DE102006037260B3 - Method for verifying and / or authenticating delivery data, usage, device and computer program product - Google Patents

Abstract

In summary, the present invention relates to a method for checking and / or authenticating transmission data of a data processing device, in particular a computer, comprising the steps of: acquiring at least a part representation data shown in human readable form by means of a presentation device as recording data with a recording device, in particular a camera mobile telephone; - receiving transmission data with the recording device; Reviewing and / or authenticating at least part of the transmission data on the basis of the recording data by the recording device, a use, a device and a computer program product.

Description

The The present invention relates to a method for checking and / or Authenticate delivery data, a use of a recording device, a device as well a computer program product.

Basically immanent it digital signature and related tasks, that these signature procedures not be performed directly by the appropriate user, but with the help of a (special) device, such as a personal computer (PC), a smartcard with the appropriate reader / writer or similar devices, so that the User can not directly verify signed data.

Especially is it conventional Signature method and / or devices used for this possible that they are not trusted. For example, a PC may be infected by viruses, worms, Trojan horses, etc. may be infected or a terminal may be in a public Room (e.g., an Internet cafe). Accordingly it could possible be that data, which are actually displayed on the screen of the signature used or authenticated data differently are. Even a trusted one Chip card can not prevent that in this way unwanted documents are "pushed" and in particular unwanted documents encoded or signed. It is therefore desirable that the signing data or data to be encrypted therefore directly from Users are verifiable.

A possibility this may be, for example, a conventional "class 3 smart card reader", i. a certified chip card reader with keyboard for PIN input and a small display, for signing or verification use, so that only this device and the chip card used must be trusted. However, such a "class 3 smart card reader" can only regularly for very small ones Data sets are used. In particular, for example, a To sign the amount of money, the Information, i. For example, the amount of money, recipient name or address, etc., be small enough to be displayed on the device's display to be able to. Especially with longer Documents can this device however, not be used as a review of longer texts on a small scale Display is impractical and error prone. In addition, must in the Use in foreign environments to ensure that a "Class 3 smart card reader" is actually used and no fake Copy about with a glued foreign display.

requires Furthermore, an application only has one authentication and no digital Signature, is usually based on a static, symmetric authentication method, such as personal Identification Number (PINs) and Transaction Number (TAN) Lists resorted which due to the lack of binding to the thus to be authenticated Content only a little security and thus in particular Phishing and pharming attacks can be delivered a user on a fake one Web page that is similar to the real one to give him secrets, such as. To elicit PINs and / or TANs.

in the Online Banking environment these problems traditionally only with limited Security solved. Online banking over the HBCI standard with chip card offers security only if a "class 3 chip card reader" is used, by amounts to check on the display. More complex checks are not possible. Solutions like eTAN devices in one, for taken on a secure, "challenge-response-procedure", i. an interactive review of a Knowledge of a secret, especially without password query, TANs Generate only limited Security against virus-contaminated computers. Another, suggested The method should make the computer itself trustworthy, as e.g. by the initiative of the "trusted computing group " is.

Farther was a use of a mobile phone as a "trusted device" for various online banking methods have been proposed, e.g. by the mTAN of the Postbank, at the control for an SMS with the transfer data is sent, or something similar System of the company Meridia.

WO 96/18169 A1 discloses an apparatus and method for verifying a transaction, such as a message, wherein to perform the transaction a fingerprint of a person is scanned and the scan data is compared to stored fingerprint data. In this case, for example, the fingerprint data generated for the verification of the transaction can be sent via an encrypted network to a remote computer and verified there.

JP 2006-093 934 AA discloses a mobile telephone with integrated camera, wherein for operation of the mobile telephone the user must create a photograph of his face and the photo of the user's face is compared and verified by means of internal image recognition software with a pre-stored on-system photo of the user's face , in particular, whether the new photo is identical to the already saved photo. Only in the positive case, the Mobilte be operated telephone.

JP 2004-054835 AA discloses a mobile registration terminal, such as a mobile computer, and a mobile communication terminal, such as a mobile phone, where both the registration terminal and the communication terminal are each equipped with a fingerprint sensor, and at the registration terminal, a registration fingerprint is generated, which is sent to the mobile communication terminal is transmitted. To operate the communication terminal, a fingerprint scan must still be performed on the mobile communication terminal, where the fingerprint is compared with the registration fingerprint and authenticated.

KR 10 2006003 638 A discloses a mobile telephone with a camera, wherein the camera is designed as an autofocus camera and the camera is used to generate a fingerprint of the user, wherein the user is authenticated on the basis of the fingerprint.

It is an object of the present invention, in a simple and reliable manner a safe transfer of data and in particular those to be transmitted Easily check data or to authenticate. This object is achieved by the characteristics of the independent claims solved. Preferred embodiments The invention is the subject of the dependent claims.

• – Erfassen bzw. Detektion zumindest eines Teils mittels einer Ausgebe- bzw. Darstellungsvorrichtung insbesondere in menschenlesbarer Form dargestellter bzw. ausgegebener Darstellungsdaten als Aufnahmedaten mit einer Aufnahmevorrichtung, insbesondere einem Kameramobiltelefon, d.h. einem Mobiltelefon mit damit verbundener oder integrierter Digitalkamera;
• – Empfangen bzw. Erhalten von Übermittlungsdaten mit einer Aufnahmevorrichtung;
• – Überprüfen und/oder Authentifizieren zumindest eines Teils der Übermittlungsdaten anhand der Aufnahmedaten durch die Aufnahmevorrichtung.

