EP2325805B1 - Authorisation checking method and system - Google Patents

Description

The invention relates to a method and a system for authorization control, wherein in particular a mobile telecommunication terminal is used to present an authorization.

Since the provision of conventional tickets or tickets is very expensive, alternatives are increasingly being sought that allow authorization control using electronic means.

Out DE 203 20 559 U1 a device for allocating and checking entitlements for use of train services is known, wherein a central entity forms at least one validity-related certificate valid in relation to a service entitlement acquired by a customer and an identification feature assigned to this customer, which can be checked using the identification feature. The valid validity certificates are assigned to the corresponding train journeys and, depending on date and train number, transmitted via digital data radio to integrated vehicle devices of the respective trains. Via an intra-train communication medium, the redistribution of validity certificates relevant to the respective travel section to decentralized control devices, which are designed to detect the identification feature of the traveler, so that the existence of a driving authorization is verified by checking the existing validity certificates can. A disadvantage of this device is required for the control of high technical complexity.

Out DE 10 2007 037576 A1 a method for verifying security elements is known in which in at least one translucent area of a security element, a first information is arranged and on a display, a second information is displayed, and wherein the verification is carried out in that the first information is placed on the second information , whereby a hidden information, for example, as a moire pattern is recognizable.

Due to the increasing use of mobile phones, a majority of the population in many countries today has a mobile phone which is at least configured to receive messages in the SMS (Short Messaging Service) and / or Multimedia Messaging Service (MMS) format. Accordingly, tickets can now be purchased in public transport with a mobile device and stored there. For this purpose, a center sends the passenger an SMS or MMS with the ticket. During a check, the passenger shows the checker his mobile phone with the SMS or MMS. As can be seen, for example, from an article dated 24.08.2006 (URL: http://www.stern.de/computer-technik/telefon/568448.html), the inspector needs to check an authorization transmitted as MMS to the mobile device of a traveler but also disadvantageously a special, equipped with a scanner reader.

There is currently no satisfactory solution, as the inspector can check the validity of a received as SMS or MMS and presented by a mobile phone ticket alone by a visual inspection without consuming equipment.

Object of the present invention is therefore to show a way how an authorization control can be carried out in a simple manner. In particular, it is an object of the invention to provide an authorization control method and system in which the who requests an authorization, only on a trained to receive news mobile telecommunication terminal and the controller of the authorization on any special technical aids must have.

This object is achieved by an authorization control method according to claim 1 and by a system according to claim 9. Advantageous embodiments and further developments are specified in the respective subclaims.

Accordingly, an authorization control method according to the invention provides for defining a first and a second rule and a predetermined number of different authorizations, the first rule for determining identification information having a predetermined number of possible values from personal and / or device-specific data determined by the first rule , and wherein by the second rule, each of the possible values of the identification information is assigned at least one of the specified permissions. Furthermore, the method provides for the generation of a control means for checking a presented authorization, wherein the control means is configured to check for each of the possible values of the identification information whether the presented authorization is associated with at least one of the respective values of the identification information according to the second rule Permissions matches. An authorization presented by specifying personal and / or device-specific data is checked by identifying identification information from the specified personal and / or device-specific data using the first rule and presenting it Authorization is checked using the control means generated in dependence of the determined identification information.

Preferably, an authorization is requested by a user of a mobile telecommunication terminal at a central facility specifying personal and / or device-specific data, such as a mobile phone number or a name. In response to the receipt of such a request, authorization is generated by the central device as a function of the specified personal and / or device-specific data and using the first and second rule and from the central device to the mobile telecommunication terminal, preferably by means of an SMS or MMS, transmitted. The transmitted authorization is stored in a memory of the mobile telecommunication terminal. The presentation of the authorization for control purposes is advantageously carried out by displaying the stored authorization on a display of the mobile telecommunication terminal.

