Secure, multi-lingual, flexible access system and method

• US 10,587,662 B2
• Filed: 07/18/2018
• Issued: 03/10/2020
• Est. Priority Date: 09/18/2017
• Status: Active Grant

• Current Assignee: Inclusive Technology Solutions Incorporated
• Original Assignee: Inclusive Technology Solutions, LLC
• Inventors: Sorensen, Andrea J. Hansen, Whitaker, Ben, Waite, John, Thomas, Adam, Kitchen, Nora, James, Dallas
• Primary Examiner(s): Meky, Moustafa M
• Application Number:
  US16/038,380
• Publication Number:
  US 20190089757A1
• Time in Patent Office: 601 Days
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/53 using third party service providers

Abstract

A server operates between a patron (user), a subscriber (e.g., owner of a venue of exhibits and its website; museum, stadium, zoo, theme park, etc.), and possibly third parties such as a content distribution network (CDN). Access and content delivery are based on 1) control information provided to a patron device by physical objects at the venue and sent by the patron device to the server as part of a mutual authentication to one another, 2) user-specific information corresponding to the patron device, and 3) a pre-authorization exchange granting user-device access to physical objects and the server with the server receiving access to the user-specific information in order to locate requested information and select a subset thereof adapted in accordance with the user information. Moving physically between exhibits, a patron device rapidly disengages and re-engages the server, based thereon, without repeated logins.

Claims

1. A method of customization of information delivered to a patron by mutual authorization comprising:

exchanging between a main server and a patron device, pre-authorization for subsequent communication of proprietary information of each therebetween, to be triggered by a physical object in the future;

exchanging between the main server and the patron device a request for requested content, the request containing a first identifier received by the patron device directly from and corresponding to the physical object and to the requested content;

maintaining a linking of the requested content, stored in at least one of a database and a content distribution network (CDN), to the first identifier and to a second identifier, corresponding to the main server;

authenticating, both the patron device to the main server to receive the requested content, and the server to the patron device to access patron data, corresponding to the patron device, based on the first identifier as a content access control code and the second identifier as a destination delivery control code; and

delivering the requested content in response to the request.

2. The method of claim 1, wherein delivering the requested content is based on at least one of corresponding the first and second identifiers to the authenticating, and corresponding the requested information to the patron device.

3. The method of claim 2, wherein:

the subset comprises at least one of images, text, audio, and video presentable by the patron device;

delivering the requested content comprises directing the requested content to the main server.

4. The method of claim 2 wherein delivering the requested content comprises delivering a subset of the requested content by the main server to the patron device based on the proprietary information.

5. The method of claim 1, comprising authorizing, by the main server, the CDN to deliver the requested content directly to the patron device.

6. the method of claim 1, wherein the physical object is selected from a fixture installed at a first location, a region of real estate corresponding to a proximity to a physical location, reading material, a vehicle, a package containing a product, a transmitter, and signage.

7. The method of claim 1, comprising:

providing, by the patron device, location data, corresponding to a location thereof, to the main server; and

authorizing, by the main server, delivery of the requested content, based on comparison of the location data, and content location data available to the main server and corresponding to a subscriber and to the requested content.

8. The method of claim 1, comprising:

providing a system operably connecting the main server, the CDN, the database, a subscriber computer, and the patron device in a network;

providing, by the main server, corresponding exclusively to a subscriber, the requested content; and

hosting by at least one of the database, the main server, and the CDN the requested content.

9. The method of claim 8, comprising:

providing the requested content in a plurality of languages; and

delivering the requested content to the patron device in a language selected automatically from the plurality of languages, based on the pre-authorization;

wherein the authenticating is based on the pre-authorization executed by a patron to which the patron device corresponds exclusively.

10. The method of claim 9, wherein the content identifier is a uniform resource locator (URL) corresponding to a website controlled by the subscriber and identified by the physical object.

11. A system for customization by automatic, mutual authorization between a main server, a content distribution network, and a patron device, the system comprising:

a main server, a content distribution network, and a patron device operably interconnected to communicate therebetween;

the main server programmed to receive from the patron device pre-authorization for subsequent communication of proprietary information of each therebetween, to be triggered by a physical object in the future;

the patron device programmed to receive from the physical object information comprising an identifier corresponding to the physical object and corresponding to requested content controlled by the main server;

the patron device programmed to request of the main server the requested content based on the identifier, and to authenticate the main server based on the identifier and the pre-authorization;

the main server programmed to authenticate the patron device to receive the requested content based on the identifier and the pre-authorization;

the content distribution network programmed to deliver the requested content to the patron device based on the identifier.

12. The system of claim 11, wherein the physical object is selected from a fixture installed at a first location, a region of real estate corresponding to a proximity to a physical location, reading material, a vehicle, a package containing a product, a transmitter, and signage.

13. The system of claim 12, wherein the patron device is programmed to read data from the physical object an image, extract data from the image, and deliver the data extracted to the main server.

14. The system of claim 13, wherein the main server is programmed to authorize delivery of the requested content, based on a comparison of location data, and content location data in a database record corresponding to a subscriber controlling the main server and to the requested content.

15. the system of claim 14, wherein the main server is programmed to provide the requested content in a plurality of languages and deliver the requested content to the patron device in a language selected automatically by the main server based on patron-specific data acquired based on a pre-authorization by the patron device.

16. The system of claim 11, wherein the main server is programmed to query the database based on the identifier, and to communicate to the patron device the requested content, based on the identifier, and only if the requested content is based on patron information corresponding to the patron device and disclosed to the main server pursuant to the pre-authorization.

17. The system of claim 16, wherein the main server is programmed to select a subset of the requested content based on the patron information, and retrieve from the database, and communicate to the patron device, the subset.

18. The system of claim 17, wherein the patron information is selected from a language preference, a need to know controlled by a computer not under control of the patron device, an authorization received from an owner of the subset, a status of the patron device with respect to the owner of the subset, a contract between the owner of the subset and a patron in possession of the patron device, and a security clearance from a government entity.

19. A computer readable, non-transitory memory containing data structures as executables containing computer program instructions and operational data to be processed by the executables, the data structures comprising:

a main server programmed to customize delivery of content between itself and a patron device operably connecting thereto over a network by automatic, mutual authorization therebetween;

the main server programmed to exchange between itself and the patron device, pre-authorization for subsequent communication of proprietary information of each therebetween, triggered by a physical object in the future;

the main server programmed to provide, on behalf of the physical object and in response to a patron device application, an identifier constituting data identifying the main server as proxy for the physical object;

a patron device application containing instructions programmed to install on a patron device to send to the main server a request for requested content, the request containing an identifier received from and corresponding to the physical object and corresponding to the requested information;

the patron device application comprising a first authentication executable deliverable to the patron device from the main server and executable on the patron device to pass the identifier to the server upon request for the requested content;

a second authentication executable on the server and programmed to access the requested content based on the pre-authorization received from the patron application on the patron device and stored by the database and linked to the requested content and the main server by the identifier.

20. The computer readable, non-transitory memory of claim 19, wherein the second authentication executable on the server is programmed to access user profile data based on the identifier as a content access control code and the pre-authorization received from the patron device application and stored by the database.