Systems and methods for using unique device identifiers to enhance security

• US 9,477,820 B2
• Filed: 01/25/2016
• Issued: 10/25/2016
• Est. Priority Date: 12/09/2003
• Status: Expired due to Term

• Current Assignee: Live Nation Entertainment Incorporated
• Original Assignee: Live Nation Entertainment Incorporated
• Inventors: Levin, Samuel, Scarborough, David, Du, Fengpei, DiStefano, Richard, Denker, Dennis, Moriarty, Sean, Plamondon, Charles, Siegel, Matthew, Marti, Benjamin
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US15/005,970
• Publication Number:
  US 20160283699A1
• Time in Patent Office: 274 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers

Abstract

A method for detection and use of device identifiers to enhance the security of data transfers between electronic devices. A first electronic device can transmit access data to a second electronic device. The access data can be associated with a first access code that can be generated based at least in part on data representing a device identifier of the first electronic device. A device identifier can uniquely identify the first electronic device from a plurality of electronic devices. Transferring the access data can involve transforming the first access code into a second access code that can include data representing a device identifier associated with the second electronic device. Transforming the first access code into the second access code can facilitate access to a resource associated with the access data for a second user, but not for a first user.

Claims

1. A computer-implemented method for detecting and using unique device identifiers to enhance security of electronic ticket assignments for events, the method comprising:

receiving a first communication from a first electronic device associated with a first user, the first communication corresponding to a first request to retrieve electronic ticket data associated with the first user, the electronic ticket data corresponding to one or more electronic tickets to an event;

receiving a second communication from the first electronic device, the second communication including a second request for an electronic ticket of the one or more electronic tickets to the event;

identifying first metadata associated with the second communication, the first metadata including one or more first data fields;

identifying a first data field of the one or more first data fields included in the first metadata;

identifying a first value included in the first data field, the first value being representative of a first device identifier that uniquely identifies the first electronic device from amongst a plurality of electronic devices, the first device identifier including a first characteristic of the first electronic device;

generating a first ticket code corresponding to the electronic ticket, at least a portion of the first ticket code including a representation of the first device identifier;

receiving a third communication from the first electronic device, the third communication corresponding to a third request to transfer the electronic ticket to a second user;

verifying that the third request to transfer the electronic ticket corresponds to the first electronic device associated with the first user;

receiving a fourth communication from a second electronic device associated with the second user, the fourth communication corresponding to an indication to proceed with the transfer of the electronic ticket;

identifying second metadata associated with the fourth communication, the second metadata including one or more second data fields;

identifying a second data field from the one or more second data fields;

identifying a second value corresponding to the second data field, the second value being representative of a second device identifier that uniquely identifies the second electronic device from amongst the plurality of electronic devices, the second device identifier including a second characteristic of the second electronic device;

transforming the first ticket code corresponding to the electronic ticket into a second ticket code, at least a portion of the second ticket code including a representation of the second device identifier, transformation of the first ticket code facilitating transfer of the electronic ticket to the second electronic device; and

transmitting, to the second electronic device, a fifth communication that includes the second ticket code.

2. The computer-implemented method of claim 1, further comprising:

receiving, at a third electronic device, a fourth request from the second electronic device, the fourth request being a request to facilitate entry to a venue, the fourth request including the second ticket code and the second characteristic of the second electronic device;

determining whether the second characteristic of the second electronic device corresponds to the representation of the second device identifier in the second ticket code; and

facilitating entry to the venue for the second user when the representation of the second device identifier matches the second characteristic of the second electronic device.

3. The computer-implemented method of claim 2, wherein the second ticket code includes at least one code that is not included in the first ticket code so that the second ticket code is determined as corresponding to a transferred electronic ticket.

4. The computer-implemented method of claim 1, wherein the first device identifier includes at least one of a first media access control (MAC) address, a first organizationally unique identifier, a first globally unique identifier, a first universally unique identifier, first identity correlation, or a first World Wide Port Name, and

wherein the second device identifier includes at least one of a second media access control (MAC) address, a second organizationally unique identifier, a second globally unique identifier, a second universally unique identifier, second identity correlation, or a second World Wide Port Name.

5. The computer-implemented method of claim 1, wherein transforming the first ticket code of the electronic ticket into the second ticket code comprises:

replacing at least part of the first ticket code with the representation of the second device identifier.

6. The computer-implemented method of claim 1, wherein verifying that the request to transfer the electronic ticket corresponds to the first electronic device associated with the first user comprises:

authenticating, using the first device identifier, that the third communication is received from the first electronic device.

7. The computer-implemented method of claim 6, wherein authenticating that the request to transfer the electronic ticket corresponds to the first electronic device comprises:

transmitting visual data to the first electronic device, the visual data corresponding to a prompt for biometric data from the first user.

8. A system, comprising:

one or more data processors; and

a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations including;

receiving a first communication from a first electronic device associated with a first user, the first communication corresponding to a first request to retrieve electronic ticket data associated with the first user, the electronic ticket data corresponding to one or more electronic tickets to an event;

receiving a second communication from the first electronic device, the second communication including a second request for an electronic ticket of the one or more electronic tickets to the event;

identifying first metadata associated with the second communication, the first metadata including one or more first data fields;

identifying a first data fields of the one or more first data fields included in the first metadata;

identifying a first value included in the first data field, the first value being representative of a first device identifier that uniquely identifies the first electronic device from amongst a plurality of electronic devices, the first device identifier including a first characteristic of the first electronic device;

generating a first ticket code corresponding to the electronic ticket, at least a portion of the first ticket code including a representation of the first device identifier;