The transmission of the authorization by means of SMS and / or MMS enables particularly advantageous the use of terminals such as mobile phones, which have only a basic functionality. In particular, no Internet or JAVAfähige terminals are required to execute the method. Rather, the respective terminal must be designed only for receiving and displaying messages in SMS and / or MMS format.

The central device can advantageously comprise a computer system in which a control program is stored is, which is designed for carrying out the method. The first and second rules are preferably stored in a memory of the central facility. Advantageously, the first and / or second rule can also be created automatically by the control program.

The request for authorization can be made for example by calling a service number by means of the mobile telecommunication terminal, wherein the call and the caller number of the caller are automatically registered by the central facility. For this purpose, the central device may advantageously have a corresponding communication interface. Furthermore, the central device may include, for example, a customer database in which customer and / or billing data of registered customers with assigned telephone numbers are stored. If the central facility registers a call with the service call number, it can check whether an authorization should be sent, depending on the caller's number and the information stored in the customer database. If this is the case, an authorization can be automatically created and sent to the caller's telephone number. For this purpose, the call at the service number does not have to lead to an actual connection, but can be aborted, for example, after registering the connection request. Alternatively, the user of the mobile telecommunication terminal may also send a request to the central facility via the Internet. For this purpose, the central device is advantageously connected to the Internet. A request via the Internet can advantageously also independently of the terminal, which is to receive the authorization, for example by means of a separate computer. This has the advantage that even simple mobile telecommunication terminals, which are not Internet-enabled, can be used.

By the first rule, for example, a function is defined which provides a numerical value as identification information. The number of possible values of the identification information is then defined by the number of elements of the target quantity of the function. Such a function may, for example, be defined such that a predefined position is selected from a multi-digit telephone number and the corresponding single-digit numerical value represents the function value of the function. In this example, the target set of the function includes the natural numbers from 0 to 9. The target set of the function defined by the first rule may include other values such as letters instead of numerical values, for example, the function as a function value is a letter at a given location of the Surname of an authorized person supplies.

The second rule assigns each of the possible values of the identification information, that is, for example, the numbers 0 to 9, preferably at least one image, which represents the authorization. It can be advantageously provided for each permission a different image. Alternatively, the same picture may also be provided for several or all authorizations, the authorizations differing by the respective orientation of the picture.

Advantageously, different types of permissions may be provided, such as permissions with different validity period or different scope. Examples of authorizations of different validity periods are daily or monthly public transport tickets. Examples of entitlements with different scopes of validity are zone cards in public transport or tickets of a museum with several exhibitions, which can be used to enter individual or all exhibitions. When using different types of authorizations, a value of the identification information can preferably be assigned a plurality of authorizations.

If, on the other hand, only one type of authorization is provided, exactly one authorization can be assigned to each possible value of the identification information, so that the number of possible values of the identification information predetermined by the first rule matches the number of different authorizations.

In order to prevent an unauthorized generation of authorizations by the user of the mobile telecommunication terminal, preferably the first and / or the second rule are secret for him. To further increase security against unauthorized use of authorizations, the authorizations and / or the first rule and / or the second rule are redefined at predetermined time intervals, for example once a day.

In a particularly preferred embodiment, the control means is formed as a printed transparent film, which is a comparison with fixed as an image Permits allow, the slide shows in each case in different orientations each one of the different permissions.

Accordingly, controlling the presented entitlement preferably comprises comparing the presented entitlement with an entitlement shown by the slide, wherein in the comparing the slide has an orientation defined by the identification information determined from the specified personal and / or device specific data using the first rule ,

A system according to the invention for carrying out the method described comprises a central device which is designed to generate an authorization as a function of personal and / or device-specific data using a first and a second rule, the first rule for determining identification information from personal data. and / or device-specific data, and the second rule for associating each of the possible values of the identification information with at least one of a predetermined number of specified different authorizations. The system further comprises at least one mobile telecommunication terminal adapted to receive, store and display on the display a generated entitlement from the central facility, and at least one control means for controlling an entitlement displayed on the display of the at least one mobile telecommunication terminal; wherein the control means is adapted to check, for each of the possible values of the identification information, whether the authorization displayed on the display matches one of the respective value of the identification information according to the second rule associated permissions.

Preferably, the system or individual components thereof are configured to carry out the above-described advantageous or preferred embodiments of the method.

Fig. 1

eine schematische Darstellung einer bevorzugten Ausführungsform eines erfindungsgemäßen Systems, welches zur Durchführung eines erfindungsgemäßen Verfahrens zur Berechtigungskontrolle ausgebildet ist,

Fig. 2

beispielhaft das Präsentieren einer Berechtigung auf dem Display eines Mobiltelefons,

Fig. 3

beispielhaft das Ermitteln einer Fahrgast-ID mittels einer ersten Regel,

Fig. 4

beispielhaft eine zur Berechtigungskontrolle eingesetzte Kontroll-Folie,

Fig. 5a

ein erstes Beispiel einer Berechtigung,

Fig. 5b

ein zweites Beispiel einer Berechtigung, und

Fig. 5c

ein drittes Beispiel einer Berechtigung.

The invention will now be described in more detail by way of example with reference to preferred embodiments and with reference to the accompanying drawings. The same reference numerals in the drawings designate the same or similar parts. Show it:

Fig. 1

a schematic representation of a preferred embodiment of a system according to the invention, which is designed for carrying out a method according to the invention for authorization control,

Fig. 2

exemplifying the presentation of a permission on the display of a mobile phone,

Fig. 3

by way of example determining a passenger ID by means of a first rule,

Fig. 4

by way of example a control film used for the purpose of authorization control,

Fig. 5a

a first example of a permission

Fig. 5b

a second example of a permission, and

Fig. 5c

a third example of a permission.

In the preferred exemplary embodiments described below, the use of an authorization as a ticket is described in particular. However, the invention is not limited to tickets, but can also for any other suitable purpose, such as the use of a ticket entitlement.

For the sake of simplicity, only one type of authorization is provided, so that authorization is provided for each possible value of the identification information in the exemplary embodiments described below. However, the invention is not limited to one type of entitlement, but may also provide for several types of entitlements, such as tickets valid for a day or a month, or tickets valid for certain areas.

In Fig. 1 schematically a system for performing an authorization control method is shown. The components of the system include a center 100 which defines the rules for creating and controlling tickets. Central 100 prepares control slides 300 for controllers 300 in accordance with these rules and sends the control slides and the rules to checkers 300. For example, the transmission may be digital over a communications link 420, with the control slides 300 printed out by controller 300. The control slides may also be printed out in the center 100 and provided to the respective controller 300 in a suitable way. The central office also creates tickets for the passengers and sends them to a mobile telecommunications terminal 200 of the passenger. The dispatch of the tickets is preferably via a communication link 410 by means of a message in SMS or MMS format.

Checkers 300 receive the control slides from the center 100 and perform a check 430 of the passengers' tickets. The passengers receive the tickets from the control center 100 and show the checkers 300 as part of the ticket control 430 their ticket, which is preferably displayed for this purpose on a display of the mobile device 200 of the passenger.