One aspect of the present invention relates to a method for checking and / or authenticating transmission data of a data processing device, in particular of a computer, with the steps:

• Detecting or detecting at least a part by means of a dispensing or display device in particular in human-readable form displayed or output presentation data as recording data with a recording device, in particular a camera mobile phone, ie a mobile phone with connected or integrated digital camera;
• - receiving transmission data with a recording device;
• Checking and / or authenticating at least a part of the transmission data on the basis of the recording data by the recording device.

advantageously, the process is independent from appropriately secured computers, in particular the camera phone serves as the user's "trust anchor". Thus, advantageously by means of the receiving device a "medium change" that is an unauthorized one Intervention (for example by means of a Trojan or a phishing software) severely hampered if not entirely prevented.

Farther Advantageously, a "manual" or visual check of the Inputs by the user on a small display, for example on a display of a mobile phone and / or a display of a conventional "class 3 smart card reader", etc. not necessary. Rather, a review is more complex by the method according to the invention Files or contents possible, because the presentation data on the one hand preferably on a conventional Computer display can be displayed and thus their content in simple Manner can be checked manually or by the user and on the other hand the delivery data at least partially automatically or mechanically with the preferably digitally recorded recording data, which on the illustrated Presentation data are based, at least partially compared.

Further can the inventive method furthermore advantageously also in already existing verification / authentication procedures to get integrated. In other words, the method according to the invention backward compatible and can be easily implemented in existing procedures become. Thus, you can for example, the inventive method and a known, conventional Authentication method "parallel" or for authentication the same data or content (alternative or cumulative) depending on whether the user has a recording device, for example a camera phone, a Personal Digital Assistant (PDA), a notebook, a digital camera, etc., based on which the inventive method be performed can.

The delivery data have to according to preferred embodiments The invention is not necessarily limited to other external receivers, such as e.g. other, external computers, servers, etc. are sent. Much more can The data should also be provided for archiving, with archiving for example, can be performed on the computer on which the Data originally prepared, without the data to a specially designated Archiving device to send. Likewise, according to further preferred embodiments the present invention files are checked for their reliability, it is also not necessary for the files or data to be sent. In any case, the transmission data however, received by the cradle, i. transmitted to the recording device and captured by this, checked or to be authenticated.

In In other words, based on a preferred embodiment the method according to the invention to be transmitted Data on a presentation means, in particular a computer display or another interface such as e.g. a printer, projector or the like., Shown. For example, the content of a file to be submitted, especially an MS Word file, MS Excel file, MS PowerPoint File, a PDF file, a text file, an EPS file, etc., For example, by the appropriate program or by specific Software on a computer display, such as a computer monitor being represented.

Subsequently, will at least a portion of this data presented a recording or detection performed on the basis of, for example, the camera phone. in this connection can the data is either partially or essentially taken in its entirety especially with or without the monitor and other environment. It is also possible, that only the representation of the data itself or a part thereof, d. H. for example a window or part of a window in an operating system, such as Windows, or a screen shot recorded is or just a section of such a window or screen.

When Recording device can in this case a conventional mobile phone with integrated Digital camera (so-called camera phone) serve. A cradle can also use a personal digital assistant (PDA) with an integrated Digital camera, a notebook with an integrated and / or one attached digital camera, a webcam, which s.einem Notebook is connected or a webcam, which to another Computer is connected, a conventional digital camera, etc. be. For example, the recording device is a conventional digital camera, this digital camera can be designed that preferred method according to the invention perform. Alternatively, this digital camera may also be designed to hold the data to another computer (for example via a Bluetooth interface) to convey which is different from the computer, the original representation the data carried out Has. In this case, in the sense of this invention by the digital camera and the other computer spoken as a recording device. Instead of an integrated digital camera, it is possible that the devices shown above each connected to a digital camera, for example, the Digital camera on a housing of the corresponding device is fixed, for example, is glued to it. For example A PDA can be electronically connected to an external digital camera and the digital camera is used to record the presentation data. The image data is sent to the PDA. The digital camera can this essentially (except for the electronic connection with the PDA) independent of the PDA be. The digital camera may also be attached to the housing of the PDA, for example glued, fastened by a Velcro, etc ..

In one next Step the data, which is based on the display device have been shown, (at least partially) to the receiving device shipped. This means, the PDF file, Word file, Excel file, Powerpoint file, Text file, EPS file, etc., which previously, for example, on a computer monitor represented or over an interface has been issued, is now sent to the recording device, in particular the mobile phone sent or transmitted.

In In a further step, the transmission data are determined on the basis of Recording data reviewed by the recording device and / or authenticated. In other words, the receiving device compares, for example the mobile phone, at least partially the content of the received File with the captured or captured image data, for example a comparison of individual pixels or pixels or groups of pixels carried out can be made by a representation of the data transmitted by the Recording device is determined or generated. Alternatively or additionally can also be a comparison based on the typeface (at least a part) of the recording data and the displayed presentation data carried out In particular, individual items of letters have special influence can. Alternatively or additionally also performed a hypothesis test being checked or It determines how big the probability is that the Recordings of the screen representation i. the presentation data equal to the transmission data are. In other words, it is possible to check or determine how big the probability is that the Recording data are equal to the presentation of the transmission data. Provided this determined probability a special (predetermined or predeterminable) threshold probability, It is assumed that the Recording data and the transmission data (or their content or information content).

