WO2019185791A1

WO2019185791A1 - System for the storage, distribution and binding, slip-free offline transmission of e-values using a mobile device with short transaction time

Info

Publication number: WO2019185791A1
Application number: PCT/EP2019/057852
Authority: WO
Inventors: Stephan WULLSCHLEGER; Dominik GRUNTZ; Markus Knecht
Original assignee: Pbv Kaufmann Systeme Gmbh
Priority date: 2018-03-29
Filing date: 2019-03-28
Publication date: 2019-10-03
Also published as: EP3776424A1

Abstract

What is claimed is a system (1) for the tamper-proof storage, distribution and querying or transmission of electronic values (4), that is to say e-values (4), comprising a mobile device (2) with an e-value (4), a terminal (5) and a control unit (7). The e-value (4) represents an identifier, a real asset or electronic currency, that is to say e-currency. The e-value (4) is preferably present as an e-value (4*) comprising a load token TL (41) and a spend token TS (42). As an alternative or in addition, the terminal (5) comprises a security element SEALS-SE (3), wherein the security element SEALS-SE (3) is suitable for storing and transmitting e-values with a binding transaction also using a device (2) without a security element SE and without an Internet connection at the time of the payment procedure. If the e-value (4, 4*) represents e-currency, the control unit (7) is not a server. Also claimed is an e-value (4**) for the tamper-proof storage, distribution and querying or transmission of e-values (4**), wherein the e-value (4**) does not represent e-currency. Also claimed is a method for the secure storage, distribution and transmission of e-values (4, 4*, 4**) using the device (2), and the use of the system (1) and of a physical security element SEALS-SE (3) in a terminal (5). According to the invention, the terminal (5) and the device (2) do not have to be connected to the control unit (7) at the time of a transmission procedure for a binding transaction, and may thus be offline.

Description

System for storing, sharing and binding, slip-free off-line transmission of e-values with mobile device with short transaction time

The present invention relates to a system for securely storing, sharing and transmitting electronic values to a mobile device, in particular to an insecure mobile device (2) without a suitable security element, to the electronic value, to a method of secure storage, sharing and transmitting electronic values, as well as their use.

In the current digital revolution, more and more activities of daily life are being digitized. This should simplify our lives. Mobile phones such as smartphones are playing an increasingly important role in everyday life and even in less developed countries most people own a mobile phone. Performing a variety of activities electronically - using a smartphone, for example - also requires fewer paper prints and therefore less paper, which in turn reduces waste and is more sustainable overall.

Electronic money, also known as e-money, as well as all forms of other electronic values, ie e-values, such as vouchers of all kinds, vouchers, tickets such as event tickets and / or tickets for public transport, are becoming increasingly popular, because in most cases they offer significant added value compared to their traditional, non-electronic manifestations. Paperless, electronic tickets for festivities and events, for example, can be sent to customers very cheaply and immediately. Paperless vouchers - stored on a mobile device such as a smartphone, for example - are not lost because the mobile device - and thus also the voucher - is lost. typically always carries with you. Entrances, accesses or authorizations, as well as multi-trip tickets in public transport, can be electronically produced, stored and processed much more reliably and reliably than, for example, conventional punch or punch cards.

Also, cashless payment of goods becomes ever more important. Especially when paying smaller amounts of money, the cashless payment against cash has great advantages. For example, the costs of managing cash, such as staff costs, transport costs, insurance costs and maintenance costs, are eliminated for the trade. Also, no change is necessary in the payment process, since always the exact amount is deducted from the card. These aspects are of increasing importance, especially when paying small amounts and small amounts, in the sale of vending machines and in the event sector.

Various payment methods are known for cashless payment, with credit card payment and debit card payment being the best known. In a debit card payment can be paid at a payment terminal by the debit card assigned giro account with a financial institution, the corresponding amount of money is debited directly and credited to the giro account of the seller. The debit card is tied directly to a specific Giro account and the payment terminal must be connected during the payment process with a payment service provider, ie Payment Service Provider, PSP, ie online. Accordingly, no money is stored on the debit card, but the card is only for the identification of the user. Offline payments can not be made. When paying by credit card, the amount paid will first be debited to a credit institution. This then demands the amount from the buyer retrospectively. Accordingly, even with this payment method no money is stored on the card. Also, to prevent abuse, the payment terminal must be connected to the payment service provider during the payment process, ie be online. Credit card payments can only be made offline off-line and only if they are available from both the bank and the vendor, ie provider resp. Seller, to be accepted. Thus, an offline payment is temporary, but not yet binding. A definitive payment with final and thus binding settlement can only take place if the payment has been checked online by one or more servers and / or people. In order to compensate for an associated increased risk of default, the transaction fees are correspondingly larger for credit card payments.

Cashless payment via debit cards and credit cards have prevailed in many areas of life and are almost indispensable. So it is not surprising that there are several different approaches to bringing debit card and credit card payment methods to the mobile phone in the recent past. Because the mobile phone is usually at hand and is rarely lost. And in case of loss, it can usually be located quickly or blocked remotely. Also, the access to your own mobile phone is protected, for example, by a secret access code. In addition, no money is stored on the mobile phone, which ensures a certain security against counterfeiting and misuse. Because this is ensured especially in debit card and credit card payment methods by a central server of money and credit institutions.

Various types of cryptocurrencies, such as bitcoin, have circulated for several years. These cryptocurrencies are - not least, to meet high security requirements - not stored on a device such as a mobile phone, but in a decentralized network in which - in simple terms - all participants in the Communicate with each other and establish a consensus on who owns at what time how much money. In order to be able to pay with a cryptocurrency, a device involved in the payment must therefore be online, ie have a contact with at least one server. In addition, to ensure the security of the cryptocurrency, each transaction is reviewed and authorized by a variety of other devices, which typically can be paid for with the same cryptocurrency. Such a review is extremely time-consuming and currently takes about ten minutes or more for Bitcoin, for example. In addition, each of these products, such as Bitcoin, forms its own specific currency, which can also change the exchange rate to local currencies. Depending on your current confidence in the product, the exchange rate can fluctuate greatly within a short time. Since, as a rule, both the seller and the buyer want payment security and do not want to speculate on currency, such products are unsuitable for paying small amounts. In addition, with products such as Bitcoin due to the lack of trust between buyer and / or seller no offline payments, in particular no transfer of e-money with final settlement without connection to the Internet at the time of payment, take place.

In addition to e-money, there are also increasing approaches to digitize other aspects of everyday life. These include - in electronic form - personal and property identifications such as access badges, as well as real assets such as train tickets.

In many of the aforementioned cashless payment, verification and / or debit systems, an Internet connection is recommended or even essential at the time of the payment, verification and / or debit procedure and is increasingly required by the operators. However, at the time of the payment, verification and / or debit If there is no Internet connection available - for example in a mobile phone breakdown or in the event of a sudden failure of the Internet - the payment, checking and / or debiting procedure can not be carried out in extreme cases.

If an e-value in the form of a monetary value, and thus money, electronically stored on a portable medium, such as a smart card, one speaks of electronic money, also called e-money. With an e-money card, also called a prepaid card, prepaid card or prepaid card, an amount of money is stored electronically directly on the card. In a payment process, the corresponding amount is then deducted directly from this card. The user can then debit money from such a credit card so long to make purchases until the amount of money is used up. Since in payments with a prepaid card the creditworthiness of the buyer, ie the user of the prepaid card is given, there are no or very low transaction fees, which is usually advantageous for both the buyer and the seller. In contrast to the debit cards and credit cards, prepaid cards can also be used to pay for payment terminals that are offline at the time of the payment process. not connected to the Internet or a central server. The importance of such offline payments, payments where both the money-giving and the cash-accepting media are offline and not connected to the Internet, should not be underestimated. For example, in the vending industry, the vending machines and their payment terminals are very rarely equipped with Internet connectivity. In addition, payment systems based on e-money resp. Prepaid cards or prepaid cards compared to payment systems based on debit cards and in particular credit cards comparatively cheap for the seller, because at every payment process with debit card and credit card incur negligible fees. Not to Underestimate the cost of infrastructure needed for debit and credit cards and their maintenance, further increasing fees. As part of digitization, unfortunately, the deliberate misuse of e-values is also increasing. Without suitable protection, E-values can simply be stolen, duplicated, forwarded and abused. Therefore, there are always better ways to protect digital e-values. A central point in electronic payment, verification and / or debiting methods such as payments with a prepaid card, debiting of a tangible asset or identification of a person or a thing is therefore the theft, counterfeiting and misuse security. While the user is accustomed to using his cash, not least because of the use of cash, theft of e-values, such as e-money, is much harder to detect. Counterfeiting and misuse of e-values are also much harder to detect. So that dealing with e-values such as paying by means of a prepaid e-money card, identifying persons, animals or items by means of an electronic ID card, as well as using electronic assets, can and will maintain the trust of financial institutions, government agencies, insurance companies and users Thus, the use of E-values in our society can enforce the E-values must necessarily have a very high level of counterfeiting and abuse security.

To ensure the necessary security against counterfeiting and misuse, for example, prepaid cards include a security element. Such cards are also called smart cards. They are relatively expensive and are usually issued by a trusted entity, such as a trusted partner of a financial institution. To further increase the security of such prepaid cards they are often only for a limited time and are usually limited to certain outlets. For an operator of outlets with prepaid cards, the prepaid cards are also relatively complex to manage. Also, the user can not easily query the current balance on a prepaid card. In addition, he often has different prepaid cards, which is perceived as confusing and disadvantageous.

For the reasons mentioned above, it is hardly surprising if the user expresses the desire to use with his mobile phone e-values of any kind, such as making payments analogous to a prepaid card or devaluations of electronic tickets. For if he can use his mobile phone, for example, as a prepaid card, then he can easily pay even small amounts, as for example in the vending machine sales and in the event area occurrence, cashless. In order for such a mobile phone-based e-value card, such as a prepaid card, identification card, for example a personal ID card or physical asset such as an admission ticket, to enjoy all the advantages of a normal physical prepaid card, such as a prepaid card, a personal ID card or an admission ticket, it is central, that paid with her, a person expelled or can be entered, if at the time of payment, identification resp. Entry process, the mobile phone has no Internet connection, i. that can also be paid, identified or entered offline with the mobile phone-based prepaid card.

To provide a mobile phone-based prepaid card, a value must therefore be stored electronically directly on the mobile phone. However, mobile phones are considered to be insecure, ie the security standard for mobile phones is considered inadequate, for example with regard to e-money, since the counterfeiting and misuse of electronic values, ie e-values such as e-money, can not be guaranteed on all mobile phones. Thus are Mobile phones per se unsuitable to store an e-value on it safely. Consequently, it is not possible with the technologies available today to provide mobile phone-based prepaid cards that meet the required security standards, without the prepaid card or equivalent hardware directly into the mobile phone, respectively. to use corresponding existing hardware in the mobile phone.

With today's technologies, the use of a specific security element designed for off-line transmission with E-values is essential to give a device such as a mobile phone sufficient security for the E-value stored on the device. These security elements are relatively expensive compared to equivalent prepaid cards and not every mobile phone can ever be retrofitted with a corresponding security element. Although some of the latest generation of mobile phones have security features that can be used to securely store, for example, entered credit card information. However, access to potentially existing security elements is mostly restricted or completely denied.

Table A: Storage and transfer of values using the example of money and e-money. Listed are known electronic means of payment and object of the invention in terms of the manner of money transfer, storage of e-money and offline payment options. All known means of payment are widely used and widely accepted by banks, banks and users. The same applies to other e-values such as material assets and identifications.

a) E-banking is understood in a broader sense, ie in addition to online banking systems for recording transfers between bank accounts and software tools for the management of proprietary network money credit and the like are included.

b) E-money includes all electronic money and monetary units such as tickets.

c) K *> K stands for Account ^ account, i. from account to account. A money transfer during a payment transaction from account to account means that the money is transferred from one account of one financial institution to another account of the same or another financial institution, the money also being able to be transferred via intermediate accounts.

d) A security element SE of type 1 allows safe storage of

Keys and data such as a PIN code and card details, ie to the means of payment, as well as the execution of crypto algorithms in a safe environment (see table D). This is essential for the core task of debit card, getting cash at an ATM.

e) A known cryptocurrency is Bitcoin.

f) A prepaid card means a smartcard on which e-money or other e-values can be stored.

g) GK ^ T stands for transfer between prepaid card and terminal and G ^ T stands for transfer between device and terminal. The money transfer to the prepaid card resp. on the device is not listed.

h) In addition to the functionality of a Type 1 SE, a type 2 SE safety element also allows saving of electronic money or other E values (see Table D).

i) Temporary means that a payment can be made offline temporarily, but this is not yet binding. A final and thus binding settlement can only take place if the payment has been checked online by one or more servers and / or people.

j) The distinction between debit card and credit card is made here for the purpose of distinguishing the payment methods. Today, modern payment cards often fulfill the tasks of both card types. Depending on the payment method selected, it will be used either as a credit card or as a debit card. Thus, the characteristics of the card types also remain as a hybrid.

k) For the integrity and protection of the inventive system (1), a security element SE is not necessary. To protect private data or your own money from theft, eg. B. by means of a malicious software, a security element SE type 1 can be used.

L) Money slippage - generally called value slippage - is understood to mean that the value, ie the money, is erroneously lost or double credited in a value transfer such as money transaction. Thus, it is the object of the present invention to provide a system for the secure storage, sharing and retrieval or transmission of E-values by means of a mobile phone-based E-value memory - analogous to a prepaid card - wherein the interrogation / transfer process of E -Values with binding conclusion, ie, for example, with e-money with final settlement, even without Internet connection and thus offline, ie without mobile and / or Internet connection at the time and place of the transfer process, can be done. The E value stored on the mobile phone must have a very high protection against forgery and fraud. Nevertheless, the mobile phone should not have to fulfill specific security requirements, ie storing and transmitting E values should also be possible with so-called non-secure devices. The query / transfer process must be able to be processed quickly, ie have a short transaction duration, so that the system is accepted by its users. In addition, the transmission of e-values should be final in all cases, so that no participant in the transmission process ever has to pay in advance or wait for a subsequent transfer confirmation. In addition, the system should prevent the value slip, ie the erroneous loss or double crediting of values or value shares.

Surprisingly, this complex and challenging task has been accomplished with a system (1) for tamper-proof storage, sharing, and interrogation or transfer of electronic values (4), i. E-values (4), comprising

- at least one mobile device (2) selected from the group consisting of a mobile phone, smartphone, tablet, notebook, laptop, smart wearables, smart card (6), USB stick, SD memory card, embedded device, memory IC and another , especially for the system (1) provided mobile device, wherein on at least one E value (4) is stored in the device (2), the E value (4) representing an identification, a tangible value or electronic money, ie electronic money,

- At least one transmission terminal (5), and

- a control body (7), the control body (7) being a network,

Security element SE which is installed directly in the device (2) or in a plurality of devices (2 "), represents a trusted user of the device (2) or the plurality of devices (2"), or a server,

in which

I. The E value (4) is present as an E value (4 *), wherein the E value (4 *) at least one load token TL (41) and after a first query / transfer process and at least one of the load Token TL comprises different donation token TS (42), and / or

II. The terminal (5) comprises at least one security element SEALS-SE (3), wherein the security element SEALS-SE (3) for the retention, division as well as the interrogation or transmission of E values (4, 4 *) with mandatory conclusion Also with a device (2) without security element SE and without Internet connection at the time of the query / transfer process is suitable, and

Terminal (5) and the device (2) are autonomous at the time of a binding completion request / transfer process and do not need to be connected to a control device (7) and thus can be offline,

where, if the E-value (4, 4 *) represents e-money, the controlling body (7) is not a server.

Also claimed is an electronic value (4 **), ie E-value (4 **), for tamper-proof storage, sharing and querying or transmission of E-values, where the E-value (4 **) is an electronic identification and represents an electronic asset and at least one load token TL (41) and after a first query / transfer process at least a donation token TS (42) different from the load token TL (41), wherein

the load token TL (41) is stored on the device (2) and comprises electronic data for the E value (4 **) stored on the device (2),

- the donation token TS (42) is stored on the device (2) and / or terminal (5) and electronic information on the interrogation / transfer process of the stored on the device (2) E value (4 **) includes, and

- if the E value (4 **) represents a physical value, the current total value of the value of the E value stored on the device (2) (4 **) minus the sum of the load tokens TL (41) of the value minus the sum of the donation tokens TS (42) of the asset is represented,

where the E value (4 **) is not E-money.

Also, a method for counterfeit-proof storage, sharing and querying or transmitting E-values (4, 4 *) with the inventive system (1) and / or inventive E-values (4 **), the method at least one of following steps a) to d) comprises:

a) the storage of at least one E value (4, 4 *, 4 **) on the device (2) and / or the terminal (5), wherein the E value (4 *, 4 **) at least one Load token TL (41) and after a first query / transfer process also includes at least one donation token TS (42),

b) an E-value polling / transmission process (4, 4 *, 4 **) with binding completion without Internet connection at the time of the polling / transmission process comprising a polling / transmission process of the E-value (4, 4 *, 4 **) on the device (2) through the terminal (5), from the device (2) to the terminal (5) or from the terminal (5) to the device (2), the terminal (5) at least a physical one Security element SEALS-SE (3), the device (2) and the terminal (5) communicate with each other and the interrogation / transmission process of the E value (4, 4 *, 4 **) of at least one donation token TS ( 42) is represented,

c) the exchange of at least one telegram between the terminal (5) and the control body (7) or between the control body (7) and terminal (5), wherein the exchange of the at least one telegram on the device (2) or a plurality of devices (2 ") takes place, and / or

d) the monitoring and detection of abuse in the system (1) with at least one E value (4, 4 *, 4 **), where

- at least one control device (7) stores the telegrams received by the devices (2, 2 "), processes them, and forwards other messages via the devices (2, 2") to the terminal (5), and / or

the terminal (5) checks the correctness of at least the donation tokens TS (42) received from the devices (2, 2 ") using the security element SEALS-SE (3),

where, if the E-value (4, 4 *) represents e-money, as a control body (7) no server is used.

Also claimed is a method for the secure storage, sharing and interrogation or transmission of inventive E-values (4 **) with the device (2) at a terminal (5), wherein the E-value (4 **) at least one Load token TL (41) and after a first query / transfer process and at least one of the load token TL (41) different donation token TS (42), wherein

- The load token TL (41) is stored on the device (2) and electronic information on the device (2) stored E value

Includes (4 **), the donation token TS (42) is stored on the device (2) and / or on the terminal (5) and comprises electronic data for the inquiry / transfer process of the E value (4 **), and

- if the E value (4 **) represents a material value, the current total value of the E value (4 **) stored on the device (2) by the sum of the load tokens TL (41) of the value less the sum the donation token TS (42) of the asset is represented.

Claimed is also the use of the inventive system (1), the inventive E value (4 **) and the inventive method for forgery-proof storage, sharing and querying or transmitting E-values (4, 4 *, 4 **) with the device (2) even if the device (2) and the terminal (5) during the query / transfer process have no contact with the control device (7) and are therefore offline, wherein, if the E value (4, 4 *) E-money represents, the control body (7) is not a server.

Also, the use of a physical security element SEALS-SE (3) at a terminal (5) for tamper-proof storage, sharing and querying or transmitting E-values (4, 4 *, 4 **) with the device (2) on a Terminal (5) using the inventive system (1) and the inventive method claimed, wherein the security element SEALS-SE (3) for the storage, retrieval and transmission of E values (4, 4 *, 4 **) with binding conclusion is also suitable with a device (2) without security element SE and without Internet connection at the time of the query / transfer process, whereby the query / transfer process can also take place when the device (2) and the terminal (5) during the query / transfer process no contact with other devices (2 ") and / or a control body (7) and thus are offline. With the inventive system (1) comprising at least one E value (4, 4 *), the inventive E value (4 **), the inventive method and the inventive uses can surprisingly with an unsafe mobile device (2), such as For example, with a mobile phone without security element SE, electronically not only online, but also offline, ie even in places that have no mobile and / or Internet connection at the time and / or place of payment, a transmission of an E value (4, 4 *, 4 **) or a part thereof. Thus, the insecure mobile phone can be used as a device (2), for example, as a secure identification card, secure asset and / or as a secure credit card, with which also forgery can be identified, queried, canceled, deducted and / or paid for offline. In addition, in the system (1) instead of - or in addition - of insecure devices (2) and mobile devices (2) are used, which include a security element SE and are therefore considered safe. In addition, the E value (4 **) of the present invention and the E value (4 ^* ) preferably used in the system (1) according to the invention has a very high protection against forgery, abuse and transmission. Nevertheless, the query / transfer process of the E value (4, 4 *, 4 **) quickly - and preferably also contactless - are handled, even if relevant for a query / transfer process devices such as the device (2), ie For example, the mobile phone and the terminal (5), at the time and / or at the place of the query / transfer process are offline. For example, if the E-value (4, 4 *) represents e-money, the terminal (5) is the point-of-sale (POS) at a cash register or vending machine and the interrogation / transfer process is typically the payment transaction with the e-money. Thus, with the inventive system (1) surprisingly, for example, in cashless payment in all cases, especially if both the device (2) as well as the terminal (5) are offline, an unconditional and final settlement of

Payment process achieved. It can in the system (1) a large number A variety of control organs (7) are used, with a server in the system (1) is not mandatory. In particular, if the E value (4, 4 *) represents e-money, the controlling body (7) is not a server.

Table B: The table shows the transaction duration of query /

Transmission processes of E-values (4, 4 *, 4 **) of the present invention with an insecure device (2) based on electronic money (4, 4 *, 4 **) and in comparison with known electronic means of payment with respect to the use of electronic money, ie E-money, security elements SE in the means of payment and in the terminal (5), as well as the respective transaction duration. The information also applies to the transmission of any E values.

a) See Table A.

b) See Table A.

c) The transaction duration is the time until a payment transaction at the point of sale, e.g. at the terminal (5), temporary or binding, i. Finally, completed.

d) e-banking with mobile phone without security element SE, i. with an insecure device (2), due to known, individual authorizations can only be done online. The transaction duration of a payment transaction can not be compared with the transaction duration of the other listed payment methods. Depending on the implementation, the transaction can take from a few seconds to a few days. e) A security element SE of type 1 allows the storage of the cryptographic key and of data such as card details (see Table D).

f) See Table A, footnote k).

g) In addition to storing the cryptographic key and data, a security element SE of type 2 also allows saving of e-values such as e-money (see Table D).

h) A security element SE of type 3 according to the invention also allows, in addition to the capabilities of a SE of type 2, the storage of E-values such as E-money in a means of payment without SE, i. Device (2), and transferring E-values from a payment means without SE, i. Device (2), to a terminal, i. Terminal (5), wherein only the terminal (5) mandatory such a security element

SE needed. A suitable safety element SE of type 3 is the safety element SEALS-SE (see table D). In addition, the E value (4, 4 *) in the form of electronic money according to the present invention can not only be present in any national currency, but E values (4, 4 *) can also be displayed simultaneously on the same device (2) stored in different national currencies, complementary currencies, and currency-free any application. Surprisingly, the system (1) according to the invention, the method according to the invention and the use according to the invention can also be expanded by a smartcard (6), whereby only this and not the device (2) itself has to be carried along. This may, for example, be paid to vending machines and / or in the canteen for users who are located within a company premises and during this time with one or more E values (4, 4 *), for example, as e-money and / or drinking or food vouchers want to be of great use. In addition, the present invention also allows the E-value (4, 4 ^* , 4 ^** ) stored on the device (2) to be viewed and / or managed on the display with input field of the device (2). For example, using suitable software, it is also possible to define reference limits smaller than the actually available E value (4, 4 *, 4 **), ie the E value (4, 4 *, 4 **) can be divided as required.

It is clearly seen from Tables A, B and C that the system (1) of the present invention surprisingly integrates the advantages of, for example, the prepaid card in mobile phones, and thus in existing mobile devices (2). In particular, the mobile device (2) does not need a security element SE in order to achieve a final settlement within a maximum of a few seconds during the interrogation / transmission process, such as, for example, during a payment process with e-money (4, 4 *). Nevertheless, E values (4, 4 *, 4 **) can be stored on the thus unsafe device (2) and a query / transmission process can be triggered at a terminal (5). In addition, with the system according to the invention, a query / Transfer process not only online, but also completed offline binding, ie the settlement is also carried out offline and thus without Internet connection concluding. With crypto currencies, in contrast to credit cards offline, only a temporary settlement can be performed. To compensate for the associated increased default risk, the transaction fees are correspondingly greater. In addition, the transaction time, ie the time until a payment process is completed, is typically more than 5 minutes for cryptocurrencies, and thus many times longer than in the present invention

Table C: The following table shows the possibilities of E values in

Form of e-money from offline payments with final offline settlement. In this case, the present invention known electronic means of payment in relation to the use of electronic money, security elements SE in the means of payment and in the terminal (5), as well as offline settlement, i. final settlement without internet offering, i. offline, faced. The information also applies analogously for transmission types of other E values.

a) See Tables A and B.

b) See Tables A and B.

c) See Table B, footnote h).

d) See Table B, footnote g).

e) Temporary means that a payment can be made offline temporarily, but not yet binding. A final and thus binding settlement can only take place if the payment has been checked online by one or more servers and / or people. Cryptocurrencies behave similarly to credit cards in offline payment transactions.

f) See Table A, footnote k).

g) If there is no offline settlement, the electronic means of payment must have an Internet connection at the time of payment or, if possible, a temporary offline payment and thus offline a temporary settlement, which will be confirmed at a later date must to achieve a final settlement. h) In a payment transaction with the appropriate means of payment, the money is debited directly to a credit balance and credited to another credit (see Table A, footnote g)). Surprisingly, it has also been found that with the inventive E value (4 *) the value slip can be completely prevented in the case of transactions, since the donation token TS (42) is typically present both on the device during a query / transfer process (FIG. 2, 2 ") as well as in the form of an identical copy on the terminal (5) is stored. If, by mistake, the donation token TS (42) is not or not correctly stored on the terminal (5), this will be communicated to the same terminal (5) in a next interaction. Until further contact, the donation token TS (42) remains stored on the device (2, 2 ") and recognizable as an incomplete transfer and reserved for the terminal (5). If the terminal (5) receives a donation token (42) several times, it is still used only once.

Post-published WO-A-2018/114654 discloses a system (1) for secure payment with e-money (4) comprising at least one mobile device (2) with electronic money (4), at least one terminal (5) and mandatory at least a server (7). In the system (1) E-money (4) can be safely stored and transferred with a device (2) without security element SE and without Internet connection at the time of payment with final settlement. In this case, the terminal (5) and the device (2) at the time of a payment process for a final Settlement not be connected to the server (7) and thus can be offline.

US-A-2016224977 describes a method by which a first, in particular mobile, device is used to obtain a first token, wherein the first token is associated with a monetary amount and a start date with respect to the availability of the monetary amount. After the first token obtained by the first device, the first device generates a second token associated with the first token and the second token's creation date, wherein the first device is the second token and the second token's creation date to a second, particularly mobile, device provides. The mobile devices are connected to a server of the service provider, which in turn is connected to a processing network. The processing network is in communication with an authorization server which authorizes new tokens. The tokens on the devices represent a kind of check, ie check, which can be passed as a whole or in part in the form of a second or further token to another device. Relevant information about each token is stored in a separate storage space, such as a vault, independent from the device, or entered in a central public registry. With the tokens, ie checks, payments can be made to a merchant's computer. For this, the mobile device can be offline. However, at the time of the transaction, ie a polling / transmission process, the merchant computer must necessarily be online and in synchronous communication with the processing network and thus with the storage space or public register to confirm that the token is sufficiently covered and owned by the payer , Thus, a token does not include electronic money and also does not constitute a prepaid card, but a token in the form of a check mounts money stored on a central server such as the authorization server. If a token is transferred to a new device, this is also entered in the public register. Thus, a token entitles to demand money, but is not itself money. The first and second tokens also do not differ in structure and purpose from the token, but merely contain other information. Real offline payments without Internet connection can not be carried out, because at least the merchant computer must have an active connection with the processing network, since an external server validates a payment, ie carries out a final settlement. External networks, servers and computers are essential for completing a payment and for final settlement of the payment. The mobile device typically has a security element SE, but not the merchant computer.

The System (1) The system (1), ie the system (1) according to the invention, the system (1) used according to the invention and the system (1) used in the method according to the invention, are particularly suitable for forgery-proof storage, parts and storage Querying or transmitting any electronic values (4), ie E-values (4). Thus, the system (1) also includes storing, dividing and interrogating or transmitting the E value (4 ^* ) used according to the invention and / or the inventive E value (4 **).

The term query / transfer process comprises according to the invention

a polling operation of the E value stored on the device (2)

(4, 4 *, 4 **), or a part thereof, through the terminal (5),

- A transfer process of the device (2) stored E value (4, 4 *, 4 **), or a part thereof, from the device (2) to the terminal (5), and / or

a transmission process of the E-value (4, 4 *, 4 **), or a part thereof, from the terminal (5) to the device (2),

- Where instead of the E value (4, 4 ^* , 4 ^** ), or the part thereof, also a copy of the E value (4, 4 *, 4 **) or the part thereof can be transmitted. The interrogation process of the stored on the device (2) E value (4, 4 *, 4 **), or a part thereof, by the terminal (5), for example, when querying an identification, ie when the E value (4, 4 *, 4 **) represents an identification.

The transmission process of the E-value (4, 4 *, 4 **) stored on the device (2), or a part thereof, from the device (2) to the terminal (5), typically occurs when the E-value (4 , 4 *, 4 **) represents a tangible or e-money item and the material value changes, for example, a ticket is canceled, or paid for with e-money.

The transmission of the E-value (4, 4 *, 4 **), or a part thereof, from the terminal (5) to the device (2) typically occurs when a tangible or electronic money is transferred to the device (2) For example, when a ticket is purchased or e-money is transferred to the device (2).

A copy of the E-value (4, 4 ^* , 4 ^** ) or the part thereof is understood in particular to be a copy of the donation token TS (42), since the donation token (TS (42) on both the device (2 ) as well as being stored on the terminal (5), whereby the copy may be identical to the original or recognizable as such.

Surprisingly, the system (1) according to the invention, the E value (4 **) according to the invention, the system (1) used in the method according to the invention and the use of the system (1) according to the invention comprise a large number of very different embodiments and fields of use Diversity were not expected. The security against counterfeiting - especially the forgery-proofing of e-certificates - and the traceability of the history are important features of the system and are available at all times. Thanks to the slip-free offline Transferring e-values, even with mobile, non-secure devices with a short transaction time, can not be done twice or not at all.

The system (1) comprises at least

a mobile device (2) selected from the group consisting of a mobile phone, smartphone, tablet, notebook, laptop, smart wearables, smart card (6), USB stick, SD memory card, embedded device, memory IC and another, specifically for the system (1) provided mobile device, wherein on the device (2) at least one E value (4) is stored, wherein the E value (4) an identification, a tangible or electronic money, ie E-money, represents

- a transmission terminal (5), and

- A control body (7), wherein the control body (7) a network, a security element SE which is installed directly in the device (2) or in a plurality of devices (2 "), a trusted

User of the device (2) or the plurality of devices (2 "), or represents a server.

In a particularly preferred embodiment of the system (1) according to the invention, the E value (4) is present as E value (4 *), the E value (4 *) being at least one load token TL (41). and after a first query / transfer process also comprises at least one of the load token TL different donation token TS (42). Thus, the E value (4 *) includes not only one type of token, but at least two types of tokens.

In another particularly preferred embodiment of the inventive system (1), the terminal (5) comprises at least one security element SEALS-SE (3), wherein the security element SEALS-SE (3) for the storage, division and queries or transmission of E - Values (4, 4 *) with binding ie final, also with a device (2) without security element SE and without internet connection at the time of the polling / transmission process, the terminal (5) and the device (2) at the time of a polling / transmission

Transfer process for a mandatory completion of the query / transfer process must not be connected to the control body (7) and thus can be offline.

In a further particularly preferred embodiment of the system (1) according to the invention, the E value (4) is present as E value (4 *), the E value (4 *) being at least one load token TL (41). and, at the latest after a first query / transfer process, also comprises at least one donation token TS (42) different from the load token TL (41). In addition, the terminal (5) comprises at least one security element SEALS-SE (3), wherein the terminal (5) and the device (2) at the time of a query /

In addition, if the E value (4, 4 *) represents e-money, the controlling body (7) according to the invention does not include a server.

In the inventive system (1) both secure and insecure mobile devices (2) can be used. Secure devices (2) are devices (2) which contain a security element SE of type 2 or type 3 (see Table D), which is used for the secure storage, division and transmission of E values (4, 4 *, 4 **) and is therefore available for offline transmission of E-values (4, 4 *, 4 **) and released for use by third parties. Insecure devices (2) accordingly have no suitable security element SE, resp. the existing suitable security element SE is not available for use. According to the invention, the system (1) also includes a system in which essentially only mobile devices (2, 2 ") are used which have a security element SE for the secure storage and / or transmission of E values (4, 4") *, 4 **) and thus are considered as safe mobile devices, as long as in the system (1) also insecure mobile devices (2, 2 ") that no security element SE for the secure storage, division and transmission of e-values (4 , 4 *, 4 **), E-values (4, 4 *, 4 **) can be transmitted securely from a mobile device (2, 2 ") to a terminal (5)

With the inventive system (1) is in transmitting the E value (4, 4 *) from the device (2) to the terminal (5) in all cases, especially if both the device (2) as well as the terminal (5) offline, an unconditional and binding, ie final, completion of the polling / transmission process. In the case of a payment transaction, this results in an electronic money transfer with unconditional settlement, hereinafter referred to as settlement, with final effect. When interrogating or transmitting E-values (4, 4 *, 4 **) as identification and / or material value, which do not represent e-money, this results in the interrogation and / or transmission of the respective e-value (4, 4 * , 4 **). In other words, if the E-value (4, 4 *, 4 **) represents a tangible asset or E-money, the transferred E-value (4, 4 *) becomes the property of the owner of the mobile device (2) Owner resp. authorized user of the terminal (5). If the E value (4, 4 *, 4 **) represents an identification, electronic data are sent to the requested E value (4, 4 *, 4 **) as well as to the location, which is indicated by device (2) and the

Terminal (5) can be defined, the chronology and, if necessary, the timing of the query from the owner of the mobile device (2) conclusive and binding to the owner resp. authorized user of the terminal (5). Both the transmitted E value (4, 4 *, 4 **) as well as the requested information on the E value (4, 4 *, 4 **) are unique, undistinguishable, verifiable and traceable. In a preferred embodiment, the system (1) comprises secure payment with any e-money (4), including cryptocurrencies, e-money

(4) are preferred in the form of local currencies. Thus, e-money (4) in this embodiment comprises in particular the E value (4 *) according to the invention and used according to the invention in the form of e-money and e-money in the form of national currencies, which is stored for example on prepaid cards. In this case, the system (1) in this embodiment does not include a server as the control organs (7)

In a particularly preferred embodiment, the E value (4) used in the inventive system (1) is preferably the E value (4 ^** ) according to the invention and / or the E value (4 *) used according to the invention.

The secure interrogation and / or transmission of at least one E value (4, 4 *, 4 **) in the system (1) according to the invention and with the methods according to the invention is preferably carried out without contact, ie. that a radio link between the device (2) and / or the smart card (6) with the terminal (5) is necessary.

If the value (4, 4 *, 4 **) represents a material value, the user first transfers a value via a terminal with the system (1) according to the invention

(5) on the device (2), where it is stored as E value (4, 4 *, 4 **).

If the value (4, 4 *) represents money, the user with the system (1) typically transfers money to the device (2) via a charging station or bank account, where it is stored as E value (4, 4 *) in the form of E-money (4, 4 *) is saved. Paper money, which is given for example in a charging station, and book money, which is transferred from a bank account to the device (2) is, respectively, by the operator of the charging station. from the financial institution, in which the bank account created, transferred to a pool account. Its equivalent is stored as e-money (4, 4 *) on the device (2) or the smart card (6). If necessary, electronic money (4, 4 ^* ) stored on the device (2) can also be transferred further to a smartcard (6). The pool account typically has no knowledge of the e-money (4, 4 *) accounts on the individual devices (2, 2 ") and is not informed about the individual transfer transactions. Moreover, it has no significance for the implementation of a final settlement, ie a binding conclusion. The book or paper money on the pool account belongs, for example, to the operator of the charging station or a financial institution, but not to the owner of the device (2) and thus the E value (4, 4 *). The pool account is also not relevant to a payment process. If the E value (4, 4 *, 4 **) is not E-money, typically no pool account is needed. If now - if the E-value (4, 4 *) e-money is - paid with e-money by means of device (2), the value of the purchased goods is the e-money (4) on the device (2) subtracted and the terminal (5) resp. the attached to the terminal (5) resp. connected cash register - and thus the seller - credited. The information for this transfer, ie the payment process, is transmitted to the control body (7), which can then cause the amount credited to the seller at the cash register to be transferred from the pool account, for example, as book money to the bank account of the seller. In addition, for example, the corresponding amount of e-money on the terminal (5) is subtracted, resp. destroyed, ie deleted. These steps convert e-money (4) back into money, especially book-money.

The terminal (5) need not have a direct connection to the control body (7), in particular, the terminal (5) even at the time of a query / transfer process, regardless of whether it is connected to a cash register or not, not directly with the control body (7) be connected and thus can be offline. However, since the terminal (5) can communicate with the device (2), for example by means of a short-range radio connection such as NFC, and the device (2) can communicate with the control device (7) again by means of a data network connection, the information is transferred from the Terminal (5) via the device (2) to the control body (7) forwarded. If, at the time and / or location of the query / transmission process, neither the terminal (5) nor the device (2) are connected to the control device (7), ie if both the terminal (5) and the device (2) are offline, the information on the query / transfer process of the terminal (5), for example, by means of NFC to the device (2) are transmitted, but not necessarily from the device (2) to the control body (7) and not necessarily from the terminal (5) to the control body (7). However, this information can be transmitted from the device (2) to the control device (7) at a later point in time, ie when the device (2) can re-establish a connection with the control device (7) and is therefore online.

In another preferred embodiment of the system (1), the terminal (5) and the control unit (7) need not have either a direct or an indirect, for example via a device (2, 2 "), data network connection at the time and place of the payment transaction ,

The device (2), (2 ') and the devices (2 ")

The device (2) of the system (1) according to the invention and of the method according to the invention is a mobile device (2) with or without security element SE for the secure storage and / or transmission of E values. In other words, the device (2) can be a safe or unsafe device (2). As a mobile device, the device (2) is a portable device that is functional even without a fixed connection to an installation. The device (2) optionally comprises software, ie, for example, an app with which the stored on the device (2) E value (4, 4 *, 4 **) is managed.

Insecure devices (2), (2 ") are devices (2) which have no security element SE for safe storage and / or transmission of an E-value (4, 4 *, 4 **) and are released for use by third parties is, ie Insecure devices (2), (2 ") comprise no security element SE or only a security element SE of type 1, which only allows the storage of the cryptographic key and private data, such as credit card details, and to protect the stored money from theft , z. B. by means of a malicious software, can be used (see also Table D). Thus, an insecure mobile device (2) is a mobile device in which E-values (4, 4 *, 4 **) and software are neither securely stored nor protected against unauthorized access because the insecure device (2) is not suitable and / or or available hardware.

Insecure devices (2), (2 ") according to the invention also apply mobile phones of the newer generation, in which a security element SE is installed, for example, to securely store credit card data. Such security elements SE are usually security elements of type 1 and thus can not be used for secure cashless storage, sharing and querying or transmission of E-values (4, 4 *, 4 **).

According to the invention, the term device (2) also encompasses a device (2 ') which is extended by a security element SEALS-SE (3) and optionally by a software. By this extension, the device (2 ') forms a terminal (5). Thus, the device (2 ') is considered a safe device (2). The plurality of devices (2 ") comprise a plurality of different devices (2) which typically belong to different users who do not need to be in contact with each other. In a preferred embodiment of the inventive system (1) and the inventive method for forgery-proof storage, sharing and querying or transmitting E-values (4, 4 *, 4 **) communicates

- The device (2) with other devices (2 ', 2 ") and / or the control body (7) with a data network connection and / or a

TCP / IP connection, and / or

- The device (2) and the terminal (5) with each other by means of i) short-range radio link, also called short-range radio transceiver or near-field radio transceiver, such as RFID, NFC, Bluetooth, Bluetooth Low Energy (BLE) or WiFi, ii) contact connection such as USB or Firewire, iii) optical connection such as IR, IRDA or NIR, iv) acoustic connection or v) data networks such as TCP / IP.

Such suitable communication connections are known to the person skilled in the art.

Suitable devices (2, 2 ', 2 ") are commercially available and known in the art.

In one embodiment, the device (2) comprises at least

a processor,

- a memory,

- a power supply,

- if applicable, a display and / or an input field,

- If necessary, a mobile radio transceiver, WLAN transceiver and / or another transmitting / receiving unit for establishing contact with the control body (7), as well as - A connection for the data transfer between the device (2) and the terminal (5), in particular a short-range radio transceiver, a contact-type connection, an optical connection, an acoustic connection and / or a data network connection. If the device (2) is a mobile device provided specifically for the system (1), this embodiment represents the preferred embodiment of the device (2).

Suitable device components such as mobile transceivers and short-range radio transceivers for contacting the control organ (7) or the terminal (5) are known in the art and commercially available.

The security element SEALS-SE (3)

Under the term security element, i. Security element SE, according to the invention a chip understood, which allows any operations, including cryptographic operations in a secure environment, and which includes a secure key and data storage.

In a preferred embodiment, the security element SE represents a security element SE of the type 1, 2 or 3 and is installed directly in the device (2) and / or a plurality of devices (2 "). The security element SEALS-SE (3) used according to the invention is a security element SE of type 3 (see Table D) with specific cryptographic capabilities which locally enable a binding conclusion of a query / transfer process, for example a final settlement of a payment transaction, even if the Device (2) and the terminal (5) are offline. In addition, the security element SEALS-SE (3) is suitable for storing and transmitting E-values (4, 4 *) with binding conclusion also with a device (2) without security element SE and without Internet connection at the time of the inquiry / transfer process. The abbreviation SEALS-SE stands for Secure E-value Accounting & Local Settlement - Secure Element.

Table D: Definition of security elements SE of type 1, type 2 and type

3. The safety element type 3 corresponds to the safety element SEALS-SE (3). The term accounting refers to the management of identifications, pseudonyms and / or signatures, and the term settlement refers to a binding conclusion of a transmission process.

a) A security element SE of type 1 allows the secure storage of the cryptographic key and data, such as credit card details.

b) In addition to storing the cryptographic key and data, a security element SE of type 2 additionally allows the secure storage of E values (4). c) A security element SE of type 3, in addition to the capabilities of a security element SE of type 2, also allows the storage of E values (4, 4 *, 4 **) in a device without security element SE, ie device (2) , and the transferring of E values (4) from a device without security element SE, for example device (2), to a terminal, ie terminal (5), whereby only the terminal (5) necessarily requires a security element SE of type 3. A suitable security element SE is the security element SEALS-SE. In addition, the security element type 3 allows the settlement of the request / transfer process, even if the device (2) and the terminal (5) are offline.

Safety elements SE of type 1, type 2 and type 3 are commercially available.

The security element SEALS-SE (3), hereinafter also referred to as security element (3), SEALS-SE (3) or security element SEALS-SE, is suitable both for secure storage, i. Storage of E-values (4, 4 *, 4 **) as well as for the safe interrogation and / or transmission of E-values (4,

4 *, 4 **) from one device to another device with a final settlement, whereby no Internet connection is necessary for the final settlement at the time of the payment transaction with the security element SEALS-SE (3). If a device, for example a terminal (5), has such a security element SEALS-SE (3), because of the capabilities of the security element SEALS-SE (3), the other device can be an unsafe device (2) without specific security functions.

Thus, the security element SEALS-SE (3) is particularly suitable for the safe storage of E values (4, 4 *, 4 **) on a device (2) and the secure transmission of E values (4, 4 *, 4 **), especially for offline Transfers of E-values (4, 4 *, 4 **) from a device (2) to a terminal (5) and / or from a smartcard (6) at a terminal (5). This payment process can usually be done without contact. The security element SEALS-SE (3) of the system (1) according to the invention is also a registered and not forfeitable security element SE, which is qualified in such a way that, without the additional authorization by a superordinate control point - and thus offline - an e-value Transfer with binding conclusion, and thus, for example, an e-money payment process with unconditional settlement with a final effect, can be performed. In the inventive system (1), the security element SEALS-SE (3) is responsible for security-related tasks in query / transfer operations between device (2) and terminal (5) and between smart card (6) and terminal (5). The safety element SEALS-SE (3) protects the E-value (4, 4 *, 4 **) against misuse, unwanted external influences and / or manipulation. The security element SEALS-SE (3) can be based on a conventional security element SE, which, for example, is processed with special software into a SEALS-SE (3). The person skilled in the art can produce such security elements SEALS-SE (3) for example by means of suitable software and distinguish them from other security elements.

The security element SEALS-SE (3) thus differs from a conventional, commercially available security element SE of type 1 or type 2 in such a way that the security element SEALS-SE (3) for the E value transmission is provided by one device (2). is designed for a terminal (5) and / or vice versa, whereby only the terminal (5) must be equipped with a corresponding SEALS SE and not the device (2), and the E value (4, 4 *, 4 * *) on the device (2) - without protection by a local security element SE - is stored in the conventional non-volatile data memory. The security element SEALS-SE (3) in the terminal (5) In addition to the settlement, it also assumes the task of abuse and forgery testing. The SEALS-SE (3) security element can detect and prevent a double use of the same E value (4) to a very high degree, eg due to a system backup. Thus, the security element SEALS-SE (3) has much higher cryptographic properties than a conventional, commercially available security element SE of type 1 or type 2.

Consequently, the security element SEALS-SE (3) represents a security element SE of type 3 and, in addition to storing data such as cryptographic keys, i. Key, and credit card details (type 1) and storing E-values (4, 4 *, 4 **) (type 2) additionally transferring E-values (4, 4 *, 4 **) between device (2) and terminal, ie Terminal (5).

The security element SEALS-SE (3) used according to the invention thus differs significantly from security elements SE, which are partly used in mobile phones of the latest generation (security elements of type 1). Because such, commercially available security elements SE are due to their nature, for example, due to the software contained in the security elements, not for secure offline transmission of E values (4, 4 *, 4 **).

The security-relevant tasks performed by the security element SEALS-SE (3) used according to the invention typically include the authentication of the device (2), possibly the substitution of the control device (7) in the terminal (5), for example by verification and / or signing of the donation and load -Tokens, as well as the detection of certain fraud attempts at the terminal, such as double or multiple payment with only one set off. In addition, the security element SEALS-SE (3) can advantageously generate signatures and check the load tokens TL (41) and / or donate tokens TS (42) caches, generate new e-value tokens (41, 42), and prevent certain tampering and fraud attempts. The security element SEALS-SE (3) also monitors which asset is transferred from the device (2) to the terminal (5). Furthermore, the SEALS-SE (3) provides tools for telegram encryption.

The safety element SEALS-SE (3) can not obtain the E value (4, 4 *, 4 **) obtained by the device (2) in the terminal (5) without the participation of an E-value (4, 4 *, 4 * *) of a device (2, 2 "). Also, the security element SEALS-SE (3) arbitrates in the system (1), represents the interests of the system (1), provides protection against fraud, and protects the integrity of the system (1). In a preferred embodiment of the system (FIG. 1), the safety element SEALS-SE (3) is used in each terminal (5). As a result, in the inventive system (1) with mobile devices (2, 2 ") without security element, i. also with unsafe devices (2, 2 "), query / transfer operations, such as payment transactions, are performed.

In another preferred embodiment, the security element SEALS-SE (3) in the terminal (5) represents a physical security element and advantageously comprises a processor with cryptographic suitability.

The terminal (5) According to the invention, terminal (5) is understood to mean any transfer station with which an E value (4, 4 *, 4 **), or a part thereof, of a Device (2, 2 ") queried, to which an E value (4, 4 *, 4 **), or a part thereof from a device (2, 2") and / or of which an E value (4 , 4 *, 4 **), or part of it, can be transferred to a device (2, 2 "). The terminal (5) is a mobile or stationary terminal. Non-limiting examples of mobile terminals include police terminals for ticket control, customs for personal, animal and / or property identification, veterinarians for the identification of pets and / or breeding animals, for the examination of the disease history of animals, for counting systems for later billing, measuring systems for later billing, water meters, electricity meters and validation terminals, for example for public transport inspectors. Non-limiting examples of fixed terminals include terminals at passport controls at airports, passport checks in security areas and company premises, for tickets for debiting such as ticket at stops, ticket for cinema, theater, museums or opera, event ticket, point of sale (POS ) such as sales offices, and / or a terminal for road pricing.

If the E value represents (4, 4 *, 4 **) e-money, the terminal (5) is typically an arbitrary point-of-sale (POS), in which with a device (2, 2 ") Payment process with e-money (4, 4 *, 4 **) can be performed.

If the E value (4, 4 *, 4 **) represents an identification, i. an electronic identification, the terminal (5) is typically an identification device and / or an opening / closing system, for example in high-security systems such as nuclear power plants, airports, police and / or customs.

If the E value (4, 4 *, 4 **) represents a physical value in the form of an electronic ticket for debiting, the terminal (5) is typically a debiting device. This allows the user, if the system allows it, to Devaluation within a defined time - for example, during a movie in the cinema - as often as possible in and out again.

If the E value (4, 4 *, 4 **) represents a tangible asset in the form of e-voting documents such as electronic voting and / or voting documents, the terminal (5) is typically an electronic ballot box, in which the e-voting Value (4, 4 *, 4 **) can be transmitted from the device (2), ie can be agreed and / or elected. Such an electronic ballot box can be arranged, for example, in the election office and / or in publicly accessible locations, for example mailboxes.

If the E-value (4, 4 *, 4 **) represents a physical value in the form of an electronic measuring and / or counting system, as for example in smart metering or road pricing systems, the terminal (5) is typically the measuring device on-site, wherein the mobile device (2) may comprise the memory which records the measured data.

If an E value (4 **) according to the invention is used in the system (1) according to the invention, an interrogation / transmission process can be carried out on a terminal (5) with or without security element SEALS-SE. For increased security of the system (1), however, it is generally advantageous if the interrogation / transmission process with E value (4 **) is carried out at a terminal (5) with a security element SEALS-SE. As a result, even with a device (2) or a multiplicity of devices (2 ") without a security element, a secure interrogation / transmission process at a terminal (5) can take place offline and with binding completion, resp. final settlement.

If, in the system (1) according to the invention, an E value (4 *, 4 **) is not specifically used, but an arbitrary E value (4), the terminal (5) according to the invention comprises a safety element SEALS-SE. This can also be done with a device (2, 2 ") without security element a secure payment process at a terminal (5) offline and with mandatory conclusion, resp. final settlement. The terminal (5), also called transmission terminal or transmission station (5), executes in the inventive system (1) the query / transfer process from the device (2) to the terminal (5), provided that the device (2) the terminal ( 5) gives his consent. Also, the terminal (5) executes the interrogation / transmission process from the terminal (5) to the device (2), provided the terminal (5) gives the device (2) its consent thereto. Consent is given when both the device (2) and the terminal (5) believe that their counterpart is integrity, authenticity and cooperative. Thus, the terminal fulfills the tasks of the transmission process, such as the transfer of an amount from the device to the terminal, start of the product output or service - possibly after creation and transmission of an acknowledgment to the device (2), and possibly scattering the receipts on a variety of devices (2 ") and for transmission to the control body (7). This scattering is preferably carried out until at terminal (5) at least one receipt confirmation has arrived from the control unit (7), which confirms receipt of the acknowledgment by the control unit (7).

The terminal (5) also stores completed polling / transmission operations for billing and control purposes, and optionally sends the stored polling / transmission operations as transaction telegrams via the device (2) and / or the plurality of devices (2 "). to the control body (7).

The term terminal (5) preferably comprises a processor, a memory and / or a software. The terminal is preferably operated via a user interface and / or controlled via a machine interface. The Terminal (5) is - if the E value (4, 4 *, 4 **) in the form of e-money (4 *, 4 *, 4 **) is present - typically also part of a cash register or connected to a cash register , Suitable terminals (5) are commercially available and known in the art.

The terminal (5) of the system (1) according to the invention and of the method according to the invention comprises at least one security element SEALS-SE (3). The security element SEALS-SE (3) verifies, at the beginning of a polling / transmission process, whether the E value (4, 4 *, 4 **) stored on the device (2) is trustworthy and consistent, i. error-free, is and recognizes and prevents the locally recognizable fraud attempts. If the E value is present as an E value (4 *, 4 **), then at least the relevant signatures of the most recent load tokens TL (41) and / or donation tokens TS (42) are recalculated and after token duplicates, and thus double transfers, such as double payments, so-called "double-spends" sought. After the query / transfer process at the terminal (5) typically confirmed the security element SEALS SE (3) in the terminal (5) the validity of the load token TL (41) and / or the donation token TS (42) with a signature ie it provides the token with a complicated, unambiguously related bit pattern whose originality and authenticity can be essentially recognized and validated by anyone, but which can only be created by the security element SEALS-SE (3) itself and the control body (7).

Table E: Influence of different security elements SE in

Credit cards and mobile devices (2) using the example of electronic money (4, 4 *, 4 **) as E value (4, 4 *, 4 **). The storage medium is thereby the carrier of E-values, for example, in G-money to the means of payment with which at the terminal (5) query / transfer operations - and thus payment transactions, with e-money (4, 4 *, 4 **) can be performed. All listed carriers of as E-values allow with the corresponding security element SE at the terminal (5), for example, the loading, ie posting, and the debiting of assets and electronic money (4, 4 *, 4 **) in offline query - / transmission times of less than 5 seconds and a final offline settlement. The information applies analogously to other E values (4, 4 *, 4 **) and their query / transmission types.

a) See Table A.

b) See Tables A, B, C and D for SE safety elements type 1, 2 and 3. c) See Tables A, B and C.

d) Since the security element SE in the terminal (5) is a security element of type 1, which no e-value (4, 4 *, 4 **) and thus can not store e-money, no e-money from the prepaid card be moved to the terminal (5), ie it can only be carried out a devaluation of the prepaid card as a whole. Table E clearly shows that in the payment means of the present invention, ie in the device (2), no security element SE must be present and still a final settlement of the payment process can be achieved. In addition, the query / transmission time for an offline payment remains at most in the low second range. According to the invention, this is essentially achieved by equipping the terminal (5) with a security element SE of type 3, ie a security element SEALS-SE (3).

Thus, in the terminal (5), the security element SEALS-SE (3) used according to the invention and used according to the invention makes it possible in particular also with an insecure device (2) at a terminal (5) to use a high security standard by means of E values (4 .

4 *, 4 **), and thus also by e-money (4, 4 *) can be paid, even if both the device (2) as well as the terminal (5) at the time of a query / transfer process with no connection a secure control device (7) and thus are offline.

Thus, according to the invention, the terminal (5) does not need to be connected to the control device (7) at the time of an interrogation / transmission process and may be offline, even permanently. If the E value represents (4, 4 *) e-money, the terminal (5) is typically a point-of-sale, in particular a vending machine, ie a vending machine, such as a beverage, coffee, coin , Newspaper, stamp, snack, parking ticket and / or cigarette machine. Suitable terminals (5) are known to the person skilled in the art. If the E value (4, 4 *, 4 **) represents a different E value from E-money, the terminal (5) is preferably a machine control, a monitoring device, an operating terminal, a parking garage barrier, a door control Turnstile, an access barrier, a debiting station, a road-pricing system, a counting and / or measuring station and / or any other device which, on the basis of its task, performs a check, receipt, transfer and / or issue of Values (4, 4 *, 4 **).

The terminal (5) may be connected to a cash register or the terminal (5) may be integrated into a cash register. This is particularly advantageous if the E value (4, 4 *) E-money and / or the E value (4, 4 *, 4 **) represents a voucher and / or voucher. Neither the terminal (5) nor the cash register must be connected to a control device (7) at any time, not even during a query / transmission process. Thus, the terminal (5) - and the cash register, if available - at no time have a telephone and / or Internet connection and it can be permanently offline.

In a particularly preferred embodiment, the terminal (5) comprises a short-range radio transceiver, a contact-type connection, an optical connection, an acoustic connection and / or a data network connection for the data transfer between the device (2) and the terminal (5).

The terminal (5) preferably comprises at least

a processor,

- a memory,

- a power supply,

a user interface, in particular a touch display, and / or a machine interface, such as a USB port, a short-range radio transceiver, a contact-type connection, an optical connection, an acoustic connection and / or a data network connection for the data transfer between the device (2) and the terminal (5), as well as

- the safety element SEALS-SE (3).