• Schritt 1:
  • In einem ersten Schritt erfolgt zur Initialisierung der Versand der Regeln und Kontroll-Folien. Die Zentrale 100 definiert beispielsweise die unten näher beschriebenen Regeln R1 und R2 für die Erstellung von Fahrscheinen und verteilt sie an die Kontrolleure 300. Außerdem erstellt sie zu diesen Regeln gehörige, durchsichtige Kontroll-Folien mit Aufdruck und verteilt sie ebenfalls an die Kontrolleure 300. Dieser Schritt wird typischerweise wiederholt, beispielsweise einmal täglich durchgeführt.
• Schritt 2:
  • In einem zweiten Schritt erfolgt das Erstellen und Versenden der Fahrscheine. Auf Anfrage des Fahrgastes erstellt die Zentrale 100 ein Bild. In einer SMS- oder MMS-Nachricht wird dieses Bild mitgeschickt. Dieses Bild dient als Fahrschein und kann bei der unten in Schritt 3 beschriebenen Kontrolle auf dem Display des Mobiltelefons 200 angezeigt werden.
    Für die Erstellung des Bildes gibt es zwei Regeln:
    • Die erste Regel R1 definiert, wie aus den Fahrgastdaten ein Wert, nachfolgend auch als Fahrgast-ID bezeichnet, ermittelt wird. Zum Beispiel kann diese Regel sein: Die dritte Ziffer der Mobilnummer ohne Vorwahl.
    • Die zweite Regel R2 definiert, wie aus der Fahrgast-ID der Fahrschein ermittelt wird. Dies kann in einer ersten Variante dadurch erfolgen, dass definiert wird, auf welche Weise die Kontroll-Folie auf das Display des Mobiltelefons gelegt werden muss, oder in einer zweiten Variante indem das Bild selbst festgelegt wird. Es ist auch eine Kombination aus beiden Varianten möglich.
• Schritt 3:
  • In einem dritten Schritt erfolgt die Kontrolle der Fahrscheine. Zur Kontrolle des Fahrscheins ermittelt der Kontrolleur 300 mit Regel R1 die Fahrgast-ID aus den durch den Fahrgast bereitgestellten Fahrgastdaten und legt dann die Kontroll-Folie gemäß Regel R2, d.h. in Abhängigkeit der Fahrgast-ID, auf das Display des Mobiltelefons des Fahrgastes. Wenn der Aufdruck und das SMS- bzw. MMS-Bild auf dem Display des Mobiltelefons 200 übereinstimmen, ist der Fahrschein gültig.

The procedure of the method is described below by way of example in three steps:

• Step 1:
  • In a first step, the rules and control slides are sent for initialization. The center 100 defines, for example, the rules R1 and R2 described in more detail below for the creation of tickets and distributes them to the checkers 300. In addition, it creates those transparent control films with printed markings and also distributes them to the checkers 300. This Step is typically repeated, for example, once a day.
• Step 2:
  • In a second step, the tickets are created and sent. At the request of the passenger, the center 100 creates a picture. In an SMS or MMS message, this image is sent. This image serves as a ticket and can be displayed on the display of the mobile phone 200 at the check described below in step 3.
    There are two rules for creating the image:
    • The first rule R1 defines how a value, hereinafter also referred to as a passenger ID, is determined from the passenger data. For example, this rule can be: The third digit of the mobile number without area code.
    • The second rule R2 defines how the ticket is determined from the passenger ID. In a first variant, this can be done by defining how the control foil has to be placed on the display of the mobile phone or, in a second variant, by defining the image itself. It is also possible a combination of both variants.
• Step 3:
  • In a third step, the tickets are checked. To check the ticket, the inspector 300 uses rule R1 to determine the passenger ID from the passenger data provided by the passenger, and then place the control film according to rule R2, ie, passenger ID, on the display of the passenger's mobile phone. If the print and the SMS or MMS image on the display of the mobile phone 200 match, the ticket is valid.

In particular, two security measures are advantageously provided. The rules R1 and R2, and thus the control slides, are firstly secret and second, change at predetermined intervals, for example daily. It is not mandatory that both security measures apply to both rules. However, this is advantageous in order to ensure safety even in the case of weak points such as, for example, the disclosure of a rule.

The following will describe the rules in connection with the above-described steps 1 to 3.

In step 1, rules R1 and R2 are set. Rule R1 is exemplary in FIG Fig. 3 for the example given above. Passenger ID 331 is the third digit of the extension number of mobile number 220. As exemplified in FIG Fig. 2 can be shown for control on the display 201 of the mobile phone 200 advantageously the mobile number 220 together with the permission 210. Alternatively, the passenger can also tell the controller his mobile phone number by other means. For example, if the rule changes due to the second security measure described above, another cell site number 220 may be selected or simple arithmetic operations may be performed, such as adding the first and fourth digits.