In other words, the transmitted data is displayed virtually by the recording device (for example, by the mobile phone), ie a representation of the transmitted data on the display of the recording device is not necessary. In particular, the recording device can therefore have no display or only a small or low-resolution display. Furthermore, it may already be sufficient, for example an Au Authentication can be positive or negative or binary, as is possible, for example, using a red and a green LED.

According to the preferred Embodiment of However, the invention advantageously avoids the representation of the transmission data and the verification of the transmission data on a same device takes place. Rather, the presentation data from the display device and a recording of the presentation data by the recording device carried out, i.e. Image data of the presentation data generated in the recording device. Thus, advantageously, a "medium change", which is an unauthorized intervention (for example using a Trojan or Pyshing software) if not completely prevented. Advantageously, in this case the receiving device not be influenced by the data processing device. Subsequently become the delivery data transmitted to the recording device. If the presentation data from the transmission data (at least partly), this can now be done in a simple and automatic way Way to be checked. Thus, it is advantageously excluded that the presentation data, which represented with an output or display device or output and which have been manually checked by the user himself (e.g., if recipient account and amount agree), i. whose content the user is authenticating or sign, from transmitted to the receiving device or to other devices transmission data to be transmitted differ. In other words, it can be advantageously determined whether a data processing device, such as a computer, Represents data differently than they should be sent or otherwise shipped as shown.

Short summarized On the one hand, the data are processed by means of the data processing device, in particular a display device of the data processing device displayed or output. On the other hand, one of the Presentation device different and in particular separate Detection or recording device image data of the presentation data generated or detected or detected and the transmission data at least partially sent to this recording device.

Preferably become the delivery data at least partially transmitted as text data to the recording device.

For example can do this the original file, i.e. the originals Presentation data, in a text file or a file of different format be transformed or converted. Lying for example, the original Data as a Microsoft Word file, this MS Word file may e.g. in a text file to be reshaped. Advantageously, this can the delivery data, essentially independent from the operating system or from the software on the recording device, be represented by the recording device.

Farther Preferably, a normalized based on the recording device Target presentation of the transmission data determined and for review and / or Authentication of the recording data the standardized target representation the transmission data with the presentation data (at least partially) compared.

Of the Term "determined" within the meaning of the invention means, for example, "calculated", "detected", "detected", "converted" and the like. In others Words is preferably based on the transmitted text file of the transmission data a representation of the data is calculated. For this it is not necessary the representation of the data e.g. on a display of the output device output or by means of a printer on a conventional carrier (e.g., a sheet of paper). Rather, for example, a virtual appearance of the delivery data be generated. This virtual appearance of the delivery data is used with the image data, which is based on the recording device of the presentation data were generated compared.

One Comparison can be made here using conventional graphics comparison programs, in particular by pixel-by-pixel comparison, wherein For example, color or gray or brightness values of pixels the recorded presentation data with corresponding values corresponding Pixel of the target representation of the transmission data (at least in part) and, if necessary, differences be determined or determined. Differences can be made, for example, by difference etc. are determined, for example, a difference then can exist when a certain threshold in the difference exceeded the two values of the pixels becomes.

Additionally or Alternatively, it can also be based on a character recognition or on it based comparison method can be applied.

Especially the presentation data are preferably selected according to a predetermined or Predeterminable standard, in particular according to a normalized screen display illustrated by the display device.

In other words, the presentation data are preferably not displayed according to any representation, but are presented in accordance with a predetermined or predeterminable norm, ie in particular with a specific font or font, which font may be particularly large, for example, so that it can be suitably imaged using the recording device. For example, a mapped font size may be 9 point, 10 point, 11 point, 12 point, 14 point, 16 point, 18 point, 20 point, 22 point.

Alternatively / additionally, too special, well-recognizable fonts are used which for example, as possible has different / different characters, e.g. the numbers "0" and "8" or the number "1" and the capital letter "1" if possible not to be confused. For example, such a font the conventionally used for the labeling of license plates Be font.

Further can further help information for orientation recognition is displayed be such. one or more auxiliary lines, an auxiliary grid, in particular a colored or otherwise colored grid (preferred with different color and / or brightness values), the (Auxiliary) grating may be arranged such that each character in exactly one field of the grid is arranged. In particular, the presentation happens preferably according to an identical or very similar Norm on the basis of which determines the desired representation of the transmission data becomes.

Especially is preferred for review and / or Authentication of the transmission data with the presentation data, an identity of the transmission data with the presentation data or a difference between the delivery data and the presentation data output.

In In other words, in particular the standardized desired representation of the transmission data with the recorded or illustrated presentation data, which in particular according to a predetermined standard represented by the display device were compared and, for example, pixel-by-pixel differences or matches determines and, where appropriate, the differences and / or the similarities be issued. As already stated above, the Similarities / differences can also be determined by other means for example, with the aid of a text recognition (OCR) or based on a character recognition.

Preferably The transmission data is via Bluetooth and / or Short Message Service (SMS) and / or barcodes or barcodes (i.e., a machine-readable font or pattern of strokes, which corresponds to a combination of numbers or letters, e.g. using one of the following barcode methods: EAN 8, EAN 13, EAN 128, Code 39, Interleaved 2/5, Codabar, UPC-A or their subgroups) or 2D bar codes (i.e., a matrix code as a two-dimensional representation of Information) transmitted to the recording device.

