摘要 |
<p>The invention relates to a method for generating an authentication authority derived from an original data carrier, said original data carrier having a key pair that is unique to the original data carrier and that comprises a public key and a private key of the original data carrier, in addition to a certificate for the public key of the original data carrier. The method comprises the following steps: derivation of a private key for the derived authentication authority by the original data carrier from the private key of the original data carrier; formation of derivation data for the derived authentication authority; transmission of authentication data to the derived authentication authority, said authentication data having the derivation data, the certificate for the public key of the original data carrier and a derived key pair which comprises the derived private key and the public key of the original data carrier.</p> |