Rule R2 sets the appearance of the control slides. For a particularly preferred embodiment, a control sheet 310 is shown in FIG Fig. 4 shown. For example, the imprint on the slides has the shape of a Pentagon 320, with two numbers printed on each corner, one correct and one mirrored. In the example shown, the numerals 331-335 denoted by the reference numbers are mirror-inverted and the ones indicated by the reference numerals 341-345 are printed in mirror-inverted form. Each digit from 0 to 9 is used exactly once. The respective numeral stands for the passenger ID, ie during the inspection, the inspector places the film 310 on the display in such a way that the passenger ID points upward in the correct orientation, with the film 310 if necessary, turned over and placed mirror-inverted. Two corners of the pentagon are selected and half filled, for example, in color or with hatching. The filled in the illustrated embodiment surfaces are designated by the reference numerals 351 and 352. In this way, the control slide reflects Rule R2, which assigns exactly one picture to each possible Passenger ID. When changing the rule R2, for example, the assignment of digits and corners and / or the selection of the filled corners can be changed, ie, for example, change the order of the numbers and / or the filled corners every day.

In step 2, a passenger buys a ticket. In the Figures 5a, 5b and 5c By way of example, the images are shown, which get different passengers depending on their mobile phone number as authorization. A first passenger has the mobile number 0171/1234567, so that his passenger ID according to the above rule R1 is thus 3. This passenger receives as authorization the in Fig. 5a represented image 212, which is defined by the rule R2. For example, a second passenger has the Passenger ID 5 and receives the Rule R2 specified in Fig. 5b represented image 214 as authorization. For example, a third passenger has Passenger ID 6 and receives the ID specified by Rule R2 for that Passenger ID Fig. 5c displayed image 216 as authorization.

In step 3, the inspector determines the respective passenger ID for the passengers using rule R1. Then he controls the tickets with his foil. At the first passenger with the passenger ID 3 he puts the film 310 so on the display of the mobile phone as it is in Fig. 4 is shown, since the 3 is in the top right orientation. When the second passenger remains the position of the film, but the controller turns it around so that the 5 is shown in the correct orientation, ie the film is to the representation in Fig. 4 mirrored. At the third passenger the controller turns the foil from the in Fig. 4 in a clockwise position so that the 6 is at the top of the pentagon. In all cases, the imprint of the applied foil and the respective images on the displays will be the same, the respective permissions are valid. If the controller does not find a match, the permission shown on the display is invalid.

1. a) Der Fahrgast darf sich den Fahrschein nicht selbst erstellen können. Dies soll nicht allein durch den Absender der SMS oder MMS gewährleistet sein, da der Fahrgast den Absender fälschen könnte, so dass die SMS oder MMS von der Zentrale zu kommen scheint, sondern durch den Inhalt der SMS oder MMS.
2. b) Der Fahrschein soll nicht kopierbar sein. Ein Fahrgast A soll die SMS oder MMS nicht an einen Fahrgast B weiterleiten können, so dass der Fahrschein auch bei Fahrgast B gültig ist. Auch dies soll durch den Inhalt der SMS oder MMS gewährleistet sein.
3. c) Der Fahrschein soll für eine begrenzte Zeitdauer gültig sein, beispielsweise für die Dauer von einem Tag.
4. d) Der Fahrschein soll vom Kontrolleur ohne aufwendige technische Hilfsmittel zu kontrollieren sein. Es soll auch keine Online-Verbindung zu einer Zentrale notwendig sein.
5. e) Der Fahrgast soll nur ein normales Mobiltelefon besitzen müssen, welches lediglich zum Empfang und zur Anzeige von Nachrichten im SMS- und/oder MMS-Format ausgebildet sein muss.