It can other possible transmission paths be used, for example, over a cable connection, over wireless network connections or other conventional connection paths.

Prefers the recording device generates an indicator and / or a digital signature (preferred according to the legal standard of the German Signature Law, SignG) of the transmission data.

advantageously, the method is used according to this preferred embodiment the present invention with the aid of a particular Mobile phones and with (built-in or external) camera as a "trust anchor". It is suitable but not only for the tasks outlined above and applications, but also for related tasks, where no signature, but other types the authentication are required. Advantageously leave to combat attacks such as "phishing" and "pharming" effectively.

Especially preferably transmitted the recording device the indicator and / or the digital signature the data processing device.

Consequently can by means of a communication of the recording device with a external device the Signature or for that relevant data is transmitted to the external device, which for example the signature, in particular together with the transmission data, forwards. Alternatively, it may also be possible to contact the data processing device only a confirmation the identity, For example, a positive authentication, or a denial of Identity, for example, a negative authentication to transmit so that one Signing performed on the data processing device or not carried out becomes.

alternative or additionally it is also possible that the Cradle directly the transmission data and retransmits the signature without first transmitting it to the data processing device.

Further preferably, the indicator and / or the digital signature is generated on or by means of a smart card, which is secured by its own personal identification number, ie by its own personal PIN. The smartcard can be an external, outsourced smartcard. The smartcard can also physically with the Aufnah mevorrichtung, in particular the mobile phone, PDA; etc. may be included, for example, in the mobile phone, PDA, etc. included. The smart card may in particular also be coupled to a SIM card of the mobile phone, the PDA, etc.

In other words it may be possible be that one authenticity detected between the presentation data and the delivery data and a signature is to be created, whereby to create the signature further preferably an additional PIN in a peripheral device and / or the recording device and / or the data processing device is or must be entered.

Preferably In operation, the recording device is authenticated by a user. Further preferably, must be previously the user to authenticate to the recording device.

For example An authentication can be carried out by turning on and / or when signing, especially after entering the PIN and / or others Security data, in particular biometric data, such as a fingerprint, another, additional Password must be entered or the recording device displays an image and the user recognizes "manually" or visually, if this is the desired one Image is or this image is not the default or desired Picture is. Thus, it can be easily determined whether the user actually the one he wants Recording device operates.

In in other words, it can be ensured that the desired device is actually used and not a deferred, counterfeit device. This can be done in particular be achieved that the Recording device represents an image, which of the user can be determined and identified. Alternatively / additionally after successful authentication of the user a password for unique authentication of the device will be displayed and / or used more combined two-way authentication protocols become.

According to one transmitted further preferred embodiment the recording device generated due to a (A) GPS signal Position or corresponding indicative data to the data processing device.

Especially Preferably, the (A) GPS signal can also be used to generate the digital Signature be used and, for example, in the digital signature "incorporated" or taken into account, whereby in particular the respective location of generating the digital Signature can be stored with or used for the signature can be.

Especially Preferably, the recording device is in a safe mode operated.

For example the recording device can be switched to a safe mode, this preferably by a special switch or a keyboard shortcut, etc. performed can be. In particular, it is possible that the receiving device only to verify / authenticate and / or to create the signature and / or to submit (at least part of) the transmission data with or without signature and / or to transmit the indicator in the safe mode is operated. Operated in safe mode to become e.g. include that the receiving device no other services, as recording the recording data and / or receiving the transmission data and / or checking or Authenticating and / or outputting a result (in the form of a Signature, a positive authentication, etc.).

• – Darstellen bzw. Ausgeben zumindest eines Teils der Ausgabe- bzw. Darstellungsdaten insbesondere in menschenlesbarer Form auf einer Ausgabe- bzw. Darstellungsvorrichtung der Datenverarbeitungsvorrichtung, insbesondere einem Computerdisplay;
• – Erfassen bzw. Detektieren zumindest eines Teils der dargestellten bzw. ausgegebenen Darstellungsdaten als Aufnahmedaten mit einer Aufnahmevorrichtung, insbesondere einem Kameramobiltelefon;
• – Übermitteln bzw. Übertragen der Übermittlungsdaten an die Aufnahmevorrichtung,
• – Überprüfen und/oder Authentifizieren zumindest eines Teils der Übermittlungsdaten anhand der Aufnahmedaten durch die Aufnahmevorrichtung.

A further aspect of the present invention relates to the use of a recording apparatus, in particular a camera telephone and a data processing apparatus, in particular a computer, for checking and / or authenticating transmission data of the data processing apparatus, with the following steps:

• Representing or outputting at least part of the output or presentation data, in particular in human-readable form, on an output or presentation device of the data processing device, in particular a computer display;
• - Detecting or detecting at least a part of the displayed or output presentation data as recording data with a recording device, in particular a camera mobile phone;
• Transmitting or transmitting the transmission data to the recording device,
• Checking and / or authenticating at least a part of the transmission data on the basis of the recording data by the recording device.

• – einer Detektions- bzw. Aufnahmeeinrichtung, welche ausgelegt ist, von einer Ausgabe- bzw. Darstellungsvorrichtung insbesondere in menschenlesbarer Form dargestellte bzw. ausgegebene Übermittlungsdaten als Aufnahmedaten zur erfassen bzw. zu detektieren;
• – einer Empfangseinrichtung, welche ausgelegt ist, Übermittlungsdaten zu empfangen;
• – einer Datenauthentifikationseinrichtung, welche ausgelegt ist Übermittlungsdaten anhand der Aufnahmedaten zu überprüfen und/oder (zumindest teilweise) zu authentifizieren.

