The Identity
  Credential APIs provide an interface to a secure store
  for user identity documents. These APIs communicate with the
  credstore system service which in turn use the Identity
  Credential HAL to communicate with Secure Hardware.
The Identity Credential HAL is accessed through
  IIdentityCredentialStore which provides an interface to a secure
  store for user identity documents. To the extent possible, specification of
  the message formats and semantics of communication with credential
  verification devices and issuing authorities (IAs) is out of scope for this
  HAL. It provides the interface with secure storage but a credential-specific
  Android application are be required to implement the presentation and
  verification protocols and processes appropriate for the specific credential
  type.
Implementation instructions and VTS test information can be found at: