DE19923370A1 - Data processing device controls data exchange with external system depending on control data read in from functional module via functional module coupler - Google Patents

Abstract

The data processor has a client part (120), at least one telecommunications coupler for exchanging data with an external data processing system (110) and a controller. The client part has a functional module coupler for at least one mobile functional module (140) enabling data exchanges between the client part and mobile functional module. The controller controls the data exchange with the external system depending on control data read in from a functional module via the functional module coupler if a functional module is coupled via the coupler.

Description

The invention relates to a data processing device. In particular The invention relates to a telecommunication device networked data processing device.

For some time now, through the Internet or other telecommunications networked data processing systems not only from Companies, but also by end users as part of the "Electronic commerce" ("E-Commerce") for processing Ge businesses of all kinds.

Use of the Internet and other telecommunications systems such as for example proprietary online systems by the end user almost always follows using a "personal computer", too "PC" called, or a comparable device, for example one Workstation, a portable computer ("notebook") or an in a hand-held mini device ("palmtop").

Personal computers and similar devices have the advantage of that the amount of functionality they provide to the end user Can be made available, not only by the hardware used ware is determined, but by loading different programs me can be changed extremely flexibly at any time can. For example, it is possible to subsequently add a certain software re upplaying and installing if the end user has additional Want to use functionalities.

The disadvantage of this universality is that it becomes overgrown xity with common operating systems such as Windows or Unix equipped PCs or workstations. The end user must first have a Considerable background knowledge of the structure and function acquire coherences of the complex overall system in order to obtain the in it applied potential universality for solving specific tasks prak to be able to use the table.

It turns out that not negligible groups of end users or prospective end users telecommunication services therefore in particular others do not want to use or do not want to use for the purposes of e-commerce because they have the complexity of PCs or comparable devices are unable to master their use so far de facto a necessary prerequisite for participating in or using Telecommunication services is.

Those for the end user with conventional data processing equipment The technical problems that arise are manifold. You begin usually with the fact that not only the operating system is set up, but also a connection to a telecommunication system, for example the Internet, configured and finally established must become. The modalities of access to the Internet vary among other things locally depending on the country or region and moreover on the same Location from provider to provider.

When finally a deployable networked computing one direction has been achieved, the end user sees himself, for example, in Internet of an unstructured variety of offers for business Operation opposite. With conventional data processing equipment The end user has to acquire extensive Funstellewis himself sen to develop and acquire knowledge about the offers that are of interest to him to be able to use the telecommunications network.

Has the end user finally found a provider with whom he would like to get in touch on business, are usually at every provider has numerous special features with regard to identification and the authentication of the customer as well as the delivery of the ordered Goods and to be observed when processing payments.

In view of this problem, it has been proposed so far, ex to create tremendously specialized data processing facilities that only a single functionality or at most a few Ability to provide functionalities. An example of this is this Mobile phone, the one coupled to a telecommunications network Data processing device represents which essentially single Lich serves a single purpose, namely telephoning. One Restriction to a single functionality per device type turns out to be however, with the increasing importance of networked data processing facilities as a hindrance, as the number of for the different Areas of use required different types of devices too much increases. With an increase in the number of functionalities per device along conventional procedures, for example by adding Me from text messaging on cell phones is rapidly turning back on Complexity level reached with regard to device operation, which has a deterrent effect for large groups of users.

An important field of application of e-commerce is in combination hang with the distribution of files, the data processing program me, texts, images, multimedia works or video animations may include, by content providers to customers. In this application A special feature is that the exchange of services run completely disembodied between content provider and customer can, as both the offer catalog, the order process, the delivery the ordered goods as well as the billing in the form of via Tele communication facilities exchanged data are handled can. A disadvantage of previous approaches to the distribution of Wer ken consists in the fact that the customer is usually a duplication must acquire a copy of the work as a purchase, even if he does only used briefly or in part.

The invention is therefore related to one for the technical infrastructure suitable for similar purposes.

The object of the invention is therefore to provide improved data processing to provide for the use of telecommunications services with as little system knowledge as possible, and yet is extremely flexible.

It is a further object of the invention to provide an improved data processing system provision facility in which the billing is particularly flexible can be carried out.

According to the invention, this object is achieved by data processing processing device with the features specified in claim 1 by a data processing device with the specified in claim 40 nen features, by a data processing device with the im Claim 77 specified features and by a data processing processing device with the features specified in claim 78.

The subjects of the independent claims each have for independent inventive content.

In the following the invention is illustrated by means of embodiments explained in more detail:

Fig. 1 shows schematically a networked data processing device according to the invention with a server part and a client part.

Fig. 2 shows a schematic representation of various aspects in the business use of a data processing device according to the invention.

Fig. 3 shows a first application of the invention using a cal matic representation of a data processing device according to the invention.

Fig. 4 shows a second application of the invention on the basis of a cal matic representation of a data processing device according to the invention.

Fig. 5 shows a third application of the invention on the basis of a cal matic representation of a data processing device according to the invention.

FIG. 6 shows a first variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 7 shows a second variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 8 shows a third variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 9 shows a fourth variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 10 shows a fifth variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 11 shows a sixth variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 12 shows a seventh variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 13 shows an eighth variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 14 shows a ninth variant of an embodiment of the solution according to the invention shown in FIG. 1.

FIG. 15 shows a tenth variant of an embodiment of the solution according to the invention shown in FIG. 1.

Fig. 16 shows schematically a first embodiment of the solution according to the invention.

Fig. 17 shows schematically a second embodiment of the solution according to the invention.

Fig. 18 shows schematically a third embodiment of the fiction, contemporary solution.

Fig. 19 shows schematically a fourth embodiment of the solution according to the invention.

Fig. 20 shows schematically a fifth embodiment of the solution according to the invention.

Fig. 21 shows schematically a sixth embodiment of the solution according to the invention.

FIG. 22 schematically shows another variant of the sixth embodiment of the solution according to the invention from FIG. 21.

FIG. 23 schematically shows another variant of the sixth embodiment of the solution according to the invention from FIG. 22.

Fig. 24 schematically illustrates devices for encryption and decryption of copyrighted (multimedia) works repre animal files including the card module.

FIG. 25 shows, in the partial FIGS. 25a to 25f, different configurations from FIG. 24.

FIG. 26 shows schematically, using an example, the time sequence of the data exchange between the client part and the server part.

Fig. 27 is a flowchart schematically showing a first method for billing of the cover of software, text or multimedia works representing files from a server part.

Fig. 28 is a flowchart schematically showing a second method for billing of the cover of software, text or multimedia works representing files from a server part.

Fig. 29 is a perspective view showing a hardware Erwei esterification module with a smart card as a card module.

FIG. 30 is a schematic flow chart of an examplary subscription ordering process.

Fig. 31 is a schematic diagram illustrates a first variant of a subscription processing means of the inventive solution.

Fig. 32 shows a schematic representation of a second flow Varian te a subscription-processing means of the solution according erfindungsge.

Fig. 33 is a schematic flow diagram illustrates a third variant of a subscription processing means of the inventive solution.

FIG. 34 shows, in the partial FIGS. 34a to 34h, schematically processes in connection with the billing of files supplied in the context of the solution according to the invention.

Fig. 1 shows schematically a cross-linked Datenverarbei processing device according to the invention with a server portion 110 and a client portion 120. The server part 110 and the client part 120 are connected to each other via a telecommunications network 130 called a WAN (Wide Area Network), for example via the analog telephone network, via the ISDN network, via the Internet or via a satellite link for exchanging data. Typically, the server part 110 and the client part 120 are each assigned a unique address or identifier 112 , 122 , for example a telephone number, an Internet address or the like, for the purpose of data exchange via the WAN 130. If the client part 120 wants to set up a connection to the server part 110 via the WAN 130 , it needs information about its address 112 . Conversely, the server part 110 requires information about the address 122 of the client part 120 .

The client part 120 is set up to accommodate a mobile map module 140 . The card module 140 comprises at least one memory device for the non-volatile storage of data (not shown) and can exchange data with the client part 120 via a data communication device (not shown). The card module can in particular be designed as a chip card; however, other easily transportable designs are also possible. Basic properties of chip cards are known, among others, from Wolfgang Rankl and Wolfgang Effing: "Handbuch der Chipkarten", Munich: Carl Hanser Verlag, 2nd edition 1996 . The disclosure content of this document is incorporated into the present description by reference.

The server part 120 is a computer that is typically assigned to a commercial provider of goods and / or services. The server part 120 can be, for example, a computer which is coupled to the telephone network via modem or ISDN and which can be selected for data communication from the client part 120 via a dial-up line. In another embodiment, the server part 120 is a “World Wide Web” server (“WWW server”) connected to the Internet, which can communicate with the client part 120 via the “Hypertext Transport Protocol” (“HTTP protocol”). In a further embodiment, the server part is designed, for example, as a computer connected to the Internet, which uses the "Simple Mail Transport Protocol"("SMTP") and the "Post Office Protocol"("POP") to send electronic mail ("E- Mail ") with the client part 120 can exchange. The invention is not limited to certain types of telecommunication networks or to certain protocols; the above information is for illustration purposes only.

