DE102010054061B4 - Portable system comprising data carrier and input medium carrier, use and method of the system - Google Patents

Abstract

Portable system (1) consisting of: - a portable data carrier (7) with an integrated semiconductor chip (2) and - a carrier (1 '), the data carrier (7) being fixed in the carrier (1') in a mechanically removable manner; wherein:- the carrier is an input means carrier (1') and has an input means (5) for detecting a user input; and- the integrated semiconductor chip (2) has an evaluation unit for evaluating the user input and a memory area for storing the user input, characterized in that:- the data carrier (7) is a mini-SIM, plug-in or micro-SIM card; - the input medium carrier (1') is a card-shaped form adapter and - data carrier (7) and input medium carrier (1') are irreversibly separated.

Description

The invention relates to a portable system consisting of a portable data carrier with an integrated semiconductor chip and an input medium carrier, the data carrier being fixed in the input medium carrier in a mechanically removable manner.

A portable data carrier is preferably a data carrier with appropriate security functionalities, such as smart cards, tokens, mass storage cards, subscriber identification cards and/or multimedia cards. In particular, a chip card is understood under the term portable data carrier, with the area of application of the chip card being very diverse, for example as a credit or debit payment card, health card, access authorization card, company ID card or SIM card.

A system consisting of a portable data carrier and carrier according to the preamble of independent claim 1 is, for example, from DE 199 21 525 A1 known, the portable data carrier being mechanically removable and fixed in a card-shaped adapter. The adapter can have additional functionality, such as in the US 2005/0231921 A1 described, the adapter can have a further semiconductor chip, with the further semiconductor chip providing additional functionality.

The registration DE 10 2010 052 169 , filed by the same applicant on November 22, 2010, describes a system consisting of a portable data carrier and adapter, whereby the data carrier and the adapter are connected in a contact manner using electrically conductive connections. This makes it possible to reuse the adapter to extend the limited functionality of the disk.

Alternative systems that correspond to the preamble of the invention are from the application EP 1 429 283 A2 or the WO 2006/018230 A1 known, wherein a USB token is designed in the form of a portable card-shaped data carrier. The entire description of these applications is clearly incorporated by reference herein.

The publication US 2008/0040605 A1 relates to an information storage device and a method for controlling this device. The JP 2000 - 5 147 A concerns a personal authentication device.

In order to enable a user to carry out user input on a portable data carrier, portable card readers are well known, into which the system is plugged in and which communicate with the system in a contact-based manner in accordance with an ISO standard communication interface, with a user accessing a keypad located on the card reader a user input is used. However, this is inconvenient for a user, especially if no card reader is available, user input is not possible. Furthermore, the card readers must have suitable communication means and protocols in order to communicate with the data carrier.

The invention is based on the object of specifying a system which makes the user input for a data carrier highly flexible, is secure and can be carried out without additional effort for the user.

The object of the invention is achieved by the measures described in the independent claims. Advantageous embodiments are described in the respective dependent claims.

The task is solved in particular by a portable system consisting of a portable data carrier with an integrated semiconductor chip and a carrier, the data carrier being fixed in the carrier in a mechanically removable manner. The carrier is an input medium carrier and has an input means for recording a user input. The integrated semiconductor chip has an evaluation unit for evaluating the user input and a memory area for storing the user input.

Systems are preferably used that can insert a data carrier of a first format into an adapter device in a second format. For this purpose, such an adapter has a recess to accommodate the data carrier. This recess is often designed in such a way that it penetrates the adapter in order to be able to easily remove a data carrier held in the recess from the adapter by pushing it out. Conventional adapters are usually manufactured using punching, in which the actual data carrier is removed from the adapter and then reinserted into the punching opening. Alternatively, such systems are manufactured using an injection molding process.

The system is preferably mechanically connected to one another via designed webs or bridges, with the data carrier being able to be removed by pushing it out of the input medium carrier. This removal can be irreversible or reversible, with a reversible removal being preferred in order to enable user input at a later point in time.