With particular advantage, the authorization control procedure fulfills the following requirements for a ticket:

1. a) The passenger is not allowed to create the ticket himself. This should not be guaranteed solely by the sender of the SMS or MMS, since the passenger could falsify the sender, so that the SMS or MMS seems to come from the center, but by the content of the SMS or MMS.
2. b) The ticket should not be copied. A passenger A should not be able to forward the SMS or MMS to a passenger B, so that the ticket is also valid for passenger B. This should also be ensured by the content of the SMS or MMS.
3. c) The ticket should be valid for a limited period, for example for one day.
4. d) The ticket should be checked by the inspector without any complex technical aids. It should also be no online connection to a central office necessary.
5. e) The passenger should have only a normal mobile phone, which must be designed only for receiving and displaying messages in SMS and / or MMS format.

1. a) Wenn sowohl Regel R1 als auch Regel R2 bekannt sind, kann sich der Fahrgast selbst einen Fahrschein erstellen, indem er erst mit Regel R1 seine Fahrgast-ID ermittelt und dann mit Regel R2 den zugehörigen Fahrschein erstellt. Um dies zu vermeiden wird vorteilhaft zumindest eine der beiden Regeln R1 und R2 geheim gehalten. Zur Erhöhung der Sicherheit werden vorzugsweise beide Regeln geheim gehalten, da sie bekannt werden könnten, zum Beispiel indem verschiedene Fahrgäste ihre Fahrscheine vergleichen oder indem der Fahrgast die Kontroll-Folie des Kontrolleurs sieht.
2. b) Die Fahrscheine sind abhängig von der Fahrgast-ID. Verschiedene Fahrgäste, die die gleiche Fahrgast-ID haben, zum Beispiel weil die dritte Stelle ihrer Mobilfunk-Durchwahlnummern gleich ist, können sich einen Fahrschein teilen, indem einer den Fahrschein kauft und der zweite sich den Fahrschein kopiert. Dies würde der oben angeführten Anforderung widersprechen. Da aber die Regel R1 zur Erzeugung der Fahrgast-ID vorzugsweise geheim ist und in zeitlichen Abständen, z.B. täglich, wechselt, ist der Schaden begrenzt. Erstens ist es durch die Geheimhaltung der Regel R1 schwierig, gezielt Personen mit der gleichen Fahrgast-ID zu finden. Zweitens können sich zwar zwei Personen einen Fahrschein teilen, wenn sie zufällig herausfinden, dass sie die gleiche Fahrgast-ID haben. Wenn die Regel R1 aber täglich wechselt, ist dies nur an dem einen Tag möglich, am anderen Tag werden die beiden Personen typischerweise wieder verschiedene Fahrgast-IDs haben. Die neue Regel R1 unterscheidet sich vorteilhaft so von der alten, dass möglichst unterschiedliche Werte für die Fahrgast-ID herauskommen, dass also die beiden Personen dann tatsächlich unterschiedliche Fahrgast-IDs erhalten. Ungeeignet wäre zum Beispiel, die Fahrgast-ID vom Vornamen abhängig zu machen, denn dann haben zwei Fahrgäste mit gleichen Vornamen immer die gleiche Fahrgast-ID und können immer die Fahrscheine teilen. Auch das oben beschriebene Beispiel, welches wechselnde Stellen der Mobilfunk-Durchwahlnummer verwendet, könnte dazu führen, dass sich Personen mit ähnlicher Telefonnummer häufig einen Fahrschein teilen können. Um dies zu vermeiden, kann eine weniger leicht nachzuvollziehende Regel R1 festgelegt werden, wobei diese vorzugsweise auch nicht zu kompliziert ist, damit der Kontrolleur sie schnell und ohne Hilfsmittel anwenden kann. Beispielsweise können einfache Rechenoperationen zur Ermittlung der Fahrgast-ID vorgesehen sein.
3. c) Wenn entsprechend der oben beschriebenen Sicherheitsmaßnahme wenigstens eine der beiden Regeln R1 und R2 wechseln und die neuen Regeln und Kontroll-Folien an den Kontrolleur gesendet werden, werden die alten Fahrscheine ungültig.
4. d) Für die Überprüfung des Bildes muss der Kontrolleur nur die Kontroll-Folie auf das Display legen. Dies ist ohne technischen Aufwand und billig möglich. Dabei muss er die Regel R2 einhalten, die ebenfalls ohne technischen Aufwand zu realisieren ist.
5. e) Mit den heute üblichen Mobiltelefonen lassen sich Bilder der oben beschriebenen Art in der Regel in ausreichender Qualität darstellen. Ferner sind Mobiltelefone heute typischerweise zum Nachrichtenempfang im SMS- und/oder MMS-Format ausgebildet. Eine weitergehende Funktionalität des Mobiltelefons ist für das beschriebene Verfahren nicht erforderlich.