FIG. 2 shows a schematic representation of various aspects in the business use of a data processing device according to the invention. The inventive interaction of the card module 140 with the client part 120 enables the end user (not shown) accessing the server part 110 via the client part 120 to process transactions in an advantageous manner.

• 1. Aspect ( 1 ): On the one hand, the card module 140 in cooperation with the client part 120 enables a system-independent establishment of the communication relationship with the server part 112 , for example by means of a system-independent dial-in process. For this purpose, access data, access configurations or access procedures are stored in the memory of the card module 140. This saves the end user from having to configure the access data, for example, to an Internet access provider, to a server for electronic mail or to a server for processing electronic subscriptions. In a preferred variant, the client part 120 with the card module 140 can be designed in such a way that the end user only has to insert the card module 140 into the client part 120 in order to initiate the establishment of a telecommunication connection to a server part 110. Where it is indicated, the initiation of the establishment of a telecommunications connection to the server part 110 can also be made dependent on the actuation of an operating element, in particular on the client part 120 and / or on the input of security information, for example a PIN.
• 2. Aspect ( 2 ): The card module 140 , in cooperation with the client part 120, enables the end user to be differentiated and / or identified with respect to the server part 110 . A distinction must be made here between three cases: On the one hand, there can be cases in which identification of the end user by name, address, etc. is not necessary or undesirable or not legally permitted, but in which different end users, each using separate card modules 140 should be distinguishable from one another. This can be done on the one hand by a pure serialization of the card module 140, for example by means of a unique, never-repeating serial number written in a non-overwritable memory area of the card module 140; if the end user successively uses different card modules 140 with different serial numbers, it is not possible to infer the person of the end user without additional link information. A third variant includes a pseudonymous identification of the end user across several card modules 140 , which, however, does not allow any conclusions to be drawn about the identity of the end user without additional information. In the case of prepaid card modules 140 , it will often be possible to dispense with identifying the end user. If payment processing via invoicing, credit card, direct debit, etc. is planned, data will usually be required to fully identify the end user. A pseudonym is always useful if the intended service exchange is to be processed without knowing the identity of the end user, but taking into account the knowledge of which different card modules 140 are to be assigned to the same end user (see also aspect 7 in particular).
• 3. Aspect ( 3 ): The card module 140 in cooperation with the client part 120 also enables its authentication to the server part 110 , ie certain authenticity properties of a card module 140 can be checked from the server part. Known cryptographic methods can preferably be used for this purpose. For example, it is possible to store a secret cryptographic key assigned to a specific end user in a tamper-proof, non-volatile area of the memory (not shown) of the card module 140. However, the cryptographic key does not have to be assigned to an end user in every case; it is also possible, using the same techniques, to distinguish card modules 140 that have been authorized by an authorized manufacturer on the market from card modules that have been copied by unauthorized third parties.
• 4. Aspect ( 4 ): Furthermore, the card module 140, in cooperation with the client part 120, enables the control of recurring transactions with respect to the server part 110 , in particular subscriptions to certain services.
• 5. Aspect ( 5 ): Furthermore, the card module 140, in cooperation with the client part 120, enables a card module-bound decryption of files supplied by the server part 110 which can represent software, texts and / or multimedia works, for example. Effective technical protection of copyrights can be achieved through this.
• 6. Aspect ( 6 ): The card module 140 , in cooperation with the client part 140, also enables the use of files supplied by the server part 110 which, for example, can represent multimedia works, measured according to a time cycle. This enables a technical infrastructure to be implemented for the time-of-use-dependent calculation of copyrights (see also aspect 7 in particular).
• 7. Aspect ( 7 ): The card module 140 in cooperation with the client part 120 also enables payment transactions to be processed with respect to the server part 110, for example by transmitting credit card numbers or digital stamps ("digital cash"). Different alternatives are to be distinguished: On the one hand, a card module 140 brought into circulation can embody a predetermined prepaid credit which is represented by a corresponding predetermined data element stored in the memory (not shown) of the card module. On the other hand, the payment can be made person-related by invoicing, credit card or direct debit, with the necessary information on identity and the payment transaction data (account number, credit card number, billing address, etc.) being stored in the memory (not shown) of card module 140. For both cases, it is advantageous to ensure the authenticity of the card module 140 and the data elements stored in its memory with a digital signature generated by the authorized issuing body. Regardless of the above distinction between prepaid credit and ongoing billing, there is an alternative between acquiring files according to the principle of purchase, i.e. after a one-time payment of a purchase price there is unlimited use, and billing based on the intensity of use, preferably based on the Time of use or the volume of data actually used in a file. Finally, there is a further independent alternative between card modules 140 , which are already provided with all necessary billing-related data elements at the point in time at which they are brought into circulation, and those card modules 140 in which the billing-related data elements only after they have been released to the end user from the server part 110 to the memory (not shown) of the card module 140 who. The eight individual cases resulting from the combination of these three alternatives each require a specific technical configuration of the card module and its interaction within the scope of the solution according to the invention.
• 8. Aspect ( 8 ): If the card module 140 is equipped with sufficient storage capacity, for example in the form of so-called flash memory, files that represent programs for data processing systems, texts or multimedia works, for example, can be temporarily or in the card module be permanently stored. In particular, this improves the technical implementation of the systems already addressed in aspect (4 ) for the automated periodic reference of files representing software, texts and / or multimedia works and distributed by the server part 110.
• 9. Aspect ( 9 ): Finally, the card module 140, in cooperation with the client part 120, can be used to telematically enable or disable certain functionalities by the server part 110.

In a data processing device according to the invention not all aspects can be realized at the same time.

The exemplary embodiments described below and their variants ten make use of certain cryptographic tech technologies such as asymmetric cryptography and digital Signatures. An introduction to applied cryptography takes place for example in: Bruce Schneier: "Applied Cryptography", New York: John Wiley & Sons, Inc., 1994. The disclosure of this Reference is made in this specification by reference recorded.

Fig. 3 shows a first application of the invention on the basis of a schematic representation of a data processing device according to the invention. As already shown in FIG. 1, a client part 120 is connected to a server part 110 via a WAN 130 . The client part 120 is 125 verse hen with an only schematically illustrated display device. The card module 140 received by the client part identifies a specific end user (not shown) to whom the card module 140 is assigned, personally or pseudonymously. Identity information 141 , which can be transmitted to the server part 110 via the WAN 130, is in particular stored in the card module 140. The identity information 141 can be additionally secured on the client part 120 in the usual way, for example by a PIN or by biometric identity detection devices (not shown). In addition to the card module 140, there may be other card modules 140 a, 140 b, 140 c which are each assigned to the identities SN1, SN2 and SN3. If the card module 140 belonging to the identity SN4 141 is exchanged for one of the other card modules 140 a, 140 b, 140 c, the respective assigned identity information SN1, SN2 or SN3 can be transmitted to the server part 110 . The first application of the invention presented in Fig. 3 is of particular importance when an acting subject is to be at least distinguishable or identifiable directly or via a pseudonym, for example in its capacity as a contractual partner on the part of the server part 110.

Fig. 4 shows a second application of the invention on the basis of a schematic representation of a data processing device according to the invention. As already shown in FIG. 1, a client part 120 is connected to a server part 110 via a WAN 130 . The client part 120 is 125 verse hen with an only schematically illustrated display device. The card module 140 received by the client part can in particular identify a specific contractual relationship AbD 141 via a predetermined data element, which in the present example includes the regular delivery (subscription) of a digital multimedia product. In addition to the card module 140 other cards that can module 140 a, 140 b 140 c exist, each Nissen the contract behaves AbA, AbB or AbC (141 a, 141 b, 141 c) are assigned. If the card module 140 belonging to the contractual relationship 141 is exchanged for one of the other card modules 140 a, 140 b, 140 c, the respective assigned contractual relationship information 141 a, 141 b or 141 c can be transmitted to the server part 110. The respective contract relationship information 141 , 141 a, 141 b, 141 c is a parameter that controls an automatic selection process with regard to the file (not shown) to be transmitted from the server part 110 to the client part 120 and representing a multimedia representation, as well as with regard to the transmission time .

Fig. 5 shows a fourth application of the invention on the basis of a schematic representation of a data processing device according to the invention. As already shown in FIG. 1, a client part 120 is connected to a server part 110 via a WAN 130 . The client part 120 is 125 verse hen with an only schematically illustrated display device. The card module 140 received by the client part identifies, in particular, a specific server part 110 which , for example, can be assigned to an associated specific service provider SPr4. In addition to the card module 140, there may be other card modules 140 a, 140 b, 140 c which are each assigned to the service providers SPr1, SPr2 and SPr3 ( 141 a, 141 b, 141 c). If the card module 140 belonging to the service provider 141 is exchanged for one of the other card modules 140 a, 140 b, 140 c, the associated service provider information 141 a, 141 b or 141 c can be transmitted to the server part 110. The respective service provider information 141 , 141 a, 141 b, 141 c is a parameter which in particular causes an automatic selection process with regard to the data transmission parameters from the client part 120 , so that an automatic initiation of a data exchange between client part 120 and server part 110 is made possible.

