attachment ring of a camera brings a corresponding magnification.

In training is the too 23a discussed mirrors 34 semi-permeable or partially reflecting, ie it reflects on the one hand the user's eye as a mirror image on the other hand allows an underlying optics with a corresponding recording chip 35 which can also have a lower resolution than the chip 19 the camera, another shot of the eye, which serves only to get a multi-dimensional image. The light conditions are selected accordingly, or can support this effect during the recording even a mounted under the lens light source. In 24 is still a suggestion made to show the user the correct distance to the phone when taking his eye. The vertical bar on the right (hatched) symbolizes the cell phone, with only one of the two arrows shown here, whether the user has to hold the phone closer to his face or further away, further if the position is right, not an arrow, but a "OK" is displayed. This display can be right next to the mirror 34 , For example, be arranged at its lower or upper edge, so that the user can concentrate entirely on this mirror.

In addition to the variant of placing a second camera on this mirror, a double lens, as in 23a . 23b further depicted, may be provided to transmit a spatial image to the server.

In a further development, it is provided that for the electronics required in the implementation of the chip 19 , which captures the image data, already has an encryption with the preferred data loop CODE is coupled, ie the code KODE sent by the server or other encryption parameters (open key), are already linked in this chip with the image data, so that with a corresponding manipulation of the mobile phone no image preservation can be fed while the data loop is checked, that applies Also for all other variants, such as a fingerprint test, etc.

Another way to avoid this is to show the user (eg by briefly flashing a symbol, as in 24 shown as a checkered dot, etc.), that he should blink his eyes at what he is dealing with at this moment. In the image analysis, this is then taken into account and the linear course of the movement of the image in the server analyzed to make sure that it is not a photo or video, etc. Conservation.

The field of application of the person recognition proposed here goes far beyond the self-interest of a person that no other person can use this recognition in their place, as is the case with the usual backups. The proposed training variants of the mobile phone, it is possible to use officially certified mobile phone as a passport or ID, dito as a driver's license, etc. In combination with the usual controls, therefore, the passport control can be largely automated, such. also at border crossings, can be done with a mobile phone via infrared, etc., through the car window through a Paßabfrage, etc. Why more costly measures for encryption (as an option to be used) are proposed here.

If the three basic variants, voice recognition, fingerprint input, iris recognition are compared with each other, then it can be regarded as an advantageous improvement that the server gives instructions to the user while inputting his characteristics (voice, fingerprint, iris image recording) the user has to follow while entering the features; be it to repeat certain displayed texts immediately, or fingerprint over a measured narrow distance within which the recording is sharp, and otherwise blurred, to approach or remove the lens (by pressing against the resilient surface), or during image acquisition to blink the iris with his eyes. This prevents the user from outsmarting the system through a simple prepared preserve or template. In addition, it is possible to prevent the user from automatically generating and feeding in a conserve according to the specifications of the server in real time, and feeding it into the image transmission, if e.g. immediately the chip for image acquisition is already directly involved in the encryption.

Finally, another option for the coupling of mobile phone and a client computer CL or a workstation. It will be on the screen of the mobile phone SMS from the server Sent and displayed and held the screen against a WEB camera of the client computer to read the displayed SMS. In this case, from the time of sending the SMS, in the server, a time-out started, after the expiration of the SMS can no longer be read into the client computer or server as valid. This prevents the contents of the SMS by phone, etc. can be shared with another user. The client computer can also encrypt only the image file directly and send as hidden in an abstract image contrast values, the server after decryption of the image file via an OCR software receives the characters back dito decrypted over another decryption of the code so obtained is that he the internally stored in the server code (that is the CODE before its encryption on sending), if the checking of the data loop DS yields a correct result. Or the OCR software to convert the pixels into characters is already used in the client computer CL, in which case only the characters are encrypted. Similarly, the server may also have a picture of the phone as CODE send, etc.

Another option of encryption, as already mentioned in the previous examples, concerns that the encryption parameters of the encryption at one of the two terminals, for example on the mobile phone, are loaded from the other network into the mobile phone with respect to the network via which the mobile phone transmits the code generated by the server via the data loop DS ( CODE ) receives.

For example, if the phone receives a call from a server and the code signal CODE from the server to the mobile phone as the audio signal (modem signal) or as a direct data signal or SMS is transmitted, then it makes sense from the other side, the mobile phone the encryption parameters of an open key (for a secret encryption algorithm) to send. In this example, this is via the data loop DS from the client computer CL , or from a workstation, etc., the case, for example via the WEB Page through which the user wants to gain access to the data via the data loop. It is also possible during the transmission of the code sent directly from the server to the relevant terminal (in this case the mobile phone via the T- # connection) ( CODE ) constantly the encryption key of the open key used for the encryption, which over the other net (here over the IT Network of the client) sent from the server and received from the mobile phone, are exchanged. This works even if, for example, the phone receives only one SMS over the T- # connection.

Then in the over the IT Network of the client received parameters (within this parameter encoded) furthermore still the information is contained, to which character positions, or also bit positions of the serial data signal, in each case a new open key, which also uses secret delimiters as string $ S1 , $ S2 .... $ sn articulated over the IT network and / or over the telephone line T- # is transmitted to the mobile phone, is associated. For example, if in the previous key-value $ S1 the value 20 is coded, then this means that from the 20 , Character position of the code transmitted from the server via the other network (here T- # network) (KODE) the following character of the serial code with the next key value $ S2 in the compound string (the parameter for the open key) is to encrypt, etc. Because usually about the IT Network is sufficient (low cost) bandwidth, the scope of this network ( IT Network) encrypt key of the open key a multiple of the actual check code (which in this example over the T- # network of the mobile phone sent by the server) make out. The coupling interface of the mobile phone to the client computer (for the formation of DS ) is then, as already stated in the examples mentioned, bidirectional to the further encoded in the mobile phone code ( CODE ) from the mobile phone to the client computer CL transferred in one direction, ditto from the client computer CL to transfer the encryption parameters to the mobile phone.

As already stated in the examples mentioned above, this can also be done in the opposite direction, whereby the mobile phone then transmits the code sent by the server ( CODE ) via the client computer CL (via the coupling interface of the client computer to the mobile phone to form DS ) and the encryption parameters are transmitted directly via the T-# network (mobile phone network). Both methods can alternatively be used alternately (in half duplex) or simultaneously (in full duplex), ie both the code sent by the server ( CODE ) constantly changes its transmission direction on the data loop DS (eg server via IT → client CL via DS coupling → mobile → T- # → server, or in the other direction: server via T- # → mobile via DS coupling → client CL → server). In this case, within the serial data stream for the code KODE even the transmission direction is alternately alternately by encrypted in the open key (which is transmitted in each case to the test code KODE of the server in the opposite direction) encoded contained synchronization characters (which indicate the current transmission direction respectively) encrypted , Not only to arbitrary characters, but also to arbitrary bits of the test code KODE sent by the server, comparable to the constant change of the values ($ S1, $ S2 .... $ Sn) of the open key (each via the other data path , or the other network of the data loop DS) the relevant terminal, eg mobile phone or a Java applet in the client computer, etc., are transmitted.

In a further development, the parameters which form the open key for the respective encryption performed in the devices (ditto server) can also contain the following control parameters (encrypted) whose decoding takes place via a secret protocol agreement made between the server and the terminals (the data loop DS). It is evident that this agreement (selected by sent addresses) can also be changed constantly.

1. a) die Bezeichnung der Zuordnung der (gegebenenfalls auch abwechselnd über unterschiedliche Datenwege) den betreffenden Geräten (Endgeräte wie Handy, Telefon, Client CL, Server, auch mehrere vernetzte Server, etc.) übersendeten Parameterwerte ($S1, $S2....$Sn) für die Verwendung (z.B. als Eingabe Paramter in einen geheimen Algorithmus, bzw. offener Schlüssel) zur Verschlüsselung/Entschlüsselung der einzelnen, jeweils zu verschlüsselnden oder entschlüsselnden Kodelemente des vom Server zum Zwecke der Identifizierung der Datenschleife DS erzeugten KODE's, welche die Verschlüsselung/Entschlüsselung betrifft,
2. b) die Kodierung bzw. Anzeige der jeweils aktuellen Übertragungsrichtung des über die Datenschleife DS, bzw. über die Koppelung der betreffenden Endgeräte (Client CL → Handy, dito Handy → Client CL) geleiteten Kodes (KODE), wobei bei Vollduplex in der nicht angezeigten Richtung auch weiterhin ein Dummy Kode (Blindkode) übertragen werden kann (der nicht bewertet wird) um einen Angreifer zu täuschen,
3. c) die Adressierung unterschiedlicher, unter den betreffenden Geräten (Endgeräte wie Handy, Telefon, Client CL, Server, auch mehrere vernetzte Server, etc.) vereinbarten geheim gehaltenen Algorithmen für die Verschlüsselung/Entschlüsselung, wobei die verwendeten Adressen Paramter wie, Geräteadressen welche die Gattung oder das Gerät bezeichnen (Client CL, oder Handy oder Server, etc.) wo eine Verschlüsselung vorgenommen wird, dito Daten zur Zusammensetzung von über unterschiedliche Datenwege übersendeten Schlüsseln unter Verwendung eines geheimen Protokolls, inklusive der Angabe des Gerätes welches einen Schlüssel erzeugt hat, dito des zugehörigen (geheim gehaltenen Algorithmus, usw.).

These encrypted control parameters are:

1. a) the name of the assignment of (possibly also alternately via different data paths) the devices in question (terminals such as mobile phone, telephone, client CL , Server, even multiple networked servers, etc.) transmitted parameter values ($ S1 , $ S2 .... $ sn ) for use (eg as input parameters in a secret algorithm, or open key) for encryption / decryption of the individual, each to be encrypted or decrypting code elements generated by the server for the purpose of identifying the data loop DS CODE's concerning the encryption / decryption,
2. b) the coding or display of the respective current transmission direction of the data loop over the DS, or via the coupling of the respective terminals (client CL → mobile phone, ditto mobile → client CL ) led codes ( CODE ), where at full duplex in the non-indicated direction, a dummy code (dummy code) can still be transmitted (which is not rated) to fool an attacker,
3. c) addressing different, among the devices concerned (terminals such as mobile phone, telephone, client CL , Servers, even multiple networked servers, etc.) agreed secret algorithms for encryption / decryption, the addresses used parameters such as, device addresses which the genus or device designate (client CL , or mobile or server, etc.) where encryption is carried out, ditto data for the composition of keys transmitted over different data paths using a secret protocol, including the indication of the device which has generated a key, ditto the associated (secret algorithm, etc.).

This preferred method of explaining bidirectional coupling of the data between client and mobile phone or mobile phone and client has the advantage that a manipulation by transmitting the data transmitted via the mobile phone to another location (or client computer CL ) is practically no longer possible, ie the data loop DS (or the place where it is formed) can not be manipulated.

The other particularly preferred features will become apparent from the appended claims. The claims are in this case also Annex to the description.

Example (s) 5.0:

The following example relates to particularly advantageous developments of this method.

29 illustrates another example of the data exchange via a bidirectional coupling of the data loop DS eg between a mobile phone and any client computer CL , in which IF ... the interface to the coupling DS symbolizes, eg an infrared interface or an acoustic coupling around the data loop DS close on the user page.

On the right, the data stream is shown, which is routed to the mobile network (T-# network) of the mobile phone to / from the server, left, the data stream is shown, the Internet IT Network (ie via the client CL ) is routed to / from the server and via the preferred coupling continues to be supplied to the phone. Besides the possibility in the client CL through a Plugg In Software or via a Java applet the identification code CODE still to encrypt, this encryption is made here mainly in the mobile phone, as this encryption on the smart card, which is also the subscriber identified easily replaceable, and possibly other algorithms in the processor chip of the phone for unauthorized are not tangible.

The data streams shown each indicate the direction with respect to the server which essentially transmits the data, but the mobile phone its specific data ( PIC ) at any time, as already explained. The same applies of course to the client computer CL (or a notebook or another cell phone, etc.).

The transmission direction designated A relates to the data transmission from the server via the telephone connection T # network to the mobile telephone via the coupling interface DS to the client CL and further from the client CL via his internet connection IT Network back to the server.

The transmission direction designated B relates to the data transmission from the server via the Internet connection IT network to the client CL via the coupling interface DS to the mobile phone and further from the mobile phone via its telephone connection T- # network back to the server.

Here is the client CL via the Internet connection IT network with the server regardless of the status of the coupling of the data loop DS (whether on the user side closed or not closed, or coupled) directly connected, or ditto is the phone via its telephone line T- # network regardless of the status of the coupling DS connected directly to the server. That is, the initialization to form the data loop DS can be for both the client CL as well as for the mobile regardless of the status of the coupling made by the server.

The encrypted transmission of the data from the server to the data loop DS (in connection with the examination and identification of the telephone number T- # of the mobile phone) codes sent out CODE takes place using both transmission directions ( A and B ), wherein the code is composed of the correct combination of the transmitted over both transmission directions shares, or code elements. During the loop formation DS, or during the coupling, the data in both directions of transmission ( A and B ) in full duplex (or optionally only in half duplex) are constantly transmitted, as in 29 for the data stream in direction A with the data KD1 .... KD46 is designated, and in the direction B with the data kd1 .... kd46 is designated.

The in this (in 29 shown) data stream from the server directly to the client CL , further on the coupling to the mobile phone and from this to the server back (in direction B) transferred code is: $$\text{CODE}\left(\text{B}\right)=\text{kd40 * * kd33 kd17 * * KD15 kd13 * * KD5 kd1;}$$

The in this (in 29 shown) data stream from the server directly to the phone, further via the coupling to the client CL and from this back to the server (in the direction A ) transmitted code is: $$\text{CODE}\left(\text{A}\right)=\text{KD32 KD31 * * * KD29 KD28 KD26 * * * KD22 KD21 KD17 * * * KD7 KD5 *;}$$

Here are all further in 29 shown in the code CODE (A) and CODE (B) after its decryption but no longer contained code elements control characters to handle the protocol, and parameters for the encryption.

The two unencrypted codes KD46 and KD1 are from the server directly (via T- # network) sent to the phone BEGIN and END Codes to initialize the beginning of a transmission, ditto indicate the end. As long as the data loop DS is not closed, for example, the phone constantly sends a test code KD1 whether there is an answer, eg kd1 from the client CL, to close the loop DS to recognize and begin the actual transfer of the data. The encrypted data also contains the personal data added to the mobile phone ( PIC ) of the user.

In order for the server to recognize the data loop as belonging correctly and to the relevant telephone number T- # of the mobile phone or user, the codes sent encrypted in both directions by the server in the manner described must be encrypted CODE (A) and CODE (B) Thus, CODE = CODE (A) * CODE (B) is evaluated in coincidence of the codes transmitted in both directions of transmission.

In this case, the code sent by the server is based on the values generated internally in the server wA (for direction A ) and wB (for direction B ) as well as encrypted sent and decrypted again values wRA and wRB, if wA = wRA dito also wB = wRB is to coincide with the coincidence KODE = KODE (A) * KODE (B).

The scheme after 29 shows a time snapshot of the data transfer at the data loop DS:

In the data direction A becomes KD1 unencrypted from the server over its direct telephone connection (T- # net) to the mobile phone as BEGIN code sent. The BEGIN CODE KD1 uses a character which does not otherwise appear (not even as encrypted, etc.), thus of all existing in the data loop DS terminals (client CL , Mobile) is recognized as initialization condition. At the same time (in the full duplex option), the server sends in the opposite direction (data direction B ) via its direct internet connection ( IT - network) to the client CL and its connection to the mobile phone, to the mobile phone a the BEGIN code ( KD1 ) associated response kd1 , if he initializes with the data loop closed KD1 has recognized.

During initialization, the BEGIN code ( KD1 ) sent by the mobile at the coupling interface, in data direction A, fed directly by the server or even only by a control character of the server, etc. So long (if not exceeded because of exceeding a time limit) until the server the BEGIN code ( KD1 ) via the coupling interface (after closing the data loop DS via the coupling made by the user), or via its Internet connection (IT network) to the client CL gets back and then in the data direction B sends the answer with kd1, via the Internet connection to the client CL and about its coupling to the phone. Thus, kd1 gets back and in the data direction A KD 2 sends to start the actual data transfer. As already stated, it is expedient to encode the respective data direction in the code, because this makes the interface in a telephone or in a mobile phone somewhat simpler in design (for the most diverse couplings), but this is not a requirement.

Dito is in the opposite direction (data direction B ) the data kd2 over the data loop in response to KD 2 sent, etc.

In the snapshot of 29 were in the data direction A the data KD 2 .... KD23 already changed by the phone further, ie further encrypted the server via the data loop DS (by the client CL ) already returned via the Internet IT network and follow it (provided in the output scheme of the server), the server also already pre-encrypted to the phone over the telephone network yet to send data KD24 .... KD46 , in which KD24 just in the phone (pre-encrypted) is read and KD23 (After it has been further encrypted in the mobile phone) is read out, the server if necessary then the final decryption (when recovering the data) makes.

Dito in the data direction B the data kd2 .... KD23 already changed by the phone also further, that is further encrypted the server via the data loop DS on the T- # network of the cell phone to be returned and follow (provided in the output scheme of the server), the server also already pre-encrypted to the phone over the telephone network data to be sent KD24 .... kd46 , in which KD24 just in the phone (pre-encrypted) is read and KD23 (After it has been further encrypted in the mobile phone) is read out, the server if necessary then the final decryption (when recovering the data) makes.

The further data for the already explained of CODE = CODE (A) * CODE (B) concern the parameters for the encryption, the name of the positions, which data are to be evaluated (ie where the data for CODE (A) and CODE (B) Furthermore, for example, from which direction (A or B) the parameters for the encryption for the respective code data CODE (A) and CODE (B) can be referenced, ie it can eg for CODE (A) its encryption is partly from the direction A, as well as obtained from B, ditto for CODE (B) , etc. Thus, the formation of secret protocols for use for encryption are virtually unlimited. Furthermore, a lot of the data can not be used at all, or even only as a placeholder. In the encryption data then the placeholder data (dummy data) are called, which on the way to the server to the relevant terminal (eg mobile phone), directly, or via the data link of the data loop DS, yet contain any specific information, or even encrypted control characters for Identify their property as a dummy data (dummy data), if necessary even contain a position number, or a function assignment, which data they should receive. After passing through the relevant terminal whose data they are to receive (eg as personal data PIC of the user), these data are essentially replaced by the data to be recorded or by control characters which relate to the name, the block length, etc. of the data to be recorded. Again, there are virtually no limits to the formation of secret protocols for use in encryption, where, for example, even the assignment of the bit sequence for the decoding of the data can be included in the encryption; Furthermore, the assignment of which data can be determined by encrypted agreement likewise first, ditto the addressing of different encryption algorithms (eg formulas, sequencer controls, etc.), which are fed with the (as a variable) sent parameters. The encryption of the as Variable sent parameters also constantly change (implicitly contained in their permanent encryption), partly controlled according to fixed patterns, partly determined by the server at random and in the data stream ( A . B ) with sent variables. Wherein, according to an encrypted algorithm, also a randomly transmitted via transmitted key variables, unpredictable swapping of data transmitted via the data link to the relevant terminals (eg mobile phone) with respect to the assignment of data to the data direction ( A or B ) related encryption data or validity of a CODE's , etc. may still be made. So that it is unpredictable which key parameters from which data direction ( A or B ) concerning which code elements CODE A , ditto out CODE B , ditto for the encryption of PIC Data of the user belong, or how the insertion also made using both data directions encrypted PIC the user between the data directions A and B split. As always, such information may be coded directly as a bit combination of a word or byte, or over a longer sequence, ditto among secret (encrypted transmitted) constantly changing word and bit combinations, etc.

Measures to prevent the on the user side between the terminals to be made direct coupling to form the data loop DS (eg between a mobile phone or telephone T- # and an Internet client computer CL , or between two mobile phones, etc.) can not be bypassed by interposing another network (Internet, telephone, radio network, etc.).

Such a measure is quite useful for some of those mentioned, for example, if it is to be prevented that the user via a third party to the identification made via his telephone number T- # also to another client computer CL could move around the data loop used for identification DS to build.

A measure for the acoustic coupling was in the DE 10 2004 046 413.8 already stated, namely to make a statement about the measured bandwidth.

The following development is somewhat more universal and uses a transit time measurement of the transmission path of the data loop DS used via the coupling of the terminals on the user side. The duration of an acoustic coupling to a high proportion by the (relative to the electrical reproduction) relatively low speed of sound over the transmission path of the coupling is determined, in contrast to an example made infrared coupling, where this route is then practically not included in the measurement and therefore the transmission time of an optionally interposed in the coupling between the data link because of the length of the path is an extreme multiple of an optical coupling.

To get out now, whether in the coupling path (to form the data loop DS) between the terminals concerned (which are generally referred to here as the data transmitter S and data receiver E) on the user side, a data link has been switched between, in which the data propagate at about 300m / μs, assuming availability of support for the terminals used for the coupling, different assumptions are made.

A preferred possibility is, from the data receiver E (ie in the reverse data direction tü = tES, 32a . 32b) to transmit via the coupling interface a set signal to the data transmitter S, in the data transmitter S (eg also via a support software in the client computer CL ) sets a high-resolution clock (μs clock), in accordance with a in the data receiver E (eg in a mobile phone) also available clock and then by protocol understanding between data receiver E and data transmitter S a time related to the internal clocks (start value, 32a) to agree, to which the actual data transfer from the data sender S (here, for example, the client computer CL ) to the data receiver E (eg in a mobile phone) for the purpose of a transit time measurement should begin. At this time, then the data transmitter S sends a signal or data signal to the data receiver E, with its internal clock, the duration of the signal from the agreed time, where the transmitter data transmitter S (according to protocol agreement) sends the data until the actual arrival of the data (at the data receiver E) measures.

Since the clock of the data transmitter S from the data receiver e using the over the coupling of the terminals (here Client CL and mobile) existing data path was set with a set signal, in the case that this data path a substantial term (tü = tES in 22b) has (because the data path was not closed, for example, not directly via an infrared link, but also via a "hidden" data network, or was closed by an acoustic coupling with a corresponding term), the clock of the data receiver E by this term (tü = tES) compared to the data transmitter S (which has been set by the data receiver E) proceed.

• - die Fehlzeit (tü=tES), um welche die Uhr im Datenempfänger (gegenüber der des Datensenders S) vorgeht und
• - die Laufzeit (tü=tSE), welche die Daten als Signal (Meßkode) vom Datensenders S zum Datenempfänger E benötigt.

The setting signal for setting the clock in the encrypted data stream (cf. 29 ), so that the user can not explore the time of setting. In the subsequent measurement of the transit time, therefore, in relation to the time agreed by protocol (t3 in 32a . 32b) to which the data transmitter S the data or the signal (measuring code in 32b) sends to which (s) the transit time measurement relates the sum of the following times (tES + tSE):

• the absenteeism (tü = tES), by which the clock in the data receiver (compared to that of the data transmitter S) proceeds and
• - The duration (tü = tSE), which requires the data as a signal (measurement code) from the data transmitter S to the data receiver E.

32b illustrates this in an example. The mobile phone, which is to correspond to the receiver E for the later data transmission (measuring code) via the coupling interface, sends the setting signal to the data transmitter S via the coupling interface at the time t + 300. In the drawing, for simplicity, the time t is not entered, but only the fine resolution, each in μs. Where, since only a small time range of high resolution is of interest, the value t can also be set to zero, for example (instead of the value as well) 300 could also be started at zero, etc.).

Since the (in the opposite direction data sent) setting signal which here, for example, the value 300 has (but could as well have the value zero, etc.) via the bidirectional coupling interface from the data receiver e to the data transmitter S ( 22b , tü = tES) 100 μs takes it up to the data transmitter S arrives and the clock of the data transmitter S on the value 300 sets the clock of the data receiver E at this time the value 400 on, is thus 100μs compared to the data transmitter S in front. The setting process of the clocks is either initialized by the server, or if initiated independently on the peripheral devices, then the server is notified of this process via the protocol. It can be the setting of the clock in a client computer CL (as a data sender S ), for example, so that the coupled to the data loop DS cell phone (or the data receiver e ) as a set signal to the client computer CL passes a time to which the support software in the client calculator CL forms an offset value at the current time of the internal computer clock (with microsecond resolution), then later on the start time of one of the client computer CL at a well-defined time ( t3 ) can be monitored.

Immediately after setting the clocks (in 32a if this is the time t2) the server sends to the client CL (Data transmitter S ) as well as to the mobile phone (data receiver e ) a data value which is a starting value for specifying a time t3 corresponds to which the client CL as a data sender S the data receiver e sends that signal as a measurement code in the data receiver e is evaluated as Zeitmeßsignal. This measuring code can be any code occurring in the protocol if the server uses this code (in communication with the terminals) in specifying the starting value for the indication of the time t3 (as a parameter) adds. Whereby this parameter then the pattern for the decoding of the time t3 expected measurement codes in the data receiver E sets. Or, if necessary, for particularly precise measurements, it may also be just a signal edge which, following the transmission of a preparation code for announcing this signal edge, to the data receiver e from the data sender S is sent. For the time of t3 = 550μs determined by protocol (eg agreed on the data traffic with the server) above the start value, the client CL (data transmitter S) sends the mobile phone (as a data receiver e ) the measuring code. The clock of the data receiver e (in the mobile phone) at this time the cradle ( 550 +100) μs = 650μs. Thus, when the measurement code arrives, the time measurement made in the mobile phone ( 750 - 550 ) μs = 200μs for the outward and return path of the signal conducted via the coupling loop. The reference value of 550 μs has received the data receiver E in the mobile phone via the protocol as the starting value (as well as the data transmitter S of the client CL ).

The simple way of 200 / 2μs = 100us corresponds to e.g. approx. 30 km conduction path as series connection at an infrared coupling interface of the end devices, or approx. 33mm sound path of an acoustic coupling. If a support surface is used for the acoustic coupler, or made to the condition that the microphone of the phone as close as possible to the speaker is to keep, where 3 cm then too much, then it can be assumed in both cases that in the coupling interface between the End devices still an unauthorized connection is connected in series. In this case, the mobile sends a corresponding indication code to the server, which then e.g. aborts the procedure, or in an acoustic coupling the user asks to keep the microphone of the phone closer to the speaker of the client computer or to keep closer to the earpiece of another cell phone (which in this case the data transmitter S), etc.

22 a further illustrates the timings wherein:

t1 .... the time is where the start time to the two clocks ( 22b) in the data transmitter (clock-S) and in the data receiver (clock-E) via the data connection of the coupling (ES) is brought by a data receiver (clock-E) to the data transmitter (clock-S) sent set signal to "match", wherein the "simultaneity" because of the duration ( tES ) of the set signal does not actually occur and therefore the clock of the data receiver (clock-E) by one of the time (tES) of the set signal corresponding time difference against the clock of the data transmitter (clock-S) proceeds accordingly.

In 22b two cases are drawn, one with a shorter duration tES (Point A) and one with a longer duration T'es (Point B). This also applies to the reverse transmission direction t'SE ,

t2 .... is the time, or time range, in which by the server for both devices (data sender S and data receiver e ) the starting value is transmitted. This value contains the information from when (measured in each case with the internal clock of the devices affected by the coupling) of the measurement code, whose duration is to be measured from this point on, from the data transmitter S is to be transmitted to the data receiver E. This is time t3 (point C). It is evident that this point in time is sufficiently selected after the transmission of the starting value has expired. Points D and e refer to the time span by which the clock in the data receiver (clock-E) is opposite to the clock in the data transmitter (clock-S). (For both cases, tES and t'ES are drawn, each referring to point C or t3). The running time (tSE or t'SE) of the measuring code (from the data transmitter S to the data receiver E, see also FIG 22b) ,

In 32a is also the option of using a time window tF drawn. This, by the data of the start value (in time t2 ) set in the data receiver E (or set) time window allows the use of the measurement codes obtained in the data receiver only in this time range, otherwise the code is ignored.

In 31 another variant is shown in which, unlike the previous method, the transit time is not measured by the data receiver, but by the data transmitter, which, however, receives from the data receiver an acknowledgment signal for this purpose, or an acknowledgment code via the data link.

IS ... corresponds to an infrared interface of the mobile phone, from which the controller or directly a processor receives the data. In addition, a state machine sequencer is provided, here divided into OS for generating an output signal Response Code OUT and in INS for quick decoding of a client CL received codes, this client CL possibly also a second mobile phone can be, etc. Will through INS one from the client CL received code coded, then answers OS with a response code response code OUT and the time difference between the measurement code and the response code is in the client CL measured. Conversely, a response code can also be sent out to the client, so that the latter gives an answer that can be answered INS is decoded and the transit time between the transmitted code and the received response can be measured as a TIME VALUE for assessing the transit time. Thus, here is a real-time handshake measurement method in which the hardware demands are slightly higher, as in the previous variant, which uses two clocks for measurement.

• - die Messung der Laufzeit mit einer im Datenempfänger (E) vorgesehenen Zeitmeßeinrichtung erfolgt, bezogen auf einen dem Datenempfänger (E) bekannten Zeitpunkt, wann das Signal vom Sender abgesendet wird,
• - oder die Messung der Laufzeit mit einer im Datensender (S) vorgesehenen Zeitmeßeinrichtung erfolgt, bezogen auf ein Quittungssignal, welches der Datenempfänger (E) bei Erhalt des Signals dem Datensender (S) übersendet.

In general, therefore, a runtime measurement is used for both variants in which the runtime of a data transmitter ( S ) to the data receiver ( e ) is measured over the coupling loop transmitted signal, wherein

• - measuring the transit time with a data receiver ( e ) provided time measuring device, based on a data receiver ( e ) known time when the signal is sent by the transmitter,
• - or measuring the runtime with a data transmitter ( S ) provided time measuring device, based on an acknowledgment signal, which the data receiver ( e ) upon receipt of the signal the data transmitter ( S ).

30 shows the sake of completeness, the coupling of a notebook with a mobile phone via an infrared interface.

Example (s) 6.0: concerns further applications:

The following example relates to particularly advantageous developments of this method.

33 . 34 . 35 relate to an example in which the data coupling is not directly between the devices concerned (here cell phone and client computer CL ), but via another intermediate link, which the data path between the two terminals (mobile phone and client computer CL ) again encrypted (if necessary, bidirectional). In addition to the possibilities of using an infrared interface, etc., an HF interface of particularly short range is used, comparable to electronic car keys, etc. In this case, because of the short range, the power supply of the chip (HF) in the intermediate link 300 (eg a wristwatch, etc.) are also powered by the RF transmitter of the mobile phone and / or client CL. Where appropriate, for the client CL an adapter is still provided, which converts the HF interface of the clock into an available on the computer (eg infrared, etc.). In 35 are these RF interfaces with CL (Client) and H (mobile), whereby the data path via the encryption chip ( VS Chip) is made.

34 shows an example of a protocol of the encryption chip, for example, in a clock, or in a piece of jewelry, such as in a ring or in a brooch, etc., housed. The process begins unencrypted in the relevant chip with a standard communication over which the data loop DS is closed. In this case, the non-volatile stored in the chip last access number (from the previous data transfer) is queried. This access number is comparable to a transfer code number insofar as it designates a selection address which corresponds to an encryption algorithm hidden in the chip via which the current encryption is to be carried out. Multiple addresses may optionally be stored, and if the method is repeated within a short time, these (old addresses) will be used sequentially to designate the encryption algorithm. The reason for this is that interception of the current encryption address should be prevented. This means that even if secret betrayal would betray the algorithm, it is unclear which current encryption parameter or algorithm is used, ditto only one algorithm can be used and the access parameters concern keys (variable), which are used for this algorithm respectively current. The advantage of the intermediate element for further encryption is that in the case that that cell phone would be lost, or any other manipulation Vorläge, by the other intermediate link of the control code CODE is appropriately encrypted further and this further encryption from the server (when checking the code) must also be encrypted back. Thus, both the cell phone and the link (here the clock) must be present in order to close the data loop correctly.

In 33 is still the option illustrated that the server I, which presents the client eg a WEB page for a referendum, his test code (code 1 ) both via the via IT networked server II , as well as directly via IT to the server III of the radio network (for the mobile phone network) can send, dito the other way around the server II (relevant test code 2 ). It also server II via server I and the client CL a code ( 2 ) can send to the phone, ditto server I via server II and the mobile phone network (server III ) a code ( 1 ) can send to the phone. Ditto also in the opposite direction server II directly via the mobile phone network can also send a code. This means that both on the server side, as well as on the mobile page, a code comparison can be made after appropriate decryption. The mobile phone can be connected directly via the telephone connection (server III ) to the server II send a message if the code comparison of the code received via different network is incorrect.

This also applies in the prinizip for the client CL. Thus, from the terminals (client CL and / or mobile phone) data given specifically for servers only I be determined, ditto more data only for servers II be determined, and yet each server has the assurance that this is the same data. In this example, server can be used II For example, check the telephone number of the mobile phone via its direct access to the wireless network (with the assistance of the server) III ), the server I for this example, however, not (consciously). He receives for it over the client CL specific data eg a ballot completed via a WEB form. server I receives via server II , for example,. is at a notary, only the message whether the cell phone has logged in validly for this process. This is the case if the subscriber who has been certified with the mobile phone and, if necessary, with a digital signature is registered in the voter register (ie may vote) and has not yet voted. If this is not the case, then server reports II the server I that voting may not take place. Thus, the server in the polling station I receives only valid votes, and the voter remains secret. Ditto the server II Only information is obtained as to whether someone is allowed to vote, has already voted or not, or whether the person in question is allowed to vote at all.

1. a) der Server I (im Wahllokal) keine Informationen der eine Datenschleife betreffenden Telefonnummern erhält, sondern nur jeweils temporäre Adressen zur Durchschaltung der Datenschleife über mittels Prüfkode identifizierter Datenschleife;
2. b) der Server II (beim Notar) keine Informationen, die in der Datenschleife weiterhin verschlüsselt enthaltenen sind (und nur für Server I bestimmt sind) dekodieren kann.

By an optionally still connected to the interface to the Internet log server, each server (server I and server II ) may have such a log server is constantly monitored that

1. a) the server I (at the polling station) does not receive any information of the telephone numbers relating to a data loop, but only temporary addresses for switching through the data loop via a data loop identified by means of a test code;
2. b) the server II (at the notary) no information contained in the data loop is still encrypted (and only for servers I are determined) can decode.

The allocation of temporary addresses, over which the two servers, server I and server II each communicate and that of a 1 from n corresponding selection within the set at the server III of the telephone network in each case incoming telephone connections (T- #) use of the logging for this purpose mobile phone, is carried out according to the same method as described in the examples mentioned above, only that for each pair found (KODE / T- #) the telephone numbers are replaced by temporary addresses (or intermediate addresses). By this measure, the distribution of the servers I and II works with their Internet connection 400 like a fire wall. Server I has the data of the input (eg the checked lists of a choice), server II has access control for monitoring electoral rights. In the case of complaints or suspicions of election fraud (which is more relevant today than ever before), every process in the server I is comprehensible, not via the telephone number T- # but via the associated random code KODE of the preferred one used when assigning a temporary address Data loop DS. In this case, the code (KODE) assigned in each case only once by the relevant server for checking the data loop DS as a random number can be used in both servers (I and II , ditto in the server III of the telephone network T- #). The telephone numbers T- # are in the server II as long as (strictly isolated from the code CODE!) Stored as storage information, as they have chosen until the end of the election for the purpose of testing whether one already or not. In addition to the telephone number T- # also special user data, such as in the zu 33 already explained intermediate member (a clock, etc.) can be used and also to the telephone number T- # as (positive) recognition criterion with stored, or it may be the personal data of the user (PIC) for the recognition of the telephone number T- # queried but do not need to be saved.

The repetition of the random number assigned by the server ( CODE ) does not occur again until the ambiguity makes it impossible to misinterpret it (eg after the elections have ended, or after a certain period of time, etc.).

• - Server II die Zufallszahl KODE erzeugt und dem Server I die erzeugte Zahl KODE mitteilt (bzw. je nach Realisierung gegebenenfalls auch dem Server III des Telefonnetzes mitteilt), wobei anstelle der direkten Mitteilung an Server I auch eine bereits bewertete Mitteilung erfolgen kann (KODE = OK oder KODE = NICHT_ok);
• - Server II (gegebenenfalls in Verbindung mit dem Server III des Telefonnetzes) durch Scannen der aktuellen verbundenen Telefonanschlüsse T-# unter Verwendung des von ihm ausgesendeten Zufallskodes KODE die zugehörigen Paare (KODE / T-#) erzeugt, bzw. auffindet, wobei Server II zu jedem Paar die Prüfung vornimmt, ob T-# schon gewählt hat oder nicht, dito natürlich, ob T-# überhaupt wahlberechtigt ist. Dabei kann, wie bei sämtlichen anderen Applikationen auch die Telefonnummer nur als gültig erkannt werden, wenn auch die persönlichen Daten (des Benutzers (PIC) stimmen, wie z.B. eine Stimmprobe, die durch lautes Ablesen eines dem Benutzer auf seinem Handy übermittelten SMS Textes getestet wird, usw.
• - Für alle positiv gemeldeten Prüfkodes KODE = OK, schreibt der Server I die in das WEB-Formular durch den Benutzer eingetragenen Daten in eine betreffende Datei, wobei zwecks Nachprüfung zwar der Prüfkodes KODE (OK) mit gespeichert werden kann, nicht jedoch die Telefonnummer T-#, die Server I (der zum Handy nur über die Datenkopplung DS des Client Rechners CL eine Verbindung zum Handy hat) gar nicht kennt.
• - Für alle negativ gemeldeten Prüfkodes KODE = NICHT_ok, kann im Server II noch der wiederholte Versuch gespeichert werden, ob jemand versucht hat wiederholt zu wählen, bzw. ob jemand der nicht wahlberechtigt ist, versucht hat zu wählen.

The procedure is that

• Server II generates the random number KODE and informs the server I of the generated number KODE (or, depending on the implementation, if necessary also informs the server III of the telephone network), whereby instead of the direct message to server I also an already evaluated message can be made (KODE = OK or CODE = NOT_ok);
• - Server II (optionally in conjunction with the server III of the telephone network) by scanning the current connected telephone T- # using the random code sent by him CODE the corresponding pairs (KODE / T- #) are generated or found, whereby Server II checks for each pair whether or not T- # has already dialed, and of course, whether T- # is even entitled to vote. In this case, as with all other applications, the telephone number can only be recognized as valid, even if the personal data of the user (PIC) are correct, such as a voice sample, which is tested by reading a text message sent to the user on his mobile phone , etc.
• - For all positively reported check codes KODE = OK, the server I writes the data entered in the WEB form by the user into a file in question, although the check codes KODE (OK) can be stored for the purpose of verification, but not the telephone number T. - #, the server I (to the phone only via the data link DS of the client computer CL has a connection to the phone) does not know.
• - For all negatively reported check codes KODE = NOT_ok, the repeated attempt can be stored in the server II, if someone tried to dial repeatedly, or if someone who is not eligible to vote, has tried to vote.

When scanning the data loop, for example, you can do that server II is synchronized by server I, or that server I by server II is synchronized.

• - In diesem Fall wählt Server I die zu prüfenden Clients CL (cl_1....cl_n) der Reihe nach an und für jede Anwahl werden durch Server II (bzw. gegebenenfalls Telefon Server III) sämtliche aktuellen Verbindungen T-# (T1....Tn) gescannt, um die Paare (KODE / T-#) durch den Server II zu finden, wobei natürlich Server II jeweils einen Zufallskode dazu aussenden muß und den über die Datenschleife DS zurück erhaltenen, prüfen muß.

Synchronization of Server I with Server II:

• - In this case, server I selects the clients to be audited CL (cl_1 .... cl_n) in turn and for each dial by server II (or if necessary telephone server III ) all current connections T- # (T1 .... Tn) are scanned to the pairs (KODE / T- #) by the server II to find, of course, server II each must send out a random code to and the back over the data loop DS received, must check.

Example:

• cl_1 (corresponds to an outer loop):
  • (T1 .... Tn) circulate and send CODE + test,
  • ..... '.... corresponds to inner loop (Server II)
• cl_2 (corresponds to an outer loop):
  • (T1 .... Tn) circulate and send CODE + test,
• ..... '.... corresponds to inner loop (Server II)

• cl_n (corresponds to an outer loop):
  • (T1 .... Tn) circulate and send CODE + test,
• ..... '.... corresponds to inner loop (Server II)
• loop through outer loop in Server I.

Thus, in the described test, the incremental continuation of mostly only temporarily assigned by a provider addresses of the clients CL (cl_1 .... cl_n) in this case corresponds to an outer loop, and the incremental continuation of the current telephone connections ( T1 .... Tn) corresponds to an inner loop.

• - In diesem Fall wählt Server II (bzw. gegebenenfalls Telefon Server III) die aktuellen Verbindungen T-# (T1....Tn) der Reihe nach an und für jede Anwahl werden durch Server I die zu prüfenden Clients CL (cl_1....cl_n) der Reihe nach gescannt um die Paare (KODE / T-#) durch den Server II zu finden, wobei natürlich Server II jeweils einen Zufallskode dazu aussenden muß und den über die Datenschleife DS zurück erhaltenen, prüfen muß.

Synchronization of Server II by Server I:

• - In this case, Server II (or possibly Telephone Server III) dials the current connections T- # (T1 .... Tn) one after the other, and for each dialing, the clients CL to be checked (cl_1 ..) are selected by server I. ..cl_n) are scanned in order to find the pairs (KODE / T- #) through the server II, of course servers II each must send out a random code to and the back over the data loop DS received, must check.

Example:

• T1 (corresponds to an outer loop):
  • circulate (cl_1 .... cl_n) and send and test KODE Server II,
  • ..... '.... corresponds to inner loop (server I)
• T2 (corresponds to an outer loop):
  • (cl_1 .... cl_n) circulate and send CODE + test,
• ..... '.... corresponds to inner loop (server I)

• Tn (corresponds to an outer loop):
  • (cl_1 .... cl_n) circulate and send CODE + test,
• ..... '.... corresponds to inner loop (server I)
• loop through outer loop in Server I.

Thus, in the described test, the incremental increment of the addresses of the clients CL (cl_1 .... cl_n), which are usually assigned only temporarily by a provider, in this case corresponds to the inner loop, and the incremental continuation of the current telephone connections ( T1 .... Tn) corresponds to the outer loop.

In both cases server can II either the function of a telephone server III directly take over, or the phone server III is also included in the explained synchronization accordingly.

In 33 is still the server I code used for a self-test ( 1 ), ditto the server II code used for a self-test ( 2 ). With this code, then, the respective server exclusively related data of the user are linked, or encrypted.

An application is also specified in which the purpose is to generally transmit the subscriber identification made via a mobile phone number to a file made accessible by means of this identification during the down load. The server then encrypts this phone number into the downloaded file and the player or processing device, computer, etc. uses that data (phone number and any associated user-specific data PIC ) as copy protection.

• - DE 10 2004 053 162.5
• - DE 10 2004 055 292.4

See also the pre-registrations

• - DE 10 2004 053 162.5
• - DE 10 2004 055 292.4

from the same applicant.

Method via which by the access number (eg telephone number) of a connected to another network (eg telephone network) terminal (eg a mobile phone) or directly through a protected network access, etc., the user logs into the network (eg using a Handy's with the telephone number as a condition for logging), in particular with a method according to DE 10 2004 046 413.8 / DE 10 2004 059 168.7 / DE 10 2005 007 379.4 / DE 10 2005 008 086.3 , in particular by the fact that the user's telephone number determined by a respective server when logging in (eg in a WEB page), optionally (as an option), is combined with other personal data of the user linked to the telephone number (eg via the mobile phone) (such as a voice analysis, etc.) are included as added by the server additional data in the downloaded file, the downloaded file when playing with a relevant playback device (MP3 player, CD, DVD, etc.) contained therein and data added by the server (tags, addresses, etc.) are used as a test template for a file playback capability (to check the user's phone number, optionally as an option, in combination with other data associated with the phone number), by the server added data (marks, addresses, etc.) the reproduction of the data is protected and the data by the device n ur be reproduced when by a mobile phone via a corresponding interface (to the player) transmitted data encoding, according to the phone number of the terminal or mobile phone used when loading the file, the playback is initialized, or if necessary, the mobile phone to be initialized playback device also included directly can (eg MP3 player).

This method can be used for any data reproduction or processing device (visual files, acoustic files, text files, programs, etc.).

In addition, it should be mentioned that the method of the present invention still with the method DE 10 2005 003 677.5 (Method for generating a random number) can be used very well, regardless of whether the interactive game (which is described in this application) via mobile phone (self-sufficient) or via a WEB page, or via a TV, in which, for example, the inputs interactive with a mobile phone (eg with an identifier that can only be played with a specific mobile phone device brand, etc.) is played. The process can identify the players and still make the payment of the bets in seconds.

Example (s) 7.0:

The following example relates to a further developed application of this method, in which over a further network (telephone network, mobile phone network, etc.) in addition to a IT Network (or to an alternative network such as intranet, etc.) a data loop on the relevant terminals (such as a IT client CL and a phone / cell phone, etc.) of the networks is formed to pass through the data loop DS sent code ( CODE ) the assignment of the terminal equipment concerned subscriber lines or addresses (from WEB Pages, etc.) or from different server processes via the port number (also telephone number T- #) of the relevant other network to make.

Here, the two (possibly also simultaneously applicable) options are provided by coupling the client CL made data loop server ← → terminals (such as IT Web page ← → telephone via T- # number) ← → server, to make a serial connection, in which a code sent by the server via the one data path ( CODE ) is routed back to the server via the (respectively) other data path via the data loop DS formed at the client (via its terminals) and at the server the transmitted code (defined by it as a random code) ( CODE ) is checked for conformity with the returned one. Optionally using an encrypted alienation / dito re-decrypted recovery of the code ( CODE ).

Or, if required, the data loop DS can also be implemented as a parallel connection, in which a code sent by the server via both data paths ( CODE ) over at the client CL Existing terminals is checked, the test via a coupling of the data paths (as a data loop DS ) takes place in one of the terminals (eg in a mobile phone, etc.) of the user. In both cases series connection and / or parallel connection is still an alienation (encryption) and recovery (decryption) of the code ( CODE ) is preferred to prevent manipulation by attackers.

