DE102009052577A1 - Method for activating portable data carrier for user data communication with reading device of security system, involves transmitting release request signal or release signal on optical path - Google Patents

Abstract

The method involves partially raising a data carrier internal locking of radio based transmission of user data (103) by commands received by a radio based user data communication device (20) of a data carrier (1) over a radio based user communication device (55) of a reading device (30) and/or a processor. Release request signal (101) or release signal (102) are transmitted on optical path, where radio based user data communication device is not involved during transmission of the release signals at the data carrier. An independent claim is also included for a security system comprising a reading device.

Description

The present invention relates to a method for activating a contactless portable data carrier so that it can exchange user data via a radio-based user data communication device with a reading device. The invention further relates to a correspondingly adapted reading device as well as an overall system comprising the reading device and a data carrier.

Contactless data carriers in the sense of the present invention are portable data carriers with a radio-based data communication interface. So far, they have only been used in closed-end payment applications, such as payment in canteens or public transport. Decisive for this is the fear that a third party unnoticed money from the disk could deduct contactless, z. B. while the disk is carried in a purse. Also in other applications contactless media, eg. As in passports or in a visa, there are concerns that data from the disk could be read by unauthorized third parties.

In this context, the DE 103 17 257 A1 to provide a contactless data carrier in addition to the conventional radio interface with an infrared interface. The power to power the infrared interface is received by the radio interface. According to this doctrine, data is additionally sent by optical means to the reading device via the infrared interface, without whose knowledge a transaction with the data carrier can not be carried out. Thus, an owner of the data carrier only by bringing him into the transmission range of the infrared interface, allow a transaction of the smart card with the reader.

Based on the idea described above, the DE 103 17 257 A1 alternatively, to generate by the reader itself an optical signal with a distinctive modulation or optical data signal received by the data carrier. The received signal should then be used for authentication between the data carrier and the reader.

However, these proposals have the disadvantage that just for the reason that without knowledge of optically transmitted data, a transaction with the disk can not be performed, a special reader is required, which additionally has an optical interface to the processing of the per Radio exchanged data to include the optically received data can.

Therefore, the beats DE 103 17 257 A1 as another alternative, to equip the disk with a photosensitive member and, as soon as it is exposed to a minimum brightness, to allow a transaction of the disk with a reader. Thus, it can be determined whether the disk is exposed to light or z. B. is located in a light-tight bag.

However, this can not be reliably checked whether the owner of the disk actually wants to allow a transaction. For example, to facilitate the transaction, it may already be sufficient for the volume to be on a table and exposed to daylight. To prevent this, the disk would have z. B. constantly in a light-tight bag.

Object of the present invention is therefore to determine the willful use of a contactless data carrier with the simplest possible technical means safely to unlock safety-critical functionality of the disk only in its voluntary use for radio-based data transfer.

This object is achieved by a method, by a reading device and by a reader comprising the reading device and at least one portable data carrier system having the features of the independent patent claims. In dependent claims advantageous embodiments and developments of the invention are given.

Accordingly, the volume sends a release request signal to the reader. This in turn then sends an enable signal that is in a predetermined relationship with the received enable request signal back to the volume. At least one of these signals is sent by optical means in order to ensure the deliberate use of the data carrier precisely by the fact that the owner of the data carrier enables an optical signal transmission between the data carrier and the reader only when he brings the data carrier accordingly to the reader. The data carrier then receives the returned enable signal and checks whether it is in the predetermined relationship with the transmitted enable request signal. If the test results are positive, the data carrier at least partially suspends a disk-internal blockage of a radio-based transmission of user data from the data carrier to a radio-based user data communication device of the reading device and / or a processing of commands received via the user data communication device and thus switches the portable data carrier for the user data communication with the reader over the radio-based user data communication device of the data carrier free. According to the invention, it is further provided that the radio-based user data communication device of the reading device is not necessarily involved in the transmission of the enable signal to the data carrier.

Thus, a required to unlock the disk security device of the reader that receives the release request signal from the disk and sends the enable signal back to the disk to be configured independently of the other features of the reader and assigned as an additional device to the reader.