A further aspect of the present invention relates to a device, in particular a camera mobile telephone, for checking and / or authenticating transmission data of a data processing device, in particular of a computer

• A detection or recording device, which is designed to record or to detect from a display device, in particular in a human-readable form, output data as recording data;
• A receiving device, which is designed to receive transmission data;
• A data authentication device which is designed to check transmission data on the basis of the recording data and / or to (at least partially) authenticate it.

Checking and / or (at least partially) Authentication can be based on, for example a digital signature.

Prefers if the receiving device is designed to transmit data (at least partly) in the form of text data.

Farther Preferably, the data authentication device is designed for checking and / or to authenticate the delivery data to determine a normalized desired representation of the transmission data and the normalized desired representation of the transmission data with the recording data, i.e. the image data of the displayed presentation data, (at least partly).

Preferably If the display device is designed to display display data according to a predetermined or predeterminable norm, in particular according to a normalized screen presentation.

Especially Preferably, the device has a data output device, in particular a display, wherein the data output device is designed, to check and / or to authenticate the delivery data with the recording data, an identity of the transmission data with the recording data or a difference between the transmission data and the recording data issue.

Preferably the receiving device is designed to transmit data via Bluetooth and / or SMS and / or 2D barcodes.

Farther Preferably, the data authentication device is designed to an indicator and / or a digital signature of the transmission data to generate.

According to one preferred embodiment the data authentication device is designed, the indicator and / or to send the digital signature.

According to one another preferred embodiment comprises the device is a smart card which is designed to be the indicator and / or to generate the digital signature, wherein the smartcard by your own personal Identification number (PIN) is secured. The smart card may preferably have a external smartcard.

According to one particularly preferred embodiment The device is designed to be authenticated during operation by a user to become.

Preferably the device is designed to be one due to a (A) GPS signal to send generated position.

Farther Preferably, the device is operable in a safe mode.

One Another aspect of the present invention relates to a computer program product, especially stored on a computer-readable medium or realized as a signal which, when loaded into the memory of a suitable computer and running from a computer, that causes the Computer a method according to the invention or a preferred embodiment performs thereof.

The above to the aspects of the invention, in particular to the preferred embodiments, are not limited to this aspect and embodiments, but apply mutatis mutandis to all aspects and embodiments the invention.

preferred variants or forms of the invention are described below with reference to accompanying Figures described by way of example, with individual features of the described preferred embodiments arbitrarily with each other, in particular to further preferred embodiments or shapes can be combined. It shows

1 a flowchart of a preferred embodiment; and

2 : a schematic view of a computer system.

1 shows a schematic flow diagram of a method according to a preferred embodiment of the present invention. In a first step S1, for example, image data of presentation data are generated on the basis of a mobile telephone with an integrated digital camera. For example, the presentation data is displayed on a computer monitor (in conjunction with a computer) or a television, a display of a notebook (laptop, palmtop or the like), a display of a personal digital assistant (PDA), a printer, etc. In this respect, the step of presenting may also be an initial step of according to another preferred embodiment of the present invention. The representation can take place in compliance with certain, predetermined formal requirements, such as eg margin, font and size, further auxiliary lines or grids, etc., preferably using methods or a computer program according to a preferred embodiment of the invention. In other words, the data to be checked may be an MS Word file, MS Excel file, MS PowerPoint file, Text file, PDF file and / or EPS file. However, the file is not necessarily presented in the appropriate format or software tool (eg with MS-Word), but with a computer program according to a preferred embodiment of the invention, in which however the software tool (eg MS-Word) can be embedded or works together with the software tool (eg MS-Word). In particular, the method / computer program may be designed to pass certain form specifications for displaying the presentation data to the software tool (MS-Word), whereby the presentation data are displayed correspondingly using the software tool (eg MS-Word). Accordingly, any other file format can be displayed or the method / computer program according to a preferred embodiment or form of the invention cooperate with a corresponding conventional presentation program.

In In other words, an image of the presentation data or a Part of the output or presentation data, in particular as image data, For example, in the form of a TIFF file, a JPG file, a PDF file or other convenient file on the mobile phone saved. Instead of the mobile phone can also be a PDA, a notebook, a another computer, a digital camera, a webcam, etc. as a detection Serve, wherein it is necessary that the corresponding Device designed is, at least in collaboration with another peripheral digital Image data of at least part of the output or presentation data to create. Here, the recording device should essentially independent of the data processing device, i. for example, a computer be, which in cooperation with the display device the Presentation data represents. In particular, it makes sense that the receiving device is physically separated from the data processing device, that is, the Recording device and the data processing device, for example not connected by a computer network (constantly) are.

In one next Step, step S2, becomes the delivery data (at least partially) transmitted to the mobile phone, this example, by send as email, SMS, MMS, (2D) barcode, through a USB connection, via a Infrared interface, Firewire, Bluetooth, W-Lan or another conventional Interface can be done. The transmission to the mobile phone can, for example, by means of a computer program according to a preferred embodiment The invention be carried out, it being sufficient for this purpose, for example can, only one field (digital button) or a button one to activate the graphical user interface of the computer program. Consequently, must the mobile phone and the computer at least for transmitting the transmission data at least in the short term, or at least in the short term Data exchange between the computer and the mobile phone done.