The task for this application concerns a further variant for the automatic linking of two server processes via the preferred method, using a client computer and a telephone, or even two mobile phones, e.g. for two mobile phones as a crosspoint of a via one or two (networked server) sent code signal to determine a running on the two mobile phone receipt process. However, here in this example, with the difference that here the server sends its transmitted code e.g. does not get directly back via the direct coupling of two mobile phones, but the data loop DS is formed a little more complex, in particular using the property of the telephone connection T- # for establishing a conference call. This also applies to all applications in which the coupling for the preferred data loop DS between a client computer CL and a mobile phone or telephone T- # is made.

A preferred application example, which will be described in more detail in the later part of the description, concerns the exclusive allocation of two server processes of two servers not communicating with each other via the Internet, through the preferred data loop DS of an additional telephone connection T- #, which a user enters separately in the both servers used.

Another preferred application example relates to the possibility of two or more participants each in a WEB Page using each of their phone or mobile phone to form a self-sufficient data loop DS can log into a server process and the WEB page or database of the server immediately not only identify the participants, but also can assign each other, without requiring further input from the user to do so. Likewise, for many of those already mentioned in the other examples, this method can also be used advantageously.

This application should be referred to as the assignment of two or more client users to a common server process or two server processes to be linked together.

A very useful application for this is, for example, the aquiration of a co-partner for various games on the Internet. If e.g. played a game in which the participants each have to pay small amounts as a stake for certain actions of the game, then it is appropriate to animate the players to recruit other players and in return (as is customary for agents) a certain percentage of the recruited To claim players as their own stake.

For example, advertise the player B1 the player B2 to play along, then all of the player B2 paid-up amounts b2 to a certain percentage p shortened and this amount p * b2 then receives the player B1 each as a credit to play with it yourself. For example, p is defined as 0.1, and player advertises B1 ten players (10 * 0.1), then the player can B1 eg play already for free.

A special feature here is a conference circuit is used in which the relevant participants, such as client ( CL ) User (user 1 and users 2 . 36 ) on the one hand each a user for himself a data loop DS on his client computer CL to his telephone line T- # (landline or mobile) forms (A), on the other hand, the participants directly also communicate with each other via this conference call (B).

Ie for users 1 ( E3 )
There is a telephone connection to the server (user 1, E3 & server, to E1) and directly to the user 2 (User 1, E3 & User 2, E3);
dito exists for users 2 (E3)
a telephone connection to the server (user 2 , E3 &. Server to E2) and further directly to the user 1 (User 2, E3 & User 1, E3);
The transmitted code is in this case routed via the coupling of the data loops DS to the client computer CL (in each case via E3 for each user);

In such a way that
the user 1 which sends its identification to the server via the server sent to the telephone network T- # and via the client CL back received code 1 at the same time via the direct telephone connection to the user 2 its code 2 over the coupling of the telephone T- # to its client receives computer and sends back to the server, ditto the user 2 which sends its identification to the server via the server sent to the telephone network T- # and via the client CL back received code 2 at the same time via the direct telephone connection to the user 1 its code 1 over the coupling of the telephone T- # receives to its client computer and sends back to the server.

Thus, through this conferencing, the server over the identified code pair code 1 and code 2 can find the associated partner in the network, where code 1 the own to the client of the user 1 code sent over the data loop is therefore code 2 the assigned but foreign client or user 2 equivalent. Ditto also for the code pair code 2 and code 1 the other user, where code 2 the own to the client of the user 2 code sent over the data loop is therefore code 1 the assigned but foreign client or user 1 equivalent.

This mapping can not only be done via a simple WEB page, but via any Internet service, such as Internet. Internet telephony, whereby the participants identify themselves only by logging in via their telephone numbers, and additionally have the opportunity to verify this with active participation, namely by a direct short mutual call. For cost reasons, after the establishment of the Internet phone connection via the dial-up network / landline or mobile network switched connection while maintaining the Internet phone connection to be terminated prematurely, after the examination was made by the server, if the code signals sent by the server and the individual telephone lines T-. # allotted. Likewise, if appropriate, the preferred conference circuit can be realized with the inclusion of Internet telephony.

Embodiment: 36 illustrates an example, ..... where T- # network symbolizes the telephone network (landline or mobile phone), further IT each symbolizes the Internet, via which the client CL computer of the user (each user 1 and users 2 ) are connected via their provider the IT backbone (not shown here) and the connection to the server (SERVER) to display the relevant WEB page (s) on the client computers of the user is established. DS .... symbolizes on each user side the coupling to the client computer, which can also be acoustical, for example, in addition to an infrared connection, or all in the examples already mentioned options for the transmission of data via the data loop DS can be used (including the there explained SMS converter in a mobile phone or telephone, etc.).

The server (SERVER) can, as stated in the examples already explained, also be several servers which can, but do not have to, be networked via the Internet. This option is in 36 symbolized by the dashed dividing line, eg the left half (on the side of user 1 ) the server I and the right half (on the page of user 2 Server II. Whereby server I and II otherwise need not be networked with each other, as is provided, for example, for a further example explained below.

Server I would then receive its own identification code code via the data loop DS (the T-# telephone connection) 1 back, plus the code generated by Server II 2 (in the example described below, still in conjunction with the code generated by Server II 2 and the data further transmitted by Server II), without requiring an Internet connection from Server I to Server II.

Dito, the server II would then receive its own identification code code via the data loop DS (the T-# telephone connection) 2 back and additionally that of server I (code 1 ) without an Internet connection from Server II to Server I would be necessary.

Allocation of two server processes, without the servers having to be networked via an Internet connection:

The combination of code code 1 * code linked in server I in coincidence 2 , as well as the combination of code code 2 * code linked in server II coincidence 1 Thus, the same process can be assigned in each case without the two servers having to be networked together. In the following example, it is disregarded that the own code generated by the server can also be encrypted, and can be further changed by the telephone or mobile phone, as well as decrypted during code comparison.

Example:

Server 1 generates code 1 = 300 and decodes (receives) code 1 = 300, Server 2 generates code 2 = 500 and decodes (receives) code 2 = 500.

The code information 300 and 500 are to be understood here only symbolically, in reality it concerns a number from a very large code quantity (eg from a succession of 256 bit words, etc.), in order to guarantee the statistical probability of the exclusivity of a cod repetition.

If the two servers I and server II are not coupled to each other via IT, then the two servers, server I and server II can feed the code only insufficiently synchronized into the telephone network, eg as a frequency-coded modem signal, whereby the frequency selection (f1, f2 , f3, f4) for the representation (of log 0 and logl.) of the serial data signal the discrimination of code 1 and code 2 is made. Ie code 1 is represented by f1 and f2, and code 2 is represented by f3 and f4, wherein these four frequencies f1, f2, f3, f4 overlap on the telephone line via conference call. Of course, not necessarily a start stop signal for the serial data transmission must be used, but it can also be a modulo 2 Be used signal, etc. Since the data are thus transmitted analogously, for example, the decoding method specified in the examples already explained can be used. Each server then determines by scanning the received code signals, the assignment of only temporarily existing address of the addressed client to the phone number and / or at least the received code. In order to improve the statistical probability, can for the two otherwise independent server 1 and server 2 also be set to code for their code generation 1 and code 2 use separate value ranges (eg by allocation of the MSB, Most Signification bit), thus code 1 ≠ code 2 remains. Also, in the decoding of the code itself, the address of the server that sent in may be included, as already indicated in the examples already explained.

The second possibility is the strict observance of a half-duplex protocol, in which the beginning of data to be sent out of a currently being ready to receive server is synchronized by the currently sent data of the other server respectively (Handshake Prinizip). The handshake, i. the indication that the last character of each code has been sent, and the next follows, or a send-receive switching of the server involved in the half-duplex operation has to be done by the usual methods, such as use of appropriate control characters and / or Detecting breaks, etc.

• - 1.0) eine Dreipunkt Konferenzschaltung, bei der ein Server (36, entspricht hier dem gesamten mit SERVER bezeichneten Block I+II, entsprechend einem Server oder gegebenenfalls auch mehreren Servern) eine beliebige Vielzahl von Clients bedient, und in dem sich die zu 36 dargestellten beiden Benutzer (Benutzer1 und Benutzer2) mit ihren Telefonen T-# oder Handy's unter Benutzung der bevorzugten Datenschleife DS in den SERVER jeweils eingeloggt haben,
• - 2.0) eine Dreipunkt Konferenzschaltung, bei der zwei nicht ansonsten nicht vernetzte Server (37, entspricht hier dem SERVER I und den Server II) ausschließlich über die bevorzugte Datenschleife einen gemeinsamen Client CL bedienen, wobei sich der Benutzer mit seinem Telefon T-# oder Handy's unter Benutzung der bevorzugten Datenschleife DS jeweils in die ansonsten nicht miteinander vernetzten SERVER einloggt.

For the special development of the subject of the invention realized via a conference call, the application examples can be typified as follows:

• - 1.0) a three-point conference call, in which a server ( 36 , here corresponds to the entire designated with SERVER block I + II, corresponding to a server or possibly even multiple servers) any number of clients served, and in which the 36 both users (user 1 and user 2) with their telephones T- # or mobile phones using the preferred data loop DS have logged into the SERVER respectively,
• - 2.0) a three-point conference call, in which two servers that are not otherwise networked ( 37 , here corresponds to the SERVER I and the server II) only use the preferred data loop a common client CL, the user with his phone T- # or mobile's using the preferred data loop DS each logs into the otherwise non-interconnected SERVER.

embodiment 1.0 can be used eg for the example mentioned above, in which a player B1 (User 1 ) as client CL of the server, the player B2 (User2) as another client CL of the server to play along. Or, if necessary, even more than two users can be networked with each other. The users then dial, each independently of the other, the telephone number T. # of the server with their telephone set, or mobile phone, and log in to form the preferred data loop DS.

embodiment 2.0 can be used, for example, to identify a caller with a server, eg with server II, who continues to enter data completely independent of this server (II) into the further server I. Server I has the task of the identified phone number of the user's mobile phone and / or other recognition data (such as PIC, personal identification code) to determine whether the user for data entry into the server I is at all entitled, and how often the same user enters the data , The two servers, server I and server II are networked exclusively via the preferred data loop DS of the telephone network T- # (and must not continue to be networked for this purpose!) To make the deliberately anonymous assignment so that the user can enter its data in the first server I, but the authorization is checked exclusively in the server II, without server I would have a way to tap the data for an authorization check.

It is evident that this application can be used quite generally, starting with simply checking the authorization for access to a data record stored on a first server I, but the access authorization is checked exclusively on a further server II, and there the server I with the server II, except via the preferred telephone T- # is otherwise not networked, or where appropriate, such further networking with relatively simple, transparent means can be blocked well (with a particularly simple fire wall, which the access address the server checks, etc.), the access to the server I, in relation to server I is checked completely anonymously. The Fire Wall used to block the two servers I and Server II can also be run as another parallel connected to the Internet access processor (such as a signal processor DSP) to monitor as a Watch Dog (watchdog), which servers each to the respective server turn.

As indicated in the examples already explained, in this case, the preferred transmission and return of a recognition code (KODE) generated by a respective server is used to derive an intermedial connection address for the assignment of the two server processes otherwise running on separate servers (server I and server II). using the same telephone line T- # of the user used for the login, but whose telephone number T- # is actually only checked by one of the two servers (here Server II). The server where the data is entered (here server I) purely purely by using the preferred intermedial connection address (which is purely physically derived from the telephone connection T- # to the server II) already no way to identify the caller directly. For example, in order to separate in elections or referendums, the characteristics of a user who identifies himself with a digital signature via his mobile phone via server II from the actual data entry in server I.

Consequently: Server II ..... identifies the user, Server I ..... the voting data (election data, referendums, etc.) receives.

In the examples already described, an example was already explained in which the two servers I and II are also networked via the Internet, but by the use of an intermedial variable in data exchange (via the Internet) between the servers, provision is made that the personal data Server II can not get to server I.

Here, in this example, in the election or vote, the user via a conference call, or specially trained mobile phones, etc., two completely independent of each other via Internet IT communicating with the client computer CL user server I server and II the method can perform anonymous mapping of data for identification. And without a connection between the servers via the Internet is called.

Exemplary embodiment: belonging to the above example 37 with the above-mentioned code data code 1 = 300, code 2 = 500, the process then proceeds as follows:

The user first calls up the relevant WEB page in Server I for ticking the form.

The user is encouraged, for example, via the WEB page I of the first server (server I) to switch off the transmission of his phone number on his phone or mobile T- # and call the phone number of the first server I to talk about the preferred data loop DS log in. Has he done this successfully (tested over the server 1 sent code, eg code 1 = 300), then the user is further requested to maintain the telephone connection T- # via the data loop DS (ditto the coupling of the telephone / mobile phone to the client CL), and with the telephone connection T- # held, in which the server I continues to feed its test code code 1 = 300 to call the WEB page II of the second server (II). On this WEB page II, the user is asked to enter his phone number (the transmission to the called is yes switched off) in the WEB page II in a corresponding form window. To which server II retrieves the entered telephone number T- # of the user and sends out his check code (code 2 = 500). If the phone number specified in WEB Page II's form does not match that of the user, then the check is negative because the server does not receive the check code back and the process is aborted, but if it matches then the process continues in that the user is requested via the WEB page II while holding the telephone connection T- # in which the server II continues to feed his check code code 2 = 500, the window of the WEB page I of the second server (I) in his browser again to click, ie both the code code 1 = 300, which is constantly fed into the telephone connection by server I, and the code 2, which is constantly fed into the telephone connection by server II, are sent to the client computer CL via the coupling interface (to form the data loop DS). constantly fed.

• - 2.1) Es speist (zunächst) nur Server I den Kode 1=300 (z.B. unter Benutzung der Frequenzen f1 und f2) in das Telefon/Handy T-# des Benutzers ein und prüft dabei über die Schleife DS über diesen Kode, wobei die Schleife DS über die WEB-Seite I des Servers I auf der Client Seite CL geschlossen ist (wobei bei negativem Testergebnis, abgebrochen wird);
• - 2.2) Es speisen Server I (mit f1 und f2) und Server II (mit f3 und f4) jeweils ihre Kodes ein (Kode 1=300 und Kode 2=500), wobei allerdings die Schleife DS jetzt über die WEB-Seite II des Servers II auf der Client Seite CL geschlossen ist. Dabei prüft Server II den von ihm (mit f3 und f4) ausgesendeten Kode Kode 2=500, wobei bei negativem Testergebnis, abgebrochen wird) und Server II diesem Kode (Kode 2=500 bei positiver Prüfung) weiters noch den (mit f1 und f2) von Server I erhaltenen Kode (Kode 1=300) zuordnet. Dieser Zuordnung entsprechend, packt Server II zu dem von ihm (mit f3 und f4) ausgesendeten Kode (500) noch den Wert (300) als Zuordnungsadresse hinzu, dito noch weitere Daten, welche die Benutzeridentifizierung, die Zugangsberechtigung und die Anzahl der Identifizierungen unter dieser Nummer (und beliebige weitere Ergebnisse der Prüfkriterien, jedoch nicht die Prüfkriterien selbst) betreffen. Somit Server II (mit f3 und f4) den Kode 2=[500; 300; PIC] in die Telefonverbindung T-# zum Benutzer einspeist.
• - 2.3) Durch Anlicken des Fensters der WEB-Seite I des Servers I wird die Schleife DS jetzt über die WEB-Seite I des Servers I auf der Client Seite CL geschlossen. Was zur Folge hat, daß der Server I jetzt dem Client CL, bzw. des Benutzers, der sich zuvor ohne Möglichkeit der Identifizierung seiner Telefonnummer T-# unter Benutzung seines Telefones oder Handy's in den Server I eingeloggt hat, exakt jene Daten zuordnen kann, um z.B. die Gültigkeit seiner in den Server unmittelbar eingegebenen Daten I (akzeptieren oder nicht akzeptieren, z.B. bei Wahlen, Volksbegehren, etc., zu prüfen.

In this process, three temporal phases can be highlighted in this process:

• - 2.1) It feeds (initially) only server I the code 1 = 300 (eg, using the frequencies f1 and f2) in the phone / mobile T- # of the user and checks while on the loop DS on this code, the Loop DS is closed via the WEB side I of the server I on the client side CL (in the case of a negative test result, aborted);
• - 2.2) Server I (with f1 and f2) and Server II (with f3 and f4) each feed their codes (code 1 = 300 and code 2 = 500), although the DS loop now uses the WEB page II of the server II on the client side CL is closed. In doing so, Server II checks the code (= f3 and f4) sent by him (with f3 and f4), whereby in the case of a negative test result, and server II this code (code 2 = 500 in the case of a positive test), the f1 and f2 ) from server I (code 1 = 300). According to this assignment, Server II grabs the code sent by him (with f3 and f4) ( 500 ) nor the value ( 300 ), as well as other data concerning the user identification, the access authorization and the number of identifications under this number (and any other results of the test criteria, but not the test criteria themselves). Thus server II (with f3 and f4) the code 2 = [500; 300; PIC] into the telephone connection T- # to the user.
• 2.3) By clicking on the window of the WEB side I of the server I, the loop DS is now closed via the WEB side I of the server I on the client side CL. The result is that the server I now the client CL, or the user who has previously logged in with no possibility of identification of his phone number T- # using his phone or mobile phone in the server I, can assign exactly those data, For example, to check the validity of his directly entered into the server data I (accept or not accept, for example, in elections, referendums, etc.) to examine.

In a further development, the data sent from server II (eg via the frequencies f3 and f4) via the telephone network to the telephone connection / mobile telephone T- # of the user is code 2 = [500; 300; PIC] by a kind of external fire wall (eg a DSP circuit) to send, which on the one hand the formatting (with exactly specified bit placement of the individual yes / no Kennbits, ditto for the two codes of server 1 and server 2 ), on the other hand ensures that no unfair data of the user to the server I are transmitted.

Similarly, server I can be formed by a special hardware with limited possibilities as a pure voting machine, so that abuse is prevented from the outset.

Thus, in relation to the representation of log.0 / log.1 used by the frequencies f1, f2 for server I, dito by the frequencies f3, f4 for server II,
server I sends the code 1 (with f1 and f2), and it
Server II (code 2 ) eg, with f3 and f4.

• f3/f4: [Kode 2=500* Status = Info wählen ja/nein * Bereits identifiziert ja/nein * Adresse=300] und weiters noch mit f1/f2: (über Konferenzschaltung) den eigenen Kode 1=300;

Thus Server I (from Server II) receives:

• f3 / f4: [Code 2 = 500 * Status = Select info yes / no * Already identified yes / no * Address = 300] and furthermore with f1 / f2: (via conference call) own code 1 = 300;

• f1/f2: [Kode 1=300] und weiters mit f3/f4: (über Konferenzschaltung) den eigenen Kode 2=500;

and Server II (from Server I) receives:

• f1 / f2: [code 1 = 300] and f3 / f4: (via conference call) own code 2 = 500;

With the own code code 2 = 500 Server II checks the telephone number T- # of the subscriber and encodes the status of the subscriber and he adds this code with the received from the server I (code 1 = 300) as an address, such that the server I , by the value of code 1 = 300 can correctly assign the code obtained via the data loop DS, ditto server II the other status data [Status = Info select yes / no * Already identified yes / no] still added (via the telephone connection T - # of the data loop DS also receives) and decoded by server I and the address 300 assigns inputs received from the user via the client CL.

Thus server I to the by him with f1 / f2 sent code 1 = 300 from the telephone signal sent to him with f3 / f4 of server II, with the address = 300, the relevant data, status = Info select yes / no * Already identified yes / no can decode, and can rate. Had a voter (Info select = yes) already logged in previously at the server II (Already identified = yes), where, for example, the server I sent the code = 232, then the server II sends in the coded with f3 / f4 phone signal still Address or addresses (or possibly only last address), in this case the address 232 , in addition to the current address 300 , The server I can therefore look up whether under a previously assigned address 232 already a valid ballot was ticked, or even more invalid, etc., or whether it is an error of the process, for example, the user of the address 200 had not entered anything, or only incomplete (eg because of a mistake on his computer, etc.). Thus in this case the program in the server I can decide whether the to the address 300 assigns data entered by the user as a valid voice or rejects it for unauthorized repetition (eg if no correction is allowed).

Synchronization when sending the signals f1 / f2, dito f3 / f4 by the two servers I and II: In order to make the decoding described above, both server, server I and server II must send their transmitted codes synchronously with respect to the client CL , or since for each new call a new code is generated, the code correspondingly synchronously.

Server I and Server II each generate a new code (e.g., code 1 = 300) when they find that they are receiving a new call (on one of their trunks) and keep this code until the connection is re-established. In doing so, they then relate the evaluation, as explained above, to the new generated code. In this case, the method can be performed with any conventional standard cell phone, or other options for encryption and identification can be used, as already described in the previous examples.

It is also possible in the prinizip, the sender encoding related to the individual servers, which indicates which server has just fed their code into the telephone line T- #, instead of selecting frequency pairs (here f1 / f2 dito f3 / f4) via corresponding Address protocols (also to realize half duplex with handshake). Such synchronizations and associations are well known in the art of general networking.

• - einer der beiden Server (hier Server I) über das Internet mit dem Client Rechner CL, bzw. dem zum Zwecke der Eingabe von durch den Benutzer angegebene Daten kommuniziert sowie über die Konferenzschaltung des zur Bildung der bevorzugten Datenschleife DS verwendeten Telefonnetzes T-# sein erzeugtes Kodesignal (Kode 1) über die Verbindung zum Client CL zugänglich liefert, wobei dieses Kodesignal (Kode 1) nicht für die Identifizierung des Client (CL) Benutzers verwendet wird, sondern ausschließlich nur für die Zuordnung der durch den weiteren Server (hier Server II) vorgenommenen Identifizierung zur der für die Identifizierung verwendeten Datenschleife DS betreffenden Telefonnetzes T-# verwendet wird.
• - und der andere der beiden Server (hier Server II) über das Internet mit dem Client Rechner CL zum Zwecke der Anzeige und Ablaufsteuerung mit dem Benutzer kommuniziert sowie über die Konferenzschaltung des zur Bildung der bevorzugten Datenschleife DS verwendeten Telefonnetzes T-# sein erzeugtes Kodesignal über die Verbindung zum Client CL zugänglich liefert, wobei dieses Kodesignal (Kode 2) für die Identifizierung des Client (CL) Benutzers verwendet wird, dito gegebenenfalls weitere zur persönlichen Identifizierung des Benutzers beim Client CL, bzw. Benutzers über die Datenschleife DS (z.B. über das Handy zugesetzte Daten PIC) dem Kodesignal (Kode 2) zugesetzt werden.

⇒ Thus can be formulated generally that for this application (assignment of two server processes, without the server would have to be networked via an Internet connection), the two servers I and II a conference call, the actual data network of the client computer CL (Internet IT) in addition provided network (here telephone network T- #) use, over which both servers (I, II) independently (and not networked by the actual data network IT) send their randomly generated code signals and after receiving the return for each server I and II independently check each other on the client side CL closed data loop DS, as well as the transmitted code signals for the assignment of the two independently running server processes (eg data sets, input data, etc.) use, where

• - One of the two servers (here server I) via the Internet with the client computer CL, or the communicates for the purpose of entering data specified by the user and the conference circuit of the telephone network used to form the preferred data loop DS T- # be generated code signal (code 1 ) via the connection to the client CL, this code signal (Code 1 ) is not used for the identification of the client (CL) user, but is used exclusively only for the assignment of the identification made by the further server (here server II) to the telephone network T-# concerned with the data loop DS used for the identification.
• - And the other of the two servers (here server II) via the Internet with the client computer CL for the purpose of display and flow control communicates with the user as well as over the conference call of the telephone network used to form the preferred data loop DS T- # generated code signal provides the connection to the client CL accessible, this code signal (code 2 ) is used for the identification of the client (CL) user, dito possibly further for the personal identification of the user at the client CL, or user via the data loop DS (eg via the mobile data added PIC) the code signal (code 2 ) are added.

• - die sensible, zu schützende Datenverbindung des Client CL über das eigentliche Datennetz des Client Rechners CL (Internet IT), welche zu einem der beiden Server (hier I) besteht, für die Eingabe, bzw. den Austausch der sensiblen Daten (betreffend des Benutzers) genutzt wird,
• - und die Datenverbindung des Client CL über das eigentliche Datennetz des Client Rechners CL (Internet IT), welche zum anderen Server (hier II) besteht, für die Identifizierungsprüfung unter Benutzung der bevorzugten Datenschleife DS und der dazu verwendeten Verbindung (hier Telefonnummernprüfung T-# eines Handy mit Identifizierungsdaten, PIC, wie z.B. Stimmenerkennung) verwendet wird.

Thus, via the common telephone connection (T- #) to the client CL existing through a telephone conference call (T- #) for both servers and the data loop DS formed at the client CL via this telephone connection (T- #) for each server (I and II) the allocation of running in the two servers server processes (I and II) is made, wherein

• - The sensitive, to be protected data connection of the client CL on the actual data network of the client computer CL (Internet IT), which is one of the two servers (here I), for the input, or the exchange of sensitive data (concerning the user ) is being used,
• - And the data connection of the client CL on the actual data network of the client computer CL (Internet IT), which is the other server (here II), for the identification check using the preferred data loop DS and the connection used for this purpose (here telephone number T- T # a mobile phone with identification data, PIC, such as voice recognition) is used.

Sensitive data is e.g. in elections, the voter form filled in by the voter, or in a standard application, data whose access is to be protected, etc. The term sensitive data may refer to both the provider of the data and the user. The optional data addition PIC can be used, for example, by using the possibilities for incorporating personal data of the user already described in previous examples by the mobile phone (or telephone network T- #) used in the data loop into the code of the relevant server (here Server II). , are integrated with (via the data loop DS, eg PIC = voice check, or even fingerprint test). In the fingerprint test, reference is made to the action of actively actuating a pathway-wise measured change in depth of field as suggested in the previous examples to ensure that the fingerprint of the user is transmitted during the existence of the data loop DS.

As always, the closure (ditto opening) of the data loop DS made on the client side CL of the user can be done manually (via the preferred coupling variations) or possibly also by an electronic switching signal (via relays, semiconductor switches, etc.). Likewise, as pointed out in previous examples, when using a cell phone to close the data loop DS, the cell phone can optionally support many features. For example, a buffer memory may be provided in the mobile phone, which further encrypts the transmitted codes, or also caches for the next login, or it may also be a Zeitmeßvorgang for measuring the time between logging be made to determine if necessary a time-out and notify the server That is, by time measurements or bandwidth measurements, the server can determine whether a data loop DS is being closed directly or by use of another data transfer loop, etc.

For the other named application (assignment of two or more client users to a common server process or two server processes to be linked together), it can be generally stated that the respective SERVER can be contacted via the Internet with the client computers CL of the user 1 and users 2 ) for the purpose of input / output / display / generation of user-related data, as well as via the conference circuit of the telephone network T- # used to form the preferred data loop DS, for each subscriber (user 1 and users 2 ) different code signal (code 1 , Code 2 ) via the connection to the client CL accessible via these code signals (code 1 for users 1 , ditto code 2 for users 2 ) every client CL user (here user 1 and users 2 ) are identified by their phone number T- # respectively by the code signals, the assignment of the telephone numbers T- #, or their associated user in the SERVER takes place.

The allocation of the server processes to associated user identifications using intermedial addresses, or even direct telephone numbers, can be done as already indicated in the examples mentioned for the identification via the telephone number T- # of the user.

Furthermore, the data sent by a server in question (eg server II, for the application assignment of two server processes, without the servers would have to be networked via an internet connection) sent over the data loop of the client DS data (eg access information) either encrypted, or digitally signed, etc., so that the user can not falsify the data.

A third supplementary application to the already mentioned in the examples mentioned possibilities of the invention relates to the already explained in several variants coupling between two mobile phones, via this coupling the server in question send their code signals to the data entered via the mobile phone's phone numbers, to the personally entered data (PIC data), such as amount of money, pin number, voice sample, fingerprint, etc., assign.

The further application proposed here concerns the data further input to the code signals for the following particular application:

For an automatically via the mobile phone, or via the associated server, completed riders center, coordination of driver and passengers, personal identification, and route detection of the track traveled must be entered into the server.

It is state of the art that the phone are provided with a GPS service, so that a cell phone users can view the location of friends on the screen of the mobile phone, the position determination is supported by GPS on the phone. the same possibility also exists for registered passengers who, e.g. by an SMS to the headquarters show their Mitfahrbereitschaft, with all also registered motorists who are in the vicinity, get the location of the rider displayed.

The passenger center realized by a server is concerned with being able to register drivers as well as passengers with their personal details, wherein the mobile telephone number T- #, which relates to the closing of the data loop, may be combined with further personal data (PIC, such as Voice sample, fingerprint, etc.), which are entered under this mobile phone number, is linked, and the server receives this data.

In particular, for this application, the preferred feature is that when the data loop DS is closed, the GPS position is transmitted to the server. It is envisaged that when entering the vehicle, as well as when leaving the passenger with his cell phone closes the data loop to the server DS via the user's mobile phone.

Thus, the server, or the server, the code from the server of the network, which affects the mobile phone driver, via the two mobile phones to the server of the network, which affects the mobile phone of the rider, dito in the opposite direction by the coupling of mobile phones can exchange and so the driver gets displayed whether the passenger is registered with his personal data, or the passenger is registered with the date and time, dito the passenger gets displayed, the driver above is registered with his personal data, or the passenger with date and time is registered.

By connecting with the transmission of the GPS data to the server, the server allows the route to be calculated, the payment of which is deducted from the passenger's account, to which the driver is credited to his account. In this case, at the respective closing of the data loop can still be entered into the phone, whether the journey is started, or is terminated, it will be checked because of the two processes, whether the input data are correct, for. is inquired if the passenger leaves again, without a km difference is determined by the GPS system, etc. The route is then calculated according to a road map, with one of the two cell phones or both cell phones as SMS a dash of the route traveled to the server sends, so that this can determine the route. Ditto for this purpose, the km counter of the vehicle can be tapped to over the phone, for example. to the car driver's cell, to send the km number instead, or in addition to the GPS data to the server, etc.

In a special embodiment, the vehicle in addition to the radio tapping of the km counter nor an outwardly placed handsfree on the phone, for example, in addition to the exterior mirrors on by an acoustic coupler on which the cell phone is to hang up, or even only hold (eg handset of the mobile phone directly to the micro hole next to the mirror, wherein under the mirror (which is mounted at a distance from the support surface) is still a mini speaker for the opposite direction of transmission is provided. The car can also be provided with an acoustic coupler or infrared coupler so that the driver can easily hold his cell phone against it.

38 shows an example of such an exterior mirror: In the frame of the mirror are two speakers LSP1 and LSP2 housed, the sound at the side of the mirror penetrates sufficiently loud. The microphone (MÍCRO) of the mirror is arranged on the side inside. For this purpose, the soundbox SK of the mobile phone is brought close to the MICRO of the mirror. Dito the microphone of the phone is held against the mirror.

In 38 Yet another option is shown, in which a small window is not mirrored in the mirror glass (IFRA), and under the window, an infrared interface is provided, which can also communicate with the phone.

The cabling of the interface then takes place, as usual, e.g. together with the heater and the servomotor, etc.

Example (s) 8.0: concerns further application possibilities, according to a method in which via another network (telephone network, mobile phone network, etc.) in addition to an IT network (or to an alternative network such as intranet, or another telephone connection , etc.) a data loop is formed via the relevant terminals (such as an IT client CL and a telephone / mobile, etc.) of the networks, by means of a code transmitted via the data loop DS (KODE), the assignment of the terminals Subscriber lines or addresses (from WEB pages, etc.) or from different server processes on the port number (also phone number T- #) of the relevant other network to make.

The two options (possibly also to be used at the same time) are provided for making the data loop server ← → terminals (such as IT website ← → telephone via T- # number) made by coupling at the client CL a serial connection in which a code (KODE) sent by the server via the one data path via the data loop DS formed at the client (via its terminals) is returned to the server via the (respectively) other data path and at the server the transmitted code (KODE ) is checked for conformity with the returned one. If necessary, using an encrypted alienation / dito again decrypted recovery of the code (CODE).

Or, if necessary, the data loop DS can also be implemented as a parallel circuit, in which a code (KODE) transmitted by the server via both data paths is checked via the terminals present at the client CL, the check being made via a coupling of the data paths (as data loop DS) into one of the terminals (eg in a mobile phone, etc.) of the user takes place. In both cases of series connection and / or parallel connection, alienation (encryption) and restoration (decoding) of the code (CODE) are furthermore preferred in order to prevent manipulation by attackers.

Below, further embodiments of the invention are given. In this example, in such a way that the coupling of the data loop DS between client and telephone, or mobile phone is made within the same device (by corresponding electronic circuit or buttons, etc.), e.g. a telephone or mobile telephone, by virtue of the nature of a conference circuit in which a connection to several subscribers (e.g., two) is simultaneously possible, and over these subscribers the data loop DS is formed.

One example relates to a variant of the conference circuit already specified in the previous examples with the specified data encryption. As already stated, the method can also be carried out if the preferred data loop DS is connected via a semiconductor switch or a relay of a terminal, e.g. Handy's or phones is closed, this switch then e.g. is realized by the already built-in function of a conference call and further the data loop is closed via two telephone connections made by the conference call on the user side.

1. a) z.B. einen ersten Server (S1) anrufen (der die Telefonnummer T#_S1 hat),
2. b) der Server (S1) erkennt die mitgegebene Telefonnummer des Handy und ruft zurück,
3. c) der Benutzer ruft einen zweiten Server (S2) an (der die Telefonnummer T#_S2 hat) und bildet durch Eingabe seines Identifizierungskodes und entsprechender Bedienung die Datenschleife vom Server S1 über sein Handy zum angerufenen Server S2, wobei Server S2 den Prüfkode KODE sendet,
4. d) der Benutzer gibt einen Geldbetrag ein und bestätigt diesen.

Through this conference call, the user can call from his mobile phone with the phone number T # _user,

1. a) eg a first server ( S1 call) (which has the telephone number T # _S1),
2. b) the server ( S1 ) recognizes the given telephone number of the mobile phone and calls back,
3. c) the user calls a second server ( S2 ) (which has the telephone number T # _S2) and forms the data loop from the server by entering its identification code and corresponding operation S1 via his mobile phone to the called server S2 , where server S2 sends the test code KODE,
4. d) the user enters a sum of money and confirms it.

The user receives the corresponding messages when the server calls.

server S1 relates to a bank server, wherein the bank server identifies the user via the phone number of the mobile phone and checks the personal code inputs (PIC) or finds the user's account via this data. If the user has several accounts, then he can distinguish them, for example, via an extension. If the verified data (PIC) are correct, the user will see the account number and select the bank server S2 on his mobile phone as a conference participant on whose account he wishes to transfer the amount entered to a beneficiary. He enters, for example, the account number of the beneficiary in the phone, the bank server this data together with the test code of the server 1 (Bank server of the referring) receives.

The amount of money and account number must under no circumstances always be entered, for example, they may also be stored in the mobile phone (such as telephone numbers) or by acoustic coupling via a TV set (which is currently receiving a corresponding product advertising broadcast) or also via a radio set ( via acoustic coupling, etc.) or the camera of the mobile phone can also be used to read the serial data signals coded in a window on the TV screen by color modulation and / or light blanking into the mobile phone, ditto also an infrared coupling can take place, etc (modulo 2 with block repetition and alternately changing to each block, log.0 / log.1, synchronous bit, or start stop, etc.).

In the mobile phone is still a coding of the digital signature. The mobile phone can do this from the server 1 Encrypting the received code also ditto becomes the server 2 code received decrypted before the exam. Furthermore, it is as indicated in the previous examples as a further possibility that the server 2 (here the payee) with the server 1 (the payer) is networked via the Internet, and / or via a (further) connection of a conference call (option).

The mobile phone signs the server 1 received code and sends it to server 2 back, although the data intended for him, but the signed test code (the server 1 ) can not decrypt, and as he receives it to server 1 via the Internet. server 1 can decrypt the code. Further addressed server 1 via the verified phone number of the mobile phone the signature of the sent code and signs it internally with the digital signature that belongs to this phone. Subsequently, the internally in the server 1 signed code with the returned and cell phone signed code to test the connection. Likewise, a portion of the code is decoded to provide the required assignments (to test and meet the user, amounts, payee, etc.). The server 1 then send to the server 2 if the transfer is positive, the acknowledgment signal is sent to this connection address coded by the user's telephone number (the server if necessary) 2 check by recall can not have, however, because he is only the payee, therefore, the given phone number of the phone is sufficient). However, these processes have already been explained, it has already been explained that server 2 the data associated with it, such as amount and payee on the one hand decoded directly via the telephone connection, on the other hand, of course, this transfer by the Internet protocol between servers 1 and server 2 can be handled, or even via another connection of the conference call, as also indicated in an example of the previous examples.

Another example concerns the detailed implementation of the passenger center already indicated in previous examples, in which the location of the entry (into the vehicle) and of the entry point via the data loop DS formed by two mobile phones (of the driver and the passenger) in conjunction with a GPS system Ausstieges is logged (including verification of the insurance and the identity, etc.) and further the respective mitgefahrene distance via the mobile phone coupling is billed immediately, possibly also by a coupled via a blue tooth interface km counter of the vehicle (with the driver's mobile phone RF transmitter / receiver coupled).

This is explained via an SMS input to the server, the driver his destination and the willingness to take one or more passengers, ditto the passenger sends an SMS to the server to indicate his desired destination. The server coordinates this by inquiring about SMS or computer voice from the drivers in the vicinity, or displaying the passengers on his route on his mobile phone.

If now the proximity of the Mitfahrwilligen be displayed without constantly the GPS system must be activated, then it is provided via an RF interface to establish a data link between the two mobile phones (passengers and drivers), and the measurement of the RF power of the receiving mobile phone , or even a regulation of the sending mobile phone (then measured by the rule size of the HF) to determine the distance between the mobile's, the GPS system must calibrate only a few points way marks, ie does not have to constantly provide the route data, or in a temporary reception problem can also be replaced by the RF distance measurement.

Example (s) 9.0: concerns further additional options and possibilities for the described method, which communicate using the temporary coupling of two mobile phones (acoustically or by infrared, etc.), which communicate with one or even two servers or computers of the network , forms a data loop DS, wherein via this coupling a test code is passed, which is generated by the server via the data connection to a mobile phone, and via the data connection of the server or another server to the other cell phone of the test code is passed back for testing (series connection ). Where if a separate server is used for each cell phone, the server loop through the code via the Internet or possibly via a conference call the cell phone. Furthermore, the code can be encrypted in the relevant mobile phone or a mobile phone. Or a method is provided in which the code from two sides (via the second mobile phone) is forwarded to a mobile phone (parallel connection) and the comparison is made at the mobile phone.

By determining the phone numbers, the cell phone's then the assignment is made to the data entered via the mobile phone.

Ditto has already been specified, the test code special additional data (PIC), which relate to the particular application to add. For example, via a high-frequency interface of the mobile phone (for example Blue Tooth) the km count of a vehicle is added, ditto possibly the GPS data, if the mobile phone does not have its own GSP chip.

In the previous examples, another interface here also concerns data added via an HF interface of the mobile phone (e.g., Blue Tooth), e.g. in addition to the km stand, e.g. the data supplied by an RFID chip and a packet address correspond. The chip is glued to a package, as in a goods label in the department store. The reading system of the chip is located in the trunk or in the hold of a vehicle and feeds the user's mobile phone associated data, which are all the codes of all packages that are in the trunk or in the hold, either directly via a server connection or via a wireless connection to the phone, in the server. This process is always initialized after a coupling of two mobile phones has been made to allow the identification of the user, ditt still the associated GPS position, and the respective km state of the involved vehicles inscribed in the mobile phone and the / (the) server (the) n) are transmitted.

In the previous part of the description, the proposal has already been made to use the coupling of a networked with a corresponding server cell phone with a client computer, which is also networked with a server, as a cash register function. Furthermore, the proposal was made to use instead of the client computer, another phone to realize the payment. For cash registers, it is state of the art that an electronic detection system detects the contents of a basket of goods by means of RFID (Radio Frequency Identification) chip coding of the goods.

In connection with the invention corresponding to said file reference is provided that in the trunk or cargo space or in a warehouse, etc., a common electronic detection system detects the goods, or scans, this process is in each case initialized by an event by the temporary pairing (DS) of two mobile phones and the server's check code passed over them is triggered when the server finds the sent code when scanning its currently sent codes. In this case, the server then sends an activation signal to the mobile or mobile phone (s) corresponding to the detected code. This activation signal initializes in the mobile phone a data transmission via an HF interface (for example blue tooth), the electronic detection system located in the region of the mobile phone which discharges the RFID chips of the relevant packets.

It should be further avoided in a further development that a mobile phone optionally activates a false detection system, for example, two cars (taxis, etc.) side by side with open trunk lid next to each other, and make the driver on their mobile phone's coupling to a corresponding transfer of packages to the server. In this development, it is provided that the likewise transmitted via the RF interface odometer of a vehicle (or GPS coordinates, if necessary) an address of the vehicle the code (PIC) is added, or possibly only the address of the vehicle (PIC) the Mobile phone is transmitted. Whereby this address is also assigned to the RFID detection system installed in the vehicle, or likewise can be activated under an assigned address. This address is addressed in the activation of the RFID detection system via the RF interface (blue tooth) of the mobile so that each participating in the coupling cell phone of the two drivers initialize the associated RFID detection system. In this case, the driver, ie the cell phone's membership in the vehicle also constantly change, if, for example, a data loop DS to the phone via a vehicle-mounted and connected to the server device (via RF) is closed. This means that the server can determine exactly which mobile phone is in which vehicle. Furthermore, during the initialization of the detection system, the server can set a priority (by a control signal) when the detection process should take place in each case, with the detection systems of the vehicles involved in the transhipment process (two or more) being offset in time, so that the HF signals of the A group of parcels in a car associated RFID signals, not guaranteed by a group of packages that are stored in another car. In this case, the detection system should be recorded in all cars as possible all stored in the car packages (even those lying on a seat, etc.). Since the server (s) synchronize a staggered query the acquisition systems, a clean separation of each stored in the car packages is possible.

Each time the RFID detection system of a vehicle is initialized, the entire inventory of packets (e.g., in the trunk, cargo space, etc.) is detected. For both vehicles, when the goods are reloaded and the data loop DS is closed via the drivers' mobile phones. There will be a surplus in relation to the previous situation and a lack of packages will occur in the vehicles concerned. That the server can determine exactly when and where, and about which vehicles the packages (over how many km, etc.) are transported and transhipped. If a package is delivered, then also the handover can be ascertained via the mobile phone (with GPS, etc.), ditto the deficiency occurring in the hold of the respective vehicle due to the handover.

By this measure it is e.g. possible to better use the entire infrastructure of vehicles (taxis, etc.). The taxi driver enters his destination in a passenger transport in order to send it via SMS to the server. The server determines the optimal route taking into account traffic and other nearby taxis to take over the package (s), etc. The passenger is only charged the shortest route, with the parcel service financing the remainder of the route. It can also very well taxi drivers are coupled with exclusive parcel services, etc. Dito empty rides are used by taxi drivers, waiting taxis are used as intermediate storage of the goods (in the trunk), etc. Since all activities on the server, also via voice announcement (in the car ), the driver is burdened only insignificantly by this activity.

In a further option, the mobile phone used also has a recognition device or reader for reading the RFID chips, or a bar code reader with which the corresponding packet code can be read into the mobile phone as associated data (PIC) and forwarded to the server. Whereby as Barkodeleser also the built in digital camera of the Handy's can be used, etc.

Example (s) 10 : concerns further additional options and possibilities for the described method, which forms a data loop DS using the temporary coupling of two mobile phones (acoustically or by infrared, etc.), which communicate with one or two servers or computers of the network , wherein via this coupling a test code is passed, which is generated by the server via the data connection to a mobile phone, and via the data connection of the server or another server to the other cell phone of the test code is passed back for testing (series connection). Where if a separate server is used for each cell phone, the server loop through the code via the Internet or possibly via a conference call the cell phone. Furthermore, the code can be encrypted in the relevant mobile phone or a mobile phone. Or a method is provided in which the code from two sides (via the second mobile phone) is forwarded to a mobile phone (parallel connection) and the comparison is made at the mobile phone.

By determining the phone numbers, the cell phone's then the assignment is made to the data entered via the mobile phone. The same applies if instead of two mobile phones the coupling between a mobile phone and a client computer (which represents a WEB page) is made.

In summary, the securely encrypted fully automated recognition and address assignment of a subscriber of any first network (eg Internet, mobile phone network, etc.) with short term use of another subscriber line of a second network (eg landline phone, mobile phone or other mobile phone, etc.), or for special cases also the same network (eg telephone number of an Internet telephony, etc.), wherein the participants of the first network does not have to have a fixed access address, ie may be an address temporarily assigned differently on the Internet only for each session, and the second network via its port number (e.g., cell phone number), etc. forming the address given on the Internet.

In this way, e.g. the readers exemplary coupling of a WEB page to newspapers, or logging in server, or payment via a WEB page or from mobile phone to mobile phone, ditto also from landline phone to mobile phone, further still both the secure identification of users and providers of WEB pages (bypassing the name server, etc.) possible. It is sufficient to couple the two networks in question briefly (for example acoustically, infrared, blue tooth, etc.) during log-in, in order to assign the port number of the second network as the address to the first user. In a mobile phone to mobile phone or landline to mobile phone or landline to landline pairing then the two numbers of the pairing participants are tested as a secure pair of addresses and utilized.

In this case, an exemplary accession number is provided in the newspaper, which is free to rub by the reader and allows a single login with further use of his cell phone. In this process, the exemplary access number to the WEB page is replaced by the phone number of the mobile phone as an access key, and therefore no longer needs to be entered.

Now, if the reader wants e.g. buy a subscription for advertisements, then he can do so in the relevant shops, in which also an Internet access is available, then successively (for checking the telephone number), the customer and the seller in the Internet access (eg via a special acoustic coupler , or via the seller's mobile phone, etc. etc.), and for each login a separate call (or SMS, etc.) is made by the server to check the mobile number or telephone number. The server must now assign both processes to each other, that the payment of the customer can also be credited to the customer, ditto the server must allocate the payment to the seller for the sale.