The input means is preferably a keypad or a pressure-sensitive input field. In particular, the input means is equipped with at least one strain gauge, which detects the bending or pressing of the input means support during user input. The capture of user input using strain gauges is possible DE 10 2010 052 985 as well as the DE 10 2010 052 983 , filed on November 30, 2010, with clear and direct reference being made here to the disclosure of these applications. Improved user input is possible using the in the DE 10 2010 052 992 , filed on November 30, 2010, achieved the corner supports described. The user input is primarily a handwritten signature or an alphanumeric character string. This means that a PIN or a user signature can be entered into the data carrier very easily and without using a card reader. Furthermore, card-specific properties of the bending can be stored when the user input is recorded, which are then used as an authenticity feature of the input medium carrier. Entries with other input media carriers on the same data carrier would therefore generate a different card-specific entry, which would then be invalid.

In an advantageous embodiment, the input medium carrier has a contactless interface for supplying the input field with energy from an electromagnetic field, in particular for near-field communication, of a terminal device that is within supply range.

Near field communication (NFC, Near Field Communication) is known for simple and fast contactless communication between two devices. This technology is integrated, for example, into mobile devices or PDAs to enable communication between the devices or with a computer. The two devices are coupled via coils, with the carrier frequency being 13.56 MHz, as in RFID systems. As described in more detail in the NFC standard ISO/IEC 18092, there is an active communication mode and a passive communication mode in NFC systems. The typical range of NFC devices is around 20 cm. Further information on NFC, in particular its areas of application and designs using a security element, can be found in the 5th edition of the specialist book “Handbook of Chip Cards” by Rankl/Effing on pages 376 to 381. Alternatively, supply is possible via an RFID interface in accordance with ISO/IEC 14443.

The end device that provides the energy is preferably the end device in which the data carrier will later be used as intended. This terminal supplies the wearer with energy at least to record and evaluate the user input. Input via such a system is therefore safer than input via an unknown card reader, since the user input via a card reader can be spied out using spy software. In particular, if the user input is a password, secret, PIN or handwritten signature, absolute trust must be given to the input under trustworthy circumstances.

In particular, the input field is connected to the data carrier via a contact-based electrical connection, the contact-based connection being interrupted after the data medium has been removed. This connection is provided in the data carrier body by one or more electrically conductive connection sections for electrically connecting the carrier to the data carrier. These connections create, for example, a direct electrical and possibly also mechanical connection between the back of a contact field or the semiconductor chip and the carrier. An electrical connection between the input medium carrier and the data carrier can be easily formed via the connections provided in the card body without separate connections between a connection on the semiconductor chip and the input medium. Further details on the design of such a connection can be found in the disclosure of the application DE 10 2010 052 169 , filed by the same applicant on November 22, 2010, the entire disclosure of which is clearly and directly incorporated herein by reference.

In a preferred embodiment, this connection is irreversibly destroyed when the data carrier is removed/removed. With such a system, the user can store a user entry in the data carrier once. The irreversible removal is achieved in that a web/bridge, which is provided for fixing the data carrier in the input medium carrier, also contains the electrical contact connection, which is destroyed if the data carrier is broken out.

The memory area is advantageously set up to store the user input in a write-once flash memory. This means that user input is possible once and can no longer be changed.

As an alternative to the contact interface, the input field is set up via a contactless interface for communication with the data carrier in order to store the user input in the integrated semiconductor chip of the data carrier.

According to the invention, communication is understood to mean signal transmission, mutual control and, in simple cases, also a connection from/between technical devices. Information is encoded in characters and then transmitted from a sender to a receiver via a transmission channel. It is crucial that the sender and receiver use the same coding so that the receiver understands the message, i.e. can decode the information to be transmitted.

In particular, the data carrier has a contact-based communication interface for data communication with a designated terminal, with data communication for storing the user input having previously taken place via this communication interface.

The data communication between the data carrier and the input semiconductor chip is preferably achieved by means of cryptographic pairing, so that the user input cannot be decrypted by a third party spying on the data communication.