receiving a third communication from the first electronic device, the third communication corresponding to a third request to transfer the electronic ticket to a second user;

verifying that the third request to transfer the corresponds to the first electronic device associated with the first user;

receiving a fourth communication from a second electronic device associated with the second user, the fourth communication corresponding to an indication to proceed with the transfer of the electronic ticket;

identifying second metadata associated with the fourth communication, the second metadata including one or more second data fields;

identifying a second data field from the one or more second data fields;

identifying a second value corresponding to the second data field, the second value being representative of a second device identifier that uniquely identifies the second electronic device from amongst the plurality of electronic devices, the second device identifier including a second characteristic of the second electronic device;

transforming the first ticket code corresponding to the electronic ticket into a second ticket code, at least a portion of the second ticket code including a representation of the second device identifier, transformation of the first ticket code facilitating transfer of the electronic ticket to the second electronic device; and

transmitting, to the second electronic device, a fifth communication that includes the second ticket code.

9. The system of claim 8, wherein the operations further comprise:

receiving, at a third electronic device, a fourth request from the second electronic device, the fourth request being a request to facilitate entry to a venue, the fourth request including the second ticket code and the second characteristic of the second electronic device;

determining whether the second characteristic of the second electronic device corresponds to the representation of the second device identifier in the second ticket code; and

facilitating entry to the venue for the second user when the representation of the second device identifier matches the second characteristic of the second electronic device.

10. The system of claim 9, wherein the second ticket code includes at least one code that is not included in the first ticket code so that the second ticket code is determined as corresponding to a transferred electronic ticket.

11. The system of claim 8, wherein the first device identifier includes at least one of a first media access control (MAC) address, a first organizationally unique identifier, a first globally unique identifier, a first universally unique identifier, first identity correlation, or a first World Wide Port Name, and

wherein the second device identifier includes at least one of a second media access control (MAC) address, a second organizationally unique identifier, a second globally unique identifier, a second universally unique identifier, second identity correlation, or a second World Wide Port Name.

12. The system of claim 8, wherein transforming the first ticket code of the electronic ticket into the second ticket code comprises:

replacing at least part of the first ticket code with the representation of the second device identifier.

13. The system of claim 8, wherein verifying that the request to transfer the electronic ticket corresponds to the first electronic device associated with the first user comprises:

authenticating, using the first device identifier, that the third communication is received from the first electronic device.

14. The system of claim 13, wherein authenticating that the request to transfer the electronic ticket corresponds to the first electronic device comprises:

transmitting visual data to the first electronic device, the visual data corresponding to a prompt for biometric data from the first user.

15. A computer-implemented method for enhancing security of electronic ticket-data transfers between near-field communication (NFC) devices, the method comprising:

receiving, at an access management system, a first communication from a first NFC device associated with a first user, the first NFC device being configured to include a first set of sensors and a first communication interface to facilitate wireless communication, the first communication corresponding to a first request to retrieve electronic ticket data associated with the first user, the electronic ticket data corresponding to one or more electronic tickets to an event;

receiving, at the access management system, a second communication from the first NFC device, the second communication including a second request for an electronic ticket of the one or more electronic tickets to the event;

generating, at the access management system, a first ticket code corresponding to the electronic ticket, at least a portion of the first ticket code including a representation of a first device identifier that uniquely identifies the first NFC device from amongst a plurality of electronic devices;

transmitting, at the access management system, the first ticket code to the first NFC device;

identifying, at the first NFC device, a second NFC device associated with a second user, the second NFC device being configured to include a second set of sensors, a display, and a second communication interface to facilitate wireless communication, the second NFC device being physically located in a proximate vicinity to the first NFC device, and identification of the second NFC device establishing an NFC communication channel between the first NFC device and the second NFC device; and

detecting, at the first NFC device, a trigger event at the first set of sensors of the first NFC device, detection of the trigger event initiating a transformation of the first ticket code into a second ticket code, at least a portion of the second ticket code including a representation of a second device identifier that uniquely identifies the second NFC device from amongst the plurality of electronic devices, transformation of the first ticket code into the second ticket code facilitating transfer of the electronic ticket from the first NFC device to the second NFC device.

16. The computer-implemented method of claim 15, wherein detecting the trigger event at the second NFC device, comprises:

detecting sensor data generated at each of the second set of sensors, at least one sensor of the second set of sensors being a motion sensor;

identifying a motion feature from the sensor data; and

generating a control signal upon the identifying of the motion feature, the control signal initiating transformation of the first ticket code.

17. The computer-implemented method of claim 16, wherein the motion feature corresponds to a bump motion or a tap motion on the first or second NFC device.

18. The computer-implemented method of claim 16, further comprising:

detecting, at the second NFC device, a second trigger event corresponding to the first trigger event detected at the first NFC device, the second trigger event being detected at substantially the same time as the first trigger event; and

invalidating, at the first NFC device, the first ticket code corresponding to the electronic ticket upon detection of the second trigger event.

19. The computer-implemented method of claim 15, wherein the first device identifier includes at least one of a first media access control (MAC) address, a first organizationally unique identifier, a first globally unique identifier, a first universally unique identifier, first identity correlation, or a first World Wide Port Name, and

wherein the second device identifier includes at least one of a second media access control (MAC) address, a second organizationally unique identifier, a second globally unique identifier, a second universally unique identifier, second identity correlation, or a second World Wide Port Name.

20. The computer-implemented method of claim 15, wherein generating the first ticket code comprises:

extracting metadata associated with the second communication, the metadata including one or more data fields;

identifying a data field of the one or more data fields included in the metadata;

identifying a value contained in the data field, the value being representative of the first device identifier; and

generating the first ticket code based on the first device identifier.