This technical problem has been solved by the fact that the process is repeated within two consecutive processes and each of the same code or a codepair defined by the server is used to detect the coupling, this code within a period of time within which the detection process is valid, this code is not reused for other purposes, and that the server by recognizing the repeatedly received code or associated code to a code pair, which, or which are fed back independently (in intermittent Neztabkopplung) in the server, a related pair of at the Code coupling detects involved terminals.

Compilation of important features of the invention u. preferred applications:

• - ob der KODE sich bei der Übertragung über die beiden Netze verändert hat (was einem unmittelbaren Kodevergleich entspricht),
• - und/oder wie der KODE sich bei der Übertragung über die beiden Netze in Übereinstimmung nach einer Vorschrift (z.B. nach einer Formel oder einem Algorithmus entsprechend) sich verändert hat (was einem Vergleich des vor einer Verschlüsselung detektieren Kodes mit dem zu erwartenden Ergebnis oder mit dem wieder entschlüsselten Kode entspricht),

geprüft wird, um die sichere Erkennung und/oder Überprüfung und/oder Zuordnung der Teilnehmeranschlüsse, bzw. Teilnehmeradressen zu erhalten, wobei der genannte KODE jede beliebige Art von Kodierung (neben einer digitalen auch eine analoge, etc.) betreffen kann.1. A method for the secure detection and / or verification and / or assignment of subscriber lines, or subscriber addresses, between two or more (eg possibly also in conference) directly or via any number of networks, or intermediate stations (eg servers on the Internet, or telephone connections , Radio links, etc.), produced connections of a data or communication network (hereinafter called the first network), especially by the use of another data or communication network (or possibly another connection, eg also a conference call as an option), hereinafter called the second network , via which for the purpose of said detection and / or verification and / or assignment, on the relevant subscriber side (eg client, WEB browser, mobile phone, landline, radio, etc.), a coupling of the terminals of the respective networks, or the second Connection (if necessary, also by switching a conference call via the same terminal) by forming a data loop DS (resp. Network coupling) is established via both networks, or connections, to a basically random (corresponding to the random principle) CODE via this data loop DS which is included in the transmission protocol of the data connection and according to the criteria

• whether the code has changed during transmission over the two networks (which corresponds to a direct comparison of the codes),
• - and / or how the KODE has changed in the transmission over the two networks in accordance with a rule (eg according to a formula or an algorithm) (which is a comparison of the detected before encryption code with the expected result or with corresponds to the decrypted code),

is checked in order to obtain the secure detection and / or verification and / or assignment of the subscriber lines, or subscriber addresses, said KODE may relate to any type of coding (in addition to a digital and an analog, etc.).

2. Method by feature 1 , Especially by a monitoring (or testing) in the generation of the KODE's, such that for all in the process in each case at the same time (possibly each extended by a further time lock) involved participants, the KODE will not be awarded repeatedly.

• - Es wird der KODE nur beim Einloggen über die Datenschleife DS übertragen und geprüft,

und/oder

• - es wird der KODE während der gesamten Dauer der Datenverbindung in die Struktur (z.B. Blockstruktur) der gesendeten Daten mit eingebunden,

und daß das genannte Verfahren, zur Erkennung, bzw. für die Zuordnung, bzw. für die Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung verwendet ist, in Verbindung mit einer üblichen Datenverarbeitung und unter Verwendung der bei der Datenübertragung benutzten Verbindungsbezeichnung n einer von 1 aus n geschalteten Verbindungen (z.B. einer Telefonnummer T-# bei einem Telefonnetz, oder eines bestimmten Funkkanals bei einem Funknetz, einer Adresse oder einem Port eines sicheren Datenkanals, etc.), die bei der Bildung der genannte Datenschleife DS (entsprechend dem genannten zweiten Netz) in Bezug auf die geschaltete Verbindungsbezeichnung n als sicher anzusehendes Netz verwendet wird, wobei die Verbindungsbezeichnung (1 aus n = T-#, etc.) als gemeinsame Adresse der zu synchronisierenden Prozesse zum Zwecke ihrer Zuordnung benutzt wird.3. Method by feature 1 or 2 , in particular in that the integration of the in principle arbitrary (eg corresponding to the random principle) CODE, which is transmitted via the data loop DS of said data or communication networks, respectively in the data stream for that data connection (possibly also data links) is involved, the Data path should be identified by the code, the following cases are provided as alternatives:

• - The code is only transmitted and checked via the data loop DS when logging in,

and or

• the code is included in the structure (eg block structure) of the transmitted data during the entire duration of the data connection,

and that the said method, for the recognition, or for the synchronization, of two or more simultaneous or successive processes in the data transmission is used in connection with a usual data processing and using the connection designation n used in the data transmission one of 1 switched connections of n (eg a telephone number T- # for a telephone network, or a certain radio channel for a radio network, an address or a port of a secure data channel, etc.) used in the formation of said data loop DS (corresponding to said second network) with respect to the switched connection name n is used as a secure network, the connection name ( 1 from n = T- #, etc.) is used as a common address of the processes to be synchronized for the purpose of their assignment.

1. a) zur Verwendung der Herstellung der Zuordnung des Telefonanschlusses, bzw. der Telefonnummer eines Festnetzes oder Handy's (T-#) der Telefonverbindung Tel, welche für die Herstellung der genannten Datenschleife (DS auf der Client Seite CL) mit einer (gleichzeitig oder hintereinander) jeweils adressierten Datenverbindung IT betreffend einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung von durch Adressierung sich zusammensetzenden Datenblöcken) benutzt wird, zum Zwecke der Zuordnung der WEB-Seite zum Benutzer des Telefonanschlusses, bzw. zu dessen Telefonnummer (eines Festnetzes und/oder eines Handy's) als Benutzeridentifizierung für die Verarbeitung der über eine WEB-Seite übertragenen Daten;
2. b) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung mit der Zugangssicherung zu durch diese Sicherung geschützte Daten verknüpft ist;
3. c) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung als Nachweis dient, daß ein bestimmter Benutzer (dem der Telefonanschluß, bzw. gegebenenfalls die Handynummer T-# zugeordnet ist) ein bestimmtes Dokument der WEB-Seite, über welches die genannte Datenschleife geschlossen wird, gelesen hat,
4. d) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung zum Zwecke der Prüfung der Echtheit der WEB-Seite verwendet ist, indem die betreffende WEB-Seite unter Benutzung der bevorzugten Datenschleife DS vom Benutzer auf ihre Echtheit geprüft wird, und dies dem Client (gegebenenfalls auch akustisch oder über Display des Telefonapparates, bzw. Handy's) angezeigt wird;
5. e) zur Verwendung der Herstellung der Zuordnung des Telefonanschlusses, bzw. der Telefonnummer eines Festnetzes oder Handy's (T-#) der Telefonverbindung Tel, welche für die Herstellung der genannten Datenschleife (DS auf der Client Seite CL) mit einer (gleichzeitig oder hintereinander) jeweils adressierten Datenverbindung IT betreffend einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung von durch Adressierung sich zusammensetzenden Datenblöcken) benutzt wird, derart, daß der Server in die Datenblöcke (jeweils) eingebundene Kodelemente (als Bestandteil von KODE) erzeugt, dito bei Rückerhalt prüft, wobei diese Kodelemente KODE in die auf der Serverseite und/oder auf der Client-Seite jeweils abgesendeten, gemäß dem Datenübertragungsverfahren (z.B. dem Protokoll des Internet, IT Datenverkehrs) übertragenen Datenpaketen jeweils als Testinformation (gegebenenfalls verschlüsselt) eingebunden werden, um ständig zu Testen, ob während der Datenübertragung Manipulationen an den zu Datenpaketen zusammengefaßten Daten vorgenommen worden sind, wobei gegebenenfalls wenn mehrere Server verwendet sind, auch der Server ausgekundschaftet werden kann, der die Manipulation vornimmt und dies dem Benutzer oder Operator über die Telefonverbindung (akustisch oder visuell) angezeigt wird,
   • - wobei gegebenenfalls die Telefonverbindung Tel als eine Art Hilfskanal verwendet ist, der mit einer wesentlich geringeren Übertragungsgeschwindigkeit (Baud Rate) arbeiten kann, als die adressierte Datenverbindung IT (z.B. Internet) arbeitet, und über den Hilfskanal Paramter übertragen sind, welche die Prüfung, bzw. Sicherung und/oder Verschlüsselung der über die adressierte Datenverbindung IT (z.B. Internet) geleiteten Daten unterstützt;
6. f) zur Verwendung der Herstellung der Zuordnung des Telefonanschlusses, bzw. der Telefonnummer eines Festnetzes oder Handy's (T-#) der Telefonverbindung Tel, welche für die Herstellung der genannten Datenschleife (DS auf der Client Seite CL) mit einer (gleichzeitig oder hintereinander) jeweils adressierten Datenverbindung IT betreffend einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung von durch Adressierung sich zusammensetzenden Datenblöcken) benutzt wird, derart, daß der Server in die Datenblöcke (jeweils) eingebundene Kodelemente (als Bestandteil von KODE) erzeugt, dito bei Rückerhalt prüft, wobei diese Kodelemente KODE in die auf der Serverseite und/oder auf der Client-Seite jeweils abgesendeten, gemäß dem Datenübertragungsverfahren (z.B. dem Protokoll des Internet, IT Datenverkehrs) übertragenen Datenpaketen jeweils als Testinformation (gegebenenfalls verschlüsselt) eingebunden wird, um eine, über eine IT- Verbindung aufgebaute Telefonverbindung, oder ähnliche Verbindung (wie FAX, etc.) über die durch die bevorzugte Datenschleife hergestellte unverwechselbare Kodierung des Anrufers, dito gegebenenfalls des Angerufenen, zu überwachen, unter der Benutzung der Telefonnummer eines klassischen (über Wählnetz oder Handy Netz angewählten) Telefonanschlusses (T-#) des Anrufers, dito gegebenenfalls auch des Angerufenen (um die Authentizität der Dienstes, über den die Internet-Telefonverbindung aufgebaut wird, zu prüfen, betreffend der WEB-Seite, bzw. des Servers des Dienstes);
7. g) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung zum Zwecke der Zuordnung der WEB-Seite und einer der WEB-Seite zugehörigen, jedoch separat von der WEB-Seite erhaltenen Zugangsnummer (z.B. eines Druckwerkes, wie Zeitung, Buch oder auch einer Rechnung, etc.) verwendet wird, und diese Zugangsnummer einem in die WEB-Seite (über die Tastatur oder durch Scannen oder über einen Chip, oder über eine betreffende Schnittstelle, wie blue tooth, etc.) einzugebenden exemplarischen (musterhaften) Kode KODE_Berechtigung entspricht,
   • - welcher bei der Eingabe mit der über die Datenschleife (KODE nach Merkmal 1) festgestellten Verbindungsnummer der Telefonverbindung (Telefonnummer, Handynummer, etc.) verknüpft wird, um einen Zugang zu einem Bereich der WEB-Seite zu erhalten, in welcher dem genannten Eingabekode KODE_Berechtigung die Verbindungsnummer der Telefonverbindung (Telefonnummer #, Handynummer #, etc.) als zukünftige (für spätere Sitzungen zu verwendende Zugangsberechtigung) zugewiesen wird,
   • - sowie bei nachfolgenden Aufrufen der WEB-Seite durch den Benutzer unter Benutzung der genannten Datenschleife DS der Telefonverbindung, der Zugang zu den geschützten Daten der WEB-Seite nur mehr unter der Verbindungsnummer der Telefonverbindung (Telefonnummer #, Handynummer #, etc.) ermöglicht wird, wie sie bei der erstmaligen Verwendung des Kodes KODE_Berechtigung (als Berechtigung für den Zugang) zur Bildung der Bildung der Datenschleife DS (über welche der Prüfkode KODE zum Testen, bzw. zum Zuordnen der Telefonnummern der Handy's geleitet wurde) verwendet worden ist, wobei dieser Zugang gegebenfalls auch auf einen bestimmten Zeitraum oder eine bestimmte Anzahl von Sitzungen, etc. begrenzt sein kann (Option) und gegebenenfalls auf die weitere Verwendung des Kodes KODE_Berechtigung verzichtet werden kann (Option), der dann durch die zugewiesene Telefonnummer T-# ersetzt wird;
8. h) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung zum Zwecke der Gebührenabrechnung über die Telefongebühren des für die Zuordnung verwendeten Telefonanschlusses zur Bezahlung der über die WEB-Seite angebotenen, bzw. erhaltenen Dienstleistung; verwendet wird;
9. i) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung zum Zwecke der Zuordnung der WEB-Seite, bzw. der zu einer WEB-Seite erhaltenen Daten zum Benutzer als Benutzeridentifizierung für das Öffnen eines mit dem Server in Verbindung stehenden elektronischen Schlosses etc., (oder zur sonstigen Betätigung eines Auslösevorganges (wie z.B. die Öffnung eines Schrankens für ein Parkhaus oder einer Straßensperre, oder die Freigabe des Zutrittes einer Person über ein Drehkreuz, usw.) verwendet wird, wobei der genannte Vergleich des vom Server ausgesendeten Prüf Kodes (KODE) zur Benutzeridentifizierung als Bedingung (oder weitere Bedingung) für die Freigabe der Öffnung des Schlosses, bzw. für die Betätigung des Auslösevorganges, am Schloß (bzw. einer betreffenden Vorrichtung) autark erfolgt und die betreffende Datenschleife über das mit dem elektronischen Schloß gekoppelte Handy geschlossen wird;
10. j) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung für die Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung verwendet wird und als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder ein Handy zum Zwecke der Abwicklung eines bargeldlosen Zahlungsverkehrs verwendet wird;
11. k) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung für die Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung verwendet wird und als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) zwei Handy's über welche die bevorzugte Datenschleife durch Datenkopplung (zum Server) hergestellt wird zum Zwecke der Abwicklung eines bargeldlosen Zahlungsverkehrs verwendet sind;
12. l) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung für die Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung verwendet wird und als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder ein Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung des anonymen Aufrufs einer (gegebenenfalls auch anonym erzeugten) WEB-Seite benutzt wird;
13. m) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung für die Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung verwendet wird und als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder ein Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung der Abgabe (gegebenenfalls auch des Nachweises für die Abgabe) einer digitalen Signatur (Unterschrift) zu einem auf einer betreffenden WEB-Seite dargestellten Dokument benutzt wird;
14. n) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung für die Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung verwendet wird und als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder ein Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung der Abgabe (gegebenenfalls auch des Nachweises für die Abgabe) einer digitalen Signatur (Unterschrift) zu einer auf einer betreffenden WEB-Seite gesendeten E-Mail benutzt wird;
15. o) zur Verwendung wie unter a) angegeben, wobei die Benutzeridentifizierung für die Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung verwendet wird und als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder ein Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung mit der Abgabe (gegebenenfalls auch des Nachweises für die Abgabe) einer digitalen Signatur (Unterschrift) zu einem allgemeinen über einen Server ausgelösten Vorgang benutzt wird;
16. p) zur Verwendung in Verbindung mit zwei Handy's zur Herstellung der Kopplung der bevorzugten Datenschleife DS, wobei die Handy's ein GPS Koordinatenerfassungssystem beinhalten oder ein vergleichbares System, auch km Erfassungssystem eines Fahrzeuges (etc.) mit einer Datenverbindung zum Handy, etc. vorgesehen ist, und bei der Bildung der Datenschleife DS (über welche der Prüfkode zum Testen, bzw. zum Zuordnen der Telefonnummern der Handy's geleitet ist) als zugehörige Eingabedaten die GPS Koordinaten und/oder der aktuelle km-Stand eines Fahrzeuges an den (bzw. an die) betreffenden Server übermittelt werden und dieser Vorgang an zwei verschiedenen Orten erfolgt und zu dieser Telefonnummernkombination der betreffenden Handy's die Distanz (gegebenenfalls nach einem Straßenplan) ermittelt wird, wobei gegebenenfalls eines der Handy's (oder auch beide) zu diesem Zweck entsprechende Standortmeldungen an den Server senden (oder der eingegebene km Stand dazu verwendet wird, etc.), und über die Datenkoppelung der Handy's zum Server die Personendaten über die Rufnummer der Handy's erfaßt und bewertet werden (um dem Fahrer die nötige Sicherheit zur Personen Identifizierung zu geben, gegebenenfalls ob der Mitfahrer ausreichend versichert ist, usw.), wobei gegebenenfalls anstelle oder zusätzlich zu den GPS Daten die km Zähler über eine Funkschnittstelle zum Handy (z.B. des Autofahrers) den km Stand zur Ermittlung der Wegstrecke übermittelt und dann gegebenenfalls auf das GPS Koordinatenerfassungssystem verzichtet werden kann, und/oder weiters gegebenenfalls (als Option) in näherer Ausführung, durch eine akustische Koppeleinrichtung, die unter dem Außenspiegel eines Fahrzeuges eingebaut ist (vgl. 3), die Verbindung zum Handy des Fahrers aufgebaut wird, indem das betreffende Handy (des Mitfahrers) von außen gegen den Außenspiegel gehalten wird und für das Handy des Fahrers im Fahrzeug eine entsprechende Koppeleinrichtung vorgesehen ist, die zur akustischen Koppeleinrichtung des Außenspiegels eines entsprechende Verbindung aufweist;
17. q) zur Verwendung in einer Konferenzschaltung derart, daß die genannte Kopplung der Datenschleife DS zwischen Client und Telefon, bzw. Handy (in vorzugsweiser Option innerhalb des selben Gerätes durch entsprechend elektronische Schaltung oder auch Taster, etc.) vorgenommen wird;
18. r) zur Verwendung der Herstellung der Zuordnung des Telefonanschlusses, bzw. der Telefonnummer eines Festnetzes oder Handy's (T-#) der Telefonverbindung, welche für die Herstellung der genannten Datenschleife (DS auf der Client Seite CL) mit einer auf der Client Seite CL weiteren Telefonverbindung eines Festnetzes oder Handy's benutzt wird, zum Zwecke der Zuordnung der Anschlußbezeichnung (bzw. Telefonnummer #) der weiteren Telefonverbindung als weitere Zugangsadresse für eine der unter den in Absatz a bis q genannten Anwendungen (z.B. für eine WEB-Seite, etc.), wobei je nach Anwendung, die frühere als Zugangsadresse verwendete Telefonverbindung als zusätzliche Adresse beibehalten oder ersetzt werden kann, bzw. gegebenenfalls dieser Vorgang der Zuordnung einer neuen Telefonnummer als Zugangsadresse unter Benutzung eines entsprechenden Zugangskodes KODE_Berechtigung (vgl. Absatz g) erfolgen kann;
19. s) zur Verwendung wie unter a) und d) angegeben, zum Zwecke der Prüfung der Echtheit einer WEB-Seite, welche durch einen Telefonanruf des Benutzers über ein (zum Internet Netz IT zusätzlich benutztes) weiteres Netz (Telefonnetz, Handynetz) durch Anruf des Servers (z.B. Adressierung über eine Durchwahlnummer, etc.) aufgerufen wird und unter Benutzung der bevorzugten Datenschleife DS vom Benutzer auf ihre Echtheit geprüft wird, wobei die betreffende WEB-Seite unter Verwendung eines weiteren Internetzuganges (eines weiteren Serverzuganges des gleichen oder eines weiteren Servers) für ihre Darstellung auf dem Rechner (Client) des Benutzers in eine weitere nur als passiver Daten Container (bzw. Daten Terminal) verwendete WEB-Seite kopiert wird, welche als Datenzugang für beliebig derart darzustellende WEB-Seiten verwendet ist und die in diese WEB-Seite für den Datenzugang kopierte WEB-Seite sowohl anonym (über das zum Internet Netz IT weiter vorhandene Netz Telefonnetz, Handynetz) aufgerufen ist, als auch einer durch eine anonyme Datenquelle (die über die nur als Daten Container, bzw. Daten Terminal verwendete WEB-Seite präsentiert wird) erzeugten WEB-Seite entspricht;
20. t) zur Verwendung wie unter a) angegeben, zum Zwecke der Prüfung und/oder Feststellung der Identität eines Anrufers, der unter Benutzung des Internet Netzes (IT) einen Telefonanruf Telefonverbindung (Voice over IP) bei einem entsprechenden Benutzer vornimmt, wobei der Anrufer zunächst einen kurzen Anruf über ein übliches Telefonnetz (Standard Telefonverbindung) vorzunehmen hat, um die Datenschleife (DS) zur Übertragung des Prüfkodes KODE beim Anrufer und/oder Angerufenen zu bilden, und nach Aufbau der Internet Telefonverbindung (Voice over IP) die Standard Telefonverbindung über das übliche Telefonnetz wieder unterbrochen werden kann;
21. u) zur Verwendung wie unter a) bis t) angegeben, wobei die Datenschleife DS über zwei oder mehrere Server (I, II, ...) gebildet wird, welche unabhängig von den anderen Servern oder über die Server durchgeschleift, über die bevorzugte Datenkopplung (beim Benutzer bzw. Client CL) ihren Prüfkode (KODE1, KODE2...) jeweils übertragen und in einer der Anwendung entsprechenden Hierarchie auswerten;
22. v) zur Verwendung wie unter a) bis u) angegeben, wobei die Datenschleife DS über zwei oder mehrere Server (I, II, ...) gebildet wird, welche unabhängig von den anderen Servern (oder über die Server durchgeschleift) ihren Prüfkode (KODE1, KODE2...) über die bevorzugte Datenkopplung beim Benutzer (Client CL) jeweils übertragen und in einer der Anwendung entsprechenden Hierarchie auswerten um neben der Identität des Benutzers auch die Identität des Serverzuganges der weiterhin mit vernetzten Server zu überprüfen, und/oder für über die gleiche (beim Benutzer angezeigte) WEB-Seite übertragene Daten unterschiedlicher Geheimhaltungszugehörigkeit in Bezug zu auf den betreffenden Servern (I, II, ...) jeweils laufenden Datenbanken, durch einen den Daten jeweils zugeordneten Prüfkode (KODE1, KODE2...), die betreffenden Daten jeweils vor dem Zugriff des anderen mit vernetzten Servers, oder der anderen mit vernetzten Server (I, II, ...), autark sichern;
23. w) zur Verwendung derart, daß der gemäß Merkmal 1 in einer seriellen Datenschleife DS über zwei oder mehrere Geräte zirkulierende Kode (KODE), der von einem Gerät (jeweils) ausgesendet und/oder manipuliert ist, bei Rückerhalt verglichen, bzw. gegebenenfalls die vorgenommene Manipulation geprüft wird, im besonderen derart, daß die in der Datenschleife den Kode zum nächsten Gerät jeweils weitergebenden Geräte jeweils eine solche Prüfung (der Reihe nach, oder auch gleichzeitig mit jeweils autarkem Kode) vornehmen, um die Authentizität der anderen Geräte jeweils zu überprüfen (vgl. 12b);
24. x) zur Verwendung derart, daß der gemäß Merkmal 1 in einer seriellen Datenschleife DS über zwei oder mehrere Geräte zirkulierende Kode (KODE), der von einem Gerät (jeweils) ausgesendet und/oder manipuliert ist, über eine Datenschleife DS geleitet wird, die folgende Geräteverbindungen umfaßt (12b, Option), wobei das Handy über eine Konferenzschaltung zwei Telefonverbindungen (Tel1, Tel2) anwählt:
    • - eine Handyverbindung (Tel1) zu einem Verbindungsserver, der eine Anrufweiterschaltung des Anrufs (auch voice over IP, etc.) vornimmt (Tel1.... Teln),
    • - eine Internetverbindung IT zwischen dem Verbindungsserver und einem Bankserver zur Verwaltung eines On line Kontos,
    • - eine Handyverbindung (Tel2) zu dem Bankserver,
    und über entsprechende Kodemanipulationen im Verbindungsserver mit Prüfung der Manipulation im Bankserver, und einer weiteren Manipulation im Bankserver mit Prüfung dieser weiteren Manipulation im Verbindungsserver, eine Überwachung des Abbuchungsvorganges des durch den Bankserver verwalteten On line Kontos entsprechend der vom Verbindungsserver erbrachten Dienste vorgenommen wird, wobei die Manipulationen und Prüfungen des Kodes gemäß einer Vereinbarung zwischen dem Verbindungsserver und dem Bankserver (z.B. über Protokoll via IT) vorgenommen ist;
25. y) zur Verwendung derart, daß Merkmal 1 in Verbindung mit den im Anhang in der Beschreibung angegebenen Merkmalen verwendet wird;
26. z) wobei für die unter a) bis y) genannten Verwendungen, gegebenenfalls, sofern die Anwendung es zuläßt, als Telefonverbindung zur Bildung der Datenschleife DS auch eine entsprechend gesicherte Internetverbindung IT verwendet werden kann.

4. Method according to one of the features 1 to 3 in that in particular the method is used in one of the following applications:

1. a) for using the establishment of the assignment of the telephone line, or the telephone number of a landline or mobile phone (T- #) of the telephone line Tel, which for the production of said data loop (DS on the client side CL) with a (simultaneously or consecutively) respectively addressed data connection IT concerning a WEB page (or a similar data connection of data blocks composed by addressing) shown on the client side CL, for the purpose of assigning the WEB page to the user of the telephone line or to his telephone number (a Landline and / or a mobile phone) as a user identification for the processing of transmitted via a WEB page data;
2. b) for use as specified under a), with the user identification associated with the access protection to data protected by this security;
3. c) for use as indicated under a), wherein the user identification serves as a proof that a particular user (to whom the telephone line, or if necessary the mobile number T- # is assigned) a specific document of the WEB page, over which said data loop closed, read,
4. d) for use as specified under a), wherein the user identification is used for the purpose of checking the authenticity of the WEB page by using the relevant WEB page using the preferred data loop DS is checked by the user for authenticity, and this is displayed to the client (possibly also acoustically or via the display of the telephone set, or mobile phone);
5. e) for using the establishment of the assignment of the telephone line, or the telephone number of a landline or mobile phone (T- #) of the telephone line Tel, which for the production of said data loop (DS on the client side CL) with a (simultaneously or consecutively) respectively addressed data connection IT relating to a WEB page (or a similar data connection of addressing blocks constituting data blocks) shown on the client side CL, such that the server generates code elements embedded in the data blocks (as part of KODE) , Ditto checks on retention, these code elements KODE respectively in the on the server side and / or on the client side sent, according to the data transmission method (eg the protocol of the Internet, IT traffic) data packets are each included as test information (possibly encrypted) to constantly test if during the data transmission manipulations have been made to the data packetized data, where appropriate, if multiple servers are used, also the server can be scouted, which performs the manipulation and this is displayed to the user or operator over the telephone connection (audible or visual),
   • - Where appropriate, the telephone connection Tel is used as a kind of auxiliary channel, which can operate at a much lower transmission rate (baud rate) than the addressed data connection IT (eg Internet) works, and are transmitted via the auxiliary channel Paramter, which the test, or Backup and / or encryption of the data routed via the addressed data connection IT (eg Internet) supported;
6. f) for using the establishment of the assignment of the telephone line, or the telephone number of a landline or mobile phone (T- #) of the telephone line Tel, which for the production of said data loop (DS on the client side CL) with a (simultaneously or consecutively) respectively addressed data connection IT relating to a WEB page (or a similar data connection of addressing blocks constituting data blocks) shown on the client side CL, such that the server generates code elements embedded in the data blocks (as part of KODE) , ditto when retrieval checks, these code elements KODE respectively in the on the server side and / or on the client side sent, according to the data transmission method (eg the protocol of the Internet, IT traffic) transmitted data packets each as test information (possibly encrypted) is included to one, set up via an IT connection Telephone connection, or similar connection (such as FAX, etc.) to monitor over the produced by the preferred data loop distinctive coding of the caller, ditto if necessary, the called party, using the phone number of a classic (dial-up network or mobile phone network dialed) telephone line (T - #) of the caller, ditto, if necessary, of the called party (to check the authenticity of the service over which the Internet telephone connection is established, concerning the WEB side, or the server of the service);
7. g) for use as indicated under a), wherein the user identification for the purpose of assigning the WEB page and one of the web page associated, but separately received from the WEB page access number (eg a printed matter, such as newspaper, book or even a Invoice, etc.), and this access number corresponds to an exemplary (exemplary) code KODE_authority to be entered into the WEB page (via the keyboard or by scanning or via a chip, or via a relevant interface, such as blue tooth, etc.) .
   • - which in the input with the via the data loop (KODE after feature 1 ) is linked to obtain access to an area of the WEB page in which the said input code KODE_authorized authorization the connection number of the telephone connection (telephone number #, mobile number #, etc.) as assigned future access rights (to be used for subsequent sessions),
   • - As well as subsequent calls to the WEB page by the user using the said data loop DS of the telephone connection, the access to the protected data of the WEB page only more than the connection number of the telephone connection (telephone number #, mobile number #, etc.) is enabled as used in the initial use of the code KODE_authorization (as access privilege) to form the data loop DS formation (via which the KODE test code was passed for testing or for assigning the phone numbers of the mobile phones), this being Access may also be limited to a certain period of time or a certain number of sessions, etc. (option) and, where appropriate, the further use of the code KODE_authorization can be waived (option), which is then replaced by the assigned telephone number T- #;
8. h) for use as indicated under a), wherein the user identification for the purpose of billing via the telephone charges of the telephone line used for the assignment for the payment of services offered or received via the WEB page; is used;
9. i) for use as indicated under a), wherein the user identification for the purpose of assigning the WEB page or the data received to a WEB page to the user as user identification for opening an electronic lock associated with the server, etc. , (or used for other operation of a triggering operation (such as the opening of a barrier for a parking garage or a roadblock, or the release of a person's access via a turnstile, etc.), said comparison of the test codes sent by the server ( CODE) for user identification as a condition (or further condition) for the release of the opening of the lock, or for the operation of the triggering operation, the lock (or a device concerned) is self-sufficient and the data loop in question via the coupled with the electronic lock cell phone is closed;
10. j) for use as indicated under a), wherein the user identification is used for the allocation or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing and as a telephone connection for the data loop (for Server) a landline telephone or a mobile phone is used for the purpose of processing a cashless payment transaction;
11. k) for use as indicated under a), wherein the user identification for the assignment or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing is used and as a telephone connection for the client side CL established data loop (for Server) two mobile phones over which the preferred data loop is produced by data coupling (to the server) is used for the purpose of processing a cashless payment transaction;
12. l) for use as indicated under a), wherein the user identification for the assignment or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing is used and as a telephone connection for the client side CL established data loop (for Server) a landline telephone or a mobile phone for the purpose of networking multiple servers in connection of the anonymous call a (possibly also anonymously generated) WEB page is used;
13. m) for use as indicated under a), wherein the user identification for the assignment or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing is used and as a telephone connection for the client side CL established data loop (for Server) a landline telephone or a mobile phone for the purpose of networking multiple servers in connection of the levy (possibly also the proof of delivery) of a digital signature (signature) is used to a document displayed on a respective WEB page;
14. n) for use as indicated under a), wherein the user identification is used for the assignment or synchronization of two or more simultaneous or successive processes in data transmission and / or data processing and as a telephone connection for the data loop (for Server) a landline phone or a cell phone for the purpose of networking multiple servers in connection of the levy (possibly also the proof of the delivery) of a digital signature (signature) is used to a sent on a WEB page e-mail;
15. o) for use as indicated under a), wherein the user identification is used for the assignment or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing and as a telephone connection for the data loop produced on the client side CL (for Server) a landline telephone or a cell phone for the purpose of networking multiple servers in connection with the delivery (possibly also the proof of delivery) of a digital signature (signature) is used to a general operation triggered by a server;
16. p) for use in conjunction with two mobile phones for establishing the coupling of the preferred data loop DS, wherein the mobile phones include a GPS coordinate detection system or a comparable system, also km detection system of a vehicle (etc.) is provided with a data connection to the mobile phone, etc., and in the formation of the data loop DS (via which the test code is passed for testing or for assigning the phone numbers of the mobile phone) as associated input data, the GPS coordinates and / or the current mileage of a vehicle to the (or to the) the server concerned and this process takes place in two different locations and to this phone number combination of the relevant mobile phone's distance (possibly according to a street plan) is determined, optionally one of the cell phone (or both) for this purpose send appropriate location messages to the server ( or the entered km state is used, etc.), and practice r the data coupling of the mobile phone to the server, the personal data on the phone number of mobile phones are recorded and evaluated (to give the driver the necessary security for persons identification, if the passenger is adequately insured, etc.), where appropriate, instead of or in addition to GPS data the km counter via a radio interface to the mobile phone (eg the car driver) the km state for determining the distance transmitted and then possibly can be dispensed with the GPS coordinate detection system, and / or further optionally (as an option) in detail, by an acoustic Coupling device, which is installed under the exterior mirror of a vehicle (see. 3 ), the connection to the driver's cell phone is established by the relevant mobile phone (the rider) is held from the outside against the outside mirrors and for the driver's cell phone in the vehicle, a corresponding coupling device is provided which has the acoustic coupling device of the exterior mirror of a corresponding compound ;
17. q) for use in a conference circuit such that said coupling of the data loop DS between client and telephone, or mobile (preferably within the same device by corresponding electronic circuit or buttons, etc.) is made;
18. r) for using the establishment of the assignment of the telephone line, or the telephone number of a landline or mobile phone (T- #) of the telephone connection, which for the production of said data loop (DS on the client side CL) with a on the client side CL further Telephone connection of a landline or mobile phone is used, for the purpose of assigning the terminal designation (or telephone number #) of the other telephone connection as another access address for one of the applications mentioned in paragraphs a to q (eg for a WEB page, etc.), depending on the application, the former used as access address telephone connection can be maintained or replaced as an additional address, or if necessary, this process of assigning a new telephone number as an access address using a corresponding access code KODE_Berechtigung (see paragraph g) can take place;
19. s) for use as specified under a) and d), for the purpose of checking the authenticity of a WEB page, which by a telephone call of the user via a (in addition to the Internet network IT used) another network (telephone network, mobile phone network) by calling the Server (eg addressing via an extension number, etc.) is called and checked using the preferred data loop DS by the user on their authenticity, the WEB page concerned using another Internet access (another server access of the same or another server) is copied for their representation on the computer (client) of the user in another used only as a passive data container (or data terminal) WEB page, which is used as data access for any such WEB pages to be displayed and in this WEB Web page copied for data access both anonymously (via the network telephone network, mobile phone network) is also generated by an anonymous data source (which is presented via the WEB page used only as a data container or data terminal);
20. t) for use as indicated under a) for the purpose of verifying and / or establishing the identity of a caller using the Internet network (IT) making a telephone call to a corresponding user via a voice call, the caller first make a short call over a standard telephone network (standard telephone connection) to form the data loop (DS) for transmission of the test code KODE to the caller and / or called party, and after establishment of the Internet telephone connection (Voice over IP) the standard telephone connection via the usual telephone network can be interrupted again;
21. u) for use as indicated under a) to t), wherein the data loop DS is formed by two or more servers (I, II, ...) which are looped through independently of the other servers or via the servers via the preferred data link (at the user or client CL) their test code (KODE1, KODE2 ...) each transmitted and evaluate in a hierarchy corresponding to the application;
22. v) for use as indicated under a) to u), wherein the data loop DS is formed by two or more servers (I, II,...), which independently of the other servers (or looped through the servers) their test code ( KODE1, KODE2 ...) via the preferred data coupling at the user (client CL) each transmitted and evaluated in a hierarchy corresponding to the application to verify the identity of the user and the identity of the server access continue with networked server, and / or for data of different secrecy affiliation transmitted with respect to the respective servers (I, II,...) in each case via the same WEB page (displayed to the user) by means of a test code assigned to the respective data (KODE1, KODE2. back up the relevant data independently before accessing the other with a networked server, or the other with networked servers (I, II, ...);
23. w) for use such that the according to feature 1 in a serial data loop DS via two or more devices circulating code (KODE), which is sent by a device (respectively) and / or manipulated, compared with back preservation, or possibly the manipulation is checked, in particular such that the in the data loop the code to the next device each passing devices each such a test (in order, or simultaneously with each self-sufficient code) make to verify the authenticity of the other devices each (see. 12b) ;
24. x) for use such that the according to feature 1 in a serial data loop DS via two or more devices circulating code (KODE), which is sent and / or manipulated by a device (respectively), is passed over a data loop DS, comprising the following device connections ( 12b , Option), whereby the mobile phone has two telephone connections ( Tel1 . tel2 ) selects:
    • - A mobile phone connection (Tel1) to a linked server, which makes a call forwarding of the call (voice over IP, etc.) (Tel1 .... Teln),
    • an internet connection IT between the linked server and a bank server for managing an on-line account,
    • a mobile phone connection (Tel2) to the bank server,
    and via appropriate code manipulation in the connection server with examination of the manipulation in the bank server, and further manipulation in the bank server with consideration of this further manipulation in the linked server, monitoring of the debiting of the on-line account managed by the bank server according to the services provided by the linked server, wherein the Manipulations and checks of the code according to an agreement between the linked server and the bank server (eg via protocol via IT ) is made;
25. y) for use such that feature 1 used in conjunction with the features specified in the appendix in the appendix;
26. z) wherein for the uses mentioned under a) to y), if appropriate, if the application allows, as a telephone connection to form the data loop DS and a correspondingly secure Internet connection IT can be used.

1. a) es wird durch ein entsprechendes Meßverfahren die Laufzeit des Signals über die Koppelschnittstelle zwischen jeweils sendendem Endgerät (S) und empfangenden Endgerät (E) gemessen (vgl. 6a, 6b), gegebenenfalls auch bidirektional (Option);
2. b) und/oder es sind kryptographische Allgorithmen vorgesehen, mit denen der Zufallskode (KODE) an der Koppelstelle am jeweils sendenden (S) Endgerät verändert sowie am empfangenden Endgerät (E) nach einem entsprechenden Algorithmus weiter verändert oder wieder zurück verändert wird, bevor er an den Server zurückgesendet wird, wobei die miteinander verknüpfte Veränderung des Kodes (KODE) unter Beteiligung von sendenden (S) Endgerät und empfangenden Endgerät (E) gewährleistet, daß ein jeweils einander zugehöriges Paar von Endgeräten (des selben Benutzers) für die Kopplung DS zur Herstellung der Datenschleife verwendet wird, wobei optional noch nachfolgend angegebenes Meßverfahren mit zur Anwendung kommen kann;
3. c) und/oder es wird durch ein entsprechendes Meßverfahren die Bandbreite der Datenschleife DS gemessen.

5. Method according to one of the features 1 to 4 , in particular by the fact that for checking the data loop DS produced on the relevant subscriber side (eg client side) by a corresponding coupling of the networks, one of the technical measures or measurements specified below is used (cf. 6a and 6b) , is determined by this review (on the evaluation of the measurement), whether the coupling (for sending S and receiving E over the path of the coupling path DS) used terminals (T or CL in 2a . 2 B , hereinafter referred to as the coupling path with S and E) within a certain minimum distance (directly), or via unauthorized interposition of another data link:

1. a) it is measured by a corresponding measurement method, the duration of the signal via the coupling interface between each transmitting terminal (S) and receiving terminal (E) (see. 6a . 6b) , if necessary also bidirectional (option);
2. b) and / or there are provided cryptographic algorithms with which the random code (KODE) at the coupling point at each transmitting (S) terminal changed as well as the receiving terminal (E) according to a corresponding algorithm further changed or changed back before he is sent back to the server, wherein the interlinked change of the code (KODE) with the participation of sending (S) terminal and receiving terminal (E) ensures that a respective pair of terminals (the same user) for the coupling DS to manufacturing the data loop is used, with optionally still specified below measuring method can be used;
3. c) and / or it is measured by a corresponding measurement method, the bandwidth of the data loop DS.

• - unabhängig von den tatsächlichen temporären oder festen Verbindungsadressen des Datennetzes, wie sie zum Aufbau der Datenverbindung verwendet sind, benutzt sein können,
• - und/oder Erkennung und/oder Überprüfung und/oder Zuordnung temporärer oder fester Verbindungsadressen, mit Verbindungsadressen des Datennetzes noch weiter verknüpft sein können,

dadurch besonders,

1. a) daß über ein weiteres Netz (verschlüsseltes Internet, Handy Netz, Festnetz, Funknetz, etc.), nachfolgend Sicherungsnetz oder auch zweites Netz genannt, dessen Verbindungsstruktur von Teilnehmer zu Teilnehmer durch die verwendete Technik als sicher anzusehen ist, und
   • - über Server und Endgeräte (der verwendeten Netze),
   und/oder
   • - über mehrere vernetzte Server und Endgeräte (der verwendeten Netze), und/oder
   • - über mehrere vernetzte Endgeräte (z.B. einer Konferenzschaltung),
   eine Datenschleife DS unter Verwendung beider Netze (des genannten ersten Netzes und des genannten zweiten Netzes, bzw. Sicherungsnetzes) gebildet wird, über welche ein Sicherungskode KODE übertragen wird,
2. b) und daß eine Prüfung (1=2 ?, 1a oder 1b) des Sicherheitskodes (KODE) nach folgenden Abfragen erfolgt:
   • - ob der KODE sich bei der Übertragung über die beiden Netze verändert hat (was einem unmittelbaren Kodevergleich entspricht),
   • - und/oder wie der KODE sich bei der Übertragung über die beiden Netze in Übereinstimmung nach einer Vorschrift (bzw. nach einer Formel oder einem Algorithmus) sich verändert hat (was einem Vergleich des vor einer Verschlüsselung detektieren Kodes mit dem zu erwartenden Ergebnis oder dem wieder entschlüsselten Kode entspricht),
   wobei abhängig vom erhaltenen Prüfungsergebnis (wahr oder falsch), die sichere Erkennung und/oder Überprüfung und/oder Zuordnung der Teilnehmeranschlüsse, bzw. Teilnehmeradressen in Bezug zu dem nachfolgend angegebenen Gerät, bzw. Geräten vorgenommen wird:
   • • in Bezug auf eine Prüfung des richtigen Client betreffend der für die Datenschleife DS verwendeten Endgeräte (von erstem Netz und zweitem Netz), gegebenenfalls in weiterer Verbindung mit innerhalb der Datenschleife noch weiterer vorhandener Datenzugänge;
   und/oder
   • • in Bezug auf eine Prüfuing des (bzw. gegebenenfalls auch der) richtigen Server, der (bzw. die) über die Datenschleife DS mit den betroffenen Endgeräten (von erstem Netz und zweitem Netz), verbunden ist (bzw. sind), gegebenenfalls in weiterer Verbindung mit innerhalb der Datenschleife noch weiterer vorhandener Datenzugänge;
   wobei die Koppelung der zu einer Datenschleife DS auf der Client Seite gekoppelten Datennetze (erstes Netz und zweites Netz) je nach Anwendung beliebige Netzkombinationen betreffen können, wie beispielsweise,
   • - Internet-Netz und Handy Netz,
   • - Internet-Netz und Telefonnetz (Festnetz),
   • - Telefonnetz (Festnetz) und Handy Netz,
   • - Handy Netz und Handy Netz,
   • - Telefonnetz (Festnetz) und Telefonnetz (Festnetz) unter Verwendung einer Konferenzschaltung,
   • - Handy Netz und Handy Netz unter Verwendung einer Konferenzschaltung,
   • - TV Bildschirm und Handy Netz oder Telefonnetz (Festnetz),
   • - TV Lautsprecher und Handy Netz oder Telefonnetz (Festnetz).

6. Method according to one of the features 1 to 5 , or according to the generic term of the feature 1 , or method for the secure detection and / or verification and / or assignment of subscriber lines, or subscriber addresses, in association with participating in a server process participants and in connection with associated data of a data network (eg Internet, mobile phone network, landline phone, radio network, etc .), hereinafter referred to as the first network whose data are encoded by the subscriber addresses for designating data accesses, these subscriber addresses

• may be used independently of the actual temporary or fixed connection addresses of the data network as used for establishing the data connection,
• - and / or recognition and / or verification and / or assignment of temporary or fixed connection addresses, with connection addresses of the data network may be further linked,

especially,

1. a) that via another network (encrypted Internet, mobile phone network, landline, radio network, etc.), hereinafter referred to as backup network or second network, the connection structure of participants to participants by the technology used to be considered safe, and
   • - via servers and terminals (of the networks used),
   and or
   • via several networked servers and terminals (of the networks used), and / or
   • - via several networked terminals (eg a conference call),
   a data loop DS is formed using both networks (of said first network and of said second network or security network) via which a security code KODE is transmitted,
2. b) and that a test (1 = 2?, 1a or 1b) of the security code (KODE) after the following queries:
   • whether the code has changed during transmission over the two networks (which corresponds to a direct comparison of the codes),
   • and / or how the KODE has changed in the transmission over the two networks in accordance with a rule (or according to a formula or an algorithm) (which corresponds to a comparison of the code detected before encryption with the result to be expected or again decrypted code),
   depending on the obtained test result (true or false), the secure detection and / or verification and / or assignment of the subscriber lines, or subscriber addresses in relation to the device or devices specified below:
   • In relation to a check of the correct client concerning the terminals used for the data loop DS (of the first network and the second network), optionally in further connection with further data accesses present within the data loop;
   and or
   • In relation to a checking by the (or possibly also the) correct server, which is (or is) connected via the data loop DS with the affected terminals (from the first network and the second network), if necessary in further connection with within the data loop still further existing data accesses;
   the coupling of the data networks (first network and second network) coupled to a data loop DS on the client side can relate to arbitrary network combinations depending on the application, such as, for example,
   • - Internet network and mobile phone network,
   • - Internet network and telephone network (landline),
   • - telephone network (landline) and mobile phone network,
   • - Mobile phone network and mobile phone network,
   • - telephone network (landline) and telephone network (landline) using a conference call,
   • - Mobile phone network and mobile phone network using a conference call,
   • - TV screen and mobile phone network or telephone network (landline),
   • - TV speaker and mobile network or telephone network (landline).

