Method for providing an access code on a portable device and portable device
The disclosure relates to a method for providing an access code on a portable device, which comprises a user interface and is set up for a wireless data communication, in which reference data for an authentication are stored in a central data processing system, wherein the reference data comprise personal data containing biometric reference data for a user of the portable device and a device identifier for the portable device, in response to a detected event, an authentication process is executed, in which the user is authenticated, wherein to authenticate the user, in the central data processing system and/or in the portable device, the reference data and authentication data are evaluated, which comprise personal authentication data for the user, including biometric authentication data, and an authentication device identifier for the portable device, and in response to a successful authentication, an access code is provided in the portable.
1. A method for providing a location-restricted access code on a portable device, which comprises a user interface and is set up for a wireless data communication, in which
reference data for an authentication are stored in a central data processing system, wherein the reference data comprise personal data containing biometric reference data for a user of the portable device and a device identifier for the portable device;
in response to a detected event, an authentication process is executed, in which the user is authenticated, wherein to authenticate the user, in the central data processing system and/or in the portable device, the reference data and authentication data are evaluated, which comprise personal authentication data for the user, including biometric authentication data, and an authentication device identifier for the portable device;
in response to a successful authentication, a location-restricted access code is provided in the portable device, wherein the location-restricted access code is newly generated after each successful authentication;
evaluate the location-restricted access code by an access control device to determine an access authorization of the user to a particular physical locality, wherein the access authorization is independent from a communication link with a network at the particular physical locality; and
after a successful authentication at the particular locality and in response to detecting that the portable device departs from the particular physical locality, terminating validity of the location-restricted access code.
2. The method according to claim 1 , wherein the authentication process is started by means of an application running on the portable device, if at least one event from the following group of events is detected: reaching a predetermined location and reaching a predetermined time.
3. The method according to claim 2 , wherein to determine the reaching of the predetermined location, electronic information of a localization device of the portable device are evaluated.
4. The method according to claim 1 , wherein the personal authentication data for the user, including the biometric authentication data, are acquired at least partly by means of one or a plurality of function modules of the portable device.
5. The method according to claim 1 , wherein the location-restricted access code is issued via an output device of the portable device.
6. The method according to claim 1 , wherein the location-restricted access code is presented to the access control device using NFC communication.
7. The method according to claim 1 , wherein the location-restricted access code is provided as an access code having a time-limited validity period.
8. The method according to claim 1 , wherein part of the biometric authentication data is acquired by means of an on-site sensor device on the access control device.
9. A portable device having a user interface and a communication module for a wireless data communication, wherein reference data for an authentication is stored in a central data processing system, the reference data includes personal data containing biometric reference data for a user of the portable device and a device identifier for the portable device, comprising:
a processor; and
a storage medium having computer program instructions stored thereon, wherein the computer program instructions, when executed by the processor, perform processing of:
in response to a detected event, executing an authentication process in which the user is authenticated, wherein to authenticate the user, in the central data processing system, the reference data and authentication data are evaluated, which comprise personal authentication data for the user, including biometric authentication data, and an authentication device identifier for the portable device,
in response to a successful authentication, providing a location-restricted access code in the portable device, wherein the location-restricted access code is newly generated after each successful authentication;
evaluate the location-restricted access code by an access control device to determine an access authorization of the user to a particular physical locality, wherein the access authorization is independent from a communication link with a network at the particular physical locality; and
after a successful authentication at the particular locality and in response to detecting that the portable device departs from the particular physical locality, terminating validity of the location-restricted access code.