DE102007053736A1 - Authentication method for authentication of persons upon usage of services, involves generating authentication code and information is provided about authentication code to user - Google Patents

Abstract

The authentication method involves generating an authentication code and information is provided about the authentication code to a user. Another information that makes the terminal device suitable for outputting various tones or colors in a time sequence through a loudspeaker or a color display, respectively, is prepared from the former information. An analysis unit connected to sensors (102,102') has access to the authentication code and decodes the time sequence of the various tones or colors and compares the result of the decoding to the authentication code. Independent claims are included for the following: (1) an arrangement for the execution of the authentication method; (2) a computer program; (3) a computer-readable storage medium on which a program is stored; and (4) a method for downloading a computer program from an electronic data network.

Description

The The invention relates to an authentication method and an arrangement to carry out such an authentication method and a corresponding computer program and a corresponding computer-readable storage medium, which in particular a simple and very inexpensive method of authentication of People using services using standard mobile terminals without technical enhancements such as RFID upgrade (RFID = Radio Frequency Identification) or similar provides.

mobile devices have found an almost nationwide distribution. They are therefore ideally suited to a standard for transmission changing access and usage information provide, provided the user can make the system cost-effective and above all cost-transparent use.

Standard functions For the purposes of this description includes in today commercially available mobile devices Color displays, numeric keyboards and the ability to use software to load into the non-volatile memory, from there to Execution and thus additional functionality provide.

Known are the standardized methods NFC (Near Field Communication, z. B. about 10 cm range at 13.56 MHz, 424 kBit / s, communication active devices with each other and active devices with passive parts) and RFID (Radio Frequency IDentification, different Variants from 1 cm to several meters range, frequency ranges of LF, HF over UHF to microwave, only communication more active Readers with passive tags).

In the field of the invention, solutions are already known from the prior art which provide, for example, barcodes and a corresponding barcode reader for non-contact data transmission. It can, as in the German Offenlegungsschrift DE 100 34 275 A1 described, the bar code are displayed on the display of a mobile station.

Another authentication method is printed DE 101 64 574 A1 described. In the solution described therein, goods are deposited in this lock by an operator of a goods lock and a code is generated to open the lock. This code is then transmitted by the operator of the goods lock a person authorized to open the goods lock, which transmits this code via an interface of a portable mobile device to the goods lock to open them.

Another method for releasing a good or service is in the published patent application DE 199 34 981 A1 described, wherein a first communication connection between a mobile station and a device for delivering a commodity and a second communication connection between the mobile station and a service computer are made. The desired product or service is selected via the first communication connection, and the billing of the selected product or service takes place via the second communication connection.

In the utility model DE 20 2004 013 762 U1 an electronic ticket is described, which can be displayed on the display of a mobile terminal and has a control code in the form of a specific string. This control code can be checked by a person or automatically by a control device. A disadvantage of this solution is that special devices must be used to detect a string.

The It is therefore an object of the present invention to provide an authentication method and an arrangement for carrying out such an authentication method and a corresponding computer program and a corresponding computer-readable Storage medium to provide which the disadvantages of the known Avoid solutions and in particular only simple Components, preferably standard components, to carry out of the authentication code.

These The object is achieved by the features in the claims 1, 14, 23 and 24 solved. expedient Embodiments of the invention are in the subclaims contain.

A particular advantage of the invention is that only a conventional terminal with color display, standard data processing equipment and a simple optical sensor for detecting different colors are required for their execution. According to the invention, at least one authentication code is generated by a unit. This unit may be, for example, a service provider, a service provider, or another entity offering services. The unit may also be at least one data processing device, by means of which the service provider, the service provider or the other entity providing services can automatically generate the at least one authentication code. After generation of the at least one authentication code by the unit, information about at least the at least one authentication code is made available to one or more users. If it is not a personal authentication code, as it is conceivable, for example, when accessing an event, information about the same authentication code can be made available to multiple users. Of course, in the case of personal authentication codes, only one user will gain access to the corresponding authentication code. In order to be provided with an authentication code, a registration of the user, which wants to make use of services provided by the unit, may be required. Such a registration takes place in a preferred embodiment in that the user notifies the unit of the data required for the registration. Preferably, the unit for managing this data uses a central computer system which is part of the at least one data processing device and consists of one or more servers. In addition to the user data, the central computer system preferably also, for example, manages, for example, the authentication codes and the usable services. In a preferred embodiment of the inventive method, a user enters his data when logging in or when requesting a service via a web browser. For this purpose, the unit, preferably via the central computer system, advantageously provides a web page with a corresponding input mask. The data entered by a user includes, for example, information identifying the user, such as a user. As personal data and a password, account, the identifier over which the terminal can be reached, and / or the desired services. After a user has logged in and requested a service provided by the unit, for example, by transmitting the identifier of his terminal and the desired service to the unit, the unit generates an authentication code which the user uses to legitimize the call the performance is demonstrated. In a preferred embodiment of the invention, the at least one authentication code and / or information about at least this at least one authentication code is automatically sent by the unit, for example using the central computer system, to the identifier indicated by the user.