• - daß beim Client für jedes Netz jeweils ein Endgerät (der betreffenden Netze) vorgesehen ist und über eine Kopplung der (beiden) Endgeräte, unmittelbar (4, 5) oder gegebenenfalls über ein weiteres Gerät (300 3), eine serielle Datenschleife DS über die Netze gebildet wird, wobei gegebenenfalls beliebig viele Netze mit einbezogen werden können, daß über eines der Datennetze 1 (1a) der vom Server generierte Sicherheitskode (KODE, 1a) zum betreffenden Endgerät gesendet wird und über die Kopplung unmittelbar oder Daten technisch manipuliert unter Verwendung des anderen Netzes 2 (bzw. gegebenenfalls der anderen Datennetze) dem Server zurück geleitet wird, wobei die genannte Prüfung (1=2 ?) des KODES im Server vorgenommen wird,

und/oder

• - daß beim Client für jedes Netz jeweils ein Endgerät (der betreffenden Netze) vorgesehen ist und der vom Server generierte Sicherheitskode (KODE, 1b) über beide Datennetze (1, 2) den betreffenden Endgeräten (wie z.B. einem Automat, oder einem an das Internet angeschlossenen elektronischem Schloß, Türschloß, Schranke, Drehkreuz, etc.), von denen eines eine Handy Verbindung (über Kopplung DS) betrifft, zugeleitet ist, um durch eine an die Endgeräte erfolgende Kopplung der Datennetze eine parallele Datenschleife DS zu bilden, wobei die genannte Prüfung (1=2 ?) des KODES an der Kopplung oder an einem die Kopplung betreffenden Endgerät vorgenommen wird,
• - wobei gegebenenfalls auch eine serielle Datenschleife und eine parallele Datenschleife für den selben Erkennungs- und/oder Überprüfungs- und/oder Zuordnungsvorgang (quasi gleichzeitig) gebildet werden kann.

7. Method according to one of the features 1 to 6 , with a server / client model (eg a client as WEB participant addressed by the server of an internet provider), thereby in particular,

• - That the client for each network in each case a terminal (of the networks concerned) is provided and via a coupling of the (two) terminals, immediately ( 4 . 5 ) or optionally via another device ( 300 3 ), a serial data loop DS is formed over the networks, wherein possibly any number of networks can be included that on one of the data networks 1 ( 1a) the server-generated security code (KODE, 1a) is transmitted to the terminal in question and technically manipulated via the coupling using the other network 2 (or possibly the other data networks) is returned to the server, wherein said check (1 = 2?) of the CODE is made in the server,

and or

• - That the client for each network in each case a terminal (of the networks concerned) is provided and the generated by the server security code (KODE, 1b) over both data networks ( 1 . 2 ) the relevant terminals (such as a vending machine, or a connected to the Internet electronic lock, door lock, barrier, turnstile, etc.), one of which is a mobile phone connection (via coupling DS) is supplied to one by the Terminal coupling of the data networks to form a parallel data loop DS, wherein the said check (1 = 2?) Of the KODES is made to the coupling or to a terminal relating to the coupling,
• - Where appropriate, a serial data loop and a parallel data loop for the same recognition and / or verification and / or assignment process (quasi simultaneously) can be formed.

1. a) daß die an der Client Seite genannte Kopplung, bzw. Datenschleife DS, unmittelbar über entsprechend vorhandene Schnittstellen der betreffenden Endgeräte gebildet wird (akustisch, Infrarot bzw. optisch über Sensor oder Kamera, dito Bildschirm; oder über blue tooth bzw. HF; oder galvanisch, induktiv, kapazitiv, etc., vgl. 2a, 2b),
2. b) und/oder daß in diese Kopplung, bzw. Datenschleife DS ein weiterhin vorhandenes autarkes Drittgerät (300 in 3) vorgesehen ist, über das unter Verwendung entsprechender Schnittstellen (akustisch, Infrarot bzw. optisch über Sensor oder Kamera, dito Bildschirm; oder über blue tooth bzw. HF; oder galvanisch, induktiv, kapazitiv, etc.,) zu den Endgeräten die Datenkopplung (zur Bildung von DS) durchgeschleift wird (gegebenenfalls mit weiterer Datenmanipulation über dieses Drittgerät),

wobei diese Datenkopplung bei der unmittelbar zwischen den Endgeräten oder gegebenenfalls über das weiterhin vorhandene autarke Drittgerät und den Endgeräten hergestellten Datenschleife DS, folgende Optionen umfaßt:

• - die Datenkopplung (zur Bildung der Datenschleife DS),
• - und/oder gegebenenfalls weiterhin eine Dateneingabe und/oder Datenausgabe,
• - und/oder gegebenenfalls weiterhin eine Verschlüsselung (Veränderung) des vom Server ausgesendeten Kodes (KODE) auf der Clientseite vorgenommen wird,
  • - wobei gegebenfalls in die Verschlüsselung, über die Endgeräte des Client eingegebene und/oder ausgegebene Daten mit einbezogen sind (7) und entsprechende Verschlüsselungsparamter zwischen Server und Endgeräte ausgetauscht werden,
  • - und/oder es ist eine digitale Unterschrift in die Verschlüsselung des genannten Kodes (KODE) mit einbezogen,
  • - und/oder es ist ein SMS Konverter im Endgerät oder einem der für die Datenkopplung DS verwendeten Endgeräte (z.B. Handy) vorgesehen, der eine empfangene SMS in das betreffende Scnnittstellensignal zur Herstellung der genannten Kopplung bzw. Übermittlung des mit einer SMS gesendeten Kodes (KODE) umsetzt (wobei gegebenenfalls diese Umsetzung auch über Display und Kamera der für die Datenkopplung verwendeten Geräte erfolgen kann),
  • - und/oder es wird über die Schnittstelle des Endgerätes (Handy's, etc.) über die ansonsten die Datenkopplung zur Bildung der genannten Datenschleife DS vorgenommen wird (z.B. auf Tastendruck am Handy oder über die Kodierung eines über die Datenkopplung erhaltenen Initialisierungskodes), zunächst die Telefonnummer des Handy's über die Koppelung (z.B. über das Mikrofon des Client- Rechners) dem Server übersendet, der nach Übersendung der Rufnummer das Handy anwählt, damit der Benutzer das akustisch übermittelte KODE Signal des Servers entgegen nehmen und die eigentliche Datenschleife DS über die Koppelung bilden kann, wobei gegebenfalls das Verfahren vom Server nach Ablauf einer Zeit abgebrochen wird, wenn der Server den Kode KODE nach einer bestimmten Zeit nicht erhält.

8. Method according to one of the features 1 to 7 , in particular,

1. a) that the coupling on the client side, or data loop DS, is formed directly via corresponding interfaces of the respective terminals (acoustically, infrared or optically via sensor or camera, ditto screen, or via blue tooth or HF; galvanic, inductive, capacitive, etc., cf. 2a . 2 B) .
2. b) and / or that in this coupling, or data loop DS a still existing self-sufficient third-party device ( 300 in 3 ) is provided, via the use of appropriate interfaces (acoustic, infrared or optical sensor or camera, dito screen, or via blue tooth or RF or galvanic, inductive, capacitive, etc.,) to the terminals the data coupling ( to form DS) (possibly with further data manipulation via this third-party device),

wherein this data coupling in the data loop DS produced directly between the terminals or optionally via the still existing stand-alone third-party device and the terminals comprises the following options:

• - the data coupling (to form the data loop DS),
• - and / or, where appropriate, further data entry and / or data output,
• - and / or, where appropriate, an encryption (modification) of the server-transmitted code (KODE) on the client side is made,
  • possibly including in the encryption, data entered and / or output via the terminals of the client ( 7 ) and corresponding encryption parameters are exchanged between the server and the terminals,
  • - and / or a digital signature is included in the encryption of said code (KODE),
  • - and / or an SMS converter in the terminal or one of the terminals used for the data link DS (eg mobile phone) is provided which a received SMS in the relevant interface signal for the production of said coupling or transmission of the SMS sent with a code (CODE ) (where appropriate, this implementation can also be done on display and camera of the devices used for data coupling),
  • - And / or it is on the interface of the terminal (mobile phone, etc.) via the otherwise the data link to form the said data loop DS is made (eg, at the touch of a button on the phone or via the coding of a received via the data link initialization code), first the Phone number of the mobile phone over the coupling (eg via the microphone of the client computer) sent to the server, which dials the phone after sending the phone number, so that the user accept the acoustically transmitted KODE signal from the server and form the actual data loop DS via the coupling if necessary, the process is terminated by the server after the expiration of a time if the server does not receive the code KODE after a certain time.

1. a) daß die Messung der Laufzeit mit einer im Datenempfänger (E) vorgesehenen Zeitmeßeinrichtung, bzw. Uhr erfolgt, bezogen auf einen dem Datenempfänger (E) bekannten Zeitpunkt, in welchen das Meßsignal vom Datensender (S) unter Verwendung einer im Datensender (S) gleichfalls vorhandenen (bzw. dem Datensender zugehörigen) Uhr abgesendet wird, wobei beide Uhren (des Datenempfängers E und des Datensenders S) in ihrer relativen Gang Genauigkeit synchronisiert sind (z.B. durch nachgezogenen Quarz über eine Funkuhr gemessen, etc.) und in näherer Weiterbildung zur Durchführung des Verfahrens (vgl. 6b), die Uhr des Datensenders (S) durch ein vom Datenempfänger (E) über den bidirektionalen Datenweg der Koppelstrecke (bzw. des Koppelweges) an den Datensender (S) ausgesendetes Setzsignal übereinstimmend mit der Uhr des Datenempfängers (E) gesetzt wird, wobei, bedingt durch die Laufzeit der Koppelstrecke (bzw. des Koppelweges) die Uhr des Datenempfängers (E) um diese Laufzeit dann gegenüber der Uhr des Datensenders (S) vorgeht und daß über eine Protokollvereinbarung im Datensender (S) sowie im Datenempfänger (E) ein Zeitpunkt vereinbart wird, zu dem der Datensender (S) an den Datenempfänger (E) ein Meßsignal (oder Data) absendet, dessen Zeitpunkt des Eintreffens beim Datenempfänger (E) im Datenempfänger (E) bezogen auf die zuvor durch Protokoll vereinbarte Absendezeit des Datensenders (S) als Laufzeit für den Hin- und Rückweg der Daten über die Koppelstrecke (bzw. des Koppelweges) gemessen wird,
2. b) oder daß die Messung der Laufzeit mit einer im Datensender (S) vorgesehenen Zeitmeßeinrichtung erfolgt, bezogen auf ein Quittungssignal, welches der Datenempfänger (E) bei Erhalt des Signals dem Datensender (S) übersendet,

wobei in erweiterter Option zur Durchführung des Verfahrens,
der Datenempfänger (E) dem Datensender (S) bei Eintreffen der Daten ein Quittungssignal über die Koppelstrecke (bzw. über den Koppelweg) sendet, durch dessen im Datensender (S) vorgenommene Zeitmessung, in Bezug auf das Quittungssignal die Laufzeit für den Hin- und Rückweg der Daten über die Koppelstrecke (bzw. des Koppelweges) gemessen wird.9. Method by feature 5 Feature a, characterized in that the following two options (a or b) are used, said data receiver (E) and data transmitter (S) being located in the respective terminals of the data networks via which the data loop DS at Client (user) is produced in each case, and optionally (option) also bidirectional (in changing data direction) are operated.

1. a) that the measurement of the transit time with a provided in the data receiver (E) Zeitmeßeinrichtung, or clock, based on a data receiver (E) known time in which the measurement signal from the data transmitter (S) using a data transmitter in the (S) also present (or the data transmitter associated) clock is sent, both clocks (the data receiver E and the data transmitter S) are synchronized in their relative gear accuracy (eg measured by trailing quartz on a radio clock, etc.) and in more detail to Implementation of the process (cf. 6b) in that the clock of the data transmitter (S) is set by a setting signal emitted by the data receiver (E) via the bidirectional data path of the coupling path (or of the coupling path) to the data transmitter (S) in accordance with the clock of the data receiver (E) by the duration of the coupling path (or the Koppelweges) the clock of the data receiver (E) then at this time against the clock of the data transmitter (S) and that via a protocol agreement in the data transmitter (S) and in the data receiver (E) agreed a date is sent to the data transmitter (S) to the data receiver (E) a measurement signal (or data) whose time of arrival at the data receiver (E) in the data receiver (E) based on the previously agreed by protocol dispatch time of the data transmitter (S) measured as transit time for the round trip of the data via the coupling path (or the coupling path),
2. b) or that the measuring of the transit time takes place with a time measuring device provided in the data transmitter (S), with reference to an acknowledgment signal which the data receiver (E) sends to the data transmitter (S) on receipt of the signal,

where in extended option to carry out the process,
the data receiver (E) the data transmitter (S) sends an acknowledgment signal over the coupling path (or via the coupling path), by its in the data transmitter (S) time measurement, with respect to the acknowledgment signal, the runtime for the out and Return path of the data over the coupling path (or the coupling path) is measured.

• - einen vom Server über die Telefonleitung (des genannten zweiten Datennetzes) zum betreffenden Telefonanschluß, bzw. zur Handyverbindung (T) des Client (bzw. des Benutzers) ausgesendeten Kode (KODE) über die beim Client vorgenommene Kopplung (DS) zum Endgerät (CL) des ersten Datennetzes (bzw. hier des Internet Datenanschlusses) an den Server (über das erste Datennetz) wieder zurück zu senden (2b),

oder

• - einen vom Server über das erste Datennetz (bzw. hier das Internet) zum betreffenden Endgerät (CL) des Client (Benutzers) ausgesendeten Kode (KODE) über die beim Client vorgenommene Kopplung (DS) zum Telefonanschluß, bzw. zur Handverbindung (T) des Client an den Server über die Telefonleitung (des genannten zweiten Datennetzes) wieder zurück zu senden (2a),

und daß die genannte Prüfung (1=2 ?) des KODES im Server vorgenommen wird (1a),
wobei

1. a) ein korrektes Prüfungsergebnis der Server über die sichere Telefonverbindung, bzw. Handyverbindung T des genannten zweiten Datennetzes (vom Server an den Client) durch eine positive Quittung, bzw. Nachricht, bzw. an den Benutzer des Client, meldet, wodurch dem Client angezeigt wird, daß es sich um den richtigen Zugang des das erste Datennetz betreffenden Anschlusses (bzw. hier um den richtigen Server im Internet) handelt, wobei der Benutzer die Telefonverbindung des Servers (über TELCOM 2a, 2b) zuvor anzuwählen hat, um das Aussenden des Prüf KODES durch Anwahl einer den Server betreffenden Telefonnummer (über die Telefonverbindung) zu initialisieren, wodurch die unsichere Verbindung des ersten Datennetzes (hier die Internetverbindung zwischen Client und Server) über die sichere Verbindung des genannten zweiten Datennetzes (hier die Telefonverbindung, bzw. Handyverbindung T) getestet ist;
2. b) ein korrektes Prüfungsergebnis dem Server unmittelbar anzeigt, daß der durch den Telefonanschluß, bzw. durch das Handy T des Benutzers über die sichere Verbindung des genannten zweiten Datennetzes identifizierte Client, - gegebenenfalls noch weiterhin identifiziert mit über den Telefonanschluß, bzw. in die Handyverbindung (unmittelbar 1a, 1b oder auch über ein weiteres Gerät 300, 3) in die Kopplung der Datenschleife DS zu den zwischen Server und Client noch weiterhin eingegebene Daten (wie eine digitale Unterschrift, etc.), dem richtigen Teilnehmer entspricht, wobei der Server über einen vorherigen Anruf oder Rückruf (über TELCOM 2a, 2b) des Telefonanschlusses T, bzw. des Handy's des Benutzers und/oder über Identifizierungsdaten der Chipkarte des Benutzers (SIM Karte des Handy's, bzw. durch spezifische Einrichtungen des Vermittlungssystems, wie beim Anruf mitgegebener Telefonnummer, etc.) den richtigen Benutzer, bzw. Client identifiziert.

10. Method according to one of the features 1 to 9 in that in particular that said first data network relates to an Internet access, or a corresponding client computer, and said second data network is used as a security network, which relates to a telephone network or a mobile phone network and on the client side (user side) the first data network (the Internet access) and the second data network (the telephone connection) is closed via said coupling to form a serial data loop DS

• a code (KODE) sent by the server via the telephone line (of said second data network) to the relevant telephone connection or to the mobile telephone connection (T) of the client (or the user) via the coupling (DS) to the terminal (CL ) of the first data network (or here of the Internet data connection) to the server (via the first data network) to send back ( 2 B) .

or

• a code (KODE) sent by the server via the first data network (or in this case the Internet) to the relevant terminal (CL) of the client (user) via the coupling (DS) made at the client to the telephone connection or to the hand connection (T) the client to the server via the telephone line (of said second data network) to send back ( 2a) .

and that said check (1 = 2?) of the CODE is made in the server ( 1a) .
in which

1. a) a correct test result of the server over the secure telephone connection, or mobile connection T of the said second data network (from the server to the client) by a positive acknowledgment, or message, or to the user of the client, indicating which the client displayed is that it is the correct access of the first data network related connection (or here to the right server on the Internet), wherein the user the telephone connection of the server (via TELCOM 2a . 2 B) has to dial in order to initiate the transmission of the check code by dialing a telephone number concerning the server (via the telephone connection), whereby the insecure connection of the first data network (here the internet connection between client and server) via the secure connection of said second data network ( here the telephone connection, or mobile connection T) is tested;
2. b) a correct test result directly indicates to the server that the client identified by the telephone connection, or by the user's mobile T via the secure connection of said second data network, optionally still identifies with the telephone connection or the mobile telephone connection (immediate 1a . 1b or over another device 300 . 3 ) into the coupling of the data loop DS to the data still being entered between the server and the client (such as a digital signature, etc.) corresponds to the correct subscriber, the server being informed by a previous call or callback (via TELCOM 2a . 2 B) the telephone connection T, or the user's mobile phone and / or identification data of the smart card of the user (SIM card of the mobile phone, or by specific facilities of the switching system, such as when calling phone number, etc.) the right user, or identified client ,

11. Method by feature 10 , in particular by the fact that when logging into the relevant (by the said assignment to a telephone number checked) data area (in a corresponding session) to be used in a unique code as access protection by the user, possibly also with several in the number (eg three ) and / or in the time period (for the input) admitted attempts for the entrance, and in the server in a usual procedure on its correctness is examined, and that with a positive examination result (= correct, or true) this code by the at replaced this session associated phone number for the access detection of subsequent sessions.

12.Method according to one of the features 1 to 11 in that, in the case of a checking result of the code (KODE) identified as correct, of the checking of the dialing address (or telephone number or equivalent connection data) of the data network involved in the data loop DS which is used as the backup network (second network), an address or assignment rule is derived (or the selection address is used as such) from the dialing address (or telephone number or equivalent connection data) in order to enable the input and / or output and / or processing of data (ditto data records, etc .) in databases, or processes (server processes), which may also affect different databases, or servers, assign (or link) or verify this assignment (or link).

• - für eine Prüfung durch unmittelbaren Kodevergleich, der paarweise Vergleich unmittelbar über den Kode vorgenommen wird (KODE als Funktion der von SO1, S02,....S0n und SI1, SI2, ....Sin jeweils aufgefundenen Vergleichspaare), bzw.
• - für eine Prüfung durch Vergleich des vom Server ausgesendeten Kodes mit dem zu erwartenden Ergebnis eines in der Datenschleife DS veränderten Kodes, (z.B. bei einer Teilnehmer abhängigen Verschlüsselung), der paarweise Vergleich unter Verwendung eines jeweils dem eigentlichen Prüfkode (KODE) Kode hinzugesetzten, über die Datenschleife DS nicht veränderten Kodes vorgenommen ist, um im Server die jeweils zugehörigen Kodepaare einer Datenschleife DS zu bestimmen, und für die jeweils zugehörigen Kodepaare die Entschlüsselung des KODE's, bzw. die Nachprüfung der Zugehörigkeit unter Verwendung des entschlüsselten KODE's vornehmen zu können.

13. Method according to one of the features 1 to 12 , in particular by the fact that the code signals currently transmitted or retrieved by the server (which are in each case all that are not yet fully taken into account in this comparison) SO1 . S02 .... s0n with the via the (serial) data loop DS received back SI1 . SI2 , .... SIn are compared (in a pairwise comparison) to each receive those pairs which each belong to a subscriber forming the data loop DS concerned by said coupling, wherein

• for a direct code comparison test, pairwise comparison is made directly over the code (CODE as a function of SO1 . S02 .... s0n and SI1 . SI2 , .... each Sin found pairs), or
• for a check by comparison of the code sent by the server with the expected result of a code changed in the data loop DS (eg subscriber-dependent encryption), the pairwise comparison using a respective code (KODE) code added the data loop DS is not changed codes to determine the respective associated code pairs of a data loop DS in the server, and to be able to decrypt the KODE's, or verify the affiliation using the decrypted KODE's for each associated code pairs.

14. Method according to one of the features 1 to 13 , in particular in that the application relates to a cashless payment system, wherein the code (KODE) data added to the client the amount of money, possibly the digital signature and other common in payment data (purpose, payee, payer, date, etc.).

15. Method by feature 14 , for use with mobile phones, in particular that the amount to be paid by the payer and the payee with a corresponding note (whether paying z or payee e), possibly with the purpose of sending via SMS to the server in question, then both cell phones ( the payer and the payee), optionally retransmits the amount and direction of transfer (+/-) (for the purpose of confirmation) and transmits the code (KODE) via the data loop established between the mobiles for the purpose of carrying out the transfer CODE is packed accordingly in the further data (if necessary also encoded).

16. Method by feature 14 or 15 , for use with mobile phones, in particular, that for each unique submission of the SMS in question to the relevant phone number of the server (each for the payer and the payee), or for valid recognition of this SMS by the server, each a special pin number must be entered, with the cell phone in standby status for issuing an SMS to trigger payment transactions, which when entering the pin number, a time is started within which the SMS must be sent to trigger payment transactions, otherwise the standby status for settling the SMS is reset at the end of that time (and therefore the PIN number would have to be reentered to allow a payment transfer).

17. Method according to one of the features 12 to 16 in that, in particular, in connection with said technical equipment and conventional data processing, the data input of a value takes place (eg charging a credit for a monetary amount), said data input during said coupling (the serial data loop DS) being in the log, in which said code KODE is transmitted (via the data loop), using one of the following options:

OPTION 1:

Using the aforementioned serial data loop DS for logging in, or during the data transfer to carry out an ON LINE transfer (as data entry of a monetary amount) is from a bank account to another bank account, hereinafter referred to as a coupon voucher account, the charge for certain amount with further data transfer of the telephone number # used in the serial data loop DS (corresponding to feature 9 Feature b), whereby the amount available on the voucher account (with the note of the purpose of payment specifying the telephone number # used in the serial data loop #) is requested by an external server (independent of the bank server of the voucher account) with respect to updating;

OPTION 2:

1. a) der genannte, als externer Server bezeichnete Server, zum Zwecke einer (späteren) Bezahlung (über das genannten Gutscheinkonto) von den Benutzern betreffender Endgeräte, wie Telefon oder Handy's, etc. (Handy des Zahlenden als Gutscheininhaber und Handy des einen Betrag oder Teilbetrag des Gutscheins Einlösenden) jeweils angewählt wird, um die unter Einbeziehung des über die Kopplung DS der Endgeräte übertragenen Prüfkodes KODE den der Bezahlung entsprechenden Datentransfer (als Verringerung des dem Gutscheinkonto) entsprechenden Betrages vorzunehmen, oder
2. b) der genannte, als externer Server bezeichnete Server, zum Zwecke einer (späteren) Bezahlung von diesem Gutscheinkonto von dem Benutzer betreffenden Endgerätes, wie Telefon oder Handy, etc. (Handy des Zahlenden als Gutscheininhaber) angewählt wird, um die unter Einbeziehung des über die Kopplung DS des Endgerätes und eines weiteren an das Internet angeschlossenen Endgerätes übertragenen Prüfkodes KODE den der Bezahlung entsprechenden Datentransfer (als Verringerung des dem Gutscheinkonto) entsprechenden Betrages vorzunehmen.

Using an example (currently only available once) secret number, such as is used for charging mobile phones, the PIN is entered via a telephone connection (via landline or mobile phone) in the external server (regardless of a bank server), which within the Lebendenauer is assigned to a particular amount paid, according to the communication technology used (chip card, callback, etc.), the server determines the phone number used for this process the user to assign the entered Geheinzahl using this phone # # (possibly even more data) and the said PIN is obtained in cash or during an ONLINE transfer on the Internet;
in which

1. a) said, referred to as an external server server, for the purpose of (later) payment (via said voucher account) by the user of the relevant terminals, such as telephone or mobile phone, etc. (cell phone of the payer as a voucher holder and mobile phone of an amount or partial amount the voucher redeeming) is selected in each case to make the corresponding with the payment via the coupling DS of the terminals transmitted test codes KODE the payment corresponding to the payment (as a reduction of the voucher account), or
2. b) said, referred to as an external server server, for the purpose of (later) payment of this coupon account of the user-related terminal, such as phone or mobile phone, etc. (cell phone of the payer as voucher holder) is selected to include the over the coupling DS of the terminal and a further connected to the Internet terminal transmitted test codes KODE make the payment corresponding to the payment (as a reduction of the voucher account) corresponding amount.

• - bei Verwendung einer serieller Datenschleife DS, der vom Server gesendete Kode (KODE) über den Lautsprecher des Endgerätes des ersten Netzes (z.B. Lautsprecher eines Rechners, oder Hörer eines Handy's CL) gesendet wird und über das Mikrofon des Endgerätes des zweiten Netzes, bzw. Sicherungsnetzes (z.B. Mikrofon eines Festnetztelefons oder Handy's T, etc.) dem Server zurück übertragen wird (2a), oder der vom Server gesendete Kode (KODE) über den Lautsprecher des Endgerätes des zweiten Netzes bzw. Sicherungsnetzes (z.B. Hörer eines Festnetztelefons oder Handy's T, etc.) gesendet wird und über das Mikrofon des Endgerätes des ersten Netzes (z.B. Mikrofon eines Rechners, oder eines Handy's CL) dem Server zurück übertragen wird (2b), bzw.,
• - bei (gegebenenfalls auch zusätzlicher) Verwendung einer parallelen Datenschleife DS, der vom Server gesendete Kode (KODE) über eine IT-Schnittstelle des ersten Netzes an das Prüfgerät beim Client (zum Prüfen des Kodes) gesendet wird und über den Hörer des das zweite Netzes bzw. Sicherungsnetzes betreffenden Endgerätes (z.B. Handy) an das Prüfgerät (zum Prüfen des Kodes) beim Client gesendet wird,

wobei (jeweils) die Kodierung/Dekodierung des Audiosignals zur Erkennung des Kodes über eine Frequenzfilterung (z.B. FFT) in dekodierbare Zeichenwerte (z.B. quantisierte Werte von Frequenzen, Amplituden, Tönen) umgesetzt wird.18. Method according to one of the features 1 to 17 , in particular in that the code sent by the server and checked in the server when it is retrieved, 1a (in the case of serial data loop DS) or, if appropriate, the code sent by the server and tested by the client, 1b (in parallel data loop DS) relates to an audio signal whose characteristic frequencies are used as coding (eg, for example, by a melody, or a voice announcement, etc.), where

• - When using a serial data loop DS, the server sent code (KODE) via the speaker of the terminal of the first network (eg speakers of a computer, or handset of a cell phone CL) is sent and the microphone of the terminal of the second network, or Backup network (eg microphone of a landline phone or mobile phone T, etc.) is transmitted back to the server ( 2a) or the code (KODE) sent by the server is sent via the loudspeaker of the terminal of the second network or security network (eg handset of a landline telephone or mobile T, etc.) and via the microphone of the terminal of the first network (eg microphone of a computer, or a cell phone's CL) is transmitted back to the server ( 2 B) , respectively.,
• - When (possibly also additional) use of a parallel data loop DS, the code sent by the server (KODE) via an IT interface of the first network to the tester at the client (to check the code) is sent and the handset of the second network or security network-related terminal (eg mobile phone) is sent to the tester (for checking the code) at the client,

wherein (in each case) the coding / decoding of the audio signal for the recognition of the code via a frequency filtering (eg FFT) is converted into decodable character values (eg quantized values of frequencies, amplitudes, tones).

1. a) daß bei der Kodierung/Dekodierung des Audiosignals, die Zeitabschnitte der Zeitspannen, die zwischen den dekodierten Zeichenwerten jeweils liegen, mit einbezogen sind (um das Audiosignal nach einer vorgegebenen Musterzeichenkette solcher Zeichenwerte zu dekodieren),
2. b) und/oder daß vor dem Vergleich, bzw. einem jeweiligen Vergleichsschritt, zum Zwecke der Erkennung der Musterzeichenkette, in der zu prüfenden Zeichenkette eine Vorprüfung stattfindet, ob das zur Prüfung der zu überprüfenden Zeichenkette jeweils aktuell vorgelegte, bzw. verwendete Vergleichszeichen in der Musterzeichenkette überhaupt, d.h. unabhängig von der Zeichenposition, enthalten ist, und daß wenn dies nicht der Fall ist, das betreffende, der zu prüfenden Zeichenkette entsprechende Zeichen in die Prüfung nicht mit einbezogen wird,
3. c) und/oder daß eine Prüfung der Bandbreite (der Leitungsqualität) des für die Übertragung des Kodes verwendeten weiteren Netzes (z.B. Telefonnetzes, Handy Netzes) durch den Server vorgenommen ist, der bei Feststellung einer wesentlichen Verschlechterung dies als Manipulationsversuch (durch Verwendung einer weiteren zwischen geschalteten Übertragung) interpretiert, wobei die Überprüfung der Bandbreite durch ein vom Server gesendetes und in genannter Weise (wie das Kodesignal) zurück erhaltenes Audiosignal erfolgt, welches zu unterschiedlichen Zeitabschnitten einen unterschiedlichen Oberwellenanteil (entsprechend einer unterschiedlich sich nach der Zeit ändernden BeMerkmalung, bzw. Erfordernis der Bandbreite für die Übertragung des Audiosignals) aufweist und daß durch Verhältnisanalyse der Oberwellenanteile des Audiosignals die Bandbreite zur Beurteilung ob ein Manipulationsversuch oder nicht, im Server gemessen, bzw. bewertet wird und/oder daß neben der Kodierung zur Erkennung der Standortzugehörigkeit des Endgerätes des ersten Netzes (z.B. IT- Rechner) und dem Endgerät des zweiten Netzes (z.B. einer sicheren Telefonverbindung) noch weitere Kodes simultan aus dem zurück erhaltenen Audiosignal im Server dekodiert werden, wobei diese weiteren Kodes als Steuerzeichen verwendet sind, um das Audiosignal in zwei Bereiche aufzuteilen und dem Server anzuzeigen:
   • - einen oder mehrere Bereiche, der die Bandbreitenmessung betrifft (zur Feststellung, ob die Datenschleife DS gegebenenfalls über eine Nachrichtenverbindung geschaltet ist, dito ob gegebenenfalls das für die Datenschleife verwendete Endgerät für den besonderen Zweck zugelassen ist),
   • - und einen Bereich, welcher die Übertragung des Kodes zur Prüfung der genannten Standortzugehörigkeit betrifft, wobei gegebenenfalls durch die genannte Oberwellenmanipulation (als Funktion der Zeit, gegebenenfalls auch entsprechend einer seriellen Kodierung) des Audiosignals (erzeugt durch den Server, gefiltert durch das Endgerät) beim Rückerhalt des Audiosignals durch den Server geprüft wird, ob ein für die Kopplung der Datenschleife DS verwendetes Endgerät für die Bildung der Datenschleife autorisiert ist, indem die durch den Server erzeugten Oberwellenanteile durch das betreffende Endgerät entsprechend der genannten Oberwellenmanipulation gefiltert sind, und diese Filterung (über die fehlenden Oberwellenanteile im Signal) durch den Server geprüft sind.

19. Procedure feature 18 in that in particular at least one of the following features is provided in the process:

1. a) that in the coding / decoding of the audio signal, the time periods of the time periods respectively lying between the decoded character values are included (to decode the audio signal according to a predetermined pattern string of such character values),
2. b) and / or that before the comparison, or a respective comparison step, for the purpose of recognizing the pattern string, in the string to be tested, a pre-examination takes place, whether that for testing the character string to be checked in each case currently submitted, or used comparison character in the pattern string at all, that is independent of the character position, is included, and that if this is not the case, the relevant character string to be examined not included in the test becomes,
3. c) and / or that a check of the bandwidth (the line quality) of the other network used for the transmission of the code (eg telephone network, mobile phone network) is made by the server, which upon detection of a significant deterioration as a manipulation attempt (by using another between switched transmission), wherein the checking of the bandwidth is effected by an audio signal sent back from the server and in the manner mentioned (like the code signal), which at different time intervals has a different harmonic content (corresponding to a different time-varying characteristic, resp. Requirement of bandwidth for the transmission of the audio signal) and that by ratio analysis of the harmonic components of the audio signal, the bandwidth for judging whether a manipulation attempt or not, measured in the server, and / or that in addition to the coding for Erken tion of the location affiliation of the terminal of the first network (eg IT computer) and the terminal of the second network (eg a secure telephone connection) even more codes are simultaneously decoded from the received audio signal in the server, these other codes are used as control characters to splitting the audio signal into two sections and displaying it to the server:
   • one or more areas relating to the bandwidth measurement (for determining whether the data loop DS is optionally connected via a communication link, that is, if so, if the terminal used for the data loop is permitted for the particular purpose),
   • - And an area which relates to the transmission of the code for checking said location affiliation, optionally by said harmonic manipulation (as a function of time, possibly also according to a serial coding) of the audio signal (generated by the server, filtered by the terminal) at Returning the audio signal is checked by the server, whether a used for the coupling of the data loop DS terminal for the formation of the data loop is authorized by the harmonic components generated by the server are filtered by the relevant terminal according to said harmonic manipulation, and this filtering (via the missing harmonic components in the signal) are checked by the server.

20. A method for use with a method of the preceding features, or in its own application, in particular by a chip inserted into a notary seal, which roll ( 15 . 16 . 17 . 18 ) can be used, and further integrated into the process for the use of a preferred application of the data loop DS, where appropriate (as an option) still a suitable interface device provided (see 17 ), which is designed as a stamp and can be placed on the chip seal to make the digital signature of a document, which is also available as a document (eg in a notary) for a layman verifiable.

1. a) bei welchem (zumindest beim Einloggen) unter Verwendung eines an ein weiteres Netz (z.B. über eine Telefonverbindung) angeschalteten Endgerätes mit dem der betreffende Server gleichfalls verbunden ist, ein vom Server gesendeter und zur Überprüfung zurückerhaltenen Kode über eine Ein- und/oder Ausgabeschnittstelle des Rechners sowie des genannten Endgerätes (des weiteren Netzes) übertragen wird,
2. b) die Verbindung dieses weiteren Netzes, bzw. dessen Endgerätes mit der Ein-Ausgabeschnittstelle des vernetzten Rechners als die Kodeprüfung betreffende Einheit (für die Standortzugehörigkeit von Rechner und Endgerät) angesehen wird,
3. c) und der vom Server gesendete Kode
   • c1) an den Rechner gesendet und über eine seiner Ausgabeschnittstellen (z.B. über seinem Bildschirm) dem Benutzer angezeigt und durch den Benutzer an die Eingabeschnittstelle des das weitere Netz betreffenden Endgerätes (z.B. über die Tastatur eines Telefons) wieder eingegeben und dem Server über dieses Netz wieder zurück gesendet wird, und/oder
   • c2) an das, das weitere Netz betreffende Endgerät gesendet (z.B. als Ansage über den Hörer eines Telefons) angezeigt und durch den Benutzer an die Eingabeschnittstelle (z.B. über Tastatur) des Rechners wieder eingegeben und dem Server wieder zurück gesendet wird.

dadurch besonders, daß der vom Server gesendete sowie bei Rückerhalt geprüfte Kode ein Audiosignal betrifft, dessen charakteristische Frequenzen als Kodierung verwendet sind, wodurch die Standortzugehörigkeit von Rechner (z.B. IT- Rechner) und dem Endgerät des weiteren Netzes (z.B. einer Telefonverbindung) dem Server angezeigt wird.21. Method according to one of the preceding features, or method for detecting the network connection of a computer networked with a server, for example a computer connected to the Internet via a provider,

1. a) in which (at least when logging in) using a connected to another network (eg via a telephone connection) terminal with the server in question is also connected to a server sent and returned for checking code via an input and / or output interface the computer and the said terminal (the other network) is transmitted,
2. b) the connection of this further network or its terminal to the input / output interface of the networked computer is regarded as the code checking unit (for the location of the computer and the terminal),
3. c) and the code sent by the server
   • c1) sent to the computer and displayed to the user via one of its output interfaces (eg via its screen) and reentered by the user at the input interface of the terminal related to the other network (eg via the keypad of a telephone) and the server via this network again is sent back, and or
   • c2) is sent to the terminal that concerns the further network (eg as an announcement via the handset of a telephone) and is reentered by the user at the input interface (eg via the keyboard) of the computer and sent back to the server.

especially in that the code sent by the server and checked for restoration relates to an audio signal whose characteristic frequencies are used as coding, whereby the location affiliation of computer (eg IT computer) and the terminal of the other network (eg a telephone connection) displayed to the server becomes.

1. a) an den Lautsprecher des Rechners gesendet wird und über das Mikrofon des das weitere Netz betreffenden Endgerätes (z.B. Handy, Telefon) wieder dem Server zurück übertragen wird, und/oder
2. b) an den Hörer des das weitere Netz betreffenden Endgerätes (z.B. Handy, Telefon) übertragen wird und über das Mikrofon des Rechners wieder dem Server zurück gesendet wird.

22. Method by feature 21 , in particular in that the code sent by the server

1. a) is sent to the speaker of the computer and via the microphone of the further network terminal (eg mobile phone, phone) is transmitted back to the server, and / or
2. b) is transmitted to the handset of the further network terminal (eg mobile phone, telephone) and is sent back to the server via the microphone of the computer.

23. Method by feature 21 or 22 in that the coding / decoding of the audio signal for recognizing the code is converted via an FFT into decodable character values (eg quantized values of frequencies, amplitudes, tones).

24. Method by feature 23 in that in the encoding / decoding of the audio signal, the time periods of the time periods respectively lying between the decoded character values are included (to decode the audio signal according to a predetermined pattern string of such character values).

25. Method according to one of the features 21 to 24 in that, prior to the comparison, or a respective comparison step, for the purpose of recognizing the pattern string, with a conventional recognition method for recognizing one or more pattern strings which is located at any position in a string to be checked in which a string to be checked is pre-checked, whether the character currently being used for checking the character string to be tested is contained in the pattern string at all (ie irrespective of the character position), and if this is not the case, the one to be tested String corresponding characters in the exam is not included.

26. Method according to one of the features 21 to 25 , In particular, that an examination of the bandwidth (the line quality) of the other network used for the transmission of the code (eg telephone network, mobile phone network) is made by the server, which upon detection of a significant deterioration as a manipulation attempt (by using another between switched transmission).

27. Method by feature 26 in that the checking of the bandwidth is performed by an audio signal sent back from the server and in the same way (like the code signal), which at different times has a different harmonic content (corresponding to a different time-varying bandwidth of the audio signal) and that by ratio analysis of the harmonic components of the audio signal, the bandwidth for judging whether a manipulation attempt or not is measured in the server.

• d) einen Bereich, der die Bandbreitenmessung betrifft,
• e) und einen Bereich, welcher die Übertragung des Kodes zur Prüfung der genannten Standortzugehörigkeit betrifft.

28. Method by feature 26 or 27 in that in addition to the coding of the recognition of the location affiliation of computer (eg IT computer) and the terminal of the other network (eg a telephone connection) even more codes are simultaneously decoded from the recovered audio signal in the server, these other codes are used as control characters to divide the audio signal into two sections and to indicate to the server:

• d) an area related to the bandwidth measurement,
• e) and an area related to the transmission of the code for the examination of said location affiliation.

29. Feature omitted.

30. Feature omitted

31. Method according to one of the preceding features, or method for detecting the interconnection of two or more database events, which relate to an input and / or output of data from not directly networked terminals using a method for detecting or establishing a network connection with a server networked computer, or terminal, in particular a mobile phone, in which the server emits a code which by temporarily coupling the not directly networked terminals (eg acoustically, or by infrared, or inductive or capacitive, etc.) from the server to one of the past outgoing coupled devices are sent and routed back to the server via the other terminal, whereby a data loop is formed over the respective terminals, to compare the transmitted code with the returned code an existing assignment of the database events or similar process verifying that the database events concerning an input and / or output of data can relate to the same database or different databases,
and / or a method for linking two server processes (which, however, may also run on the same server) with a temporarily made for coding telephone connection as a data loop via a mobile phone, via which one from the server to the phone and back to the server via a respective terminal (as an interface to the mobile phone) is passed and on the detection of the code, the phone number of the cell phone used in the data loop is checked,
in particular in that the assignment of said data events relating to an input and / or output of data, or of said server processes, takes place via the telephone number of the mobile telephone connection used for the production of said data loop relating to the terminals during the temporary coupling , And that for the purpose of this assignment, all currently sent by the server concerned and returned via said data loop code pairs are compared with each other, wherein a comparison pair of two signals each consisting of a sent and a data loop back on the received code signal, wherein the associated each corresponding comparison signals corresponding communication channels (Internet addresses and telephone numbers) are also recognized as belonging to each other.

32. Method by feature 31 in that in particular the association relates to an event relating to an input and / or output of data associated with the same database, by means of the data terminal loop (a temporary coupling) using the mobile phone used to form the data loop generated by the server and returned back from the code upon agreement of the code, a confirmation signal (corresponding to an acknowledgment signal) is generated and that the cell-related connection, or the telephone number under which the connection is made to form the data loop, as an access code for generating the confirmation signal (by the server) is used.

33. Method by feature 31 in that, in particular, in that the association relates to an event concerning an input and / or output of data associated with different databases, the data loop relating to the terminals (a temporary coupling) using the mobile phone used to form the data loop is replaced by that from Server sent and returned back code by assigning this code as a key for the data access of the different databases, the data of the databases relating to the key to a data set, or to a related data group are linked and upon agreement of the code, a confirmation signal (corresponding to an acknowledgment signal) is generated, and that the cell-related connection, or the telephone number under which the connection is made to form the data loop, used as a connection code for the linkage of the respective data of the different databases is used as the access code for generating the acknowledgment signal (by the server).

34. Method according to one of the features 31 to 33 in that in particular the method is used to pay for a payment purpose entered into the database via data entry, which is reported as being paid (formed by a temporary coupling) of the data loop (with the mobile) (corresponding to the generation of an acknowledgment signal) the server), wherein prior to formation of this data loop, the transfer for payment of the amount used via an on-line account, in which the user in this transfer via a telephone connection (data connection) of his mobile phone to the server using the as access code, or if necessary also as a connection code to the said data link used telephone number logs in and this phone number from the server in question, which makes the transfer, or a relevant server that continues to participate in this transfer, as a key for the assignment of this transfer to one is used by the data loop (with the mobile phone) later obtained or generated confirmation signal.

1. a) der Benutzer loggt sich über eine Internetverbindung in einen (WEB) Server ein, bzw. benutzt dessen WEB Seite (als vergleichbares Äquivalent), wobei der Benutzer die Telefonnummer seines Handy's dem Server über diese Internetverbindung übermittelt oder der Server diese Nummer bereits in einer Datenbank gespeichert hält,
2. b) der betreffende Server ruft den Benutzer über ein Handy an und sendet dabei den Datenkode, der über die vom Benutzer durch vorübergehende Koppelung herzustellende Datenschleife dem (WEB) Server zur Prüfung bzw. Erkennung zurück gesendet wird (z.B. über eine akustische Kopplung vom Handy zum Rechner mit der Internetverbindung, oder auch umgekehrt, oder durch eine Infrarot Verbindung, etc.), wobei bei Erkennung des zurück erhaltenen Kodes im Server, die Telefonnummer des Handy's als später über eine weitere Internetverbindung einzugebender Zuordnungsschlüssel abgespeichert wird,
3. c) der Benutzer überweist (oder hat bereits überwiesen) den verlangten Betrag (z.B. über sein On line Konto, etc.) um den bezahlten Zweck später über eine durch vorübergehende Koppelung mit dem Handy hergestellte Datenschleife als Zahlungsnachweis entgegen nehmen zu können bzw. das durch den Server zu erzeugende Bestätigungssignal veranlassen zu können, wobei der Bankserver unter Angabe des Zahlungszweckes an den (WEB) Server eine sofortige Meldung für den Zahlungseingang veranlaßt,
4. d) bei der späteren Bezahlung durch vorübergehende Koppelung mittels über das Handy des die Telefonnummer als Zuordnungsschlüssel aufweisenden Handys herzustellender Datenschleife, wird der vom (WEB) Server über die Datenschleife ausgesendete Kode als Zuordnungsschlüssel für die Zuordnung der bei der zur Erzeugung Bestätigungssignals diesem Vorgang zugeordneten Daten verwendet.

35. Method according to one of the features 31 to 34 in particular by the following method steps, the method being used for payment transactions in which, upon presentation of a code issued to prove a payment, the payment is acknowledged to generate a corresponding acknowledgment signal (by the server) (upon receipt a commodity, a ticket, or to open a slot machine, etc.).

1. a) the user logs on via an Internet connection in a (WEB) server, or uses the WEB page (as a comparable equivalent), the user transmits the phone number of his mobile phone to the server via this Internet connection or the server already this number in one Database is stored,
2. b) the server in question calls the user via a mobile phone and thereby sends the data code, which is sent back to the (WEB) server for checking or recognition via the data loop to be produced by the user (eg via an acoustic coupling from the mobile phone to the mobile phone) Computer with the Internet connection, or vice versa, or by an infrared connection, etc.), wherein upon detection of the returned code in the server, the phone number of the mobile phone as later to be entered via another Internet connection assignment key,
3. c) the user transfers (or has already transferred) the requested amount (eg via his on line account, etc.) to be able to receive the paid purpose later via a data loop produced by temporary coupling with the mobile phone as a proof of payment or by to cause the server to be generated confirmation signal, the bank server causes stating the purpose of payment to the (WEB) server an immediate message for the receipt of payment,
4. d) in the later payment by temporary coupling by means of the mobile phone of the telephone number as assignment key having produced cell data loop, the (WEB) server via the data loop emitted code as a mapping key for the assignment of the data associated with the generation of confirmation signal this process used.

