Identity based ticketing

• US 9,961,075 B2
• Filed: 03/30/2012
• Issued: 05/01/2018
• Est. Priority Date: 03/30/2012
• Status: Expired due to Fees

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Ekberg, Jan-Erik
• Primary Examiner(s): Mehedi, Morshed
• Assistant Examiner(s): LANE, GREGORY A
• Application Number:
  US14/389,017
• Publication Number:
  US 20150312241A1
• Time in Patent Office: 2,223 Days
• Field of Search: 726 9, 709206
• CPC Class Codes: G06F 16/2322 using timestamps
• CPC Class Codes: G06F 16/245 Query processing
• CPC Class Codes: G06Q 50/40 Business processes related to the transportation industry shipping G06Q10/083
• CPC Class Codes: G07B 15/02 taking into account a variable factor such as distance or time, e.g. for passenger transport, parking systems or car rental systems G07B15/06 takes precedence; taximeters G07B13/00; parking meters per se G07F17/24; car rental systems per se G07B15/00
• CPC Class Codes: H04L 43/106 using time related information in packets, e.g. by adding timestamps
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A system for identity based ticketing is provided, wherein a user device sends a challenge to a terminal; the terminal updates a filter based on the challenge and sends the contents of the filter to the user device. The user device sends the contents of the filter, relating to the user device and the terminal, to a backend server; and the backend server derives from the contents of the filter information concerning user behavior.

Claims

1. An apparatus comprising:

at least one processor; and

at least one non-transitory memory including computer program code,

the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to;

update a filter based on a challenge received at a terminal of a transport system from a user device, wherein the challenge comprises an entry token from the user device, a token time stamp, and a time counter value associated with the entry token;

in response to receiving the token time stamp and the time counter value from the user device, choose at least one of;

the token time stamp and the time counter value as estimated time;

validate the entry token based at least on the estimated time; and

send contents of the filter and a signature of the entry token to the user device, wherein the contents of the filter are bound to the signature of the entry token.

2. The apparatus according to claim 1, wherein the filter is a bloom filter.

3. The apparatus according to claim 1, wherein the at least one memory and the computer program code are further configured to, with the at least one processor, cause the apparatus to:

control a validity of the entry token.

4. The apparatus according to claim 1, wherein the at least one memory and the computer program code are further configured to, with the at least one processor, cause the apparatus to:

not update the filter if an exit token is received at the terminal of the transport system; and

send contents of the filter and a signature of the exit token, wherein the contents of the filter are bound to the signature of the exit token.

14. The apparatus according to claim 1, wherein the terminal is either fixedly installed at a gated or non-gated entrance of the transport system.

15. The apparatus according to claim 1, wherein the challenge is received by the terminal from the user device over a near-field communication interface.

5. An apparatus comprising:

at least one processor; and

at least one non-transitory memory including computer program code,

the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to;

receive a pair of tokens from a backend server of a transport system, wherein the tokens comprise an entry token and an exit token;

periodically update a value of a time value counter associated with the entry token;

send a challenge to a terminal of a transport system comprising the entry token and the value of the time value counter associated with the entry token;

receive contents of a filter and a signature of the entry token from the terminal of the transport system, the entry token being validated based at least on the time counter value, wherein the contents of the filter are bound to the signature of the entry token; and

send at least the received contents and the signature to the backend server of the transport system.

6. The apparatus according to claim 5, wherein the filter is a bloom filter.

7. The apparatus according to claim 5, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to:

receive a token time stamp from a backend server.

8. The apparatus according to claim 5, wherein the value of the time value counter is updated every second after receiving the pair of tokens.

9. The apparatus according to claim 5, wherein the updating of the value of the time value counter increments the time value counter by an increment.

10. The apparatus according to claim 5, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to:

send the filter contents to a backend server of the transport system.

11. An apparatus comprising:

at least one processor; and

at least one non-transitory memory including computer program code,

the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to;

send different pairs of tokens and token time stamps from a backend server of a transportation system to a plurality of user devices, wherein each pair of tokens comprise an entry token and an exit token;

receive contents of a filter for different terminals of the transportation system, entry signatures, and exit signatures from at least some of the plurality of user devices; and

derive information from the contents of the filter for each of the different terminals concerning user behavior between the plurality of user devices and the respective terminals;

wherein the contents of the filter for the different terminals are bound to at least one of an entry signature and an exit signature based on at least one of;

an entry operation of a given one of the user devices and the terminal that uses the entry token; and

an exit operation of the given user device and the terminal that uses the exit token.

12. The apparatus according to claim 11, wherein deriving the information comprises:

deriving the identity of user devices that have not sent any challenge to a terminal.

13. The apparatus according to claim 11, wherein deriving the information from the filter contents comprises:

deriving identity of user devices from which the filter contents have not been received.