US 12,395,486 B2
Credential gateway storing different credentials on different secure storage types
Krishna Kumar Chandran, Chennai (IN); and Rameshbabu R. Songukrishnasamy, Austin, TX (US)
Assigned to ASSA ABLOY AB, Stockholm (SE)
Appl. No. 17/757,518
Filed by ASSA ABLOY AB, Stockholm (SE)
PCT Filed Dec. 17, 2020, PCT No. PCT/EP2020/086841
§ 371(c)(1), (2) Date Jun. 16, 2022,
PCT Pub. No. WO2021/123031, PCT Pub. Date Jun. 24, 2021.
Claims priority of application No. 201941052449 (IN), filed on Dec. 17, 2019.
Prior Publication US 2023/0015030 A1, Jan. 19, 2023
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/0853 (2013.01) [H04L 63/20 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a credential gateway from a client device, a request to obtain a digital credential for accessing a secure resource, the credential gateway being configured to coordinate an exchange of digital credentials associated with different secure resource types with a plurality of client devices;
communicating the request to a server associated with the secure resource;
receiving, by the credential gateway from the server associated with the secure resource, a data object that includes the digital credential, the data object specifying on which of a first physical type of secure storage comprising a first physical device of the client device and a second physical type of secure storage comprising a second physical device of the client device to store the digital credential;
selecting, by the credential gateway, based on the data object, a security protocol from a plurality of security protocols;
receiving, by a credential gateway application implemented on the client device, input from a user to add a new digital credential, the credential gateway application being configured to store multiple digital credentials for different types of secure resources associated with different manufacturers; and
providing, by the credential gateway, the digital credential to the client device in accordance with the selected security protocol, the client device determining whether to store the digital credential in the first physical type of secure storage of the client device or the second physical type of secure storage of the client device based on the data object the credential gateway received from the server associated with the secure resource, the credential gateway application being configured to store a first digital credential on a portion of the first physical type of secure storage and configured to store a second digital credential on the second physical type of secure storage of the client device.