Mobile credential with online/offline delivery
Providing virtualized credential information includes determining whether a relying party device has access to a network/cloud infrastructure that contains at least some of the credential information, a license holder device providing the virtualized credential information directly to the relying party device in response to the relying party device not having access to the network/cloud infrastructure, and displaying at least some of the subset of credential data on a screen of the device of the relying party. Providing virtualized credential information may also include the license holder device providing authorization data to the relying party device in response to the relying party device having access to the network/cloud infrastructure and determining a preference for the relying party device to receive at least some of the virtualized credential information from the network/cloud infrastructure.
1. A method of providing virtualized credential information, comprising:
determining that a relying party device has access to a network/cloud infrastructure that contains the virtualized credential information;
upon determining that the relying party device has access to the network/cloud infrastructure, enabling the relying party device to choose whether to obtain the virtualized credential information directly from the network/cloud infrastucture, directly from a license holder device, or from a combination of both the network/cloud infrastructure and the license holder device; and
displaying at least a subset of the virtualized credential information on a screen of the relying party device.
2. A method, according to claim 1 , further comprising:
in response to determining the relying device has access to the network/cloud infrastructure, causing the license holder device to provide authorization to at least one of the relying party device or the network/cloud infrastucture, the authorization enabling the relying party device to obtain the virtualized credential information from the network/cloud infrastructure.
3. A method, according to claim 1 , further comprising providing authorization for the network/cloud infrastructure to release information directly to the relying party device, wherein the authorization is triggered by proximity between the relying party device and the license holder device.
4. A method, according to claim 1 , wherein that the relying party device has access to the network/cloud infrastructure is based, at least in part, on connectivity status between the relying party device and the network/cloud infrastructure.
5. A method, according to claim 4 , wherein the connectivity status includes at least one of: historical error rate, historical throughput rate, expected error rate, expected throughput rate, presumed error rate, or presumed throughput rate.
6. A method, according to claim 1 , wherein a form of at least some of the virtualized credential information provided directly from the license holder device to the relying party device varies according to a communication bandwidth therebetween.
7. A method, according to claim 2 , wherein the authorization comprises authorization data.
8. A method, according to claim 7 , wherein the authorization data includes a credential verification cryptogram (CVC) that can be verified by the network/cloud infrastructure.
9. A method, according to claim 7 , wherein the authorization data is provided to the relying party device and wherein the autorization data includes a URL of the network/cloud infrastructure.
10. The method, according to claim 2 , wherein the relying party device chooses whether to obtain the virtualized credential informatin directly from the network/cloud infrastructure, directly from the license holder device, or from a combination of both the network/cloud infrastructure and the license holder device based on one or more of: relative throughput of the license holder device and network/cloud infrastructure, relative costs of data transmission from the license holder device and network/cloud infrastructure, or specific data available at each of the license holder device and network/cloud infrastructure.
11. The method, according to claim 1 , wherein enabling the relying party device to choose whether to obtain the virtualized credential information directly from the network/cloud infrastructure, directly from the license holder device, or from a combination of both the network/cloud infrastructure and the license holder device comprises enabling the relying party device to choose which data elements of the virtualized credential information to obtain directly from the network/cloud infrastructure and which data elements of the virtualized credential information to obtain directly from the license holder device.
12. The method, according to claim 1 , wherein a form of at least some of the virtualized credential information provided to or obtained by the relying party device varies depending on whether the at least some of the virtualized credential information was obtained directly from the network/cloud infrastructure or directly from the license holder device.
13. Computer software, provided in a non-transitory computer readable medium, that provides virtualized credential information, the software comprising executable code that implements the method of:
determining whether a relying party device has access to a network/cloud infrastructure that contains the virtualized credential information;
in response to determining the relying party device does not have access to the network/cloud infrastructure, causing the virtualized credential information to be provided directly from a license holder device to the relying party device;
in response to determining the relying party device has access to the network/cloud infrastructure, enabling the relying party device to choose whether to obtain the virtualized credential information directly from the network/cloud infrastructure, directly from the license holder device, or from a combination of both the network/cloud infrastructure and the license holder device; and
displaying at least a subset of the the virtualized credential information on a screen of the relying party device.
14. The computer software, according to claim 13 , wherein a form of at least some of the virtualized credential information provided by the license holder device directly to the relying party device is based, at least in part, on a bandwidth between the relying party device and the license holder device.
15. The computer software, according to claim 13 , further comprising executable code that implements the step of:
in response to determining the relying party device has access to the network/cloud infrastructure, providing authorization to at least one of the relying party device or the network/cloud infrastructure, the authorization enabling the relying party device to obtain the virtualized credential information directly from the network/cloud infrastructure.
16. The computer software, according to claim 15 , wherein the relying party device chooses whether to obtain the virtualized credential information directly from the network/cloud infrastructure, directly from the license holder device, or from a combination of both the network/cloud infrastructure and the license holder device based on one or more of: relative throughput of the license holder device and network/cloud infrastructure, relative costs of data transmission from the license holder device and network/cloud infrastructure, or specific data available at each of the license holder device and network/cloud infrastructure.
17. The computer software, according to claim 13 , wherein determining whether the relying party device has access to the network/cloud infrastructure is based, at least in part, on connectivity status between the relying party device and the network/cloud infrastructure.
18. The computer software, according to claim 13 , wherein enabling the relying party device to choose whether to obtain the virtualized credential information directly from the network/cloud infrastructure, directly from the license holder device, or from a combination of both the network/cloud infrastructure and the license holder device comprises enabling the relying party device to choose which data elements of the virtualized credential information to obtain directly from the network/cloud infrastructure and which data elements of the virtualized credential information to obtain directly from the license holder device.
19. The computer software, according to claim 13 , wherein a form of at least some of the virtualized credential information provided to or obtained by the relying party device varies depending on whether the at least some of the virtualized credential information was obtained directly from the network/cloud infrastructure or directly from the license holder device.
20. The computer software, according to claim 15 , wherein the authorization data is provided to the relying party device and wherein the authorization data includes a URL of the network/cloud infrastructure.