Abstract: The inventive method allows to secure data relating to users of a public key infrastructure who may present certificates (11) at an institution (30) in order to initiate transactions. For this purposes the institution (30) uses and securely stores a secret key or a key pair which is designed for encrypting and decrypting data. Based on an agreement between a certificate holder and the institution (30), corresponding relational data are generated. Then said relational data are encrypted with the institution's (30) secret key or the first key of said key pair. Subsequently the encrypted relational data are integrated into the certificate (11) which preferably adheres to ITU recommendation X.509 version 3.

Abstract: The inventive method allows to secure data relating to users of a public key infrastructure who may present certificates (11) at an institution (30) in order to initiate transactions. For this purposes the institution (30) uses and securely stores a secret key or a key pair which is designed for encrypting and decrypting data. Based on an agreement between a certificate holder and the institution (30), corresponding relational data are generated. Then said relational data are encrypted with the institution's (30) secret key or the first key of said key pair. Subsequently the encrypted relational data are integrated into the certificate (11) which preferably adheres to ITU recommendation X.509 version 3.

Abstract: The method allows to register user in a public-key infrastructure based on credentials, including biometric data, such as data related to a fingerprint, presented to an authority (100) of the public-key infrastructure, comprising the steps of connecting a token (10), comprising a processor (2), an interface device (3) and a memory device (5), containing a private-key (51) and a public-key (52) for the user of the token (10) and a private-key (53) issued by the authority (100); reading biometric data (58) of the user, such as data derived from a fingerprint, by a biometric input device (1; 31); signing the biometric data (58) with the private-key (53) issued by the authority (100); sending a certification request, containing the public-key (52), signed biometric data (58) and additional credentials of the user, to the authority (100); verifying and registering the received data by the authority (100); storing the biometric data (58) in a database (104); returning a corresponding certificate (520) and storing t