Personal digital identity device with near field and non near field radios for access control
A personal digital ID device provides a digital identifier to a service for a predetermined duration in response to user interaction. The user interaction may include a button press. The personal digital ID device may be in the form of a bracelet, a key fob, or other form factor. The service may be provided by a mobile device, in the cloud, or elsewhere.
1. A personal digital ID device comprising:
a crypto/cipher engine having at least one digital identifier including one or more keys for challenge-response;
a near field radio;
a non-near field radio; and
a processor;
wherein the processor, the crypto/cipher engine, the near field radio, and the non-near field radio are configured to make the one or more keys for challenge-response available to perform authentication with a cloud service through a mobile device using the non-near field radio, and are further configured to make the one or more keys for challenge-response available to perform authentication with an access control device using the near field radio.
2. The personal digital ID device of claim 1 wherein the access control device comprises a building access control device.
3. The personal digital ID device of claim 2 further comprising a hardware based interaction component accessible to a user of the personal digital ID device.
4. The personal digital ID device of claim 3 wherein the identity authentication to a cloud service occurs only after the user interacts with the hardware based interaction component.
5. The personal digital ID device of claim 3 wherein the identity authentication to a building access control device occurs only after the user interacts with the hardware based interaction component.
6. The personal digital ID device of claim 2 wherein the one or more keys comprises a first cryptographic key to perform authentication to the cloud service, and a second cryptographic key to perform authentication to the building access control device.
7. The personal digital ID device of claim 6 wherein the first cryptographic key and the second cryptographic key are the same.
8. A personal digital ID device comprising:
a near field radio;
a non-near field radio; and
a smartcard secure element including at least one digital identifier;
wherein the smartcard secure element makes use of the at least one digital identifier to provide identity authentication to a cloud service through a mobile device using the non-near field radio, and makes use of the at least one digital identifier to provide identity authentication to an access control device using the near field radio.
9. The personal digital ID device of claim 8 wherein the access control device comprises a building access control device.
10. The personal digital ID device of claim 9 further comprising a hardware based interaction component accessible to a user of the personal digital ID device.
11. The personal digital ID device of claim 10 wherein the identity authentication to a cloud service occurs only after the user interacts with the hardware based interaction component.
12. The personal digital ID device of claim 10 wherein the identity authentication to a building access control device occurs only after the user interacts with the hardware based interaction component.
13. The personal digital ID device of claim 9 wherein the at least one digital identifier comprises at least one cryptographic key.
14. The personal digital ID device of claim 13 wherein the at least one cryptographic key comprises a first cryptographic key to provide identity authentication to the cloud service, and a second cryptographic key to provide identity authentication to the building access control device.
15. The personal digital ID device of claim 14 wherein the first cryptographic key and the second cryptographic key are the same.
16. The personal digital ID device of claim 9 wherein providing identity authentication comprises executing at least one security applet on the smartcard secure element.
17. The personal digital ID device of claim 16 wherein the at least one security applet comprises a first security applet to provide identity authentication to the cloud service, and a second security applet to provide identity authentication to the building access control device.
18. The personal digital ID device of claim 17 wherein the first security applet and the second security applet are the same.
19. A personal digital ID device comprising:
a crypto/cipher engine having at least one digital identifier;
a near field radio;
a non-near field radio; and
a processor;
wherein the processor, the crypto/cipher engine, the near field radio, and the non-near field radio are configured to make the at least one digital identifier available to perform authentication with a cloud service through a mobile device using the non-near field radio, and are further configured to make the at least one digital identifier available to perform authentication with an access control device using the near field radio.
20. The personal digital ID device of claim 19 wherein the access control device comprises a building access control device.
21. The personal digital ID device of claim 20 further comprising a hardware based interaction component accessible to a user of the personal digital ID device.
22. The personal digital ID device of claim 20 wherein the at least one digital identifier is made available to the cloud service only after the user interacts with the hardware based interaction component.
23. The personal digital ID device of claim 19 wherein the crypto/cipher engine comprises at least one smartcard secure element.