Verfahren zur Realisierung einer Zugriffsverwaltung einer Vielzahl von Rechnervorrichtungen oder Funktionalitäten oder Darauf Ausgeführten Softwareanwendungen, System, Rechnervorrichtung oder Funktionalität oder Darauf Ausgeführte Softwareanwendung, Zugriffsverwaltungseinheit, Programm und Computerlesbares Medium

Details

Veröffentlichungs-Nr.

EP4030323

Aktenzeichen

EP21152084

Anmeldetag

18. Januar 2021

Veröffentlichung

4. Juni 2025

Erteilung

4. Juni 2025

Rechtsraum

EP

IPC

G06F21/44H04L9/40H04L9/32

Abstract

The invention relates to a method for realizing an access management of a plurality of computing devices or functionalities or software applications executed thereon, related to data of a plurality of persons, by means of an access management entity especially serving a plurality of groups of persons,wherein, regarding the plurality of computing devices or functionalities or software applications executed thereon, virtual device identifiers are used,wherein a virtual device identifier is related to a computing device or functionality or its software application, wherein the access management entity is provided with the private key of a key pair comprising the private key and a corresponding public key,wherein the method comprises the following steps in order for the computing device or functionality or its software application being at least one of authorized, authenticated, granted access, and group associated, by the access management entity:-- in a first step, the access management entity generates the virtual device identifier, encrypts it using the public key to obtain an encrypted virtual device identifier, and transmits the encrypted virtual device identifier to the computing device or functionality or its software application,-- in a second step, upon the computing device or functionality or its software application requesting, from the access management entity, the at least one of authentication, authorization, access, and group association, the computing device or functionality or its software application transmits the encrypted virtual device identifier to the access management entity and the access management entity grants this request based on the content of the virtual device identifier, obtained by means of decrypting, using the private key, the encrypted virtual device identifier received from the computing device or functionality or its software application.

Anmelder

Firma

Deutsche Telekom AG

Land

🇩🇪 Deutschland

Fachgebiete