In another preferred embodiment, the terminal (5) of the system (1) according to the invention is formed by a device (2 '), wherein the device (2') comprises a device (2) which surrounds a safety element SEALSSE (3). and possibly extended by software and / or hardware. In this case, the security element SEALS-SE (3) can be permanently integrated in the device (2 ') and / or connected externally to the device (2'). This embodiment is particularly advantageous when a mobile multifunction terminal (5) is desired, which for example also has all the advantages of a device (2 '). Such a mobile terminal (5) comprising a device (2 ') with security element SEALS-SE (3) can be extremely advantageous for cashless street and / or beach sales, for example.

The Smartcard (6)

The system (1) according to the invention can comprise as device (2) a smartcard (6). The E value (4, 4 *, 4 **) can be any desired E value (4, 4 *, 4 **) according to the present invention.

The smart card (6) is typically a conventional, commercially available smart card, such as a prepaid card. It includes a security element SE of type 2 for the safe storage, division as well as retrieval and / or transmission of E-values (4, 4 *, 4 **) to the to ensure necessary security against counterfeiting and misuse. Suitable smart cards (6) are known to the person skilled in the art.

According to the invention, the smart card (6) is considered secure if it has a security element of type 2 or higher and is released for use by third parties.

The E value (4. 4 *.

The term E value (4) stands for electronically mapped values, i. E-values, in any form, especially in known forms. Such E-values (4) are typically cryptographically encrypted to protect them from unlawful steps such as copying and / or robbery.

The term E value (4 **) stands for the E value according to the invention as such and is suitable for tamper-proof storage, sharing and interrogation or transmission of E values, in particular using the system (1). The E value (4 **) represents an electronic identification and / or an electronic asset and comprises at least one load token (41) and after a first query / transfer process also at least one of the load token TL different donation token (42). The E value (4 **) is not e-money. The E value (4 **) may also include additional tokens, with the additional tokens capturing and / or transmitting other aspects of a transmission. The E value (4 **) - or parts thereof - are stored on the device (2), wherein the device (2) is identical to the device (2) used in the system (1) according to the invention.

The term E value (4 *) stands for the E value used according to the invention in system (1), comprising a load token (41) and after a first interrogation / transmission process also at least one of the load token TL different donation token (42). The E value (4 *) includes the inventive E value (4 **) as well as E money, provided that this is a load token (41) and after a first payment process also at least one different from the load token TL Spend Token (42). The E value (4 *) may also include additional tokens, where the further tokens may capture and / or convey other aspects of a transmission.

The E value (4, 4 ^* , 4 ^** ) surprisingly has many different uses in electronic form with very high counterfeit security and traceability and can be used very universally. The system (1) and the device (2) may have a specific E value (4, 4 *, 4 **) or a multiplicity of different E values (4, 4 *, 4 **). According to the invention, the E value (4, 4 *, 4 **) is an identification, a material value or electronic money, ie e-money. The identification of the E value (4, 4 *, 4 **) preferably represents a person identification, an animal identification or a fact identification

- The person identification, also called person information, preferably selected from the group consisting of one

Identity card, passport, identity card, event access badge, security area, company premises and ticket;

- The animal identification, also called animal information, preferably selected from the group consisting of an identification of a

Tiers, pets, breeding animals, fattening animals and zoo animals;

- the item identification, also referred to as factual information, preferably selected from the group consisting of an identification of a valuable item such as diamonds, jewelery, watches, vehicle, car, motor bike, bicycle, ship, yacht, boat, plane, light aircraft and security; such as - the material value preferably selected from the group consisting of a ticket for debiting, admission ticket, travel ticket, multiple ticket as a Mehrfahrticket public transport, an event ticket, vouchers and / or loyalty points, e-voting documents, voting documents, election documents, counting system for later settlement,

Measuring system for later billing, road pricing tag, water meter and electricity meter. The value in kind typically represents the value of a thing or a service. Tickets for debiting may be partially or completely canceled before or after the provision of the service. E-values of counting and / or measuring systems for later offsetting, for example in the form of road pricing, a water and / or electricity meter are typically summed up at the beginning of the measured size and periodically charged to the user.

In addition, the E value (4, 4 *) can also be electronic money, i. E-money, in this embodiment, the control device (7) is not a server, and preferably does not include a server.

The person information is typically stored on the insecure device (2), whereby the person advantageously additionally recognizes himself with a PIN code and / or body feature such as fingerprint and / or face recognition. This ensures complete traceability of the person, which is of particular interest in a high-security environment such as nuclear power plants.

The same applies to animal identification and identification. The unambiguous assignment of the device (2) to the animal takes place, for example, with an implanted chip or, on the basis of clear characteristics such as diamonds, by means of exact 3-D data of the diamonds and / or X-ray scan. As a result, for example, the traceability of things can be tracked completely, which is particularly important in valuables of high importance. This is of great interest for diamonds, for example. To identify a diamond, for example, the exact 3-D data of the diamond, the weight, the purity and the number of carats on the device (2) - for example, a smart card (6) - are stored and used as identification (with). If the identification is stored in the form of an E value (4 *, 4 **), these entries are included in the load token TL (41). Whenever the diamond is inspected, for example, at customs or dealers, the diamond can be checked and identified by re-acquiring the 3-D data and querying the data stored on the device (2). In this case, a donation token TS (42) is generated at each query to a terminal (5), which is preferably stored on the device (2) and the terminal (5). In addition, information about the query, for example, the location and / or the time of the query, in the load token TL (41) input. When the diamond is machined, the diamond's identification is then adjusted and changes noted or shared in the load token TL (41). In addition, a donation token TS (42) is regenerated. If the diamond is split, the original load token TL (41) becomes invalid, with each new split diamond having to be assigned a new identity and thus a new load token TL (41). In this case, the original load token TL (41) can be found in the E value (4 *, 4 **) - for example in the new load token TL (41) - to seamlessly document the history of the diamond.

Electronic money (4, 4 ^* ), ie e-money (4, 4 ^* ), is a known, specific and preferred embodiment of E values (4, 4 *). E-money (4, 4 *) is also known by the terms e-cash, computer money, digital money and cyber money. In addition to money from central banks, also called paper money, and the book money of commercial banks, e-money is a third, newer manifestation of money. In this case, e-money (4, 4 *) is preferably used in the form of national currencies, which can be stored, for example, on prepaid cards. The e-money (4, 4 *) can also be in the form of cryptocurrencies.

If in the system (1) according to the invention at least one E value (4, 4 *, 4 **) is transferred to a mobile device (2), the E value (4, 4 *, 4 **) is stored in the memory of the mobile Device (2) stored. During a polling / transmission process, the E value (4, 4 *, 4 **) - or part of it - is transferred from the device (2) to the terminal (5). Thus, the owner of the E value (4, 4 *, 4 **) is also the owner of the mobile device (2) resp. of the terminal (5). In the system (1) according to the invention, it is therefore not necessary for the owner of the E value (4, 4 *, 4 **) to be entered in a pool account, in a register or otherwise.

The E value (4, 4 *, 4 **) is stored on the device (2) and managed with software. If the E value comprises a load token TL (41) and a donation token TS (42) and thus represents an E value (4 *, 4 **), the term "on the device (2) stored E value "understood that at least the load token TL (41) and preferably also the donation token TS (42) is stored on the device (2).

The storage of the E value (4, 4 *, 4 **) on the device (2) is preferably carried out in a secure memory, for example, a so-called electronic purse, also e-wallet or e-purse, and is independent, whether the e-value (4, 4 *, 4 *) E-money (4, 4 *) is another object, such as a ticket, a counting and / or measuring station, or an identification. If the E value represents (4, 4 *) e-money (4, 4 *), the e-money can be stored in any currency. It is also possible to use e-money (4, 4 *) in to store different currencies and, where appropriate, to pay with the corresponding currency.

The inventive and / or inventively used E value (4 ^* , 4 **) for safe storage, sharing and querying or transmitting in

System (1) with the device (2), in particular electronic money (4 *) for secure cashless payment with an insecure device (2) to a terminal (5), comprises at least one load token TL (41) and after a first query / transfer process and at least one of the load token TL (41) different donation token TS (42). In this case, the load token TL (41) differs from the donation token TS (42) not only in the content of the tokens but the type of information contained in the load token TL (41) differs from the information which are contained in the donation token TS (42), clearly.

The load token TL (41) of the E value (4 *, 4 **) is stored on the device (2) and contains electronic information on the E value (4 **). In addition, the load token TL (41) preferably also contains information about the device (2), respectively. to the owner of the device (2) and to the creation of the E-value (4 *, 4 **) on the device (2).

The donation token TS (42) of the E-value (4 *, 4 **) is stored on the device (2) and / or terminal (5) and includes electronic information on the query / transfer process of the device (2 stored E value (4 **) and thus represents a query operation of the E value (4 **) on the device (2) by the terminal (5), a transfer process of the E value (4 **), or a Part of it, from the device (2) to the terminal (5), or a transfer process of the E value (4 **), or a part thereof, from the terminal (5) to the device (2). In this case, a separate donation token TS (42) is created for each individual device (2) / terminal (5) combination. In the case of a renewed inquiry / transmission process of the same device (2) / terminal (5) - Combine the donation token TS (42) is supplemented by information for the renewed query / transfer process, or created a new donation token TS (42). If the E value (4 *, 4 **) represents a material value, the current total value of the material value of the E value stored on the device (2) (4 *, 4 **) is represented by the sum of the load tokens TL (41) of the tangible asset less the sum of the donation tokens TS (42) of the tangible asset. In this case, the at least one load token TL (41) and optionally at least one donation token TS (42) preferably contain at least one piece of information which allows a chronological order. Such information may be, for example, a timestamp, a token index and / or a transaction counter.

In a preferred embodiment, the E value (4 *, 4 **) stored on the device (2) after transmission operations at a plurality of terminals (5) for each E value (4 *, 4 **) i) comprises at least a load token (41) and ii) for each terminal (5) another donation token (42) and thus a plurality of donation tokens (42). In one embodiment, the donation token TS (42) of the E value (4 *, 4 **) preferably used in the system (1) and / or the inventive E value (4 **) is replaced by a transfer token TT (421) and a termination token TR (422). The transfer token TT (421) represents an amount, ie a value in the form of a value for a power, which is transferred from a device (2) to a terminal (5) and / or from a terminal (5) to a device (2 ) was transferred. The scheduling token TR (422) represents a binding completed polling / transmission process, ie information on the information retrieved at the terminal (5), transferred assets or e-money, and / or services rendered. In this embodiment, the transmission of the E value to the receiver is disconnected from the binding conclusion. Surprisingly, this increases the Robustness against connection interruptions between terminal (5) and device (2) and the value slip, that is lost or double credit of one or more E values is impossible. For the reversal of E-values (4 *, 4 **) into, for example, book money, both the corresponding transfer token TT (421) and the termination token TR (422) are now required to prevent the smurf. Thus, the term donation token TS (42) also includes the two terms transfer token TT (421) and termination token TR (422). The at least one load token TL (41) of the E value (4 *, 4 **) is stored on the device (2) and all load tokens TL (41) of the E value (4 *, 4 ** ) on the device (2) together comprise the sum of the credits of the E value stored on the device (2) (4 *, 4 **) in the form of tangible or electronic money, and the electronic identity as such, supplemented by the sum of relevant information about each query operation.

The optionally at least one donation token TS (42) of the E value (4 ^* , 4 **) is stored on the device (2) and all donation tokens TS (42) of the E value (4 *, 4 * *) on the device (2) together comprise the sum of the payments of the value stored on the device (2) E value (4 *, 4 **) for a tangible asset or an identification.

In one embodiment of the E value (4 *, 4 **), a load token TL (41) comprises only the information about the E value (4 *, 4 **) as such, and a donation token TS (42 ) only information about a query and / or transmission, such as a payment or passing a person through an electronic person control. The individual load tokens TL (41) and individual donation tokens TS (42) of the current and previous query / transfer processes are arranged in different chains, so-called chains, which serve different purposes: For example, a chain may comprise all load tokens TL (41) and donation tokens TS (42) from a single device (2), thus forming a so-called value chain CV of the device (2), whereby the credit of a device ( 2) can be displayed.

- Another, second chain can, for example, from all donations

Token TS (42) from a single device (2) with a single, specific terminal (5) form a so-called transfer chain CT. As a result, such a transfer chain CT represents all the E values (4 *, 4 **) transmitted from the device (2) to the specific terminal (5).

- Another, third chain, for example, from all donation tokens TS (42) of all devices (2, 2 ") with a single terminal (5) form a so-called POS-chain CP. As a result, such a POS chain CP represents all the relevant information requested by the terminal (5) for identification and at the time of polling, and / or all tangible and / or electronic money transferred to the terminal (5), for example all received by the terminal (5) E-money (4 ^* ). In addition, with the load tokens TL (41) and / or donation tokens TS (42) also other appropriate chains can be formed.

In another embodiment, a chain optionally includes at least one load token TL (41) and optionally at least one donation token TS (42). The sum of all credits of the load tokens TL (41) minus the sum of all debits of the donation token TS (42), for example, all payments forms the - in the case of e-money monetary - nominal value of a chain. With a new credit note, the entire previous chain is appended in highly compressed form to the new load token TL (41) or new donation token TS (42). Thus, the latest, and thus most recent, token (41, 42) also includes the history of all previous query / transfer operations as a so-called hash. Such chains with compressed history are called hash chains or hash chains. These Embodiment is particularly suitable for tangible assets and electronic money as well as for the detection of an identification.

In a preferred embodiment, on the device (2), for each E-value (4, 4 *, 4 **) a separate, dedicated, i. Specially designed, E value

(4, 4 *, 4 **) available. In this case, each E value (4 *, 4 **) comprises at least one load token TL (41) and, after a first query / transfer process, at least one donation token TS (42) different from the load token TL (41). , wherein in the order of all tokens of the respective E value (4 ^* , 4 ^** ), the history of the query / transfer operations of the E value (4 ^* , 4 ^** ) is mapped.