On the user's device has special software installed, which the authentication code and / or the information about at least processing the authentication code, generating data that enable the user's device, display different colors in chronological order on the color display. By this particular software becomes the authentication code itself converted into a color sequence, which is output on the color display If the user for the use of the legitimized desired performance. The special software Likewise, the information about the at least one Authentication code alone or this information together process with the transmitted authentication code, to generate the color sequence corresponding to the authentication code, which is output by the color display as needed.

The The invention further comprises a sensor for detecting the by the Color display output different colors, such as one optical sensor, such as CCD sensor (CCD = charge-coupled device), or a (digital) camera or a simple color-sensitive one Light detector. In such a color-sensitive light detector it is an integrated circuit that only has the presence of light, without further image information. This sensor will preferably used by the service providers or service providers, to the legitimacy of the user who uses their services want to take, check. For this is the sensor via means for data exchange with at least an evaluation unit connected to the access from the unit has generated authentication codes. For authentication the user positions the color display of the terminal in the area detected by the sensor and start a program which is the output of different colors on the color display executed in chronological order. It defines a specific Sequence of different colors the authentication code. A such color series, which defines an authentication code, can also be called a cycle. It can be provided be that the cycle is issued only once or several times in a row becomes. It may further be provided that the the authentication code performing colors are discreetly issued one after the other or but that the different colors through gradual change flow smoothly into each other.

Of the Sensor detects the colors and colors shown on the color display sends the corresponding signals to the at least one evaluation unit, which evaluates and decodes the signals. The decoding results a sequence of signals associated with the authentication codes generated by the unit is compared. Will be a corresponding authentication code in this comparison determined, the user is considered legitimized and the performance is Approved.

In A preferred embodiment provides that the special software installed on the terminal next to encoded the authentication code more data and as a sequence different colors on the color display. The the authentication code and the further data assigned colors can thereby directly consecutive in a cycle or in separate Cycles are output. Such additional data may be For example, to handle data required in transactions are, such as passwords or transaction numbers (TAN) for bank transfers.

A Arrangement for carrying out an authentication method According to the invention, at least one data processing device, at least one terminal equipped with a color display and at least one sensor for detecting colors. In a preferred Embodiment is provided that the at least a data processing device a central computer system includes, which consists of one or more computers. The components of Arrangement are at least temporarily by means for data transmission connected with each other. According to the invention Arrangement further arranged such that in the at least one Data processing device authentication codes and data, which describe usable services are stored. The data, which can describe the available services the at least one data processing device of the corresponding Provided to service providers or service providers become. The operator of the arrangement according to the invention and the service providers or service operators can to be one and the same instance. It can also be different Instances act. An authentication code is preferred by a on the at least one data processing device installed program generates when a user selects a specific Requests provided services. In another preferred Embodiment is the generation of authentication codes linked to further actions. For example, can be provided be to generate an authentication code only when the payment of the service has been confirmed or a requested one Identifier, such as a password or a TAN, correctly were entered.

For the registration of users or the purchase or booking of services is the arrangement of the invention over a communication link with an input device such as a PC, a notebook, a mobile phone or other Internet compatible Data processing equipment connected. The arrangement presents For this purpose, a website with a corresponding input mask available through a browser, the on a display of the internet-enabled data processing device is displayed, can be operated.

To Generation of an authentication code will this from the at least a data processing device to a specified by the user Transmitted terminal. This can be under use a Short Massage Service (SMS) or by e-mail. At the terminal to which the authentication code transmitted is, it is preferably a mobile terminal. Particularly preferred are mobile terminals, such as mobile phones, PDA (= Personal Digital Assistant), notebook o. The like. Used. Instead of the authentication code or together with the authentication code can provide information about the authentication code be transmitted to the terminal.