In a further step S3 are then by the mobile phone the delivery data and the displayed presentation data, as by the mobile phone recorded recording data or image data, (at least in part) compared and in particular differences and / or similarities detected. Furthermore, it can be determined from the mobile phone whether, for example, the recording data and the transmission data predominantly Have similarities or differences (e.g. suitable thresholds, i. even small deviations can be sufficient to a verification will fail leave) and thus automatically authenticate the delivery data and / or verify. This can be a positive output on the Mobile phone, if the recording data and the transmission data predominantly are the same, i. the probability of a match a given or predeterminable threshold value. The (at least partial) comparison here may preferably be pixel-wise take place, the transmission data virtually represented on the mobile phone or processed accordingly become. In other words, for example, a representation of the transmission data generated, similar a screenshot of the presentation of the transmission data, in particular at given molding conditions, e.g. Margin, font and size, etc., being an actual Presentation of the transmission data is not necessary, but the representation without direct mapping done on a display. This virtual representation can then matched with the recorded image, (optionally with the aid of guides) display changes, such as size, rotations, Distortions, etc. can be corrected. Furthermore, (additionally or alternatively) a visual comparison of the presented or output transmission data and the recording data is done by a user who then has a appropriate authentication or verification and input of the result performs.

After the step S3, for example, a Wiederholungsmöglichkeit be provided, the it allows the user to perform steps S1 to S3 again. This can be particularly advantageous if the user wants to or has to provide more than one displayable page or a plurality of data with a single signature. For each additional page to be authenticated or signed, the steps S1 to S3 are performed and after checking all the data, the step S4 can be performed.

If the review or Authentication positive, in a further step S4 using the mobile phone a digital signature for the transmission data be created or a corresponding indicator or flag generated and transmitted to the computer be that one digital signature for the delivery data should be created. Likewise also the transmission data (with or without signature), the transmission data be sent directly or directly from the mobile phone or, if appropriate, a reference from the Computer.

It is therefore possible a positive review in easy way to represent. It is also possible to enter in case of negative verification output corresponding signal and in particular a warning signal to convey to the user for example by a suitable graphical representation, e.g. Flash, Color change, etc. and / or by a warning tone.

In In other words, in the method according to a preferred embodiment the invention, the verification or authentication, whether that too signing document, i. the delivery data, the document really is or corresponds to the document that the user wants to sign, by a trusted independent device (e.g. a mobile phone with camera), so that advantageously takes place a "medium change", the an increased Security allowed. Accordingly, it is checked whether the user presented or output data, i. the presentation data, (or relevant Parts of it) actually are identical to those to be transmitted Data, the transmission data (or relevant parts thereof). This prevents the user falsely Signs or releases data, although in the form shown correspond to the data he is transmitting would like to, however, from the actual to be transmitted Data (content) differ. Here, the document is from a computer, in particular a PC in a standardized manner on a screen of the computer and in addition preferably sent in text format to the mobile phone or mobile phone. The camera of the mobile phone photographed the screen, and the mobile phone compares (at least partially) the image with that from the received Text generated standard representation. If they match, sign that Mobile preferably the document or releases it, otherwise Preferably, a rejection of the signature or the process takes place. Optionally the user the differences or differences between the transmission data and the presentation data (in particular in the predetermined normalized Presentation). In addition, the user can possibility have to enforce the signature or release explicitly,

According to the preferred variant of the invention the procedure the direct verifiability the data to be signed by humans, in particular by means of the mobile phone, which is essentially independent of the computer and so not at risk is, like the computer, because the mobile phone is not regularly, for example exposed to such dangers of the Internet is like a computer. A signature or any other action (e.g., sharing a TAN from a stored list) takes place in particular only when the data as read by the user (i.e. the output or presentation data), with the data to be signed (i.e., the transmission data) (at least partially in relevant parts), so that will be the top prevented attacks, in particular without the human being is forced, an unergonomic or difficult to read small Display to use. In the method according to a preferred embodiment The invention will be very realistic assumptions about the trusted equipment made. The user is for the security only on the trustworthiness of your own camera phone instructed, not on third-party devices or poorly controlled devices such as virus-prone PCs e.g. in public Rooms.

The Method according to one preferred embodiment of the present invention across from the previous solutions the security with constant or smaller assumptions and offers diverse Applications, such as the digital signature of common contracts, secure Online banking and complex online brokerage, secure e-government applications (e.g., electronic tax return) and / or authentication,

In the method according to a preferred embodiment of the present invention, the document is displayed in a predetermined layout on the screen and additionally sent as text via Bluetooth, SMS, 2D barcode o. The like to the phone: In the mobile phone, the normalized target representation of the text is calculated and compared with the recorded or photographed screen (ie the recording data). The user can easily read the document on the screen, and thus already determine whether the presentation data (at least partially wise in relevant parts) correspond to the data he / she wants to send and, if appropriate, also to sign or authenticate or release (ie the transmission data). The mobile phone preferably automatically checks the consistency or agreement (at least partially in relevant parts) of the text, ie the transmission data, with the screen or output content, ie the image data or recording data of the presentation of the presentation data before the transmission data are signed or others Actions are initiated.