According to the invention, the data carrier is a mini-SIM, plug-in or micro-SIM card, the input medium carrier is a card-shaped form adapter, the data carrier being irreversibly separated from the input medium carrier.

The width and length dimensions of the carrier are those of the ID-000 or ID-1 format according to ISO 7810, and the width and length dimensions of the recess are designed to accommodate a data carrier in Mini-UICC format. This means that a portable data carrier in Mini-UICC format can be enlarged to the larger ID-000 or ID-1 formats and used in devices that only have a reader in ID-000 or ID-1 format. This is used in particular in mobile phones, which primarily have a slot for a plug-in SIM in ID-000 format. When using an adapter in the ID-1 format common for chip cards, a data carrier in Mini-UICC format can be processed using standard chip card readers.

The idea of the invention also includes the use of the system with the following steps: placing the system within supply range for supplying energy to the system by means of a contactless interface of a terminal device, preferably the intended terminal device of the data carrier; Supplying the system with energy via the contactless interface through the terminal device; Detecting the user input using the input medium carrier; Storing the user input in the memory area of the integrated semiconductor chip of the data carrier; Removing the data carrier by separating the data carrier from the input medium carrier in order to use the data carrier as intended.

Also in the basic idea of the invention is a method for authenticating a user using the system with the following method steps: detecting an input from a user using the input means of the input means carrier; Reading a reference user input from an electronic ID card; Comparing the user input with the reference user input and authenticating the user depending on the comparison result.

In this case, the energy supply for recording and reading is advantageously carried out by a terminal device that emits an electromagnetic field, with both the system and the ID card being supplied with energy in a contactless manner by means of the field.

The electronic ID card advantageously carries out the comparison and, if the user input and reference user input match, creates a certificate about the recorded user input.

Preferably, the user input and the reference user input are transmitted to a remote entity for performing the comparison. A certificate is created in the remote instance as soon as the comparison shows that the user input and the reference user input match.

The process described is an alternative to the classic Post-Ident process. With classic Post-Ident, an entity, particularly a bank, a mobile operator, or a public authority, requires a person to be authenticated. To do this, the user must go to a certification authority, for example a post office, in order to authenticate themselves there using an identification document, for example an ID card or passport. An employee of the post office confirms the user's authentication with a certificate, for example a stamp with a signature on a form, which is then transferred back to the entity that requires the Post-Ident procedure as authentication.

With the method according to the invention, the system according to the invention is sent to the user at his home address. There he makes the user input, which is recorded and evaluated and stored in the data carrier. The user authenticates himself using an electronic identification document, such as an electronic ID card, ePass, eID, etc. Those in the electronic The reference user input stored in the identification document is now compared with the user input made. The comparison is carried out in the electronic document, a remote electronic certification authority or on another trustworthy device. As a result of the comparison result, the user is authenticated. In this way, contracts can be concluded, official letters sent, and accounts opened conveniently from the user's home address, without the user having to go to a remote certification authority.

The invention and further embodiments and advantages of the invention are explained in more detail below using figures, with the figures only describing exemplary embodiments of the invention. The same components in the figures are given the same reference numbers. The figures are not to be viewed as true to scale; individual elements of the figures may be shown in an exaggeratedly large or oversimplified manner.

• 1 Ein erstes Ausführungsbeispiel des erfindungsgemäßen Systems;
• 2 Eine kontaktbehaftete Schnittstelle gemäß dem Stand der Technik;
• 3 Ein Querschnitt des in 1 dargestellten Systems;
• 4 Ein stark vereinfachter Aufbau des erfindungsgemäßen Eingabemittelträgers;
• 5 Schematische Darstellung des erfindungsgemäßen Erfassens der Benutzereingabe;
• 6 Ein zweites Ausführungsbeispiel des erfindungsgemäßen Systems;
• 7 Ein Verfahrensablaufdiagramm zur erfindungsgemäßen Verwendung des Systems;
• 8 Ein Verfahrensablaufdiagramm eines Post-Ident Verfahrens gemäß dem Stand der Technik
• 9 Ein Verfahrensablaufdiagramm eines erfindungsgemäßen Verfahrens zum Authentisieren eines Benutzers

