| 摘要 |
The invention relates to a method for reading at least one attribute (130) that is stored in an ID token (104), wherein the ID token is associated with a user (132), having the following steps: establishment (302), by a terminal (102), of whether a contact-based interface (120) of the ID token is existent and can be used for data interchange with the terminal; if the ID token does not have the contact-based interface or the latter cannot be used:• performance (308) of a zero-knowledge authentication protocol via a contactless interface (134, 136) of terminal and ID token; and • derivation (310) of an ID token identifier (400, 500, 604) by the terminal; if the ID token has the contact-based interface and the latter can be used: • authentication (304) of the user to the ID token via the contact-based interface; • access (306) to an ID token identifier (400, 500, 604) by the terminal; transmission (312) of the ID token identifier from the terminal to an ID provider computer (502); use (314) of the ID token identifier by the ID provider computer for authentication of the ID provider computer to the ID token; read access (316) by the ID provider computer to the at least one attribute stored in the ID token. |