For the normalized Screen display is preferably a sufficiently large font used, possibly also help information for orientation recognition and easily recognizable Writings. Deviations from this layout can be detected by the user become. As the mobile phone in addition receives the text version of the data, must be the mobile no usual OCR to detect the screen content, but rather tests whether the documents are unequal, which advantageously causes errors due to common OCR software - in particular due to the built-in (mostly dictionary-based) to tolerant Error correction - avoided become. By fixing the font and a print of the Mobile phone keypad in this font will give the user the opportunity given, check if the presentation program also uses the specified font or whether the representation has been manipulated, e.g. a wrong one To achieve recognition. Consequently, both the recognition results can be achieved improve as well as the verifiability facilitated by a user. Furthermore, further auxiliary information for Alignment detection (especially for alignment of the recorded Picture or the corresponding recording data), such as e.g. one or more auxiliary lines, an auxiliary grid, in particular a colored or otherwise colored grid (preferably with different Color and / or brightness values), the (auxiliary) grid preferably being such is arranged that at least Area by area each character is located in exactly one field of the grid is.

The The invention is not limited to the above exemplary embodiments preferred embodiments limited. Rather, extensions of the preferred method are possible, for B by incorporating the (A) GPS signal from appropriately equipped Mobile phones to access the digital signatures through the location of the signature complete or to include the GPS location accordingly in the signature, and / or by communicating to external devices / servers / operators, what with a cell phone (for example, over GPRS, UMTS or the like.) Especially without additional Harwareaufwand is possible.

Around pay particular attention to the safety of the mobile phone too as this acts as a "trust anchor" and enables a "medium change", can according to a preferred embodiment the mobile phone is operated in a special security mode which is activated, for example, by (preferably PIN-secured) switch, and where only the signature application can run. To further increase the Security signing can be swapped out into a smartcard whose PIN is entered by a user after successful image / text verification must, thus can the phone itself does not reveal the secret key.

Of the Use of the mobile phone camera can be limited to the signature application so as to gain acceptance even in companies that normally do not allow camera phones.

Around an exchange of the trusted equipment To prevent or at least complicate, the phone can be designed be to authenticate to the user. For example, this could be done by an agreed word or password or image, which the device only after (partial) input of the user password briefly displays or transmits.

Referring to 2 An exemplary system for implementing the invention will be described. An exemplary system includes a universal computing device in the form of a conventional computing environment 120 eg a "personal computer" (PC) 120 , with a processor unit 122 , a system memory 124 and a system bus 126 which includes a variety of system components, including the system memory 124 and the processor unit 122 combines. The processor unit 122 can perform arithmetic, logical and / or control operations by adding to the system memory 124 is accessed. The system memory 124 may include information and / or instructions for use in combination with the processor unit 122 to save. The system memory 124 can volatile and non-volatile memory, such as "random access memory" (RAM) 128 and "read-only memory" (ROM) 130 include. A basic input-output system (BIOS) that contains the basic routines that help to keep information between the elements within the PC 120 , for example, during startup, may be stored in the ROM 130 be saved. The system bus 126 may be one of many bus structures, including a memory bus or memory controller, a peripheral bus, and a local bus employing a particular bus architecture from a variety of bus architectures.

The computer 120 can still use a disk drive 132 for reading or writing a hard disk (not shown) and an external disk drive 134 to read or write a removable disc 136 or a removable disk. The removable disk may be a magnetic disk for a magnetic disk drive or an optical disk such as a CD for an optical disk drive. The hard disk drive 132 and the external disk drive 134 are each with the system bus 126 via a hard drive interface 138 and an external disk drive interface 140 connected. The drives and associated computer-readable media provide nonvolatile storage of computer readable instructions, data structures, program modules, and other data for the PC 120 to disposal. The data structures may include the relevant data for implementing a method as described above. Although the exemplary environment described is a hard disk (not shown) and an external disk 142 As will be appreciated by those skilled in the art, other types of computer-readable media capable of storing computer-accessible data may be used in the exemplary work environment, such as magnetic cartridges, flash memory cards, digital video diskettes, random access memory, read-only memory , etc.

A plurality of program modules, in particular an operating system (not shown) one or more application programs 144 , or program modules (not shown) and program data 146 , can on the hard disk, the external disk 142 , the ROM 130 or the RAM 128 get saved. The application programs can perform at least some of the functionality, as in 2 shown include.

A user can enter commands and information into the PC as described above 120 using input devices, such as a keyboard or a keyboard 148 and a computer mouse or a trackball 150 enter. Other input devices (not shown) may include a microphone and / or other sensors, a joystick, a game pad, a scanner, or the like. These or other input devices may be connected to the processor unit 122 using a serial interface 152 connected to the system 126 is coupled, or may be based on other interfaces, such as a parallel interface 154 , a game port or a universal serial bus (USB). Furthermore, information can be shared with a printer 156 to be printed. The printer 156 and other parallel input / output devices may be connected to the processor unit 122 through the parallel interface 154 be connected. A monitor 158 or other types of display device (s) are / are with the system bus 126 by means of an interface, such as a video input / output 160 connected. In addition to the monitor, the computing environment 120 other peripheral output devices (not shown) such as speakers or acoustic outputs include.

The computing environment 120 can communicate with other electronic devices such as a computer, a cordless phone, a cordless phone, a personal digital assistant (PDA), a television or the like. To communicate, the computing environment can 120 working in a networked environment using connections to one or more electronic devices. 2 put those with a "remote computer" or remote computer 162 networked computing environment. The remote computer 162 may be another computing environment, such as a server, router, network PC, peer device, or other common network node, and may do many or all of the computing environment 120 comprise elements described above. The logical connections, as in 2 include a "local area network" (LAN) 164 and a "wide are network" (WAN) 166 , Such networking environments are commonplace in offices, corporate-wide computer networks, intranets, and the Internet.

