A wireless key device comprising: a wireless transceiver and antenna configured to communicate wirelessly with an access terminal and a server, wherein the server is configured to identify a filter based on at least a set of user permissions and a geographic location of the key device and select a subset of the plurality of digital credentials based on the filter; and a processor configured to: authenticate the key device with the server; retrieve the filtered plurality of digital credentials from the server, the filtered plurality of digital credentials associated with a plurality of access terminals (16a-16n) within a selected geographic proximity to the key device; poll the access terminal via the wireless transceiver and antenna for an access terminal identification which uniquely identifies the access terminal; receive the access terminal identification from the access terminal in response to the polling from the key device; identify a digital credential of the filtered plurality of digital credentials associated with the access terminal based on the access terminal identification; and transmit the selected digital credential to the access terminal via the wireless transceiver and antenna. a wireless transceiver and antenna configured to communicate wirelessly with an access terminal and a server, wherein the server is configured to identify a filter based on at least a set of user permissions and a geographic location of the key device and select a subset of the plurality of digital credentials based on the filter; and a processor configured to: authenticate the key device with the server; retrieve the filtered plurality of digital credentials from the server, the filtered plurality of digital credentials associated with a plurality of access terminals (16a-16n) within a selected geographic proximity to the key device; poll the access terminal via the wireless transceiver and antenna for an access terminal identification which uniquely identifies the access terminal; receive the access terminal identification from the access terminal in response to the polling from the key device; identify a digital credential of the filtered plurality of digital credentials associated with the access terminal based on the access terminal identification; and transmit the selected digital credential to the access terminal via the wireless transceiver and antenna. authenticate the key device with the server; retrieve the filtered plurality of digital credentials from the server, the filtered plurality of digital credentials associated with a plurality of access terminals (16a-16n) within a selected geographic proximity to the key device; poll the access terminal via the wireless transceiver and antenna for an access terminal identification which uniquely identifies the access terminal; receive the access terminal identification from the access terminal in response to the polling from the key device; identify a digital credential of the filtered plurality of digital credentials associated with the access terminal based on the access terminal identification; and transmit the selected digital credential to the access terminal via the wireless transceiver and antenna.