A reading device adapted to the method accordingly comprises a radio-based user data communication device for the radio-based exchange of user data with the portable data carrier as well as a safety device. This is set up to receive a release request signal sent from a portable data carrier and to send a release signal which has a predetermined relationship with the received release request signal, again the radio-based payload data communication device of the reader being not involved in this process.

The security device is thus independent of the other functionalities of the reader, so that a conventional reader can be used, which is equipped with the security device later.

Preferably, the reader has no data connection between the radio-based user data communication device and the security device. In this case, a conventional reader can be used as a user data communication device that does not have an interface suitable for data communication with the security device. In addition, no such data connection needs to be established.

A security system according to the invention comprises, in addition to the reading device described above, at least one portable data carrier which comprises a release device with a transmitter and a receiver, at least one of which is optical. Furthermore, the data carrier has a radio-based user data communication device for the radio-based transmission of user data to the radio-based user data communication device of the reading device. The data carrier enabling means may transmit, by means of its transmitter, the enabling request signal to the reader safety device and by means of its receiver receive the enable signal transmitted from the reader safety device, check if the received enable signal is in the predetermined relationship with the transmitted enable request signal, and if the result is positive the check at least partially cancel a disk-internal lock of the radio-based transmission of user data via the radio-based user data communication device of the data carrier and / or the processing of commands received via the radio-based user data communication device of the data carrier.

Since at least one of the two signals (release request signal and enable signal) is transmitted by optical means, an owner of the data carrier by bringing the data carrier in the optical transmission range for the two signals to the reader, an activation of the data carrier for the Nutzdatenkommunikation with Reader via the radio-based user data communication device cause. As a result, an exclusively voluntary use of the data carrier is ensured.

By at least partially canceling a block of the transmission of user data and / or processing commands received via the user data communication device of the data carrier certain functionalities of the data carrier can be released, for. As a security-critical transaction between the disk and the reader, such as a payment process, or the transmission of safety-critical data, such as personal data when using the contactless data carrier as a passport. In a payment process, the owner of the portable data carrier can give his declaration of intent to transmit the money by bringing the data carrier in the vicinity of the reader, so that the optical signal (release request signal and / or release signal) can be transmitted.

Since the release device only suspends the at least partial blockage of the transmission of user data when the received release signal is in the predetermined relationship with the transmitted release request signal, it is reliably ensured that the owner of the data carrier actually wants to authorize a transaction. In particular, the at least partial blocking of the transmission of user data is not caused by daylight or other interference signals, the z. B. could be generated by other devices, repealed. In addition, an attacker can not unlock the medium with a suitable variation of the release request signal by a recorded in an earlier release operation enable signal, since the release signal from the release request signal depends. Thus, the invention may be designed to be secure against attack attempts in which an attacker attempts to copy the enable signal.

A particular advantage of the invention is - as mentioned - is that a conventional reader that is not originally adapted to unlock the disk, can be used because the radio-based Nutzdatenkommunikationseinrichtung the reader is not involved in sending the enable signal to the disk. Rather, the safety device required for unlocking can be subsequently assigned to the reader as an additional device.

In a particularly simple first embodiment of the invention, the safety device is an optical reflector. This variant is characterized by particularly low costs for the safety device. If a reflector is used as the safety device, the predetermined relationship between the release request signal and the enable signal is an identity of the two signals. The time delay caused by the propagation time of the signals is negligible.

As an optical reflector, a reflective surface such. B. a mirror can be used. However, the optical reflector is preferably designed as a diffusely reflecting surface or as a retroreflector selected from the following group of retroreflectors: plano-optical angle reflector, retroreflector, triple mirror, triple prism, biconical reflector design, rotationally symmetrical lens reflector, such as cat's eye or Luneber's lens. In the case of a diffusely reflecting surface, the release signal is radiated in a wide angular range, whereas in the case of a retroreflector the release signal is reflected back in the direction in which the release request signal impinges on the reflector. In contrast to a conventional mirror, in which only one almost perpendicular to the mirror meeting the release request signal is reflected in the direction of the disk, so the disk can both a diffuse reflecting surface as well as a retroreflector in a wide range of angles to the normal of the mirror to receive the reflected enable request signal as an enable signal. Diffuse reflective, z. B. white, surfaces are particularly well suited for signal transmission in the field of infrared radiation, and retroreflectors are very well both for signal transmission in the field of infrared radiation as well as signal transmission in the visible light range.

