Permission-based system and network for access control using mobile identification credential including mobile passport

A provider system for processing a request for client access at an access touchpoint from a client device of a client, the provider system connected with one or more readers, the provider system comprising a computer programmed to:

• establish a secure local connection between the client device and the provider system via the one or more readers;
• receive, from the client device, a request for client access through an access touchpoint;
• send, to the client device, a request for identification information of the client;
• receive part or all of client information associated with a first mobile identification credential (MIC) which the client device received from a first authorizing party system (APS), the client having consented to release the part or all of client information to the provider system, and the part or all of client information having been verified by the first APS, the first MIC comprising a mobile passport of the client;
• use the verified part or all of client information associated with the first MIC to verify or not verify an identity of the client;
• and
• verify the identity of the client before granting the client the request for the client access;
• the first APS being a separate system from the provider system and from the client device.

An access touchpoint operations method for a user having a user device to request user access at an access touchpoint, the method comprising:

• connecting an access touchpoint device at the access touchpoint to a plurality of readers disposed at distances from the access touchpoint and from each other;
• establishing, by the access touchpoint device serving as a Relying Party System (RPS), a secure local connection between the RPS and a User Mobile-Identification-Credential Device (UMD) via a reader of the plurality of readers, before the user and the UMD reach the access touchpoint;
• sending, by the RPS, a user information request to the UMD, via the secure local connection, seeking release of first Mobile Identification Credential (MIC) user information, the first MIC comprising a mobile passport of the user;
• obtaining, by the RPS before the user and the UMD reach the access touchpoint, authentication of the first MIC user information received in response to the user information request;
• retrieving, by the RPS, user registration information based on the first MIC user information, the user registration information having been provided by the user to the RPS before the RPS sends the user information request to the UMD;
• determining, by the RPS, whether the user registration information matches the first MIC user information or not;
• and
• when the user registration information matches the first MIC user information, providing, by the RPS, approval for the user to proceed past the access touchpoint.