Show it:

• 1 A first embodiment of the system according to the invention;
• 2 A contact interface according to the state of the art;
• 3 A cross section of the in 1 system shown;
• 4 A greatly simplified structure of the input medium carrier according to the invention;
• 5 Schematic representation of the recording of user input according to the invention;
• 6 A second embodiment of the system according to the invention;
• 7 A process flow diagram for using the system according to the invention;
• 8th A process flow diagram of a Post-Ident process according to the prior art
• 9 A process flow diagram of a method according to the invention for authenticating a user

1 shows a system 1 according to the invention consisting of a portable data carrier 7 and a carrier 1 '. The portable data carrier 7 is connected to the carrier 1 'via three connecting webs. A frame 8 separates the data carrier 7 and the carrier 1 'at the points where there are no connecting webs. A user of the data carrier 7 can therefore easily remove it from the carrier 1 '. In this example, the removal is irreversible since reinserting the carrier 1 'does not provide any mechanical support for the data carrier 7. In an embodiment not shown, the removal is reversible, for example by means of a click mechanism the data carrier 7 can be inserted back into the carrier 1 'after removal. The carrier 1 'is here a card-shaped form adapter of a second format, which makes it possible to accommodate the data carrier 7, designed in a first format, in a terminal which can only accommodate data carriers 7 of the second format. If, on the other hand, the first format of the data carrier 7 is required to be inserted into a terminal, the carrier 1 'is removed by the user.

Such systems 1 are known in the prior art and are named here in an incomplete list: Plug-In SIM, ID-000, Mini-SIM, Micro-SIM, as the first format of the data carrier 7 with an ID-0 or ID-000 carrier 1' in the second format. The first and second formats can be combined as desired.

The carrier 1 'is according to 1 equipped with a pressure-sensitive input field 5. Four strain gauges 4 are arranged in the corner areas of the input field 5. The input field 5 is merely a marked area of a top side of the carrier 1', which shows the user where he can carry out the user input. In the simplest case, the input field 5 is an ink layer that was introduced into the system during the printing process.

An input semiconductor chip 6 is also integrated on the carrier 1 '. The output signals of the strain gauges 4 are recorded in the input semiconductor chip 6. Based on the bending of the input medium support 1 'when a user inputs, see 4 and 5 , the resistance values of the strain gauges 4 are changed. These changes are recorded and evaluated in the semiconductor chip 6. The evaluation unit provided for this purpose in the semiconductor chip 6 records the characters entered via these changes. In addition, the evaluation unit can also record and evaluate the duration and, if necessary, the dynamics of the input.

The evaluation unit of the input semiconductor chip 6 is connected to the data carrier 7 via a contact interface 7 via a data line 11, so that the data carrier 7 can store the user input recorded by the input semiconductor chip 6 in a memory area. This data line 11 runs within one of the webs that mechanically connect the carrier 1 'to the data carrier 7 and is connected to the semiconductor chip 2 of the data carrier. The data line 11 is example wise a data line that is connected to the I/O contact field 32 or 33 of the contact field 3 of the data carrier 7.

The data line 11 is preferably a communication according to ISO/IEC 7812 standard, so that the input semiconductor chip 6 provides a supply voltage Vcc, a clock, a reset signal, a ground connection, so that the semiconductor chip 2 of the data carrier 7 is supplied with energy and data in such a way that he can store the recorded input in the semiconductor chip 2. This means that the data carrier does not have to be inserted into a terminal device to enter the user input. The energy can, for example, be provided by a battery, a charging capacitor or another type of energy source for the carrier 1'.

Alternatively and not shown, the capture of the input could also be carried out by the semiconductor chip 2. For this purpose, the output signals of the strain gauges are sent directly to the data carrier 7. This has the advantage that no semiconductor chip has to be inserted into the carrier 1' and security is increased since the data carrier 7 is used from the capture to the storage of the input. The data carrier 7 is also supplied with energy via an energy source on the carrier 1′.