According to a more sophisticated, second embodiment of the invention, the security device of the reading device comprises an electronic circuit which generates the release signal to be sent from the received release request signal.

In this variant, a relatively complex relationship may be chosen as the predetermined relationship between the release request signal and the enable signal rather than an identity of the two signals to ward off attack attempts in which the attacker attempts to mimic the functionality of the security device. A data connection of the security device to the other facilities of the reader is not required. Only the power supply of the safety device must be ensured.

In particular, the enable request signal may be subjected to at least one of the following signal processing operations by the electronic circuit of the security device: pitch in frequency by 2 * N, where N is a natural number, modulation with subcarrier signal, change in pulse length, binary inversion, encryption, time delay , The electronic circuit may comprise an integrated electronic circuit and possibly a software component. A binary inversion or an encryption of the signal is useful only for a data signal, whereas a division in frequency by 2 · N, a modulation with a subcarrier signal or change in the pulse length is also possible with other signals. To divide the signal can z. B. a binary edge-triggered divider can be used, and for encrypting the data stream can, for. For example, a stream cipher algorithm (stream cipher), in particular an XOR stream cipher algorithm, or a linear feedback shift register may be used.

The release request signal or the release signal or both signals are preferably optically in the range of terahertz radiation (frequency: 0.3 to 20 THz, wavelength: 15 to 1000 μm) or in the range of infrared radiation (frequency: 20 to 385 THz, wavelength: 780 nm to 15 μm) or in the range of visible light (frequency: 385 to 750 THz, wavelength: 400 to 780 nm) or in the range of UV radiation (frequency: 750 THz to approx. 3 PHz, wavelength: 100-400 nm) , Accordingly, the data carrier and the reading device preferably comprise an optical receiver or an optical transmitter or an optical receiver and optical transmitter, which are set up for operation in the region of terrestrial radiation or in the region of infrared radiation or in the region of visible light or in the region of UV radiation are.

The payload data communication devices of the data carrier and the reader are preferred as RFID interfaces, particularly preferred according to ISO IEC 14443 designed so that standardized components can be used for the user data communication device of the reader as well as for the user data communication device of the data carrier.

The data carrier is particularly preferred in a format according to ISO / IEC 7810 trained so that standardized devices can also be used for its production and processing.

According to a particular embodiment variant, a radio-based receiver, which can advantageously be part of the radio-based user data communication device of the data carrier, is used as the receiver of the release device of the data carrier. As a result, the optical receiver of the data carrier can be saved. Of course, then the transmitter of the security device of the reader must also be radio-based.

Alternatively, a radio-based transmitter of the radio-based user data communication device of the data carrier could be used as transmitter of the release device of the data carrier in order to save the optical transmitter of the data carrier. However, one of the two signals (release request signal or enable signal) must always be transmitted by optical means, so that an owner of the disk by the fact that he brings the disk in the optical transmission range to the reader, the activation of the disk cause and thus z. B. can give his declaration of intent to a payment process. Thus, at least either the transmitter or the receiver of the release device of the data carrier and, correspondingly, the receiver or the transmitter of the security device of the reader must be optical.

As a release request signal, the data carrier preferably sends a signal selected from the following group: Subcarrier signal with constant frequency (for example a few kHz, preferably 2 to 1000 kHz), data signal of a random number sequence, other data signal. Likewise, the data carrier may send as an enable request signal any signal which is modulated by at least one signal, preferably by a signal selected from the aforementioned group. As a result, the release signal can be better distinguished from interference signals, especially when a reflector is used as a security device of the reader. But even in a security device comprising an electronic circuit which generates the release signal to be sent from the received release request signal, one of the aforementioned release request signals is preferably transmitted. Since a correspondingly complex release signal is generated from the comparatively complex release request signal, attack attempts in which an attacker attempts to emulate the release signal can be particularly effectively fended off.

