8  EP 1 499 940 B1 7  tistical purposes. [0028] The response step can further comprise trans- mitting by the location entity a part of the predefined pol- icy. This has the advantage that the location entity can instruct the requesting entity to act in certain ways re- garding the identity- relatedinformation, e.g.,notto trans- fer it further, or to delete it after a while, or not to delete it for a certain period. [0029] The location entity may use the connection es- tablished from the client application to the location entity in the redirecting step for the interaction with a person during the transfer step. The benefit of interacting with the person is that the person can be authenticated and can make additions to the predefined policy, andtheben- efitofreusingthe said connection(in contrastto releasing that connection before the acquiring step) is that the in- teraction is possible without delay. [0030] A release of identity-related information to the requesting entity can comprise the following steps: pre- senting information about the requesting entity; present- ing a pre-authorized attribute values known to the loca- tion entity, where pre-authorized means that the prede- fined policy allows the release to the requesting entity, and/or presenting a not pre-authorized attribute values known to the location entity, and/or presenting names of attributes with values unknown to the location entity as- signed to empty fields for entering respective attribute values; requesting for editing the attribute values; and sending the edited attribute values to the requesting en- tity. By doing so, the user is requested only to fill in un- known attribute values and to make about not pre-authorized values. This simplifies the pro- cedure and allows the user to have full control over his personal information requested by the requesting entity. [0031] The differentattribute valuesmaybepresented differently, preferably in different colors. This allows a clear presentation of the information to the user, then can decide which information to enter, del amend, or send unchanged. [0032] The acquiring step can further comprise th steps of generating a random value k by the location en- tity, sending the random value k to the requesting entity on the same connection as the identity-related informa- tion, sending the random value k to the client application to enable the client application to prove its authenticity with respect to the identity-related information to the re- questing entity. This has the advantage that the client application running at the user can be given additional privileges bytherequestingentityafter the transfer of the identity-related information. [0033] In accordance with a second aspect of  present invention, there ispresented a systemaccording to claim 14. [0034] The system facilitates the identification of the relevant authority, i.e. the location entity, for a user with- out the need to contact any third party, thus avoiding a privacy and performance problem present in some prior art solutions. [0035] The system works with standard, SSL- capable HTTP browsers, i.e. secure socket layer capable hyper text transfer protocol browser, and does not require any functionality that requires users to accept that some ad- ditional information, e.g. cookies, or software like active content: Javascript, Java, ActiveX, etc. is installed on their machine. At the same time, it allows for efficiency improvements incases where additional informationcan be stored. [0036] The systemprovides moresecurityagainst cer- tain attacks,e.g.man-in-the- middleattack,thaninknown solutions. [0037] In another example, the client application inter- acts with several location entities. This means the user may have multiple location entities on different places or on the same place, and the client application, together with the person or user, chooses an appropriate one in answer totherequest for thelocationinformation. There- by the location entities can be local or remote. The ad- vantage of such an arrangement is that it avoids a single point offailure for theperson,and enablesprivacyamong the different location entities. [0038] The identity-related information can be provid- ed by a further location entity. Then the identity-related information is obtainable by the requesting entity via the location entity. The location information of the further lo- cation entity is stored on the location entity. The advan- tage of such an arrangement is that it avoids that the client application or person has to choose among the locationentities,while still allowingdifferent typesof iden- tity-related information to be stored in different location entities. DESCRIPTION OF THE DRAWINGS [0039] Preferredembodiments of the invention are de- scribed in detail below, by way of example only, with ref- erence to the following schematic drawings. FIG. 1 showsaschematicillustrationofa systemac- cording to the present invention. FIG. 2 shows a schematic illustration of the mes- sage flow of a first embodiment according to the present invention. FIG. 3 shows a schematic illustration of the mes- sage flow of a second embodiment. FIG. 4 shows a schematic illustration of the mes- sage flow of a third embodiment. FIG. 5 showsanillustrationof a form tobepresented to a potential user with a location query as sent in step II in FIG. 4. FIG. 6 showsa schematic illustration ofan extension of the third embodiment as shown in  FIG. 4. 5