In a preferred embodiment of the inventive system (1) and the inventive E value (4 **), if the E value (4 *, 4 **) - represents a person identification, the load token TL (41) a electronic identity, also known as means of identification, includes personal information such as face recognition, fingerprint, date of birth, place of birth, gender, weight, passport number or details of the person's illness,

- an animal identification, the load token TL (41) is an electronic identity including animal information such as the species, breed, sex, weight, animal identification, vaccination certificate or competition prize won,

represents a property identification, the load token TL (41) is an electronic identity comprising owner information, acquisition,

Weight, shape, type, origin, modification or specific characterization of the item, such as the specific X-ray diffraction of a diamond,

represents a tangible value, the load token TL (41) includes electronic information on the tangible asset and its history, and / or if the E value (4 *) represents e-money, the load token TL (41) comprises at least the amount of credit of the e-money stored on the device (2). In another preferred embodiment of the system (1) according to the invention and the E value (4 **) according to the invention, if the E value (4 *, 4 **)

a person identification represents, the donation token TS (42) an electronic identification and inquiry proof is comprehensive data for the person identification and inquiry of the same at

Terminal (5) and information on the time, place or by whom the request is made, and, if

- represents an animal identification, the donation token TS (42) is an electronic identification and interrogation certificate including information on animal identification and query the same at the terminal (5) and information on the time, place or by whom the query is made,

- represents a property identification, the donation token TS (42) an electronic identification and inquiry proof is comprehensive information on identification and query the same at the terminal (5) and information on the time, place or by whom the query is made, and possibly other information,

represents a tangible value, the donation token TS (42) represents an electronic value of the asset, such as a specific service provision, for example a ticket for debiting; a value of specific, for example, accumulated, tangible assets such as used electricity or water used; and / or in e-voting, for example, a combination of personal identification and material value, i. e. the selected persons or the selected voting question; and or

if the E value (4 *) represents e-money, the donation token TS (42) at least the value of the goods purchased during the payment process / sold goods and possibly further information on the payment process, in particular to the device involved in the payment process (2) and terminal (5), and thus represents a payment process with e-money (4 *) from the device (2) to the terminal (5), wherein the donation token TS (42) at least on the device (2) or

Terminal (5) is stored.

If the E value (4 *, 4 **) represents an identification, the load token TL (41) represents the electronic identity and the donation token TS (42) the proof of identification, whereby at each check on the terminal (5 ) of the proof a donation token TS (42) is generated and the means of verification, ie Terminal (5) passes. In this case, advantageously, the history of the checks - possibly in a reduced form - transferred. With an identification proof, a donation token TS (42) is created, whereby the load token TL (41) and thus the identity is mutated. Any older copy of the identity can never be used again for identification, which is a multiplication, resp. Forgery of an identity impossible. The proof of identification in the form of a donation token (42) in the terminal (5) indisputably proves that the identity was identified at the present terminal (5). It is unfeasible and can be copied as often as you like.

If the E value (4 *, 4 **) represents a material value, for example in the form of a ticket for debiting, the load token TL (41) can display the electronic ticket with all the necessary ticket information. The donation token TS (42) contains the value of a service provision, ie a validation, whereby at each validation a new donation token TS (42) is generated and transmitted to the terminal (5). In this case, advantageously, the history of cancellations - possibly in a reduced form - with transferred. If the E value (4 *, 4 **) represents a material value, for example in the form of a counting and / or measuring system, the load token TL (41) can provide the electronic counting and / or measuring system with all the necessary information for counting and / or measuring system. The donation token TS (42) preferably includes the item or items to be accumulated, typically at each count resp. Measurement a new donation token TS (42) is generated and transmitted to the terminal (5). In this case, advantageously, the history of the checks - possibly in a reduced form - transmitted with the donation token TS (42)

If the E value represents (4 *, 4 **) e-money, the donation token TS (42) represents the monetary value of the item purchased / sold during the interrogation / transfer process, which is stored as E value (4 *, 4 **) is transmitted in the form of the donation token TS (42) from the device (2) to the terminal (5). The monetary value represented in the donation token TS (42) is subtracted from the credit on the device (2) and simultaneously credited to the terminal (5), the credit on the device (2) being stored by the difference of all the devices stored on the device (2) Load token TL (41) and donation token TS (42) is represented and the credit is represented in the terminal (5) by the newly created donation token TS (42).

As a result of this arrangement, the load token TL (41) essentially contains the information about the identification and, in the case of property and electronic money, a credit to the E value (4 *, 4 **) which is preferably stored on the device (2). and the history of the older load tokens TL (41) as a hash, ie in a highly compressed form. And a corresponding donation token TS (42) contains essentially only the information on the most recent query e- / transfer process between the device (2) and a specific terminal (5), as well as the history of the older donation token TS (42 ) as hash, ie in strongly compressed form. This leads to significant improvements, for example in the detection of abuse and - in the case of property and e-money the payment, a faster transmission of the information to the device (2), the plurality of devices (2 ") and to the control body (7), if the latter is present. This leads to the acceleration of the individual transmission processes.

In a preferred embodiment, the E value (4 *) and / or the inventive E value (4 **) preferably used according to the invention are based on a hash chain, wherein at least one hash chain is used comprising at least one load token TL (41) and optionally at least one donation token TS (42).

In a further preferred embodiment, the E value (4 *) and / or the E value (4 ^** ) preferably used according to the invention are based on at least two different hash chains. A first hash chain comprises at least one load token TL (41), possibly the older load tokens (41) as history, and optionally at least one donation token (42). A second hash chain comprises at least one donation token TS (42) of the first hash chain and possibly the older donation tokens (42) as a history.

The subdivision of the E value (4 *) preferably used in the system (1) according to the invention and in the E value (4 **) according to the invention and the E value used in the method according to the invention (4 *, 4 **) in at least two of one another different tokens (41, 42) surprisingly has a number of advantages. In this way, different chains and hash chains can be created. This makes it possible to take inquiry / transfer operations with extremely high security requirements and without slippage offline, which is not possible with today's systems using mobile - typically unsafe - devices alone. In addition, the number of hash-chain elements required for traceability, ie tokens (41, 42), is greatly reduced, allowing much faster processing. In other words, saving, processing, and / or submitting can be done much faster with two independent types of hash chains than if all the information is on a single hash chain. Thus, the query / transfer process is significantly accelerated and it takes less space. In addition, the system (1) becomes much less susceptible to errors such as transmission errors, which in turn increases the security of the system (1). Also, a hash chain, with which the total value of the E value (4 *, 4 **) is represented, can be safely stored on an insecure device, ie for example on the device (2), although the device (2) has no security element, which protects the E value (4 *, 4 **) from unwanted manipulation. This is supported, inter alia, if individual load tokens TL (41) and / or donation tokens TS (42) of the chain (s) stored in the device (2), respectively. Hash-chain also in other chains resp. Hashchains are present. As a result, a manipulation is usually detected already during the transmission attempt and at the latest on the server and immediately corrected, for example by additional load and / or by the device on which a manipulation has been detected in the system (1) is locked.

The Control Body (7) According to the invention, the control organ (7) of the system (1) constitutes a network, a security element SE which is installed directly in the device (2) or in a plurality of devices (2 "), a trusted user base of the device (2 or the plurality of devices (2 "), or a server. In this case, the security element SE preferably provides a security element SE of the type 1, 2 and / or 3, which directly in a device (2) and / or a plurality of

Devices (2 ") is installed, preventing the misuse in the system (1) preventive is suppressed. In this case, the control element (7), if the E value (4, 4 *) e-money is not a server.

If the control device (7) is a safety element SE, which is installed directly in the device (2) or in a plurality of devices (2 "), the device (2) or the multiplicity of devices (2") can function as the control device (7) exercise. If the security element SE is a security element SEALS-SE (3) and integrated in the device (2), the device (2) represents a device (2 '), which can thus perform the function of the control element (7). In order for the device (2, 2 ') or the devices (2 ") to assume the function of the control device (7), it is helpful to store suitable software which is stored on the device (2, 2') or the devices (2") is used.

In a preferred embodiment, when the control device (7) is a network, the network i) comprises a distributed or distributed network, for example a P2P network or a blockchain, wherein the device (2) and / or a part of the devices (2 ") Or all devices (2") can be involved, ii) a sneakernet, ie a snorkelling network in which the telegrams or telegrams arising during the interrogation / transmission process remain in the terminal (s) (5) until they are stored, collected and collected at the terminal (5) via a physical data carrier of an authorized carrier and / or with an answer Or iii) a central or hierarchical network, for example a central network with a terminal (5), a device (2), and / or a device (2 '), a computer wherein the central or hierarchical network, for example can be centralized on the Internet, in a cloud and / or within a company premises.

The control body (7) comprises at least one - in the electronic sense - intelligent unit. The controller (7) i) typically maintains the journal, thus surveying the polling / transmission processes, for example E-money sales and, where appropriate, compensation monitors and detects a possible abuse, ie it is responsible for the so-called fraud detection; ii) typically prevents possible abuse, ie makes so-called fraud prevention; iii) typically allows identity management and awards certificates of validity to the devices (2), which can also be outsourced; iv) typically assigns keys to the security element SEALS-SE (3) or possibly replaces old or corrupted keys in a security element SEALS-SE (3), whereby this task can also be outsourced; and / or v) typically creates new SEALS-SE for new terminals (5), ie does the SEALS-SE issuing, whereby this task can be outsourced if necessary. In this case, the control element (7) carries out one, several or all of these functions, the fraud detection i) and / or the fraud prevention ii) being particularly preferred.

If the system (1) comprises one or more control bodies (7), - if the E value (4, 4 *) represents e-money (4, 4 *) - the control body (s) (7) is not a server and preferably comprises no server. Although the system (1) comprises at least one control device (7), the control device (7) is not necessary for off-line, off-line transmission operations, i. it does not validate a query / transfer process and thus does not participate in the binding completion of the transfer. In other words, if, for example, the E value (4, 4 *) represents e-money (4, 4 *), a payment process can also take place without validation by the control body (7). Thus, the control body (7) does not participate in the final settlement of a payment transaction.

The controller (7) is responsible for monitoring and controlling the interrogation / transmission processes involved in the transmissions, inconsistencies, counterfeiting and misuse of e-values (4, 4 *, 4 **) in the system (1) and, if necessary, take corrective action. If necessary, the controlling body can also revoke the pseudonymity of a user and initiate legal recourse. Thus, the control body (7) is a routing, protocol and monitoring body and is not responsible for the performance of individual online and / or offline query / transmission operations, nor is it responsible for the mandatory completion of the transmission operations. In other words: With the system (1), transmission processes can also be carried out offline and conclusively without the control organ (7). The control organ (7) detects and / or prevents a possible misuse of the system (1), allows the holder of the terminal (5) and the operator of the system (1) access to a transaction journal and can notify the holder of the terminal (5). and quickly enable the operator of the system (1), for example, to correctly exchange e-money (4, 4 *) for book or paper money.

The control body (7) also receives, stores and processes the telegrams received by the devices (2, 2 "), such as donation telegrams, resp. Receipts, and sends even telegrams such as acknowledgments, alarm information, blocking messages, etc. to the devices (2, 2 ', 2 ") and the devices (2, 2") to the terminals (5). It can also generate E value (4, 4 *, 4 **) and, if applicable, associated signatures and / or certificates, issue validity certificates to the devices (2, 2 ', 2 "), administer the certificates on the devices (2, 2'). , 2 ") located safe purses such as purses and checks their consistency, the control body (7) initiates, if necessary, the settlement of a query / transfer process or a collection of transfer operations, for example, with money transfer to the bank account of the seller.

The control element (7) used in the system (1) can have a multiplicity of different forms. Suitable control organs (7) are commercially available and known to the skilled person. The control element (7) can be, for example, at least one device (2, 2 '), a multiplicity of devices (2 "), at least one security element SE, in particular a security element SEALS-SE (3), at least one terminal (5) and / or constitute an independent control body (7), whereby the independent control body (7) may consist of at least one device and / or one network.

According to the invention, the term server is understood to mean a specific electronic component which comprises a server hardware, i. a host computer, server software with a variety of utilities for other server-independent components, and a dial-in node. Thus, the server is in a selected location in the form of hardware or in the form of a central cloud computer. If the component is removed from the server software and / or the dial-in node, the system (1) can no longer function. According to the invention, the terminal (5) is not a server.

According to the invention, the term controlling body (7) is understood to mean a trusted controlling organ, ie a trustworthy controlling body (7). The skilled person is aware of the necessary criteria for conferring on a controlling body (7) the title "trusted control organ". Thus, a trusted controlling body typically includes a whole catalog of measures that make it trustworthy, such as i) if the controlling body (7) is a server, the location and the physical security positive, as well as the existing firewalls; (ii) if the control body (7) is a decentralized network, the existing surveillance circuits and redundancy; and (iii) if the control body (7) is security element SE, typically type 1 or 2 in the equipment (2), the trustworthiness and quality of the security elements SE. Thus, the system (1) can be confident that the operations of the control body (7) are correct and within the meaning of Systems (1) and that these operations are not manipulated, falsified or otherwise influenced by the influence of third parties to the detriment of the system (1). In a particular embodiment, the control organ (7) can also carry the identity management, ie the identity management, the user and / or devices, if this is necessary and this is not on a service provider outside the system (1), such as Google or Facebook, is outsourced.

In a further particular embodiment, the optional control organ may issue, i. Issuing and administration, the security elements SEALS-SE (3) and / or the key management, i. Key management, if they are necessary and this is not outsourced to a service provider outside the system (1), for example, a trust center.

The control device (7) is typically connected to the devices (2, 2 ") and / or the terminal or terminals (5) by means of an unsteady and highly asynchronous connection. In the system (1) according to the invention, the control element (7) does not need to communicate directly with the terminal (s) (5), but only indirectly via the devices (2, 2 ").

The procedure

The inventive method for counterfeit-proof storage, sharing and querying or transmitting E-values (4, 4 *, 4 **) with the inventive system (1) and / or with the inventive E-values (4 **) comprises at least one the following steps a) to d). If the method comprises two or more of the following steps, The steps can be carried out in any order and / or simultaneously. be combined. In this case, when the E-value (4, 4 *) represents e-money, is used as the control body (7) no server - and preferably no control body (7) comprising a server. Also, the inventive E value (4 ^** ) is not e-money.

Step a) of the method according to the invention comprises the storage of at least one E value (4, 4 *, 4 **) on the device (2) and / or the terminal (5), the E value (4 *, 4 **) at least one load token TL (41) and after a first query / transfer process and at least one donation token TS (42). This can u.a. for the load token TL (41) and for the donation token TS (42) different permissions are granted, whereby secure offline transfers can be performed.