FIG. 6 shows a first variant of an embodiment of the solution according to the invention shown in FIG. 1. As already shown in FIG. 1, a client part 120 set up to accommodate a card module 140 is connected to a server part 110 via a WAN 130 . The client part 120 is provided with a display device 125 , which is only shown schematically. Fig. 6 thus shows a solution, in which the appointed for receiving a card module 140 and client part 120 and the display device form a mechanically substantially made in one piece device 125th

FIG. 7 shows a second variant of an embodiment of the solution according to the invention shown in FIG. 1. As already shown in FIG. 1, a client part 120 set up to accommodate a card module 140 is provided. The client part 120 is coupled via a data communication device 123 to a display device 125 , which is only shown schematically and which is connected to a server part 110 via a WAN 130 . Fig. 7 thus shows a solution in which the client part 120 set up to accommodate a card module 140 on the one hand and the display device 125 connected to the WAN 130 on the other hand each form a mechanically essentially one-piece device, with the data exchange between the client part 120 and the display part 125 by the data communication device 123 takes place. As technical implementations for the data communication device, wireless and wired devices methods come into consideration, in particular by data transmission cable (not shown), by radio (not shown) or by infrared, eg. B. IRDA (not shown).

FIG. 8 shows a third variant of an embodiment of the solution according to the invention shown in FIG. 1. As already shown in FIG. 1, a client part 120 set up to accommodate a card module 140 is provided, which is connected to a server 110 via a WAN 130 . The client part 120 is coupled via a data communication device 123 to a display device 125, which is only shown schematically. Fig. 8 thus shows a solution in which to receive a card module 140 arranged and connected to the WAN 130 client part 120 on the one hand and the Anzeigeein direction 125 on the other hand each represents a mechanically substantially made in one piece unit form, wherein the data exchange between the client part 120 and the display part 125 by the data communication device 123 takes place. As technical implementations for the data communication device, wireless and wired devices methods come into consideration, in particular by data transmission cable (not shown), by radio (not shown) or by infrared, e.g. B. IRDA (not shown).

FIG. 9 shows a fourth variant of an embodiment of the solution according to the invention shown in FIG. 1. As already shown in FIG. 1, a client part 120 , which is set up to accommodate at least one card module 140 and is connected to a server part 110 via a WAN 130 , is provided. In addition to the client part 120, there is a display device 125 , shown only schematically, which is also set up to accommodate at least one card module 140. Fig. 9 thus shows a solution in which to receive a card module 140 arranged and connected to the WAN 130 client part 120 on the one hand and the display device 125 form the other hand each represents a device that can be mechanically carried out essentially in one piece, wherein the Data exchange between the client part 120 and the display part 125 takes place by repositioning the card module 140. For example, the card module can be included in the client portion 140 140 for storing supplied by the server portion 110 data. After the relevant data have been stored in the card module 140 , these data can be made perceptible by plugging the card module into the display device. Conversely, it is also possible, for example, to store data relating to ordering processes in the card module 140 when it has been received by the display device 125 . After the card module 140 has been plugged into the client part 140, this order data can be forwarded to the server part 110 via the WAN 130.

FIG. 10 shows a fifth variant of an embodiment of the solution according to the invention shown in FIG. 1. As already shown in FIG. 1, a client part 120 set up to accommodate a card module 140 is provided. The client part 120 is coupled via a data communication device 123 to a display device 125 , which is only shown schematically and which is connected to a server part 110 via a WAN 130 . Fig. 10 thus shows a solution in which the client part 120 set up to accommodate a card module 140 on the one hand and the display device 125 connected to the WAN 130 on the other hand each form a mechanically essentially one-piece device, the data exchange between the client part 120 and the display part 125 is carried out by the data communication device 123 . As technical implementations for the data communication device, wireless and wired devices methods come into consideration, in particular by data transmission cable (not shown), by radio (not shown) or by infrared, e.g. B. IRDA (not shown).

The client part 120 shown in Fig. 10 is set up to accommodate a multitude of card modules 140 a- 140 e, which can initiate and control communication processes with the server part 110 independently of one another by means of the card module data stored on them (not shown) and which at can be addressed independently of one another by the server part 110 in initiated communication processes from the point of view of the server part 110. For example, at least one of the card modules 140 a- 140 e can act as part of a system shown in FIG. 4, ie one card module or several card modules serve as a memory for regular but asynchronous user operations digitally through the server part 110 via the WAN 130 digital multimedia products supplied.

The peculiarity of the arrangement shown in Fig. 10 compared to the arrangement shown in Fig. 7 is in particular that a master card module 140 is provided with which the display device 125 is in a special way with respect to the client part 120 or those used therein other card modules 140 a- 140 e can identify and authenticate. For example, the master card module 140 can be inserted into a digital book used as a display device 125. The digital book is then set up by the master card module 140 in such a way that certain privileged operating processes can be carried out by the user via the data communication device 123 vis-à-vis the client part or the additional card modules 140 a- 140 e used therein, for example the Activation or blocking of the client part 120 for deliveries by the server part 110 or the execution of order processes with respect to the server part 110 . For this purpose, the data communication via the data communication device 123 is preferably secured against tapping and manipulation by suitable techniques, in particular cryptographic techniques.

FIG. 11 shows a sixth variant of an embodiment of the solution according to the invention shown in FIG. 1. As already shown in FIG. 1, a client part 120 set up to accommodate a card module 140 is provided, which is connected to a server 110 via a WAN 130 . The client part 120 is coupled via a data communication device 123 to a display device 125, which is only shown schematically. Also Fig. 10 therefore shows a Lö solution, wherein the set up to receive at least one card module 140 and client part 120 form one hand and the ver to the WAN 130 Thematic display device 125 on the other hand each represents a mechanically substantially made in one piece unit, wherein the data exchange takes place between the client part 120 and the display part 125 by the data communication device 123 . The special feature of the arrangement shown in Fig. 10 with respect to the embodiment shown in Fig. 7 arrangement is particular in that the client part 120 a- as well as in the example shown in Fig. 10 case, for receiving a plurality of card modules 140 140 e is established, the can initiate and control communication processes with the server part 110 independently of one another by means of the card module data stored on them (not shown) and the communication processes initiated by the server part 110 can be addressed independently of one another from the point of view of the server part 110. For example, at least one of the card modules 140 a-140 e as part of in Fig. Affect system shown in Figure 4, ie, a card module or a plurality of card modules serve as storage for regularly, but asynchronously with respect to control actions of the user digital by the server portion 110 via the WAN 130 digital multimedia products supplied.

In the variant shown in FIG. 11, it proves to be particularly advantageous to implement the client part 120 as a stationary card module station that is essentially permanently connected to the WAN 130 and can therefore always initiate data communication processes with respect to the server 110 and beyond the server part 110 can receive data communication processes initiated asynchronously to the user's actions, even if the display device 125 is designed as a mobile device that the user carries with him even when he is absent from the location.

Both with regard to the variant shown in FIG. 10 and with regard to the variant shown in FIG. 11, it can prove to be advantageous to design the display device 125 to accommodate at least one card module 140 , so that the module shown in FIG shown usage mode can be used.

While in the variants shown in FIGS. 6 to 11 the client part 120 is set up to accommodate at least one card module 140, FIGS . 12 and 13 each show a variant in which a client part 120 without its own card module is used. Fig. 13 shows a client part 120, which is the direction for receiving a complete set Anzeigeein 125, wherein the display device 125 is set up again by for receiving at least one card module 140. Data communication between server part 110 and card module 140 takes place in such a way that the exchanged data are passed through display device 125 by means of suitable electronic precautions. Of course, it is not absolutely necessary for the client part 120 to be set up to accommodate a complete display device 125. The data exchange between client part 120 on the one hand and display device 125 prepared for receiving at least one card module 140 on the other hand can also be implemented, for example, as shown in FIG. 13 by means of a data communication device 123. As technical implementations for the data communication device, wireless and wired devices methods come into consideration, in particular by data transmission cable (not shown), by radio (not shown) or by infrared, eg. B. IRDA (not shown).

FIGS. 14 and 15 show further variants of an embodiment of the solution according to the invention shown in FIG. 1. As already shown in FIG. 1, a client part 120 , which is set up to accommodate a card module 140 and is connected to a server part 110 via a WAN 130 , is also provided in FIG. 14. A display device 125 is also connected to the WAN 130 a. The WAN 130 can be identical to the WAN 130 a. An interaction with the server part 110 triggered via the display device 125 and transmitted via the WAN 130 a leads to the transmission of multimedia data from the server 110 via the WAN 130 to the client part 120 . As a result, the user (not shown) can, for example, call up data from the server part 110 while out and about, which data is transmitted via the WAn 130 to the client part 120 , which is set up, for example, at home.

Fig. 15 shows a variant in which the client part is provided with a display 125,120. The data (not shown) retrieved from the server part 110 are transmitted via the WAN 130 to a secondary client part 120 a.

Each of the application modes of the invention shown in FIGS. 3 to 5 can in principle be implemented with any of the variants shown in FIGS. 6 to 15.

Fig. 16 shows schematically a first embodiment of the solution according to the invention. A digital book 510 is provided with a recording device (not shown) for a card module 140 . A digi tal book of the type shown is disclosed, for example, in WO-A1-99 / 15982; Express reference is made to the disclosure content of this document. By inserting the card module 140 , the digital book 510 is controlled by data stored on the card module 140.

In the case shown in FIG. 16, after the card module 140 has been inserted into the digital book 510, a catalog of various options, stored for example in the card module 140 or supplied by the server part 530 on the basis of link information stored in the card module 140, can be displayed, print media or to have digital multimedia products regularly sent by a service provider 520 . The user (not shown) then has the option of selecting an alternative, for example by actuating the touch screen of the digital book 510 , and expressing his will to receive regular deliveries in a predetermined manner in the future. The user specifies all the necessary data with regard to the intended business such as type, scope, delivery route and payment method.

The data describing the intended business are then transmitted via the WAN 130 to a server 530 of the service provider 520 . For this purpose, the digital book 510 can, for example, be provided with an internal modem (not shown) which is connected via a connecting cable 540 to the public telephone network functioning as WAN 130 , the data being carried directly to the server 530 via telephone lines. Alternatively, it can be advantageous to create a connection to the Internet via the connecting cable 540 , for example via an intermediate access provider (not shown), the server 530 then also having to have a connection to the Internet. Other data communication paths are also suitable; for example, the digital book 510 can be coupled to a mobile phone instead of the landline telephone network via the connecting cable 540 or via an IRDA connection.

After the data describing the intended business have been transmitted via the WAN 130 to the server 530 of the service provider 520 , a response with confirmation data from the server 530 can be provided in the same or a different way. Depending on the technical and legal conditions, this data exchange can be repeated until the data exchange that has been carried out represents a completed business transaction.

After completing this deal phase, the digital book 510 and server 530 can be disconnected.

It goes without saying that the business transaction phase described above can be used to arrange the regular delivery of physical print products, sound and video carriers 550 by a supplier 560 , who does not have to be the service provider, to a postal delivery address.

Since the content of print media, sound and video carriers can always be digitize, and therefore it is considered beneficial to counter status of the transaction, for example in the form of software, Texts or multimedia works, etc. representing files per Da to deliver data transmission.

Since these are usually copyrighted works that are transferred in the form of digital and thus losslessly copiable data, it can be advantageous to encrypt the data processing programs, texts or multimedia works, etc. corresponding to the data to be transferred, so that an unlawful copying process as such initially cannot create a usable unlawful duplication piece in order to make the decryption key necessary for decryption available to the user in a way that ensures that the user is prevented by technical and / or legal frameworks from unwanted To make copies and, if necessary, to distribute them. The decryption process, which is only granted to the legitimate user, is carried out after the multimedia data 580 representing the work to be delivered has been transmitted via a WAN 130 a (which can be identical to the WAN 130 used to order, but does not have to be).

A technical aspect of the agreed regular delivery ("subscription") of data processing programs, texts or multimedia data is that the initiative for the transmission of a specific file currently intended for distribution should not necessarily come from the user in every case ("pull" ), but at least optionally also from the server 530 ("push").

In the case of a "pull" solution, the user feels compelled to contact the server 530 frequently on his own initiative in order to check whether new multimedia data are available for retrieval within the scope of the subscription, and experience has shown that this leads to a large number vain queries, which on the one hand are extremely annoying for the user and on the other hand cause telecommunication costs. This could be avoided if the release times of the owed multimedia data to be delivered regularly were predetermined extremely precisely in advance. However, this would considerably limit the flexibility on the part of the service provider 520 and, moreover, would hardly be practicable, since in practice unavoidable operational disruptions on the part of the service provider 520 can give rise to delays, which in turn would result in a large number of unsuccessful query attempts. An effective improvement would be possible if the technical system structure for the delivery of the multimedia data owed were suitable for a completely asynchronous delivery of the data, ie the user does not know the exact delivery time and does not have to know it.

It should be noted that these are also known as the "push" concept "Channels" for data delivery over the Internet a "pull" com component, since the compilation of the content is not from the User, but the latter is still done by switching on the PC and starting suitable channel client programs (e.g. ge suitable browser) itself must actively ensure that the multimedia Data to be delivered.

In the solution according to the invention, a complete "push" delivery of the multimedia data owed for delivery is possible. For this purpose, it is provided that the user always keeps a data processing system or part of a data processing system connected to a suitable WAN 130 , for example the telephone network, in order to be able to receive and save deliveries of multimedia data initiated by the server 530 at any time. The multimedia data stored in this way can then be consumed by means of the digital book 510 , for example.

In addition to the "push" mode explained, other variants are possible. For example, it can also be useful in applications to provide opportunities for the user to influence the retrieval himself. On the one hand, the user can then establish a connection to the server 530 via the WAN 130 , actuate a suitable operating element (not shown) and thereby cause the server 530 to deliver the desired file via the existing communication channel established by the client part 120 ("On-Demand Delivery"). A variant of the "on-demand delivery" consists in that the user first establishes a connection to the server 530 as usual, transmits a data element indicating a delivery request by actuating an operating element and then breaks off the connection to the server 530. The desired file is then transmitted at a later point in time through a communication channel set up by the server 530. Finally, a “broadcast” variant is also possible, in which the server attempts to transmit a file to a large number of client parts 120. This can be easily implemented in particular with radio-based systems. It is then up to each individual client part 120 , depending on the effective default settings, in particular depending on the data stored in the card module 140 , to actually save a file transmitted to all or to ignore it.

From the user's point of view, a desired file can be delivered by push method or in broadcast mode, for example by inserting a correspondingly preset card module 140 into the client part 140 . The server 530 then waits until the transmission by individual addressing, ie push, or to all, ie Bro adcast, has been completed. In the case of On_Demand-Abru fen with or without a callback by the server 530 , it is necessary for the user to first inform the server 530 of his delivery request via the client part 120 and then immediately or at a later point in time to expect the transfer of the desired file. With this alternative, the call can also be linked to the input of a PIN or the like to secure the authorization.

In the exemplary embodiment shown in FIG. 16, the following alternatives are presented with regard to the delivery of the file 580 representing a data processing program, a text or a multimedia work:

• a) The multimedia data supplied by the server 530 can be fed to a lettering 610 .
• b) The multimedia data supplied by the server 530 can be fed to a card station 620 and stored in individual card modules 140 inserted therein.
• c) by the server 530 delivered multimedia data can be fed to a card station 620 and a station 620 in the card itself fixedly built-in memory (not shown) abge stores.
• d) The multimedia data supplied by the server 530 can be fed to the digital book 510 and stored in individual card modules 140 inserted therein.
• e) The multimedia data supplied by the server 530 can be fed to the digital book 510 and stored in a permanently installed memory (not shown).
• f) The multimedia data supplied by the server 530 can be fed to a wearable computer 630 and stored in individual card modules 140 inserted therein.
• g) The multimedia data supplied by the server 530 can be fed to a wearable computer 630 and stored in a permanently installed memory (not shown).

In addition to the alternatives shown, other variants are also possible, for example transferring the file 580 to a conventional PC, to a notebook or to a palmtop (none of which is shown).

FIG. 17 schematically shows details of a variant of the first embodiment of the solution according to the invention from FIG. 16 with the card station 620 . After the multimedia data owed for delivery by the service provider 520 (not shown) has been transmitted from the server 530 via the WAN 130 to the card station 620 , it is necessary to provide technical means to provide the multimedia works corresponding to this data for the user (not shown) to make consumable. Several corresponding variants are shown in Fig. 17 as an example:

• a) The multimedia data transmitted by the server 530 via the WAN 130 are stored in a predetermined card module 140 a plugged into the card station 620. After the transfer process has ended, the user removes the card module 140 a at any time from the card station 620 and inserts it into the digital book 510 a, where the multimedia data from the card module can be displayed or played.
• b) The data transmitted by the server 530 via the WAN 130 multimedia data that shall be not shown in the card station 620, a built memory () or in a in the card station 620 inserted predetermined card module 140 a vomit chert. After the transfer process is finished, the multimedia data stored be at any point on the initiative of the user via a wireless Datenkommunika tion compound (Radio, IRDA o. The like.) 540 c to the digital book 510 b transmitted and stored, where the multimedia data from the Map module can be displayed or played.
• c) The data transmitted by the server 530 via the WAN 130 multimedia data that shall be not shown in the card station 620, a built memory () or in a in the card station 620 inserted predetermined card module 140 a vomit chert. After the transfer process is finished, the stored multimedia data is transferred and stored at any time on the initiative of the user via a wired data communication connection (LAN) 540 b to the digital book 510 b, where the multimedia data from the card module is displayed or played can.
• d) The information transmitted by the server 530 via the WAN 130 multimedia data that shall be not shown in the card station 620, a built memory () or in a in the card station 620 inserted predetermined card module 140 a vomit chert. After the transfer process has ended, the stored multimedia data are transferred at any time on the initiative of the user via a WAN 130 a, which can be identical or different to the WAN 130 , to the digital book 510 b and stored, where the multimedia data can be displayed or played from the map module. The purpose of this arrangement is to enable the user to use the data stored in the card station at any time, even when traveling.