Below is shown for each of the requirements a) to e), in which way the described method meets the respective requirements or at least allows the limitation of possible damage.

1. a) If both Rule R1 and Rule R2 are known, the passenger can create a ticket by first determining his Passenger ID with Rule R1 and then creating the corresponding ticket with Rule R2. In order to avoid this, at least one of the two rules R1 and R2 is advantageously kept secret. To increase safety, both rules are preferably kept secret because they may become known, for example by different passengers comparing their tickets or by the passenger seeing the controller's control slide.
2. b) The tickets are dependent on the passenger ID. Different passengers who have the same passenger ID, for example because the third digit of their mobile telephone extension numbers is the same, can share a ticket by purchasing the ticket and the second copying the ticket. This would contradict the above requirement. However, since the rule R1 for generating the passenger ID is preferably secret and at intervals, eg daily changes, is the Damage limited. First, the rule R1's confidentiality makes it difficult to target people with the same passenger ID. Second, though, two people can share a ticket if they happen to find out they have the same passenger ID. However, if Rule R1 changes daily, this is only possible on one day, and on the other day the two people will typically have different Passenger IDs again. The new rule R1 advantageously differs from the old one in that the values for the passenger ID that are as different as possible come out, so that the two persons then actually receive different passenger IDs. For example, it would be unsuitable to make the passenger ID dependent on the first name, because then two passengers with the same first name always have the same passenger ID and can always share the tickets. Also, the example described above, which uses alternate locations of the mobile extension number, could result in individuals with similar telephone numbers frequently sharing a ticket. In order to avoid this, a less easily understood Rule R1 can be established, which preferably is not too complicated so that the controller can apply it quickly and without auxiliary means. For example, simple arithmetic operations for determining the passenger ID can be provided.
3. c) If, according to the security measure described above, at least one of the two rules R1 and R2 changes and the new rules and control slides are sent to the controller, the old tickets become invalid.
4. d) To check the image, the inspector only has to place the control foil on the display. This is possible without technical effort and cheap. He has to do that Comply with rule R2, which is also to realize without technical effort.
5. e) With today's conventional mobile phones images of the type described above can usually represent in sufficient quality. Furthermore, today mobile phones are typically designed to receive messages in SMS and / or MMS format. A further functionality of the mobile phone is not required for the described method.

The invention thus particularly advantageously provides a method for generating, distributing and controlling access authorizations, such as tickets or tickets, which meets the requirements described above by defining a rule which assigns a unique passenger ID to a passenger, and a vehicle another rule defines how a valid ticket can be generated from a passenger ID and transmits these rules to an inspector, the rules being easy to apply by the inspector, possibly using an aid provided by the center to apply one or both of the rules, and wherein the rules are preferably kept secret and changed, and the center, at the request of the passenger, according to the rules, creates a ticket and transmits it to the passenger, and the inspector can check the ticket with the help of the rules and, if necessary, the aids. In particular, a control foil is provided as an aid, which represents a simple description of the rule R2, which represents the rule not in words but as an image.

