| 摘要 |
<p>The invention relates to a method for authenticating an individual (104), said individual carrying a device (102). Said device comprises at least one interface (118) for communication with a control device. The device carries out the following steps when approaching the control device: receiving a first inquiry (136) from the control device via the first interface, the control device, in a first inquiry, requiring a first certificate (128) from the device for authenticating the individual; transmitting a second inquiry (138) from the device to the control device via the interface, the device requiring, in the second inquiry, a second certificate (132) from the control device; checking the second certificate using the device, the second certificate being used to determine whether the control device is authorized to require the first certificate from the device; transmitting the first certificate to the control device via the interface if the result of the check of the second certificate is that the control device is authorized to do so. The device can receive an authentication request issued by the control device according to which request the individual has to be authenticated vis-à-vis the device. The method also includes a step of authenticating the individual vis-à-vis the device, the first certificate being transmitted to the control device only when the individual is successfully authenticated vis-à-vis the device. The step of authenticating the individual vis-à-vis the device is only carried out if the authentication request has been received by the device. The first certificate is transmitted to the control device without prior authentication of the individual vis-à-vis the device if the authentication request has not been received by the device.</p> |