If a computing environment 120 is used in a LAN network environment, the computing environment 120 with the LAN 164 through a network input / output 168 be connected. When the computing environment 120 used in a WAN network environment, the computing environment 120 a modem 170 or other means of establishing communication over the WAN 166 include. The modem 170 which internally and externally regarding the computing environment 120 can be with the system bus 126 by means of the serial

interface 152 connected. In the network environment, program modules that are relative to the computing environment 120 or portions thereof may be stored in a remote storage device which may be to or from a remote computer 162 are accessible or systemic. Furthermore, other data relevant to the method or system described above may be on or from the remote computer 162 accessible.

120

computing environment

122

processor unit

124

system memory

126

system

128

random access memory (RAM)

130

Read-only memory (ROME)

132

Hard Drive

134

Disk Drive

136

removable Disk

138

Hard disk drive interface

140

Disk drive interface

142

external Disk

144

application program

146

program data

148

keyboard

150

Computer mouse / trackball

152

serial interface

154

parallel interface

156

printer

158

monitor

160

Video Input / Output

162

distant computer

164

"local area network" (LAN)

166

"wide area network" (WAN)

168

Network input / output

Claims (25)

Procedure for checking and / or authenticating of delivery data a data processing device, in particular a computer, with the steps: - To capture at least a part by means of a display device in particular in human readable form presented presentation data as recording data with a recording device, in particular a camera mobile phone; - receive of delivery data with the receiving device; - Check and / or authenticate at least part of the transmission data based on the shooting data by the recording device. The method of claim 1, wherein the transmission data at least partially transmitted as text data to the recording device become. The method of claim 1 or 2, wherein based on the Recording device a normalized desired representation of the transmission data is determined and for review and / or Authentication of the delivery data the standardized target representation of the transmission data with the recording data is compared. Method according to one of the preceding claims, wherein the presentation data according to a Predeterminable standard, in particular according to a normalized screen display be represented by the display device. Method according to one of the preceding claims, wherein for review and / or Authentication of the delivery data with the recording data, an identity of the transmission data with the recording data or a difference between the transmission data and the recording data is issued. Method according to one of the preceding claims, wherein the transmission data via Bluetooth and / or SMS and / or 2D barcodes transmitted to the receiving device become. Method according to one of the preceding claims, wherein the recording device an indicator and / or a digital signature the transmission data generated. The method of claim 7, wherein the receiving device transmits the indicator and / or the digital signature to the data processing device. Method according to one of claims 7 or 8, wherein the indicator and / or the digital signature is generated on a smartcard, which by your own personal Identification number (PIN) is secured. Method according to one of the preceding claims, wherein the recording device is authenticated during operation by a user becomes. Method according to one of the preceding claims, wherein the recording device generated due to a (A) GPS signal Position transmitted to the data processing device. Method according to one of the preceding claims, wherein the recording device is operated in a safe mode. Use of a recording device, in particular a camera mobile phone, and a data processing device, in particular a computer, for checking and / or authenticating transmission data of the data processing device, comprising the steps of: displaying at least a portion of the presentation data, in particular in human readable form, on a display device of the data processing device, in particular one computer display; - Detecting at least a portion of the displayed presentation data as recording data with a recording device, in particular a camera mobile phone; - transmitting the transmission data to the recording device; Checking and / or authenticating at least a part of the transmission data on the basis of the recording data by the recording device. Device, in particular a camera telephone, to check and / or Authenticate delivery data a data processing device, in particular a computer, With - one Receiving device which is designed by a display device in particular in human readable form presented transmission data to capture as recording data; A receiving device, which is designed transmission data to recieve; - one Data authentication device, which is designed, the transmission data using the recorded data to review and / or to authenticate. Apparatus according to claim 14, wherein the receiving means is designed, transmission data in the form of textual data. Apparatus according to claim 14 or 15, wherein the Data authentication device is designed for verification and / or to authenticate the delivery data with the recording data, a normalized target representation of the transmission data to determine and the normalized desired representation of the transmission data to compare with the recording data. Device according to one of Claims 14 to 16, having a data output device, in particular a display, wherein the data output device designed is to check and / or to authenticate the delivery data with the recording data, an identity of the transmission data with the recording data or a difference between the transmission data and the recording data issue. Device according to one of claims 14 to 17, wherein the receiving device is designed to transmit data via Bluetooth and / or to receive SMS and / or 2D barcodes. Apparatus according to any one of claims 14 to 18, wherein the data authentication means is designed, an indicator and / or a digital signature of the transmission data generated. The apparatus of claim 19, wherein the data authentication device is designed to send the indicator and / or the digital signature. Device according to one of claims 19 or 20, comprising a smart card, which is designed, the indicator and / or the digital signature Generate the smartcard by your own personal identification number (PIN) is secured. Device according to one of claims 14 to 21, which is designed is to be authenticated during operation by a user. Apparatus according to any one of claims 14 to 22, which is designed is to send a position generated due to a (A) GPS signal. Device according to one of claims 14 to 23, which in a safe mode is operable. Computer program product which, when loaded in the memory of a computer and running from a computer Method according to one of the claims 1 to 12 performs.