Controlled token distribution to protect against malicious data and resource access

• US 10,305,881 B2
• Filed: 03/05/2018
• Issued: 05/28/2019
• Est. Priority Date: 09/04/2007
• Status: Active Grant

• Current Assignee: Live Nation Entertainment Incorporated
• Original Assignee: Live Nation Entertainment Incorporated
• Inventors: Volini, Phillip, Werneke, John Raymond, Schumaler, Carl, Smith, Michael, Giannantonio, Frank, Iaia, Vito, Moriarty, Sean
• Primary Examiner(s): Tabor, Amare F
• Application Number:
  US15/911,997
• Publication Number:
  US 20180198775A1
• Time in Patent Office: 449 Days
• Field of Search: 713159, 713158
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Techniques are described for controlling data and resource access. For example, methods and systems can facilitate controlled token distribution across systems and token processing in a manner so as to limit access to and to protect data that includes access codes.

Claims

1. A computer system, comprising:

an interface configured to receive a user search query;

a search engine configured to process the user search query, wherein a query result identifying an event corresponding to the user search query is presented at the interface, the interface providing an option to select between a plurality of channels for assigning electronic tickets to the event;

a first data store, the first data store associated with a first channel of the plurality of channels, and configured to store representations of electronic tickets to the event, the first data store being associated with a queue storing requests for the electronic tickets to the event, the requests being queued for processing;

a second data store, the second data store associated with a second channel of the plurality of channels, and configured to store representations of electronic tickets to the event; and

a servo system configured to;

allocate a set of electronic tickets to the event to the first channel, the allocation of the set of electronic tickets being subject to a restriction pertaining to a quantity of electronic tickets to be allocated to a given channel;

identify, by a load balancer, a system load pertaining to a number of the requests in the queue;

identify a subset of electronic tickets from the set of electronic tickets based on the identified system load;

determine that the subset of electronic tickets is to be reallocated to the second channel, the determination that the subset of electronic tickets is to be reallocated being based on the identified system load and the restriction, such that reallocation of the subset of electronic tickets satisfies the restriction; and

reallocate the subset of electronic tickets from the first channel to the second channel.

2. The computer system of claim 1, wherein reallocating the subset of electronic tickets includes:

removing from the first data store a representation of each access right electronic ticket of the subset of electronic tickets; and

adding a representation of each electronic ticket of the subset of electronic tickets to the second data store.

3. The computer system of claim 1, wherein the first and the second channels are different, and wherein each of the first and second channels facilitate assigning electronic tickets to events.

4. The computer system of claim 1, wherein the servo system is configured to identify the subset of electronic tickets further based at least partly on identified data obtained from evaluating data associated with the first or second channel.

5. The computer system of claim 1, wherein the servo system is further configured to determine a value for assigning an electronic ticket to the event.

6. The computer system of claim 5, wherein the first channel is associated with a rule that dynamically determines the value for assigning the electronic ticket to the event, and wherein the second channel is associated with a rule that determined the value for assigning the electronic ticket to be a fixed value.

7. The computer system of claim 1, further comprising:

a web proxy system, including the load balancer and web proxy processors, wherein the web proxy system is configured to selectively block or route inbound requests from remote terminals to a selected destination;

the queue configured to receive requests from the web proxy system;

a transaction system including a load balancer and transaction processors configured to generate transactional pages, populate data caches, provide logic and/or rules for the transaction flows, transmit queue related messaging; and

a cache cluster system including a load balancer and cluster system processors, wherein the cache cluster system is configured to cache data and states for access by other computer system components.

8. A computer-implemented method, comprising:

receiving a user search query;

processing the user search query, wherein processing includes generating a query result that identifies an event corresponding to the user search query, and providing an option to select between a plurality of channels for assigning electronic tickets to the event;

storing first data at a first data store, the first data store being associated with a first channel of the plurality of channels, and configured to store representations of electronic tickets to the event, the first data store being associated with a queue storing requests for the electronic tickets to the event, the requests being queued for processing;

storing second data at a second data store, the second data store being associated with a second channel of the plurality of channels, and configured to store representations of additional electronic tickets to the event;

allocating a set of electronic tickets to the event to the first channel, the allocation of the set of electronic tickets being subject to a restriction pertaining to a quantity of electronic tickets to be allocated to a given channel;

identifying a system load pertaining to a number of the requests in the queue;

identifying a subset of electronic tickets from the set of electronic tickets based on the identified system load;

determining that the subset of electronic tickets is to be reallocated to the second channel, the determination that the subset of electronic tickets is to be reallocated being based on the identified system load and the restriction, such that reallocation of the subset of electronic tickets satisfies the restriction; and

reallocating the subset of electronic tickets from the first channel to the second channel.