FIG. 18 schematically shows details of a further variant of the first embodiment of the solution according to the invention from FIG. 16 with the lettering 610 . In order to greatly reduce the technical complexity for a card station 620 , it is possible to provide a lettering 610 instead of the card station 620 . The digital book 510 is inserted into the lettering 610. The lettering 610 is coupled to the digital book 510 via a data communication device (not shown), with the card module 140 inserted in the digital book 510 being able to be accessed with regard to the data signals from the lettering 610 through the digital book 510. To control the data traffic, at least either the lettering 610 or the digital book has a control device (not shown); in a preferred variant, both each contain a control device. The booking station 610 also has a connection to the WAN 130 . In a particularly preferred embodiment variant, the digital book 510 in the inserted state is additionally supplied with power by the book station.

When the predetermined map module 140 is inserted into the digital book 510 and, moreover, the digital book 510 together with the map module 140 is set in the lettering 610 , the server 530 can open via the WAN 130 , via the lettering 610 and via the digital book 510 access the card module 140 and store multimedia data (not shown) therein.

The variant shown in FIG. 18 can be used particularly if the additional effort for a map station 620 is to be avoided and if the digital book 510 is not required by the user for other purposes during sufficiently dimensioned periods of time, so that it placed in the lettering 610 and connected to the WAN 130 via this. For example, there could be an agreement with the service provider 520 to carry out data transmission processes initiated by the server 530 only at night, so that the user can use the digital book 510 for other purposes during the day and regularly at night in the book station for receipt by the server 530 transferred multimedia data. The card module 140 legitimizes the service provider by means of predetermined data elements stored therein. If neutral card modules 140 are given to the user without related predetermined data elements, provision can be made for the data elements to be set subsequently by the user using an electronic book or notebook, etc., for example by specifying individual service providers with whom business relationships should be possible.

FIG. 19 schematically shows details of a further variant of the first embodiment of the solution according to the invention from FIG. 16 with the wearable computer 630 . Although mobile computers such as notebooks or palmtops are easily transportable and many of the restrictions associated with the operation of stationary computers have been lifted, there is a need for computers that are even easier to use on the go. The term "wearable" computer is understood to mean devices that can be integrated into clothing or attached to it, for example, so that no installation surface on a table or the like is required. Conventional concepts for data input or output based on keyboard and conventional display technology are generally not applicable to this category of devices.

Fig. 19 shows an example of a wearable computer 630, which can be as example worn on a clothing belt. The wearable computer 630 does not have its own display, which would be suitable for displaying a larger coherent area of a document; rather, a cable 635 is provided via which an external display (not shown) can be connected. To facilitate operation, the wearable computer 630 can be provided with (a few) control elements 640 and a small auxiliary display 645 . In particular, the wearable computer 630 can be set up to accommodate a card module 140.

After the multimedia data owed for delivery by the service provider 520 (not shown) has been transmitted from the server 530 via the WAN 130 to the wearable computer 630 , it is necessary to provide technical means to provide the multimedia works corresponding to this data for the user (not shown) to make consumable:

• a) The multimedia data transmitted by the server 530 via the WAN 130 are stored in a predetermined card module 140 a plugged into the wearable computer 630. After the transfer process has ended, the user removes the card module 140 a at any point in time from the wearable computer 630 and inserts it into the digital book (not shown), where the multimedia data from the card module can be displayed or played.
• b) The multimedia data transmitted by the server 530 via the WAN 130 are stored in a memory built into the wearable computer 630 (not shown) or in a card module 140 plugged into the wearable computer 630 . After the transfer process has ended, the stored multimedia data are transferred at any time on the initiative of the user via a wired data communication device 635 or a wireless data communication device (radio, IRDA or the like) 639 to the digital book 510 a or 510 b transferred and stored where the multimedia data from the map module can be displayed or played.
• c) The multimedia data transmitted by the server 530 via the WAN 130 are stored in a memory (not shown) built into the wearable computer 630 or in a card module 140 plugged into the wearable computer 630 . After the transfer process is finished, the multimedia data stored be at any point on the initiative of the user via a WAN 130 a, coupled to the WAN 130 iden table or may be but different, transmitted to the digital book 510 a and stored, where multimedia data from the card module 140 can be displayed or played. The purpose of this arrangement is to enable the user to use the data stored in the wearable computer 630 at any time, even when traveling.

Fig. 20 shows schematically a second embodiment of the solution according to the invention. In this case, an action terminal 810 set up in public space within a building or outside is provided, which typically has a display device 820 designed as a touch-sensitive display at eye level.

The action terminal 810 can be designed in such a way that a catalog of multimedia works that can be purchased immediately is displayed on the display device 820. If the action terminal is provided with a Kartenmo module magazine (not shown), after entering the purchase request, for example via the touch-sensitive screen and after payment, for example by chip card (not shown), a card module 140 can be removed from the card magazine, with which the desired multimedia work provided and output via an output slot 830 .

Another variant of this embodiment provides for the card module 140 to be provided with a certain suitable cryptographic key instead of a file representing a data processing program, text or multimedia work, with which the file otherwise transmitted in encrypted form can be decrypted again. This procedure has the advantage that card modules 140 with relatively little storage capacity, for example conventional chip cards, can be used.

As far as the available memory space of the card module 140 permits, several cryptographic keys can also be stored in the memory of the card module 140.

On the other hand, a card module reading station 830 can also be provided, into which a card module 140 already in the user's possession is inserted. After copying the file representing the desired data processing program, text or multimedia work, or even just a specific suitable cryptographic key with which the otherwise encrypted file can be decrypted again, the card module 830 is removed again.

The multimedia drive can then by inserting the card module 140 are consumed by the user in the digital book 510 a.

The ordering and delivery procedure may be carried out also by means of a 510 b connected via a cable 840 with the terminal 810. Action digital book.