36. Method by feature 35 in that in the process step (c) access to a bank server using an on-line account, this access is also made by the cell phone whose phone number (for establishing the connection) in the method steps (a) with (b ) and (d), wherein the (possibly also by recall) from the bank server securely recognized phone number for the assignment of the payment purpose specified in the WEB server is used in the implementation of the transfer.

1. a) der Benutzer loggt sich über einen Telefonanruf eines Handy's in einen Bank Server zum Zwecke der Benutzung eines On-line Kontos ein, wobei die Telefonnummer des Handy's, bzw. der dabei benutzten Telefonverbindung vom Bankserver erkannt (und gegebenenfalls durch Rückruf geprüft wird) und der Benutzer einen in sein Handy eingegebenen Betrag auf ein zu dieser Überweisung im Handy als fest kodierte Bankverbindung eines einem Dienstleistungsserver (als intermediärer Begünstigter) zugehörigen Zwischenkontos von seinem Konto überweist, wobei der Bankserver die erkannte Telefonnummer des Handy's als Verwendungszweck einsetzt,
2. b) der Bankserver übermittelt dem Dienstleistungsserver die Telefonnummer der im Schritt (a) vorgenommene Überweisung mit den zugeordneten Daten, welche neben optionalen weiteren Angaben (Datum, Uhrzeit, etc.) die bei der Überweisung erkannte, bzw. geprüfte Telefonnummer des Handy's und (als weitere Option) den Betrag enthält, wobei die Telefonnummer des Handy's für das in nachfolgendem Schritt (c) zu erzeugende Bestätigungssignal den Schlüssel für die spätere Zuordnung (der weiteren Daten) des vom Benutzer (als Bezahlender) auf das Zwischenkonto überwiesenen Betrages zu dem vom Zwischenkonto auf das Konto des eigentlichen Begünstigten (bzw. Zahlungsempfängers) weiter zu leitenden Betrages bildet,
3. c) die Erzeugung des genannten Bestätigungssignals (welches der Bezahlung bei im Dienstleistungsserver erkanntem Kodesignal entspricht) erfolgt über einen Anruf des Dienstleistungsservers über das (zur Bezahlung verwendete) Handy durch den Benutzer bei Bildung der genannten durch das Handy vorzunehmende Datenschleife über die genannte vorübergehende Koppelung, bei der das vom Dienstleistungsserver ausgesendete Kodesignal über das dem eigentlichen (tatsächlichen) Zahlungsempfänger (bzw. Begünstigten) zugeordnete Endgerät dem Server zur Prüfung und Zuordnung zurück gesendet wird, und durch das Kodesignal über die Zuordnung der vom Bankserver erhaltenen Telefonnummer und der für die Datenschleife verwendeten Telefonnummer des Handy's (bzw. der Verbindung) die Zuordnung der am Zwischenkonto (des Dienstleistungsservers) eingegangenen Überweisung des Auftraggebers (Handy Benutzers) und der vom Zwischenkonto auf das Konto des eigentlichen Begünstigten (durch eine On line Konto Roboterfunktion des Dienstleistungsservers) vorzunehmenden Weiterleitung (Überweisung) mit den sich jeweils ergänzenden Daten (von Bankserver und Dienstleistungsserver) hergestellt wird, wobei der Dienstleistungsserver die dem Begünstigten zugeordneten Daten seiner Bankverbindung (und seiner Adresse, etc.) über jenen Zugriff auf den Dienstleistungsserver erhält, wie er bei der bei Bildung der genannten durch das Handy vorgenommenen Datenschleife der Vernetzung des hiefür verwendeten Endgerätes entspricht.

37. Method according to one of the features 31 to 34 , in particular by the following method steps:

1. a) the user logs on a phone call a mobile phone in a bank server for the purpose of using an on-line account, the phone number of the phone, or thereby used telephone connection detected by the bank server (and possibly checked by callback) and the user transfers an amount entered into his mobile phone to a bank account of his / her account that is permanently coded as bank transfer of an intermediary account belonging to a service server (as an intermediate beneficiary), the bank server using the recognized telephone number of the mobile as the intended use,
2. b) the bank server transmits to the service server the telephone number of the transfer made in step (a) with the associated data, which in addition to optional further information (date, time, etc.) recognized during the transfer, or checked phone number of the mobile phone and (as Another option) contains the amount, wherein the phone number of the mobile phone for the in step (c) to be generated confirmation signal the key for later assignment (the other data) of the user (as a payer) on the intermediate account transferred amount to that of the intermediate account into the account of the actual beneficiary (or creditor)
3. c) the generation of the said acknowledgment signal (which corresponds to the payment in the service server recognized code signal) via a call of the service server on the (used for payment) mobile phone by the user in formation of said to be made by the mobile phone data loop on said temporary coupling, in which the code signal sent by the service server is sent back to the server for checking and assignment via the terminal assigned to the actual (actual) payee (or beneficiary), and by the code signal on the assignment of the telephone number received from the bank server and the phone number used for the data loop of the mobile phone (or the connection), the assignment of the transfer of the principal (mobile user) received at the intermediate account (the service server) and the intermediate account on the Account of the actual beneficiary (by an on - line account robot function of the service server) to be made forwarding (transfer) with each complementary data (from bank server and service server) is established, the service server assigned to the beneficiary data of his bank account (and his address, etc .) on the access to the service server receives, as it corresponds to the case of the formation of the above-mentioned by the mobile phone data loop networking of the device used for this purpose.

38. Method according to one of the features 31 to 37 in that in particular as a terminal networked with the server via which the acknowledgment signal for enabling a transfer corresponding to the payment (a good, a ticket, an access, etc.) is received by the server and which for the purpose of forming said data loop under Use of the mobile phone used for identification (via the telephone number) is a cash register or is a computer used as a cash register, this terminal with the confirmation signal generating server is correspondingly networked (and the confirmation signal displayed as a receipt for the payment carried out, or is integrated, for example, to release a receipt, etc.).

• - zur Ausgabe einer Ware (z.B. Zigaretten, etc.),
• - zur Ausgabe von Tickets (z.B. von Rolle gedruckten Eintrittskarten,
• - zur Freischaltung einer Zugangskontrolle (z.B. Drehkreuz eines Skiliftes, etc.).

ist, wobei dieses Endgerät mit dem das Bestätigungssignal erzeugenden Server entsprechend vernetzt ist (und das Bestätigungssignal als Quittung für die erfolgte Bezahlung angezeigt, bzw. eingebunden ist, zur Freigabe der Ausgabe bzw. Freischaltung des Zuganges, etc.). 39. Method according to one of the features 31 to 37 in that in particular as a terminal networked with the server via which the acknowledgment signal for enabling a transfer corresponding to the payment (a good, a ticket, an access, etc.) is received by the server and which for the purpose of forming said data loop under Use of the mobile phone used for identification (via the telephone number) is a vending machine

• - to issue a good (eg cigarettes, etc.),
• - for the issue of tickets (eg from roll-printed tickets,
• - To activate an access control (eg turnstile of a ski lift, etc.).

is, this terminal with the confirmation signal generating server is correspondingly networked (and the confirmation signal is displayed as a receipt for the payment carried out, to enable the output or activation of the access, etc.).

1. a) Mit der Eingabe des pin Kodes wird das Gerät in einen Status geschaltet, der ausschließlich die Eingabe eines weiteren (kürzeren) vom Anwender (nach Entriegelung) frei definierbaren pin Kodes zuläßt,
2. b) Wird anstelle der Eingabe dieses weiteren (kürzeren) pin Kodes eine andere Funktion des Handy's benutzt oder ein falscher pin Kode (dieses weiteren Kodes) eingegeben, dann schaltet das Handy sich ab und die durch den pin Kode geschützte Funktion ist nur durch den vorher eingegebenen (längeren) pin Kode erreichbar,
3. c) durch Eingabe des weiteren kürzeren pin Kodes wird die Übertragung des Überweisungsauftrages zum Bankserver (z.B. auf das Zwischenkonto) ausgelöst, wobei der zu überweisende Betrag vorher einzugeben ist.

40. Method by feature 37 , in particular, that for the implementation of method step a, the input of a PIN code or a comparable code (fingerprint, speech analysis, etc.) is required to log into the on line account for the purpose of a bank transfer, or methods in own Application for entering a PIN code into a mobile phone, especially by the following features or method steps:

1. a) By entering the pin code, the device is switched to a status that only permits the input of a further (shorter) pin code, freely definable by the user (after unlocking),
2. b) If instead of entering this further (shorter) pin code another function of the mobile phone is used or a wrong pin code (of this further code) is entered, then the mobile phone shuts itself off and the function protected by the pin code is only by the previous one entered (longer) pin code,
3. c) by entering the further shorter pin codes, the transfer of the transfer order to the bank server (eg to the intermediate account) is triggered, whereby the amount to be transferred is to be entered in advance.

41. Method according to one of the features 37 to 40 in that, at the time of the definitive dispatch of an on - line transfer (eg after the entry of an amount) via the mobile phone, a time measurement is started within which the formation of said data loop (in order to loop through the code of the server and via the terminal of the Payee to transfer) must be made, otherwise the payment made (bank transfer) is reversed by the bank server, this time monitoring in the bank server (eg when sending the transfer to the bank server by the phone) is started and within this time by the service server a corresponding Acknowledgment signal of the mobile phone or its telephone number that the associated (from Service server sent) code is sent back to the server correctly, is delivered to the bank server, otherwise the bank server reverses the transfer (to the intermediate account).

42. Method by feature 35 in that method step d) permits a plurality of transfers made for different payment purposes, which are respectively linked to the telephone number of the mobile telephone by the said method and via the repeated execution of method step (d) the redemption of in step (a) with (b) the phone number of the mobile phone's respectively assigned payment purposes are marked in the server (to avoid repeated redemption).

43. Method according to one of the features 37 to 42 , In particular, that the user's terminal is also a cell phone, which has a corresponding connection (eg via the Internet) to said service server.

44. Method according to one of the features 37 to 42 in that, in particular, that said service server is running on the bank server, or possibly contained therein as a corresponding function.

• Durch die bevorzugte Benutzung der Datenschleife unter Verwendung eines Kodesignals werden zwei auf dem Client Rechner des Benutzers durch völlig unabhängig voneinander operierende Serverprozesse (die gegebenenfalls auch auf dem gleichen Server laufen können) gleichzeitig oder zu beliebigen Zeitpunkten dargestellte WEB-Seiten (oder vergleichbare Datenzugriffe, auch über Handy Netz, etc.) über die beim Aufbau der Datenschleife zu den betreffenden WEB-Seiten verwendete Telefonverbindung bzw. Telefonnummer miteinander verknüpft, so daß von einem Formular oder Datensatz einer WEB-Seite auf das Formular, bzw. Dateninhalt, bzw. Datensatz der anderen WEB-Seite durch die betreffenden Server jeweils wechselseitig zugegriffen werden kann.

45. Method according to one of the features 31 to 44 , or according to the generic term of the feature 31 , in particular that the following application is realized therewith:

• Due to the preferred use of the data loop using a code signal two on the client computer of the user by completely independently operating server processes (which may also run on the same server) simultaneously or at any time represented WEB pages (or comparable data access, also via mobile phone network, etc.) linked to each other via the telephone connection or telephone number used in the construction of the data loop to the relevant WEB pages, so that of a form or record of a WEB page on the form or data content or record of other WEB page can be mutually accessed by the server in question.

46. Arrangement for carrying out the method according to one of the features 31 to 45 , Especially by a support surface with sound-insulating surface (eg foam, etc.) in which a microphone and / or a hearing capsule for producing an acoustic coupling via which said data loop is formed, is embedded.

47. Arrangement for carrying out the method according to one of the features 31 to 45 , in particular by an infrared interface over which said data loop is formed.

48. Method according to one of the features 31 to 45 in which the method marks the data of an on-line account account transfer which is used to charge a mobile phone, in particular by virtue of the fact that the on-line account account transfer and an event controlled by a server with a corresponding terminal of the said temporary one are preferred Production of said data loop via a respective mobile phone (at the time of payment), the telephone connection or telephone number used by which a linkage of the data in the server for account transfer is made, in addition to the stated purposes, continues to be used to input data of the server (which the Terminal to form the data loop is associated) on the phone to represent (eg, an amount to be paid) and / or vice versa.

49. Method according to one of the preceding features, characterized in that said data loop over which said code signal is transmitted is constantly maintained and the method is used to establish where the data source of a WEB page, or equivalent transmission, originated secure or check the data source in this regard.

50th Feature deleted.

1. a) der der bei seiner Aussendung nicht vorhersagbare Kode (KODE) vom Server (oder einer vergleichbaren Vorrichtung) über eine direkt bestehende Datenverbindung an den Client gesendet wird (wobei gegebenenfalls dieser Kode auch über mehrere Clients und/oder Server gleitet sein kann) und daß dieser Kode (KODE) mittels einer auf der Client Seite hergestellten Datenschleife (bzw. Verbindung) über die als sicher, bzw. unverwechselbar angesehene (z.B. über ein Wählamt geschaltete oder aus Funkkanälen bestehende) Verbindung dem Server zwecks Vergleich wieder zurück gesendet wird (wobei gegebenenfalls dieser Kode auch über mehrere Clients und/oder Server geleitet sein kann), und/oder bei
2. b) der der bei seiner Aussendung nicht vorhersagbare Kode (KODE) vom Server (oder einer vergleichbaren Vorrichtung) über die als sicher, bzw. unverwechselbar angesehene (z.B. über ein Wählamt geschaltete oder aus Funkkanälen bestehende) Verbindung an deren Endgerät gesendet wird (wobei gegebenenfalls dieser Kode auch über mehrere Clients und/oder Server geleitet sein kann) und daß dieser Kode mittels einer auf der Client Seite hergestellte Datenschleife (bzw. Verbindung) über direkt bestehende Datenverbindung dem Server zwecks Vergleich wieder zurück gesendet wird (wobei gegebenenfalls dieser Kode auch über mehrere Clients und/oder Server geleitet sein kann),

II) und /oder daß unter Verwendung der genannten Verbindungen auf der Client Seite CL eine Datenschleife DS geschaltet wird (über eine entsprechende Kopplung hergestellt, wie z.B. eine akustische, oder ein Infrarot, oder eine optische Kopplung, etc.) oder geschaltet ist (auch durch Steckverbindung, Relais, elektronischer Schalter, usw.), über die ein vom Server (oder der vergleichbaren Vorrichtung) unmittelbar ausgesendeter und sowohl über die als sicher unverwechselbar angesehene (z.B. über ein Wählamt geschaltete oder aus Funkkanälen bestehende) Verbindung, als auch über die bestehende Datenverbindung (z.B. IT-Verbindung) bei seiner Aussendung nicht vorhersagbarer Kode (KODE) geleitet ist, dessen Datenweg einerseits die als sicher unverwechselbar angesehene (z.B. über ein Wählamt geschaltete oder aus Funkkanälen bestehende) Verbindung sowie andererseits die weiterhin bestehende Datenverbindung zwischen Client und Server als Parallelschaltung benutzt, über die der Datenstrom des vom Server erzeugten und wieder zurückerhaltenen Kodes (KODE) geleitet ist, wobei der über die unterschiedlichen Datenwege vom Server an den Client CL geleitete Kode beim Client CL auf Übereinstimmung geprüft wird, um bei Übereinstimmung einen bestimmten Vorgang an einer betreffenden Vorrichtung (beim Client CL) auszulösen (wie z.B. Öffnen eines Schlosses, eines Schrankens, eines Drehkreuzes, usw.).51. Method according to one of the preceding features, or method for assigning the network connection of two or more data networks and / or signal networks used for data transmission and / or data processing (eg IT network and a telephone network, etc.) with respect to the data transmission used channels (eg ports, or dial-up by a phone numbers switched connections, etc.), wherein a so-called. Client / server model is applied, in which the terminal of the user is referred to as client CL and directly or via another data link (also on more Clients, or other end devices of other users, etc.) is connected to a server or a comparable device,
or method according to the preamble and / or the characterizing part of feature 1 .
in particular in that the connections set up according to the client / server model relate to two or more of the connections established or switched as from the client to the server or from the server to the client, of which at least one is regarded as being unmistakably distinctive (eg via a dialing office switched or consisting of radio channels) connection can be viewed on the connection name n of 1 from n switched connections (eg telephone number in a telephone network, radio channel in a wireless network, etc.) the unique connection between a particular client and a particular server from the crowd all clients or servers available on the data network
I) and that using the said connections on the client side CL, a data loop DS is switched (made via a corresponding coupling, such as an acoustic, or infrared, or optical coupling, etc.) or switched (also by plug connection , Relays, electronic switches, etc.), over which a code (KODE), which is sent directly from the server (or the comparable device) and is retrieved for checking, is not forwarded, whose data path on the one hand is considered as unmistakable ( For example, via a dialing office switched or consisting of radio channels) connection and on the other hand, the existing data connection between the client and server used as a series circuit through which the data stream of the server generated and recovered back codes (KODE) is passed, the two variants as alternatives or Options are provided at

1. a) of the unpredictable in its transmission code (KODE) from the server (or a similar device) via a direct data connection to the client is sent (where appropriate, this code can also be on several clients and / or server slides) and that this code (KODE) is sent back to the server for comparison by means of a data loop (or connection) established on the client side via the connection considered as secure or unmistakable (eg via a dialing office or consisting of radio channels) this code can also be routed via several clients and / or servers), and / or at
2. b) of the unpredictable in its transmission code (KODE) from the server (or a similar device) on the considered safe, or unmistakable viewed (eg via a dialing office or consisting of radio channels) connection to the terminal is sent (where appropriate this code can also be routed via several clients and / or servers) and that this code is sent back to the server for the purpose of comparison by means of a data loop (or connection) established on the client side via a directly existing data connection (optionally this code is also transmitted via multiple clients and / or servers can be routed),

II) and / or that using the said connections on the client side CL, a data loop DS is switched (made via a corresponding coupling, such as an acoustic, or infrared, or optical coupling, etc.) or switched (also by plug-in connection, relay, electronic switch, etc.), via which a from the server (or similar device) immediately emitted and both on the definitely unmistakable regarded (eg via a dialing office or consisting of radio channels) connection, as well as over Existing data connection (eg IT connection) is passed on its emission of unpredictable code (KODE), whose data path on the one hand considered safe unmistakable (eg via a dialing office or consisting of radio channels) connection and on the other hand, the existing data connection between client and server used as a parallel connection via which the data stream of the v server generated and retrieved back codes (KODE) is passed, wherein the guided over the different data paths from the server to the client CL code is checked for compliance at the client CL to match a particular operation on a device in question (the client CL) triggering (such as opening a lock, a locker, a turnstile, etc.).

52. Procedure by feature 51 .
or method according to the preamble and / or the characterizing part by feature 1 in particular that the method for the recognition, or for the assignment or synchronization of two or more simultaneously or successively successful processes in the data transmission and / or data processing is used by the as between client and server as certainly unmistakable considered (eg a dial-up office switched) connection, or their connection name n of 1 out of n switched connections (eg telephone number T- # in a telephone network, radio channel in a radio network, or even a particularly secure network connection, as well as an Internet connection, etc.) is used as a common address for the assignment or synchronization of said processes.

• aa) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung) zum Zwecke der Zuordnung der WEB-Seite, bzw. der zu einer WEB-Seite erhaltenen Daten zum Benutzer als allgemeine Benutzeridentifizierung für die weitere Verarbeitung der in die WEB-Seite angezeigten Daten;
• bb) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung) zum Zwecke der Zuordnung der WEB-Seite, bzw. der zu einer WEB-Seite erhaltenen Daten zum Benutzer als Benutzeridentifizierung, wobei diese Benutzeridentifizierung mit der Zugangssicherung zu durch diese Sicherung geschützte Daten verknüpft ist;
• cc) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung) zum Zwecke der Zuordnung der WEB-Seite, bzw. der zu einer WEB-Seite erhaltenen Daten zum Benutzer als Benutzeridentifizierung, wobei diese Benutzeridentifizierung als Nachweis dient, daß ein bestimmter Benutzer (dem der Telefonanschluß T-# zugeordnet ist) ein bestimmtes Dokument der WEB-Seite, über welches die genannte Datenschleife geschlossen wird, gelesen hat;
• dd) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder ähnlicher Datenverbindung von durch Adressierung sich zusammensetzender Datenblöcke) zum Zwecke der Prüfung der Echtheit der WEB-Seite, wobei dies dem Client (gegebenenfalls auch akustisch oder über Display des Telefonapparates) angezeigt wird;
• ee) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder ähnlicher Datenverbindung von durch Adressierung sich zusammensetzender Datenblöcke), derart, daß der Server Kodelemente erzeugt, dito bei Rückerhalt prüft, wobei diese Kodelemente den auf der Serverseite und/oder auf der Client-Seite jeweils abgesendeten Daten und gemäß dem Datenübertragungsverfahren (z.B. dem Protokoll des Internet, IT Datenverkehrs) entsprechend übertragenen Datenpaketen jeweils als Testinformation (gegebenenfalls verschlüsselt) zugesetzt wird, um ständig zu Testen, ob während der Datenübertragung Manipulationen an den in Datenpaketen zusammengefaßten Daten vorgenommen sind, wobei gegebenenfalls wenn mehrere Server verwendet sind, auch der Server ausgekundschaftet werden kann, der die Manipulation vornimmt und dies dem Benutzer oder Operator (gegebenenfalls auch akustisch oder über Display des Telefonapparates) angezeigt wird;
• ff) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder ähnlicher Datenverbindung von durch Adressierung sich zusammensetzender Datenblöcke), derart, daß der Server Kodelemente erzeugt, dito bei Rückerhalt prüft, wobei diese Kodelemente den auf der Serverseite und/oder auf der Client-Seite jeweils abgesendeten Daten und gemäß dem Datenübertragungsverfahren (z.B. dem Protokoll des Internet, IT Datenverkehrs) entsprechend übertragenen Datenpaketen jeweils als Testinformation (gegebenenfalls verschlüsselt) zugesetzt wird, um eine über eine IT- Verbindung aufgebaute Telefonverbindung, oder ähnliche Verbindung (wie FAX, etc.) über die durch die bevorzugte Datenschleife hergestellte unverwechselbare Kodierung des Anrufers, dito gegebenenfalls zur unverwechselbaren Kodierung eines Angerufenen zu überwachen, unter der Benutzung der Telefonnummer eines klassischen (über Wählnetz Verbindung geschalteten) Telefonanschlusses (T-#) des Anrufers, dito gegebenenfalls auch des Angerufenen (um die Authentizität der Dienstes, über den die Internet-Telefonverbindung aufgebaut wird, zu prüfen (betreffend der WEB-Seite, bzw. des Servers des Dienstes).
• gg) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung) zum Zwecke der Zuordnung der WEB-Seite und eines zur WEB-Seite über Kauf erhaltenen Zahlungsnachweises (z.B. eines Druckwerkes, wie Zeitung, Buch oder auch einer Rechnung, etc.), wobei der Zahlungsnachweis einen in die WEB-Seite (über die Tastatur oder durch Scannen oder über einen Chip, etc.) einzugebenden exemplarischen (musterhaften) Kode (KODE_Zahlung) enthält, der bei der Eingabe mit der über die Datenschleife festgestellte Verbindungsnummer der Telefonverbindung (Telefonnummer, Handynummer, etc.) verknüpft wird um einen Zugang zu den geschützten Daten der WEB-Seite zu erhalten sowie bei nachfolgenden Aufrufen der WEB-Seite durch den Benutzer unter Benutzung der Datenschleife der Telefonverbindung, der Zugang zu den geschützten Daten der WEB-Seite nur mehr unter der Verbindungsnummer der Telefonverbindung (Telefonnummer, Handynummer, etc.) ermöglicht wird, die bei der erstmaligen Verwendung dieses Kodes (KODE_Zahlung) verwendet worden ist, wobei der Zugang gegebenfalls auch auf einen bestimmte Zeitraum oder eine bestimmte Anzahl von Sitzungen, etc. begrenzt sein kann (falls erforderlich, Option);
• hh) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung) zum Zwecke der Gebührenabrechnung über die Telefongebühren des für die Zuordnung verwendeten Telefonanschlusses zur Bezahlung der über die WEB-Seite angebotenen, bzw. erhaltenen Dienstleistung;
• ii) zur Verwendung der Herstellung der Zuordnung einer Telefonverbindung (welche für die genannte Datenschleife benutzt wird) entsprechend dem Telefonanschluß (T-#) auf der Client Seite CL zu einem (gleichzeitig oder hintereinander) jeweils aufgebauten Datenkanal einer auf der Client Seite CL dargestellten WEB-Seite (oder einer ähnlichen Datenverbindung) zum Zwecke der Zuordnung der WEB-Seite, bzw. der zu einer WEB-Seite erhaltenen Daten zum Benutzer als Benutzeridentifizierung für das Öffnen eines mit dem Server in Verbindung stehenden elektronischen Schlosses etc. , (oder zur sonstigen Betätigung eines Auslösevorganges (wie z.B. die Öffnung eines Schrankens für ein Parkhaus oder eine Straßensperre, oder die Freigabe des Zutrittes einer Person über ein Drehkreuz, usw.), wobei der genannte Vergleich des vom Server ausgesendeten Prüf Kodes zur Benutzeridentifizierung als Bedingung (oder weitere Bedingung) für die Freigabe der Öffnung des Schlosses, bzw. für die Betätigung des Auslösevorganges, am Schloß (bzw. einer betreffenden Vorrichtung) autark erfolgt und die betreffende Datenschleife über das mit dem elektronischen Schloß gekoppelte Handy geschlossen wird;
• jj) zur Verwendung der Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung, wobei als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder eine Handy zum Zwecke der Abwicklung eines bargeldlosen Zahlungsverkehrs benutzt wird;
• kk) zur Verwendung der Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung, wobei als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) zwei Handy's über welche die bevorzugte Datenschleife durch Datenkopplung (zum Server) hergestellt wird zum Zwecke der Abwicklung eines bargeldlosen Zahlungsverkehrs benutzt sind;
• ll) zur Verwendung der Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung, wobei als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder eine Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung des anonymen Aufrufs einer (gegebenenfalls auch anonym erzeugten) WEB- Seite benutzt wird;
• mm) zur Verwendung der Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung, wobei als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder eine Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung der Abgabe (gegebenenfalls auch des Nachweises für die Abgabe) einer digitalen Signatur (Unterschrift) zu einem auf einer betreffenden WEB-Seite dargestellten Dokument benutzt wird.
• nn) zur Verwendung der Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung, wobei als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder eine Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung der Abgabe (gegebenenfalls auch des Nachweises für die Abgabe) einer digitalen Signatur (Unterschrift) zu einer auf eine betreffenden WEB-Seite gesendete E-Mail benutzt wird.
• oo) zur Verwendung der Zuordnung bzw. Synchronisierung zweier oder mehrerer gleichzeitig oder nacheinander erfolgender Prozesse bei der Datenübertragung und/oder Datenverarbeitung, wobei als Telefonverbindung für die auf der Client Seite CL hergestellte Datenschleife (zum Server) ein Festnetztelefon oder eine Handy zum Zwecke der Vernetzung mehrerer Server in Verbindung der Abgabe (gegebenenfalls auch des Nachweises für die Abgabe) einer digitalen Signatur (Unterschrift) zu einem allgemeinen über einen Server ausgelösten Vorgang benutzt wird.

53. Method by feature 51 or 52 characterized in that said association or synchronization of two or more simultaneous or sequential processes in data transmission and / or data processing using the connection name n of a connection switched from n to n (eg a telephone number T- # in a telephone network, a Radio channel in a radio network, etc.) takes place, which in the said data loop by feature 51 is used for the assignment of the network connection, wherein the connection name n (or T- #, etc.) is used as the common address of the processes to be synchronized for the purpose of their assignment, characterized in that the method to at least one or more of the following used for specified purposes:

• aa) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or similar data link) for the purpose of associating the WEB page, or the data received to a WEB page, to the user as general user identification for further processing of the data displayed on the WEB page;
• bb) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or similar data connection) for the purpose of associating the WEB page, or the data received to a WEB page, to the user as user identification, this user identification being associated with the access protection to data protected by that backup;
• cc) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or a similar data connection) for the purpose of associating the WEB page or the data received to a WEB page to the user as user identification, this user identification serving as evidence that a particular user (to whom the telephone line T- # associated) read a particular document of the WEB page over which said data loop is closed;
• dd) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or successively) constructed data channel of a WEB displayed on the client side CL Page (or similar data connection of blocks of data composed by addressing) for the purpose of verifying the authenticity of the WEB page, this being indicated to the client (possibly also acoustically or via display of the telephone set);
• ee) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or similar data link of addressing blocks of data blocks) such that the server generates code elements as it checks for retrieval, these code elements corresponding to the data sent on the server side and / or on the client side and according to the data transmission method ( For example, the protocol of the Internet, IT traffic) according to transmitted data packets each as test information (possibly encrypted) is added to constantly test whether during data transfer manipulation of the data collected in data packets are made, optionally if multiple servers are used, auc h the server can be scouted, who performs the manipulation and this the user or operator (possibly also acoustically or via the display of the telephone set) is displayed;
• ff) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or similar data link of addressing blocks of data blocks) such that the server generates code elements as it checks for retrieval, these code elements corresponding to the data sent on the server side and / or on the client side and according to the data transmission method ( For example, the protocol of the Internet, IT traffic) according to transmitted data packets each as test information (possibly encoded) is added to a telephone connection established via an IT connection, or similar connection (such as FAX, etc.) over the distinctive coding of the caller produced by the preferred data loop, ditto if necessary to monitor the distinctive coding of a called party, using the telephone number of a classic (via dial-up network Connection connected) telephone line (T- #) of the caller, ditto if necessary, the called party (to authenticity of the service over which the Internet telephone connection is established to check (regarding the WEB page, or the server of the service).
• gg) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or a similar data connection) for the purpose of assigning the WEB page and on the WEB page on purchase received proof of payment (eg a printed matter, such as newspaper, book or even an invoice, etc.), the proof of payment in the WEB page (via the keyboard or by scanning or via a chip, etc.) contains exemplary (exemplary) code (KODE_Zahlung), which when entering with the established over the data loop connection number of the telephone connection (phone number, mobile number, etc.) linked to get access to the protected data of the WEB page as well as subsequent calls to the WEB page e by the user using the data link of the telephone connection, access to the protected data of the WEB page is enabled only under the connection number of the telephone connection (telephone number, mobile number, etc.) used when first using this code (KODE_Kahlung) where appropriate, access may also be limited to a specific period or a certain number of sessions, etc. (if necessary, option);
• hh) for using the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone connection (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or similar data link) for the purpose of billing the telephone charges of the telephone line used for the assignment to pay for the service offered or received via the WEB site;
• ii) to use the establishment of the assignment of a telephone connection (which is used for said data loop) corresponding to the telephone line (T- #) on the client side CL to a (simultaneously or consecutively) each constructed data channel of a WEB displayed on the client side CL Page (or a similar data connection) for the purpose of assigning the WEB page, or the data received to a WEB page to the user as user identification for opening an associated with the server electronic lock, etc., (or other Actuating a triggering operation (such as opening a barrier for a parking garage or a roadblock, or releasing a person's access through a turnstile, etc.), said comparison of the server issued check code for user identification being a condition (or further condition ) for the release of the opening of the lock, or for the operation of the tripping process, at the lock (resp. a relevant device) is self-sufficient and the relevant data loop is closed via the coupled with the electronic lock cell phone;
• jj) for using the assignment or synchronization of two or more simultaneous or successive processes in data transmission and / or data processing, wherein a landline telephone is used as the telephone connection for the data loop (on the server) established on the client side CL or a mobile phone is used for the purpose of processing a cashless payment transaction;
• kk) for using the assignment or synchronization of two or more simultaneously or successively occurring processes in the data transmission and / or data processing, wherein as a telephone connection for the client side CL established data loop (to the server) two mobile phones over which the preferred data loop by data coupling (to server) is used for the purpose of processing a cashless payment transaction;
• ll) for using the assignment or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing, wherein as a telephone connection for the client side CL established data loop (to the server) a landline phone or a cell phone for the purpose of networking multiple servers in connection with the anonymous call of a WEB page (possibly generated anonymously) is used;
• mm) for using the assignment or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing, wherein as a telephone connection for the client side CL established data loop (to the server) a landline phone or a cell phone for the purpose of networking multiple server in connection with the levy (possibly also the proof of the delivery) of a digital signature (signature) is used to a document displayed on a respective WEB page.
• nn) for using the assignment or synchronization of two or more simultaneous or successive processes in the data transmission and / or data processing, wherein as a telephone connection for the client side CL established data loop (to the server) a landline phone or a cell phone for the purpose of networking multiple server in connection with the levy (possibly also the proof of delivery) of a digital signature (signature) is used to a sent to a WEB page e-mail.
• oo) for using the assignment or synchronization of two or more simultaneously or successively occurring processes in the data transmission and / or data processing, as a telephone connection for the client side CL established data loop (to the server) a landline phone or a cell phone for the purpose of networking a plurality of servers in connection with the delivery (possibly also the proof of the delivery) of a digital signature (signature) is used to a general operation triggered by a server.

54. Method according to one of the features 51 to 53 , in particular that on one of the terminals used for said data loop DS of the relevant data connections and / or optionally in (further) servers, when the data loop is directed controlled controlled over this (as an option), an alienation of the one (or further servers respectively) of transmitted codes (KODE) according to an algorithm known at the comparison point of the code (at the server, when serial connection of the data loop and / or at the client, if the data loop is connected in parallel), the alienation being decrypted again at this comparison point.

1. a) Verfremdung des von einem betreffenden Server ausgesendeten Kodes;
2. b) Zusetzen eines weiteren Kodes;
3. c) Unterbrechen/Senden des Kodes nach definierten (verschlüsselt bestimmten) Zeiten, wobei diese Zeiten beim Vergleich des Kodes mit geprüft sind.

55. Method according to one of the features 51 to 53 , in particular by feature 54 in that the following variants are used (simultaneously or alternatively): with an encryption / decryption of the test code conducted via said data loop DS at said locations;

1. a) alienation of the code sent by a particular server;
2. b) adding another code;
3. c) Interrupting / sending the code according to defined (encrypted certain) times, these times are checked when comparing the code with.

56. Method according to one of the features 51 to 55 to use the assignment or synchronization of two or more simultaneously or successively occurring processes in the data transmission and / or data processing, characterized in that the synchronization of the processes to different servers and / or to different WEB pages, or even sessions (also the same server) in succession by respectively forming said data loop to the individual (server) under the same port number (or telephone number).

57. Method according to one of the features 51 to 55 to use the assignment or synchronization of two or more simultaneously or successively occurring processes in the data transmission and / or data processing, characterized in that the synchronization of the processes to different servers and / or to different WEB pages, or even sessions (also the same server) at the same time by forming a serial data loop over the respective server under a respective port number (or telephone number), the data loop is closed via the Internet connection server concerned.

58. Method according to one of the features 51 to 57 , in particular in that the terminal (eg a mobile phone) used to form the data loop (eg via a telephone connection) at the coupling point of the data loop receives the encryption data or the algorithm respectively from the transmission side from which the code to be alienated (KODE) is related, which is given alienated in the other transmission side (according to this algorithm) and optionally (if necessary) for both directions independently of each other the alienation (encryption) via the coupling point looped codes with completely decoupled encryption data is done.

1. a) die Eingabe der Adresse, bzw. des Namens einer aufzurufenden WEB-Seite in den Client Rechner (über Signal des Telefonanschlusses T-#), wobei dies über eine Plug In Software, die den Browser des Client Rechners CL unmittelbar unterstützt, oder über eine betreffende direkte Unterstützung des Internet Servers erfolgen kann,
2. b) die Ein- Ausgabe von Daten, die über die Datenschleife des Client-Rechners CL von einer Telefonverbindung zu einem Server, bzw. von einem Server zu einer Telefonverbindung gesendet werden sollen, insbesondere der Prüfkode (KODE) zur Prüfung der Datenschleife,
3. c) die Umsetzung einer am Endgerät der Telefonverbindung über den Telefonanschluß T-# (Telefonapparat oder Handy) erhaltenen SMS, welche einem Datenkode, bzw. Daten entsprechen, in einen Datenstrom, der über die Datenschleife und der direkten Datenverbindung des Client Rechners CL dem Server gesendet werden,
4. d) die Umsetzung einer am Client-Rechner erhaltenen SMS, welche einem Datenkode, bzw. Daten entsprechen, in einen Datenstrom, der über die Datenschleife (auf der Client Seite CL) durch die Telefonverbindung (Telefonapparat oder Handy) dem Server gesendet werden,
5. e) die Verfremdung des über die Datenschleife erhaltenen und wieder abgesendeten Kodes (KODE) derart, daß der erhaltene Kode nach einem Algorithmus verändert (verschlüsselt) wird, welcher zur Wiederherstellung des Kodes (Entschlüsselung) im Server wieder rückgängig verändert wird, wobei das die Datenschleife betreffende Endgerät (z.B. Handy) die Verschlüsselungsdaten (bzw. den offenen Schlüssel) an der Koppelstelle der Datenschleife jeweils von der Übertragungsseite bezieht, von welcher der zu verfremdende Kode (KODE) bezogen wird, welcher in die andere Übertragungsseite (nach diesem Algorithmus) verfremdet weiter gegeben wird und gegebenenfalls (falls erforderlich) für beide Übertragungsrichtungen unabhängig voneinander die Verfremdung (Verschlüsselung) über die Koppelstelle durchgeschleiften Kodes mit voneinander völlig entkoppelten Verschlüsselungsdaten erfolgt.

59. Method according to one of the features 51 to 58 with a mobile phone or a suitably trained telephone as a terminal for the formation of the data loop, in particular that the use the preferred pairing for the preferred data loop (to / from the server) includes the following additional data:

1. a) the input of the address, or the name of a WEB page to be invoked in the client computer (via signal of the telephone line T- #), this via a plug-in software that supports the browser of the client computer CL directly, or via a relevant direct support of the Internet server can take place,
2. b) the inputting of data to be sent via the data loop of the client computer CL from a telephone connection to a server or from a server to a telephone connection, in particular the check code (KODE) for checking the data loop,
3. c) the implementation of an SMS received at the terminal of the telephone connection via the telephone line T- # (telephone or mobile phone), which correspond to a data code, or data, in a data stream via the data loop and the direct data connection of the client computer CL the server to be sent
4. d) the conversion of an SMS received at the client computer, which correspond to a data code or data, into a data stream which is sent to the server via the data loop (on the client side CL) through the telephone connection (telephone or mobile phone),
5. e) the alienation of the data loop received and re-transmitted code (KODE) such that the code obtained is changed (encrypted) according to an algorithm, which is reversed to restore the code (decryption) in the server, which is the data loop relevant terminal (eg mobile phone) the encryption data (or the open key) at the coupling point of the data loop respectively from the transmission side, from which the code to be alienated (KODE) is related, which further alienated in the other transmission side (according to this algorithm) is given and optionally (if necessary) for both directions independently of each other the alienation (encryption) via the coupling point looped codes with completely decoupled encryption data is done.

1. 1) eine akustische Kopplung über den/das bestehende(n) Hörer und Mikro des Telefons. bzw. Handy's, gegebenenfalls auch einem weiteren Handy und/oder Lautsprecher/Mikro eines Client Rechners, und/oder
2. 2) die Kopplung zwischen Handy gegebenenfalls auch einem weiteren Handy und einem Client Rechner über die bestehende Infrarot Schnittstelle, und/oder
3. 3) die Kopplung zwischen Handy gegebenenfalls auch einem weiteren und einem Client Rechner über bereits vorhandene Kameraoptik und für die Gegenseite einer entsprechenden Helligkeitsmodulation (oder Farbe, etc.) einer auf einem Display oder Bildschirm dargestellten graphischen Fläche (z.B. Kreis, Quadrat, etc.),
4. 4) die Kopplung über den SMS Kanal des Handy, wobei die SMS über die Datenkopplung als Datenstrom (je nach Datenrichtung) eingelesen, bzw. ausgelesen wird,
5. 5) die Herstellung der Kopplung über durch Hardware und/oder Software geschaltete Verbindungen, wobei anstelle eines Benutzers gegebenenfalls auch ein Server die Bildung der Datenschleife DS anstelle eines Client CL vornehmen kann.

60. Method according to one of the features 51 to 59 with a mobile phone or suitably trained telephone set as a terminal for the formation of the data loop, in particular that the preferred coupling for the preferred data loop DS (to / from the server) via the following interface of the mobile phone used or possibly telephone apparatus is carried out:

1. 1) an acoustic coupling over the existing handset and microphone of the telephone. or mobile phone, possibly also another mobile phone and / or speakers / micro client computer, and / or
2. 2) the coupling between mobile phone, if necessary, another mobile phone and a client computer via the existing infrared interface, and / or
3. 3) the coupling between the mobile telephone, if appropriate, also another and a client computer via already existing camera optics and for the opposite side of a corresponding brightness modulation (or color, etc.) of a graphical surface (eg circle, square, etc.) displayed on a display or screen .
4. 4) the coupling via the SMS channel of the mobile phone, wherein the SMS is read in via the data coupling as a data stream (depending on the data direction), or read,
5. 5) the production of the coupling via connections switched through hardware and / or software, wherein instead of a user, if appropriate, a server can also undertake the formation of the data loop DS instead of a client CL.

61. Method according to one of the features 51 to 60 in that, in the two alternatives mentioned above, in that the data loop is connected in series or in parallel, the code (KODE) provided for the purpose of checking the data loop is replaced by the server by one of the two terminals, or possibly both ( s) are used for the production of the data loop (is) is generated and sent, the code is then returned by the server or is compared, the already mentioned possibilities for a comparison check of the code (KODE), as well as for alienation (encryption ) and recovery (decryption) of the code by swapping the function of server and terminals to form the data loop DS with respect to the check of the data loop DS by the code (KODE) (ie swapping SERVER and DS in FIG 2a , dito 2 B) . wherein the code comparison is performed according to the application of said series connection or parallel connection at the server or at a respective terminal of the data loop DS.

• - an der über betreffende Endgeräte unterschiedlicher Netze (IT-Netz, Telefonnetz) geschlossenen Datenschleife DS, die beiden genannten Varianten eine Serienschaltung oder Parallelschaltung gleichzeitig innerhalb der selben Datenschleife DS zur Durchführung gelangen,
• - und/oder daß die beiden genannten Varianten den Kodevergleich des über die Datenschleife DS gesendeten Kodes (KODE) auf der Serverseite oder auf der Seite der über die Endgeräte geschlossenen Datenschleife DS durchzuführen, mit der gegebenenfalls noch vorgenommenen (und angepaßten) Verfremdung (Verschlüsselung), bzw. Wiederherstellung (Entschlüsselung) des Kodes (KODE), gleichzeitig innerhalb der selben Datenschleife DS zur Durchführung gelangen.

62. Method by feature 61 , in particular in that

• at the data terminal DS, which is closed via terminals of different networks (IT network, telephone network) concerned, the two variants mentioned execute a series connection or parallel connection simultaneously within the same data loop DS,
• and / or that the two variants mentioned perform the code comparison of the codes (KODE) transmitted via the data loop DS on the server side or on the side of the data loop DS closed via the terminals, with the alienation (encryption) possibly still being made (and adapted) , or recovery (decryption) of the code (KODE), simultaneously within the same data loop DS to carry out.

63. Method according to one of the features 51 to 62 , with a mobile phone, via which said data loop DS is formed, characterized in that the cell phone is designed so that in the (usually encrypted) sending sensitive data (such as a pin number, a fingerprint voice recognition, an iris Query, etc.) during the existence of the preferred data loop DS (checked via the KODE sent by the server) or while the data loop is being checked by the (KODE) are sent to the server in question, or that the mobile phone does not contact the data sends the relevant server if the check of the data loop (or code KODE) is negative.

64. Method according to one of the preceding features, in particular by feature 53 , Paragraph l, for the purpose of calling a WEB page by dialing via the existing to the Internet connection further network (eg via a telephone network, etc.) in which the connection to the server or to a group of further networked server via a calling party ( Client CL, cell phone, or even another server, etc.) produced data loop DS according to a method according to one of the features 51 to 63 , is made, in particular, that from a respective server (eg server 2 ) the address (or the name, etc.) of the WEB page to be called up via the additional network existing for the Internet connection (eg via a telephone network) and via the existing data loop DS to an Internet connection present at the client CL (eg server 1 ) and in the present at the client CL Internet connection (eg a WEB page) is fed, whereby the call of the relevant WEB page (via the client CL and / or its server connection) is made.

