Vendor and Product Reality

NXP is one of the world's largest automotive semiconductor suppliers and a top-tier player in industrial and IoT silicon. The EdgeLock secure element and EdgeLock Secure Enclave product families provide certified secure key storage, RSA and ECC signing primitives, AES symmetric operations, secure boot anchors, and provisioning flows compatible with the major industry profiles: GlobalPlatform, GSMA SAS-UP for eUICC, FIDO, Matter, and the automotive security profiles defined by AUTOSAR and SHE. The deployment scale is genuine: secure-element and secure-enclave capabilities ship in gateway processors, telematics units, body-control modules, and zonal controllers across the major OEM platforms. EdgeLock 2GO offers a managed onboarding service that injects credentials at manufacture and rotates them through life. The roadmap addresses post-quantum primitives at the algorithmic level, with NXP publicly committed to NIST PQC migration paths.

The conventional secure-element role is well served. A device with an EdgeLock secure element can prove possession of a credentialed private key, can boot only signed firmware, can attest to a measured boot state, and can refuse to operate if its tamper sensors fire. For the bulk of authentication, integrity, and confidentiality requirements that automotive, industrial, and IoT systems impose, the existing architecture is sufficient and getting better with each generation.

The Architectural Gap: PKI Roots and the Quantum Cliff

Two structural properties define what a secure element can and cannot do. First, the root of trust is a PKI root. Identity is asserted by demonstrating control of a private key whose corresponding public key sits at the bottom of a certificate chain anchored in a manufacturer or operator certificate authority. The asymmetric algorithms that make this work, RSA, ECDSA over standard curves, EdDSA, are vulnerable to cryptanalytically relevant quantum computers. The migration story for the industry is the NIST PQC suite (ML-KEM, ML-DSA, SLH-DSA), and NXP is engaged with it. But every device fielded today with PKI-rooted credentials carries an implicit dependency on assumptions that the post-quantum migration is racing to retire. Re-keying the global automotive fleet, the deployed eUICC base, and the industrial endpoint estate is a multi-decade undertaking whose end state is, at best, a different PKI rooted in different algorithms.

Second, key custody is not behavior. A secure element answers the question, "does this device hold the credentialed key?" It cannot answer the questions a connected vehicle, a defense electronics suite, or a safety-critical industrial controller increasingly needs to answer: has this device behaved consistently with its credentialed history; have its observations correlated as expected with its physical operating context; have its successor credentials chained correctly from a credentialed root through every observed state transition. Those questions concern continuity, a slope of trust evaluated across observed behavior, and continuity is structurally above the secure element. Even a flawless secure element cannot adjudicate it, because the inputs are not in the secure element's view.

The third gap is migration cost. Because conventional identity is keyed, every algorithm rotation requires a credential-replacement event reaching every endpoint. The PQC migration is the most visible instance of a cost the architecture imposes structurally rather than incidentally.

What Keyless Identity Provides

Adaptive Query's keyless-identity primitive treats device identity as a continuity property rather than a key-possession property. A device is identified by the verifiable consistency of its credentialed history: a hash-chain accumulator that records observed state transitions, a trust-slope evaluator that scores the continuity of that history against expected operating context, and a bounded-proof telemetry surface that lets external verifiers reason about the slope from sparse local state without needing to hold or trust any specific long-lived key. Because the primitive does not depend on any particular asymmetric algorithm for the identity property itself, it is post-quantum by construction. Quantum-vulnerable signatures may continue to be used opportunistically, but the identity claim does not collapse when they are retired. The trust-slope record is the identity.

The continuity-identity processor IC consumes the secure element's signing and key-storage primitives where they are useful and adds the accumulator, evaluator, and telemetry path on top. The secure element retains its role as the cryptographic primitive provider. The continuity layer above provides the identity property the secure element is structurally unable to provide on its own.