When the authentication code or the information about the authentication code has arrived on the user's terminal, the authentication code or the information about the identification code is processed by a special software installed on the user's terminal, whereby data is generated by this processing which causes that on the color display of the terminal different colors are output sequentially in chronological order. This temporally successive color sequence represents at least the authentication code. The authentication code is thus in turn encoded in a temporal sequence of colors. However, the authentication code itself may be stored in a different form of representation in the various data processing devices involved in the authentication method according to the invention, for example in the form of ASCII (American Standard Code for Information Interchange) characters representing letters, numbers and / or special characters. The processing of the authentication codes entered on the user's terminal or of the information about the authentication code can take place immediately after the data has been received on the terminal or only later after a corresponding user input. The coding allows a color sequence to be generated, with each character represented as ASCII code, ie all seven bits of the character, being assigned a single color; alternatively it can be provided that each of the seven bits of an ASCII code (or in general: each element of an authentication code) is assigned its own color, as is the use of packed data formats, such as binary stored numbers or packed BCD (packed binary coded decimal) , for digit information, in which case colors are again assigned to the resulting bytecodes can be. An important possible form of coding is also that a color is not assigned to the codes or the individual elements of a code itself, but a distance between the individual elements of the code, for example between an element and its predecessor, is included in the color coding by one color uniform distribution or change of color codes even with consecutively constant character codes (ACCII or packed formatting). Furthermore, in a preferred embodiment of the invention, it is provided that the at least one authentication code is coded in changes of the colors in the temporal sequence. Such a coding based on a relative color difference has the advantage that in such a coding decoding errors, which could be caused by differences in the color representation of different color displays, are avoided to a large extent. However, it may prove advantageous in certain cases to code the at least one authentication code by absolute color values.

Around to obtain the power, the inventive Arrangement used as follows. The user positions for this the terminal so in that of the sensor for the detection of Colors captured area that colors on the color screen of the Terminal can be detected by the sensor. In This position is the output of the different colors in chronological sequence on the color display of the terminal. The colors output by the color display are from the sensor detected and sent to an with this sensor via means for Data exchange associated evaluation, which evaluates the transmitted signals and by decoding the the different colors output in chronological order the authentication code determined. The evaluation unit, which transmitted the Evaluates signals and by decoding the in time sequence issued different restore the authentication code, has access to the generated by the unit and in the central Computer system stored authentication codes. In a preferred embodiment the evaluation unit is part of the at least one data processing device or part of the central computer system, and the sensor for detection of colors is about means of data exchange with the at least a data processing device or with the central computer system connected. The evaluation unit thus has access to these authentication codes and compares that obtained by the decoding of the color sequence Authentication code with the by the at least one data processing device generated authentication codes and initiates the release the requested service, if given comparison criteria are fulfilled.

The Arrangement thus represents a system in which a terminal, preferably a mobile station, via the display with receivers, d. H. Sensors, in particular color sensors, cooperates. For a process, for. B. the claim a service becomes an authenticating identifier from the mobile station transferred to the receiving device. This identifier can be both a general, rarely changing information include, as well as a unique transaction number contain.

in the Unlike other solutions, the transferable Data volume variable due to serialization of information. It is not necessary, a certain, fixed and consistent amount of data when the amount of information does not require this, as is the case with 2D barcodes, for example need to be completely read what a certain amount of data implied. In the proposed method are to be transmitted Data sets only from the actual to be transmitted Amount of information.

The Mobile station receives the information that to be forwarded to the receiving device, in advance via Standard services such as SMS or through data communication such as the construction of a common Internet connection (IP network or similar) via UMTS or GPRS or other GSM services of the mobile network operators.

The System allows the transmission of information from the mobile station to the receiving device via contactless color changes on the display of the mobile station happens. The information can be recorded by special sensors, such as B. color-sensitive light detectors, or other suitable Assemblies such as CCD lines or cameras take place. The color changes can be full-surface or in certain geometric or other systematic arrangements. In a preferred Embodiment will be a particular, not timed Coding scheme of the colors together with an automatic threshold adjustment used to secure data transfer of any Mobile devices in different environmental conditions to enable.

One Advantage of the system is the use of very cheap (sensor) or any available (camera) receivers. In addition occurs that preferably only natural standards be assumed in mobile devices: color display, Telephone keypad, SMS service.

The system is also applicable by all Commonly available displays including parts of television screens, monitors in publicly accessible devices, computer monitors, etc. assume the representation of the information and mobile terminals read this information, for example via a built-in camera. Likewise, a communication between two mobile radio terminals can be configured. In addition, the principle can also be used by combining the aforementioned standard displays with special receivers.

The System is suitable for example for the protection of Access to permanently used facilities, for example, the service rooms of an organization or technical Equipment such as computers, and for access control for one-off events such as B. theatrical performances or one-time access to technical services such as rental vehicles.