1. a) daß zum Zwecke des Aufrufs einer betreffenden WEB-Seite der betreffende Server (z.B. Server 2) über das zur Internet Verbindung bestehende weitere Netz (z.B. über ein Telefonnetz, etc.) angewählt, bzw. angerufen wird,
2. b) daß der (z.B. über ein Telefonnetz) angewählte, bzw. angerufene Server (Server 2) über die genannte Datenschleife DS seine Aufruf Daten, über die er im Netz (Internet) aufgerufen werden kann, sendet,
3. c) daß über die Internetverbindung (z.B. Server 1), in welche die Datenschleife DS beim Client CL (z.B. über einen weiteren Server 1) eingespeist wird, der von der Client Seite über das weitere Netz, (z.B. der ein Telefonnetz), angewählte, bzw. angerufene Server (Server 2), im Internet aufgerufen wird, bzw. der Server (Server 1), welcher die Internetverbindung (in welche die Datenschleife DS beim Client CL eingespeist wird) beim Client CL repräsentiert, eine Internetverbindung mit dem aufzurufenden Server (Server2), über welchen und/oder unter dessen Mitwirkung die betreffende WEB-Seite aufgerufen werden soll, aufbaut,
4. d) und daß durch die in Merkmal 64 über die Datenschleife DS vorgenommene Einspeisung (in Server 1), deren Kopplung durch die in Absatz c) weiterhin getroffene Maßnahme besteht, der Server (Server 2) über den und/oder unter dessen Mitwirkung die betreffende WEB-Seite aufgerufen werden soll, den Aufruf über das zur Internet Verbindung bestehende weitere Netz (z.B. über ein Telefonnetz, etc.) an die Datenschleife DS zum Zwecke der Einspeisung in das Internet (via den Client CL) sendet, wodurch die Datenschleife als solche hergestellt ist,

wobei zwischen den Schritten a) bis d) gegebenenfalls die bereits genannten weiteren Schritte, bzw. Maßnahmen in Verbindung mit der Bildung der genannten Datenschleife DS zusätzlich vorgenommen sind.65. Procedure by feature 64 , in particular,

1. a) that for the purpose of calling a relevant WEB page of the server in question (eg server 2 ) is called or called via the further network existing for the Internet connection (eg via a telephone network, etc.),
2. b) that the (eg over a telephone network) selected, or called server (server 2 ) via the said data loop DS sends its call data over which it can be called in the network (Internet),
3. c) that via the Internet connection (eg server 1 ) into which the data loop DS at the client CL (eg via another server 1 ), which is selected by the client side via the further network, (eg the one telephone network), or called server (server 2 ), is called on the Internet, or the server (server 1 ), which represents the Internet connection (into which the data loop DS is fed in the client CL) at the client CL, an Internet connection with the server to be called (Server2), via which and whose participation the relevant WEB page is to be called .
4. d) and that by the in 64 feed made via the data loop DS (in server 1 ), the coupling of which is continued by the measure taken in paragraph c), the server (server 2 ) via the and / or under the participation of the relevant WEB page is to be called, the call via the Internet connection existing further network (eg via a telephone network, etc.) to the data loop DS for the purpose of feeding into the Internet (via the client CL), whereby the data loop is made as such,

wherein, between the steps a) to d), if appropriate, the additional steps already mentioned, or measures in connection with the formation of said data loop DS, are additionally undertaken.

66. Procedure by feature 64 or 65 , in particular in that the server via which the feed made by the data loop DS takes place (server 1 ), one or more WEB pages (as Forms) in which the information of other WEB pages (eg the server 2 ) can be copied, dito the data input of the user in such a web page (the server 1 ) each to that WEB page (the server 2 ) whose information is included in the (related) WEB page affected by the data input of the user (form of the server 1 ) have been registered.

1. a) der Server (hier der Server 2), der die Information als Quelle für die Kopie liefert (unter Verwendung der über die genannte Datenschleife T-# erhaltenen Zuordnung zum Benutzer, bzw. zu einer aktuellen Sitzung) dem Server (hier Server 1), welcher die Kopie der WEB-Seite in einem Formular aufnimmt, um sie dem Benutzer unter diesem Namen (dieser Adresse) anzuzeigen, die WEB-Seite als Kopie übergibt (gegebenenfalls ständig aktualisiert) und eine Datenschnittstelle zu dieser WEB-Seite öffnet, um in die WEB-Seite vom Benutzer eingegebene Daten und Reaktionen (Mouse Klicks, etc.) aufzunehmen;
2. b) und der Server (hier der Server 2), der die Information als Quelle für die Kopie (an den Server 1) liefert, an die genannte Datenschleife DS (T-#) den in Merkmal 65, Absatz d, genannten Aufruf über das bestehende weitere Netz (z.B. über ein Telefonnetz, etc.) sendet, wodurch der Aufruf der betreffenden WEB-Seite an das Internet (Endgerät) über den Client CL eingegeben wird (und über Server 1 als fremde Seite dargestellt ist, jedoch von Server 2 anonym erzeugt wird).

67. Method by feature 66 with feature 64 and / or characteristic 65 , in particular in that the server (server 1 ), which holds one or more WEB pages as forms into which the information of other WEB pages (eg the server 2 ) can be copied to the server (here the server 2 ), which holds the information as a source for this copy, or generated, from the server (server 1 ) holding the forms, using the assignment to the user initiated via the said data loop T- #, or to a current session, sends a message in which the address (or the name) for recording the copy (or or as a form) currently used WEB page is included, whereupon:

1. a) the server (here the server 2 ), which supplies the information as the source for the copy (using the assignment to the user obtained via said data loop T- # or to a current session) to the server (here server) 1 ), which takes the copy of the WEB page in a form to display it to the user under this name (this address), copies the WEB page (possibly constantly updated) and opens a data interface to this WEB page to record data and reactions (mouse clicks, etc.) entered by the user in the WEB site;
2. b) and the server (here the server 2 ), which provides the information as a source for the copy (to the server 1 ) supplies to said data loop DS (T- #) the feature in feature 65 , Paragraph d, said call over the existing further network (eg via a telephone network, etc.) sends, whereby the call of the respective WEB page to the Internet (terminal) via the client CL is entered (and via server 1 is shown as a foreign page, but from server 2 generated anonymously).

68. Method by feature 67 , in particular in that the (empty) WEB pages (in server 1 ) for inclusion as forms for (by server 2 ) anonymously generated WEB pages are selected by a random generator and switch from call to call.

1. a) zu jeder Änderung des Namens der WEB-Seite, der Inhalt der aktuell angezeigten Seite WEB- Seite mit einer Leerinformation überschrieben wird,
2. b) als Vorbereitung, jeweils das genannte Protokoll zwischen den Servern, der die Information der WEB-Seite anbietet und dem Server, die (leeren) Formulare als Blanko WEB-Seiten zur Aufnahme der Informationen zur Verfügung stellt, abgewickelt wird (unter Verwendung der über die genannte Datenschleife T-# eingeleiteten Zuordnung zum Benutzer, bzw. zu einer aktuellen Sitzung),
3. c) bei jeder neuen Kopie eine neues Formular (unter einem neuen Namen) die Anzeigeposition der auf dem Bildschirm dargestellten Daten des vorher verwendeten Formulares abgespeichert wird, und das aktuelle neue Formular in einem Fenster über dem alten Fenster (dessen Information zum Zwecke der Löschung überschrieben wurde) am Bildschirm des Client CL dargestellt wird,
4. d) wobei die jeweils alten Formulare mit den zum Zwecke der Löschung überschriebenen Informationen ständig für die Aufnahme neuer Kopien verwendet sind,
5. e) und daß die bei den ständig wechselnden Namen der WEB-Seite benötigte ständige Zuordnung zwischen der Software, bzw. Datenbank des Servers und der aktuellen Sitzung eines Benutzers durch die bevorzugte Datenschleife über ein weiteres Netz (T-#) hergestellt wird, wobei gegebenenfalls noch weitere solche Datenschleifen, die reguläre Verbindungen des Internet benutzen (und daher keine besonderen Kosten verursachen, wie IT- Telefonie, etc.) ständig in Verbindung gehalten werden, um die Vorgänge über Daten (Kodes), die über die Schleifen geleitet sind, zu synchronisieren.

69. Procedure by feature 67 or 68 , in particular in that the (empty) WEB pages (in server 1 ) for inclusion as forms for (by server 2 ) are used anonymously generated WEB pages are selected by a random number generator and during the presentation of the content of the relevant WEB pages, the name of the WEB page by from the currently displayed WEB page by program constantly (corresponding to a time interval) generated calls another WEB pages (which are manipulated the same way as the current page displayed), where:

1. a) for each change of the name of the WEB page, the content of the currently displayed page WEB page is overwritten with a blank information,
2. b) as preparation, in each case the said protocol between the servers, which offers the information of the WEB-side and the server, which provides (empty) forms as blank WEB-sides for the admission of the information, (using the over said data loop T # # initiated assignment to the user, or to a current session),
3. c) with each new copy a new form (under a new name) the display position of the data displayed on the screen of the previously used form is stored, and the current new form in a window above the old window (whose information is overwritten for the purpose of deletion was) is displayed on the screen of the client CL,
4. d) the old forms with the information overwritten for the purpose of deletion are constantly used for new copies,
5. e) and that the permanent association between the software or database of the server and the current session of a user required by the constantly changing names of the WEB page is established by the preferred data loop via a further network (T- #), where appropriate Still other such data loops that use regular Internet connections (and therefore do not incur any special costs, such as IT telephony, etc.) are kept constantly connected to the operations over data (codes) routed through the loops synchronize.

70. Method according to one of the features 64 to 69 , in particular by the fact that the selection of the telephone number, which triggers the call of a WEB page, by a robot, which is initialized by the usual call a corresponding (other) WEB page.

• Wenn sich der Benutzer unter Benutzung der genannten Datenschleife DS über dem Telefonanschluß seiner Telefonnummer T-# (bzw. Handynummer) in die betreffende WEB-Seite einloggt, dann erfolgt (in der Serversoftware) die Abfrage, ober unter dieser Telefonnummer T-# (als Datenbankadresse) ein dem Zahlungsnachweis, bzw. Druckwerk, etc. entsprechender exemplarischer Kode „KODE_Zahlung“ bereits eingegeben wurde und gespeichert wurde, wobei für eine Neueingabe des Kode „KODE_Zahlung“ die Gültigkeit bzw. Authentizität nach einem speziellen Algorithmus oder einer Tabelle geprüft wird:
  1. a) ist kein solcher Kode „KODE Zahlung“ unter der festgestellten Telefonnummer T-# (als Datenbankadresse) gespeichert, dann ist die Eingabe eines solchen Kodes erforderlich um Zugang zu den geschützten Daten zu erhalten;
  2. b) ist bereits ein solcher Kode „KODE_Zahlung“ unter der festgestellten Telefonnummer T-# (als Datenbankadresse) gespeichert, und wird keine neuer „KODE_Zahlung“ festgestellt, dann erhält der Benutzer Zugang zu den geschützten Daten zu erhalten;
  3. c) solange der Benutzer Zugang zu den geschützten Daten haben soll, die sich gegebenenfalls auch (in der Auswahl) auf den „KODE_Zahlung“ beziehen können (z.B. über eine Tabelle der Zuordnung zu einem bestimmten Erscheinungsdatum einer Zeitschrift, etc.) bleibt der „KODE_Zahlung“ unter der Telefonnummer T-# (als Zugangsadresse zur Datenbankposition) gespeichert, ansonsten wird er (z.B. abhängig von der Bezahlung von Gebühren oder einer ablaufenden Frist, etc.) gelöscht (so daß dann der Fall a eintritt);
  4. d) wird ein neuer Kode „KODE_Zahlung“ eingegeben, dann wird er unter der Telefonnummer T-# (als Zugangsadresse zur Datenbankposition) gespeichert, wobei die alten Kodes, wenn dafür gesonderte Rechte erhalten werden sollen, erhalten bleiben, ansonsten (wenn sie keinen gesonderten Rechten entsprechen) gelöscht werden (z.B. wenn durch den neuen Kode nur eine Zugangsfrist verlängert werden soll, etc.);
  5. e) Option: wird Schritt a) mehrmals unter der gleichen Telefonnummer T-# versucht, ohne daß ein gültiger Kode „KODE_Zahlung“ dieser Telefonnummer T-# zugeordnet eingegeben wird oder zugeordnet, dann wird im Server die Anwahl dieser Nummer T-# für eine bestimmte Zeit gesperrt um eine Blockierung zu verhindern.

71. Method according to one of the preceding features, in particular by feature 63 , Paragraph g, for the purpose of assigning the WEB-side and a proof of payment received on the WEB-page about purchase (eg of a printed matter, such as a newspaper, book or even an invoice, etc.), especially by the following procedural steps:

• If the user logs in using the data loop DS above the telephone number of his phone number T- # (or mobile number) in the relevant WEB page, then takes place (in the server software), the query above this phone number T- # (as Database address) a the proof of payment, or print engine, etc. corresponding exemplary code "KODE_Zahlung" has already been entered and stored, for a new input of the code "KODE_Zahlung" the validity or authenticity is checked according to a specific algorithm or a table:
  1. a) if no such code "CODE Payment" is stored under the established telephone number T- # (as database address), then the entry of such a code is required to gain access to the protected data;
  2. b) such a code "KODE_Zahlung" is already stored under the determined telephone number T- # (as database address), and if no new "KODE_Zahlung" is detected, then the user receives access to the protected data;
  3. c) as long as the user should have access to the protected data, which may also refer (in the selection) to the "KODE_Zahlung" (eg via a table of assignment to a particular publication date of a magazine, etc.) remains the "KODE_Zahlung Stored under the telephone number T- # (as the access address to the database position), otherwise it will be deleted (eg, depending on the payment of fees or an expiring deadline, etc.) (so that case a occurs);
  4. d) if a new code "KODE_Zahlung" is entered, then it will be stored under the telephone number T- # (as access address to the database position), whereby the old codes, if separate rights are to be obtained, are preserved, otherwise (if they do not have a separate Corresponding to rights) (eg if the new code is to extend only one access period, etc.);
  5. e) Option: If step a) is tried several times under the same telephone number T- # without a valid code "KODE_Zahlung" being assigned or assigned to this telephone number T- #, then the server dials this number T- # for a certain time blocked to prevent blocking.

72. Method according to one of the features 51 to 71 , in particular by interacting with at or at the terminal (s) via which the data loop DS is closed (client computer CL and / or telephone or mobile phone, etc.) as well as with the data loop DS standing server, an alienation / encryption of the sent to check the data loop DS via the data loop codes (KODE) between the sending point and comparison point of the code with a corresponding regression of the code at the comparison point, wherein when sending internally before the alienation / encryption of the CODE the code sent via said different data paths (eg telephone and Internet) is considered to be matching for both (or all) data paths, and is reconciled by the decryption before the code is compared (at the comparison point).

• - daß die genannte Datenschleife DS über zwei oder mehrere miteinander vernetzte Server geschlossen wird, bzw. diese Server sich in der Schleife (vergleichbar einer Ringverbindung) befinden;
• - daß für die im Zusammenwirken mit der an einem oder an den Endgerät(en), über welches/welche die Datenschleife DS geschlossen wird (Client Rechner CL und/oder Telefon bzw. Handy, etc.) vorgenommenen Dateneingabe sowie mit der am über die Datenschleife DS angeschalteten Server vorgenommenen Verfremdung/Verschlüsselung des über die Datenschleife geleiteten Prüfkodes (KODES), die Paramter (bzw. der offene Schlüssel) zur Verschlüsselung der Daten nach einem übereinstimmenden Algorithmus für die Verfremdung bzw. Verschlüsselung und Wiederherstellung bzw. Entschlüsselung des Prüfkodes (KODES) über jenen Datenweg (der Ringverbindung) zwischen betreffendem Server und betreffendes Endgerät (das über die Datenschleife DS mit dem Server verbunden ist und welches von der Verschlüsselung/Entschlüsselung betroffen ist) jeweils zugeleitet wird, der mit dem Server eine direkte Verbindung aufweist, ohne daß diese Verbindung über den (die) weiteren Server geleitet werden müßte.

73. Method according to one of the preceding features, in particular by feature 53 , after one of the paragraphs m, n, o, for the purpose of interposing a certification server (eg server II) for determining the delivery, logging and verification of a digital signature in connection with any other (further) server (eg server I), which the process to which the digital signature is to be delivered, via the networking to a client CL with the user handles (eg contains a specific document which is to be electronically signed by the user, the user receives or sends the document, eg an E -Mail receives or sends ditto a FAX, etc., or to control / register a general operation, such as at a barrier, opening a lock, etc.), in particular,

• - That said data loop DS is closed via two or more networked servers, or these servers are in the loop (similar to a ring connection);
• - That for in conjunction with the on one or to the terminal (s), on which / which the data loop DS is closed (client computer CL and / or telephone or mobile phone, etc.) made data entry and with the on on the Data loop DS server switched alienation / encryption of the data loop conducted by the test code (KODES), the paramter (or the open key) for encrypting the data according to a matching algorithm for the alienation and recovery or decryption of the check code (KODES) over that data path (the ring connection) between the relevant server and the relevant terminal (via the data loop DS is connected to the server and which is affected by the encryption / decryption) is respectively forwarded, which has a direct connection with the server, without this connection would have to be routed through the (the) other servers.

1. a) der Benutzer wählt den Zertifizierungsservers (z.B. Server II) über die weitere Datenverbindung (z.B. Telefonverbindung) über seinen Telefonanschluß T-# (oder Handy) an und schließt über den Internetzugang (z.B. einer WEB-Seite auf dem Client- Rechner CL) die genannte Datenschleife DS zu einem allgemeinen Server (z.B. Server I), welcher den Vorgang, zu welchem die digitale Signatur abgegeben werden soll, betrifft, z.B. das zu unterzeichnende Dokument als WEB-Seite erzeugt, etc., als E-Mail empfangen soll, oder einen mechanischen Zugang, wie eine Schranke steuert, etc., (vgl. auch serielle Datenschleife DS=(2) in Fig.la, Fig.lb, bzw. 7); sowie nach Erhalt eines betreffenden Kommandos durch den Benutzer, das der Absicht zur Abgabe einer digitalen Signatur entspricht (z.B. entsprechender Klick auf der WEB-Seite, vgl. „WEBX.com“ des Servers I) prüft der Server I, ob zum Zertifizierungsserver (Server II) eine IT-Verbindung zwischen Server I und Server II besteht, wenn nicht, dann wird sie eröffnet,
2. b) der Zertifizierungsserver (Server II) übersendet dem Endgerät an der Datenschleife DS (hier Handy), in seinem direkten Zugriff zum Endgerät (hier über die sicherere Telefonverbindung T-#) die aktuellen Eingangsparameter zur Verwendung für die Verschlüsselung des vom Zertifizierungsservers (Server II) zum Zwecke der Prüfung des über die Datenschleife DS von ihm ausgesendeten Kodes (KODE 2), den der Zertifizierungsservers (Server II) über die Vernetzung des Zertifizierungsservers (Server II) mit dem allgemeinen Server (Server I) über diesen zurück erhält und dem neben der Verfremdung (zum Zwecke der Verschlüsselung) beim Endgerät der Datenschleife DS, bzw. Handy, im Handy weiterhin die vom Benutzer in das Handy eingegebenen, ausschließlich für den Zertifizierungsservers (Server II) bestimmten Sicherheitsdaten (wie z.B. Pin Nummer, Daten von Fingerabdruck, Stimme, Iris, etc.) zugesetzt werden und durch das Handy (in Bezug zur Übersendung zum Server) weiterhin verschlüsselt über die Datenschleife DS abgesendet werden, wobei b1) der direkte Zugriff für die Übergabe der Eingangsparameter zur Verwendung zur Verschlüsselung der über die Datenschleife DS geleiteten und den Zertifizierungsservers (Server II) betreffenden Daten im Handy erfolgt über die Wahl des hiefür verwendeten Datenweges der beiden die Datenschleife DS schließenden Datenkanäle (hier Telefonnetz T-# und IT-Netz) unmittelbar (direkt) für den Zertifizierungsserver (Server II), jedoch nicht für den allgemeinen Server (Server I), welcher den anderen, über die Datenschleife DS des Handy's geschalteten Datenweg (über das Internet, bzw. den Client Rechner CL) benutzt (vgl. zu 8);
3. c) der Zertifizierungsserver (Server II) prüft den entgegengenommenen Kode unter Verwendung der unter der Datenschleife erhaltenen Telefonnummer T-# in folgender Weise, wobei für das Auffinden des weiterhin über den allgemeinen Server (Server I, der in die Datenschleife DS mit einbezogen ist) geleiteten Kodes (KODE 2) die Rufnummer T-# der zugehörigen Telefonverbindung dieser Datenschleife für die Adressierung (Synchronisation) der Übereinstimmung der WEB-Seite („WEBX.com“), bzw. der Sitzung für ein durch den allgemeinen Server (Server I) angezeigtes Dokument (auf „WEBX.com“) und der vom Benutzer über die Rufnummer T-# der Telefonverbindung, bzw. durch das Handy angewählten WEB-Seite (bzw. Dienstunterstützung) des Zertifizierungsservers (Server II), verwendet ist und folgende Vorgänge ablaufen:
   • c1) Es wird geprüft, ob
     1. I. die in der Datenbank zur über den Kode (KODE 2) festgestellten Telefonnummer (T#) (des Handy's) zugehörige digitale Signatur der erhaltenen korrekt entspricht und
     2. II. der Benutzer zu dem Handy der Telefonnummer T-# gehört (entsprechend einer eingegebenen pin Nummer, einer Fingerabdruck- Stimmen- Iris, oder sonstigen Prüfung des Benutzers),
     3. III. weiters wird unter Benutzung der in Schritt c) genannten Synchronisation zwischen allgemeinen Server (Server I) und Zertifizierungsserver (Server II) das vom Benutzer über den allgemeinen Server ausgewählte Dokument dem Zertifizierungsserver (Server II) übersendet.

74. Method according to one of the preceding features, in particular by feature 53 , after one of the paragraphs m, n, o, for the purpose of interposing a certification server (eg server II) for determining the delivery, logging and verification of a digital signature in connection with any other (further) server (eg server I), which the process to which the digital signature is to be delivered, via the networking to a client CL with the user handles (eg contains a specific document which is to be electronically signed by the user, the user receives or sends the document, eg an E -Mail receives or sends ditto a FAX, etc., or to control / register a general operation, such as at a gate, opening a lock, etc.), especially by the following, if necessary, in the order if necessary also modified method steps:

1. a) the user selects the certification server (eg server II) via the further data connection (eg telephone connection) via his telephone line T- # (or mobile phone) and closes the Internet access (eg a WEB page on the client computer CL) said data loop DS to a general server (eg server I), which relates to the process to which the digital signature is to be delivered, eg the document to be signed as WEB-page generated, etc., should receive as e-mail, or a mechanical access, such as a barrier controls, etc., (see also serial data loop DS = (2) in Fig.la, Fig.lb, or 7 ); as well as after receipt of a respective command by the user, which corresponds to the intention to submit a digital signature (eg corresponding click on the WEB-Site, see "WEBX.com" of the server I) the server I checks if the certification server (server II) there is an IT connection between Server I and Server II, if not then it will be opened,
2. b) the certification server (server II) sends the terminal at the data loop DS (here mobile phone), in his direct access to the terminal (here via the secure telephone connection T- #) the current input parameters for use for encryption of the certification server (Server II ) for the purpose of checking the code sent by the data loop DS (CODE 2 ), the certification server (Server II) on the networking of the certification server (Server II) with the general server (server I) receives back on this and the alienation (for the purpose of encryption) at the terminal of the data loop DS, or mobile phone , in the mobile phone continue to be entered by the user in the phone, only for the certification server (server II) certain security data (such as pin number, data from fingerprint, voice, iris, etc.) are added and by the mobile phone (in relation to the transmission to the server) are further encrypted via the data loop DS sent, b1) the direct access for the transfer of the input parameters for use to encrypt the data loop over the data loop DS and the certification server (server II) data in the mobile phone is about the choice of the hie used data path of the two data loop DS closing data channels (here Telefonn net T- # and IT network) directly (directly) for the certification server (server II), but not for the general server (server I), which the other, via the data loop DS of the mobile's switched data path (via the Internet, or ., the client computer CL) used (see. to 8th );
3. c) the certification server (server II) examines the received code using the telephone number T-# obtained under the data loop in the following manner, using the general server (server I which is included in the data loop DS) for finding the further Guided Codes (CODE 2 ) the telephone number T- # of the associated telephone connection of this data loop for the addressing (synchronization) of the WEB page's compliance ("WEBX.com"), or the session for a document displayed by the general server (server I) " WEBX.com ") and the user's web page (or service support) dialed via the phone number T- # of the telephone connection or service support of the certification server (Server II), and the following operations take place:
   • c1) It is checked whether
     1. I. in the database about the code (CODE 2 ) determined telephone number (T #) (of the mobile phone) associated digital signature of the received corresponds correctly and
     2. II. The user belongs to the cell phone of the telephone number T- # (corresponding to an entered pin number, a fingerprint voice iris, or other check of the user),
     3. III. Furthermore, using the synchronization between general server (server I) and certification server (server II) mentioned in step c), the document selected by the user via the general server is sent to the certification server (server II).

75. Procedure by feature 74 in that, prior to the submission of the digital signature on the certification server (server II) in step b, the user is provided the option of using a comparison service on the certification server (server II) to provide the digital signature of the general server to be provided (Server I) document which the user has loaded on his client computer CL, with the document which, on the basis of the identification numbers T- # (of the general server server I), the certification server (server II) as indicated in c1, III has been sent from the general server (server I), to cancel the delivery of the digital signature upon detection of the mismatch, or to send the signature upon detection of the match.

76. Method by feature 75 in that method step b is extended in order, in addition to the certification server (server II) via the mobile phone, to input further data, which however are exclusively assigned to the general server (server I), using the said data loop DS, in the following procedure :
the general server (server I) sends the terminal to the data loop DS (here mobile phone), in his direct access to the terminal (here the Internet connection via the client CL) the current input parameters for use for the encryption of the general server (server I) for the purpose of checking the code sent by the data loop DS (Code 1 ), the general server (server I) via the networking of the certification server (server II) with the general server (server I) receives back on this and the alienation (for the purpose of encryption) at the terminal of the data loop DS (or. Mobile phone) in the mobile phone continue to be entered by the user into the phone dedicated exclusively for the general server (server I) data and continue to be encrypted by the phone (in relation to the transmission to the server), the direct access for the transfer of input parameters the data in the mobile phone for use in encrypting data routed via the data loop DS and relating to the general server (server I) is selected via the choice of the data path of the two data channels closing the data loop DS, whereby the selected data path is directly (here IT) Net) directly for the general server (server I), but not for the certifi zierungsserver (Server II), which the other, via the data loop DS of the mobile's switched data path (here via the telephone network) uses (see. to 8th ).

77. Method according to one of the features 73 to 76 in that in particular that the method is simplified in that the user forms the data loop DS twice, once by telephone dialing of the general server (server I with data loop 1 ), wherein the data loop DS is then closed via its WEB page and the server (I) the telephone number T- # of the user (via CODE 1 ) and once again by dialing the certification server (Server II, with data loop 2 ), wherein the data loop DS is then closed on its WEB side and the server (II) the phone number T- # of the user (via CODE 2 ) checks, or if necessary, the server I, via its Internet connection IT to the server II in the data loop 2 with, within the data loop 2 also this test (via CODE 1 ) with.

78. Method according to one of the features 73 to 77 in that in particular the certification server (server II) is networked with a central computer for updating its files relating to the comparison samples, the comparison samples still being subject to the usual addressing under the personal data (master data) of the relevant persons under that for the data loop DS at Log in used mobile phone number T # can be addressed.

79. Method according to one of the features 74 to 78 , in particular that on the said data loop (via the phone or the phone number T- # of the user) in the transmission of the on the Loop guided test codes (KODE) and the data corresponding to the digital signature (signature), or the identification of the user (PIC) to the concerned, stored in the general server document, with the encryption data or signature data encryption further, or Check codes concerning the document (eg line by line determination of checksums, ditto checksums, etc.) are sent from the general server to the certification server.

80. Method according to one of the preceding features, characterized in that the method is used for determining the connection connections of a telephone connection made over the Internet, wherein another connection (eg a switched connection over a switched network) for forming said data loop DS is used to determine the connections (telephone numbers) of callers and / or called T- # and the data code (KODE) used for this purpose is routed to check the data loop via the Internet telephone connection.

• - die Nachricht (E-Mail, FAX, etc.) wird vom Absender unter Verwendung der genannten Datenschleife DS, gegebenenfalls in Verbindung mit der Vorrichtung zur Abgabe einer digitalen Signature (Handy) an den Zertifizierungsserver (in beliebiger Form, z.B. auch nur als E-Mail) gesendet, von dem sie nach der Entgegennahme der elektronischen Signature zu diesem Dokument, an den Adressaten in der vom Absender angegebenen Form (z.B. als FAX) weiter gesendet wird, wobei der Zertifizierungsserver eine (gegebenenfalls verschlüsselte) Kopie des Dokumentes und/oder eine Kopie der für das Dokument wichtigen Begleitdaten (Schlüssel, Absender, Adressat, Datum etc.) anlegt und archiviert, bzw. gegebenenfalls dem Absender eine Beglaubigung des Vorganges ausstellt, wobei diese Beglaubigung gegebenenfalls unter Verwendung der Merkmale eines Verfahrens und einer Anordnung/Vorrichtung nach einem der Merkmale 82 bis 93 vorgenommen wird.

81. Method according to one of the features 73 to 80 , in particular by the fact that the delivery of a digital signature to an electronic message sent by an arbitrary computer (Client CL) or to be sent, such as an e-mail or a FAX, etc., as well as the proof of the sending of this message (E- Mail, FAX, etc.) is carried out in the following manner in the following manner:

• the message (e-mail, FAX, etc.) is sent by the sender using said data loop DS, optionally in conjunction with the device for delivering a digital signature (mobile phone) to the certification server (in any form, eg Mail), from which it is sent after receiving the electronic signature to this document, to the addressee in the form specified by the sender (eg as FAX), the certification server sending a (possibly encrypted) copy of the document and / or creates and archives a copy of the accompanying data important to the document (key, sender, addressee, date, etc.) or, if appropriate, issues the sender an authentication of the process, this certification possibly using the features of a method and an arrangement / device one of the features 82 to 93 is made.

82. Method according to one of the features 72 to 81 or in its own application with a certification server, in particular in that the certification server (server II) the received digital signatures and the associated documents and / or their test data, etc., each on an external chip ( 30 ), which is executed according to the prinizip of a chip card, but from a roll ( 70 ), which a corresponding carrier material ( 10 ) with tear-off labels (self-adhesive paper labels 10 respectively. 11 , Plastic film, etc.), the device ( 61 ) for coupling the chip (write-read interface with ohmic and / or capacitive contacts 56 , etc.) is supplied.

83. Device for method by feature 82 , Especially in that the chips each (optionally also a thin plastic card or a ceramic plate for reinforcing material) on a paper roll (thermal paper, etc.), which has a self-adhesive layer and a, a label division corresponding Abrißperforation (punched, etc.) , in each case on each label provided chip (possibly also chip pair with double backup) are applied.

84. Device for method by feature 82 or 83 , in particular in that the device ( 61 ) with the read / write interface ( 56 ) for the chips ( 30 ) continue to have a printer 114 (For example, thermal printer, or even dot-matrix printer, etc.), which imprints a code corresponding to a document (for example, the scanned via an optical hand reader and with the on the chip label 11 labeled can be compared).

85. Arrangement of methods according to one of the features 82 to 84 , in particular that the chip label ( 30 . 10 respectively. 11 ) a seal (eg Notarsiegel 20 ) is glued, in which optionally (if the chip 30 via ohmic contacting and not via capacitive contacting for reading), a window ( 22 ) is provided for placing ohmic contacts.

86. Device for method by feature 85 , characterized in that the ohmic contact for reading the printed on a document on the preferred adhesive strip (or possibly also directly) glued chips by resilient contact pins ( 56 ), which in a cartridge stamp housing ( 50 . 51 ) are housed and by the vertical downward from the user made handle operation ( 50 On the chip) are pressed and housed in the cartridge stamp housing the electronics with a wireless interface to the interface for a computer (server, reader, etc.), wherein if appropriate, the said seal (or label) a mark ( 21 ) for placing the stamp (or see also Mark m for seal and label).

87. Device by feature 86 or in general use for the reading of a chip card according to a chip card, characterized in that the fastening of the resilient contact pins with the entire electronics and the battery holder are mounted in the handle, and that the handle can be removed by unlocking for the purpose of battery replacement.

88. Device by feature 86 or 87 in that, using a comparable mechanism, which in a cartridge stamp generates the rotation of the stamp face (for receiving the ink), instead of the stamp face rotates the rotor of a generator which generates the energy for reading the chip and the data to be sent , wherein the stator is attached to the linearly moved by the giff movement axis point.

89. Device by feature 88 , in particular in that a permanent magnet rotates, which generates the required voltage on a stator coil attached to the longitudinal guide of the mechanism (as a generator coil), which charges a capacitor (eg gold capacitor, etc.) for generating the supply voltage.

90. Device according to one of the features 86 to 89 , characterized in that in addition to the said spring pins for the Kontaktabgriff still a stamp ( 100 ) is provided, which is also linearly moved by the handle movement, said punch fixed (ie, not rotating or with an axis that is driven by the linear movement of the handle, can be rotating).

91. Method according to one of the preceding features for the transmission of a signal corresponding to a digital signature (eg also with integration of said certification server to any other general server), in particular that as another document (or an e-mail, completed form, etc.) an amount represented on the concerned WEB page of the general server has to be signed by the user including the certification server for the purpose stated on this WEB page, this amount being then deducted from the telephone charge or any other fee to be paid by the user ( Internet access, broadcasting fees, etc.) or from a bank account of the user, etc. will be deducted and the type of debit, for example can be chosen on the certification server (where it is also registered).

92. Procedure by feature 91 , or according to one of the preceding features, in which a certification server and a general server are connected to each other via the user's preferred data loop DS (data loop 2) to the terminal (eg mobile phone) via which the user closes the data loop, in that the about the general server to pay for performance is described in a document, which is the certification server when receiving the digital signature (eg via the user's mobile phone) is transmitted, where appropriate, the certification server still sends a name identifier on the data loop DS, the terminal ( eg mobile phone), over which the user closes the data loop, is checked before sending the code corresponding to the digital signature to the certification server.

93. Method with device according to one of the features 81 to 92 or in its own application, especially in that the certified documents are stored encrypted on the certification server, that the key for decrypting the document is stored on the said, provided with a digital signature document (external) chip (eg Document is located under a Notarsiegel, etc.) and which is connected via a respective contacting device (see contact stamp) to the certification server directly or via a data network (eg Internet with preferred data loop DS), the user his authorized signature as a digital signature (eg via a mobile phone and a client CL connection) so that the key can be decrypted using the key stored on the (external) chip.

94. Method according to one of the preceding features, in which a data loop DS is formed into a server via a terminal (for example a mobile phone), the selection / production of this data loop being sent autonomously by the operating function (also by a client computer CL which is still used Control signal, etc.) is registered, characterized in that from the beginning, where this data loop is initialized in the relevant terminal (or mobile phone) an expiry time is started, within which the server must send its name identifier to be recognized by the phone , where, if not the cell phone audibly or visually displays a warning (as opposed to positive acknowledgment when the server is detected).

95. Method according to one of the preceding features, characterized in that the runtime is measured for the code signal transmitted by the server and returned via the data loop DS (as series connection) in order to measure the temporal properties of the connection and (possibly also in conjunction with Other applications) corresponding time compensation measures between the different maturities of different compounds, where appropriate, the timing can also be done on the client CL on the data loop DS as a measured time difference of the duration of a server from these connections to the DS sent codes according to a parallel connection.

96. Device according to one of the features 86 to 90 , in particular in that over the linear movement of the handle ( 50 ) a strobe signal is generated (eg recognized by two successively provided light barriers or capacitive sensors, other sensors, also by an induced in the linear movement of the handle generator voltage G, etc.), which indicates the operation of the handle down and (possibly after a delay time , etc.) in the electronics initialized a test which tests the contacting of the chip and that initialized by this initialization the connection to the computer (to the interface) and the transmitting part, possibly also the receiving part of the chip is turned on, which otherwise, or upon detection, a linear movement of the handle up, is switched off again.

97. Device by feature 96 in that in battery operation, the relevant sensor for detecting a linear movement of the handle down, is pulsed to save power in standby mode, where the punch is not actuated, wherein optionally after switching on the electronics (initialization) the sensor (for later detection shutdown) is always (ie not pulsed) active.

98th feature deleted

99th feature omitted

100th feature deleted

• - bei denen die Koppelung durch beim Client CL vorgenommener Datenschleife Server/Endgeräte (z.B. IT, WEB + Telefon zum/vom Server) als Serienschaltung vorgenommen wird, bei welcher ein vom Server über den Datenweg ausgesendeter Kode (KODE) über die Datenschleife DS (beim Client CL über dessen Endgeräte) dem Server über den anderen Datenweg wieder zurück geleitet wird und beim Server der gesendete Kode (KODE) mit dem zurück erhaltenen auf Übereinstimmung geprüft wird,
• - oder die Datenschleife DS erforderlichenfalls auch als Parallelschaltung vorgenommen wird, bei welcher ein vom Server über beide Datenwege ausgesendeter Kode (KODE) über die beim Client CL vorhandenen Endgeräte geprüft wird, wobei die Prüfung über eine Koppelung der Datenwege (als Datenschleife DS) in einem der Endgeräte (z.B. in einem Handy, etc.) des Benutzers erfolgt,
• - wobei gegebenenfalls in beiden Fällen Serienschaltung und/oder Parallelschaltung weiterhin eine Verfremdung (Verschlüsselung) sowie Wiederherstellung (Entschlüsselung) des Kodes (KODE) bevorzugt ist, um Manipulationen durch Angreifer zu unterbinden,

dadurch besonders, daß das Verfahren als Zugangssicherung zu einer Computersoftware eines internen oder externen Server an Workstations oder Client CL Rechner benutzt wird, wobei bei der Konfiguration der Zugangssicherung anstelle oder zusätzlich zu einem Paßwort, eine Rufnummer T-# als Zugangssicherung konfiguriert wird, welche dem verwendeten Anschluß (z.B. Telefonanschluß T-# eines Handy's) für die genannte Datenschleife DS entspricht, über welche der genannte, vom Server erzeugte KODE (Überwachungskode der Datenschleife DS) geleitet wird (bzw. geleitet werden muß) damit die Zugangsberechtigung erkannt wird.101. The method according to one of the preceding features, or method, in which via another network (telephone network T- #, mobile phone network T- #, radio network, IT phone combined with wired trunk T- # a dialer, etc.) in addition is closed to an IT network (or to an alternative network such as intranet, etc.) a data loop DS on the respective terminals of the networks used, by a sent over the data loop DS code (KODE), the assignment of the terminals concerned subscriber lines T- # to any server processes, such as addresses of WEB pages, or from different server processes to each other, on the port number (eg phone number T- #) of the relevant other network to make, possibly with different options,

• in which the coupling is carried out by the client CL made data loop server / terminal equipment (eg IT, WEB + phone to / from the server) as a series connection, in which a sent from the server via the data path code (KODE) via the data loop DS (at Client CL via its terminals) is routed back to the server via the other data path and checked at the server, the transmitted code (KODE) with the returned to match,
• - If necessary, the data loop DS is also made as a parallel connection, in which a code (KODE) transmitted by the server via both data paths is checked via the terminals present at the client CL, wherein the check is performed via a coupling of the data paths (as data loop DS) in one the end devices (eg in a mobile phone, etc.) of the user,
• - Where appropriate, in both cases series connection and / or parallel circuit further alienation (encryption) and recovery (decryption) of the code (KODE) is preferred to prevent manipulation by attackers,

in that the method is used as access protection to computer software of an internal or external server to workstations or client CL computers, wherein in the configuration of the access protection instead of or in addition to a password, a telephone number T- # is configured as access protection, which the used connection (eg telephone connection T- # of a mobile phone) for said data loop DS corresponds, via which said, generated by the server KODE (monitoring code of the data loop DS) is passed (or must be conducted) so that the access authorization is detected.

102. Method according to the preamble and / or the characterizing part of the feature 101 in that, in particular, that the mobile phone or terminal (also telephone), via which said data loop DS is closed and which can receive an SMS from the server, has a data converter which receives the SMS received from the server into a serial data signal which is transmitted via the link (acoustic, infrared, optical, etc.) of the preferred data loop DS via a corresponding terminal (eg client CL) of the networks used is passed is implemented.

1. a) der Server ruft auf Anforderung (z.B. durch Eingabe über einen Client CL oder eine Work-Station) den Benutzer, der die Datenschleife DS über sein Handy (bzw. Endgerät, Telefon, etc.) bilden möchte an und übersendet an das Handy bzw. Endgerät eine SMS, wobei gegebenenfalls für diese Initialisierung (als Option) vom Benutzer ein Paßwort eingegeben werden muß;
2. b) der Benutzer bildet unter Verwendung der in Merkmal 102 genannten Funktion die Datenschleife DS indem die von der SMS seriell umgesetzten Daten durch die genannte Koppelung, bzw. Bildung der Datenschleife DS an den Server (zurück) gesendet werden, gegebenenfalls unter Verwendung einer Verschlüsselung/Entschlüsselung des Kodes,
3. c) der Server prüft den von ihm erzeugten und über die Datenschleife geleiteten Kode (KODE) und gegebenenfalls noch über die Datenschleife, bzw. weiterhin über das Handy (bzw. Endgerät) eingegebene Daten (persönliche Daten des Benutzers, wie Stimmprofil, Fingerabdruck, Iris Bildaufnahme, etc.), die gegebenenfalls gleichfalls mit dem über die Datenschleife geleiteten Kode (KODE) verschlüsselt sind,
4. d) erkennt der Server sämtliche Daten, die er über die Datenschleife erhalten hat als richtig, dann verwendet er den erkannten Netzanschluß (Tel. Nummer T-# des Handy, etc.) für den vorgesehenen Zweck (Zugangserkennung, Zuordnung von Daten oder auch anderer Serverprozesse, usw.).

103. Method by feature 102 , in particular in that the process proceeds in the following steps:

1. a) the server calls on request (eg by input via a client CL or a workstation) the user who wants to form the data loop DS via his mobile phone (or terminal, telephone, etc.) and sends to the mobile phone or An SMS, where appropriate for this initialization (as an option) by the user a password must be entered;
2. b) the user forms using the in feature 102 said function, the data loop DS by the serially converted by the SMS data by said coupling, or formation of the data loop DS to the server (back) are sent, optionally using an encryption / decryption of the code,
3. c) the server checks the data generated by him and the data loop led code (KODE) and possibly also on the data loop, or continue via the phone (or terminal) entered data (personal data of the user, such as voice profile, fingerprint, iris Image acquisition, etc.), which may also be encrypted with the code (KODE) passed over the data loop,
4. d) the server recognizes all the data it has received about the data loop as correct, then it uses the recognized network connection (phone number T- # of the mobile phone, etc.) for the intended purpose (access detection, assignment of data or other Server processes, etc.).

104. Procedure by feature 103 in that, in particular, that the SMS sent to the user's terminal or mobile phone contains a message indicating to the user the use of the received SMS to form the data loop DS, the server sending to this SMS the check code (KODE) adds, optionally separated by a control character sequence, and further optionally when recognizing a character or control character (sender phone number, etc.), which recognizes the SMS as a used for the preferred data loop DS CODE, this code (KODE) does not display as text (Option), or possibly an encryption before forwarding via the coupling interface of the data interface with makes (option).

• - es wird eine Kameraoptik geringer Tiefenschärfe verwendet,
• - es wird der über die Kamera (vom Finger) aufgenommene Fingerabdruck zu unterschiedlichen Abständen des Fingers von der Aufnahmeoptik aufgenommen, wobei durch die geringe Tiefenschärfe und der Krümmung des Fingers die Aufnahmen jeweils an unterschiedlicher Stelle (z.B. von innen nach außen, etc.) unterschiedliche scharfe und unscharfe Bildflächen aufweisen,
• - es wird die Abstandsänderung, bzw. der Abstand des Fingers in Bezug zur Aufnahmeoptik gemessen und mit den scharfen bzw. unscharfen Stellen des Bildes so abgeglichen, daß daraus auf die Krümmung des Fingers geschlossen werden kann,
• - die Krümmung des Fingers wird bei der Bewertung der Fingerabdrücke mit berücksichtigt.

105. Method according to one of the preceding features (possibly also only according to the preamble thereof), in particular in that the following method is used for the purpose of checking a fingerprint:

• - It is used a camera optics shallow depth of field,
• - It is recorded on the camera (finger) recorded fingerprint at different distances from the finger of the receiving optics, with the shallow depth of field and the curvature of the finger, the recordings at different locations (eg from inside to outside, etc.) different have sharp and blurred image areas,
• - It is the change in distance, or the distance of the finger relative to the receiving optics measured and compared with the sharp or blurred areas of the image so that it can be concluded that the curvature of the finger,
• - the curvature of the finger is taken into account in the evaluation of the fingerprints.

106. Arrangement for carrying out a method by feature 105 , In particular, that a movable against the receiving optics (sliding) transparent support surface is provided for the respective finger over which the fingerprint is recorded and that the displacement of the surface is measured by a sensor (eddy current sensor, or optical gap measurement, reflection measurement, etc. ).

107. Arrangement by feature 106 , In particular, that the optical system, which receives the fingerprint, is directed to the receiving surface of a recording chip already present for a camera via a mirror system, wherein by cover slide either the image of the fingerprint or on the Camera optics recorded image on the image capture chip only (by darkening the other image) is projected.

108. Method by feature 105 , optionally with arrangement according to feature 106 , characterized in that the server transmits to the mobile phone an instruction (eg via the display) which indicates to the user whether he has (slowly) to press his finger tighter or less firmly against the receiving surface (against its travel), the server (Movements obtained over the measured displacement path) tests together with the resulting over the image blur and the so over several images only at different points sharp parts composed to check on the one hand the fingerprints on the other hand, to verify the authenticity that the input of the fingerprint on a real finger and in real time (to the instructions given by the server).

109. Arrangement for recording an iris on a mobile phone with a digital camera, in particular with an optical system to enlarge an image section by changing the distance between the lens and the image-taking surface, especially through a small mirror in which the user can see himself in a small image section, wherein the user holds the phone so that his eye is visible in the mirror, wherein the mirror is adjusted so that the image detail displayed in the center of the mirror is taken enlarged by the camera to record the iris as a camera image.

• - die Reaktionszeit vom Zeitpunkt der Ausgabe der visuell und/oder akustisch ausgegebenen Aufforderung bis zur Echtzeit Detektierung der über eine Vidoeoaufnahme des Benutzers dokumentierten Bewegung mißt,
• - und weiterhin über eine Bildanalyse feststellt, ob bei dem Videobild die Bewegungen nahtlos übergehen,
• - sowie die übliche Auswertung in Bezug auf die Erkennungsdatei durch Bildanalyse der Merkmale der Iris vorgenommen werden.