Further features and advantages of the invention will become apparent from the following description of embodiments of the invention and other alternative embodiments in conjunction with the drawings. In it show schematically:

1 a security system according to the invention, comprising a portable data carrier and a reader with security device,

2 the portable data carrier according to a first and second embodiment variant,

3 the reader according to the second embodiment,

4 the reader according to another embodiment and

5 the portable data carrier according to the further embodiment.

In 1 schematically is a security system according to the invention with a portable data carrier 1 as well as a reader 30 with safety device 45 shown. The disk 1 has a radio-based user data communication device 20 with antenna 20a , The reader 30 in turn has one for user data exchange with the radio-based user data communication device 20 of the disk 1 suitable radio-based user data communication device 55 with antenna 50a ,

The disk 1 also has an optical transmitter 10a and an optical receiver 10b , Before the disk 1 by means of the radio-based user data communication device 20 safety-critical user data 103 processed, z. As required for an electronic payment operation user data, and / or via the user data communication device 20 received safety-critical commands 103 , z. As a command, electronically on the disk 1 to clear stored money, sends the disk 1 first by means of the optical transmitter 10a a release request signal 101 to the reader 30 ,

The security device 45 in turn sends an enable signal 102 to the disk 1 back, with the release request signal 101 in a given relationship.

In the present case, the safety device 45 a reflector (first embodiment), the release request signal 101 reflected. The disk 1 receives the reflected release request signal by means of the receiver 10b as a release signal 102 and checks if the received enable signal 102 identical (due to the signal propagation times insignificantly time-delayed) with the release request signal 101 is. This serves to enable the enable signal 102 To distinguish from interference signals and fend off attack attempts in which an attacker tries to clear the release signal 102 imitate. Only after a positive comparison result sends the disk 1 safety-critical user data 103 by means of the radio-based user data communication device 20 and / or processed by means of the radio-based user data communication device 20 received safety-critical commands 103 ,

The reflector 45 is outside the housing of the user data communication device 55 attached and forms together with this the reader 30 , The reflector can also be attached to the antenna 50a , which is designed here as a coil, be attached.

Alternative to the reflector 45 can as a safety device 45 also an "electronic reflector" are used (second embodiment), which has a receiver, a transmitter and an electronic circuit (in 1 not shown). The "electronic reflector" receives the release request signal 101 , generates the release signal from it 102 that with the release request signal 101 in a given relationship, and sends it to the disk 1 , The disk 1 accordingly checks again whether the received enable signal 102 with the release request signal 101 in the predetermined relationship stands to the release signal 102 to distinguish from interfering signals and to ward off attack attempts in which an attacker tries to clear the enable signal 102 imitate.

So the disk 1 the transmission of safety-critical user data by means of the user data communication device 20 releases and / or by means of the radio-based user data communication device 20 received safety-critical commands 103 processed, thus the release request signal 101 the security device 45 reach with a certain intensity and the re-emitted release signal 102 the disk 1 , If the disk 1 that is, in a visually dense cover, for example in a pocket, a wallet, a protective cover or other suitable cover or at a greater distance from the security device 45 may indeed be the radio-based user data communication device 20 of the disk 1 from the payload communication device 55 of the reader 30 be addressed. Sending security-critical data from the disk 1 by means of the radio-based user data communication device 20 of the disk 1 and / or the processing by means of the radio-based user data communication device 20 of the disk 1 received safety-critical commands 103 but is blocked.

This provides effective protection against unauthorized reading on the disk 1 stored data and against unauthorized access safety-critical functionalities of the data carrier 1 A statement of intent to release safety-critical data or functionalities (eg in connection with a financial transaction) then consists of the data carrier 1 so close to the reader 30 to bring that release request signal 101 and the enable signal 102 can be transmitted.