The action terminal 810 can have a local mass storage device, for example a hard disk (not shown), on which the multimedia works offered for sale are held in the form of digital data. When connecting the action terminal 810 <27791 00070 552 001000280000000200012000285912768000040 0002019923370 00004 27672 / BOL <with a telecommunications network, other forms of delivery can be implemented. The order data can in particular be transmitted via the WAN 130a to the server 530 of the service provider 520, from where the transmission of the files representing the multimedia works is controlled. The decryption process, which is only granted to the legitimate user, is carried out after the multimedia data 580 representing the work to be delivered has been transmitted via a WAN 130a (which may or may not be identical to the WAN 130 used for the order). If the action terminal 810 has a local mass storage device (not shown) and a WAN termination 130c, the delivery process for the file 580 can also take place directly from the action terminal. A WAN 130b can also be used to transfer files from the server 530 to the Action Terminal 810 can be made possible. The WAN 130a, WAN 130b, and WAN 130c can be the same or different. In the exemplary embodiment shown in FIG. 20, the following alternatives are shown with regard to the "push" delivery of the file 580: a) The multimedia data supplied by the server 530 can be fed to a spelling 610. B) The multimedia data supplied by the server 530 can be fed to a card station 620 and stored in individual card modules 140 inserted therein. c) The multimedia data supplied by the server 530 can be fed to a card station 620 and stored in a memory (not shown) built into the card station 620 itself. d) The multimedia data supplied by the server 530 can be transferred to a wearable computer 630 are fed in and stored in individual card modules 140 inserted therein. E) The multimedia data supplied by the server 530 can be fed to a wearable computer 630 and stored in a permanently installed memory (not shown). Other variants, for example with a conventional PC, a notebook or a palmtop, are possible. 21 shows a further variant of the solution according to the invention. In detail, FIGS. 21a to 21f show an arrangement according to the invention in different phases in the processing of selected electronic mail, also called "e-mail", as an example. It goes without saying that the process shown can also be used accordingly when calling up computer programs, texts or multimedia works from a service provider. 21a shows a client part 120 and a card module 140 in the form of a chip card. The client part 120 is provided with an inserted adapter part 121 which has a line 122 which is connected to a WAN 130, for example the telephone network. 21b shows the arrangement from FIG. 21a after the card module 140 has been inserted into the client part 120. The client part 120 is automatically switched on and activated by the insertion process, provided that the adapter part 121 is inserted, which is indicated by a first display element 123a, for example a light-emitting diode , is displayed, that is, the arrangement is ready to establish a connection via line 122. 21c shows the arrangement from FIG. 21b during the downloading of e-mail messages (not shown) stored on the server part 110 via the WAN 130 and the client part 140 to the card module 140 ) of the card module 140 stored data (not shown) the dial-in process to an e-mail server part 110 of an e-mail service provider via the WAN 130. The dial-in process is preferably only started when the user (not shown) through this process Actuation of a control element 124 provided for this purpose, for example an actuation button, releases. The time span of the download is indicated, for example, by a blinking signal of a second display element 123b, for example a light-emitting diode. For this purpose, the card module 140 is provided with a sufficiently large data memory (not shown), which can be designed as a flash memory, for example. FIG. 21d shows the arrangement from FIG. 21c during the uploading of e-mail messages previously stored in the card module 140. The temporal extension of the process of uploading e-mail messages is indicated, for example, by a flashing signal on the first display element 123a. 21e shows the arrangement from FIG. 21d after the data connection via the WAN 130 to the server part 110 has been cleared Adapter part 121 are still inserted. 21f shows the arrangement from FIG. 21e after the adapter part 121 has been pulled out of the client part 120. The client part 120 is now switched off and the first display element 123a goes out, ie the client part 120 can also be conveniently transported with the card module 140 inserted in the switched-off state if the adapter part 121 is pulled out, because the adapter part 121 switches the power supply of the client part 120 on or off via a suitable switch device (not shown). A modified variant of the solution according to the invention can be obtained by uploading e-mail messages via SMTP to the server 110 in the phase shown in FIG. 21c and e-mail messages via POP3 from the server 110 in the phase shown in FIG. 21d downloaded, ie the order shown is reversed. FIG. 22 shows a further variant of the solution according to the invention, which basically corresponds to the variant shown in FIG. In detail, FIGS. 22a to 22f show an arrangement according to the invention, by way of example, in different phases in the processing of electronic mail. In contrast to FIG. 21, the client part 120 in the variant shown in FIG. 22 is provided with a numeric keypad 124a and with a text display 123c. As shown in FIG. 22b, this makes it possible in particular to make the establishment of a data connection from the client part 120 to the server part 110 dependent on the unlocking of the user and access data stored in the card module 140 by entering a PIN. This can significantly reduce the risk of misuse and unauthorized downloading or uploading of e-mail messages. The display device 123c can display short texts which inform the user about the processes currently in progress. The engineering of the uploading and downloading of e-mail messages can be based on proven technical standards such as SMTP for uploading (delivering) electronic messages and POP3 for downloading (delivering) electronic messages. A modified variant of the solution according to the invention can be obtained by uploading e-mail messages via SMTP to the server 110 in the phase shown in FIG. 22c and e-mail messages via POP3 from the server 110 in the phase shown in FIG. 22d downloaded, ie the order shown is reversed. Messages which are to be transmitted to or downloaded from the server part 110 in the manner shown in FIGS. 21 and 22 must first be written to the data memory of the card module 140 before the upload or from the data memory of the card module after the download 140 can be read out. 23 shows two variants for reading out e-mail messages downloaded from the server part 110. For this purpose, the client part 140 provided with the card module 140 can be designed such that it can be inserted as a whole into a correspondingly configured display device 125a, with both the client part 120 and the display device 125a exchanging data via a suitable data communication device (not shown) can. Another variant provides that the user (not shown) removes the card module 140 from the client part 120 and inserts it into a display device 125b. Both the display device 125a and the display device 125b have suitable software for reading out and displaying the e-mail messages stored in the card module 140. The display device 125b can in particular be a notebook (not shown) provided with a card module receiving device or a digital book (not shown) that is provided with a display program for e-mail messages. 24 schematically shows devices for the encryption and decryption of files representing copyrighted (multimedia) works, including the card module 140. Files (not shown) representing multimedia works are stored on the server parts 110a and 110b. A card module 140 can be provided with a manipulation-proof physical random number generator (not shown) in order to generate a random number on the basis of which a key pair with a public and a private key is calculated in the card module. The calculated keys are stored in the memory device (not shown) of the card module 140. However, it is also possible to store externally generated keys in the card module 140. If the available memory space permits, several key pairs can be stored in the memory of the card module 140. Alternatively, it can also be provided that the key pairs are generated in a secure environment outside of the card module 140 before they are output to the end user and then loaded into the memory of the card module. When a file is called up from one of the server parts 110a and 110b, a public key 710, 711, 712 assigned to this file can first be read out from the card module 140 and transmitted to the server part 110a, 110b. The relevant file is encrypted on the respective server part 110a, 110b using the specific public key 710, 711 or 712 assigned to the file. The cipher can now be distributed over a WAN without hesitation; Any copies that may have been made by third parties without authorization are unusable without possession of the associated private key. Since this assigned private key is stored in the memory of the card module 140, the possession of the card module 140 with the keys stored therein ultimately provides the decryption and thus usage authorization for the downloaded from the server part 110a or 110b and a text or a text A file representing a multimedia work (not shown). The decryption of the encrypted file 720 with the associated private key can be carried out directly with the processor provided in the card module 140. This has the great advantage that for this purpose the corresponding private key does not have to be made available outside of the card module 140, so that there are no security risks with regard to unauthorized copying of the private key. However, it is disadvantageous that when a chip card with an 8-bit chip card processor is used as the card module 140, the processing capacity is low and the decryption process can take a long time. It can therefore be expedient to make the card module 140 in two parts, with a chip card only being used to store the key pairs, where the decryption process is carried out by a more powerful cryptography processor 750 provided in a cryptography processor component 740. For example, it is possible to provide a standardized plug-in card for PCMCIA slots with a powerful crypto processor for encrypting and decrypting mass data, this PCMCIA plug-in card being designed in such a way that the chip card carrying the cryptographic key can be plugged into it. With such a solution, however, it is advantageous to take suitable technical precautions to ensure that the private key transmitted by the chip card into the cryptography process component 740 cannot be heard without authorization. This can be done, for example, in that the cryptography processor component 740 contains a key pair in a memory specially protected against unauthorized reading, the public key of which is transmitted to the chip card immediately after the chip card is inserted. The chip card can then use the public key of the cryptography processor component 740 to encrypt the private key provided for decrypting a file. The cryptography processor component 740 then decrypts the cipher of the private key provided for decrypting a file and thus recovers this private key. To ensure the authenticity of card modules in general and the corresponding chip cards and the cryptography processor component 740, provision can be made for the manufacturer to introduce unchangeable digital authenticity features into the corresponding memory devices, which are established by cryptographic digital signatures and corresponding key certificates, each of the relationship between an authorized manufacturer or issuer and a public signing key are authenticated. The archive 760 for storing encrypted files 720 representing programs, textual or multimedia works can be designed as a separate archive storage unit 770 and preferably comprise a non-volatile memory (buffered RAM, EEPROM, flash memory, hard disk memory, etc.). In specific concrete embodiments, the functionalities of storing cryptographic keys (see 140), cryptographic encryption and decryption (see 740, 750) and storing encrypted files (see 770) can each be assigned to individual separate devices or combined functional units be. The reference number 780a denotes a combined functional unit which comprises the key generation, secure key storage and key management together with the mass data encryption and decryption. Reference numeral 780b denotes another combined functional unit which includes the bulk data encryption and decryption together with the storage of the encrypted files 720-725. The reference symbol 780c denotes a further combined functional unit, which comprises the key generation, secure key storage and key management together with the mass data encryption and decryption and the storage of the encrypted files 720 to 725. Various configurations of cryptographic devices from FIG. 24 can be seen in FIGS. 25a to 25f. 25a shows a card module 140 which is provided with a cryptography processor 750. The data to be decrypted are stored in storage devices 755a, 755b, 755c outside the card module 140, whereas the cryptographic keys 757 are stored in the memory of the chip card 140. 25b shows a variant in which the chip card 140 can be inserted into a hardware expansion module 759. The hardware expansion module 759 can, for example, be in the form of a PCMCIA card in which the cryptography processor 750 and a memory 755 for data to be decrypted are installed; however, the data to be decrypted can also be fed from a memory 755a from the outside. The cryptographic keys 757 are stored on the chip card 140. The variant shown in FIG. 25c differs from the arrangement shown in FIG. 25b in that the memory 755 for the data to be encrypted is arranged on the chip card 140, for example as a flash memory. The variant shown in FIG. 25d differs from the arrangement shown in FIG. 25c in that the memory 755 for the data to be encrypted can be inserted into a card module 140 as a flash memory, for example. The variant shown in FIG. 25e differs from the arrangement shown in FIG. 25a in that the memory 755 is provided on the card module 140 for the data to be encrypted, for example as a flash memory. The variant shown in FIG. 25f differs from the arrangement shown in FIG. 25d in that the key memory 757 is provided on the hardware expansion module 759. The keys can also be fed directly to the cryptography processor 750 via suitable data connection paths 758. The cryptography processor 750 can also be used for encryption. The memories 755 then contain data to be encrypted. 26 shows schematically and by way of example a sequence of the transmission and decryption of an encrypted file representing a work. The solution according to the invention sketched by way of example in FIG. 1 can be used for the usage-based billing of the use of services provided by third parties. 27 schematically shows a flowchart of a first method for accounting for the purchase of software, texts or files representing multimedia works from a server part 110. With reference to FIG The file 720 representing multimedia works is made available in encrypted form, which is useless for the user without prior decryption. As shown in FIG. 27, in the first method, in step 1100, the file 720 is downloaded from the server part 110. It is assumed that the file contains, on the one hand, the encrypted work and, on the other hand, an unencrypted identifier that uniquely identifies the work. This identifier, for example in the form of a data element representing a rights number, is extracted from the file in step 1110. After the card module 140 has been plugged into the client part, in step 1120 a table stored in the memory (not shown) of the card module 140 with individual identifiers for which the relevant card module 140 embodies a right of use is read. In step 1130 it is then checked whether the identifier determined in step 1110 is contained in the table with individual identifiers stored in the memory (not shown) of the card module 140. If the check is positive, the associated private key is loaded in step 1140 and the file 720 is deciphered in step 1150. In step 1160, the deciphered plain text of the file 720 can then be displayed or otherwise used. If the rights check in step 1130 fails, an error message is issued in step 1170. In this case, the end user has no right to use the work corresponding to the file 720. 28 shows schematically a flowchart of a second method for accounting for the purchase of software, texts or files representing multimedia works from a server part 110. With reference to FIG The file 720 representing multimedia works is made available in encrypted form, which is useless for the user without prior decryption. As shown in FIG. 27, in the first method, in step 1100, the file 720 is downloaded from the server part 110. It is assumed that the file contains, on the one hand, the encrypted work and, on the other hand, an unencrypted identifier that uniquely identifi ed the work. This identifier, for example in the form of a data element representing a rights number, is extracted from the file in step 1110. After the card module 140 has been plugged into the client part, in step 1120 a table stored in the memory (not shown) of the card module 140 with individual identifiers for which the relevant card module 140 embodies a right of use is read. In step 1130 it is then checked whether the identifier determined in step 1110 is contained in the table with individual identifiers stored in the memory (not shown) of the card module 140. If the rights check in step 1130 fails, an error message is issued in step 1170. In this case, the end user has no right to use the work corresponding to the file 720. In step 1210, from the table stored in the memory (not shown) of the card module 140 with individual identifiers for which the relevant card module 140 embodies a right of use, a credit value specific to the global or the respective identifier is determined. If the credit equals zero, an error message is output in step 1225. If the credit balance is greater than zero, the associated private key is loaded in step 1230 and the file 720 is deciphered. The deciphered plain text of the file 720 can now be displayed or otherwise used. In step 1240, use is enabled for a predetermined period of time. Since then, in step 1250, the credit is reduced by one unit. If the user has stopped using it in the meantime, this is determined in step 1260 and the decrypted file is deleted or otherwise made unavailable in step 1270. The file 720 is retained in encrypted form. If the user wishes to continue using, a check is made in step 1280 as to whether there is a credit greater than zero and, in the positive case, a continuation with step 1240. FIG. 29 shows a perspective view of a hardware expansion module 759 from FIG with a chip card 140 as a card module. An operating element 759a, for example a button, can be provided on the hardware expansion module 759. 30 shows a schematic flow diagram of an exemplary subscription order process. 31 shows a schematic flow diagram of a first variant of a subscription processing by means of the solution according to the invention. 32 shows a schematic flow diagram of a second variant of a subscription processing by means of the solution according to the invention. 33 shows a schematic flow diagram of a third variant of a subscription processing by means of the solution according to the invention. Fig. 34 shows in the part-Fig. 34a to 34h schematically processes in connection with the billing of files supplied in the context of the solution according to the invention. 34a to 34c show a variant in which the use of the work is billed according to the time of use. 34c shows the view of the display part 125 with a display of the card number and the remaining credit units in an upper display line 125a and a display of the time, the author number and the usage time and usage fees accrued so far for this work. The amount of the usage fees can be plant-dependent for both the time-dependent and the volume-dependent billing method.

