Virtual credentials and licenses

A non-transitory computer-readable medium containing software that provides a virtualized credential of a holder, the software comprising:

• executable code that, for a given credential having credential data, authorizes a subset of the credential data to be sent to a device of a relying party that is different from the holder, wherein the subset of the credential data selected from the credential data depends on at least one of:
• a role of the relying party, selection by the holder, and contextual data of the relying party;
• executable code that transmits a cryptogram from a device of the holder to the device of the relying party using a direct NFC or Bluetooth communication link between the device of the holder and the device of the relying party, the cryptogram including the subset of the credential data and being generated as a function of cryptographic information associated with a device of the holder;
• executable code that presents the cryptogram to a verification service for verification;
• executable code that, in response to the verification, receives a verified version of the subset of the credential data;
• and
• executable code that causes at least some of the verified version of the subset of the credential data to be displayed on a screen of the device of the relying party.

A non-transitory computer-readable medium containing software that provides a virtualized credential of a holder, the software comprising:

• executable code that receives a request for credential data associated with a given credential, the request being generated in response to an interaction between a device of the holder and the device of a relying party different from the holder;
• executable code that authorizes a subset of the credential data to be displayed, wherein the subset of the credential data selected from the credential data depends on an ad hoc selection of corresponding credential data by the holder via the device of the holder for inclusion in the subset of the credential data, the ad hoc selection by the holder applicable to only the request for credential data associated with the interaction between the device of the holder and the device of the relying party;
• executable code that presents the subset of the credential data to a verification service for verification;
• executable code that receives a verified version of the subset of the credential data from the verification service;
• and
• executable code that displays at least some of the verified version of the subset of the credential data on a screen of at least one of the device of the holder or the device of the relying party.