DE102015211615A1 - Method and system for authenticating a document and method for producing and / or personalizing a document - Google Patents

Abstract

A method for authenticating a document (102), in particular a value, identity or security document (102) is provided, wherein at least one personal and / or document-specific information (104) is applied to the document (102) an optical sensor (136), and wherein the hash algorithm generated hash value (134) of the information (104) is stored on a server computer system (110), the server computer system (110) having an interface (114 ) for establishing a connection with a communication network (116). Furthermore, an electronic system for authenticating a document with this method is provided, as well as a method for producing and / or personalizing a security document, identity card or security document.

Description

The invention relates to a method and a system for authenticating a document, in particular a value, identity or security document. The invention further relates to a method for producing and / or personalizing a document, in particular a value, identity or security document.

In order to verify the authenticity of a document, in particular a value, identity or security document, various methods for authenticating such documents are known from the prior. For example, documents with a memory chip are known, personal or document-specific data and the private key of a cryptographic key pair of the user being stored on the chip. With the help of the private key, a signature can be generated from the data, which can be read out with corresponding readers. With the public key of the user the signature can be checked and so the document or the user can be authenticated.

From the DE 10 2011 119 103 A1 For example, a method for authenticating a user is known in which after a request of a server instance with a hash algorithm, a hash value is generated from personal data of the user and sent to the server instance. The server instance receives another record containing the same personal data and calculates a hash value with the same hash algorithm. Then the hash values are compared. If these match, the person or document is considered authenticated.

These methods have the disadvantage that a high technical effort is required to verify the authenticity of the document. For example, authentication is only possible if the required readers are present.

The invention is based on the object to provide a method and a system that allow easy authentication of a document, in particular a value, identity or security document. The object of the invention is furthermore to provide a method for producing and / or personalizing a document, in particular a value, identity or security document, which enables a simple production of such a document.

The objects underlying the invention are each achieved with the features of the independent claims. Embodiments of the invention are indicated in the dependent claims.

Embodiments are particularly advantageous since authentication of the document can be done with simple means. The detection of the information can be done in a simple manner, for example with the camera of a mobile telecommunication terminal. All that is required is a user computer system, for example a telecommunications terminal, which has an optical sensor and an interface for a communication network and on which program instructions for acquiring the information, generating the hash value and establishing a connection to the server computer system are provided.

The document itself requires neither an interface nor a processor or other electronic components. It is not necessary for information to be stored in electronic form on the document.

The information can be printed, for example, in plain text on the document, so that they are also cognitively detectable, that are readable by a user. It is not necessary to store the information in encrypted form on the document.

The method thus allows the use of simple ID or security documents, which can reduce the manufacturing cost of such documents. In particular, documents do not have electronic components, in particular no memory and no interface.

Another advantage of the method is that apart from the information no data must be present on the document. In particular, it is not necessary for a cryptographic key of the user to be stored on the document.

In addition, the personalization of the documents can also be carried out in a simple manner, since only the information must be applied in an optically detectable form on the document itself. Additionally, during personalization, the hash values of the information are stored on the server computer system for later comparison.

In the following, a "user" is understood to be a natural or legal person.

Below a "value, identity or security document" is a paper and / or or plastic-based document understood on the person-specific and / or document-specific information optically readable are applied, which allows identification of the user or the document, for example, for the release and use of certain services or functions. This includes, for example, identity documents, in particular passports, identity cards, visas and driver's licenses, vehicle registration documents, vehicle registration documents, company ID cards, health cards or other ID documents as well as consignment notes or other proof of entitlement. For example, the document may also be a voucher or an access card. The document has no chip or other electronic components, in particular not for the storage of person-specific and / or document-specific information.