9. The computer-implemented method of claim 8, wherein reallocating the subset of electronic tickets includes:

removing from the first data store a representation of each electronic ticket of the subset of electronic tickets; and

adding a representation of each electronic ticket of the subset of electronic tickets to the second data store.

10. The computer-implemented method of claim 8, wherein the first and the second channels are different, and wherein each of the first and second channels facilitate assigning electronic tickets to events.

11. The computer-implemented method of claim 8, wherein a servo system is configured to identify the subset of electronic tickets further based at least partly on identified data obtained from evaluating data associated with the first or second channel.

12. The computer-implemented method of claim 11, wherein the servo system is further configured to determine a value for assigning an electronic ticket to the event.

13. The computer-implemented method of claim 12, wherein the first channel is associated with a rule that dynamically determines the value for assigning the electronic ticket to the event, and wherein the second channel is associated with a rule that determined the value for assigning the electronic ticket to be a fixed value.

14. The computer-implemented method of claim 8, further comprising:

providing a web proxy system, including a load balancer and web proxy processors, wherein the web proxy system is configured to selectively block or route inbound requests from remote terminals to a selected destination, wherein the queue configured to receive requests from the web proxy system;

providing a transaction system including a load balancer and transaction processors configured to generate transactional pages, populate data caches, provide logic and/or rules for the transaction flows, transmit queue related messaging; and

providing a cache cluster system including a load balancer and cluster system processors, wherein the cache cluster system is configured to cache data and states for access by other computer system components.

15. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including:

receiving a user search query;

processing the user search query, wherein processing includes generating a query result that identifies an event corresponding to the user search query, and providing an option to select between a plurality of channels for assigning electronic tickets to the event;

storing first data at a first data store, the first data store being associated with a first channel of the plurality of channels, and configured to store representations of electronic tickets to the event, the first data store being associated with a queue storing requests for the electronic tickets to the event, the requests being queued for processing;

storing second data at a second data store, the second data store being associated with a second channel of the plurality of channels, and configured to store representations of additional electronic tickets to the event;

allocating a set of electronic tickets to the event to the first channel, the allocation of the set of electronic tickets being subject to a restriction pertaining to a quantity of electronic tickets to be allocated to a given channel;

identifying a system load pertaining to a number of the requests in the queue;

identifying a subset of electronic tickets from the set of electronic tickets based on the identified system load;

determining that the subset of electronic tickets is to be reallocated to the second channel, the determination that the subset of electronic tickets is to be reallocated being based on the identified system load and the restriction, such that reallocation of the subset of electronic tickets satisfies the restriction; and

reallocating the subset of electronic tickets from the first channel to the second channel.

16. The computer-program product of claim 15, wherein reallocating the subset of electronic tickets includes:

removing from the first data store a representation of each electronic ticket of the subset of electronic tickets; and

adding a representation of each electronic ticket of the subset of electronic tickets to the second data store.

17. The computer-program product of claim 15, wherein the first and the second channels are different, and wherein each of the first and second channels facilitate assigning electronic tickets to events resources.

18. The computer-program product of claim 15, wherein a servo system is configured to identify the subset of electronic tickets further based at least partly on identified data obtained from evaluating data associated with the first or second channel.

19. The computer-program product of claim 18, wherein the servo system is further configured to determine a value for assigning an electronic ticket to the event.

20. The computer-program product of claim 19, wherein the first channel is associated with a rule that dynamically determines the value for assigning the electronic ticket to the event, and wherein the second channel is associated with a rule that determined the value for assigning the electronic ticket to be a fixed value.