Method and device for authenticating a user to a transportation vehicle

1. An apparatus for authenticating a user on a transportation vehicle, the apparatus comprising a control apparatus coupleable to an external device and at least two tokens, wherein the external device stores an authentication secret code, a first token stores a first token secret code and a second token stores a second token secret code, wherein

the first token secret code of the first token is received by the transportation vehicle via a secure channel,

the second token secret code of the second token is received by the transportation vehicle via a secure channel,

a first computation apparatus generates a new secret code from the received token secret codes, and

the user is authenticable on the transportation vehicle when the new secret code matches the authentication secret code;

wherein the tokens each have a sensing device that senses an operator control action performed with the respective token, and

wherein the first or second token secret code is transmittable to the transportation vehicle when the operator control action performed with the token is sensed.

2. The apparatus of claim 1 , wherein a second computation apparatus is used to compare the new secret code with the authentication secret code, wherein an interface sends a signal to the control apparatus indicating whether or not the user is authenticated based on the result of the comparison.

3. The apparatus of claim 1 , wherein the external device is an external server.

4. The apparatus of claim 1 , wherein at least one token is a transportation vehicle key.

5. A method for authenticating a user on a transportation vehicle coupleable to an external device and to at least two tokens, wherein the external device stores an authentication secret code, a first token stores a first token secret code and a second token stores a second token secret code, the method comprising:

receiving the first token secret code of the first token by the transportation vehicle;

receiving the second token secret code of the second token by the transportation vehicle;

generating a new secret code from the received token secret codes; and

authenticating the user on the transportation vehicle in response to the new secret code matching the authentication secret code;

wherein an altered new secret code is generated directly after or during the generation of the new secret code, and

wherein the new secret code is stored in the transportation vehicle only until the altered new secret code is generated.

6. The method of claim 5 , wherein the first and second token secret codes differ from one another.

7. The method of claim 5 , wherein the new secret code is generated from at least one token secret code by a computation operation.

8. The method of claim 5 , wherein at least one token secret code is transmitted to the transportation vehicle in an encrypted state.

9. The method of claim 5 , wherein at least one token secret code is stored in the transportation vehicle only until the new secret code is generated.

10. The method of claim 5 , wherein the new secret code is stored in the transportation vehicle until the new secret code is compared with the authentication secret code.

11. The method of claim 5 , wherein the new secret code is transmitted to the external device for comparison and a signal is transmitted from the external device to the transportation vehicle indicating that the user is authenticated in response to the new secret code matching the authentication secret code.

12. The method of claim 5 , wherein the new secret code is stored in the transportation vehicle only until the new secret code has been transmitted to the external device.

13. A transportation vehicle that includes an apparatus for authenticating a user on a transportation vehicle, the apparatus comprising a control apparatus coupleable to an external device and at least two tokens, wherein the external device stores an authentication secret code, a first token stores a first token secret code and a second token stores a second token secret code, wherein

the first token secret code of the first token is received by the transportation vehicle via a secure channel,

the second token secret code of the second token is received by the transportation vehicle via a secure channel,

a first computation apparatus generates a new secret code from the received token secret codes, and

the user is authenticable on the transportation vehicle when the new secret code matches the authentication secret code;

wherein the tokens each have a sensing device that senses an operator control action performed with the respective token, and

wherein the first or second token secret code is transmittable to the transportation vehicle when the operator control action performed with the token is sensed.

14. The transportation vehicle of claim 13 , wherein a second computation apparatus is used to compare the new secret code with the authentication secret code, wherein an interface sends a signal to the control apparatus indicating whether or not the user is authenticated based on the result of the comparison.

15. The transportation vehicle of claim 13 , wherein the external device is an external server.

16. The transportation vehicle of claim 13 , wherein at least one token is a transportation vehicle key.