The in 1 purely schematically illustrated portable data carrier 1 is in 2 shown in more detail. The disk 1 has a user data communication device 20 with antenna 20a and a control device 2 with data storage 2m , Furthermore, the disk has 1 via a release device 10 , with optical transmitter 10a , z. B. an IR transmitter diode 10a , optical receiver 10b , z. B. an IR receiving diode 10b , and a data store 10m , The control device 2 , the payload communication device 20 and the release device 10 can communicate with each other via data lines 4 communicate. Likewise, the control device 2 via a data line 4 to the controller 2 associated data storage 2m address and the release device 10 the release device 10 associated data storage 10m ,

The for the supply of the data carrier 1 required electrical energy is radio-based by means of the user data communication device 20 received and over the data lines 4 distributed. As soon as the disk 1 in the radio field of the user data communication device 55 of the reader 30 electrical energy is available to supply the components 2 . 10 . 20 of the disk 1 available and the release device 10 of the disk 1 sends (if necessary repeatedly) a release request signal 101 by means of the transmitter 10a to initiate the above-described release process. The release device 10 then receives by means of the receiver 10b the enable signal 102 and checks if the received enable signal 102 to the release request signal 101 in the data store 10m the release device 10 stored, predetermined relationship stands and raises if positive result of the examination the previously described partially blocking the radio-based transmission of user data and / or the processing of radio-based received commands 103 on.

To check if the received enable signal 101 with the transmitted release request signal 102 in the data store 10m stored predetermined relationship, the release device has 10 preferably via means for varying a signal or data stream resulting from the release request signal 101 a the release signal 102 derives corresponding signal, as well as via a device for comparing this signal with the received enable signal 102 , The means for modifying a signal may be an electronic circuit, preferably an electronic circuit equipped with an integrated electronic circuit.

The optical transmitter 10a is in a recess 11 a housing 5 or substrate 5 of the disk 1 attached, from which the release request signal 101 can escape, and the optical receiver 10b in a further recess 12 for this to be the release signal 102 can receive. There are two separate recesses 11 . 12 for the transmitter 10a and the receiver 10b provided for that by the transmitter 10a emitted release request signal 101 not directly to the recipient 10b meets. Also can each have a cover to protect the transmitter 10a and the recipient 10b be provided.

The disk 1 may additionally or alternatively to the user data communication device suitable for receiving electrical energy 20 also have other sources of energy such. B. via a built-in battery. The control device 2 of the disk 1 may include a security and / or a smart card chip.

In 3 is a reader 30 with a safety device 45 represented, which is designed as an "electronic reflector" (second embodiment).

The reader 30 comprises a user data communication device 55 with high frequency circuit 50 and antenna 50a for radio-based user data communication with the user data communication device 20 of the disk 1 , The high frequency circuit 50 is via a data line 54 with a control device 52 the user data communication device 55 connected. To the control device 52 belongs to a data store 52m that is over a data line 54 from the controller 52 can be addressed. In the data storage z. B. be executed program code stored. For data communication with other devices has the controller 52 the user data communication device 55 via a contact interface 57 that have a data line 54 from the controller 52 can be addressed. The power supply of the control device 52 via the contact-based power connections 56 , The data store 52a the control device 52 and the high frequency circuit 50 be over the data lines 54 from the controller 52 supplied with electrical energy.

The reader 30 further comprises a safety device 45 with an optical transmitter 40b , such as B. an IR transmitter diode, an optical receiver 40a , such as B. an IR receiving diode, a safety circuit 40 and a data store 40m that's over the data line 44 from the safety circuit 40 is addressed. The security device 45 receives by means of the receiver 40a the release request signal 101 and generates from it by means of the safety circuit 40 the enable signal 102 that with the release request signal 101 in one, in the data store 40m stored, predetermined relationship stands, and sends this by means of the transmitter 40b to the disk 1 , The power supply of the safety device 45 via the contact-based power connections 46 ,

Around the enable signal to be sent 102 from the received release request signal 101 to generate, has the safety circuit 40 preferably via means for varying a signal or data stream resulting from the release request signal 101 the enable signal 102 derives. The means for modifying the signal or data stream may be an electrical circuit, preferably an electrical circuit equipped with an integrated electronic circuit. The means for changing a signal or data stream of the safety circuit 40 is particularly preferably identical to the previously described device for changing a signal or data stream of the data carrier 1 ,

The user data communication device 55 and the security device 45 form separate assemblies, between which there is no data connection. Thus, the security device 45 that only have a power connection 46 needed to be retrofitted even with a conventional reader.