Claims (90)

1. Data processing device with

• a) a client part ( 120 ),
• b) at least one telecommunications coupler for exchanging data with an external data processing system ( 110 ), and
• c) a control device;
• d) wherein the client part ( 120 ) is provided with a function module coupling device for at least one mobile function module ( 140 ),
• e) wherein the function module coupling device enables data to be exchanged between the function module ( 140 ) and the client part ( 120),
• f) wherein said control means, in particular the data exchange with the external data processing system in depen dependence controlled by read via the function module coupling device from a function module (140) control data when a radio navigation module (coupled 140) via the function module coupling device.

2. Data processing device according to claim 1, characterized in that

• a) that the client part ( 120 ) has a non-volatile second data storage area,
• b) wherein the control device stores data transmitted by the external data processing system 110 as at least one file in the second data storage area.

3. Data processing device according to claim 1 or 2, characterized in that the functional module ( 140 ) has a non-volatile first data storage area. 4. Data processing device according to claim 2 and 3, characterized in that the at least one file stored in the second data storage area in the client part 110 can be transferred to the first data storage area in the functional module (140 ) under the control of the control device via the function module coupling device. 5. Data processing device according to claim 3, characterized in that the control device from the external data processing system 110 stores data transmitted in the function module (140 ) as at least one file in the first data storage area. 6. Data processing device according to claim 4 or 5, characterized in that the first data storage area contains at least one identification data element identifying the individual functional module (140). 7. Data processing device according to claim 6, characterized in that the first data storage area contains an authentication data element that uniquely identifies the function module (140). 8. Data processing device according to claim 7, characterized indicates that the authentication data element is a digital signature is. 9. Data processing device according to one of claims 3 to 8, characterized in that the first data storage area of the function module (140 ) contains at least one cryptographic key with which at least one encrypted file transmitted by the external data processing system 110 , which is a computer program, a text or a multimedia work that can be deciphered. 10. Data processing device according to one of claims 3 to 9, characterized by a short-range data coupling device. 11. Data processing device according to claim 10, characterized indicates that the at least one file is under control of the control information device via the short-range data coupling device can be transferred to a display component. 12. Data processing device according to one of claims 2 to 11, characterized in that

• a) a telecommunication address data element is stored in the second data storage area in the client part ( 120),
• b) wherein a telecommunication channel to the telecommunication coupler can be set up by the external data processing device (110 ) if the telecommunication address data element is used as addressing.

13. Data processing device according to one of claims 3 to 12, characterized in that

• a) a telecommunications address data element is stored in the function module ( 140 ) in the first data storage area,
• b) wherein a telecommunication channel to the telecommunication coupler can be set up by the external data processing device (110 ) if the telecommunication address data element is used as addressing.

14. Data processing device according to one of claims 12 or 12, characterized in that the telecommunications address data item is a phone number. 15. Data processing device according to one of claims 12 or 12, characterized in that the telecommunications address data element is an IP Internet Protocol address. 16. Data processing device according to one of claims 1 to 15, characterized in that the functional module coupling device can accommodate more than one functional module (140). 17. Data processing device according to claim 16, characterized in that the telecommunications address data element can be selected from the respective telecommunications address data elements stored in the functional modules (140). 18. Data processing device according to claim 16, characterized in that the telecommunications address data element from the respective telecommunications address data elements stored in the functional modules (140 ) can be selected manually by a control element. 19. Data processing device according to one of claims 1 to 18, characterized in that the functional module (140 ) is a chip card. 20. Data processing device according to one of claims 1 to 18, characterized in that the functional module ( 140 ) has a pen shape in wesentli Chen. 21. Data processing device according to claim 20, characterized in that the functional module ( 140 ) can be used in the handle of a digital book or in the hinge part of a two-part digita len book. 22. Data processing device according to one of claims 1 to 21, characterized in that the functional module couplings are direction includes an electrical connector device. 23. Data processing device according to claim 22, characterized in that the functional module ( 140 ) is plugged in directly by means of the electrical connector device. 24. Data processing device according to claim 22, characterized records that the connector device is a smart card Kon tact field includes. 25. Data processing device according to claim 22, characterized in that the functional module ( 140 ) is connected by means of the electrical connector device via a cable. 26. Data processing device according to one of claims 1 to 21, characterized in that the functional module couplings are direction includes an infrared data transmission device. 27. Data processing device according to claim 26, characterized indicates that the infrared data transmission device is an IRdA Interface includes. 28. Data processing device according to one of claims 1 to 21, characterized in that the functional module couplings are direction includes a radio transmission device. 29. Data processing device according to one of claims 1 to 28, characterized in that the client part is an essentially comprises bowl-shaped receptacle, in which at least one function module can be inserted loosely, whereby the function module Coupling device a wireless data transmission channel creates. 30. Data processing device according to one of claims 1 to 21, characterized in that

• a) the card module ( 140 ) can be inserted into a coupling piece designed essentially like a disk storage medium,
• b) the coupling piece being provided with an induction device electrically coupled to the card module (140 ) at a location corresponding to a write / read arm access area, and
• c) the card module ( 140 ) being able to exchange data with a read / write head via the induction device when the card module is inserted into the coupling piece and the coupling piece is inserted into a suitable floppy disk drive.

31. Data processing device according to one of claims 1 to 30, characterized in that the external data processing system ( 110 ) encrypts the transmitted data before transmission. 32. Data processing device according to claim 31, characterized in that the first data storage area in the function module ( 140 ) contains a key suitable for decrypting the encrypted data. 33. Data processing device according to claim 31 or 32, characterized in that the functional module (140 ) has a processor for decrypting the encrypted data. 34. Data processing device according to claim 33, characterized by

• a) a first assembly part with the first data storage area,
• b) a second assembly part with the processor for decryption of the encrypted data,
• c) wherein the first subassembly part can be inserted into the second subassembly and, in the inserted state, is electrically connected to the second subassembly and together form the functional module ( 140 ).