Step b) of the inventive method comprises an inquiry / transfer process with E value (4, 4 *, 4 **) with unconditional, ie binding, completion without Internet connection at the time of the query / transfer process, comprising a query / transfer Transmission process, ie a transaction, the E value (4, 4 *, 4 **) on the device (2) through the terminal (5), from the device (2) to the terminal (5) or from the terminal (5 ) to the device (2), wherein the terminal (5) comprises at least one physical security element SEALS-SE (3), the device (2) and the terminal (5) communicate with each other, ie the device (2) and the terminal ( 5) have a permanent, time-limited standing bidirectional connection during the polling / transmission process. In this case, the query / transmission process of the E value (4, 4 *, 4 **) is represented by at least one donation token TS (42). By means of the security element SEALS-SE (3) in the terminal (5), the E value (4, 4 ^* , 4 ^** ), in particular the donation token TS (42), is signed by the device (2). This becomes an unconditional and binding

Completion and thus a secure query / transfer process with E value (4, 4 *, 4 **) between device (2) and / or smart card (6) and terminal (5), even if the device (2) and the terminal (5) are offline at the time of the payment process. The term "binding conclusion of a query / transfer transaction", or "final settlement of a payment transaction", according to the invention is understood to mean that the creditworthiness of the customer is given, the query / transfer process is legally binding and complete and thus a final effect autweist. Such a final settlement is in contrast to a temporary, ie not yet definitive, settlement, as is the case for example when paying without Internet connection by credit card.

Step c) of the method according to the invention comprises exchanging at least one telegram, i. a message, message resp. Information between terminal (5) and the control body (7) and / or between the control body (7) and terminal (5), wherein the exchange of the at least one telegram preferably via the device (2) and / or a plurality of devices ( 2 ") takes place. There are also other types of exchange, such as Sneakernet, possible. The term exchange is understood according to the invention a transmission with acknowledgment.

The exchange of the at least one telegram between terminal (5) and device (2, 2 ") preferably takes place at the time of a query /

Transfer process instead of and the exchange between device (2, 2 ") and control body (7) can take place at another time. Thus, the device (2) may be online or offline at the time of a polling / transmission process. It is also possible at the terminal (5) by means of smart card (6) perform a query / transfer process, wherein the query / transfer process by means of smart card (6) associated with a telegram later on a device (2, 2 ") with the control body (7) is replaced.

Step c) comprises various specific embodiments i) to iv), which may optionally also be carried out in combination with one another and are explained in more detail below.

If, in one embodiment, i) the device (2) is connected to the control device (7) at the time of a query / transmission process and thus online, the terminal (5) exchanges at least one telegram with the control device (7) via the device (2) the query / transfer process. In this case, advantageously at least one telegram from the terminal (5) via the device (2) to the control body (7) is transmitted. The control unit (7) then sends via the device (2) to the terminal (5) a telegram with the acknowledgment. By receiving the acknowledgment of receipt, the terminal (5) confirms that the polling / transmission process has been completed correctly and that, for example, if the E value (4, 4 *) represents e-money, that corresponding amount of money is available to the seller's bank account is transferred. Accordingly, the query / transfer process can be compensated for example with step e) of the inventive method.

If, in another embodiment, ii) the device (2) is not connected to the control device (7) at the time of a payment transaction and thus offline, the terminal (5) transmits at least one telegram, preferably all telegrams generated during the payment process, the request / transfer - Operation to the device (2). Since the device (2) is offline, it can not forward the at least one telegram to the control body (7) and accordingly receive no telegram with an acknowledgment and transmit it back to the terminal (5). As long as now at the terminal (5) from the control body (7) no telegram with the acknowledgment for the Telegram received the current query / transfer process, transmits the terminal (5) in subsequent transfer operations to a variety of other devices (2 ") the at least one telegram. The device (2) and each of the devices (2 ") then send the at least one telegram to the control device (7) at least once until the at least one telegram is transmitted to the control device (7) and the control device (7) via at least one Device (2, 2 ") transmits a telegram with the acknowledgment to the terminal (5). This allows a simple way a query / transfer operation offline, without the device (2) and the terminal (5) at the time of query / transfer process must have an online connection with the control body (7).

If, in another embodiment, iii) the device (2) is connected to the control device (7) independently of a payment transaction and thus online, the control device (7) can send pending telegrams, in particular pending telegrams relating to at least one interrogation / transmission process with the same device (2) and / or with another device (2 "), ie communicate with at least one of the plurality of devices (2 "), at least one terminal (5), to the device (2), which later transmits this to the terminal (5). This procedure surprisingly allows in a simple way that a user with a device (2) at the terminal (5), even offline, only once can perform a transmission, respectively. the receipt must nevertheless be confirmed by the control body (7) opposite the terminal (5).

The method mentioned in embodiments ii) and iii) of method step c) for the transmission of telegrams from a terminal (5) via a plurality of devices (2, 2 ") to the control body (7) and / or the control body (/) a plurality of other devices (2, 2 ") to the same terminal (5) according to the invention called swarm communication. As a result, any transfer of funds from the pool account to the cash account of the seller, for example, by subsequent step e) of the inventive method is ensured even in an off-line inquiry / transfer process, wherein the money transfer is possibly caused by the control body (7).

That, as mentioned in the embodiments ii) and iii) of the process step c), both the device (2) and the terminal (5) are offline at the time of the interrogation / transmission process is not uncommon even in heavily industrialized areas , Non-limiting examples include vending machine sales in basements, events in recreational areas with mobile phone hangs and short-term inaccessibility of the Internet and / or server (7). However, it is extremely probable that at least the device (2) and / or one of the multiplicity of devices (2 ") reestablishes a connection with the control device (7) within a few hours or at the latest after a few days, whereby the at least one telegram from the terminal (5) to the control body (/). Practically at the same time, ie offset in time, the device (2) and / or at least one of the plurality of devices (2 ") receives a telegram with the acknowledgment of receipt. This telegram is forwarded to the terminal (5) upon receipt of the device or devices (2, 2 "). In this case, the plurality of devices (2 "), which receive the at least one telegram from the terminal (5) and typically delayed to the control body (7) forward, be the same or different with the plurality of devices (2"), which by the control body (7) receive the telegram with the acknowledgment of receipt. Simulations showed that - in relation to the terminals - the number of devices (2, 2 ") and the number of payment processes per device (2, 2") can be surprisingly low in order to improve the functionality of the system (1) and to ensure the inventive method. If, in an additional embodiment, iv) the query / transfer process at the terminal (5) by means of a smart card (6), the query / transfer process is offline because the smart card (6) can not communicate with the control body (7). The terminal (5) transmits after completion of the query / transfer process with the smart card (6) at least one subsequent query / transfer process with at least one device (2, 2 ") at least one telegram of the query / transfer process with the smart card (6 ) to the at least one device (2, 2 "). This transmission to at least one device (2, 2 ") lasts until the terminal (5) has received a telegram from the control organ (7) with the acknowledgment of receipt.

In other words, if after a query / transfer process with smart card (6) with a device (2) another query / transfer process is performed, the terminal (5) transmits to the device (2) not only the message of inquiry / Transfer process from the device (2) with the terminal (5), but also the telegram of the previous query / transfer process from the smart card (6) with the terminal (5). Is now the device (2) online, transmitted - analogous to embodiment i) - the device (2) to the control body (7) not only the telegram of the query / transfer process from the device (2) with the terminal (5), but also the telegram of the previous query / transfer process with the smartcard (6). The control unit (7) in turn transmits to the device (2) both the telegram with the acknowledgment of the query / transmission process from the device (2) with the terminal (5), as well as the telegram with the acknowledgment of the query / transfer process from the smartcard (6) to the terminal (5). The device (2) in turn transmits both telegrams to the terminal (5) to confirm both query / transfer operations. These operations take only a fraction of a second or at most a few seconds for good connections. However, if the device (2) is offline, analogously to embodiment (ii), the terminal (5) does not receive a telegram with an acknowledgment of receipt of the transmission processes during the subsequent interrogation / transmission process with the device (2). Accordingly, the terminal (5) transmits to at least one other device, typically to a plurality of other devices (2 "), the telegram of the current query / transmission process from the device (2") to the terminal (5), as well as the telegrams the previous transmission processes from the smartcard (6) to the terminal (5), from the device (2) to the terminal and optionally from other devices (2 ") to the terminal (5). The devices (2, 2 ") in turn transmit the telegrams to the control device (7) at least once. The control unit (7) typically immediately acknowledges receipt of the telegram by the control organ (7) sending back a receipt confirmation to the respective device (2, 2 "). As soon as a device (2, 2 ") comes back into contact with the terminal (5) with an acknowledgment of receipt, it is transmitted from the device (2, 2") to the terminal (5) and the terminal (5) stops transmitting Telegrams to other devices (2, 2 "). By doing so, the terminal (5) may receive a plurality of acknowledgments of receipt for the same polling / transmission process, with only the first receiving acknowledgment having meaning.

Step d) of the inventive method comprises the monitoring and detection of abuse in the system (1) with at least one E value (4, 4 *, 4 **), wherein

at least one control device (7) stores the telegrams received by the devices (2, 2 "), processes them, optionally blocks at least one device (2, 2") for the system (1), and transmits other telegrams via the devices (2, 2 ") to the terminal (5), and / or - the terminal (5) using the security element SEALS SE (3) at least the received from the devices (2, 2 ") donation token TS (42) checks for correctness, optionally at least one device (2, 2" ) for the system (1) blocks and / or rejects, and optionally by means of at least one telegram on the devices (2, 2 ") to the control body (7) forwards.

If, for example, telegrams received from a control device (7) and originating from a device (2, 2 ") show irregularities, the server can block the device (2, 2") by sending corresponding telegrams to the devices (2, 2 "). 2 ") sends. These forward the telegrams to at least one, preferably to a plurality of, in particular to all, terminal (5) on. Thus, the terminals (5) recognize a locked device (2). Also, the control body (7) analogous other telegrams with, for example, control information on the devices (2, 2 ") forward to the terminal (5). This further increases the safety standard of the system (1) and acts preventatively against abuse and forgery. Step e) of the process according to the invention is optional and is typically followed by at least one of the abovementioned steps a) to d). In this case, step e) represents a compensation or a return of the terminal (5) accumulated E value (4, 4 *, 4 **) in any preferred form outside the system (1). For example, if the E value E -Money - this includes a transfer of money to the bank account of the seller, and thus the conversion of e-money (4, 4 ^* , 4 ^** ) into physical money includes.

In the method for forgery-proof storage, sharing and interrogation or transmission of inventive E-values (4 **) with the device (2) at a terminal, the E value (4 **) comprises at least one load token TL (41) and after a first query / transfer process also at least one of the load token TL (41) different donation token TS (42), wherein

the load token TL (41) is stored on the device (2) and contains electronic information about the E value (4 **) stored on the device (2),

the donation token TS (42) is stored on the device (2) and / or on the terminal (5) and comprises electronic data for the inquiry / transfer process of the E value (4 **), and

In a preferred embodiment of the inventive method is on the device (2) for each E value (4, 4 *, 4 **) at least one load token TL (41) and after a first query / transfer process and at least one of Load token TL (41) different donation token TS (42) stored, wherein the at least one load token TL (41) and the at least one donation token TS (42) chronologically with respect to the query / transfer operations of the respective E value (4 ^* , 4 ^** ) are mapped and preferably linked together in the form of a hash chain.

The usage

The inventive system (1), the inventive E value (4 ^** ), the inventive method for forgery-proof storage, sharing and querying or transmitting E values (4, 4 *) with the device (2) with the system ( 1) as well as E-values (4 **) with the device (2) at a terminal (5) can surprisingly be used extremely diverse become. Thus, they are used in particular for the forgery-proof storage, sharing and querying or transmission of E-values (4, 4 *, 4 **) with the device (2), even if the device (2) and / or the terminal (5) during the query / transfer process have no contact with the control organ (7) and are therefore offline. In this case, if the E value (4, 4 *) represents e-money, the control body (7) is not a server. Preferably, the control body does not include a server.

In a preferred embodiment of the use according to the invention, the E value (4, 4 *, 4 **) constitutes an identification, person identification, animal identification, item identification, a tangible value and / or the E value (4, 4 ^* ) electronic money, ie E-money, being preferred

the person identification is selected from the group consisting of a personal ID card, a passport, an identity card, an access card for an event, a security area, a

Company premises and a ticket;

- the animal identification is selected from the group consisting of identification of an animal, livestock, breeding animal, fattening animal, zoo animal, animal identification card and vaccination certificate;

- the item identification is selected from the group consisting of identification of a valuable item such as diamonds, jewelery, watches, vehicle, car, motorbike, bicycle, ship, yacht, boat, plane, light aircraft and security; such as

- the material value is selected from the group consisting of a ticket for debiting, admission ticket, travel ticket, multiple ticket,

Event ticket, vouchers, loyalty points, e-voting, voting documents, election documents, counting system for later billing, measuring system for later billing, road pricing tag, water meter and electricity meter. According to the invention, the physical security element SEALS-SE (3) is used at a terminal (5) for forgery-proof storage, sharing and querying or transmission of E values (4, 4 *, 4 **) to the device (2) at a terminal (5) using the system (1) according to the invention and / or the method according to the invention, the security element SEALS-SE (3) for storing, querying and transmitting E values (4, 4 *, 4 ** ) with binding conclusion also with a device (2) without security element SE and without Internet connection at the time of inquiry / transfer process is suitable. In this case, the query / transfer process can also take place if the device (2) and / or the terminal (5) during the query / transfer process no contact with other devices (2 ") and / or a control member (7) and thus are offline.

In the following, non-limiting, preferred embodiments of the inventive system (1) for counterfeit-proof storage, sharing and querying or transmitting E-values (4, 4 *) and the invention E value (4 **) and the method for forgery-proof storage, sharing and querying or transmitting E-values (4, 4 *) with a device (2) with the system (1) resp. the inventive E value (4 **) described with reference to the following drawings. These are not to be construed restrictively and are to be understood as part of the description:

Fiq. 1 shows by way of example a control element 7, two different types of terminal 5, both of which have a security element SEALS-SE 3 for offline transmissions with at least one E value from a device 2 and / or a smart card (FIG. 6) and, for example, a vending machine resp. represent a terminal (5) at a cash register, as well as the devices (2), (2 ') and (2 "). The devices (2, 2 ', 2 ") are with the Control device (7) preferably connected via a typically unsteady data network connection. The discontinuity of the data network connection is indicated by broken arrows. The device (2), also representative of the plurality of devices (2 "), is connected to the terminals (5), for example via a short-range

Wireless connection such as NFC, wherein the device (2 '), which is extended by a security element SEALS SE (3), also a terminal (5). Fiq. Figure 2 shows by way of example that a) a device (2) with the terminal (5) is offline, i. without connection with the control body (7), a query / transfer process with binding conclusion, resp. final Settlement, can handle. If the device (2) is online again later, i. Connected to the control body (7), b) the costs incurred for a possible buy-back of the terminal (5) cumulated

Value (4, 4 *, 4 **) information necessary to monitor the system, i. for detecting possible irregularities such as manipulation or forgery of the E-value (4, 4 *, 4 **), in the form of at least one telegram to the control body (7). This acknowledges receipt of the telegram in the form of a confirmation of receipt.

