Patent for Credential Gateway Storing Different Credentials on Different Secure Storage Types

Strategic Insights -

A patent filed by inventors Krishna Kumar Chandran and Rameshbabu R. Songukrishnasamy has been published, detailing a system for credential gateways to store different credentials on different secure storage types in client devices. The system enables a credential gateway to coordinate the exchange of digital credentials associated with different secure resource types with a plurality of client devices. The patent, assigned to Assa Abloy AB, provides a method for receiving a request to obtain a digital credential for accessing a secure resource, communicating the request to a server associated with the secure resource, and receiving a data object that includes the digital credential.

Key Takeaways:

  • The patent provides a method for a credential gateway to coordinate the exchange of digital credentials associated with different secure resource types with a plurality of client devices.
  • The system enables client devices to store digital credentials on different secure storage types, such as an embedded secure element (eSE) and a trusted execution environment (TEE).
  • The credential gateway application is configured to store multiple digital credentials for different types of secure resources associated with different manufacturers.
  • The system includes operations such as determining a manufacturer associated with the client device, exchanging cryptographic keys for accessing secure storage, and storing system keys on a portion of the secure storage.
  • The credential gateway selects a security protocol based on the data object received from the server associated with the secure resource.
  • The client device determines whether to store the digital credential in the first physical type of secure storage or the second physical type of secure storage based on the data object received from the credential gateway.
  • The system includes a credential gateway application that is configured to store a first digital credential on a portion of a secure element and a second digital credential on a trusted execution environment of the client device.
  • The system provides a secure way to store and process digital credentials on client devices, enabling secure access to shared resources.

Statistics:

  • The patent includes 16 claims in total.
  • The system provides a method for storing different credentials on different secure storage types in client devices.
  • The credential gateway application is configured to store multiple digital credentials for different types of secure resources associated with different manufacturers.
  • The system includes operations related to determining a manufacturer associated with the client device, exchanging cryptographic keys, and storing system keys.
  • The client device determines whether to store the digital credential in the first physical type of secure storage or the second physical type of secure storage.

Sources:

  • Chandran, Krishna Kumar. Credential gateway storing different credentials on different secure storage types. U.S. Patent Number 12395486, filed December 17, 2020, and published online on August 19, 2025. Patent URL (for desktop use only): https://ppubs.uspto.gov/pubwebapp/external.html?q=(12395486)&db=USPAT&type=ids