• – Guillochen: Guillochen werden mit Hilfe von so genanntem Liniendruck auf das Dokument aufgedruckt. Sie bestehen im Allgemeinen aus in verschiedenen Farben übereinander gedruckten Wellen- und Schleifenmustern;
• – Mikro-Schrift: Hierbei handelt es sich um aufgedruckte Schriftzüge in kleinster Schrift. Mit bloßem Auge lässt sich die Mikro-Schrift kaum erkennen. Beispielsweise ist Mikro-Schrift auf den Euro-Banknoten als Bildelement in die Motive eingearbeitet. Mit Hilfe einer Lupe kann die Mikro-Schrift gelesen werden;
• – Aufdruck eines Metameren Systems: Aufgrund metamerer Farbgleichheit können unterschiedliche spektrale Zusammensetzungen des Lichts bei Menschen den gleichen Farbeindruck hervorrufen und zum Beispiel mittels Farbfiltern oder variablen Beleuchtungsquellen optisch wahrnehmbar gemacht werden;
• – Aufdruck mit Fluoreszenz-, Phosphoreszenz- und/oder Up-Conversion-Farben;
• – Aufdruck mit Infrarot-Farbe: Die Farbe wird nur unter Infrarot-Strahlung für Lesegeräte mit entsprechenden Sensoren detektierbar. Beispielsweise sind Euro-Banknoten mit diesem optischen Sicherheitsmerkmal ausgestattet;
• – Barcode, insbesondere ein- oder zweidimensionale Barcodes, monochrom oder mehrfarbig;
• – Hologramm und Kinegram (transparent oder reflektierend);
• – Wasserzeichen;
• – digitale Wasserzeichen, die eine sichtbare und/oder maschinell auslesbare Information tragen.

For example, "optically readable information" means:

• - Guilloche: Guilloche are printed on the document with the help of so-called line printing. They are generally made up of different colors of superimposed wave and loop patterns;
• - Micro-font: These are printed letters in the smallest font. With the naked eye, the micro-font can hardly recognize. For example, micro-typeface is incorporated into the motifs on the euro banknotes as a picture element. With the help of a magnifying glass, the micro-font can be read;
• - Printing a Metameric System: Due to metameric color uniformity, different spectral compositions of light in humans can cause the same color impression and be made visually perceptible, for example by means of color filters or variable illumination sources;
• - Imprint with fluorescence, phosphorescence and / or up-conversion colors;
• - Imprint with infrared color: The color is detectable only under infrared radiation for readers with corresponding sensors. For example, euro banknotes are equipped with this optical security feature;
• Barcode, in particular one or two-dimensional barcodes, monochrome or multicolor;
• - hologram and kinegram (transparent or reflective);
• - watermarks;
• - digital watermarks bearing visible and / or machine readable information.

The information applied with such optical security features can be detected visually, in particular cognitively by a user, in particular be machine-detectable with an optical sensor.

In the following, "information" is understood as meaning all information that is applied to the document and relates to a person and / or the document or that enables an identification of the person and / or the document. For example, the information is personal data or data with which a release for certain services can take place. The information can be designed for a one-time authentication of the document, for example in the case of a voucher. After a single authentication, the document can be revoked for re-authentication. Alternatively, however, the information can also be provided for a repeated authentication, wherein a defined number of authentication processes is also conceivable and after reaching this number no further authentication can take place.

An "optical sensor" is understood to be a sensor or an interface via which information can be recorded optically. For example, the optical sensor is a camera.

A "hash value" is understood to mean a value that has been calculated from an original value, for example an attribute value or an information with a hash algorithm. The input values can have different lengths. The hash values usually have a fixed, defined length, so that they can be further processed, for example, optimally by a signature function.

A "hashing algorithm" is a function that can compute a value of fixed length, a so-called hash value, from a variable length original value, such as an attribute value. Such a hash algorithm also has the following properties: The calculation of the original value from the calculated value should be practically impossible. In addition, the calculated hash values should be as collision-resistant as possible, that is, it should be virtually impossible to find different source values for which the same calculated hash value is output.

A "user computer system" is understood here as a computer system to which the user has access. This may be, for example, a personal computer (PC), a tablet PC or a telecommunication terminal, in particular a smartphone. The user computer system has an interface for connection to a communication network, wherein the communication network network may be a private or public network, in particular the Internet. Depending on the embodiment, this connection can also be made via a mobile network. Furthermore, the User computer system via an optical sensor for acquiring the information.