The data line(s) 11 are connected directly to the contact field 3. This connection is preferably laid in the card body of the system, so that the connection is protected from external influences.

If the data carrier 7 is removed from the carrier 1 ', the data line (s) 11 is irreversibly separated. The carrier 1' can then no longer be used for input.

In 2 Conventionally, a contact field 3 is shown with a ground contact field 31, an I/O field 32, an optional single-wire protocol, SWP for short, connection 33, a clock connection 34, a reset connection 35 and a power supply connection 35. These contact fields 31 to 36 are connected via contact to the semiconductor chip 2 of the data carrier 7. To operate the semiconductor chip 2 during user input, the corresponding signals are preferably provided by the input semiconductor chip 6. The communication between semiconductor chip 2 and input semiconductor chip 6 is possible, for example, via the SWP protocol, the T=0 or the T=1 protocol.

In 3 a cross section of the system 1 according to the invention is shown using the section line AA '. It can be seen that the data carrier 7 is separated from the carrier 1' by the frame 8 at the line AA '. The input field 5 and the strain gauges 4 are arranged in the carrier 1 '. The input field is simply a marked area on the top of the carrier 1 ', which shows the user where he can carry out the user input. In the simplest case, the input field 5 is an ink layer that was introduced into the system during the printing process. The system 1 is preferably produced in a lamination process. The detection of a user input and the evaluation of the strain gauges 4 for detecting the user input in an input semiconductor chip 6 are in particular in the applications DE 10 2010 052 985 as well as DE 10 2010 052 983 , filed November 30, 2010. Improved user input is possible using the in the DE 10 2010 052 992 , filed on November 30, 2010, and is therefore not explained in more detail here. The user input can be done, for example, with a finger or an input pen, also called a stylus or touch pen, by a user carrying out the desired input by pressing in the area of the input field 5.

The input field 5 can, as in 1 shown, be formed as a rectangular area on the carrier 1 '. The user can now enter his signature by hand or enter an alphanumeric string, for example a 4-digit PIN or another type of secret. Alternatively, the input field 5 is a keypad with the numbers 0-9 for entering a number or a combination of numbers.

In 4 an exemplary layer structure 9 of a system according to the invention is shown. Through lamination as a manufacturing process, the individual different layers are assembled into a layer structure 9. The top layer is in particular an overlay cover layer, which additionally has layers of color using the offset or screen printing process. Part of this layer is the input field 5, so that a user is shown in which area of the carrier 1 'the input can be made. The strain gauges 4 are arranged in a layer underneath, which can also be applied and laminated into a film layer to be laminated in a printing process. Alternatively, the strain gauges 4 can also be incorporated into the system body as separate components.

In 5 The pressing of the system with the resulting bending is shown. This bending is now registered by means of the strain gauges 4 and recorded in the semiconductor chip 2 or the input semiconductor chip 6. Included Not only is the degree of bending and, accordingly, the character entered determined, conclusions can also be made about the input dynamics, the input duration, and the like during the evaluation.

In the 6 second embodiment of the invention is shown. The structure essentially corresponds to the structure of the first exemplary embodiment 1 , which is why we only focus on the differences here 1 is received. The carrier 1' has a contactless interface 10 with an NFC antenna. This contactless interface is designed to generate energy from an applied electromagnetic field. For this purpose, a terminal device located within energy supply range will provide the EM field, which is supplied to the input semiconductor chip 6 via the contactless interface 10. The data carrier 7 is now supplied with the energy of the EM field via the data line(s) 11.

In this embodiment, the data line(s) or supply line 11 is irreversibly interrupted by removing the data carrier 7 from the carrier 1'. This means that no communication with the semiconductor chip 2 can be carried out via the contactless interface 10. The input semiconductor chip 6 now has three essential tasks. It establishes the energy supply via the antenna or coil of the contactless interface 10 and, if necessary, also data communication via NFC with the end device providing the energy. In its second task, the input semiconductor chip 6 can therefore supply the semiconductor chip 2 of the data carrier 7 with the five necessary electrical signals: ground 31, supply voltage 36, reset 35, input/output 32 or 33 and clock 34. The third task is to record and evaluate the output signals of the strain gauges 4.