Fiq. FIG. 3 shows by way of example a) an offline inquiry / transmission process with a binding conclusion, resp. final settlement, at the terminal (5) with a smart card (6), which can not establish a connection with the control body (7) and thus is permanently offline, whereby for the query / transfer process with the smart card (6) no device (2) necessary is. On the next contact of the terminal (5) with a device (2, 2 "), which is online at the time of the contact, for example in a query / transfer process, b) for the completion of the query / transfer process, ie for a possible repurchase of the accumulated at the terminal (5) E value (4, 4 *, 4 **), and - if a control body (7) is present - to monitor the system, the necessary information in the form of at least one telegram to the control body (7). This acknowledges the receipt of the telegram in the form of a

Acknowledgment of receipt, which is returned by the control body (7) via the device (2, 2 ") to the terminal (5).

Fiq. 4 shows, by way of example, an offline inquiry / transmission process at the terminal (5) with a device (2) which a) is offline, since, for example, the terminal and the device (2) are located in a radio hole or in a basement without an Internet connection. Although neither the terminal (5) nor the device (2) are online, with the inventive system (1) a binding conclusion, resp. carried out a final settlement. At a next

Contact at the terminal (5) with a plurality of devices (2 "), which are therefore also offline at the time of contact, b) which for a possible repurchase of the terminal (5) accumulated E value (4, 4 *, 4 **) necessary information as a receipt in the form of at least one telegram to the plurality of devices (2 ") transmitted. As soon as c) the device (2) and / or at least one of the devices (2 ") are online again, these messages are forwarded to the control device (7). This confirms receipt of all acknowledgment telegrams by sending a corresponding acknowledgment of receipt to all devices (2, 2 "), of which the

Received telegrams (shown in square).

The control unit (7) preferably also sends this acknowledgment of receipt to other devices (2 ") which have not received any corresponding telegrams from the terminal (5) (shown approximately), since such a device (2") may sooner make contact with the device

Terminal (5) builds. As soon as d) a device (2, 2 ") with the Receipt confirmation of a receipt of a previous query / transfer operation with the terminal (5) makes contact, the acknowledgment of the server (7) is transmitted to the terminal (5) and the query / transfer process on the side of the terminal (5) marked as acknowledged.

Fiq. FIG. 5 shows an exemplary E value (4, 4 *, 4 **) which is stored according to the invention and which is stored on a device (2) and at least one load token TL (41) and after a first interrogation / transmission process also at least a donation token TS (42) different from the load token TL, wherein under

a) the load token TL (41) is shown, which comprises at least one electronic indication such as identity or material value of the device (2) stored E value (4, 4 *, 4 **), or if the E Value (4 *) e-money, the load token TL (41) comprises at least the amount of a credit note of the e-money stored on the device (2),

b) in a query / transfer process with the device (2) at the terminal (5), which comprises a security element SEALS-SE (3), the donation token TS (42) is generated by the device (2) and a copy of Donation token TS (42) to the terminal (5) transmitted. The donation token TS (42) comprises at least the E value (4, 4 *, 4 **) of the information retrieved during the interrogation / transfer process, transferred property values or e-

Money, and / or services rendered, and details of the service provider and the customer. Thus, the donation token (42) represents an inquiry / transfer operation with E value (4, 4 *, 4 **) from the device (2) to the terminal (5). The arrow with symbol between device (2) and

Terminal (5) provides a built-in connection with bidirectional Data exchange and is thus a physical connection with signal transmission. The connection can be made for example by means of NFC.

c) After completion, resp. Settlement, the donation token TS (42) is stored at least on the device (2) and / or the terminal (5). Thus, the material value on the device (2) stored E value (4, 4 *, 4 **) charged and the terminal (5) resp. its owner credited. Since the donation token TS (42) is stored both on the device (2) and on the terminal (5), a possible and erroneous value slip is excluded. As a result, the query / transfer process that has been carried out can also be easily tracked subsequently and a possible incorrect booking can be corrected.

Claims

claims

1 . System (1) for the tamper-proof storage, sharing and retrieval or transmission of electronic values (4), i. E-values (4), comprising

- at least one mobile device (2) selected from the group consisting of a mobile phone, smartphone, tablet, notebook, laptop, smart wearables, smart card (6), USB stick, SD memory card, embedded device, memory IC and another specially equipped mobile device for the system (1), wherein at least one E-value (4) is stored on the device (2), the E-value (4) being an identification, tangible or electronic money, ie E-money, represents

- At least one transmission terminal (5), and

- A control body (7), wherein the control body (7) a network, a security element SE which is installed directly in the device (2) or in a plurality of devices (2 "), a trusted user of the device (2) or the plurality the device (2 "), or represents a server, characterized in that

II. The terminal (5) comprises at least one security element SEALSSE (3), wherein the security element SEALS-SE (3) for the storage, division as well as the interrogation or transmission of E-values (4, 4 *) with mandatory completion also with a device (2) without security element SE and without internet connection at the time of inquiry / Transfer operation is appropriate, whereby the terminal (5) and the device (2) are autonomous at the time of a mandatory conclusion / transmission process and do not need to be connected to a control organ (7) and thus can be offline,

2. System (1) according to claim 1, characterized in that the identification of the E value (4, 4 *) a person identification, a

Animal identification or a fact identification represents, whereby preferred

- The person identification is selected from the group consisting of a personal ID card, a passport, an identity card, an access card for an event, a security area, a company premises and a

Ticket;

- the animal identification is selected from the group consisting of identification of an animal, livestock, breeding animal, fattening animal and zoo animal;

- the item identification is preferably selected from the group consisting of an identification of a valuable item such as diamonds, jewelery, watches, vehicle, car, motor bike, bicycle, ship, yacht, boat, plane, light aircraft and security; such as

- the material value is selected from the group consisting of a ticket for debiting, admission ticket, travel ticket, multiple ticket, event ticket, voucher, loyalty points, voting documents, election documents, counting system for subsequent billing, measuring system for subsequent billing, road pricing Tag, water meter and electricity meter.

3. System (1) according to claim 1 or 2, characterized in that the terminal (5) by the device (2 ') is formed, wherein the device (2') comprises a device (2) which surrounds a security element SEALS -SE (3) is extended.

4. System (1) according to at least one of claims 1 to 3, characterized in that

- communicates the device (2) with other devices (2 ', 2 ") and / or the control member (7) with a data network connection, and / or

- The device (2) and the terminal (5) with each other by means of i) short-range radio link such as RFID, NFC, Bluetooth, Bluetooth Low Energy (BLE) or WiFi, ii) contact-based connection such as USB or Firewire, iii) optical connection such as IR , IRDA or NIR, iv) acoustic connection or v)

Data networks such as TCP / IP, communicate.

5. System (1) according to at least one of claims 1 to 4, characterized in that

- if the control body (7) is a network, the network comprises i) a decentralized or distributed network, ii) a sneakernet or iii) a central or hierarchical network; and or

the security element SE represents a security element SE of the type 1, 2 or 3 and directly in the device (2) and / or one

Variety of devices (2 ") is installed.

6. System (1) according to at least one of claims 1 to 5, characterized in that the security element SEALS-SE (3) in the terminal (5) represents a physical security element and a

Includes processor with cryptographic capability.

7. Electronic value (4 **), i. E value (4 **), for forgery-proof storage, sharing and querying or transmitting E-values, characterized in that the E value (4 **) represents an electronic identification and / or an electronic asset and at least one load -Token TL (41) and after a first query / transfer process and at least one of the load token TL (41) different donation token TS (42), wherein

the load token TL (41) is stored on the device (2) and electronic information is stored on the device (2) stored on the device (2)

Includes value (4 **),

the donation token TS (42) is stored on the device (2) and / or terminal (5) and comprises electronic data for the query / transfer process of the E value (4 **) stored on the device (2), and

where the E value (4 **) is not E-money.

8. System (1) according to at least one of claims 1 to 6 and E value (4 **) according to claim 7, characterized in that on the device (2) for each E value (4, 4 *, 4 * *) a dedicated, dedicated E value (4, 4 *, 4 **) is present, as well as each E value (4 *, 4 **) at least one load token TL (41) and after a first query / Transmission process and at least one of the load token TL (41) different donation token TS (42) and in the order of all tokens of the respective E value (4 ^* , 4 ^** ) the history of the query / transfer operations of E -

Value (4 *, 4 **) is shown.

9. System (1) according to at least one of claims 1 to 6 and 8 and E value (4 **) according to claim 7 or 8, characterized in that, if the E value (4 *, 4 **)

a person identification, the load token TL (41) is an electronic identity including personal information such as face recognition data, fingerprint, date of birth, place of birth, gender, weight, passport number, or illness information of the person;

represents a property identification, the load token TL (41) is an electronic identity including information about the owner,

Acquisition, weight, shape, type, origin, modification or specific characterization of the item, such as the specific X-ray diffraction of a diamond,

represents a tangible value, the load token TL (41) includes electronic information on the tangible asset and its history, and / or

if the E value (4 *) represents e-money, the load token TL (41) comprises at least the amount of credit of the e-money stored on the device (2).

10. System (1) according to at least one of claims 1 to 6 and 8 to 9 and E value (4 ^** ) according to at least one of claims 7 to 9, characterized in that when the E value (4 *, 4 **)

- represents a person identification, the donation token TS (42) an electronic identification and inquiry proof is comprehensive information for the person identification and inquiry the same at the terminal (5) as well as information on the time, place or by whom the query is made,

- represents a property identification, the donation token TS (42) is an electronic identification and inquiry verification including details of identification and query of the same at the terminal (5) and information on the time, place or by whom the query is made,

represents a tangible asset, the donation token TS (42) represents an electronic value of the asset, and / or - if the E value (4 *) represents e-money, the donation token TS (42) at least the value of the goods during the payment process purchased / sold goods and, where appropriate, more information on the payment process, and thus represents a payment process with e-money (4 *) from the device (2) to the terminal (5), wherein the donation token TS (42) at least on the Device (2) or

Terminal (5) is stored.

11. A method for the tamper-proof storage, sharing and interrogation or transmission of E-values (4, 4 *) with the system (1) according to at least one of claims 1 to 6 and 8 to 10 and / or of E

Values (4 **) according to at least one of claims 7 to 10, characterized in that the method comprises at least one of the following steps a) to d):

b) an inquiry / transfer process with E value (4, 4 ^* , 4 ^** ) with binding completion without Internet connection at the time of the query / transfer process comprising a query / transfer process of the E value (4, 4 ^* , 4 ^** ) on the device (2) through the terminal (5), from the device (2) to the terminal (5) or from the terminal (5) to the device (2), the terminal (5) at least one physical Security element SEALS-SE (3), the device (2) and the terminal (5) communicate with each other and the requesting / transmitting process of the E value (4, 4 ^* , 4 ^** ) of at least one donation token TS ( 42) is represented,

d) the monitoring and detection of abuse in the system (1) with at least one E value (4, 4 ^* , 4 ^** ), where

- The terminal (5) using the security element SEALS-SE (3) at least the received from the devices (2, 2 ") donation token TS (42) checked for their correctness

where, if the E-value (4, 4 ^* ) represents e-money, as a control body (7) no server is used.

12. A method for counterfeit-proof storage, sharing and interrogation or transmission of E-values (4 **) according to at least one of claims 7 to 10 with the device (2) at a terminal (5), characterized in that the E value (4 **) at least one load token TL (41) and after a first query / transfer process and at least one of the load token TL (41) different donation token TS (42), wherein

13. The method according to claim 11 or 12, characterized in that on the device (2) for each E value (4, 4 *, 4 **) at least one load token TL (41) and after a first query / At least one of the load token TL (41) different donation token TS (42) is stored, wherein the at least one load token TL (41) and the at least one donation token TS (42) chronologically in

Relative to the query / transfer operations of the respective E value (4 *, 4 **).

14. Use of the system (1) according to at least one of claims 1 to 6 and 8 to 10, the E value (4 ^** ) after at least one of

Claims 7 to 10 and the method according to at least one of Claims 11 to 13 for the tamper-proof storage, sharing and interrogation or transmission of E values (4, 4 *, 4 **) with the device (2) even if the device (2) and the terminal (5) during the query / Transfer process have no contact with the control body (7) and thus are offline, wherein, if the E value (4, 4 *) represents e-money, the control body (7) is not a server.

1 5. Use according to claim 14, characterized in that the E value (4, 4 *, 4 **) an identification, person identification, animal identification, item identification, a tangible value and / or the E value (4, 4 *) electronic money, ie E-money, represents; being preferred

- the person identification is selected from the group consisting of a personal identification card, a passport, an identity card, an access card for an event, a security area, a company premises and a ticket;

- the material value is selected from the group consisting of a ticket for debiting, admission ticket, travel ticket, multiple ticket, event ticket, voucher, loyalty points, voting documents, election documents, counting system for subsequent billing, measuring system for subsequent billing, road pricing Day, water meter and electricity meter.

1 6. Use of a physical security element SEALS-SE (3) on a terminal (5) for forgery-proof storage, sharing and storage Querying or transmitting E-values (4, 4 *, 4 **) to the device (2) at a terminal (5) using the system (1) according to at least one of claims 1 to 6 and 8 to 10 or Method according to at least one of claims 11 to 13, wherein the security element SEALS-SE (3) for storing, querying and transmitting E-values (4, 4 *, 4 **) with binding completion also with a device (2 ) without security element SE and without Internet connection at the time of the query / transfer process, whereby the query / transfer process can also take place if the device (2) and the terminal (5) during the query /

Transmission process have no contact with other devices (2 ") and / or a control body (7) and are therefore offline.