110. Arrangement for recording an iris on a mobile phone with a digital camera, in particular in that the server sends a message to the mobile phone, which indicates to the user when he should wink with his eyes, so that the server the authenticity of the test in addition to the stored image pattern can be verified by

• measuring the reaction time from the time the visually and / or acoustically issued prompt is issued to the real-time detection of the movement documented via a user's video recording;
• - and continue to determine via an image analysis, whether the video image, the movements seamlessly,
• - As well as the usual evaluation with respect to the recognition file by image analysis of the characteristics of the iris are made.

111. Arrangement according to one of the features 105 to 110 , or for image capture for sampling personal characteristics for a method according to any one of the features 101 to 104 (possibly also only after the generic term thereof), in particular in that the chip used for image recording or video recording is to be extracted from which features for the recognition of the personal data of the user (the image data being transmitted to the or a server for checking) in that said code sent via the preferred data loop DS is used for encryption of the data output from the chip directly or in further connection with open key transmitted via one of said networks, wherein the encrypted image data are already read directly from the chip around the feed to avoid false image data as well as by the used for the encryption (eg as a parameter), generated by the server and sent over the data loop code (KODE), which may continue encrypted (sent by the server), it is ensured that the image data for this Time where you d he server receives, actually by the chip (for the picture admission) are taken up.

112. Method according to one of the preceding features, in particular according to the preamble of the feature 101 , with a chip for a particular terminal via which the data loop DS is closed (eg a networked with an IT network chip card read-write device) and via which special data are entered (eg the chip or microcontroller of the device, via which the interface to Chip of the chip card is produced), thereby in particular that the chip is used to the said sent over the preferred data loop DS code for encryption of the data output from the chip directly or in further connection with over one of said networks transmitted open key, said encrypted data are already read directly from the chip in order to avoid the feeding of incorrect data (including signatures, etc.) as well as by the encryption (eg as a parameter) used by the server and sent over the data loop code (KODE), the possibly further encrypted (from the server) ges ends, it is ensured that the data has actually been generated by the chip at this point in time where the server receives it.

113. Method by feature 101 or only after the generic term of the characteristic 101 , wherein a mobile phone on request by the user, eg by entering a name or password, or Also directly a telephone number T- #, from a server concerned (for example, the page for logging on the client computer CL or a workstation represents) an SMS is sent directly, in particular, that the SMS generated by the server, or sent (possibly encrypted sent) code number KODE corresponds and is taken over the WEB camera of the client computer CL in the client computer as an image and the server is transmitted, where appropriate in the client computer CL via an appropriate software (eg Java applet, etc. ) an alienation, or encryption of the code before sending back to the server (which is decrypted in the server before the code comparison).

114. Method by feature 102 respectively. 103 or by characteristic 113 , In particular, that with the sending of the SMS from the server a time-out is started after the expiration of the acquisition of the data contained in the SMS sent by the server code KODE in the data loop DS (or for evaluation by the server) no longer possible is.

115. Method according to one of the preceding features, in particular (also) according to the (standalone) preamble of the feature 101 in that in particular that said parameters ($ S1, $ S2 .... $ Sn) are used for the encryption of the code (DS) sent via the data loop DS and used to identify the loop (KODE's) in the terminals (eg mobile phone), in each case via the other data channel than that via which the code (KODE) is transmitted (eg server via IT → client CL via DS coupling → mobile → T- # → server as one direction, or server via T- # → Mobile via DS coupling → Client CL → server as a different direction, ditto possibly also vice versa).

116. Method by feature 115 in that, in particular, that said parameters ($ S1, $ S2 .... $ Sn) for the encryption in the terminals (eg mobile phone) of the code sent via the data loop DS and used to identify the loop (KODE's) further comprise encrypted information controlling the association of codeblocks (characters, etc.) pertaining to the transmitted parameters ($ S1, $ S2 .... $ Sn) to the code elements (KODEs) used to identify the loop (sent by the server) (wordwise, also bitwise, etc.).

117. Procedure by feature 115 or 116 in that, in particular, that said parameters ($ S1, $ S2 .... $ Sn) for the encryption in the terminals (eg mobile phone) of the code sent via the data loop DS and used to identify the loop (KODE's) Furthermore, encoded information containing the assignment of the codeblocks (characters, etc.) corresponding to the transmitted parameter ($ S1, $ S2 .... $ Sn) to the respective current transmission direction of the code elements used for identification of the loop (sent by the server) (KODE's) control (wordwise, also bitwise, etc.) the respective terminals (eg mobile phone and client CL) show, or (in accordance with the server with), where appropriate, at full duplex in the direction not shown continues to be a dummy Code (dummy code) can be transmitted (which is not rated) to deceive an attacker.

118. Method according to one of the features 115 to 117 , in particular in that the said parameters ($ S1, $ S2 .... $ Sn) for the encryption carried out in the terminals (eg mobile phone) and optionally in the server further contain (encrypted) control information indicating whether they are in the Server or in one of the terminals according to a predetermined algorithm (possibly also at times that are determined by random generator) have been generated independently, so that using this control information provided in the data loop DS devices (or servers, etc.) on it and address the associated decryption algorithms.

119. Method according to one of the features 115 to 118 , Especially in that the said parameters ($ S1, $ S2 .... $ Sn) for the in the terminals (eg mobile phone) and possibly in the server made encryption alternately via different data paths of the data loop DS (telephone T #, ditto IT connection or intranet connection, etc.) to the respective devices located in the data loop DS (terminals such as mobile phone, telephone, client CL, server, also several networked servers, etc.) are sent and decoded according to a secret protocol (for single detection of $ S1, $ S2 .... $ Sn, etc.)

120. Method according to one of the preceding features, characterized in that a cell phone used for the formation of the data loop or a similar device, etc. with one or more of said inputs of personal user features such as fingerprint recognition, iris recognition, voice recognition, etc., whose Data is secured by the preferred measures within the preferred data loop DAS, used as a passport or passport (driver's license, etc.).

121. Headphones for a mobile phone or for general use, characterized in that the headphones are fixed directly inside or on extended earmuffs of a headband.

122. Headband with headphones by feature 121 , In particular, that an RF interface to the power supply (amplifier) of the headphones is provided, said interface (with battery holder) is fixed to the rear center of the headband.

123. Feature omitted.

124. Feature deleted.

125th Feature deleted.

126th Feature deleted.

127th feature deleted.

128th Feature deleted.

129. Feature deleted.

130th Feature deleted.

• - bei denen die Koppelung durch beim Client CL vorgenommener Datenschleife Server/Endgeräte (z.B. IT, WEB + Telefon zum/vom Server) als Serienschaltung vorgenommen wird, bei welcher ein vom Server über den Datenweg ausgesendeter Kode (KODE) über die Datenschleife DS (beim Client CL über dessen Endgeräte) dem Server über den anderen Datenweg wieder zurück geleitet wird und beim Server der gesendete Kode (KODE) mit dem zurück erhaltenen auf Übereinstimmung geprüft wird,
• - oder die Datenschleife DS erforderlichenfalls auch als Parallelschaltung vorgenommen wird, bei welcher ein vom Server über beide Datenwege ausgesendeter Kode (KODE) über die beim Client CL vorhandenen Endgeräte geprüft wird, wobei die Prüfung über eine Koppelung der Datenwege (als Datenschleife DS) in einem der Endgeräte (z.B. in einem Handy, etc.) des Benutzers erfolgt,
• - wobei gegebenenfalls in beiden Fällen Serienschaltung und/oder Parallelschaltung weiterhin eine Verfremdung (Verschlüsselung) sowie Wiederherstellung (Entschlüsselung) des Kodes (KODE) bevorzugt ist, um Manipulationen durch Angreifer zu unterbinden,

dadurch besonders, daß das Verfahren als Zugangssicherung zu einer Computersoftware eines internen oder externen Server an Workstations oder Client CL Rechner benutzt wird, wobei bei der Konfiguration der Zugangssicherung anstelle oder zusätzlich zu einem Paßwort, eine Rufnummer T-# als Zugangssicherung konfiguriert wird, welche dem verwendeten Anschluß (z.B. Telefonanschluß T-# eines Handy's) für die genannte Datenschleife DS entspricht, über welche der genannte, vom Server erzeugte KODE (Überwachungskode der Datenschleife DS) geleitet wird (bzw. geleitet werden muß) damit die Zugangsberechtigung erkannt wird.131. Method according to one of the preceding features, or method, in which via a further network (telephone network T- #, mobile phone network T- #, radio network, IT telephone combined with wired trunk T- # a dialing device, etc.) in addition is closed to an IT network (or to an alternative network such as intranet, etc.) a data loop DS on the respective terminals of the networks used, by a sent over the data loop DS code (KODE), the assignment of the terminals concerned subscriber lines T- # to any server processes, such as addresses of WEB pages, or from different server processes to each other, on the port number (eg phone number T- #) of the relevant other network to make, possibly with different options,

• in which the coupling is carried out by the client CL made data loop server / terminal equipment (eg IT, WEB + phone to / from the server) as a series connection, in which a sent from the server via the data path code (KODE) via the data loop DS (at Client CL via its terminals) is routed back to the server via the other data path and checked at the server, the transmitted code (KODE) with the returned to match,
• - If necessary, the data loop DS is also made as a parallel connection, in which a code (KODE) transmitted by the server via both data paths is checked via the terminals present at the client CL, wherein the check is performed via a coupling of the data paths (as data loop DS) in one the end devices (eg in a mobile phone, etc.) of the user,
• - Where appropriate, in both cases series connection and / or parallel circuit further alienation (encryption) and recovery (decryption) of the code (KODE) is preferred to prevent manipulation by attackers,

in that the method is used as access protection to computer software of an internal or external server to workstations or client CL computers, wherein in the configuration of the access protection instead of or in addition to a password, a telephone number T- # is configured as access protection, which the used connection (eg telephone connection T- # of a mobile phone) for said data loop DS corresponds, via which said, generated by the server KODE (monitoring code of the data loop DS) is passed (or must be conducted) so that the access authorization is detected.

132. Method according to the preamble and / or the characterizing part of the feature 131 in that, in particular, that the mobile phone or terminal (also telephone), via which said data loop DS is closed and which can receive an SMS from the server, has a data converter which receives the SMS received from the server into a serial data signal which is transmitted via the link (acoustic, infrared, optical, etc.) of the preferred data loop DS via a corresponding terminal (eg client CL) of the networks used is passed is implemented.

• e) der Server ruft auf Anforderung (z.B. durch Eingabe über einen Client CL oder eine Work-Station) den Benutzer, der die Datenschleife DS über sein Handy (bzw. Endgerät, Telefon, etc.) bilden möchte an und übersendet an das Handy bzw. Endgerät eine SMS, wobei gegebenenfalls für diese Initialisierung (als Option) vom Benutzer ein Paßwort eingegeben werden muß;
• f) der Benutzer bildet unter Verwendung der in Merkmal 132 genannten Funktion die Datenschleife DS indem die von der SMS seriell umgesetzten Daten durch die genannte Koppelung, bzw. Bildung der Datenschleife DS an den Server (zurück) gesendet werden, gegebenenfalls unter Verwendung einer Verschlüsselung/Entschlüsselung des Kodes,
• g) der Server prüft den von ihm erzeugten und über die Datenschleife geleiteten Kode (KODE) und gegebenenfalls noch über die Datenschleife, bzw. weiterhin über das Handy (bzw. Endgerät) eingegebene Daten (persönliche Daten des Benutzers, wie Stimmprofil, Fingerabdruck, Iris Bildaufnahme, etc.), die gegebenenfalls gleichfalls mit dem über die Datenschleife geleiteten Kode (KODE) verschlüsselt sind,
• h) erkennt der Server sämtliche Daten, die er über die Datenschleife erhalten hat als richtig, dann verwendet er den erkannten Netzanschluß (Tel. Nummer T-# des Handy, etc.) für den vorgesehenen Zweck (Zugangserkennung, Zuordnung von Daten oder auch anderer Serverprozesse, usw.).

133. Procedure by feature 132 , in particular in that the process proceeds in the following steps:

• e) the server calls on request (eg by input via a client CL or a workstation) the user who wants to form the data loop DS via his mobile phone (or terminal, telephone, etc.) and sends to the mobile phone or An SMS, where appropriate for this initialization (as an option) by the user a password must be entered;
• f) the user forms using the in feature 132 said function, the data loop DS by the serially converted by the SMS data by said coupling, or formation of the data loop DS to the server (back) are sent, optionally using an encryption / decryption of the code,
• g) the server checks the data generated by him and the data loop conducted code (KODE) and possibly also on the data loop, or continue via the phone (or terminal) entered data (personal data of the user, such as voice profile, fingerprint, iris Image acquisition, etc.), which may also be encrypted with the code (KODE) passed over the data loop,
• h) the server recognizes all data that it has received about the data loop as correct, then it uses the recognized network connection (phone number T- # of the mobile phone, etc.) for the intended purpose (access detection, assignment of data or other Server processes, etc.).

134. Procedure by feature 133 in that, in particular, that the SMS sent to the user's terminal or mobile phone contains a message indicating to the user the use of the received SMS to form the data loop DS, the server sending to this SMS the check code (KODE) adds, optionally separated by a control character sequence, and further optionally when recognizing a character or control character (sender phone number, etc.), which recognizes the SMS as a used for the preferred data loop DS CODE, this code (KODE) does not display as text (Option), or possibly an encryption before forwarding via the coupling interface of the data interface with makes (option).

• - es wird eine Kameraoptik geringer Tiefenschärfe verwendet,
• - es wird der über die Kamera (vom Finger) aufgenommene Fingerabdruck zu unterschiedlichen Abständen des Fingers von der Aufnahmeoptik aufgenommen, wobei durch die geringe Tiefenschärfe und der Krümmung des Fingers die Aufnahmen jeweils an unterschiedlicher Stelle (z.B. von innen nach außen, etc.) unterschiedliche scharfe und unscharfe Bildflächen aufweisen,
• - es wird die Abstandsänderung, bzw. der Abstand des Fingers in Bezug zur Aufnahmeoptik gemessen und mit den scharfen bzw. unscharfen Stellen des Bildes so abgeglichen, daß daraus auf die Krümmung des Fingers geschlossen werden kann,
• - die Krümmung des Fingers wird bei der Bewertung der Fingerabdrücke mit berücksichtigt.

135. Method according to one of the preceding features (possibly also only according to its preamble), in particular in that the following method is used for the purpose of checking a fingerprint:

• - It is used a camera optics shallow depth of field,
• - It is recorded on the camera (finger) recorded fingerprint at different distances from the finger of the receiving optics, with the shallow depth of field and the curvature of the finger, the recordings at different locations (eg from inside to outside, etc.) different have sharp and blurred image areas,
• - It is the change in distance, or the distance of the finger relative to the receiving optics measured and compared with the sharp or blurred areas of the image so that it can be concluded that the curvature of the finger,
• - the curvature of the finger is taken into account in the evaluation of the fingerprints.

136. Arrangement for carrying out a method by feature 135 , In particular, that a movable against the receiving optics (sliding) transparent support surface is provided for the respective finger over which the fingerprint is recorded and that the displacement of the surface is measured by a sensor (eddy current sensor, or optical gap measurement, reflection measurement, etc. ).

137. Arrangement by feature 136 , In particular, that the optics, which receives the fingerprint, is directed to the receiving surface of a recording camera anyway existing for a camera, whereby by cover slide either the image of the fingerprint or an image taken on the camera optics on the image capture chip exclusively (by Darkening of the other image) is projected.

138. Method by feature 135 , optionally with arrangement according to feature 136 , characterized in that the server transmits to the mobile phone an instruction (eg via the display) which indicates to the user whether he has (slowly) to press his finger tighter or less firmly against the receiving surface (against its travel), the server (Movements obtained over the measured displacement path) tests together with the blur resulting over the image section and thus over several Pictures only in different places sharp picture parts together, on the one hand to check the fingerprints on the other hand, to verify the authenticity that the input of the fingerprint on a real finger and in real time (to the instructions given by the server).

139. Arrangement for recording an iris on a mobile phone with a digital camera, in particular with an optical system to enlarge an image section by changing the distance between the lens and the image-taking surface, especially through a small mirror in which the user can see himself in a small image section, wherein the user holds the phone so that his eye is visible in the mirror, wherein the mirror is adjusted so that the image detail displayed in the center of the mirror is taken enlarged by the camera to record the iris as a camera image.

• - die Reaktionszeit vom Zeitpunkt der Ausgabe der visuell und/oder akustisch ausgegebenen Aufforderung bis zur Echtzeit Detektierung der über eine Vidoeoaufnahme des Benutzers dokumentierten Bewegung mißt,
• - und weiterhin über eine Bildanalyse feststellt, ob bei dem Videobild die Bewegungen nahtlos übergehen,
• - sowie die übliche Auswertung in Bezug auf die Erkennungsdatei durch Bildanalyse der Merkmale der Iris vorgenommen werden.

140. Arrangement for recording an iris on a mobile phone with a digital camera, in particular in that the server sends a message to the mobile phone, which indicates to the user when he should wink with his eyes, so that the server the authenticity of the test in addition to the stored image pattern can be verified by

• measuring the reaction time from the time the visually and / or acoustically issued prompt is issued to the real-time detection of the movement documented via a user's video recording;
• - and continue to determine via an image analysis, whether the video image, the movements seamlessly,
• - As well as the usual evaluation with respect to the recognition file by image analysis of the characteristics of the iris are made.

141. Arrangement according to one of the features 135 to 140 , or for image capture for sampling personal characteristics for a method according to any one of the features 131 to 134 (possibly also only after the generic term thereof), in particular in that the chip used for image recording or video recording is to be extracted from which features for the recognition of the personal data of the user (the image data being transmitted to the or a server for checking) in that said code sent via the preferred data loop DS is used for encryption of the data output from the chip directly or in further connection with open key transmitted via one of said networks, wherein the encrypted image data are already read directly from the chip around the feed to avoid false image data as well as by the used for the encryption (eg as a parameter), generated by the server and sent over the data loop code (KODE), which may continue encrypted (sent by the server), it is ensured that the image data for this Time where you d he server receives, actually by the chip (for the picture admission) are taken up.

142. Method according to one of the preceding features, in particular according to the preamble of the feature 131 , with a chip for a particular terminal via which the data loop DS is closed (eg a networked with an IT network chip card read-write device) and via which special data are entered (eg the chip or microcontroller of the device, via which the interface to Chip of the chip card is produced), thereby in particular that the chip is used to the said sent over the preferred data loop DS code for encryption of the data output from the chip directly or in further connection with over one of said networks transmitted open key, said encrypted data are already read directly from the chip in order to avoid the feeding of incorrect data (including signatures, etc.) as well as by the encryption (eg as a parameter) used by the server and sent over the data loop code (KODE), the possibly further encrypted (from the server) ges ends, it is ensured that the data has actually been generated by the chip at this point in time where the server receives it.

143. Method by feature 131 or only after the generic term of the characteristic 131 , wherein a mobile phone on request by the user, for example by entering a name or password, or even directly a phone number T- #, from a server concerned (for example, the page for logging on the client computer CL or a workstation) an SMS is sent directly, in particular, that the SMS generated by the server, or sent (possibly encrypted sent) code number KODE corresponds and is taken over the WEB camera of the client computer CL in the client computer as a picture and transmitted to the server is, where appropriate, in the client computer CL via an appropriate software (eg Java applet, etc.) alienation, or encryption of the code before sending back to the server (which is decrypted in the server before the code comparison again).

144. Procedure by feature 132 respectively. 133 or by characteristic 143 , In particular, that with the sending of the SMS from the server a time-out is started after the expiration of the acquisition of the data contained in the SMS sent by the server code KODE in the data loop DS (or for evaluation by the server) no longer possible is.

145. Method according to one of the preceding features, in particular (also) according to the (standalone) preamble of the feature 131 in that in particular that said parameters ($ S1, $ S2 .... $ Sn) are used for the encryption of the code (DS) sent via the data loop DS and used to identify the loop (KODE's) in the terminals (eg mobile phone), in each case via the other data channel than that via which the code (KODE) is transmitted (eg server via IT → client CL via DS coupling → mobile → T- # → server as one direction, or server via T- # → Mobile via DS coupling → Client CL → server as a different direction, ditto possibly also vice versa).

146. Method by feature 145 in that, in particular, that said parameters ($ S1, $ S2 .... $ Sn) for the encryption in the terminals (eg mobile phone) of the code sent via the data loop DS and used to identify the loop (KODE's) further comprise encrypted information controlling the association of codeblocks (characters, etc.) pertaining to the transmitted parameters ($ S1, $ S2 .... $ Sn) to the code elements (KODEs) used to identify the loop (sent by the server) (wordwise, also bitwise, etc.).

147. Procedure by feature 145 or 146 in that, in particular, that said parameters ($ S1, $ S2 .... $ Sn) for the encryption in the terminals (eg mobile phone) of the code sent via the data loop DS and used to identify the loop (KODE's) Furthermore, encoded information containing the assignment of the codeblocks (characters, etc.) corresponding to the transmitted parameter ($ S1, $ S2 .... $ Sn) to the respective current transmission direction of the code elements used for identification of the loop (sent by the server) (KODE's) control (wordwise, also bitwise, etc.) the respective terminals (eg mobile phone and client CL) show, or (in accordance with the server with), where appropriate, at full duplex in the direction not shown continues to be a dummy Code (dummy code) can be transmitted (which is not rated) to deceive an attacker.

148. Method according to one of the features 145 to 147 , in particular in that the said parameters ($ S1, $ S2 .... $ Sn) for the encryption carried out in the terminals (eg mobile phone) and optionally in the server further contain (encrypted) control information indicating whether they are in the Server or in one of the terminals according to a predetermined algorithm (possibly also at times that are determined by random generator) have been generated independently, so that using this control information provided in the data loop DS devices (or servers, etc.) on it and address the associated decryption algorithms.

149. Method according to one of the features 145 to 148 , Especially in that the said parameters ($ S1, $ S2 .... $ Sn) for the in the terminals (eg mobile phone) and possibly in the server made encryption alternately via different data paths of the data loop DS (telephone T #, ditto IT connection or intranet connection, etc.) to the respective devices located in the data loop DS (terminals such as mobile phone, telephone, client CL, server, also several networked servers, etc.) are sent and decoded according to a secret protocol (for single detection of $ S1, $ S2 .... $ Sn, etc.)

150. The method according to one of the preceding features, characterized in that a cell phone used for the formation of the data loop or a similar device, etc. with one or more of said inputs of personal user features such as fingerprint recognition, iris recognition, voice recognition, etc., whose Data is secured by the preferred measures within the preferred data loop DAS, used as a passport or passport (driver's license, etc.).

151. Method according to one of the preceding features or according to the preamble of the feature 131 , Especially in that the duration of the user (or client CL) by a corresponding coupling between the devices concerned (eg client computer CL and telephone, or mobile phone or possibly between two mobile phones, etc.) measured data path measured over the Koppelweg is evaluated and as a criterion whether in this Koppelweg an unauthorized intermediary network is located (the server then terminates if necessary, if so).

1. a) die Messung der Laufzeit mit einer im Datenempfänger (E) vorgesehenen Zeitmeßeinrichtung erfolgt, bezogen auf einen dem Datenempfänger (E) bekannten Zeitpunkt, wann das Signal vom Datensender (S) abgesendet wird,
2. b) oder die Messung der Laufzeit mit einer im Datensender (S) vorgesehenen Zeitmeßeinrichtung erfolgt, bezogen auf ein Quittungssignal, welches der Datenempfänger (E) bei Erhalt des Signals dem Datensender (S) übersendet.

152. Procedure by feature 151 , in particular in that

1. a) the measurement of the transit time takes place with a time measuring device provided in the data receiver (E), based on a time known to the data receiver (E) when the signal is sent by the data transmitter (S),
2. b) or the measurement of the transit time with a time transmitter provided in the data transmitter (S) takes place, based on an acknowledgment signal, which the data receiver (E) transmits on receipt of the signal to the data transmitter (S).

153. Method by feature 152 , Characteristic a, characterized in that the clock of the data transmitter (S) by a data receiver (E) via the bidirectional data path of the coupling path (or the coupling path) to the data transmitter (S) sent out set signal coincident with the clock of the data receiver (E ), wherein, due to the duration of the coupling path (or the Koppelweges) the clock of the data receiver (E) at this runtime then opposite the clock of the data transmitter (S) and that via a protocol agreement in the data transmitter (S) and in the Data receiver (E) a time is agreed at which the data transmitter (S) to the data receiver (E) sends a measurement signal (or data) whose time of arrival at the data receiver (E) in the data receiver (E) relative to the previously by protocol agreed dispatch time of the data transmitter (S) is measured as the transit time for the round trip of the data over the coupling path (or the coupling path).

154. Procedure by feature 152 Characteristic b, characterized in that the data receiver (E) sends the data transmitter (S) an acknowledgment signal over the coupling path (or via the coupling path) upon arrival of the data, by means of which a time measurement made in the data transmitter (S) the acknowledgment signal measures the transit time for the outward and return journey of the data over the coupling path (or the coupling path).

155. Headphones for a mobile phone or for general use, in particular in that the headphones are fixed directly inside or on extended earmuffs of a headband.

156. Headband with headphones by feature 151 , In particular, that an RF interface to the power supply (amplifier) of the headphones is provided, said interface (with battery holder) is fixed to the rear center of the headband.

157. Feature deleted.

158. Feature omitted.

159. Feature deleted.

160th Feature deleted.

• - bei denen die Koppelung durch beim Client CL vorgenommener Datenschleife Server/Endgeräte (z.B. IT, WEB + Telefon zum/vom Server) als Serienschaltung vorgenommen wird, bei welcher ein vom Server über den Datenweg ausgesendeter Kode (KODE) über die Datenschleife DS (beim Client CL über dessen Endgeräte) dem Server über den anderen Datenweg wieder zurück geleitet wird und beim Server der gesendete Kode (KODE) mit dem zurück erhaltenen auf Übereinstimmung geprüft wird,
• - oder die Datenschleife DS erforderlichenfalls auch als Parallelschaltung vorgenommen wird, bei welcher ein vom Server über beide Datenwege ausgesendeter Kode (KODE) über die beim Client CL vorhandenen Endgeräte geprüft wird, wobei die Prüfung über eine Koppelung der Datenwege (als Datenschleife DS) in einem der Endgeräte (z.B. in einem Handy, etc.) des Benutzers erfolgt,
• - wobei gegebenenfalls in beiden Fällen Serienschaltung und/oder Parallelschaltung weiterhin eine Verfremdung (Verschlüsselung) sowie Wiederherstellung (Entschlüsselung) des Kodes (KODE) bevorzugt ist, um Manipulationen durch Angreifer zu unterbinden,

dadurch besonders, daß das Verfahren als Zugangssicherung zu einer Computersoftware eines internen oder externen Server an Workstations oder Client CL Rechner benutzt wird, wobei bei der Konfiguration der Zugangssicherung anstelle oder zusätzlich zu einem Paßwort, eine Rufnummer T-# als Zugangssicherung konfiguriert wird, welche dem verwendeten Anschluß (z.B. Telefonanschluß T-# eines Handy's) für die genannte Datenschleife DS entspricht, über welche der genannte, vom Server erzeugte KODE (Überwachungskode der Datenschleife DS) geleitet wird (bzw. geleitet werden muß) damit die Zugangsberechtigung erkannt wird.161. Method according to one of the preceding features, or method, in which via a further network (telephone network T- #, mobile phone network T- #, radio network, IT telephone combined with wired trunk T- # a dialing device, etc.) in addition is closed to an IT network (or to an alternative network such as intranet, etc.) a data loop DS on the respective terminals of the networks used, by a sent over the data loop DS code (KODE), the assignment of the terminals concerned subscriber lines T- # to any server processes, such as addresses of WEB pages, or from different server processes to each other, on the port number (eg phone number T- #) of the relevant other network to make, possibly with different options,

• in which the coupling is carried out by the client CL made data loop server / terminal equipment (eg IT, WEB + phone to / from the server) as a series connection, in which a sent from the server via the data path code (KODE) via the data loop DS (at Client CL via its terminals) is routed back to the server via the other data path and checked at the server, the transmitted code (KODE) with the returned to match,
• - If necessary, the data loop DS is also made as a parallel connection, in which one of the server via both data paths emitted code (KODE) on the existing client CL Tested terminals, the check is made via a coupling of the data paths (as data loop DS) in one of the terminals (eg in a mobile phone, etc.) of the user,
• - Where appropriate, in both cases series connection and / or parallel circuit further alienation (encryption) and recovery (decryption) of the code (KODE) is preferred to prevent manipulation by attackers,

in that the method is used as access protection to computer software of an internal or external server to workstations or client CL computers, wherein in the configuration of the access protection instead of or in addition to a password, a telephone number T- # is configured as access protection, which the used connection (eg telephone connection T- # of a mobile phone) for said data loop DS corresponds, via which said, generated by the server KODE (monitoring code of the data loop DS) is passed (or must be conducted) so that the access authorization is detected.

162. Method according to the preamble and / or the characterizing part of the feature 161 in that, in particular, that the mobile phone or terminal (also telephone), via which said data loop DS is closed and which can receive an SMS from the server, has a data converter which receives the SMS received from the server into a serial data signal which is transmitted via the link (acoustic, infrared, optical, etc.) of the preferred data loop DS via a corresponding terminal (eg client CL) of the networks used is passed is implemented.

• i) der Server ruft auf Anforderung (z.B. durch Eingabe über einen Client CL oder eine Work-Station) den Benutzer, der die Datenschleife DS über sein Handy (bzw. Endgerät, Telefon, etc.) bilden möchte an und übersendet an das Handy bzw. Endgerät eine SMS, wobei gegebenenfalls für diese Initialisierung (als Option) vom Benutzer ein Paßwort eingegeben werden muß;
• j) der Benutzer bildet unter Verwendung der in Merkmal 162 genannten Funktion die Datenschleife DS indem die von der SMS seriell umgesetzten Daten durch die genannte Koppelung, bzw. Bildung der Datenschleife DS an den Server (zurück) gesendet werden, gegebenenfalls unter Verwendung einer Verschlüsselung/Entschlüsselung des Kodes,
• k) der Server prüft den von ihm erzeugten und über die Datenschleife geleiteten Kode (KODE) und gegebenenfalls noch über die Datenschleife, bzw. weiterhin über das Handy (bzw. Endgerät) eingegebene Daten (persönliche Daten des Benutzers, wie Stimmprofil, Fingerabdruck, Iris Bildaufnahme, etc.), die gegebenenfalls gleichfalls mit dem über die Datenschleife geleiteten Kode (KODE) verschlüsselt sind,
• l) erkennt der Server sämtliche Daten, die er über die Datenschleife erhalten hat als richtig, dann verwendet er den erkannten Netzanschluß (Tel. Nummer T-# des Handy, etc.) für den vorgesehenen Zweck (Zugangserkennung, Zuordnung von Daten oder auch anderer Serverprozesse, usw.).

163. Method by feature 162 , in particular in that the process proceeds in the following steps:

• i) the server calls on request (eg by input via a client CL or a workstation) the user who wants to form the data loop DS on his mobile phone (or terminal, telephone, etc.) and sends to the mobile phone or An SMS, where appropriate for this initialization (as an option) by the user a password must be entered;
• j) the user forms using the in feature 162 said function, the data loop DS by the serially converted by the SMS data by said coupling, or formation of the data loop DS to the server (back) are sent, optionally using an encryption / decryption of the code,
• k) the server checks the data generated by him and the data loop led code (KODE) and possibly also on the data loop, or continue on the phone (or terminal) entered data (personal data of the user, such as voice profile, fingerprint, iris Image acquisition, etc.), which may also be encrypted with the code (KODE) passed over the data loop,
• l) the server recognizes all the data it has received via the data loop as correct, then it uses the recognized network connection (phone number T- # of the mobile phone, etc.) for the intended purpose (access detection, assignment of data or other Server processes, etc.).

164. Procedure by feature 163 in that, in particular, that the SMS sent to the user's terminal or mobile phone contains a message indicating to the user the use of the received SMS to form the data loop DS, the server sending to this SMS the check code (KODE) adds, optionally separated by a control character sequence, and further optionally when recognizing a character or control character (sender phone number, etc.), which recognizes the SMS as a used for the preferred data loop DS CODE, this code (KODE) does not display as text (Option), or possibly an encryption before forwarding via the coupling interface of the data interface with makes (option).

• - es wird eine Kameraoptik geringer Tiefenschärfe verwendet,
• - es wird der über die Kamera (vom Finger) aufgenommene Fingerabdruck zu unterschiedlichen Abständen des Fingers von der Aufnahmeoptik aufgenommen, wobei durch die geringe Tiefenschärfe und der Krümmung des Fingers die Aufnahmen jeweils an unterschiedlicher Stelle (z.B. von innen nach außen, etc.) unterschiedliche scharfe und unscharfe Bildflächen aufweisen,
• - es wird die Abstandsänderung, bzw. der Abstand des Fingers in Bezug zur Aufnahmeoptik gemessen und mit den scharfen bzw. unscharfen Stellen des Bildes so abgeglichen, daß daraus auf die Krümmung des Fingers geschlossen werden kann,
• - die Krümmung des Fingers wird bei der Bewertung der Fingerabdrücke mit berücksichtigt.

165. Method according to one of the preceding features (possibly also only according to the preamble thereof), in particular in that the following method is used for the purpose of checking a fingerprint:

• - It is used a camera optics shallow depth of field,
• - It is recorded on the camera (finger) recorded fingerprint at different distances from the finger of the receiving optics, with the shallow depth of field and the curvature of the finger, the recordings at different locations (eg from inside to outside, etc.) different have sharp and blurred image areas,
• - the distance change or the distance of the finger relative to the receiving optics is measured and adjusted with the sharp or blurred areas of the image so that it can be deduced from the curvature of the finger,
• - the curvature of the finger is taken into account in the evaluation of the fingerprints.

166. Arrangement for carrying out a method by feature 165 , In particular, that a movable against the receiving optics (sliding) transparent support surface is provided for the respective finger over which the fingerprint is recorded and that the displacement of the surface is measured by a sensor (eddy current sensor, or optical gap measurement, reflection measurement, etc. ).

167. Arrangement by feature 166 , In particular, that the optics, which receives the fingerprint, is directed to the receiving surface of a recording camera anyway existing for a camera, whereby by cover slide either the image of the fingerprint or an image taken on the camera optics on the image capture chip exclusively (by Darkening of the other image) is projected.

168. Procedure by feature 165 , optionally with arrangement according to feature 166 , characterized in that the server transmits to the mobile phone an instruction (eg via the display) which indicates to the user whether he has (slowly) to press his finger tighter or less firmly against the receiving surface (against its travel), the server (Movements obtained over the measured displacement path) tests together with the resulting over the image blur and the so over several images only at different points sharp parts composed to check on the one hand the fingerprints on the other hand, to verify the authenticity that the input of the fingerprint on a real finger and in real time (to the instructions given by the server).

169. Arrangement for recording an iris on a mobile phone with a digital camera, in particular with an optical system, by enlarging the distance between the objective and the image recording area, enlarging an image section, in particular by means of a small mirror in which the user can see himself in a small image section, wherein the user holds the phone so that his eye is visible in the mirror, wherein the mirror is adjusted so that the image detail displayed in the center of the mirror is taken enlarged by the camera to record the iris as a camera image.

• - die Reaktionszeit vom Zeitpunkt der Ausgabe der visuell und/oder akustisch ausgegebenen Aufforderung bis zur Echtzeit Detektierung der über eine Vidoeoaufnahme des Benutzers dokumentierten Bewegung mißt,
• - und weiterhin über eine Bildanalyse feststellt, ob bei dem Videobild die Bewegungen nahtlos übergehen,
• - sowie die übliche Auswertung in Bezug auf die Erkennungsdatei durch Bildanalyse der Merkmale der Iris vorgenommen werden.

170. Arrangement for recording an iris on a mobile phone with a digital camera, in particular in that the server sends a message to the mobile phone, which indicates to the user when he should wink with his eyes, so that the server the authenticity of the test in addition to the stored image pattern can be verified by

• measuring the reaction time from the time the visually and / or acoustically issued prompt is issued to the real-time detection of the movement documented via a user's video recording;
• - and continue to determine via an image analysis, whether the video image, the movements seamlessly,
• - As well as the usual evaluation with respect to the recognition file by image analysis of the characteristics of the iris are made.

171. Arrangement according to one of the features 165 to 170 , or for image capture for sampling personal characteristics for a method according to any one of the features 161 to 164 (possibly also only after the generic term thereof), in particular in that the chip used for image recording or video recording is to be extracted from which features for the recognition of the personal data of the user (the image data being transmitted to the or a server for checking) in that said code sent via the preferred data loop DS is used for encryption of the data output from the chip directly or in further connection with open key transmitted via one of said networks, wherein the encrypted image data are already read directly from the chip around the feed to avoid false image data as well as by the used for the encryption (eg as a parameter), generated by the server and sent over the data loop code (KODE), which may continue encrypted (sent by the server), it is ensured that the image data for this Time where you d he server receives, actually by the chip (for the picture admission) are taken up.

172. Method according to one of the preceding features, in particular according to the preamble of the feature 161 , with a chip for a particular terminal via which the data loop DS is closed (eg a networked with an IT network chip card read-write device) and via which special data are entered (eg the chip or microcontroller of the device, via which the interface to Chip of the chip card is produced), thereby in particular that the chip is used to the said sent over the preferred data loop DS code for encryption of the data output from the chip directly or in further connection with over one of said networks transmitted open key, said encrypted data are already read directly from the chip in order to avoid the feeding of incorrect data (including signatures, etc.) as well as by the encryption (eg as a parameter) used by the server and sent over the data loop code (KODE), the possibly further encrypted (from the server) ges ends, it is ensured that the data has actually been generated by the chip at this point in time where the server receives it.

173. Method by feature 161 or only after the generic term of the characteristic 161 , wherein a mobile phone on request by the user, for example by entering a name or password, or even directly a phone number T- #, from a server concerned (for example, the page for logging on the client computer CL or a workstation) an SMS is sent directly, in particular, that the SMS generated by the server, or sent (possibly encrypted sent) code number KODE corresponds and is taken over the WEB camera of the client computer CL in the client computer as a picture and transmitted to the server is, where appropriate, in the client computer CL via an appropriate software (eg Java applet, etc.) alienation, or encryption of the code before sending back to the server (which is decrypted in the server before the code comparison again).

174. Procedure by feature 162 respectively. 163 or by characteristic 173 , In particular, that with the sending of the SMS from the server a time-out is started after the expiration of the acquisition of the data contained in the SMS sent by the server code KODE in the data loop DS (or for evaluation by the server) no longer possible is.

175. Method according to one of the preceding features, in particular (also) according to the (stand-alone) preamble of the feature 161 in that in particular that said parameters ($ S1, $ S2 .... $ Sn) are used for the encryption of the code (DS) sent via the data loop DS and used to identify the loop (KODE's) in the terminals (eg mobile phone), in each case via the other data channel than that via which the code (KODE) is transmitted (eg server via IT → client CL via DS coupling → mobile → T- # → server as one direction, or server via T- # → Mobile via DS coupling → Client CL → server as a different direction, ditto possibly also vice versa).

176. Procedure by feature 175 in that, in particular, that said parameters ($ S1, $ S2 .... $ Sn) for the encryption in the terminals (eg mobile phone) of the code sent via the data loop DS and used to identify the loop (KODE's) further comprise encrypted information controlling the association of codeblocks (characters, etc.) pertaining to the transmitted parameters ($ S1, $ S2 .... $ Sn) to the code elements (KODEs) used to identify the loop (sent by the server) (wordwise, also bitwise, etc.).

177. Procedure by feature 175 or 176 in that, in particular, that said parameters ($ S1, $ S2 .... $ Sn) for the encryption in the terminals (eg mobile phone) of the code sent via the data loop DS and used to identify the loop (KODE's) Furthermore, encoded information containing the assignment of the codeblocks (characters, etc.) corresponding to the transmitted parameter ($ S1, $ S2 .... $ Sn) to the respective current transmission direction of the code elements used for identification of the loop (sent by the server) (KODE's) control (wordwise, also bitwise, etc.) the respective terminals (eg mobile phone and client CL) show, or (in accordance with the server with), where appropriate, at full duplex in the direction not shown continues to be a dummy Code (dummy code) can be transmitted (which is not rated) to deceive an attacker.

178. Method according to one of the features 175 to 177 , in particular in that the said parameters ($ S1, $ S2 .... $ Sn) for the encryption carried out in the terminals (eg mobile phone) and optionally in the server further contain (encrypted) control information indicating whether they are in the Server or in one of the terminals according to a predetermined algorithm (possibly also at times, which are determined by random generator) have been generated independently, using them Control information set the other provided in the data loop DS devices (or even server, etc.) on it and can address the associated decryption algorithms.

179. Method according to one of the features 175 to 178 , Especially in that the said parameters ($ S1, $ S2 .... $ Sn) for the in the terminals (eg mobile phone) and possibly in the server made encryption alternately via different data paths of the data loop DS (telephone T #, ditto IT connection or intranet connection, etc.) to the respective devices located in the data loop DS (terminals such as mobile phone, telephone, client CL, server, also several networked servers, etc.) are sent and decoded according to a secret protocol (for single detection of $ S1, $ S2 .... $ Sn, etc.)

180. Method according to one of the preceding features, characterized in that a cell phone used for the formation of the data loop or a similar device, etc. with one or more of said inputs of personal user features such as fingerprint recognition, iris recognition, voice recognition, etc., whose Data is secured by the preferred measures within the preferred data loop DAS, used as a passport or passport (driver's license, etc.).

181. Method according to one of the preceding features or according to the preamble of the feature 161 , Especially in that the duration of the user (or client CL) by a corresponding coupling between the devices concerned (eg client computer CL and telephone, or mobile phone or possibly between two mobile phones, etc.) measured data path measured over the Koppelweg is evaluated and as a criterion whether in this Koppelweg an unauthorized intermediary network is located (the server then terminates if necessary, if so).

1. a) die Messung der Laufzeit mit einer im Datenempfänger (E) vorgesehenen Zeitmeßeinrichtung erfolgt, bezogen auf einen dem Datenempfänger (E) bekannten Zeitpunkt, wann das Signal vom Datensender (S) abgesendet wird,
2. b) oder die Messung der Laufzeit mit einer im Datensender (S) vorgesehenen Zeitmeßeinrichtung erfolgt, bezogen auf ein Quittungssignal, welches der Datenempfänger (E) bei Erhalt des Signals dem Datensender (S) übersendet.

182. Procedure by feature 181 , in particular in that

1. a) the measurement of the transit time takes place with a time measuring device provided in the data receiver (E), based on a time known to the data receiver (E) when the signal is sent by the data transmitter (S),
2. b) or the measurement of the transit time with a time transmitter provided in the data transmitter (S) takes place, based on an acknowledgment signal, which the data receiver (E) transmits on receipt of the signal to the data transmitter (S).

183. Method by feature 182 , Characteristic a, characterized in that the clock of the data transmitter (S) by a data receiver (E) via the bidirectional data path of the coupling path (or the coupling path) to the data transmitter (S) sent out set signal coincident with the clock of the data receiver (E ), wherein, due to the duration of the coupling path (or the Koppelweges) the clock of the data receiver (E) at this runtime then opposite the clock of the data transmitter (S) and that via a protocol agreement in the data transmitter (S) and in the Data receiver (E) a time is agreed at which the data transmitter (S) to the data receiver (E) sends a measurement signal (or data) whose time of arrival at the data receiver (E) in the data receiver (E) relative to the previously by protocol agreed dispatch time of the data transmitter (S) is measured as the transit time for the round trip of the data over the coupling path (or the coupling path).

184. Procedure by feature 182 Characteristic b, characterized in that the data receiver (E) sends the data transmitter (S) an acknowledgment signal over the coupling path (or via the coupling path) upon arrival of the data, by means of which a time measurement made in the data transmitter (S) the acknowledgment signal measures the transit time for the outward and return journey of the data over the coupling path (or the coupling path).

185. Method according to one of the preceding features or according to the preamble of the feature 161 , wherein several (eg two servers) are networked via IT and in each case a server with one of the terminals used for forming the data loop DS (on the user side) is directly connected, characterized in that via one of the terminals (ditto both, etc. ) a data input takes place, which evaluates one of the (two) servers (I), while this server does not have access to the port number of the relevant terminal used to identify the user (within the data loop DS) that the other (second) server ( II), but has access to the port number (of the network used for the identification, eg mobile phone network) of the relevant terminal used to identify the user (within the data loop DS), but has no access to the other data (of the first server I) which are not intended for him, wherein the server (II), which gives access to the port number of the relevant device to identify the user h at, via its network connection (eg IT network) to the first server (I) using a temporary assigned address (instead of the telephone number), the monitoring of the connection number of the device (or user) made access to the first server (I), and that the assignment of the temporary assigned address on the two servers common code recognition (CODE) of the code routed via the data loop DS.

1. a) daß beim Scannen der Datenschleife für die Zuordnung der Identifizierungsnummern (bzw. Telefonnummern) des für die Identifizierung verwendeten Netzes, bzw. Telefonnetzes zu dem jeweils geprüften KODE, Server I von Server II synchronisiert wird,
2. b) oder daß beim Scannen der Datenschleife für die Zuordnung der Identifizierungsnummern (bzw. Telefonnummern) des für die Identifizierung verwendeten Netzes, bzw. Telefonnetzes zu dem jeweils geprüften KODE, Server II von Server I synchronisiert wird.

186. Method according to one of the preceding features, wherein two (or more) networked servers ( I . II . III ) are included in the data loop DS for determining the assignment to a relevant, used to identify the user network (eg telephone network) and the assignment via transmitted and tested codes (KODE), which correspond to the identification number (eg the telephone number of the connection in network used for the identification, or telephone network), or method by feature 185 , in particular,

1. a) that during scanning of the data loop for the assignment of the identification numbers (or telephone numbers) of the network used for the identification, or telephone network to the respectively tested CODE , Server I from server II is synchronized,
2. b) or that when scanning the data loop for the assignment of the identification numbers (or telephone numbers) of the network used for the identification, or telephone network to the respectively tested CODE , Server II from server I is synchronized.