The principle is as follows: A standard component is used as the semiconductor chip 2, which is already used hundreds of millions of times. The input semiconductor chip 6 obtains the energy from the field in order to supply the semiconductor chip 2, for example a SIM microcontroller, with the corresponding signals 31 to 36 via the data lines 11. The communication between input semiconductor chip 6 and the SIM microcontroller can be carried out, for example, with T=0, T=1 or via the SWP protocol. At the same time, the input semiconductor chip 6 detects the signals from the strain gauges 4. Once the evaluated data has been transferred to the data carrier 7, the user breaks the data carrier 7 out of the carrier 1 '. The data carrier 7 can now be inserted for its intended purpose, for example as a SIM in a mobile phone or as a USB stick or USB token in a PC. The carrier 1' can be disposed of.

As an improvement to the above solution in terms of protection of one-time feasibility, it is conceivable to irreversibly block the communication between input semiconductor chip 6 and semiconductor chip 2 via software as soon as the user input has occurred. Furthermore, the semiconductor chip 2 could be cryptographically paired with the input semiconductor chip 6 during production, so that only the two semiconductor chips 2, 6 can communicate with each other.

In this way, according to the invention, a possibility is created to introduce a class 3 card terminal on an NFC-capable terminal, which enables the user to securely enter data into the data carrier before the data carrier 1 is inserted as intended.

In particular, this data can be inserted into the data carrier 7 in a secure form once by the user, since irreversible removal and a software blockage after the initial entry prevents further entry. Standard semiconductor chips 2 or 6 can be used.

Alternatively and not shown, it is also conceivable that the communication between the data carrier 7 and the carrier 1' is not contact-based via data line 11 but rather contactless. For this purpose, the data carrier 7, similar to the carrier 1', has an NFC communication interface. For this purpose, the semiconductor chip 2 and the semiconductor chip 6 are preferably in data communication by means of a cryptographic channel. The data carrier 7 is also supplied with energy via the provided EM field of the terminal device. Communication can take place via an ISO/IEC 14443 or an ISO/IEC 18062 standardized procedure.

In the 7 a use of the system according to the invention is shown using a flow chart.

In step 13, the system 1 is placed within power supply range of an NFC-capable terminal device. For this purpose, for example, the data carrier 7 that has not been removed is placed on the terminal with the carrier 1 'in ID-1 format. The terminal device is, for example, the mobile phone and the data carrier 7 is the new SIM card of the mobile phone. This creates an EM field according to ISO/IEC 14443. According to step 14, this EM field is now used to supply energy to the system and not for data communication between the terminal and carrier 1 '. Therefore, in principle, any contactless terminal can be used be used. The input semiconductor chip 6 uses the EM field in step 15 to establish data communication with the semiconductor chip 2 according to T=0, T=1 or SWP protocol. Now, in the following step 16, the user can enter data on the pressure-sensitive input field 5 of the carrier 1 ', which the user uses his finger or stylus on the input field 5 and which is recorded and evaluated in the input semiconductor chip 6. A character and/or number recognition algorithm and, if necessary, writing dynamics (e.g. writing behavior, speed, duration of input) serve as an evaluation. The user input via the input field 5 can be used to enter alphanumeric character strings or to capture a handwritten signature. The evaluated input data is now transmitted directly to the data carrier 7 and without a detour via a possibly unsafe input means of a mobile phone or contactless terminal via the data line(s) and supply line 11 to the semiconductor chip 2, where they are stored in step 17.

After the user input has been stored, the data carrier 7 can now be removed in step 18 by breaking it out of the carrier 1 '. The webs/bridges with the data line(s) 11 located therein are irreversibly destroyed. Alternatively, the removal can also be reversible, so that further secure entries for the data carrier 7 can be made via the carrier 1 '.