A "telecommunication terminal" is understood here to be a portable, battery-operated device with an interface for a communication network, in particular a mobile telephone, a smartphone or a portable computer, such as a laptop, notebook or tablet PC with an interface for the communication network. The interface for the communication network may be a mobile radio interface or an interface for another wired or wireless communication, such as a Bluetooth and / or a WLAN interface.

"Interfaces" here means any devices on the computer system or on the telecommunication terminal, via which a connection to a communication network can be established. The interfaces can be designed, for example, for wireless communication with a communication network. But it is also possible that the interfaces are designed for connection of the computer system or the telecommunication terminal to a wired communication network.

A "communication network" is understood here as any type of telecommunications network into which the user computer system, in particular the telecommunications terminal, can dial in with an interface. In particular, this term encompasses telecommunications networks which operate according to a mobile radio standard, such as, for example, a GSM, UMTS, CDMA or an LTE standard. Furthermore, communication networks such as wired Internet networks, wireless LAN networks or connections via Bluetooth or another interface of the telecommunication terminal are possible. By way of example, a connection to the Internet can be established via such a communication network. Alternatively, the connection can be established directly via a WLAN network, a Bluetooth connection or another short-range connection.

A "server computer system" is understood to mean a data processing system which can confirm or deny the identity of a user to third parties in an automated manner. For example, the server computer system may be an eID provider computer system.

An "eID provider computer system" is a data processing system which can confirm or deny the identity of a user to third parties in an automated manner. An "eID provider computer system" is preferably located in a particularly protected environment, in particular in a so-called trust center, so that the confirmation of a user's identity by means of an eID provider computer system has a particularly high degree of reliability.

In one embodiment, the document may include an identification feature that can uniquely identify the document to the server computer system. The first hash value is stored, for example, on the server computer system in such a way that the first hash value is assigned to the identification feature. The identification feature can be detected by the sensor together with the information, wherein the identification feature with the authentication request is sent to the server computer system.

By uniquely identifying the document to the server computer system, the transmitted hash values can be uniquely assigned to the hash values stored on the server computer system.

By means of a corresponding identification feature, it could also be possible to identify the document with respect to the user computer system. The program instructions may, for example, comprise a plurality of hash algorithms for different documents, and the hash algorithm required in each case is selected as a function of the detected identification feature. This allows the authentication of different types of value, ID or security documents with the same program instructions or the same user computer system.

The program instructions may also include an address of the server computer system for sending the authentication request to establish a connection to the server computer system. If the document has an identifying feature, the address of the server computer system can also be selected in dependence on this identification feature. That is, various addresses for different server computer systems, including various value, badge or security documents, may be stored on the user computer system.

The information can be detected with the optical sensor, namely with a camera. This allows a simple detection of the information, for example with the camera of a mobile telecommunication terminal. An additional interface is thus not required for reading the information.

In particular, the information and / or the identification feature can be detected with a mobile telecommunication terminal, in particular with a camera of a mobile telecommunication terminal.

In particular, it may easily be possible to make a copy of a document. The information may be applied so that a copy of the document is possible, the information being retained on the copy of the document. In such an embodiment, it is not necessary to carry the original document. Alternatively, the information may be applied such that a copy of the document is not possible, so that an additional protection against unauthorized copying of the document is provided.

On the server computer system, there may be provided program instructions having a count variable for the number of received authentication requests, wherein a maximum value is set for the count variable and no authentication confirmation is sent after reaching the maximum value.

The connection between the user computer system and the server computer system is preferably signed and / or encrypted to ensure secure transmission of the data.

In one embodiment of the method for producing and / or personalizing a document, in particular a work document, ID card or security document, another identification feature, for example, which can unambiguously identify the document to the server computer system and which can be detected by the sensor, is applied to the document , wherein the hash value is stored in the server computer system assigned to this identification feature. This allows a unique assignment of the information or generated hash values to the hash values stored on the server computer system.

For example, the information is printed on the document and / or imprinted, whereby a simple production of the document is possible. In addition, the information can be read easily, for example with a camera.

The information can be applied to the document in a cognitively detectable and / or readable form, so that the information on the value, ID card or security document can also be read out or recorded by a user without a sensor. Alternatively or additionally, additional, cognitively detectable for the user information on the document may be present, such as a passport photo or other data on which an identification of the owner of the document is possible.