A advantageous feature of the system is that the user on the one hand must be present near the receiver and on the other hand the reception unit physically protected in practice is.

The System is realized by the arrangement of several computers and communication devices. Preferably, a central server takes over the administration the user and possibly transaction data.

In a preferred embodiment, the user deposited his data, u. a. the phone number of his mobile terminal and the desired services, via web browser on the central Server. There are services that only authenticate the user realize with third parties. Next to them are transaction-oriented services designed.

On the mobile station is installed software that the information is processed on the device. Go data, which are intended for the system described here and via the telephone number or the IMEI code (IMEI = International Mobile Equipment Identity) of the mobile device qualify, from the central server z. B. by SMS, are from it the codes for the use of the services computes. Authentication services are sent by Codes rare; Frequency and data to change z. B. the Codes are preferably determined only centrally. Transaction services send the codes according to the situation, for example directly after a booking.

Would like to the user must apply a received code, he must be mobile phone - too without mobile network connection - keep ready the desired Select menu-driven code and the display in a few millimeters away from the receiver. Within a short time, the receiving device becomes the desired one Perform action. In advance, the user has at his Identify mobile terminal by means of a PIN on the SIM card need to use the mobile station. All possibly in the memory of the mobile station Information or programs executed there be used only by the user, aware of when turning on or at regular intervals has to be entered PIN of the used SIM card. In this respect, it is ensured that with secrecy the PIN also all stored information thus kept under lock and key in order to use the proposed method be that a loss of the mobile device not to unauthorized use of services or services can. For securing SIM cards via PIN preferably recognized using secure cryptography methods.

With Help of the invention may be confirmations about Bookings, use of services, code changes for authentications (also timed with selectable Frequency or event-oriented after each use) via for the user free services such as SMS reception can be realized. This allows a large number of users for this Services are gained. Alternatively, data communication is via Mobile networks possible, whereby a much faster transmission take place can. By exchanging the communication layer without further change The software is therefore suitable for business models realize.

The Web login for desired services can be called low-priced option over the fixed net Internet o. Ä., while the business variant will choose the booking via mobile internet connection.

A advantageous embodiment of the invention consists in the connection the central server with many others, already existing or newly created services, adding the necessary data from others Suppliers and sent to the central server for editing to get redirected. No duplicate user interaction is required here.

The system can be advantageously configured by using a very inexpensive sensor for the receiving devices. The sensor opening can be designed very practical (a few millimeters in diameter, covering by resistant translucent materials, printing of the visible area), which also in the public environment, a favorable application without further explanation to the user is possible. As a complement, facilities with special Use the same degree of protection (eg explosion protection) as using only the appropriate hardware equipment, but the system itself remains unchanged.

A advantageous embodiment may be described for a variant of Systems are reached by two mobile terminals over Display and often already built-in cameras communicate with each other can. This allows authentication codes and any others, these descriptive or supplementary or so other related information also between two mobile devices without the use of central services and exchange computers. This allows, for example, payment transactions between mobile devices or authentications only realize between mobile devices. The mobile device is compared to other mobile devices a passport that can be identified using the proposed procedures. In this embodiment, the two mobile devices function alternatively as terminal with color display of the authentication code and as an optical sensor, which with an evaluation unit is coupled (preferably in the mobile device integrated), for the evaluation and decoding of the authentication code.

The Camera of a mobile station can also be used to record edited information from other displays to be able to. For example, action codes, booking codes, Advertising or pricing information.

The Use of secured certification at all with communication concerned equipment is also assumed as the hedge the mobile terminal by PIN and secure storage.

By The invention will be a system for universal access testing provided for various services. in this connection becomes a central server for a central control of the User activities used. On the central server at least the user data and information about available services or services stored. The central one Server interacts with the user's terminal on the one hand Standard mobile services like SMS and on the other hand over a special, but very inexpensive sensor (receiver) together. Communicates with the central server for interaction the terminal of the user with the sensor such that be transmitted from the terminal color information to the sensor. It proves to be advantageous if a standard with a color display and with software execution options equipped terminal is used as a such terminal then no hardware extensions needed.

to Authentication of the user to the sensor and / or indirectly to the central server are preferably Identification features of the mobile station (IMEI, to Saving certificates and securing via PIN) to the Transmit sensor.

By the system according to the invention can be automatic Access permissions such as turnstiles or door openers be controlled. The system can also be used for a registration of access at the central server connected with a data collection for possible billing or even just for proof.

The The system according to the invention can advantageously be extended be integrated into cameras, which advantageously in the terminal are to be used by visual output devices (viewing devices or other video sources) connected to the central server, To be able to receive data. This data may be to trade general or special codes, which are then in the terminal can be further processed.