Composition Pathway

For NXP's automotive franchise the integration is naturally aligned. The continuity-identity IC is an IP block alongside EdgeLock secure-element functionality on the S32 platform, the i.MX families, and the gateway-class microcontrollers that host most ECU security functions today. The block consumes the secure element as a primitive provider rather than displacing it, and the existing software development kits, the Plug & Trust middleware, the EdgeLock host APIs, and the AUTOSAR Crypto Service Manager bindings, are extended rather than replaced. The hash-chain accumulator records measured-boot states, ECU bus observations, and physical-context correlates as the vehicle operates. The trust-slope evaluator runs on the same die or an adjacent secure subsystem, and its outputs are signed using whatever algorithms the secure element currently supports, without making the identity property itself depend on those signatures surviving cryptanalytic advances.

For eUICC and industrial deployments the model is the same with different telemetry. Cellular-modem context, factory-floor sensor correlations, and grid-edge measurements feed the accumulator. Vehicle OEMs gain UNECE R155-aligned cybersecurity evidence that survives algorithm rotation. Medical-device manufacturers gain FDA and EU MDR cybersecurity-postmarket evidence rooted in continuity rather than in keys that will eventually be retired. Defense electronics gain identity that does not collapse on the day a cryptanalytically relevant quantum machine is announced. EdgeLock 2GO continues to provision the cryptographic primitives the continuity layer consumes, and NXP's existing certification pedigree carries forward.

Commercial and Licensing

NXP's competitive position is built on certified secure-element silicon shipped at automotive volumes through automotive-grade qualification, with a customer base that spans every major OEM platform and a substantial fraction of the global tier-one supplier ecosystem. A keyless-identity IP block licensed for integration alongside the EdgeLock secure element extends that position into the post-quantum era without requiring NXP to bet the franchise on any single PQC algorithm transition. For tier-one suppliers and OEMs that face UNECE R155, ISO/SAE 21434, FDA cybersecurity guidance, and EU MDR/Cyber Resilience Act obligations, the continuity property provides the audit evidence that key-possession alone cannot supply. The licensing model fits naturally with NXP's existing IP-block and reference-design business: an integrated continuity-identity block ships as a configurable element in NXP secure subsystems, and the surrounding silicon, software stack, and EdgeLock 2GO provisioning service continue to be the revenue-bearing surfaces. Licensing the continuity-identity primitive to NXP, or to OEMs and integrators that consume NXP silicon at scale, closes the structural gap between excellent secure-element engineering and the identity property the next decade of regulated electronics will require. The secure element remains the right place to keep keys. The trust slope is a layer above, and it is what keyless identity is designed to provide.

Disclosure Scope

The invention described here is Keyless Identity, disclosed in United States Patent Application 19/388,580 (Systems and Methods for Memory-Native Identity and Authentication). The identity property is expressed as a trust slope: a device or agent advances a dynamic hash under an update rule that combines the immediately prior hash with a source of non-exported unpredictability, a volatile per-epoch salt, and a domain-separating tag, and a verifier accepts a presented successor by locally reconstructing the expected successor from its last trusted state under policy-bounded continuity criteria, without long-lived keypairs, certificate authorities, or synchronized registries.

A skilled implementer can build the approach across the enumerated embodiments and their combinations: the unpredictability contribution may derive from a static hardware anchor (for example a TPM, TEE, or SoC identifier) combined with a volatile salt, from a locally observed state vector processed by a strong extractor, or from a hybrid of both in the same step. Disclosed variations include append-only mutation lineage with periodic anchors and bounded proofs, sparse and delayed validation for high-latency or intermittently connected deployments, agent-to-substrate mutation entanglement binding each agent step to a host device hash, predictive successor verification with drift detection, quorum-based recovery after memory loss, entropy-anchor rotation with forward links, optional biometric-assisted reseeding through a privacy-preserving fuzzy extractor, and a segregated fallback adapter for interoperability with legacy signature-based systems in which no fallback material is hashed into the trust slope. Post-quantum resistance follows from reducing security to the unpredictability of per-step inputs and the preimage resistance of the employed hashes and extractors rather than to asymmetric hardness assumptions vulnerable to Shor's algorithm.

The comparison to NXP, its EdgeLock secure element and EdgeLock Secure Enclave product families, and the referenced standards, profiles, and regulatory regimes is external market and technical context assembled from public information. That framing is not part of the filing and is not a claim of United States Patent Application 19/388,580. Statements about NXP products describe the secure-element category at the architecture level and are not assertions of defect; the claimed subject matter is defined solely by the application as filed.