In a user computer system that is part of an electronic system for authenticating a badge or security document according to the invention, for example, a communication address of the server computer system is stored to ensure a simple connection to the server computer system.

Preferably, the server computer system is secured by at least one firewall, so that manipulation of the data on the server computer system is reliably prevented.

In the following, embodiments of the invention will be explained in more detail with reference to the drawings. Show it:

1 a system for carrying out a method for authenticating a passport or security document,

2 a representation of a method for authentication of a passport or security document, and

3 a representation of a method method for producing and / or personalization of a security, ID or security document.

In 1 is a system 100 for authentication of a document 102 , in particular a passport or security document.

The document 102 is a user 106 and / or assigned to a service or a function. On the surface of the badge or security document 102 are personal and / or document-specific information 104 imprinted, impressed or applied in any other way, so that they can be detected with a sensor, in particular with an optical sensor.

The information 104 contain, for example, personal data of the user 106 like the name or the address of the user 106 , Alternatively or additionally, the information may also include data required for the use of a service or function, such as credentials. In addition, there may be additional features on the document that identify the utility 106 allow, for example, a passport photo.

The information 104 can be detected with an optical sensor or by a Person to be recorded visually. For example, the information is applied in writing to the document, so that both a cognitive detection as well as a machine readability or a detection with a sensor of the information 104 is possible.

• – Guillochen: Guillochen werden mit Hilfe von so genanntem Liniendruck auf das Dokument aufgedruckt. Sie bestehen im Allgemeinen aus in verschiedenen Farben übereinander gedruckten Wellen- und Schleifenmustern;
• – Mikro-Schrift: Hierbei handelt es sich um aufgedruckte Schriftzüge in kleinster Schrift. Mit bloßem Auge lässt sich die Mikro-Schrift kaum erkennen. Beispielsweise ist Mikro-Schrift auf den Euro-Banknoten als Bildelement in die Motive eingearbeitet. Mit Hilfe einer Lupe kann die Mikro-Schrift gelesen werden;
• – Metamere Systeme: Aufgrund metamerer Farbgleichheit können unterschiedliche spektrale Zusammensetzungen des Lichts bei Menschen den gleichen Farbeindruck hervorrufen und zum Beispiel mittels Farbfiltern oder variablen Beleuchtungsquellen optisch wahrnehmbar gemacht werden;
• – Aufdrucke mit Fluoreszenz-, Phosphoreszenz- und/oder Up-Conversion-Farben;
• – Aufdrucke mit Infrarot-Farbe: Die Farbe wird nur unter Infrarot-Strahlung für Lesegeräte mit entsprechenden Sensoren detektierbar. Beispielsweise sind Euro-Banknoten mit diesem optischen Sicherheitsmerkmal ausgestattet;
• – Barcodes, insbesondere ein- oder zweidimensionale Barcodes, monochrom oder mehrfarbig;
• – Hologramme und Kinegrame (transparent oder reflektierend);
• – Wasserzeichen;
• – digitale Wasserzeichen, die eine sichtbare und/oder maschinell auslesbare Information tragen.

Alternatively, the information on the document may also be represented by:

• - Guilloche: Guilloche are printed on the document with the help of so-called line printing. They are generally made up of different colors of superimposed wave and loop patterns;
• - Micro-font: These are printed letters in the smallest font. With the naked eye, the micro-font can hardly recognize. For example, micro-typeface is incorporated into the motifs on the euro banknotes as a picture element. With the help of a magnifying glass, the micro-font can be read;
• Metameric Systems: Due to metameric color uniformity, different spectral compositions of light in humans can produce the same color impression and be made visually perceptible, for example, by means of color filters or variable illumination sources;
• - Imprints with fluorescence, phosphorescence and / or up-conversion colors;
• - Imprints with infrared color: The color is detectable only under infrared radiation for readers with corresponding sensors. For example, euro banknotes are equipped with this optical security feature;
• Barcodes, in particular one or two-dimensional barcodes, monochrome or multicolor;
• - holograms and kinegrams (transparent or reflective);
• - watermarks;
• - digital watermarks bearing visible and / or machine readable information.