A sees another advantageous embodiment of the invention before, central server and sensor in a terminal, preferably in a mobile terminal, summarizing and communicating between this terminal and a second terminal based on cameras and color displays, the advantageously integrated in each terminal are. In a preferred embodiment, at least one of the terminal software to synchronize the data between the two mobile devices, concerning the compensation of payment, credit or debit values.

Another preferred embodiment of the invention provides to equip devices with a sensor and a display, preferably a standard display, as input or output means. Otherwise, the device is preferably unattached. Furthermore, this device is according to the invention connected to the central server. The system according to this embodiment is further equipped with a software for operating the device via the central server, wherein the device is operated via the keyboard of the terminal as an input medium. The display of the terminal transmits the input data via different colors in chronological order to the sensor of the device. This embodiment proves to be particularly advantageous if the device to be operated is a device in a physically secured environment, or if the display and sensor of the user are to be operated Device in physically secured environment. It is particularly advantageous if the terminal is equipped with a camera. In this case, the camera integrated in the terminal acts as a sink of information and parts of the display of the device to be operated as an information source for the color-assisted data transmission according to the invention.

A sees further preferred embodiment of the invention before, the inventive method without to be able to use constant server connection, for example by the central server only temporarily connected to the sensor is. Here are preferably expanded options Cryptography is used to achieve secure communication.

One Computer program for the execution of the invention Authentication method allows a data processing device after it has been loaded into the memory of the data processing device is to perform an authentication method, wherein at least one data processing device with at least one Terminal and with at least one sensor at least temporarily over Data transfer means cooperate, and at least An authentication code is generated, first information about the at least one authentication code of at least one user be made available from the first information second information is created that the terminal device enable different colors in chronological order on the color display, a sensor for detecting the various Colors detected the temporal sequence of the different colors, an evaluation unit connected to the sensor, which access to has at least one authentication code, the time sequence the different colors decoded and with the at least one Authentication code compares and dependency of the comparison result the use of services is released.

In a further preferred embodiment of the invention it is provided that the computer program according to the invention is modular, with individual modules on different data processing equipment are installed.

Such Computer programs, for example, (for a fee or free of charge, freely accessible or password protected) downloadable provided in a data or communication network become. The computer programs thus provided can then be harnessed by a method in which a computer program Claim 23 from an electronic data network, such as from the Internet, to a data processing device connected to the data network is downloaded.

Around the inventive method for authentication to perform, is provided, a computer-readable storage medium on which a program is stored that it is one Data processing device allows, after it in the memory of the data processing device has been loaded, to perform an authentication procedure, wherein at least a data processing device with at least one terminal and with at least one sensor at least temporarily via means interact for data transmission, and at least one Authentication code is generated, first information about the at least one authentication code of at least one user be made available from the first information second information is created that the terminal device enable different colors in chronological order on the color display, a sensor for detecting the various Colors detected the temporal sequence of the different colors, an evaluation unit connected to the sensor, which access to has at least one authentication code, the time sequence the different colors decoded and with the at least one Authentication code compares and dependency of the comparison result the use of services is released.

• – nur Standardkomponenten in den, vorzugsweise mobilen, Endgeräten, verwendet werden,
• – die Sensoren zur Detektion von Farbe besonders preisgünstig sind, keine beweglichen Teile beinhalten und sich in vielfältiger Weise in die Umgebung einpassen können, beispielsweise durch transparente Materialien vor dem physischen Zugriff von dazu nicht berechtigten Nutzern geschützt sind,
• – die Kommunikation über Farbsequenzen das Ausspähen von Informationen besonders erschwert,
• – die Benuzung für Anwender sehr einfach ist,
• – die Benutzung vom Anwender preisgünstig gestaltet werden kann und daher eine breite Nutzung zu erwarten ist,
• – die Benutzung komfortabel gestaltet werden kann und darum die Akzeptanz für geschäftliche Modelle und die gewerbliche Nutzung der Erfindung geschaffen wird, und
• – zahlreiche Anwendungsfälle eine sehr breite Nutzung eines einheitlichen Systems ermöglichen.

The advantages of the invention are in particular that

• Only standard components are used in the, preferably mobile, terminals,
• The sensors for the detection of color are particularly inexpensive, contain no moving parts and can fit into the environment in a variety of ways, for example protected by transparent materials from physical access by unauthorized users,
• The communication about color sequences makes the spying out of information particularly difficult
• The user experience is very simple
• The use can be made inexpensive by the user and therefore a wide usage is to be expected,
• - The use can be made comfortable and therefore the acceptance of business models and the commercial use of the invention is created, and
• - allow many applications a very broad use of a single system.

