System and method for using unique device identifiers to enhance security

• US 9,978,023 B2
• Filed: 08/21/2017
• Issued: 05/22/2018
• Est. Priority Date: 12/09/2002
• Status: Active Grant

• Current Assignee: Live Nation Entertainment Incorporated
• Original Assignee: Live Nation Entertainment Incorporated
• Inventors: Levin, Samuel, Scarborough, David, Du, Fengpei, DiStefano, Richard, Denker, Dennis, Moriarty, Sean, Plamondon, Charles, Siegel, Matthew, Marti, Benjamin
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US15/682,271
• Publication Number:
  US 20180025295A1
• Time in Patent Office: 274 Days
• Field of Search: None
• CPC Class Codes: G06K 5/00 Methods or arrangements for verifying the correctness of markings on a record carrier; Column detection devices
• CPC Class Codes: G06K 7/10722 Photodetector array or CCD scanning
• CPC Class Codes: G06K 7/1417 2D bar codes
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers

Abstract

A method for detection and use of device identifiers to enhance the security of data transfers between electronic devices. A first electronic device can transmit access data to a second electronic device. The access data can be associated with a first access code that can be generated based at least in part on data representing a device identifier of the first electronic device. A device identifier can uniquely identify the first electronic device from a plurality of electronic devices. Transferring the access data can involve transforming the first access code into a second access code that can include data representing a device identifier associated with the second electronic device. Transforming the first access code into the second access code can facilitate access to a resource associated with the access data for a second user, but not for a first user.

Claims

1. A computer-implemented method for detecting and using unique device identifiers to enhance security of electronic ticket retrieval, the method comprising:

receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve electronic ticket data associated with the user, the electronic ticket data corresponding to one or more electronic tickets to an event;

accessing metadata associated with the user, the metadata including one or more data fields;

identifying a data field of the one or more data fields included in the metadata;

extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a hardware device characteristic of the mobile device;

generating an access code corresponding to the one or more electronic tickets, at least a portion of the access code including a representation of the device identifier;

transmitting the access code to the mobile device in a form of a digital digital ticket displayable on the mobile device;

receiving, at a gate entry device associated with a venue of the event, a second request to gain entry to the event using the one or more electronic tickets, the second request being transmitted from the mobile device to the gate entry device using a short-range communication channel, and the second request including the access code associated with the digital ticket;

determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases; and

in response to determining that the access code is valid, granting the mobile device to gain entry to the venue of the event.

2. The computer-implemented method of claim 1, wherein the second request corresponds to a request to facilitate entry to the venue of the event, the second request including the access code and the device identifier of the mobile device.

3. The computer-implemented method of claim 1, wherein receiving the second request includes receiving the access code at the gate entry device from the mobile device over a near-field communication channel.

4. The computer-implemented method of claim 1, wherein the device identifier includes at least one of a media access control (MAC) address, an organizationally unique identifier, a globally unique identifier, a universally unique identifier, identity correlation, or a World Wide Port Name.

5. The computer-implemented method of claim 1, further comprising:

transforming the access code by replacing at least part of the access code with a representation of another device identifier, wherein the transformation is performed when the one or more electronic tickets are transferred to another user associated with the another device identifier.

6. The computer-implemented method of claim 1, further comprising:

authenticating, using the device identifier, that the second request is received from the mobile device.

7. The computer-implemented method of claim 6, wherein authenticating further comprises:

transmitting visual data to the mobile device, the visual data corresponding to a prompt for biometric data from the user.

8. A system, comprising:

one or more data processors; and

a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations including;

receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve electronic ticket data associated with the user, the electronic ticket data corresponding to one or more electronic tickets to an event;

accessing metadata associated with the user, the metadata including one or more data fields;

identifying a data field of the one or more data fields included in the metadata;

extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a hardware device characteristic of the mobile device;

generating an access code corresponding to the one or more electronic tickets, at least a portion of the access code including a representation of the device identifier;

transmitting the access code to the mobile device in a form of a digital digital ticket displayable on the mobile device;

receiving, at a gate entry device associated with a venue of the event, a second request to gain entry to the event using the one or more electronic tickets, the second request being transmitted from the mobile device to the gate entry device using a short-range communication channel, and the second request including the access code associated with the digital ticket;

determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases; and

in response to determining that the access code is valid, granting the mobile device to gain entry to the venue of the event.

9. The system of claim 8, wherein the second request corresponds to a request to facilitate entry to the venue of the event, the second request including the access code and the device identifier of the mobile device.

10. The system of claim 8, wherein receiving the second request includes receiving the access code at the gate entry device from the mobile device over a near-field communication channel.

11. The system of claim 8, wherein the device identifier includes at least one of a media access control (MAC) address, an organizationally unique identifier, a globally unique identifier, a universally unique identifier, identity correlation, or a World Wide Port Name.

12. The system of claim 8, further comprising:

transforming the access code by replacing at least part of the access code with a representation of another device identifier, wherein the transformation is performed when the one or more electronic tickets are transferred to another user associated with the another device identifier.

13. The system of claim 8, further comprising:

authenticating, using the device identifier, that the second request is received from the mobile device.

14. The system of claim 13, wherein authenticating further comprises:

transmitting visual data to the mobile device, the visual data corresponding to a prompt for biometric data from the user.

15. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including:

receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve electronic ticket data associated with the user, the electronic ticket data corresponding to one or more electronic tickets to an event;

accessing metadata associated with the user, the metadata including one or more data fields;

identifying a data field of the one or more data fields included in the metadata;

extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a hardware device characteristic of the mobile device;

generating an access code corresponding to the one or more electronic tickets, at least a portion of the access code including a representation of the device identifier;

transmitting the access code to the mobile device in a form of a digital digital ticket displayable on the mobile device;

receiving, at a gate entry device associated with a venue of the event, a second request to gain entry to the event using the one or more electronic tickets, the second request being transmitted from the mobile device to the gate entry device using a short-range communication channel, and the second request including the access code associated with the digital ticket;

determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases; and

in response to determining that the access code is valid, granting the mobile device to gain entry to the venue of the event.

16. The computer-program product of claim 15, wherein the second request corresponds to a request to facilitate entry to the venue of the event, the second request including the access code and the device identifier of the mobile device.

17. The computer-program product of claim 15, wherein receiving the second request includes receiving the access code at the elate entry device from the mobile device over a near-field communication channel.

18. The computer-program product of claim 15, wherein the device identifier includes at least one of a media access control (MAC) address, an organizationally unique identifier, a globally unique identifier, a universally unique identifier, identity correlation, or a World Wide Port Name.

19. The computer-program product of claim 15, further comprising:

transforming the access code by replacing at least part of the access code with a representation of another device identifier, wherein the transformation is performed when the one or more electronic tickets are transferred to another user associated with the another device identifier.

20. The computer-program product of claim 15, further comprising:

authenticating, using the device identifier, that the second request is received from the mobile device.