35. Data processing device according to claim 34, characterized shows that the first assembly part is a chip card. 36. Data processing device according to claim 34 or 35, characterized in that the first assembly part contains the second data storage area for storing the at least one file transmitted by the external data processing system (110). 37. Data processing device according to claim 34 or 35, characterized in that the second assembly part contains the second data storage area for storing the at least one file transferred from the external data processing system (110). 38. Data processing device according to one of claims 1 to 37, characterized in that the at least one functional module ( 140 ) is provided with a control device. 39. Data processing device according to one of claims 1 to 38, characterized in that data elements from the functional module (140 ) to the external data processing system ( 110 ) and from the external data processing system ( 110 ) to the functional module (140 ) can be transparently passed through the client part ( 120 ). 40. data processing device with

• a) a telecommunications coupler for exchanging data with an external data processing system ( 110 ),
• b) a short-range data coupling device,
• c) a control device,
• d) a non-volatile first data storage area and
• e) a non-volatile second data storage area,
• f) wherein the control device controls the data exchange with the external data processing system ( 110 ) as a function of control data stored in the first data storage area,
• g) wherein the control device stores data transmitted by the external data processing system ( 110 ) as at least one file in the second data storage area, and
• h) wherein the at least one file can be transmitted to a display component under the control of the control device via the close-range data coupling device.

41. Data processing device according to one of claims 10 to 40, characterized in that the short range data links are direction includes an electrical connector device. 42. Data processing device according to claim 41, characterized draws that the display component by means of the electrical Connector device is plugged in directly. 43. Data processing device according to claim 42, characterized draws that the display component by means of the electrical Connector device is connected via a cable. 44. Data processing device according to one of claims 10 to 40, characterized in that the short range data links are direction includes an infrared data transmission device. 45. Data processing device according to claim 44, characterized indicates that the infrared data transmission device is an IRdA Interface includes. 46. Data processing device according to one of claims 10 to 40, characterized in that the short range data links are direction includes a radio transmission device. 47. Data processing device according to one of claims 11 to 46, characterized in that the display component is a digita les book is. 48. Data processing device according to one of claims 11 to 46, characterized in that the display component is a note book computer is. 49. Data processing device according to one of claims 11 to 46, characterized in that the display component is a palm top computer is. 50. Data processing device according to one of claims 11 to 46, characterized in that the display component is a remote vision device is. 51. Data processing device according to one of claims 11 to 46, characterized in that the display component is a Mo biltelefon is. 52. Data processing device according to one of claims 11 to 46, characterized in that the display component is an Ak terminal is. 53. Data processing device according to one of claims 11 to 52, characterized in that the display component has a display device 125 for displaying texts and images. 54. Data processing device according to one of claims 11 to 46, characterized in that the display component has a display device 125 for displaying video sequences. 55. Data processing device according to one of claims 11 to 54, characterized in that the display component is a Having sound transducer device for reproducing sounds. 56. Data processing device according to one of claims 3 to 55, characterized in that

• a) that the first data storage area contains at least one load-free data element to which at least one specific file or category of files that can be transmitted by the external data processing system (110) is assigned in a predetermined first relation,
• b) the control device only allowing the transfer of data from the external data processing system that belong to a file or to a category of files which is assigned to the load-free element according to the predetermined first relation.

57. Data processing device according to one of claims 1 to 56, characterized in that

• a) that the control device transmits at least one retrieval data element to the external data processing device ( 110 ) to which at least one specific file or category of files which can be transmitted by the external data processing system (110) is assigned in a predetermined second relation,
• b) wherein the external data processing device ( 110 ) transmits the at least one file or category of files according to the second relation after the transmission of the retrieval data element.

58. Data processing device according to claim 57, characterized indicates that the retrieval data element as a function of the Betä operation of a control element is transmitted. 59. Data processing device according to claim 57, characterized in that the retrieval data element is transmitted into the function module coupling device as a function of Einkop peln a function module (140). 60. Data processing device according to claim 57 to 60, characterized characterized in that the retrieval data element in the first data storage area and prior to transferring from it is read out. 61. Data processing device according to one of claims 57 to 60, characterized in that

• a) before the retrieval data element is transmitted, a first data communication channel is established via the telecommunication coupler to the external data processing system ( 110 ),
• b) the external data processing device (110 ) after the transmission of the retrieval data element essentially immediately transmits the at least one file or category of files according to the second relation, and
• c) that the transmission of the retrieval data element and the transmission of the at least one file or category of files according to the second relation take place via the first data communication channel.

62. Data processing device according to one of claims 57 to 60, characterized in that

• a) before the retrieval data element is transmitted, a first data communication channel is set up via the telecommunications coupler to the external data processing system (110 ) via which the retrieval data element is transmitted,
• b) the first data communication channel is cleared after the transmission of the retrieval data element, and
• c) the external data processing device (110 ) after the transfer of the retrieval data element before the transfer of the at least one file or category of files according to the second relation sets up a second data communication channel to the telecommunication coupler via which the at least one file or category of files according to the second relation Files is being transferred.

63. Data processing device according to one of claims 1 to 62, characterized in that the external data processing device ( 110 ) sets up a data communication channel to the telecommunications coupler at predetermined times before the transmission of the at least one file or category of files according to the second relation the at least one file or category of files according to the second relation is transmitted. 64. Data processing device according to one of claims 1 to 62, characterized in that the external data processing device ( 110 ) transmits a plurality of files without a specified recipient address in broadcast mode. 65. Data processing device according to one of claims 1 to 64, characterized in that the telecommunications coupler is a Connection to a telephone network is. 66. Data processing device according to one of claims 1 to 64, characterized in that the telecommunications coupler is a Internet access connection is. 67. Data processing device according to one of claims 1 to 64, characterized in that the telecommunications coupler is a includes a cellular device. 68. Data processing device according to one of claims 1 to 64, characterized in that the telecommunications coupler is a includes a GSM cellular device. 69. Data processing device according to one of claims 1 to 64, characterized in that the telecommunications coupler is a includes a satellite radio facility. 70. Data processing device according to claim 69, characterized indicates that the satellite radio has a download channel for downloading at least one file. 71. Data processing device according to claim 69 or 70, characterized characterized in that the satellite radio device has a return channel for transmitting data to the satellite. 72. Data processing device according to one of the preceding claims Proverbs, characterized in that according to the external Da ten processing device effected complete transfer at least one file sends an acknowledgment data element to the external Data processing device is transmitted. 73. Data processing device according to claim 72, characterized indicates that the receipt data item has a digital signature contains. 74. Data processing device according to one of claims 40 to 73, characterized in that the data transmitted by the external data processing system ( 110 ) are encrypted. 75. Data processing device according to claim 74, characterized indicates that in the first data storage area a for decisions appropriate cryptographic key is stored. 76. Data processing device according to one of claims 1 to 75, characterized by a pager module through which a completed The transfer process of a file is displayed. 77. data processing device with

• a) a control device,
• b) a non-volatile first memory for storing at least one file,
• c) a function module coupling device for at least one function module, and
• d) a display device;
• e) wherein the functional module has a non-volatile second memory in which a data element representing a positive credit value is stored,
• f) wherein the control device displays data of the at least one file stored in the first memory by means of the display device and reduces the credit value stored in the second memory according to the amount of time during which the data are displayed until the credit value is less than or equal to zero .

78. data processing device with

• a) a control device,
• b) a non-volatile first memory for storing at least one file,
• c) a function module coupling device for at least one function module, and
• d) a display device;
• e) wherein the functional module has a non-volatile second memory in which a data element representing a positive credit value is stored,
• f) the control device displaying data of the at least one file stored in the first memory by means of the display device and reducing the credit value stored in the second memory according to the quantity of data displayed until the credit value is less than or equal to zero.

79. Data processing device according to one of claims 77 or 78, characterized in that the at least one file only is then shown when a functional module with a positive Credit value is present. 80. Data processing device according to claim 79, characterized indicates that the at least one file is encrypted. 81. Data processing device according to claim 80, characterized draws that decryption to the presence of a function module is bound to a positive credit value. 82. Data processing device according to one of claims 77 to 81, characterized in that

• a) that the second memory contains at least one access release data element to which at least one specific file or category of files that can be stored in the first memory is assigned in a predetermined third relation,
• b) the control device only allowing the display of data belonging to a file or a category of files which is assigned to the access release element in accordance with the predetermined third relation.

83. Data processing device according to claim 82, characterized indicates that the at least one access authorization data element is unchangeably stored in the second memory. 84. Data processing device according to claim 82, characterized indicates that the at least one access release data item of one coupled via a data communication device external data processing system into the second memory is storable. 85. Data processing device according to one of claims 77 to 84, characterized in that

• a) that the second memory contains at least one tariff data element to which at least one specific file or category of files that can be stored in the first memory is assigned in a predetermined fourth relation,
• b) wherein the control device when displaying the data of the at least one file or category of files stored in the first memory reduces the credit value stored in the second memory depending on the tariff data element assigned in each case according to the fourth relation.

86. Data processing device according to claim 85, characterized indicates that the at least one tariff data element cannot be changed is stored in the second memory. 87. Data processing device according to claim 85, characterized indicates that the at least one tariff data element from one over a data communication device coupled external data processing system can be stored in the second memory. 88. Data processing device according to claim 85, characterized indicates that the tariff data element is attached to the file for which it applies. 89. Data processing device according to claim 77 to 87, characterized characterized in that the data element representing the credit value ment from a data communication device pelten external data processing system into the second memory is storable. 90. Data processing device according to one of claims 1 to 76, characterized by a data processing device according to any one of claims 77 to 89.