SHORT-RANGE DEVICE COMMUNICATIONS FOR SECURED RESOURCE ACCESS

• US 20190073845A1
• Filed: 06/25/2018
• Published: 03/07/2019
• Est. Priority Date: 08/08/2014
• Status: Active Grant

• Current Assignee: Live Nation Entertainment Incorporated
• Original Assignee: Live Nation Entertainment Incorporated
• Inventors: Ives-Halperin, Kenneth, Evans, Harry C., Johnson, David, Wall, Scott, Lilly, David, Pondicherry, Ajay
• Granted Patent: US 10,650,625 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 2209/12 Comprising means for protecting or securing the privacy of biometric data, e.g. cancellable biometrics
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Communications over short-range connections are used to facilitate whether access to resources is to be granted. For example, upon device discovery of one of an electronic user device and an electronic client device by the other device over a Bluetooth Low Energy connection, an access-enabling code associated with a user device or account can be evaluated for validity and applicability with respect to one or more particular resource specifications. User identity can be verified by comparing the user against previously obtained biometric information.

Claims

1. (canceled)

2. An electronic client device comprising:

one or more transceivers for receiving and transmitting wireless signals over a short-range communication channel;

a decryption engine, wherein the decryption engine is configured to transmit a decryption key over the short-range communication channel;

a communication engine that;

detects a first wireless signal having been transmitted over the short-range communication channel by an electronic user device and having been received by the one or more transceivers, wherein the first wireless signal includes an identifier associated with the electronic user device;

transmits a second wireless signal over the short-range communication channel using the one or more transceivers, wherein the second wireless signal includes a decryption key, and wherein the decryption key is transmitted upon satisfaction of a decryption condition; and

receives decrypted data over the short-range communication channel; and

an access-right determination engine that;

identifies a specification of a limited-access resource using the identifier associated with the electronic user device;

determines an access-enabling code using the specification of the limited-access resource;

compares the decrypted data with the access-enabling code; and

enables entry to one or more users based on a result of the comparison.

3. The electronic client device of claim 2, wherein the decryption condition corresponds to a location-based condition, and wherein the location-based condition is satisfied when the electronic user device is physically located within a defined region.

4. The electronic client device of claim 2, wherein the decryption condition corresponds to a decryption limit, and wherein the decryption limit is satisfied when a number of times the electronic user device requests the decryption key is equal to or less than a threshold number.

5. The electronic client device of claim 2, wherein the communication engine further:

detects a third wireless signal having been transmitted over the short-range communication channel by the electronic user device and having been received by the one or more transceivers at the electronic client device, wherein the third wireless signal includes a biometric credential of an authorized user associated with the electronic user device; and

facilitates storage of the biometric credential in an electronic data store.

6. The electronic client device of claim 2, further comprising:

a display for presentation of data;

wherein the access-right determination engine further;

identifies stimulus data for use by the electronic user device, wherein the stimulus data is identified using the identifier associated with the electronic user device, the access-enabling code, or both the identifier associated with the electronic user device and the access-enabling code; and

an interface engine that;

facilitates a presentation of a visual stimulus that corresponds to the stimulus data.

7. The electronic client device of claim 2, wherein when the result of the comparison indicates that the decrypted data corresponds to the access-enabling code, then the user is enabled to gain entry to a resource.

8. The electronic client device of claim 2, wherein when the result of the comparison indicates that the decrypted data does not match the access-enabling code, then the user is denied entry to the resource.

9. An electronic user device comprising:

one or more transceivers for receiving and transmitting wireless signals over a short-range communication channel;

a decryption engine, wherein the decryption engine is configured to receive a decryption key over the short-range communication channel;

a communication engine that;

detects a first wireless signal having been transmitted over the short-range communication channel by an electronic client device and having been received by the one or more transceivers, wherein the first wireless signal corresponds to a request for an identifier associated with the electronic user device;

transmits a second wireless signal over the short-range communication channel using the one or more transceivers, wherein the second wireless signal includes the identifier associated with the electronic user device;

receiving, over the short-range communication channel, a third wireless signal corresponding to decryption key, and wherein the decryption key is transmitted by the electronic client device upon satisfaction of a decryption condition; and

transmits decrypted data over the short-range communication channel.

10. The electronic user device of claim 9, wherein the decryption condition corresponds to a location-based condition, and wherein the location-based condition is satisfied when the electronic user device is physically located within a defined region.

11. The electronic user device of claim 9, wherein the decryption condition corresponds to a decryption limit, and wherein the decryption limit is satisfied when a number of times the electronic user device requests the decryption key is equal to or less than a threshold number.

12. The electronic user device of claim 9, wherein the communication engine further:

transmits a fourth wireless signal over the short-range communication channel by the electronic user device, wherein the fourth wireless signal includes a biometric credential of an authorized user associated with the electronic user device; and

facilitates storage of the biometric credential in an electronic data store.

13. The electronic user device of claim 9, further comprising:

a display for presentation of data, wherein the electronic client device identifies stimulus data for use by the electronic user device, wherein the stimulus data is identified using the identifier associated with the electronic user device, the access-enabling code, or both the identifier associated with the electronic user device and the access-enabling code; and

an interface engine that;

facilitates a presentation of a visual stimulus that corresponds to the stimulus data.

14. The electronic user device of claim 9, further comprising an access-right determination engine that:

identifies a specification of a limited-access resource using the identifier associated with the electronic user device;

determines an access-enabling code using the specification of the limited-access resource;

compares the decrypted data with the access-enabling code; and

enables entry to one or more users based on a result of the comparison.

15. The electronic user device of claim 14, wherein when the result of the comparison indicates that the decrypted data does not match the access-enabling code, then the user is denied entry to the resource.

16. The electronic user device of claim 14, wherein when the result of the comparison indicates that the decrypted data corresponds to the access-enabling code, then the user is enabled to gain entry to a resource.

17. A computer-implemented method comprising:

detecting a first wireless signal having been transmitted over a short-range communication channel by an electronic user device and having been received by one or more transceivers, wherein the first wireless signal includes an identifier associated with the electronic user device;

transmitting a second wireless signal over the short-range communication channel using the one or more transceivers, wherein the second wireless signal includes a decryption key, and wherein the decryption key is transmitted upon satisfaction of a decryption condition;

receiving decrypted data over the short-range communication channel;

identifying a specification of a limited-access resource using the identifier associated with the electronic user device;

determining an access-enabling code using the specification of the limited-access resource;

comparing the decrypted data with the access-enabling code; and

enabling entry to one or more users based on a result of the comparison.

18. The computer-implemented method of claim 17, wherein the decryption condition corresponds to a location-based condition, and wherein the location-based condition is satisfied when the electronic user device is physically located within a defined region.

19. The computer-implemented method of claim 17, wherein the decryption condition corresponds to a decryption limit, and wherein the decryption limit is satisfied when a number of times the electronic user device requests the decryption key is equal to or less than a threshold number.

20. The computer-implemented method of claim 17, further comprising:

detecting a third wireless signal having been transmitted over the short-range communication channel by the electronic user device and having been received by the one or more transceivers at the electronic client device, wherein the third wireless signal includes a biometric credential of an authorized user associated with the electronic user device; and

facilitating storage of the biometric credential in an electronic data store.

21. The computer-implemented method of claim 17, further comprising:

displaying a presentation of data;

identifying stimulus data for use by the electronic user device, wherein the stimulus data is identified using the identifier associated with the electronic user device, the access-enabling code, or both the identifier associated with the electronic user device and the access-enabling code; and

facilitating a presentation of a visual stimulus that corresponds to the stimulus data.