The system 100 has a user computer system 108 and a server computer system 110 on, each via an interface 112 . 114 have to have a communication network 116 a connection 118 between the user computer system 108 and the server computer system 110 build.

The interfaces 112 . 114 For example, for wireless communication with the communication network 116 be educated. But it is also possible that the interfaces 112 . 114 for connecting the user computer system 108 or the server computer system 110 are formed on a wired communication network.

The communication network may be, for example, a mobile radio network, such as a GSM, UMTS, CDMA or LTE network. Alternatively, such as wired Internet networks, wireless LAN networks or connections via Bluetooth or other interfaces 112 . 114 possible. By way of example, a connection to the Internet can be established via such a communication network. Alternatively, the connection can be established directly via a WLAN network, a Bluetooth connection or another short-range connection.

Preferably, data is transferred between the user computer system 108 and the server computer system 110 via end-to-end encryption. For the end-to-end encryption, a symmetric key may be used, for example, upon the execution of a cryptographic protocol between the user computer system 108 and the server computer system 110 is agreed.

The server computer system 110 also has a memory 120 as well as a processor 122 on. In the storage room 120 are hash values 124 to those on the document 102 applied information 104 stored, which were generated with a hash algorithm.

The hash values 124 are stored in such a way that an unambiguous assignment of the hash values 124 to the information 104 is possible.

For example, on the document 102 identification features 148 provided, which are also detectable with an optical sensor and the identification of the document 102 allow, and the information 104 are in the store 120 these identification features 148 assigned. For example, the identification features 148 formed by a code, a numbering or a fixed name.

In addition, the individual information 104 be assigned further identification features that allow identification of the individual information or their detection on the document 102 can facilitate. For example, the information 104 fixed codings, numbering or names such as "name" or "address" assigned.

In this embodiment, it is conceivable that the hash values 124 in a structure on the server computer system 110 are stored, the assignment via the identification features 148 the document and the identification features of the information.

Furthermore, in memory 120 program instructions 126 . 128 . 130 stored, each by the processor 122 can be executed. The program instructions 126 serve to receive an authentication request 132 from the user computer system 108 , The program instructions 128 serve to compare hash values 134 that comes with an authentication request 132 to the server computer system 10 with those in the store 120 dropped hash values 124 , The program instructions 130 serve to send an authentication confirmation 150 if the hash values 134 with the hash values 124 to match.

The user computer system 108 has a sensor 136 for optically capturing the information 104 as well as the identification features 148 on the document 102 , For example, the sensor is a camera that can take a picture of the information.

Furthermore, the user computer system 108 a processor 138 for executing program instructions 140 . 142 . 144 on. The program instructions 140 serve to generate hash values 124 from the information collected by the sensor with a hashing algorithm. The program instructions 142 serve to create and send an authentication request 132 from the user computer system 108 to the server computer system 110 , The program instructions 144 serve to receive an authentication confirmation 150 from the server computer system 110 ,

The user computer system 108 can be formed by any computer system that has an interface 112 and a sensor, in particular an optical sensor. The user computer system 108 is for example a mobile telecommunication terminal.

The authentication of the document 102 done with the in 2 illustrated method.

In a first step, the information becomes 104 on the document 102 with the sensor 136 the user computer system 108 detected. For example, by the sensor 136 a picture of the document 102 created. By program instructions 146 can the information 104 on the picture of the document 102 be identified. By the information 104 assigned identification features can, for example, finding or identifying the information 104 be relieved.

After collecting the information 104 and, where appropriate, their identification features and the identification features 148 of the document 102 be through the program instructions 140 with a hash algorithm the hash values 134 the information 104 generated. The hash algorithm is the same hash algorithm that is also used to generate the hash values 124 stored in the memory of the server computer system 110 stored was used.

Subsequently, through the program instructions 142 An authentication request that creates the generated hash values 134 , if applicable, the identification features of the information and the identification features 148 of the document 102 contains, and this authentication request through the interface 112 to the server computer system 110 Posted. For example, the program instructions 142 an address of the server computer system 110 to which the authentication request is sent.