An application according to the invention is an alternative to the relatively complex classic Post-Ident process, which is in 8th is shown. With classic Post-Ident, an entity 19, in particular a bank, a mobile phone operator, or a public authority, requires the authentication of a person. To do this, it sends the user 20 a form 22. The user 20 goes to a certification authority 21, for example a post office, with the form 20 and an identification document 23, for example a passport or ID card. Here the user 20 authenticates himself using the identification document 23. An employee of the post office confirms the authentication of the user 20 with a certificate 24, for example a stamp with a signature on a form 22. The certified form 22 'is now sent back to the authority 19 transferred back. This can be done by the user 20 or the certification authority 21.

This complex procedure, in particular the dependence on the remote certification authority 21, makes this system compliant 8th unattractive and inflexible. Nevertheless, it is sometimes essential for authorities to authenticate a user, for example when concluding a new mobile phone contract, when delivering official mail, when opening an account in a bank and so on.

In 9 A method according to the invention for authenticating a user is now shown using a flow chart. Here, the system 1 according to the invention is transmitted to the user 20 in step 25 by the entity 19, which wishes to authenticate the user 20. The user 20 uses the system 1 according to, for example 7 for capturing 16 and storing 17 a handwritten signature of the user 20. According to step 26, a reference user input stored in the electronic identification document eID, in particular ePass, RFID passport, is now read out. Ideally, the same EM field provided by the terminal device is used for this purpose. The handwritten signature that the user 20 had to submit when purchasing the eID is stored in the ePass, whereby the data about font dynamics, writing behavior, and duration of entry may also be stored here as secondary information for the handwritten signature in the eID. According to step 27, the reference user input is transmitted with the user input to the instance 19, where both inputs are compared according to step 28. If both entries match, i.e. the handwriting of the eID is identical to the entry stored in system 1, then the user 20 is considered authenticated.

The procedure according to 9 can be varied in such a way that the comparison 28 is carried out in a trustworthy environment of the user 20. In particular, the data carrier 7 can have a security element for this purpose, so that after the user input has been stored, the reference user input is transferred to the data carrier 7 (or sent to the data carrier 7) and after the reference user input has been stored, the comparison is carried out in the security element of the data carrier 7. When carrying out the comparison, secondary information such as font dynamics, placement behavior, and the time required for successful authentication of the user 20 can also be used. In a simpler comparison, the user input and the reference user input are compared using appropriate algorithms, for example by overlaying and scaling the inputs in the form of lettering. If the comparison is positive, the security element creates a certificate based on the user input. The instance 19 is then sent the certified user input.

Instead of the comparison 28 between user input and reference user input in the security element, the eID could also create the certificate using the stored user input, with the instance 19 using the digital certificate indicates that the user input matches the reference user input.

If the entity 19 is a mobile phone provider who has negotiated a mobile phone contract with a new customer as a user, the system 1 could consist of a plug-in SIM 7 and an ID-1 carrier 1 ', which the new customer receives in step 25. After entering and storing a signature, the SIM 7 is broken out and inserted into the terminal device as intended. When the SIM 7 is activated for the first time by the terminal, the stored input and the reference user input from the eID are transmitted to the mobile phone instance 19, compared there and the SIM card 7 is then activated for mobile phone calls.

Other contracts could also be concluded using the method according to the invention. For example, official mail could also be delivered to authenticated persons in this way. For this purpose, the user either receives a system according to the invention every time before delivery in order to comply with 9 to authenticate or he uses the carrier 1 'multiple times, whereby the data line 11 must not be irreversibly destroyed.

Instead of the comparison 28 between user input and reference user input, the eID could also create a certificate about the stored user input, with the instance 19 being shown by means of the digital certificate that the user input matches the reference user input.

The comparison can of course be positive even if there is not a 100% agreement if the deviations are within a predefined range, for example 5% deviation.