The Invention will be described below with reference to the figures of Drawing closer to different embodiments explained. It shows

1 a representation of the components of an exemplary system for carrying out the authentication method and the interaction of the components used.

The exemplary system includes a central server 101 , a sensor 102 and a terminal 103 with color display 109 , As a terminal 103 For example, a mobile station can be used. The central server 101 In this exemplary system, it manages the administration of user and possibly transaction data.

To be able to use the exemplary system, a user logs on, for example, via a fixed network access 106 at the central server 101 at. He can under specification of various credentials, which z. B. a desired service (eg., A ticket booking) and the phone number of his terminal 103 , with which he wants to retrieve later the performance, over the fixed net connection 12 transferred to the server.

The central server 101 Upon receipt of the credentials, a user will generate an authentication code that the user can use to legitimize the service. The generated authentication code is provided by the central server 101 in an exemplary embodiment using a radio network 110 via a first communication connection 13 by SMS to the terminal 103 transfer. Alternatively, this transmission can also be made by GPRS (= General Packet Radio Service) or by e-mail. Is the authentication code after transmission on the terminal 103 available, it is by a special, on the terminal 103 installed software processed. Through the processing, the data for the output of the different color in chronological order (color sequence) on the color display 109 generated. In the embodiment, it is provided that the coding of the authentication code in the color sequence is performed such that the authentication code is determined solely by the colors, ie the time duration for the one particular color on the color display 109 appears is meaningless for encoding / decoding. Alternatively, however, it can also be provided for the coding of the authentication code, the duration of the display of a color on the color display 109 to take into account.

For the output of the different colors is provided in the embodiment, the entire surface of the color display 109 to use. Alternatively, only part of the color display can be used 109 , For example, certain geometric patterns such as circle, rectangle o. The like., Are provided as an output range. Thus, several colors can be displayed simultaneously on the display, which can be used by increasing the simultaneously transmitted information to improve the transmission speed or by explicitly delineating patterns to improve the transmission security.

If the user wants to use a service for which he has received the authentication code, he positions the color display 109 close to the sensor 102 and starts the output of the authentication code. The authentication code is displayed as a sequence of different colors on the color display 109 of the terminal 103 visualized and via a line of sight 11 the data stream of the color sequence becomes contactless from the color display 109 to the sensor 102 transfer.

In the exemplary embodiment, the sensor is via a second communication link 107 , For example, via a mobile data connection, LAN, serial connection o. The like., With the central server 101 connected. About this second communication connection 107 The sensor data is sent to the central server 101 transfer where they are evaluated. The evaluation in the embodiment includes automatic threshold matching and decoding of the sensor signals to recover the authentication code. Subsequently, the authentication code obtained by the evaluation is shared with others on the central server 101 stored authentication codes compared. Alternatively, the sensor 102 also be equipped with its own evaluation and the evaluation at the location of the sensor 102 respectively. In this case, it is only necessary that the evaluation unit for checking the authentication code, which was obtained by the evaluation, accesses the data from the central server 101 has managed authentication codes. However, the tasks that have to be performed in the context of evaluation and comparison can also be different between the evaluation unit and the central server 101 be distributed.

The color sequence may include additional information in addition to the authentication code. This additional information may be, for example, passwords of the user, the IMEI code or the PIN of the terminal 103 o. Like. Act.

The decoded data, ie the authentication code and possibly the additional information, are then used by the central server 103 managed data and, if the comparison result is positive, the user requested performance is released, for example a door opener 105 controlled to release an input.

By the system according to the invention various other services can be provided. To manage such a variety of services, in a further exemplary embodiment, the central management system includes besides the central server 101 further data processing equipment 108 which are at least temporarily interconnected via means for data communication.

at The application of the invention are three basic cases distinguish: simple authentication, transaction business and bidirectional data transmission.

1. Authentication

• Access control to premises, rental parking: terminal 103 is ID card, the display of the access code is used for the door release;
• Time recording: terminal 103 is ID card, display of employee code is used for message to terminal;
• Computer access easy: Receiver controls employee code
• Computer access complex, even remotely: on the display 104 , preferably a standard display, a computer becomes a key part 1 represented, preferably as a color sequence according to the invention, terminal 103 takes key part 1 via camera, calculates key code 2 based on a certificate and sends key code 2 preferably as a color sequence according to the invention back to the computer, which releases the access (also usable for further operations);
• WLAN hotspot: terminal 103 is ID card;
• Identification with customer loyalty systems (shopping card): terminal device 103 is ID card;
• Payment confirmation for credit and debit cards, including cash machines and "cyber payment": terminal 103 is ID card;
• Ticket systems for standard journeys: Subscriptions to local traffic, a tariff zone, rental bicycles etc: Terminal device 103 is ID card as booking confirmation when boarding.