Upon receipt of the authentication request by the server computer system 110 over the interface 14 become the received hash values 134 with those in the store 120 dropped hash values 124 compared, with the assignment of the identification features 148 and, where appropriate, the identifiers of the information 104 he follows.

Voices the transmitted hash values 134 with the stored hash values 124 match, the document applies 102 as authenticated. In this case, the server computer system sends 110 via the secure connection an authentication confirmation 150 to the user computer system 108 , The user computer system 108 may then issue an authentication signal to indicate to the user the successful authentication.

The method described has the advantage that the technical complexity for creating and authenticating the document 102 can be reduced. In particular, the document needs 102 have no electronic components, so that the production or personalization of the document 102 is much simpler. It only requires the information 104 so on the surface of the document 102 muster that they can be detected with the optical sensor of the user computer system and the generated hash values 124 this information on the server computer system 110 save. The cost of creating a document can be significantly reduced.

A method for producing or personalizing a document 102 is in 3 explained.

After providing the document 102 become the personal and / or Document-specific information 104 as well as the identification features 148 on the document 102 applied. For example, the information as well as the identification features 148 on the document 102 printed and / or imprinted.

Preferably, the information 104 and identification features 148 applied in a form that they can be detected with an optical sensor as well as cognitively by the user. For example, the information 104 and identification features 148 in plain text on the document 102 applied.

Through a computer system, the hash values become 124 the information 104 generated with the hash algorithm.

Subsequently, a connection with end-to-end encryption is established between the computer system and the server computer system. The hash values 124 as well as the identification features 148 will be sent to the server computer system via this connection 110 sent and stored on this, for example, under assignment to the identification features 148 of the document as well as optional identification features of the individual information.

The document 102 may for example be provided for a repeated application, so that a multiple authentication of the document 102 is possible.

Alternatively, the document may only be provided for a single application or a defined number of applications, for example as a value coupon. In such an embodiment, the program instructions 128 have a count variable that counts the number of authentication requests. An authentication confirmation will only be generated and sent if the number of authentication requests is below a pre-defined number. For example, the document can be used as proof of access authorization, whereby only a defined number of accesses should be possible.

For example, the document ( 102 ) can be used as a voucher. In such an embodiment, the dispatch of another authentication confirmation can be blocked already after receiving a one-time authentication request and sending the authentication confirmation.

LIST OF REFERENCE NUMBERS

100

system

102

document

104

information

106

person

108

User computer system

110

Server computer system

112

interface

114

interface

116

Communication network

118

connection

120

Storage

122

processor

124

first hash value

126

program instructions

128

program instructions

130

program instructions

132

authentication request

134

second hash value

136

sensor

138

processor

140

program instructions

142

program instructions

144

program instructions

146

program instructions

148

identification features

150

authentication confirmation

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 102011119103 A1 [0003]

Claims (14)