The optical receiver 40a is in a housing recess 41 arranged so that this the release request signal 101 can receive, and the optical transmitter 40b in another housing recess 42 from which the transmitted enable signal 102 can escape.

In 4 is a reader 30 shown according to a further embodiment. This is different from the one in 3 illustrated reader 30 in that, instead of the optical transmitter 40b an antenna 40d to send the enable signal 102 is provided.

One to this reader 30 according to the alternative embodiment, suitable portable data carrier 1 is in 5 shown. This differs accordingly from that in 2 portrayed portable data carrier 1 in that he does not have an optical receiver 10b has. Instead, a direct data line 4a between the release device 10 and the payload communication device 20 intended. This disk 1 receives that from the in 4 illustrated reader 30 radio-transmitted release signal 102 by means of the user data communication device 20 that this over the additional data line 4a directly to the release device 10 forwards. This then checks whether the received enable signal 102 with the transmitted release request signal 101 is in the predetermined relationship, and raises the positive result of the test, the above-described at least partially lock the radio-based transmission of payload 103 and / or processing radio-based received commands 103 on. The advantage of this embodiment is that the optical receiver 10b of the disk 1 can be saved. Alternatively, the release request signal 101 be transmitted by radio to the optical transmitter 10a of the disk 1 save. However, one of the two signals must be 101 . 102 always be transmitted by optical means.

Generally it is, even if the release request signal 101 and the enable signal 102 optically transmitted, does not require both signals 101 . 102 be transmitted in the same frequency range. So z. B. the release request signal 101 be sent in the range of infrared radiation and the enable signal 102 be returned in the visible light range. In this case, the owner of the disk 1 recognize that the release process is taking place.

The disk 1 and the reader 30 may include other signal processing devices, in particular amplifiers, analog-to-digital converters and digital-to-analog converters.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 10317257 A1 [0003, 0004, 0006]

Cited non-patent literature

• ISO IEC 14443 [0026]
• ISO / IEC 7810 [0027]

Claims (15)

