A method for preventing misuse of an electronic access permission, which is manageable with a mobile electronic device using a mobile device application, the electronic access permission being transmitted to the mobile electronic device by an access permission server controlling an initial purchase of the electronic access permission as well as any subsequent transfer of the electronic access permission, the method comprising:
- defining and transmitting to the access permission server, during the initial purchase of the electronic access permission, a first mobile electronic device ID and either a password or authentication data;
- associating, in the access permission server, the ID of the electronic access permission with the unique ID of the first mobile electronic device;
- transmitting from the access permission server the electronic access permission to the first mobile electronic device;
- following transmission of the electronic access permission to the first mobile electronic device, initiating a transfer of the electronic access permission to another mobile electronic device;
- transmitting an information related to the electronic access permission ID from the first mobile electronic device to the other mobile electronic device, and, with a mobile device application of the other mobile electronic device, transmitting a unique ID of the other mobile electronic device to the access permission server;
- after transmitting the unique ID of the other mobile electronic device to the access permission server, verifying, in the access permission server, that the ID of the electronic access permission is associated with the unique ID of another mobile electronic device;
- after verifying that the ID of the electronic access permission is associated with the unique ID of another mobile electronic device, transmitting the information related to the electronic access permission ID from the access permission server to the other mobile electronic device;
- requesting by the access permission server the password or the authentication data defined during the initial purchase of the electronic access permission;
- determining that the password or the authentication data specified by a buyer is valid;
- after determining that the password or the authentication data specified by the buyer is valid, associating the ID of the electronic access permission with the unique ID of the other mobile electronic device and transmitting the electronic access permission from the access permission server to the other mobile electronic device;
- invalidating the electronic access permission on the first mobile electronic device by means of a message from the access permission server to the mobile device application of the first mobile electronic device and deleting on the access permission server, the association between the electronic access permission and the first mobile electronic device;
- wherein the transmitting the unique ID of the mobile electronic device to the access permission server (2), via the mobile device application of the mobile electronic device, is performed in order to receive the electronic access permission, the method further comprising:
- determining, in the access permission server (2), whether the ID of the electronic access permission is associated with the transmitted unique ID of the mobile electronic device;
- failing to verify, in the access permission server, that the ID of the electronic access permission is associated with the transmitted unique ID of the mobile electronic device, and subsequently associating, in the access permission server (2), the ID of the electronic access permission with the transmitted unique ID of the mobile electronic device and then receiving the electronic access permission by the mobile electronic device;
- after initiation of the transfer by the purchaser (1) on the mobile electronic device with whose unique ID the electronic access permission ID is associated, subsequently transferring the electronic access permission from the mobile electronic device to the other mobile electronic device, including transmitting an information related to the electronic access permission ID from the mobile electronic device to the other mobile electronic device, via the mobile device application of the mobile electronic device, for receiving the electronic access permission by the other mobile electronic device;
- and
- after determining that the password is valid or the authentication data are valid, then receiving the electronic access permission by the other mobile electronic device.