Claims (9)

1. A method for authorisation checking, comprising the steps of:

   - defining a first rule (R1) for determining an identification information (331 - 335, 341 - 345) from personalised and/or device-specific data (220), wherein the number of possible values of said identification information (331 - 335, 341 - 345) is predetermined by said first rule (R1);

   - defining a predetermined number of different authorisations (212, 214, 216);

   - defining a second rule (R2) which associates at least one of said defined authorisations to each of the possible values of the identification information;

   - generating a checking means (310) for checking a presented authorisation (210), said checking means (310) being adapted to check, for each of the possible values of the identification information (331 - 335, 341 - 345), whether the presented authorisation (210) matches at least one of the authorisations (212, 214, 216) associated with the respective value of the identification information according to the second rule;

   - presenting an authorisation (210) while providing personalised and/or device-specific data (220);

   - checking the presented authorisation (210) by determining an identification information (331 - 335, 341 - 345) from the provided personalised and/or device-specific data (220) using the first rule (R1) and verifying the presented authorisation (210) using the generated checking means (310) in function of the determined identification information (331 - 335, 341 - 345);
   further comprising

   - requesting, by a user of a mobile telecommunications terminal (200), an authorisation (210) at a central facility (100) while providing personalised and/or device-specific data (220);

   - generating, by said central facility (100), an authorisation (210) as a function of the personalised and/or device-specific data (220) using the first and second rules;

   - transmitting the generated authorisation (210) from the central facility (100) to the mobile telecommunications terminal (200); and

   - storing the transmitted authorisation (210) in a memory of the mobile telecommunications terminal (200);

   wherein
   the presenting of an authorisation (210) comprises displaying the stored authorisation (210) on a display (201) of the mobile telecommunications terminal (200);
   characterized in that
   said checking means is in form of a printed transparent film which allows a comparison with authorisations that are specified as an image.
2. The method of claim 1, wherein the transmitting of the generated authorisation (210) from the central facility (100) to the mobile telecommunications terminal (200) is accomplished by means of an SMS or MMS.
3. The method of claim 1 or 2, wherein the first and/or the second rule is/are secret to the user of the mobile telecommunications terminal (200).
4. The method as claimed in any of the preceding claims, wherein the authorisations (212, 214, 216) and/or the first rule and/or the second rule are redefined at predetermined time intervals.
5. The method as claimed in any of the preceding claims, wherein each of the authorisations (212, 214, 216) is defined as an image, and wherein the checking means (310) is formed as a printed transparent film.
6. The method as claimed in claim 5, wherein in different orientations the film (310) represents a respective one of the different authorisations.
7. The method as claimed in claim 6, wherein the checking of the presented authorisation (210) comprises comparing the presented authorisation (210) with an authorisation (320) represented by the film, wherein upon comparing the film has an orientation that is defined by the identification information (331-335, 341-345) determined from the personalized and/or device-specific data (220) using the first rule (R1).
8. The method as claimed in any of the preceding claims, wherein the number of possible values of the identification information predetermined by the first rule matches the number of different authorisations.
9. A system for performing a method as claimed in any of claims 1 to 8, comprising

   - a central facility which is adapted to generate an authorisation (210) as a function of personalised and/or device-specific data (220) using a first and a second rule, wherein the first rule serves to determine an identification information (331 - 335, 341 - 345) from personalised and/or device-specific data (220), and wherein the second rule serves to associate each of the possible values of the identification information to at least one of a predetermined number of different defined authorisations;

   - at least one mobile telecommunications terminal (200) which is configured to receive a generated authorisation (210) from the central facility, and to store it and to display it on a display (201); and

   - at least one checking means (310) for checking an authorisation (210) displayed on the display (201) of the at least one mobile telecommunications terminal (200), said checking means (310) being adapted to check, for each of the possible values of the identification information (331 - 335, 341 - 345), whether the authorisation (210) displayed at the display (201) matches any of the authorisations (212, 214, 216) associated with the respective value of the identification information according to the second rule;

   characterized in that
   the checking means is in form of a printed transparent film which allows a comparison with authorisations that are specified as an image.

Images