Method for activating a portable data carrier ( 1 ) for the payload data communication with a reading device ( 30 ) via a radio-based user data communication device ( 55 ) of the reader ( 30 ), comprising the following steps: sending a release request signal ( 101 ) from the disk ( 1 ) to the reader ( 30 ), Sending a release signal ( 102 ) received with the received release request signal ( 101 ) is in a predetermined relationship, from the reader ( 30 ) to the data carrier ( 1 ), Checking in data medium ( 1 ), whether the received enable signal ( 102 ) with the transmitted release request signal ( 101 ) is in the predetermined relationship, and if the result of the check is positive, at least partial cancellation of a data carrier-internal blockage of a radio-based transmission of user data ( 103 ) from the disk ( 1 ) to the radio-based user data communication device ( 55 ) of the reader ( 30 ) and / or a processor of the radio-based user data communication device ( 20 ) of the data carrier ( 1 received commands ( 103 ), the release request signal ( 101 ) or the release signal ( 102 ) or both signals ( 101 . 102 ) are transmitted by optical means and the radio-based user data communication device ( 55 ) of the reader ( 30 ) when sending the enable signal ( 102 ) to the data carrier ( 1 ) is not involved. Method according to Claim 1, characterized by the further step of generating the enable signal ( 102 ) based on the release request signal ( 101 ) such that the two signals ( 101 . 102 ) or that the release request signal ( 101 ) is subjected to at least one of the following signal processing operations: division in frequency by 2 * N, where N is a natural number, modulation with a subcarrier signal, change in pulse length, binary inversion, encryption, time delay. Method according to one of claims 1 or 2, characterized in that the release request signal ( 101 ) or the release signal ( 102 ) or both signals ( 101 . 102 ) are transmitted optically in the area of the terahertz radiation or in the area of the infrared radiation or in the area of the visible light or in the area of the UV radiation. Reader ( 30 ), comprising a radio-based payload data communication device ( 55 ) for the radio-based exchange of user data ( 103 ) with a portable data carrier ( 1 ) as well as a safety device ( 45 ), the safety device ( 45 ), one from a portable data medium ( 1 ) release request signal ( 101 ) and a release signal ( 102 ) to be sent with the received release request signal ( 101 ) is in a predetermined relationship, the release request signal ( 101 ) or the release signal ( 102 ) or both signals ( 101 . 102 ) are optical signals and the radio-based payload data communication device ( 55 ) of the reader ( 30 ) when sending the enable signal ( 102 ) to the data carrier ( 1 ) is not involved. Reader ( 30 ) according to claim 4, characterized in that the reading device ( 30 ) no data connection between the radio-based user data communication device ( 55 ) and the security device ( 45 ) having. Reader ( 30 ) according to claim 4 or 5, characterized in that the safety device ( 45 ) an optical reflector ( 45 ). Reader ( 30 ) according to claim 6, characterized in that the optical reflector ( 45 ) is designed as a diffusely reflecting surface or a retroreflector selected from the following group of retroreflectors is: plano-optical angle reflector, retro-reflector, triple mirror, triple prism, biconical reflector constructions, rotationally symmetrical lens reflector such as cat's eye or Luneber's lens. Reader ( 30 ) according to claim 4 or 5, characterized in that the safety device ( 45 ) comprises an electronic circuit consisting of the received release request signal ( 101 ) the enable signal to be sent ( 102 ) generated. Reader ( 30 ) according to claim 8, characterized in that the electronic circuit is arranged, the release request signal ( 101 ) undergo at least one of the following signal processing operations: frequency division by 2 * N, where N is a natural number, modulation with a subcarrier signal, change in pulse length, binary inversion, encryption, time delay. Reader ( 30 ) according to claim 8 or 9, characterized in that the safety device ( 45 ) an optical receiver ( 40a ) or an optical transmitter ( 40b ) or an optical receiver ( 40a ) and optical transmitter ( 40b ), which are designed for operation in the field of terahertz radiation or in the field of infrared radiation or in the region of visible light or in the region of UV radiation. Reader ( 30 ) according to one of the preceding claims, characterized in that the user data communication device ( 55 ) of the reader ( 30 ) according to ISO / IEC 14443, ISO / IEC 18092, ISO / IEC 15693, ISO / IEC 18000 or a similar standard. Security system comprising a reader ( 30 ) according to one of claims 4 to 11 and at least one portable data carrier ( 1 ), where the data carrier ( 1 ) a release device ( 10 ) with a transmitter ( 10a ) and a receiver ( 10b ), at least one of which is optical, as well as for radio-based transmission of user data ( 103 ) to the radio-based user data communication device ( 55 ) of the reader ( 30 ) a radio-based user data communication device ( 20 ) and the release device ( 10 ) of the data carrier ( 1 ) by means of its transmitter ( 10a ) the release request signal ( 101 ) to the security device ( 45 ) of the reader ( 30 ) and that of the security device ( 45 ) of the reader ( 30 ) released enable signal ( 102 ) by means of its recipient ( 10b ) and to check whether the received enable signal ( 102 ) with the transmitted release request signal ( 101 ) is in the predetermined relationship, and if the result of the check is positive, a volume-internal blockage of the radio-based transmission of user data ( 103 ) via the radio-based user data communication device ( 20 ) of the data carrier ( 1 ) and / or processing via the radio-based user data communication device ( 20 ) of the data carrier ( 1 received commands ( 103 ) at least partially cancel. Security system according to claim 12, characterized in that the data carrier ( 1 ) is set up as a release request signal ( 101 ) to transmit a modulated signal which is preferably selected from the following group of signals: constant frequency subcarrier signal, random number sequence data signal, other data signal. Security system according to claim 12 or 13, characterized in that the receiver of the release device ( 10 ) of the data carrier ( 1 ) is a radio-based receiver that is part of the radio-based user data communication device ( 20 ) of the data carrier ( 1 ). Safety system according to one of Claims 12 to 14, characterized in that the transmitter ( 10a ) or the recipient ( 10b ) or transmitter ( 10a ) and receiver ( 10b ) of the release device ( 10 ) of the data carrier ( 1 ) is an optical transmitter or receiver which transmits or receives in the field of terahertz radiation or in the range of the infrared radiation or in the range of the visible light or in the range of the UV radiation.

Images