• - Server I wählt die zu prüfenden Clients CL (cl_1 .... cl_n) der Reihe nach an und für jede Anwahl werden durch Server II (bzw. gegebenenfalls Telefon Server III) sämtliche aktuellen Verbindungen T-# (T1.... Tn) gescannt, um die Paare (KODE / T-#) durch den Server II zu finden, wobei natürlich Server II jeweils einen Zufallskode dazu aussenden muß und den über die Datenschleife DS zurück erhaltenen, prüfen muß;
• - Server II (bzw. gegebenenfalls Telefon Server III) wählt die aktuellen Verbindungen T-# (T1.... Tn) der Reihe nach an und für jede Anwahl werden durch Server I die zu prüfenden Clients CL (cl_1 .... cl_n) der Reihe nach gescannt um die Paare (KODE / T-#) durch den Server II zu finden, wobei natürlich Server II jeweils einen Zufallskode dazu aussenden muß und den über die Datenschleife DS zurück erhaltenen, prüfen muß.

187. Procedure by feature 186 , in particular in that the following method steps are carried out:

• Server I selects the clients CL to be checked (cl_1... Cl_n) in sequence and for each dial-up, servers II (or optionally telephone server III) all current connections T- # (T1 .... Tn) are scanned to the pairs (KODE / T- #) by the server II to find, of course, server II each must send out a random code to and the back over the data loop DS received, must check;
• - Server II (or if necessary telephone server III ) selects the current connections T- # (T1 .... Tn) in turn, and for each dial-up, the clients CL to be checked (cl_1 .... cl_n) are serially scanned by server I for the pairs (KODE / T- #) through the server II to find, of course, server II each must send out a random code to and the back over the data loop DS received, must check.

188. Method according to one of the preceding features, or method according to the preamble of the feature 161 in that in particular that said code comparison on the user side in one of the terminals used for the coupling of the data loop DS (eg mobile phone, or client computer CL , etc.) and that the comparison result is communicated (possibly encrypted) to the relevant server which has generated the code signal relating to the comparison.

189. Method according to one of the preceding features, or method according to the preamble of the feature 161 , Especially in that the coupling of the data loop DS on the user side (between the terminals concerned, eg between a mobile phone and a client computer CL ) by interposition of a further device, which performs a (possibly further) data encryption of the looped through the coupling interface data respectively, takes place.

190. Procedure by feature 189 , in particular by the fact that this is used for the interposition, or for (possibly further) data encryption of the looped through the coupling interface data, a high frequency (possibly converter) interface over which the data from a terminal (eg mobile phone) in which (possibly further ) Data encryption of the intermediate device and from this to the other terminal (eg client computer CL ), optionally also in the opposite direction, or bidirectionally, are passed.

191. Procedure by feature 189 or characteristic 190 , In particular, that is used as between switched device, a clock or a piece of jewelry.

192. Method via which by the access number (eg telephone number) of a connected to another network (eg telephone network) terminal (eg a mobile phone) or directly through a protected network access, etc., the user logs into the network (eg Use of a mobile phone with its telephone number as a condition for logging in), in particular, that when you log in (eg in a WEB page) determined by a server concerned phone number of the user, if necessary (as an option) in combination with others with the phone number (eg about the Mobile phone) associated personal data of the user (such as a voice analysis, etc.) are included as added by the server additional data in the downloaded file, the downloaded file when playing with a relevant playback device (MP3 player, CD, DVD, etc.) the data contained in it and added by the server (markers, addresses, etc.) as a test template for a playback option of the file (to check the phone number of the user, optionally as an option in combination with other data associated with the phone number) are, by this data added by the server (marks, addresses, etc.), the reproduction of the data is protected and the data is reproduced by the device only if by a cell phone via an appropriate interface (to the player) transmitted data encoding , according to the phone number of the terminal or mobile phone used when loading the file the Wied Initialization is initialized, or if necessary, the mobile phone to be initialized playback device also directly (eg MP3 player).

193. Method by feature 192 in that in particular the method is used for any data reproduction or processing device (visual files, acoustic files, text files, programs, etc.).

194. Headphones for a mobile phone or for general use, in particular in that the headphones are fixed directly inside or on extended earmuffs of a headband.

195. Headband with headphones by feature 194 , In particular, that an RF interface to the power supply (amplifier) of the headphones is provided, said interface (with battery holder) is fixed to the rear center of the headband.

196th feature deleted

197th Feature deleted

198th Feature deleted

199th Feature deleted

200th Feature deleted

201. Method according to one of the preceding features, or methods for detecting the interconnection of two or more database events, which relate to an input and / or output of data from non-directly networked terminals using a method by feature 201 for detecting or establishing a network connection of a computer networked with a server, or terminal, in particular a mobile phone, in which the server emits a code which by temporary coupling of not directly networked terminals (eg acoustically, or by infrared, or inductive or capacitive , etc.) is sent from the server to one of the temporarily coupled terminals and routed back to the server via the other terminal, whereby a data loop is formed via the respective terminals to compare the transmitted code with the returned code an existing assignment of the verifying database events or comparable processes, wherein the database events concerning an input and / or output of data can relate to the same database or different databases,
and / or a method for linking two server processes (which, however, may also run on the same server) with a temporarily made for coding telephone connection as a data loop via a mobile phone, via which one from the server to the phone and back to the server via a respective terminal (as an interface to the mobile phone) is passed and on the detection of the code, the phone number of the cell phone used in the data loop is checked,
wherein the assignment of said data events relating to an input and / or output of data, or the said server processes, takes place via the telephone number of the mobile telephone connection used for the production of said terminal-related data loop during the temporary coupling, and in that for the purpose of this assignment, all code signals currently transmitted by the relevant server and returned via said data loop are compared in pairs, a comparison pair of two signals each consisting of one sent and one returned via the data loop code signal, wherein the respective matching comparison signals corresponding communication channels (Internet addresses and telephone numbers) are also recognized as belonging to each other;
and or
Method in which the association relates to an event concerning an input and / or output of data assigned to the same database, by means of the data terminal loop relating to the terminal (a temporary coupling) using the mobile used to form the data loop by that from the server emitted and returned back code in accordance with the code, an acknowledgment signal (corresponding to an acknowledgment signal) is generated, wherein the cell-related connection, or the telephone number under which the connection is made to form the data loop, as an access code for generating the confirmation signal (by the server) is used;
and / or methods in which the allocation relates to an input relating to an input and / or output of data associated with different databases, that via the data terminal relating to the terminal (a temporary coupling) using the cell phone used to form the data loop by the sent by the server and returned back code by assigning this code as a key for the data access of the different databases the data of the databases relating to the key to a data set, or to a related data group are linked and upon agreement of the code, an acknowledgment signal (corresponding to an acknowledgment signal ) is produced,
wherein the connection associated with the mobile telephone, or the telephone number under which the connection is made to form the data loop, is used as a connection code for linking the relevant data of the different databases and is used as an access code for generating the acknowledgment signal (by the server);
and / or method, wherein two mobile phones are coupled by a transmitted via the mobile phone and generated by the servers and / or tested code the assignment of mobile phone numbers, including the data transmitted via the mobile phone data to the relevant server processes (as the mobile phone as belonging Recognizing a couple);
especially by the features of one of the following features.

202. Method by feature 201 in that in particular a conference circuit for said further connection (eg telephone connection T- #), via which the preferred data loop DS is used to identify a subscriber is used, in addition to the over the preferred data loop DS transmitted code which via the regular data network connection eg Internet (IT), as well as the preferred further network for identification (eg telephone network T- #) between two Endpoints (E1,2 and E3 ) of this network, the simultaneous connection of the telephone line T- # (with the endpoint E3 ) of the user (clients CL , for producing the data loop DS) to two (further) end points E1 and E2 allowing one or more of the relevant servers (with which the user communicates or users communicate) to be powered on.

203. Method by feature 201 or 202 in particular that the ( SERVER . 1 ) or the (server 1 , Server 2 . 2 ), which the mentioned two (further) endpoints E1 and E2 of the preferred other network for identification (eg telephone network T- #), or feed their code to check the identification or making an assignment in this network (or possibly from this network in the reverse direction), a fundamental, from both endpoints E1 , respectively. E2 (or their encoding / decoding device, such as server software, or even hardware, etc.) use distinguished discrimination coding (see f1, f2 for E1 , respectively. code1 , ditto f3, f4 for E2 , or code 2 ), whereby by this distinguishing coding the over the telephone line T- # (end point E3 ) of the user looped through the telephone signal / cell phone signal a distinction can be made, which endpoint / connection point E1 or E2 a server ( 1 ), and / or optionally which server ( E1 . E2 with server I and server II in 2 ) a respective code signal ( code1 . Kode2 ).

204. Method according to one of the features 201 to feature 203 for the purpose of assigning two or more client users to a common server process or two server processes to be linked together ( 1 ), in particular in that said two endpoints E1 , respectively. E2 said telephone network T- # (or a comparable network), or the conference circuit, which is connected to the endpoint E3 to the client CL (or user) each have a switched connection, a server ( SERVER . 1 ), or a server process involving multiple users (see Users 1 , User 2 ), or their clients CL (each at E3 ), and that the conference call on the one hand for each of the users (see 1 , User 2 ), or their clients CL (each at E3 ), the preferred data loop DS with the code assigned to each user (Kode1 for users 1 , dito Kode2 for users 2 ) (closed for each user on the client side CL over the internet connection IT ) and on the other hand, every user or his client CL or its data loop DS (at his respective E3 Connection) not directly over the Internet connection IT his data loop DS but via the internet connection IT the code transmitted by the other user (s) via their data loop (respectively) via the Conferencing can listen, this feature of the conference call each user, or their clients CL , each via their data loop DS the codes of the other user (which are transmitted via their data loop DS) can listen and thus the server ( SERVER ) over each of the data loops DS all connected users or clients CL , in each case all codes (see code 1, code 2 . 1 ) and that the codes obtained for a conference call established over several subscribers (eg, code 1 * code 2) DS by user 1 , ditto Kode2 * Kode2 via DS of user 2 ) the desired link of the connected to a common server process participants is derived (optionally using the on each participant side on the data loop DS self-sufficient checked telephone number).

205. Method by feature 204 in that, in particular, the said networking of a server-controlled program involving several subscribers via their telephone numbers (T-# 1, T-# 2) is used to transmit in one over the Internet or a comparable structure ( also possibly over the mobile phone) running game, in which a participant solicits another to play along, a percentage of the amount paid by the enlisted player as play money, on the play money account of the player, who has recruited the player, as credit is booked.

206. Method according to method of one of the features 201 to feature 203 , for the purpose of assigning two server processes, without the servers having to be networked via an Internet connection ( 2 ), in particular in that of said two endpoints E1 , respectively. E2 said telephone network T- # (or a comparable network), or the conference circuit, which is connected to the endpoint E3 to client CL (or user) each have a switched connection, each endpoint ( E1 , dito E2 ), in each case to one of several servers (server I with E1, ditto server II With E2 ) is turned on (or dialed), which have no connection to each other via the Internet (or must have), each server (here server I and server II ) in each case a self-sufficient (Internet) connection to one for all (here both servers I and II ) Server common user (client CL ) (an E3 ) and that the conference call of said telephone network T- # (optionally alternately optional) on the one hand on the client side CL a data loop DS respectively to the server (here server I and server II ), on the other hand the user or his client CL or its data loop DS (at the E3 Connection) not directly on the current Internet connection IT his data loop DS, but over the conference circuit (each) transmitted code of the other server can listen and thus the respective server in question (from server I or server II ) all codes (see code 1, code 2 . 2 ) and that the codes obtained for a conferencing connection established over several servers (eg Kode1 * Kode2 via DS of the user for server I, same as Kode2 * Kode1 over DS of the user for server II ) the desired linkage of the data entered to different servers or server processes for the switched-on user ( 2 ) is derived (optionally using the in one of the two servers via its data loop DS self-sufficient checked telephone number).

1. a) Aufrufen des genannten Servers I (z.B. der WEB-Seite WEB 1) und Anwählen der Telefonverbindung (dito Handy, etc.) des Servers (I), bei abgeschalteter Rufnummern Identifizierung des Anrufes und Herstellung der betreffenden Datenschleife DS, über die der Server I seinen Kode (Kode1) sendet;
2. b) Aufrufen des genannten Servers II (z.B. der WEB-Seite WEB 2) und Eingabe der Rufnummer der Telefonverbindung (dito Handy, etc.) des Servers (II) mit anschließendem Rückruf (Anruf !) durch den Server (II) unter Benutzung der in der WEB-Seite WEB 2 angegebenen Telefonnummer sowie Herstellung der betreffenden Datenschleife DS, über die der Server II seinen Kode (Kode2) sendet und über diesen Prüfkode den Teilnehmer (Benutzer) identifiziert (durch die angerufene Telefonnummer);
3. c) Über die genannte Konferenzschaltungsverbindung erhält die Datenschleife DS zum Server II gleichfalls den Kode (Kode 1), der von Server 1 ausgesendet wird, wobei Server II diesen Kode (Kode 1) als weitere Adresse seinem eigenen ausgesendeten Kode (Kode 2) als Adresse zusetzt sowie das Prüfergebnis der Identifizierung des Benutzers (des Client CL, oder auch eine weiteren Handy's, etc.) diesem Kode (Kode 2) als Schlüsseldaten zusetzt (gegebenenfalls verschlüsselt, und/oder digital signiert);
4. d) Der genannte Server I ordnet die im (Kode 2) des Servers 2 unter der mitgegebenen Adresse (Kode 1) enthaltenen Daten den unter dem Kode (Kode 1) des Servers (I) vom Benutzer (z.B. via Internet) eingegebenen Daten zu, wobei das weiterhin im Kode 2 des Servers 2 enthaltene Prüfergebnis bei der Bearbeitung der Daten im Server I berücksichtigt wird.

207. Procedure by feature 206 , for an application in which in a server (server I), the user enters the data (possibly also anonymous!) (dito possibly gets displayed, calculated and output, etc.) and another server II in which the user uses the preferred data loop DS identified via another network (eg mobile phone), with the two servers (server I and server II ) are networked directly to each other only via this additional network (eg telephone, mobile phone network) and the user (client CL ) each have a conventional data network connection (Internet, Intranet, etc.),
especially in that the following method steps are carried out:

1. a) calling the said server I (eg the WEB -Page WEB 1 ) and dialing the telephone connection (dito mobile phone, etc.) of the server (I), with switched off telephone numbers identification of the call and production of the relevant data loop DS, via which the server I his code ( code1 ) sends;
2. b) Calling the named server II (eg the WEB -Page WEB 2 ) and entering the phone number of the telephone connection (ditto mobile, etc.) of the server ( II ) followed by callback (call!) by the server (II ) using the WEB WEB page 2 specified telephone number as well as production of the relevant data loop DS, over which the server II his code ( Kode2 ) and identifies the subscriber (user) via this check code (by the called telephone number);
3. c) Via the said conference circuit connection, the data loop DS to the server II likewise receives the code (code 1 ), by server 1 is sent, with Server II this code (code 1 ) as another address of its own sent code (code 2 ) as an address, and the check result of the identification of the user (the client CL , or another cell phone, etc.) this code (code 2 ) as key data (possibly encrypted, and / or digitally signed);
4. d) The named server I arranges the in the (code 2 ) of the server 2 under the given address (code 1 ) contained under the code (code 1 ) of the server ( I ) from the user (eg via the Internet) entered data to, which continues in the code 2 of the server 2 included test result when processing the data in the server I is taken into account.

208. Method by feature 203 in that in particular that said distinguishing coding, which end point / connection point E1 or E2 a server ( 1 ), and / or optionally which server ( E1 . E2 with server I and server II in 2 ) a respective code signal ( code1 . Kode2 ), by selecting the frequencies, via which, the log.0 and log.1 identification states of the respective code signals ( code1 . Kode2 ) are transmitted.

209. Procedure by feature 203 in that in particular that said distinguishing coding, which end point / connection point E1 or E2 a server ( 1 ), and / or optionally which server ( E1 . E2 with Server I and Server II in 2 ) a respective code signal ( code1 . Kode2 ) is assigned by an addressed format (eg also handshake, half duplex, etc.).

210. Method according to one of the features 202 to 209 , Especially in that the synchronization for the change, or for the initialization of the servers (server I , Server II . 2 ) or the server ( SERVER . 1 ) emitted code signals ( code1 . Kode2 ) by the time of establishing the connection (eg the telephone dialing of the server) of the conference call.

211. Method according to one of the preceding features, characterized in that the method is used for checking telephone connections made via Internet telephony.

212. Method according to one of the preceding features, characterized in that the preferred conference circuit is used with the involvement of Internet telephony.

213. Method according to one of the features 201 to 240 , or according to the generic term of the feature 201 , In particular, that in the formation of the data loop DS instead of the client (CL) connection to the server, another cell phone connection (telephone network connection) is used.
Method according to feature 213 , or method according to any one of the preceding features,
with two mobile phones for establishing the coupling of the preferred data loop DS, wherein the mobile phones include a GPS coordinate detection system or a comparable system, also km detection system of a vehicle, etc., with a data connection to the mobile phone, etc. is provided, characterized in that in Formation of the data loop (and telephone numbers of the mobile phones tested with the test code) as associated input data GPS Coordinates and or the km state of a vehicle to the (or to the) concerned servers are transmitted, this process takes place in two different locations and the distance (if necessary, according to a road map) is determined for this phone number combination of the relevant mobile phone, where appropriate send one of the cell phone's (or both) for this purpose appropriate place samples to the server (or the entered km booth is used, etc.), and that via the data link of the mobile's to the server, the personal data on the phone number of the registered and be evaluated (to give the driver the necessary security to identify persons, if appropriate, whether the passenger is adequately insured, etc.).

215. Procedure by feature 214 , In particular, that instead of or in addition to the GPS data the km counter via a radio interface to the mobile phone (eg the car driver) the km state transmitted to determine the route, then optionally can be dispensed with the GPS coordinate detection system.

216. Arrangement for carrying out the method, according to one of the features 214 or 215 , Especially by an acoustic coupling device, which is installed under the exterior mirror of a vehicle (see. 3 ), wherein the cell phone in question is held against the outside mirror.

217. Arrangement for carrying out the method, according to one of the features 214 to 216 , Especially by an infrared interface, which is covered by the mirror glass under a small (not mirrored) window of the outside mirror of a vehicle is installed (see. 3 ), wherein the cell phone in question is held against the outside mirror.

218. Feature deleted.

219. Feature deleted.

220th Feature deleted.

221. Method according to one of the preceding features, or a method for detecting the interconnection of two or more database events, which concern input and / or output of data from non-directly networked terminals using a method for detecting or establishing a network connection with a server networked computer, or terminal, in particular a mobile phone, in which the server emits a code which by temporary coupling of not directly networked terminals (eg acoustically, or by infrared, or even inductive or capacitive, optical, or via RF, etc.) is sent from the server to one of the temporarily coupled terminals and routed back to the server via the other terminal, whereby a data loop is formed through the respective terminals to compare the transmitted code with the returned code an existing allocation of database events or so to verify or locate events comparable to events, whereby the processes to be associated with one another may relate to an input and / or output of data relating to database events to the same database or to different databases,
and / or a method for linking two server processes (which, however, may also run on the same server) with a temporarily made for coding telephone connection as a data loop via a mobile phone, via which one from the server to the phone and back to the server via a respective terminal (as an interface to the mobile phone) is passed and on the detection of the code, the phone number of the cell phone used in the data loop is checked,
and / or a method for linking two server processes (which, however, may also run on the same server) with a telephone connection (landline) temporarily produced for coding purposes as a data loop via a landline telephone via which one from the server to the phone and back to the server a relevant terminal (as an interface to the mobile phone) is routed and the identification of the code verifies the telephone number of the telephone used in the data loop,
wherein the assignment of the said data events relating to an input and / or output of data, or of said server processes, takes place via the telephone number of the mobile telephone connection (or telephone connection), as used for the production of said data loop relating to the terminals during the temporary coupling was used, and that for the purpose of this assignment, all currently sent by the server in question and again received back via said data loop DS code signals are pairwise compared, wherein a comparison pair of two signals each consisting of a sent and a data loop back on the received code signal consists the corresponding communication channels (Internet addresses and telephone numbers) corresponding to the corresponding respectively matching comparison signals are likewise recognized as belonging to one another;
and or
Method in which the association relates to an event concerning an input and / or output of data assigned to the same database, by means of the data terminal loop relating to the terminal (a temporary coupling) using the mobile used to form the data loop by that from the server emitted and returned back code in accordance with the code, a confirmation signal (corresponding to an acknowledgment signal) is generated, wherein the cell (or telephone) associated connection, or the telephone number under which the connection is made to form the data loop, as an access code for Generation of the acknowledgment signal (by the server) is used;
and / or methods in which the allocation relates to an event relating to an input and / or output of data allocated to different databases, via the terminal loop (a temporary coupling) using the mobile phone (s) used to form the data loop Telephone) by the code sent by the server and returned back by assigning this code as a key for the data access of the different databases, the key data of the databases to a record, or to a related data group are linked and upon agreement of the code, a confirmation signal (corresponding to an acknowledgment signal) is generated,
wherein the connection to the mobile phone (or telephone), or the telephone number under which the connection is made to form the data loop, is used as a connection code for linking the relevant data of the different databases and as an access code for generating the acknowledgment signal (by the Server) is used;
and / or method, wherein two mobile phones are coupled by a transmitted via the mobile phone and generated by the servers and / or tested code the assignment of mobile phone numbers, including the data transmitted via the mobile phone data to the relevant server processes (as the mobile phone as belonging Recognizing a couple);
especially by the features of one of the following features.

222. Procedure by feature 221 , in particular in that the coupling of the data loop DS between the client and the telephone, or mobile phone is made within the same device, such as a telephone or mobile phone, by the property of a conference call, in which a connection to several participants (eg two) is possible simultaneously, and formed via these participants, the data loop DS becomes.

• - um den über die bevorzugter Datenschleife DS übertragenen Kode, von einem durch einen Server (S1) bedienten Telefonanschluß (T#_S1) über die Datenschleife DS beim Benutzer, bzw. über dessen Telefonanschluß (T#_benutzer) zu einem weiteren Telefonanschluß (T#_S2) der entweder gleichfalls durch diesen Server (S1) oder durch einen weiteren Server (S2) bedient wird, zu übertragen,

wobei das Telefon oder Handy des Benutzers der Telefonverbindung eine Schaltvorrichtung zur direkten Bildung der Datenschleife aufweist (z.B. entsprechend einer üblichen Konferenzschaltung, dadurch besonders, daß die Eingabedaten des Handy's mit dem Kode verknüpft werden und daß diese Eingabedaten den drei Anschlußnummern (T#_benutzer T#_S1, T#_S2), die für die Konferenzschaltung (Server 1 mit T#_S1 ↔ T#_benutzer T ↔ T#_S2 mit Server 2, bzw. gegebenenfalls auch mit Server 1) verwendet werden, zugeordnet wird.223. Method by feature 221 or 222 wherein a conference call is used for said further connection (eg telephone connection T- #) over which the preferred data loop DS is formed to identify a subscriber,

• to the code transmitted via the preferred data loop DS, from one by a server ( S1 ) operated telephone line (T # _S1) via the data loop DS at the user, or via the telephone line (T # _user) to another telephone line (T # _S2) of either also by this server ( S1 ) or through another server ( S2 ), to transmit,

the telephone or mobile telephone of the user of the telephone connection having a switching device for direct formation of the data loop (eg according to a conventional conference circuit, especially in that the input data of the mobile phone is linked to the code and that these input data correspond to the three connection numbers (T # _user T # _S1, T # _S2) used for the conference call (server 1 with T # _S1 ↔ T # _user T ↔ T # _S2 with server 2 , or possibly also with server 1 ) can be used.

224. Procedure by feature 222 or 223 in that, in particular, that said allocation of data relates to a payment transaction, the one from a server (eg S1 ) operated telephone number (T # _ S1 ) concerns an account management for debiting the amount and that from another server ( S2 ) or optionally from the same server ( S1 ) served another phone number (T # _S2) concerns an account management for crediting the amount.

225. Method according to one of the features 222 to 224 , in particular in that over the telephone connections (server 1 with T # _S1 ↔ T # _user T ↔ T # _S2 with server 2 , or possibly also with server 1 ) the telephone number of the relevant connections is respectively given, or optionally checked by recall, with the preferred, from the code for checking the connections optionally further data (to verify the identity of the user, such as pin code, voice sample, fingerprint, iris recognition , etc.) on the user side, or at the telephone connection (T # _user) of the user (or in the mobile phone, etc.) are added.

226. Method according to one of the features 222 to 225 , in particular by the fact that on the user side, or at the telephone connection (T # _user) of the user (or in the mobile phone, etc.) the code (eg generated by the server and tested upon return) for checking the connections is encrypted.

1. a) Es wird der auf der Benutzerseite (im Telefon oder Handy) mit der digitalen Signature versehene und im Server zurück erhaltene Kode mit dem intern im Server erzeugten und intern mit der (dem Benutzer, bzw. dessen Endgerät) entsprechenden Kode verglichen,
2. b) es wird durch unmittelbaren Vergleich des auf der Benutzerseite (im Telefon oder Handy) mit der digitalen Signature versehenen Kodes und des intern im Server mit der digitalen Signature versehenen Kodes, der Kode auf seine Authentizität geprüft,
3. c) wobei (gegebenenfalls) im Telefon bzw. Handy (vor der digitalen Signature) eine Verschlüsselung des Kodes erfolgt, und bei Rückerhalt des Kodes im Server eine entsprechende Entschlüsselung vorgenommen wird.

227. Method according to one of the features 222 to 226 , in particular that on the user side, or at the telephone connection (T # _user) of the user (or in the mobile phone, etc.) the (eg generated by the server and tested on return) code for testing the connections another test code corresponding to one digital signature is added, that on the server side, at the server, which sends the code and checks on return, the server the internal code in the server also provided with the (corresponding to the user) digital signature, and that for the internal digital signature used to address the telephone number of the user (T # _user) or, if applicable, of his other personal data, the verification of the returned code in the server being carried out in the following manner,

1. a) It is on the user side (in the phone or mobile phone) provided with the digital signature and recovered in the server code with the internally generated in the server and internally compared with the (the user, or his terminal) code corresponding
2. b) the code is checked for authenticity by directly comparing the codes provided on the user side (in the telephone or mobile phone) with the digital signature and the code internally provided in the server with the digital signature;
3. c) wherein (possibly) in the phone or mobile phone (before the digital signature) encryption of the code, and when the return code in the server, a corresponding decryption is made.

228. Method according to one of the features 222 to 227 in that in particular that said conference circuit is next to the looped by the user connection (server 1 with T # _S1 ↔ T # _user T ↔ T # _S2 with server 2 , or possibly also with server 1 ) still have a direct connection between the servers ( S1 . S2 ) has served connection connections (if separate servers S1 S2 are used), where appropriate, this additional telephone connection of the conference call can also be made via the Internet between the servers.

229. Method according to one of the features 221 or 222 to 228 , with a radio or TV set as further data input to the preferred data loop DS, characterized in that more, the test code added data, via an acoustic coupling to the radio or TV set or via an optical coupling to the screen of the TV set in the to form the data loop DS used terminal (phone, mobile phone, etc.) can be entered.

230. Method according to one of the features 221 or 222 to 228 , each with a cell phone to close the preferred data loop for use as a coordinator and billing one, with the cell phone GPS Has system over which is detected in the coupling of the location of the other mobile user (as a passenger) over the driver (or his cell phone), characterized in particular, that between the mobile phone (the driver and the example waiting on the roadside rider) closed data loop DS over a HF - Transmit receiving line (eg blue tooth, etc.) takes place, characterized in particular that over this HF - Transmission line between the mobile phone's a power measurement is made on the receiving side, the respective received power received in calibration steps on the GPS System the distance determination is assigned to the distance between the mobile phone concerned and that the constant continuous monitoring of this distance (when approaching the two mobile phones) by the increasing reception performance of, or the relevant mobile phone is to indicate the approach.

1. a) eine HF Verbindung zwischen den Handy's mit einer HF Leistung, die während der Bildung der Datenschleife DS ständig die Verbindung aufrechterhält (innerhalb der möglichen Reichweite),
2. b) eine weitere HF Verbindung zwischen den Handy's mit einer HF Leistung, die während der Bildung der Datenschleife DS, so geregelt wird, daß die Verbindung in aufeinanderfolgenden Meßzyklen gerade jeweils abreißt (und jeweils neu einsetzt), oder der empfangene Träger ein Minimum (als Grenzwert) aufweist, wobei an dieser Abreißgrenze der Verbindung bzw. zu diesem Grenzwert die GPS Daten als Eckpunkte geeicht werden, um zwischen diesen Eckpunkten die Entfernung jeweils ausschließlich über die HF Strecke zwischen den beiden Handy's zu bestimmen.

231. Procedure by feature 230 , in particular in that

1. a) one HF Connection between the cell phone's with one HF Performance during the formation of the data loop DS constantly maintaining the connection (within the possible range),
2. b) another one HF Connection between the cell phone's with one HF Performance during the formation of the data loop DS is controlled so that the connection in successive measuring cycles just each breaks off (and each new use), or the received carrier has a minimum (as a limit), said at this tear limit of the connection or to this limit the GPS Data are calibrated as vertices in order to determine the distance between these two vertices exclusively via the RF distance between the two mobile phones.

232. Feature omitted

233. Feature deleted

234. Feature deleted

235. Feature omitted

236. Feature deleted

237. Feature deleted

238. Feature deleted

239. Feature deleted

240th Feature deleted

241. Method according to one of the preceding features, or method which forms a data loop DS using the temporary coupling of two mobile phones (acoustically or by infrared, etc.) communicating with one or even two servers or computers of the network , where via this coupling a test code is passed, which from the server via the data connection (data loop DS ) is generated to a mobile phone, and via the data connection (data loop DS ) of the server or another Server is passed back to the other mobile phone of the test code for testing back, whereby by determining the phone numbers of the mobile phone's the assignment is made to the data entered via the mobile's,
and to the data to be assigned, which are supplied by the mobile phones with the check code to the servers or the server, an identification check of the user belongs, further a position transmission ( GPS Data) and or km stand of a vehicle guided by the user of the mobile phone,
in particular, that upon detection of a valid assignment of two mobile phones by the server, the recognition systems arranged in the vehicles for querying addresses ( RFID ) Chips are initialized by packets, or optionally synchronized, such that in each case a vehicle belonging (encoded by a vehicle address taken into account by the recognition systems), the packets stored in the vehicle are detected, and that this data the server the coupling process ( DS ) of the mobile phone belonging to be transmitted.

242. Procedure by feature 241 , in particular in that the vehicle ( RFID ) Detection system communicates directly with the server via an interface provided in the vehicle, the further assignment to the vehicle being made via a vehicle address sent to the relevant mobile phone.

243. Method by feature 241 , in particular in that the vehicle ( RFID ) Recognition system over a HF Interface with the mobile communicates with the server, or the mobile phone transmits the relevant data of the recognition system to the server, wherein a vehicle address sent via the relevant mobile phone carries out the further assignment to the vehicle.

244. Method according to one of the features 241 to 243 in that, in particular, that from those in the vehicle ( RFID ) To the server data sent to a data coupling ( DS ) of the mobile's, or identification of the user, respectively associated removal and / or loading of the corresponding ( RFID marked) packets is determined.

245. Method according to one of the features 241 to 244 in that in particular the payment and / or acknowledgment of the receipt of the packages by the preferred coupling system (DS) is made in accordance with said mobile phones, the mobile being a bar code reader or a reader for the address code of the ( RFID ) Has chips.

246. Feature deleted

247. Feature deleted

248. Feature omitted

249. Feature omitted

250th feature omitted

251. Method according to one of the preceding features, or method relating to a fully automatic recognition and address assignment of a subscriber of any first network (eg Internet, mobile phone network, etc.) with short-term use of another subscriber line of a second network (eg landline telephone, mobile phone, or another cell phone, etc.), or for special cases also the same network (eg telephone number of an Internet telephony, etc.), wherein the participants of the first network does not have to have a fixed access address, ie an Internet address only for each session differently assigned temporary can be , and the second network via its connection number (eg mobile number), etc., which forms the address given on the Internet,
and further
using the temporary coupling of two mobile phones (acoustically or by infrared, etc.), which communicate with one or with two servers, or computers of the network, a data loop DS is formed, via this coupling a test code is passed from the Server is generated via the data connection to a mobile phone, and is returned via the data connection of the server or another server to the other mobile phone of the test code for testing (series connection). Where if a separate server is used for each cell phone, the server loop through the code via the Internet or possibly via a conference call the cell phone. Furthermore, the code can be encrypted in the relevant mobile phone or a mobile phone. Or a method is provided in which the code from two sides (via the second mobile phone) is forwarded to a cell phone (parallel connection) and the comparison is done on the phone, and by determining the phone numbers, the cell phone's assignment to the on the phone's data entered (see the pre-applications cited in the description),
and or
using the temporary coupling of a mobile phone (acoustically or by infrared, etc.) with a WEB page, wherein the cell phone and the WB page with one or two servers, or computers of the network communicate, a data loop DS is formed , wherein via this coupling a test code is passed, which is generated by the server via the data connection to a mobile phone, and via the data connection of the server or another server to the other cell phone of the test code is passed back for testing (series connection). Where if a separate server is used for each cell phone, the server loop through the code via the Internet or possibly via a conference call the cell phone. Furthermore, the code can be encrypted in the relevant mobile phone or a mobile phone. Or a method is provided in which the code from two sides (via the second mobile phone) is forwarded to a cell phone (parallel connection) and the comparison is done on the phone, and by determining the phone numbers, the cell phone's assignment to the on the phone's data entered (see the pre-applications cited in the description),
especially in that
the process is repeated within two successive processes and the same code or a code pair defined by the server is used to detect the coupling, this code not being reused for other purposes within a period of time within which the recognition process is valid, and in that the server recognizes a related pair of terminals involved in the code coupling by recognizing the code which has been repeatedly received or the code associated with a code pair which is or are returned to the server independently of one another (in the case of intermittent network connection).

252. Method according to one of the preceding features, characterized in that at the client directly via one of the terminals used for forming the data loop (computer, mobile phone, landline telephone, etc., in any combination) or via an interposed third-party device ( 300 ), one PAD (Digitizing writing surface) is connected, the data pad of which is transmitted via the data loop DS random code ( CODE ) directly, or another random code ( Kodeń ) according to a secret algorithm, whereby in the server by an inverse application of the algorithm (with known Kodeń ) decode the data of the pad to detect a signature made on the pad during code transfer KODEn.

253. Method by feature 252 in that, in particular, that in the CODES defined by the data of the PAD (Digitizing writing surface) is manipulated according to the signature made on the PAD, in addition to the code generated by the server of the data loop DS still a code is added and in which by the data of the PAD (Digitalisierreibfläche) manipulated code, which results from the digital signature to a data document that is affected by the formation of the data loop DS (eg hash code).

254. Procedure by feature 19 , Paragraph a, particularly in that an audio signal generation or audio signal reserve is used which varies the reproduction speed controlled by control variable, without changing the pitch, using the above feature (a), the playback speed of the audio signal is controlled so that the between the frequencies used for the character coding, or also a frequency spectrum respectively lying periods of the coding of the code signal ( CODE ), wherein optionally also switching algebraic expressions of existing or nonexistent frequencies of a frequency spectrum can be provided in the coding (option).

Claims (23)

Method for the purpose of synchronizing server or data processing processes, which obtains data from terminals to be allocated to these processes and / or outputs data to these terminals, wherein a) these terminals are networked by means of communication links with devices via which the server and / or data processing processes take place or expire and the data sent by the terminals and / or received by the terminals over the said synchronization are automatically assigned to the processes present in the server or data processing processes, b) the terminals each one corresponding to the type of connection establishment of a respective terminal Message connection to a, the respective terminal respectively associated, the communication link each end device with its respective associated device communicates and the, the communication link of the terminal providing institutions are networked with each other, said networking via locally separate devices or within a common device where c) said networking enables the establishment of a communication link between the devices providing the communication link of the terminals, characterized in that d) via the said communication links respectively associated with the terminals, a data loop DS via said networking of the communication link of Terminal-providing facilities is formed, wherein on the terminal side, a data transfer made within the terminals is made within this network, e) within said Ve A KODE is used, which is transmitted in the on the terminal side under the terminals made data transmission from one terminal to the other terminal via the data loop DS ( 1a) , wherein f) said KODE is used as a rule for establishing a connection in order to receive at that terminal which receives the KODE from the other terminal ( 1a) connect to a subscriber terminal designated by the CODE or a subscriber address designated by the CODE via the device providing the terminal's communication link, wherein g) the connection established by using said KODE for the synchronization and / or networking of the server processes and or data processing processes is used, wherein data associated with these processes are respectively transmitted g1) between the said terminals and their devices or devices providing the message connection of the terminals and via said networking of the device or devices providing the message connection of the terminals, g2) and the data transmitted between the terminals and their device or devices providing the messaging of the terminals provides the server process associated with said terminals through said networking sen and / or data processing processes are assigned via the connection determined by the CODE. Method according to Claim 1 , or method, regardless of Claim 1 for the purpose of synchronization of server or data processing processes, the data to be allocated by these processes, data and / or output data to these terminals, wherein a) these terminals are networked via communication links with facilities through which the server and / or data processing processes run or expire and the data sent by the terminals and / or received by the terminals over the said synchronization are automatically assigned to the processes present in the server or data processing processes, b) the terminals each one corresponding to the type of connection establishment of a respective terminal Message connection to one, the respective terminal respectively associated, the communication link of the respective terminal respectively providing device have and / or can produce, each terminal kommuni with its respective associated device and which interconnects the messaging of the terminals providing equipment, this networking being done via locally separated devices or within a common device, wherein c) said networking enables establishing a communication link between the devices providing the communication link of the terminals , characterized in that d) via the mentioned, the terminals each associated communication links a data loop DS on the said networking of the communication link of the terminals providing means is formed, wherein on the terminal side made a data transfer among the terminals within this network, e) within the said network, a CODE is used, which in the case of the terminal device side under the terminals made data transmission from one terminal to the other terminal via the Dat enschleife DS is transmitted ( 1a) wherein f) said KODE is used as a rule to make an assignment of the terminal-related data to the server and / or data processing processes, data associated with these processes being respectively provided between said terminals and their, the communication links of the terminals f2) and the data transmitted between the terminals and their device or devices providing the communications of the terminals providing the data controlled by the CODE Networking with the Server associated with terminals and / or data processing processes are assigned according to a determined by the KODE connection and / or assignment rule. Method according to Claim 1 or 2 , characterized in that said, made on the terminal side under the terminals data transmission to form the data loop DS via a galvanic connection or by a coupling via a wireless connection, - called in the following claims signal coupling, between the terminals. Method according to one of Claims 1 to 3 , characterized in that said, carried out on the terminal side under or between the terminals data transmission is only for a short time, the actual message transmission between a respective terminal and the terminal in each case associated, the communication link of the respective terminal respectively providing means continue over the duration In addition, the transmission of data of said KODE by the data transmission on the terminal side under or between the terminals via the said data loop DS has already been completed. Method according to one of Claims 1 to 4 , characterized in that i. the method for calling a WEB page or establishing an equivalent subscriber or Internet connection at one of said terminals, which is included in said data path of a data loop DS, hereinafter referred to as first terminal (CL), is used, where ii. on the said first terminal (CL) the call of a WEB-side or the production of an equivalent subscriber or Internet connection using another terminal (T- #) takes place, via which said data loop DS for a made on the terminal side under the terminals data transmission is closed, hereinafter referred to as second terminal (T- #) -, where iii. said KODE is communicated to said second terminal (T- #) via the communications link of its device providing that communications link, iv. the CODE a telephone number, and / or a connection address for an Internet telephony, and / or an Internet address, and / or an address for an Internet access, and / or a WEB page name and / or a WEB SITE address, and / or a server address, and / or a radio channel, and / or a comparable coding for a connection or addressing of a Teilnehmeranschaltpunktes or a subscriber address for the general connection of a data path called or in said KODE such a name is included, v. and the CODE is transmitted from said second terminal (T- #) to said first terminal (CL) via said data loop DS within the network, wherein vi. said first terminal (CL) selects by means of this KODE, via a program (software "plug-in") installed in this terminal (CL), the coding of a subscriber line contained in this CODE or addresses a subscriber address by means of the subscriber corresponding to the CODE = or Internet connection to establish a communication link for this terminal (CL) and / or establish a connection to a transmitted via this communication WEB page, vii. wherein each terminal (CL and T- #) affected by the connection made by said KODE transmission communicates with its associated device via its communication link, viii. and the data transmitted from or to the terminals to the respectively associated server and / or data processing processes, - which relate to the communication of the terminals - are assigned via the determined by the KODE networking of, the communication link of the terminal respectively providing facilities. Method according to one of Claims 1 to 5 for carrying out on an arrangement consisting of said devices and devices, said data transmission taking place on the terminal side under the terminals being effected by a signal coupling between said terminals to form said network, characterized i. that one of the terminals, which is to send data to the other terminal via the signal coupling made under the terminals, an optical image field for displaying an image, - a screen or a display, hereinafter referred to as a display, -, used for the signal coupling transmitter side, ii , that the other terminal, which is to receive data from the other device via the signal coupling made under the terminals, an image recording device, hereinafter referred to as digital camera -, used for the signal coupling on the receiving side, iii. wherein said signal coupling for a terminal-side data transfer among said terminals for said data loop DS is thereby formed by the digital camera that terminal which is to receive the data routed via the signal coupling, the image of the other device which is to be transmitted on the optical image field and which is to transmit the data routed via the signal coupling, iv. wherein on the display of the data transmitting terminal the data to be transmitted are coded by the image representation of a KODE image displayed on the display and the receiving end terminal which receives the signal coupled via the signal coupling by capturing the KODE image from the other terminal, this data decoded from this image representation in order to use the KODE contained in the image representation in the manner mentioned. Method according to Claim 6 Characterized in that said image representation of said image CODE relates to a modulation for encoding by a brightness or Farbgebungsmodulation using a video camera as a digital camera. Method according to Claim 7 Characterized in that the code is encoded in a serial modulo 2 CODE signal, wherein the terminal which receives the forwarded via the signal coupling data by an image pickup of the code image, decodes the data from this image representation. Method according to Claim 6 Characterized in that said image representation of said CODE image relates to a corresponding to the code representation as a graphic area from which the terminal, which receives the forwarded via the signal coupling data by an image pickup of the code image, decodes this data from the image representation, to use the CODE contained in the image representation in the manner mentioned. Method according to one of Claims 1 to 5 for carrying out on an arrangement consisting of said devices and devices, said data transmission taking place on the terminal side under the terminals being effected by a signal coupling between said terminals to form said network, characterized i. that one of the terminals, which is to send data to the other terminal in the signal coupling made under the terminals, uses a loudspeaker or an earpiece for the signal coupling on the transmitter side, ii. that the other terminal, which is to receive data from the other device in the signal coupling made under the terminals, uses a microphone for the signal coupling on the receiving side, iii. wherein said signal coupling for a made on the terminal side under the terminals data transmission for said data loop DS is formed by the microphone of the terminal which is to receive the signal coupled via the signal coupling, reproduced with the speaker or with the earpiece acoustic Signal of the other device, which is to send the data routed via the signal coupling, is recorded, iv. wherein the acoustic signal reproduced by the speaker or the earpiece of the terminal transmitting the data, the data to be transmitted are encoded in a modulation content of the acoustic signal, and the receiving end terminal receiving the signal coupled via the signal coupling through a microphone recording, retrieves this data from the decoded acoustic signal to use the KODE contained in the acoustic signal in the manner mentioned. Method according to Claim 10 , characterized in that the modulation in which the KODE transmitted via the data loop DS is coded in a modulation content of said acoustic signal is made by modulation of the harmonic component of an audio or speech signal. Method according to Claim 11 Characterized in that the code is encoded in a serial modulo 2 CODE signal and the terminal which receives the forwarded via the signal coupling data through a microphone recording of the acoustic signal, the data decoded from the acoustic signal to the information contained in the acoustic signal CODE to use in the said manner. Method according to one of Claims 1 to 12 Characterized in that said CODE contains data which influence the allocation of the data transmitted via the communication link to the terminals information about the data within said cross-linking processing server processes and / or determine. Method according to one of Claims 6 to 9 , or after one of Claims 10 to 13 , characterized in that instead of the in iv feature Claims 6 or 10 indicated by the said Receive-side terminal in this feature decoding the signal information obtained via said signal coupling between the terminals, the decoding of this signal information is performed by a networked to the receiving end terminal device. Method according to one of Claims 1 to 14 Characterized in that said CODE contains additional information, to the assigned to the terminals information to the on / crosslinked with the terminals device / devices running Server - assigned and / or data processing operations and / or in the server - to and / or data processing operations address. Method according to one of Claims 1 to 15 CHARACTERIZED IN THAT said method is used for processing a payment transaction, wherein the data transfer performed on the terminal side among the terminals is performed by closing the data loop DS between two terminals. Method according to Claim 16 Characterized in that said CODE with further data, in particular the amount, the purpose of payment and the identification data or identification data associated payment person or persons concerned or marked. Method according to Claim 16 or 17 CHARACTERIZED IN THAT , of the two said terminals over which said data loop DS on the terminal side is closed, one is a portable device and the other is a stationary device, or that of the two said terminals, via which said data loop DS the terminal side is closed, both terminals are portable terminals. Apparatus for methods according to one of Claims 1 to 18 Characterized in that, the communication link of the terminal providing means or respectively providing means of cross-linked with one or more servers or computer or network of the communication link of the terminal providing means or respectively providing means of one or more servers or computer itself takes place, said server or computer said server and / or data processing processes are feasible. Apparatus for methods according to one of Claims 1 to 18 CHARACTERIZED IN THAT , between the terminals, there is provided a wireless near-communication interface present at the terminals over which said signal coupling is formed among the terminals. Apparatus for methods according to one of Claims 1 to 18 , characterized in that one of the two terminals is a portable device and the other is a stationary device. Apparatus for methods according to one of Claims 1 to 18 , characterized in that both terminals are portable devices. Apparatus for methods according to one of Claims 1 to 18 , characterized in that said signal coupling is performed among the terminals by a third party device inserted in the data path between the terminals.

Images