Security Mechanism for Namespaces Used in Electronic Identification on Mobile Devices

This patent describes a security mechanism that protects the separate data areas, or namespaces, used to hold electronic identification credentials on a mobile device. It comes from Thales DIS France SAS, part of the Thales group and a major supplier of digital identity and security technology.

The Problem

Phones are increasingly used to carry official credentials such as a mobile driving licence or a digital ID. Storing several such credentials on one device raises a hard security question: each credential comes from a different authority and must be kept in its own protected area, or namespace, so that one cannot read, alter, or interfere with another. Those namespaces need to be created, isolated, and accessed under strict rules, because a weakness could let a rogue app or a compromised credential reach data it should never see. Designing a mechanism that keeps these identification namespaces cleanly separated and only reachable by authorised parties is essential to trusting a phone as an identity document.

What This Invention Does

The patent sets out a security mechanism for namespaces used in electronic identification on mobile devices. It defines how separate namespaces are established for identification data and how access to each is controlled, so that a given credential and its data stay isolated from others on the same device. The mechanism governs which parties or applications may read from or write to a namespace and enforces those permissions, protecting the stored identity information against unauthorised access and against interference between credentials. The IPC classifications point to methods spanning secure digital transactions and identity handling. By structuring the storage into protected namespaces with enforced access rules, the invention lets a single device hold multiple official credentials while keeping each one secure and separate.

Key Features

• Isolated namespaces. Each identification credential is held in its own protected data area, kept separate from the others.
• Enforced access rules. The mechanism controls which parties or apps may read from or write to each namespace.
• Cross-credential protection. Isolation prevents one credential from reading or interfering with another.
• Mobile focus. The scheme is designed for identity credentials carried on a phone or similar device.
• Secure by design. Access enforcement guards the stored identity data against unauthorised use.

Who Is Behind It

The applicant is Thales DIS France SAS, the digital identity and security arm of the Thales group, which supplies secure documents, smart cards, and digital identity systems to governments and businesses worldwide. The named inventors are Mourad Faher and Carole Bayle. This filing is a divisional application from an earlier related Australian application.

Why It Matters

As governments roll out digital IDs and mobile driving licences, the security of how those credentials are stored on ordinary phones becomes a public trust issue. A mechanism that keeps each credential in a strictly isolated, access-controlled namespace is the kind of foundation that makes carrying official identity on a device safe. Protecting the technology in Australia supports the company’s digital identity products as such schemes expand in the region.

Related Concepts

• Electronic identification – the digital ID credentials this mechanism secures.
• Mobile driver’s license – a common example of an on-phone official credential.
• Namespace – the separated data areas the security mechanism protects.
• Access control – the enforcement of who may read or write each namespace.
• Smart card – the secure-element technology this field grew out of.

---

AU 2026201983 was published in the Australian Official Journal of Patents on 2 April 2026 and is open for public inspection. Patent applications represent inventions that are sought to be protected and do not necessarily reflect commercially available products.