2. Transaction Processing

• Ticket systems for cost-intensive rides, one-off events, other bookings: theaters, cinemas etc., rail, bus and air travel, multi-fare public transport systems, parking garages: terminal equipment 103 is ID card as booking confirmation at vending machines
• Ticket systems for free but action-related unique systems such as sweepstakes in large fast-food chains, where you participate once in a draw for each action by connecting with the terminal 103 and identifies the action identifier available on the Internet at the counter. After authentication or authentication attempt, the authentication code in the system is disabled.

3. More complex data transfer

The terminal 103 can become an authenticating input medium for non-contact (remote) operation of devices. For this purpose, the device to be operated receives as input means only one sensor 102 as an input device according to the described system; Mouse, keyboard, etc. are not required. Furthermore, the device to be operated comprises a display 104 , preferably a standard display. An operator will first log in with his authentication code. the display 104 of the device to be operated can (a) generate an operator-readable representation or also a (b) machine-readable output as described above in the form of a color sequence. In case (a) the further inputs are made on the terminal 103 , which then transmits the data in the manner described in the form of a color sequence to the device, which reads the color sequence, for example via a color sensor. In case (b), one in the terminal 103 Built-in camera read the information directly. The software on the device 103 will then control further processing. In this way, safe operation of devices with standard components without mechanically moving or sensitive parts (touch-sensitive displays) are possible, even if they must be operated in sensitive environments (public space, security).

Another example is that of displays 104 as described, data in the form of a color sequence of terminals 103 can be received with built-in camera. These data include, for example, promotion codes, advertising data, order information. The data can then be used by the user directly for ordering operations either at special access points via the sensors described 102 (preferably low-cost receivers) or by SMS, data communication o. Ä., Are used.

The The invention is not limited to those shown here Embodiments. Rather, it is possible by combination and modification of said means and features to realize further embodiments, without the frame to leave the invention.

11

sight

12

Landline connection

13

first communication link

101

centrally server

102

sensor

103

terminal

104

display

105

Door Opener

106

Fixed network access

107

second communication link

108

Data processing device

109

color display

110

radio network

QUOTES INCLUDE IN THE DESCRIPTION

This list The documents listed by the applicant have been automated generated and is solely for better information recorded by the reader. The list is not part of the German Patent or utility model application. The DPMA takes over no liability for any errors or omissions.

Cited patent literature

• DE 10034275 A1 [0005]
• - DE 10164574 A1 [0006]
• - DE 19934981 A1 [0007]
• - DE 202004013762 U1 [0008]

Claims (25)