Method for authenticating a document ( 102 ), in particular a value, identity or security document, with reference to the document ( 102 ) at least personal and / or document-specific information ( 104 ) printed with an optical sensor ( 136 ), and wherein a first hash value generated with a hash algorithm ( 124 ) of information ( 104 ) on a server computer system ( 110 ), the server computer system ( 110 ) an interface ( 114 ) for establishing a connection with a communication network ( 116 ), and the method comprises the following steps: - acquiring the information ( 104 ) on the document ( 102 ) with an optical sensor ( 136 ) of a user computer system ( 108 ), which has a processor ( 138 ) for executing program instructions ( 140 . 142 . 144 ) and an interface ( 112 ) for establishing a connection with a communication network ( 116 ), - generating a second hash value ( 134 ) of the information collected ( 104 ) with the hash algorithm by the processor ( 138 ) of the user computer system ( 108 ), - establishment of a secure connection ( 118 ) between the user computer system ( 108 ) and the server computer system ( 110 ), - sending an authentication request ( 132 ) of the user computer system ( 108 ) to the server computer system ( 110 ), the authentication request ( 132 ) the second hash value ( 134 ), - comparison of the second hash value ( 134 ) with the on the server computer system ( 110 stored first hash value ( 124 ) of information ( 104 ) by the server computer system ( 110 ), - authentication of the document ( 102 ) and generating an authentication signal when the second hash value ( 134 ) with the server computer system ( 110 stored first hash value ( 124 ), and - sending the authentication signal over the secure connection ( 118 ) from the server computer system ( 110 ) to the user computer system ( 108 ), if the first and second hash values ( 124 . 134 ) to match. The method of claim 1, wherein the document ( 102 ) an identification feature ( 148 ) containing the document ( 102 ) relative to the server computer system ( 110 ), and wherein the first hash value ( 124 ) on the server computer system ( 110 ) is stored so that an assignment of the first hash value ( 124 ) to the identification feature ( 148 ), the identification feature ( 148 ) through the optical sensor ( 136 ) together with the information ( 104 ), the identification feature ( 148 ) with the authentication request ( 132 ) to the server computer system ( 110 ) is sent. Method according to claim 1 or 2, wherein the program instructions ( 140 ) an address of the server computer system ( 110 ) to send the authentication request ( 132 ) exhibit. Method according to one of the preceding claims, wherein the information ( 104 ) is detected with the optical sensor, namely with a camera. Method according to one of the preceding claims, wherein the information ( 104 ) and / or the identification feature ( 148 ) is detected with a mobile telecommunication terminal, in particular with a camera of a mobile telecommunication terminal. Method according to one of the preceding claims, wherein the document ( 102 ) and the information ( 104 ) of the copy of the document ( 102 ). Method according to one of the preceding claims, wherein program instructions are provided on the server computer system which provide a count variable for the number of received authentication requests ( 132 ), wherein a maximum value for the counter variable is fixed and after reaching the maximum value no authentication confirmation ( 150 ) is shipped. Method according to one of the preceding claims, wherein the secure connection ( 118 ) is signed and / or encrypted. Method for producing and / or personalizing a document ( 102 ), in particular a value, identity or security document, with reference to the document ( 102 ) at least personal and / or document-specific information ( 104 ), which is connected to a sensor ( 136 ) of a user computer system ( 108 ), in particular an optical sensor ( 136 ), and the method comprises the following steps: - providing the document ( 102 ), - providing personal and / or document-specific information ( 104 ) on the document ( 102 ), Generating a first hash value ( 124 ) of the information ( 104 ) with a hash algorithm by a computer system, - establishing a connection with an end-to-end encryption between the computer system and a server computer system ( 110 ), - sending the generated first hash value ( 124 ) to the server computer system ( 110 ), and - storing the generated hash value ( 124 ) in the server computer system ( 110 ). Method according to claim 7 or 8, wherein the information ( 104 ) on the document ( 102 ) is printed and / or imprinted. Method according to one of the preceding claims, wherein the information ( 104 ) cognitive and / or readable on the document ( 102 ) are applied. Electronic system ( 100 ) for authenticating a document ( 102 ), in particular a value, identity or security document ( 102 ), comprising: - a server computer system ( 110 ), which has a memory ( 120 ), in which a first hash value generated with a hash algorithm ( 124 ) personal and / or document-specific information ( 104 ), an interface ( 114 ) for establishing a connection with a communication network ( 116 ) as well as a processor ( 122 ) for executing program instructions ( 126 . 128 . 130 ), to receive an authentication request ( 132 ), to send an authentication acknowledgment and to compare a received second hash value ( 134 ) with the stored first hash value ( 124 ), - a user computer system ( 108 ) with a sensor ( 136 ) for collecting personal and / or document-specific information ( 104 ) on the document ( 102 )), an interface ( 112 ) for establishing a connection with the communication network ( 116 ) as well as a processor ( 138 ) for executing program instructions ( 140 . 142 . 144 ) for generating a second hash value ( 134 ) using the hash algorithm to create and send the authentication request ( 132 ) and to receive an authentication confirmation. The system of claim 12, wherein in the user computer system ( 108 ) a communication address of the server computer system ( 110 ) is stored. A system according to claim 12 or 13, wherein the server computer system ( 110 ) is secured by at least one firewall.

Images