Claims (20)

Portable system (1) consisting of: - a portable data carrier (7) with an integrated semiconductor chip (2) and - a carrier (1 '), the data carrier (7) being fixed in the carrier (1') in a mechanically removable manner; wherein: - the carrier is an input means carrier (1') and has an input means (5) for detecting a user input; and - the integrated semiconductor chip (2) has an evaluation unit for evaluating the user input and a memory area for storing the user input, characterized in that: - the data carrier (7) is a mini-SIM, plug-in or micro-SIM card; - the input medium carrier (1') is a card-shaped form adapter and - data carrier (7) and input medium carrier (1') are irreversibly separated. System after Claim 1 , wherein the input means is a keypad or a pressure-sensitive input field (5). System after Claim 1 or 2 , wherein the input means has at least one strain gauge (4) and detects the user input by bending the strain gauge (4) of the input means carrier (1'). System according to one of the preceding claims, wherein the user input is a handwritten signature, or an alphanumeric character string. System according to one of the preceding claims, wherein the input medium carrier (1') has a contactless interface (10) for supplying the input field (5) with energy from an electromagnetic field of a terminal device within supply range. System according to one of the preceding claims, wherein the input field (5) has a contact-based electrical connection to the data carrier (7) and the contact-based connection is interrupted after the data carrier has been removed. System after Claim 6 , whereby the electrical connection is irreversibly interrupted. System according to one of the preceding claims, wherein the input field (5) has a contactless interface, the contactless interface being set up for communication with the data carrier (7) for storing the user input in the integrated semiconductor chip (2) of the data carrier (7). System after Claim 5 until 8th , wherein the terminal uses the electromagnetic field to supply the portable data carrier (7) with energy at least while detecting the user input and storing the user input in the memory area of the integrated semiconductor chip (2). System according to one of the preceding claims, wherein the data carrier has a communication interface for data communication with the intended terminal, data communication for storing the user input having previously taken place via this communication interface. System according to one of the preceding claims, wherein data communication between the input medium carrier (1') and the data carrier (7) is cryptographically secured, in particular by cryptographic pairing. A system according to any preceding claim, wherein the storage area for storing the user input is a write-once flash memory. System according to one of the Claims 6 until 12 , wherein the input medium carrier (1 ') and the data carrier (7) are connected with contact to a supply voltage line (36), a ground line (31), a clock line (34), a reset line (35) and an I / O line (32). is. Using a system in accordance with Claims 1 until 13 with the steps: - placing (13) the system within supply range for supplying energy to the system (7) by means of a contactless interface of a terminal, preferably the intended terminal of the data carrier (7); - Supplying the system with energy via the contactless interface through the terminal device; - Detecting (16) the user input using the input medium carrier (1'); - Storing (17) the user input in the memory area of the integrated semiconductor chip (2) of the data carrier; - Removing (18) the data carrier (7) by separating the data carrier (7) from the input medium carrier (1') for the intended use of the data carrier (7). Use the system in accordance with Claim 14 , wherein the input medium carrier carries out the evaluation of the recorded user input using an integrated input semiconductor (6). Use the system in accordance with Claim 14 or 15 , whereby standardized data communication according to ISO standard 7810 is established between the data carrier (7) and the input medium carrier (1 '). Method for authenticating a user using a system according to Claims 1 until 13 with the method steps: - detecting an input from a user using the input means of the input means carrier; - Reading a reference user input from an electronic ID card; - Comparing the user input with the reference user input and - Authenticating the user depending on the comparison result. Procedure according to Claim 17 , whereby the energy supply for recording and reading is carried out by a terminal device that emits an electromagnetic field, with both the system and the ID card being supplied with energy in a contactless manner by means of the field. Procedure according to one of the Claims 17 or 18 , whereby the electronic ID card carries out the comparison and, if the user input and the reference user input match, creates a certificate about the captured user input. Procedure according to one of the Claims 17 until 19 , where the user input and the reference user input are transmitted to a remote instance for performing the comparison, and a certificate is created in the remote instance once the comparison results in a match between the user input and the reference user input.

Images