Authentication method, in which one with a color display ( 109 ) and special software equipped terminal ( 103 ), and wherein at least one authentication code is generated, first information about the at least one authentication code is made available to at least one user, from the first information second information is created, which the terminal ( 103 ) enable to display different colors in chronological order on the color display ( 109 ), a sensor ( 102 ) to detect the different colors, the temporal sequence of the different colors detected, one with the sensor ( 102 ), which has access to the at least one authentication code, decodes the time sequence of the different colors and compares the result of the decoding with the at least one authentication code, and the use of services is released depending on the comparison result. Authentication method according to claim 1, characterized marked that the first information by e-mail or under Using the Short Message Service (SMS) at least one Users made available as download in a communication network or provided as color information by an output device become. Authentication method according to claim 1 or 2, characterized in that the second information is automatically transmitted from the terminal ( 103 ) to be created. Authentication method according to one of the preceding claims, characterized in that the representation of the different colors covers the entire surface of the color display ( 109 ) or that the representation of the different colors in predetermined subregions of the color display ( 109 ) he follows. Authentication method according to one of the preceding Claims, characterized in that the various Colors apart by continuous color changes emerge or the different colors discreetly follow one another. Authentication method according to one of the preceding claims, characterized in that the with the sensor ( 102 ) connected evaluation unit performs a threshold adjustment. Authentication method according to one of the preceding Claims, characterized in that the services - the Access to objects or services, - the confirmation the verification of payment transactions or bookings and / or - the Execution of transactions or bookings. Authentication method according to one of the preceding claims, characterized in that the terminal ( 103 ) is equipped with a sensor for the detection of colors. Authentication method according to Claim 8, characterized in that the services include the operation of devices which display ( 104 ) and a sensor for the detection of colors, via a communication between the display ( 104 ) and the sensor of the device and the color display ( 109 ) and the sensor of the terminal. Authentication method according to one of the preceding claims, characterized in that the at least one user information on desired services and / or data for registration via a web browser and / or by the terminal ( 103 ) to a unit for managing the at least one authentication code and / or the services. Authentication method according to one of the preceding Claims, characterized in that data between Devices involved in the authentication process are transmitted encrypted. Authentication method according to one of the preceding claims, characterized in that to the terminal ( 103 ) is used for multiple use on one or more evaluation units transmitted authentication codes. Authentication method according to one of claims 1 to 11, characterized in that to the terminal ( 103 ) transmitted authentication codes can be used only once at an evaluation for a unique procedure per terminal. Arrangement for carrying out an authentication method, comprising - at least one data processing device, - at least one with a color display ( 109 ) equipped terminal ( 103 ) and - at least one sensor ( 102 ) for the detection of colors, wherein the at least one data processing device with the at least one terminal ( 103 ) and with the at least one sensor ( 102 ) is at least temporarily connected via means for data transmission, and the arrangement is arranged such that an authentication method is executable, wherein at least one authentication code is generated, first information about the at least one authentication code at least one user made available from the first information second Information is created that the terminal ( 103 ) enable to display different colors in chronological order on the color display ( 109 ), the sensor ( 102 ) to detect the different colors, the temporal sequence of the different colors detected with the sensor ( 102 at least one data processing device which has access to the at least one authentication code, the temporal sequence decodes the different colors and compares them with the at least one authentication code, and the use of services is released as a function of the comparison result. Arrangement according to claim 14, characterized in that it is in the terminal ( 103 ) is a mobile terminal. Arrangement according to claim 14 or 15, characterized the at least one data processing device is a central one Computer system includes for storing the at least one authentication code and / or for storing data describing the services. Arrangement according to one of claims 14 to 16, characterized in that the at least one data processing device an evaluation unit comprises for decoding the time sequence of the different colors and for comparison of the decoding obtained authentication codes with the at least one generated Authentication code. Arrangement according to claim 17, characterized that the evaluation unit at the location of the central computer system is arranged. Arrangement according to claim 17, characterized in that the evaluation unit at the location of the sensor ( 102 ) is arranged. Arrangement according to one of claims 14 to 19, characterized in that the at least one data processing device is connected via means for data exchange with a device, and the arrangement is arranged such that the device with the terminal ( 103 ) is controllable by evaluating different colors in chronological order on the color display ( 109 ) of the terminal ( 103 ) and from the sensor ( 102 ) are received. Arrangement according to claim 20, characterized in that the sensor ( 102 ) is integrated in the device. Arrangement according to claim 20 or 21, characterized in that the device with a display ( 104 ) and the controller is a communication between the display ( 104 ) and the sensor ( 102 ) and the color display ( 109 ) and the sensor of the terminal. Computer program, which allows a data processing device after it has been loaded into storage means of the data processing device to perform an authentication method, wherein at least one data processing device with at least one terminal ( 103 ) and at least one sensor ( 102 ) at least temporarily interact via means for data transmission, and at least one authentication code is generated, first information about the at least one authentication code is made available to at least one user, second information is created from the first information, the terminal ( 103 ) enable to display different colors in chronological order on the color display ( 109 ), the sensor ( 102 ) to detect the different colors, the temporal sequence of the different colors detected, one with the sensor ( 102 ), which has access to the at least one authentication code, decodes the time sequence of the different colors and compares the result of the decoding with the at least one authentication code, and the use of services is released depending on the comparison result. Computer-readable storage medium on which a program is stored which, after having been loaded into storage means of the data processing device, enables a data processing device to perform an authentication method, wherein at least one data processing device is provided with at least one end device ( 103 ) and at least one sensor ( 102 ) at least temporarily interact via means for data transmission, and at least one authentication code is generated, first information about the at least one authentication code is made available to at least one user, second information is created from the first information, the terminal ( 103 ) enable to display different colors in chronological order on the color display ( 109 ) to represent the sensor ( 102 ) to detect the different colors, the temporal sequence of the different colors detected, one with the sensor ( 102 ), which has access to the at least one authentication code, decodes the time sequence of the different colors and compares the result of the decoding with the at least one authentication code, and the use of services is released depending on the comparison result. Method in which a computer program according to claim 23 from an electronic data network, such as from the Internet, to a connected to the data network data processing device is downloaded.